Aug29 Benchmarks

Moessbauer, David david.moessbauer at progeny.net
Tue Sep 3 14:58:18 UTC 2013


Yes 'not checked' - fingers did not type those letter the brain transmitted.


V/r

David W. Moessbauer
System Engineer
Progeny Systems Corporation
david.moessbauer at progeny.net
SIPR: david.moessbauer.ctr at progeny.spawar-chas.navy.smil.mil
(410) 627-5633 (M)
(703) 368-6107 x315 (O) / x125 (lab)

Sent from my Verizon Wireless 4G LTE Smartphone


-------- Original message --------
From: "Ronayne, James K." <jkronay at nsa.gov>
Date: 09/03/2013 10:44 (GMT-05:00)
To: scap-security-guide at lists.fedorahosted.org
Subject: (nwl) RE: Aug29 Benchmarks


Do you mean Notchecked?  "Not completed" is not a valid XCCDF results value.
"Not selected" means the rules were not turned on for the profile you ran.
When I ran the content I also got three "Unknown" results.  I haven't gone back to figure out why.
"Not checked" means the rule was selected but the tool was unable to run the checks.  This will happen if the content uses a check system the tool does not support.  Was this content that still included the "OCIL-transitional" check system?  If so, those rules could not be checked.  If you run the OCIL content in SCC you will have the opportunity to complete those checks.  I had 21 not checked rule results when I ran the OCIL-transitional content.


-----Original Message-----
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Moessbauer, David
Sent: Tuesday, September 03, 2013 9:45 AM
To: scap-security-guide at lists.fedorahosted.org
Subject: RE: Aug29 Benchmarks

Thanks, that has allowed the scan to complete.

Regarding results, can someone please advise what the delta is btwn 'Not Completed' and 'Not Selected'?  I show 21 NC and 166 NS...


v/r

David Moessbauer
(410) 627-5633 (M)

The Information contained in or attached to this communication may be confidential and privileged proprietary intended only for the individual/s or entity to whom/which it is addressed. Any unauthorized use, distribution, copying or disclosure of this information is strictly prohibited. If you have received this communication in error please contact the sender immediately and delete from your system.


-----Original Message-----
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Ronayne, James K.
Sent: Tuesday, September 03, 2013 7:18 AM
To: 'scap-security-guide at lists.fedorahosted.org'
Subject: (nwl) RE: Aug29 Benchmarks

I had the same problem.  I ran it and it got stuck at roughly the same point.  After about 20 hours I killed it.  I deselected the "rpm_verify_permissions" rule in the XCCDF and ran it again without any problems.  I reported it to SPAWAR but they could not recreate the problem.

Jim



-----Original Message-----
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Moessbauer, David
Sent: Friday, August 30, 2013 1:55 PM
To: scap-security-guide at lists.fedorahosted.org
Subject: Aug29 Benchmarks

Shawn,

Downloaded the latest benchmarks zip from your buildroot site and have loaded/run them in SCAP 3.1 (as well as 3.1.1.RC6) and they do not seem to complete.

They get to a point where the following is displayed, but they don't actually seem to complete:

  >> LOCALHOST.LOCALDOMAIN: Getting detail for package: 1655 of 1655
  >> LOCALHOST.LOCALDOMAIN: Finish getting package details
  >> LOCALHOST.LOCALDOMAIN:    for object:  oval:ssg:obj:1991

Is this a known issue?

Thoughts?

v/r

David Moessbauer
(410) 627-5633 (M)

The Information contained in or attached to this communication may be confidential and privileged proprietary intended only for the individual/s or entity to whom/which it is addressed. Any unauthorized use, distribution, copying or disclosure of this information is strictly prohibited. If you have received this communication in error please contact the sender immediately and delete from your system.


-----Original Message-----
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Shawn Wells
Sent: Friday, August 30, 2013 1:20 PM
To: scap-security-guide at lists.fedorahosted.org
Subject: Re: [PATCH 0/4] OVAL template testing

On 8/30/13 1:09 PM, Jeffrey Blank wrote:
> These all look good to me -- please push.

Pushed


--
Shawn Wells
Director, Innovation Programs
shawn at redhat.com | 443.534.0130
@shawndwells

_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list