New report and guide in openscap 1.1.0

Chen, Wei (Contractor)(CFPB) Wei.Chen at cfpb.gov
Fri Aug 29 13:04:23 UTC 2014


Couple comments on the report layout.

•       Rules result breakdown - while the color bar breakdown is nice, it doesn't present precise information at first glance.  The user will see 86 passed, 131 failed, and left guessing what that remaining 6 rules are.  It'll be nice to see the total number of rules as well.
•       Failed rules by severity breakdown – similar to rules results, the severity description got cut off even though it’s easy to assume that the two failed rules refer to High severity.
•       Score – it’ll be nice to have a brief explanation or reference to how the scoring is done for those not familiar with the scoring system.
•       Section heading – I think the number of “not checked” should also be included in the section heading along with fail and unknown.  For example, I could’ve easily missed “Ensure Software Patches Installed” since it was collapsed within Updating Software section.

Regards,
Wei

----- Original Message -----
> From: "Martin Preisler" <mpreisle at redhat.com<mailto:mpreisle at redhat.com>>
> To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org<mailto:scap-security-guide at lists.fedorahosted.org>>
> Sent: Thursday, August 28, 2014 7:49:23 PM
> Subject: New report and guide in openscap 1.1.0
>
> Hi,
>
> as you may know I have been working on a complete rewrite of HTML
> report and guide for the upcoming openscap 1.1.0 release. It's a
> feature that will touch almost every user of openscap. I would like to
> gather feedback from the scap-security-guide community so that we can
> make sure there aren't any blocker issues in the release. It is
> natural that there will be small issues that we will iron out in minor
> releases. Basically we would just like to make sure the new report and
> guide aren't missing anything crucial that would prevent adoption.
>
> See https://mpreisle.fedorapeople.org/openscap/1.1.0_xslt/ for sample
> HTML report and guide from SSG for RHEL6.
>
> Looking forward to feedback.
>
> --
> Martin Preisler
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org<mailto:scap-security-guide at lists.fedorahosted.org>
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140829/f6d51af3/attachment.html>


More information about the scap-security-guide mailing list