New report and guide in openscap 1.1.0
Shawn Wells
shawn at redhat.com
Sun Aug 31 06:17:01 UTC 2014
On 8/29/14, 4:52 AM, Jan Lieskovsky wrote:
> Hello Martin,
>
> thank you for the preview of the new look / functionality.
>
> Couple of points for the report case (not sure they have been mentioned already):
> 1) Text under Characteristics paragraph:
>
> " User root started the evaluation at 2014-08-28T16:44:12.
> Evaluation finished at 2014-08-28T16:50:10. The target machine was called localhost.localdomain.
>
> Benchmark from /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml was used. Profile usgcb-rhel6-server was selected."
>
> Might it look better when organized into a table (example below)?
>
> Evaluation Run:
>
> Performed by: root
> Started: 2014-08-28T16:44:12 \ here maybe also split Y-M-D with space from H-M-S?
> Finished: 2014-08-28T16:50:10 /
> Target (of Evaluation): localhost.localdomain
> Benchmark Location: /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
> Evaluated Profile: usgcb-rhel6-server
+1
>
> 2) Regarding colours - non-consistence in colour shades in "Compliance and Scoring"
> vs "Rule Overview" section. Would it be possible to merge the shades? (IOW use just
> one shade of red, green, gray, orange, etc. across the document)
>
> 3) Missing the "Rule overview" & "Rule details" anchors (they were present in previous
> version). Reasoning "Rule overview" isn't displayed when displaying top of the page.
> Would it be possible to have "Rule overview" anchor in the top panel to be able quickly
> to navigate there?
>
> Ad "Rule details" -- since they aren't displayed by default, having "Rule details"
> anchor would either enable the "Show all result details" button (the page display would
> behave after clicking "Rule details" like the "Show all result details" button was clicked +
> the top of the page would be navigated to the start of the details table)
>
> 4) Rule titles aren't displayed in the colour of the result -- not sure we want this, but
> could you possibly provide preview of a case, where passed rules titles would be coloured
> out in green (same colour as the bounding box has around the rule result), unknown state
> rule titles would be in orange, notchecked rule titles in gray etc.
>
> 5) Regarding the "Result Details" table - generally looks fine, but sometimes the inner
> rule description is larger than the outside red coloured table. Example of the rule:
> "Verify and Correct File Permissions with RPM"
>
> The inner table spans out of the red coloured bounding box. Would it be possible either
> to reduce the inner table or enlarge the outer bounding box?
>
> 6) (I think) from the current layering the particular OVAL check test comment (often clarifying
> the requirement) might not be immediately visible / noticeable:
>
>
> Example (current output):
>
> OVAL details
> nosuid on /dev/shm
> mount point device uuid fs type mount options mount options mount options total space space used space left
> /dev/shm tmpfs tmpfs rw seclabel relatime 128830 57 128773
>
> Here the first row table header ("nosuid on /dev/shm") is that comment. Would it be possible to
> highlight it somehow? E.g.
>
> OVAL details
>
> Requirement: nosuid on /dev/shm
>
> (Evaluated) System status:
> mount point device uuid ...
> ... ...
>
> Or use at least bold font for the "nosuid on /dev/shm" OVAL comment.
>
>
> Otherwise I think in general the output is very nice. Should I notice other
> points will share them yet.
>
> Thank you && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Technologies Team
>
>
> ----- Original Message -----
>> > From: "Martin Preisler" <mpreisle at redhat.com>
>> > To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
>> > Sent: Thursday, August 28, 2014 7:49:23 PM
>> > Subject: New report and guide in openscap 1.1.0
>> >
>> > Hi,
>> >
>> > as you may know I have been working on a complete rewrite of HTML report and
>> > guide for the upcoming openscap 1.1.0 release. It's a feature that will
>> > touch almost every user of openscap. I would like to gather feedback from
>> > the scap-security-guide community so that we can make sure there aren't any
>> > blocker issues in the release. It is natural that there will be small issues
>> > that we will iron out in minor releases. Basically we would just like to
>> > make sure the new report and guide aren't missing anything crucial that
>> > would prevent adoption.
>> >
>> > See https://mpreisle.fedorapeople.org/openscap/1.1.0_xslt/ for sample HTML
>> > report and guide from SSG for RHEL6.
>> >
>> > Looking forward to feedback.
>> >
>> > --
>> > Martin Preisler
>> > --
>> > SCAP Security Guide mailing list
>> > scap-security-guide at lists.fedorahosted.org
>> > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> > https://github.com/OpenSCAP/scap-security-guide/
> -- SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
--
Shawn Wells
Director, Innovation Programs
shawn at redhat.com | 443.534.0130
@shawndwells
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140831/e8def20f/attachment.html>
More information about the scap-security-guide
mailing list