[PATCH] [RHEL/7] Fix 'make validate' error caused by missing two OVAL checks definitions

Jan Lieskovsky jlieskov at redhat.com
Wed Feb 19 14:11:02 UTC 2014


This patch fixes 'make validate' error on current RHEL-7 content.
Running 'make validate' in RHEL/7 currently returns output as
detailed in attached old_output.txt. 

This problem is / was caused by missing OVAL definitions for:
* service_sshd_disabled.xml and
* package_openssh-server_removed.xml

checks. Thus provide RHEL-7 specific check for service_sshd_disabled
(since it uses systemd and can't be shared with RHEL-6), and
move original package_openssh-server_removed.xml definition into
shared, making symlinks on appropriate places for RHEL-6 and RHEL-7
content(s).

After the patch 'make validate' succeeds already as shown in
attached new_output.txt (it still prints warnings about missing
definitions, but these aren't defined in RHEL-7 content yet => that
warning being expected and to be fixed gradually later together with
adding appropriate definitions. But after application of the patch
make validate runs / completes correctly, without the above error).

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: new_output.txt
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140219/074b7079/attachment-0002.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: old_output.txt
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140219/074b7079/attachment-0003.txt>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-RHEL-7-Fix-make-validate-error-caused-by-missing-two.patch
Type: text/x-patch
Size: 6222 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140219/074b7079/attachment-0001.bin>


More information about the scap-security-guide mailing list