openscap HTML report redesign

Shawn Wells shawn at redhat.com
Fri Jul 18 00:31:55 UTC 2014


On 7/18/14, 4:59 AM, Simon Lukasik wrote:
> On 07/17/2014 08:33 PM, Martin Preisler wrote:
>> ----- Original Message -----
>>> From: "Martin Preisler" <mpreisle at redhat.com>
>>> To: "open-scap-list" <open-scap-list at redhat.com>, "SCAP Security 
>>> Guide" <scap-security-guide at lists.fedorahosted.org>,
>>> scap-workbench at lists.fedorahosted.org
>>> Sent: Friday, July 11, 2014 4:09:33 PM
>>> Subject: openscap HTML report redesign
>>>
>>> Hi,
>>> I wrote a blog post about the ongoing HTML report redesign.
>>>
>>> http://martin.preisler.me/2014/07/openscap-html-report-redesign/
>>>
>>> Please give it a look and consider providing feedback.
>>
>> A new blog post with more progress on the HTML report redesign. 
>> Things are shaping up in rule overview, I will focus on result 
>> details next.
>>
>> http://martin.preisler.me/2014/07/openscap-html-report-redesign-part-2/
>>
>> I humbly ask for more feedback :-)
>>
>
> Hello Martin,
>
> The new report is wonderful.
>
> I noticed that the report reads:
>
>      Unauthenticated and unprivileged user root (...)
>
> this wording really feels scary. Sure, I know you are only presenting 
> data from xccdf:TestResult. Sure, I know that these 'unauthenticated', 
> 'unprivileged' have a special meaning in terms of XCCDF standard. 
> Nevertheless this language is scary.
>
> OpenSCAP never authenticates user. OpenSCAP never grants any new 
> privileges to the user. Hence, OpenSCAP will always say: 
> 'unauthenticated' and 'unprivileged'. Would you consider to wipe these 
> adjectives off?
>
> Many thanks!
+1 to this. These terms have special meaning in government circles as well.

The screen shots a really great. Would it be possible to post an HTML 
output somewhere so we could "experience" the page as well?


More information about the scap-security-guide mailing list