openscap HTML report redesign
Shawn Wells
shawn at redhat.com
Fri Jul 18 00:31:55 UTC 2014
On 7/18/14, 4:59 AM, Simon Lukasik wrote:
> On 07/17/2014 08:33 PM, Martin Preisler wrote:
>> ----- Original Message -----
>>> From: "Martin Preisler" <mpreisle at redhat.com>
>>> To: "open-scap-list" <open-scap-list at redhat.com>, "SCAP Security
>>> Guide" <scap-security-guide at lists.fedorahosted.org>,
>>> scap-workbench at lists.fedorahosted.org
>>> Sent: Friday, July 11, 2014 4:09:33 PM
>>> Subject: openscap HTML report redesign
>>>
>>> Hi,
>>> I wrote a blog post about the ongoing HTML report redesign.
>>>
>>> http://martin.preisler.me/2014/07/openscap-html-report-redesign/
>>>
>>> Please give it a look and consider providing feedback.
>>
>> A new blog post with more progress on the HTML report redesign.
>> Things are shaping up in rule overview, I will focus on result
>> details next.
>>
>> http://martin.preisler.me/2014/07/openscap-html-report-redesign-part-2/
>>
>> I humbly ask for more feedback :-)
>>
>
> Hello Martin,
>
> The new report is wonderful.
>
> I noticed that the report reads:
>
> Unauthenticated and unprivileged user root (...)
>
> this wording really feels scary. Sure, I know you are only presenting
> data from xccdf:TestResult. Sure, I know that these 'unauthenticated',
> 'unprivileged' have a special meaning in terms of XCCDF standard.
> Nevertheless this language is scary.
>
> OpenSCAP never authenticates user. OpenSCAP never grants any new
> privileges to the user. Hence, OpenSCAP will always say:
> 'unauthenticated' and 'unprivileged'. Would you consider to wipe these
> adjectives off?
>
> Many thanks!
+1 to this. These terms have special meaning in government circles as well.
The screen shots a really great. Would it be possible to post an HTML
output somewhere so we could "experience" the page as well?
More information about the scap-security-guide
mailing list