OpenSCAP Error: Conversion of the string "-" to an integer (64 bits) failed: Invalid argument [oval_cmp.c:113]
Jackson, George C III CTR DISA PEO-MA (US)
george.c.jackson1.ctr at mail.mil
Fri May 23 19:26:06 UTC 2014
Hi Andrew,
Thanks for the info. I'll download/compile the openscap source from git and
use that instead.
Thanks again,
George Jackson
-----Original Message-----
From: scap-security-guide-bounces at lists.fedorahosted.org
[mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of
Andrew Gilmore
Sent: Friday, May 23, 2014 2:11 PM
To: SCAP Security Guide
Subject: Re: OpenSCAP Error: Conversion of the string "-" to an integer (64
bits) failed: Invalid argument [oval_cmp.c:113]
George,
This is a bug in the pattern matching code for this check that has recently
been fixed.
I'm not sure on the timeline for getting that fix into the rpms.
On Fri, May 23, 2014 at 12:51 PM, Jackson, George C III CTR DISA PEO-MA (US)
<george.c.jackson1.ctr at mail.mil> wrote:
Hi all, I've seen reference to this on this and other lists but no
acceptable resolution.
Per documentation, I downloaded and installed the following:
openscap-content-1.0.8-1.el6_5.noarch
perl-Pod-Escapes-1.04-136.el6.x86_64
openscap-1.0.8-1.el6_5.x86_64
scap-security-guide-0.1-16.el6.noarch
openscap-utils-1.0.8-1.el6_5.x86_64
python-lxml-2.2.3-1.1.el6.x86_64
Using the command in the User Guide, after running:
oscap xccdf eval --profile stig-rhel6-server-upstream \
--results /tmp/`hostname`-ssg-results.xml \
--report /tmp/`hostname`-ssg-results.html \
--cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml \
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
I get valid output for about 225 CCE checks but then error out with:
OpenSCAP Error: Conversion of the string "-" to an integer (64 bits) failed:
Invalid argument [oval_cmp.c:113]
I can confirm this is coming from the check for disabling coredumps in the
limits.conf file by having replacing
* - core 0
with
* hard core 0
which resulted in:
OpenSCAP Error: Conversion of the string "hard" to an integer (64 bits)
failed: Invalid argument [oval_cmp.c:113]
I went back and downloaded the scap-security-guide 0.5 source and
compiled/installed. The doc says rhel6-xccdf-scap-security-guide.xml and
rhel6-oval-scap-security-guide.xml would be produced from the make but I
didn't find any. I did find the ssg xccdf and cpe files from
scap-security-guide/RHEL6/dist/content so used those and got:
Profile "stig-rhel6-server-upstream" was not found.
Re-running again with server and stig-server profiles instead gave:
OpenSCAP Error: Selector ID(ensure_logrotate_activated) does not exist in
Benchmark. [xccdf_policy.c:1904]
after running a few valid checks.
Am I missing a step somewhere?
Thanks,
George Jackson
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5605 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140523/f87aa270/attachment-0001.bin>
More information about the scap-security-guide
mailing list