Waiver support in HTML report

Martin Preisler mpreisle at redhat.com
Wed Nov 12 16:36:48 UTC 2014


----- Original Message -----
> From: "Shawn Wells" <shawn at redhat.com>
> To: "Martin Preisler" <mpreisle at redhat.com>
> Cc: "open-scap-list" <open-scap-list at redhat.com>, scap-workbench at lists.fedorahosted.org, "SCAP Security Guide"
> <scap-security-guide at lists.fedorahosted.org>
> Sent: Thursday, November 6, 2014 5:33:43 PM
> Subject: Re: Waiver support in HTML report
> 
> The post mentions users won't be able to create waivers in the HTML report
> itself. What's the workflow to introduce a waiver?

I have done initial research on how to implementing adding waivers from
the report.

See the prototype:
https://mpreisle.fedorapeople.org/openscap/interactive_waiver.html

Please note that this is not committed yet. It needs quite some cleanup.
As discussed previously this allows integrations of openscap to preprocess
the HTML report and insert their own callback. That's how they get notified
about added waivers.

A nice accidental feature I discovered today is that you can waive the report
in firefox and when you "Save as" it saves the report with the waivers.
Could be useful in small deployments.

Known issues:
- score not recomputed
- number of rules that fail, pass, ... isn't recomputed

Feedback appreciated!

-- 
Martin Preisler


More information about the scap-security-guide mailing list