SCAP Security Guide - make validate fails after make templates run

Shawn Wells shawn at redhat.com
Thu Sep 4 03:34:01 UTC 2014


On 9/3/14, 4:06 PM, Gabe Alford wrote:
> Hello,
>
>        Just checking on the latest master, this is appearing to fail
> because the 'make templates' generates a file permission OVAL check
> for grub that is not in the XCCDF. The offending xml file is
> file_permissions_boot_grub_grub_conf.xml which if you `rm
> file_permissions_boot_grub_grub_conf.xml`. A bug issue can be filed
> here if so desired:
> https://github.com/OpenSCAP/scap-security-guide/issues
> <https://github.com/OpenSCAP/scap-security-guide/issues%20>
>
> Just reading through the README doc under the templates directory,
> generally, you do not want to blindly run `make copy` as some of the
> checks most likely have been intentionally edited to add additional
> checks. Usually building from source, `make && make validate` (under
> the scap-security-guide or RHEL/6 directories) work best if you are
> just building from the latest source to run a scan. It just depends on
> what you are attempting to do. Are you generating OVAL content, or .....?

pull request awaiting peer review @
https://github.com/OpenSCAP/scap-security-guide/pull/47
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140903/b84237af/attachment.html>


More information about the scap-security-guide mailing list