SCAP Security Guide - make validate fails after make templates run

Jan Lieskovsky jlieskov at redhat.com
Thu Sep 4 12:06:52 UTC 2014


----- Original Message -----
> From: "Shawn Wells" <shawn at redhat.com>
> To: scap-security-guide at lists.fedorahosted.org
> Sent: Thursday, September 4, 2014 5:34:01 AM
> Subject: Re: SCAP Security Guide - make validate fails after make templates run
> 
> On 9/3/14, 4:06 PM, Gabe Alford wrote:
> 
> 
> 
> Hello,
> 
> Just checking on the latest master, this is appearing to fail because the
> 'make templates' generates a file permission OVAL check for grub that is not
> in the XCCDF. The offending xml file is
> file_permissions_boot_grub_grub_conf.xml which if you `rm
> file_permissions_boot_grub_grub_conf.xml`. A bug issue can be filed here if
> so desired: https://github.com/OpenSCAP/scap-security-guide/issues
> 
> Just reading through the README doc under the templates directory, generally,
> you do not want to blindly run `make copy` as some of the checks most likely
> have been intentionally edited to add additional checks. Usually building
> from source, `make && make validate` (under the scap-security-guide or
> RHEL/6 directories) work best if you are just building from the latest
> source to run a scan. It just depends on what you are attempting to do. Are
> you generating OVAL content, or .....?
> 
> pull request awaiting peer review @
> https://github.com/OpenSCAP/scap-security-guide/pull/47

Commented & ACKed & merged.

Thanks for the fix.

Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team

> 
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/


More information about the scap-security-guide mailing list