Scanning a remote CentOS system with oscap-ssh
Martin Preisler
mpreisle at redhat.com
Mon Jul 13 11:49:52 UTC 2015
----- Original Message -----
> From: "Simon Lukasik" <isimluk at fedoraproject.org>
> To: fen at civicactions.com, "Martin Preisler" <mpreisle at redhat.com>
> Cc: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
> Sent: Friday, July 10, 2015 9:45:00 AM
> Subject: Re: Scanning a remote CentOS system with oscap-ssh
>
> [snip]
>
> Martin, do you think it makes sence for oscap-ssh to change a message from
>
> oscap exit code: 2
>
> to
>
> oscap finished successfully and found the system in incompliant state
>
> ?
This could be done fairly easily. Do we want to print this with `oscap` itself
as well? Or just `oscap-ssh`?
The reason why oscap-ssh prints this is quite simple. It has to perform actions
after this command so it prints the exit code so that user is absolutely sure.
oscap-ssh exits with the same exit code as oscap but you need to read the
manual to know that.
--
Martin Preisler
Security Technologies | Red Hat, Inc.
More information about the scap-security-guide
mailing list