<div dir="ltr"><div>Martin,<br><br>See attachment for oval-results file. Thanks!<br><br></div>regards,<br><br>Ivan<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, May 2, 2014 at 5:34 PM, Martin Preisler <span dir="ltr"><<a href="mailto:mpreisle@redhat.com" target="_blank">mpreisle@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">----- Original Message -----<br>
> From: "Ivan Saez Scheihing" <<a href="mailto:saezscheihing@gmail.com">saezscheihing@gmail.com</a>><br>
> To: "SCAP Security Guide" <<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>><br>
</div><div class="">> Sent: Tuesday, April 29, 2014 1:45:08 PM<br>
> Subject: Re: oscap & jboss on Fedora<br>
><br>
> Martin,<br>
><br>
</div><div class="">> Thank you for your answer. See attachment for xccdf result file.<br>
> If you look at the rule<br>
> Result for Disable Hot Deployment in production<br>
><br>
> you will see it passes. But if I check manually I can see that the file<br>
><br>
> JBOSS_HOME/server/[PROFILE]/deploy/hdscanner-jboss-beans.xml<br>
<br>
</div>Without knowing any details about the particular rule I will just say that it could a bug in the content. The content is what tells openscap what it should check. OVAL results will greatly help in debugging the issue.<br>
<div class=""><br>
> hasn't been deleted. So my conclusion is that the rule should have failed.<br>
><br>
> And I'm not sure what you mean with "oval results". if you tell how to<br>
> generate it I will post it.<br>
<br>
</div>Add --oval-results to the command line you use to run oscap. It will create an XML file with OVAL results. These may contain details we need to debug the issue.<br>
<br>
><br>
[snip]<br>
<div class="">> > No idea what xccdfexec.jar is. Is it a wrapper around oscap? The arguments<br>
> > look familiar.<br>
<br>
</div>I still need an answer to this.<br>
<div class="HOEnZb"><div class="h5"><br>
--<br>
Martin Preisler<br>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</div></div></blockquote></div><br></div>