-
Thoughts on rendering output to xccdf xml format to use with the Assessor?
Happy to help write this if there's interest.
-
#### Description of problem:
CIS Ubuntu Linux 22.04 LTS Benchmark offers the option to use any of ufw, nftables or iptables, but if you choose to use ufw as your system firewall, all checks give in…
-
This is a tracker bug, we need:
- mime types for XCCDF 1.1, XCCDF 1.2, OVAL, SDS, ARF, XCCDF 1.1 tailoring and XCCDF 1.2 tailoring in the mime database, we need a decision if we want those in openscap…
-
Something is missing in instructions.
```
oscap xccdf resolve -o output/unlinked-rhel6-xccdf.xml output/unlinked-rhel6-xccdf.xml
xsltproc -o output/unlinked-rhel6-ocil.xml transforms/xccdf-create-oci…
-
**Component:** scap-workbench.x86_64 1.2.1-2.fc32 @fedora, compiled with Qt 5.13.2, using OpenSCAP 1.3.2; **Kernel:** 5.6.0-0.rc7.git0.2.fc32.x86_64
Dry-run output:
`oscap-ssh yk@192.168.122.199 …
-
**Challenge:** Some vendors have leveraged the fix and fixtext constructs in XCCDF for remediation. However, these constructs are not well-defined in the XCCDF specification and could be improved to f…
-
**Challenge:** There has been requests to better define how to leverage new checking systems in XCCDF. Currently, the documentation for how to do so is implicit and buried in the XCCDF specification.
…
-
**Challenge:** There have been discussions that XML is too difficult, too verbose, and that XCCDF/OVAL should migrate to other formats such as YAML or JSON. Redesigning XCCDF/OVAL to use a new format …
-
#### Description of problem:
"User Initialization Files Must Be Owned By the Primary User" failing for no reason on Ubuntu 22.04 LTS.
#### SCAP Security Guide Version:
0.1.74
#### Operating …
-
From a SCAP compatibility perspective, the standard output from tools could potentially use the Asset Reporting Format (ARF). A mapper, somewhat similar to the XCCDF-to-HDF mapper, would be useful.
…