search

GovReady / govready

Toolkit for getting open source apps ready for secure, approved government use
GNU General Public License v3.0
97 stars 31 forks source link

As developer scanning with a profile, I want to immediately see if a profile is not available. #85

Open gregelin opened 8 years ago

gregelin commented 8 years ago

Scanning should stop if profile non-existent.

The below is bad feedback bc it continues after failure.

[root@ip-172-30-0-247 myfisma]# govready scan
[GovReady] Using profile test.

Placing scan results in scans/test...
[GovReady] Scanning system for compliance to profile test
[GovReady] Running command: oscap xccdf eval --profile test --oval-results --cpe scap/content/ssg-amzn2014.03.2hvm-cpe-dictionary.xml --results scans/test/20151202-1326-results.xml --report scans/test/20151202-1326-results.html /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
Profile "test" was not found.
[GovReady] ...
[GovReady] Generating fix.sh...
[GovReady] Running command: "oscap xccdf generate fix --result-id xccdf_org.open-scap_testresult_test scans/test/20151202-1326-results.xml > scans/test/20151202-1326-fix.sh"
#Warning: OpenSCAP will now use fallback mode (XSLT) to generate fixes. Some of the functionality might be missing (Text substitution, CPE processing, DataStream support, and tailoring). Please ommit --result-id option to trigger advanced processing.
I/O warning : failed to load external entity "scans/test/20151202-1326-results.xml"
OpenSCAP Error:: Could not parse the XML document 'scans/test/20151202-1326-results.xml' [oscapxml.c:429]
[GovReady] ...
[GovReady] Skipping variable export (tbd)...
[GovReady] ...
[GovReady] ...
[GovReady] Printing quickie report...
[GovReady] Running command: "xsltproc .govready/xml/scaninfo.xsl scans/test/results.xml"
warning: failed to load external entity "scans/test/results.xml"
unable to parse scans/test/results.xml
[GovReady] ...
View detailed HTML report: lynx scans/test/results.html
Run auto-generated fix file: govready fix