OpenSCAP / openscap-report

Tool for generating a report from results of oscap scan.
Other
17 stars 9 forks source link

Test details in some rules aren't helpful #216

Closed jan-cerny closed 5 months ago

jan-cerny commented 8 months ago

Describe the bug

For some complex OVAL tests, the test details displayed in HTML report aren't useful for finding the cause of the rule result. The specific example is rule audit_rules_privileged_commands. There are some details displayed but they aren't structured and other information is missing.

To Reproduce Steps to reproduce the behavior:

  1. Download the attached tarball and extract arf.xml from it
  2. oscap-report arf.xml > report.html
  3. Open the results of the rule xccdf_org.ssgproject.content_rule_audit_rules_privileged_commands
  4. Display test details of test test_augenrules_count_matches_system_priv_cmds

ARF file arpc_arf.tar.gz

Expected behavior The expected behavior is tricky to describe. I would like to have as much information in as much structured way as possible.

In the specific example of test ID test_augenrules_count_matches_system_priv_cmds, it's a variable test so I would expect that the value of the variable used in the variable object will be displayed there.

Screenshots image

It's cropped, the panel is way bigger.

Environment (please complete the following information):

Additional context Add any other context about the problem here.