search

OpenSCAP / scap-workbench

SCAP Scanner And Tailoring Graphical User Interface
https://www.open-scap.org/tools/scap-workbench
GNU General Public License v3.0
226 stars 65 forks source link

Message error while scanning a remote machine #258

Open Ricky-Tigg opened 4 years ago

Ricky-Tigg commented 4 years ago

Component: scap-workbench.x86_64 1.2.1-2.fc32 @fedora, compiled with Qt 5.13.2, using OpenSCAP 1.3.2; Kernel: 5.6.0-0.rc7.git0.2.fc32.x86_64

Dry-run output: oscap-ssh yk@192.168.122.199 22 xccdf eval --datastream-id scap_org.open-scap_datastream_from_xccdf_ssg-fedora-xccdf-1.2.xml --xccdf-id scap_org.open-scap_cref_ssg-fedora-xccdf-1.2.xml --tailoring-file /home/yk/ssg-fedora-ds-muutos.xml --profile xccdf_firefox_profile_ospp_muokattu --oval-results --results /tmp/xccdf-results.xml --results-arf /tmp/arf.xml --report /tmp/report.html /tmp/scap-workbench-RrsTQS/ssg-fedora-ds.xml

Message produced during scanning:

15:30:31 info     SCAP Workbench 1.2.1, compiled with Qt 5.13.2, using OpenSCAP 1.3.2
15:30:35 info     Opened file '/usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml'.
15:47:54 info     Establishing a connection to remote target...
15:48:00 info     Connection established.
15:48:00 info     Checking if oscap is available on remote machine...
15:48:00 info     Querying capabilities on remote machine...
15:48:00 info     Copying input data to remote target...
15:48:01 info     Starting the remote process...
15:48:01 info     Processing on the remote machine...
15:50:22 error    The 'oscap' process has written the following content to stderr: E: oscap: Can't read sysctl value from "/proc/sys/net/core/bpf_jit_harden": 13, Permission denied 
15:50:31 info     Cleaning up...
15:50:32 info     Processing has been finished!
16:02:01 info     Establishing a connection to remote target...
16:02:12 info     Connection established.
16:02:12 info     Checking if oscap is available on remote machine...
16:02:12 info     Querying capabilities on remote machine...
16:02:12 info     Copying input data to remote target...
16:02:13 info     Starting the remote process...
16:02:13 info     Processing on the remote machine...
16:04:25 error    The 'oscap' process has written the following content to stderr: E: oscap: Can't read sysctl value from "/proc/sys/net/core/bpf_jit_harden": 13, Permission denied 
16:04:33 info     Cleaning up...
16:04:33 info     Processing has been finished!
redhatrises commented 4 years ago

@Ricky-Tigg did you run as root on the remote?

Ricky-Tigg commented 4 years ago

On remote host, the user name is visible in the main message; then it is yk; in my system it is member of wheel group , which contains sudo-allowed users.

$ id
uid=1000(yk) gid=1000(yk) ryhmät=1000(yk),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c102
Ricky-Tigg commented 9 months ago

Planning to close my reports that remain open on this platform indefinitely in undone/unfixed states soon. Rare is the developer that comprehends that getting rid off a simplest task as soon as it arrives and keeping a challenging task for the long term are the only healthy practises. Pity for the project owner.