Back to bug 1404392

Who When What Removed Added
Martin Preisler 2017-03-02 15:26:34 UTC Status NEW POST
Marek Haicman 2017-03-17 15:36:36 UTC Priority unspecified medium
Watson Yuuma Sato 2017-03-30 14:43:35 UTC Status POST MODIFIED
Fixed In Version scap-security-guide-0.1.32-1.el7
errata-xmlrpc 2017-03-30 14:55:55 UTC Status MODIFIED ON_QA
Matus Marhefka 2017-04-19 14:08:17 UTC CC mmarhefk
Matus Marhefka 2017-06-23 16:17:36 UTC Status ON_QA VERIFIED
QA Contact qe-baseos-security mmarhefk
Marek Haicman 2017-07-24 21:07:10 UTC Doc Text Feature:
To enable SCAP Security Guide to scan containers and container images without producing false positives not relevant to containerized environment

Reason:
To provide way for user to tell whether container complies with selected Security Policy.

Result:
User can now use oscap-docker utility and SCAP Security Guide to assess compliance of container or container image without encountering significant number of false positive results. Tests that make no sense in container context (partitioning, for example) are set `not applicable`. There are no special profiles - existing ones were adapted.
Doc Type If docs needed, set a value Enhancement
Lenka Špačková 2017-07-25 10:11:35 UTC Docs Contact mjahoda
errata-xmlrpc 2017-08-01 12:24:43 UTC Status VERIFIED CLOSED
Resolution --- ERRATA
Last Closed 2017-08-01 08:24:43 UTC
Mirek Jahoda 2017-08-04 13:11:35 UTC Doc Text Feature:
To enable SCAP Security Guide to scan containers and container images without producing false positives not relevant to containerized environment

Reason:
To provide way for user to tell whether container complies with selected Security Policy.

Result:
User can now use oscap-docker utility and SCAP Security Guide to assess compliance of container or container image without encountering significant number of false positive results. Tests that make no sense in container context (partitioning, for example) are set `not applicable`. There are no special profiles - existing ones were adapted.
_scap-security-guide_ and *oscap-docker* now support containers

The user can now use the *oscap-docker* utility and the SCAP Security Guide to assess compliance of container or container image without encountering false positive results. Tests that make no sense in container context, such as partitioning, has been set to the `not applicable` value, and containers can be now scanned with a selected security policy.

Back to bug 1404392