Bug 1202868

Summary:	Rebase OpenSCAP for OVAL 5.11 support
Product:	Red Hat Enterprise Linux 7	Reporter:	Šimon Lukašík <slukasik>
Component:	openscap	Assignee:	Šimon Lukašík <slukasik>
Status:	CLOSED ERRATA	QA Contact:	Marek Haicman <mhaicman>
Severity:	unspecified	Docs Contact:	Petr Bokoc <pbokoc>
Priority:	unspecified
Version:	7.1	CC:	jrusnack, ksrot, mhaicman, openscap-maint
Target Milestone:	rc	Keywords:	Rebase
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openscap-1.2.5-1.el7	Doc Type:	Rebase: Bug Fixes and Enhancements
Doc Text:	openscap rebase to version 1.2.5 The _openscap_ packages have been upgraded to upstream version 1.2.5, which provides a number of bug fixes and enhancements over the previous version. Notable enhancements include: * Support for OVAL version 5.11, which brings multiple improvements such as for systemd properties * Introduced native support of `xml.bz2` input files * Introduced the "oscap-ssh" tool for assessing remote systems * Introduced the "oscap-docker" tool for assessing containers/images	Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-11-19 12:08:58 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1202854, 1248378, 1248380

Description Šimon Lukašík 2015-03-17 15:16:43 UTC

We need OVAL-5.11 enabled tool (OpenSCAP) in RHEL-7 to enable efficient assessment of init system properties. systemd changed configuration versus prior arts (SysVinit), thus RHEL auditing capabilities effectively regressed between RHEL6 and RHEL7.

OpenSCAP with OVAL-5.11 in RHEL7 is driven by following business reasons:

 * OVAL 5.11 is the latest version of OVAL standard. OVAL-5.11 will probably be required for the SCAP 1.2 certification.
 * OVAL 5.11 contains systemd* objects. That enables us to implement security/compliance policies for Gov. customers (USGCB, STIG, ...).

Comment 3 Šimon Lukašík 2015-07-06 12:39:53 UTC

The OpenSCAP 1.2.5 contains only fine polish on top of 1.2.4. The changelog reads:
 - maintenance
   - smaller bugfixes
   - plugged memory leaks
   - fixed fresh static analysis (coverity) findings
   - fixed shellcheck warnings
   - fixes for Solaris platform

Comment 4 Šimon Lukašík 2015-07-31 07:57:32 UTC

*** Bug 1248375 has been marked as a duplicate of this bug. ***

Comment 5 Marek Haicman 2015-09-01 10:14:00 UTC

Verified, regression tests passed as well.

Comment 6 errata-xmlrpc 2015-11-19 12:08:58 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2015-2356.html