Bug 1333812
| Summary: | Update OpenSCAP for "atomic scan" | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Marcel Kolaja <mkolaja> |
| Component: | openscap | Assignee: | Martin Preisler <mpreisle> |
| Status: | CLOSED ERRATA | QA Contact: | Marek Haicman <mhaicman> |
| Severity: | urgent | Docs Contact: | Marie Hornickova <mdolezel> |
| Priority: | urgent | ||
| Version: | 7.2 | CC: | bressers, ebenes, jcerny, ksrot, lfriedma, mdolezel, mhaicman, mkolaja, mpreisle, openscap-maint, pvrabec |
| Target Milestone: | rc | Keywords: | Rebase, ZStream |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | openscap-1.2.9-2.el7_2 | Doc Type: | Rebase: Bug Fixes and Enhancements |
| Doc Text: |
The openscap packages have been upgraded to upstream version 1.2.9, which
provides a number of bug fixes and enhancements over the previous version.
Most notably, this update adds support of scanning containers using the "atomic
scan" command.
In addition, this update includes the following enhancements:
* the oscap-vm tool for offline scanning of virtual machines
* the oscap-chroot tool for offline scanning of filesMost notably, this update
adds support of scanning containers using the "atomic scan" command. In
addition, this update provides the following enhancements:ystems mounted at
arbitrary paths
* full support for the OVAL (Open Vulnerability and Assessment Language)
security language, version OVAL 5.11.1
* native support for remote .xml.bz2 files
* grouping results in the Hypertext Markup Language (HTML) report according to
various criteria
* HTML report improvements
* verbose mode for debugging OVAL evaluation
|
Story Points: | --- |
| Clone Of: | 1278147 | Environment: | |
| Last Closed: | 2016-06-23 16:22:53 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1278147 | ||
| Bug Blocks: | |||
|
Description
Marcel Kolaja
2016-05-06 13:15:41 UTC
I have found issue in oscap-docker utility. Due to [possible] bug in RHEL-shipped python2, the argparse library behaves differently (parser defaults takes precedence to subparser defaults), preventing any use of the utility. As a workaround, it is necessary to remove line 68: parser.set_defaults(func=parser.print_help) This will change the help output slightly, but otherwise works perfectly :) Upstream commit https://github.com/OpenSCAP/openscap/commit/fa334865b1eb24c6eabfe4c80a339c84ffc2d250 fixes the issue. Closing as VERIFIED. There is new known issue, https://bugzilla.redhat.com/show_bug.cgi?id=1344762 which is not a blocker for the release though. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2016:1297 |