Bug 1392795

Summary: OpenSCAP CPE dictionary does not recognize compute node RHEL6
Product: Red Hat Enterprise Linux 6 Reporter: Martin Preisler <mpreisle>
Component: openscapAssignee: Watson Yuuma Sato <wsato>
Status: CLOSED NOTABUG QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.9CC: mhaicman, openscap-maint
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-08 14:38:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Martin Preisler 2016-11-08 09:29:09 UTC 
Description of problem:
OpenSCAP does not recognize the ComputeNode variant of RHEL in its CPE dictionary.

Version-Release number of selected component (if applicable):
1.2.8

How reproducible:
always

Steps to Reproduce:
1. start a compute node machine
2. oscap oval eval /usr/share/openscap/cpe/openscap-cpe-oval.xml

Actual results:
all of the definitions are false on compute node

Expected results:
there is a definition for compute node RHEL variant that evaluates to true

Additional info:
Comment 1 Martin Preisler 2016-11-08 09:29:48 UTC 
Related to rhbz#1311054
Comment 2 Watson Yuuma Sato 2016-11-08 09:35:06 UTC 
Fix proposed upstream in https://github.com/OpenSCAP/openscap/pull/575
Comment 3 Marek Haicman 2016-11-08 10:18:34 UTC 
Hello,
I have made a check, and actually I do not see a difference between Server and ComputeNode [CN has same passing rules]:

ComputeNode:
.qa.[root@x86-64-6cn-v1 ~]# rpm -qa openscap redhat-release-*
openscap-1.2.8-2.el6.x86_64
openscap-1.2.8-2.el6.i686
redhat-release-computenode-6ComputeNode-6.8.0.5.el6.x86_64
.qa.[root@x86-64-6cn-v1 ~]# oscap oval eval /usr/share/openscap/cpe/openscap-cpe-oval.xml | grep true
Definition oval:org.open-scap.cpe.rhel:def:6: true
Definition oval:org.open-scap.cpe.rhel:def:1: true

Server:
.qa.[root@x86-64-6s-m1 ~]# rpm -qa openscap redhat-release-*
openscap-1.2.8-2.el6.x86_64
openscap-1.2.8-2.el6.i686
redhat-release-server-6Server-6.8.0.5.el6.x86_64
.qa.[root@x86-64-6s-m1 ~]# oscap oval eval /usr/share/openscap/cpe/openscap-cpe-oval.xml | grep true
Definition oval:org.open-scap.cpe.rhel:def:6: true
Definition oval:org.open-scap.cpe.rhel:def:1: true
Comment 6 Watson Yuuma Sato 2016-11-08 14:38:19 UTC 
Yes, thank you Marek.
OpenSCAP correctly detects RHEL6 on ComputeNode.