Bug 1677508

Summary: OSCAP rule xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_mode_blank fails with status "error"
Product: Red Hat Enterprise Linux 7 Reporter: Jaskaran Singh Narula <janarula>
Component: scap-security-guideAssignee: Watson Yuuma Sato <wsato>
Status: CLOSED ERRATA QA Contact: Jan Černý <jcerny>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.6CC: jcerny, mhaicman, openscap-maint
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: scap-security-guide-0.1.43-1.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-06 13:04:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jaskaran Singh Narula 2019-02-15 06:31:12 UTC
Description of problem:
OSCAP rule xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_mode_blank
fails with Result: error
even after the remediation has been applied.

Version-Release number of selected component (if applicable):
RHEL 7.6
openscap-1.2.17-2.el7.x86_64                                
openscap-containers-1.2.17-2.el7.noarch                     
openscap-scanner-1.2.17-2.el7.x86_64                  
rubygem-foreman_scap_client-0.3.0-2.el7sat.noarch 
scap-security-guide-0.1.40-12.el7.noarch                    
scap-workbench-1.1.6-1.el7.x86_64           
openscap-utils-1.2.17-2.el7.x86_64

How reproducible:
always

Steps to Reproduce:
1. yum install openscap-scanner scap-security-guide
2. oscap xccdf eval --remediate --fetch-remote-resources --datastream-id scap_org.open-scap_datastream_from_xccdf_ssg-rhel7-xccdf-1.2.xml --xccdf-id scap_org.open-scap_cref_ssg-rhel7-xccdf-1.2.xml --profile xccdf_org.ssgproject.content_profile_pci-dss --oval-results --results /var/tmp/xccdf-results-$HOSTNAME.xml --results-arf /var/tmp/arf-$HOSTNAME.xml --report /var/tmp/hardening-report-$HOSTNAME.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml


Actual results:
...
Title   Implement Blank Screensaver
Rule    xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_mode_blank
Ident   CCE-80113-4
Result  error
...

Expected results:
Result  fixed

Comment 2 Watson Yuuma Sato 2019-02-15 10:19:34 UTC
Thanks for reporting the issue,

This is already fixed in upstream, in version 0.1.42, specifically in commit https://github.com/ComplianceAsCode/content/commit/383eb7fde4eecfde7dd270a73fe82b6bdee74474

Comment 5 Jan Černý 2019-03-07 08:24:28 UTC
Granting devel ack because it's fixed by rebase to 0.1.43.

Comment 10 errata-xmlrpc 2019-08-06 13:04:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2198