Bug 1722003

Summary: OpenSCAP probes produce obtrusive data
Product: Red Hat Enterprise Linux 8 Reporter: Jan Černý <jcerny>
Component: openscapAssignee: Jan Černý <jcerny>
Status: CLOSED WONTFIX QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: low Docs Contact:
Priority: low    
Version: 8.0CC: matyc, mhaicman, mmarhefk, openscap-maint, pandrade
Target Milestone: rcKeywords: Triaged
Target Release: 8.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-02-01 07:41:36 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
OVAL definitions none

Description Jan Černý 2019-06-19 11:05:43 UTC
Created attachment 1582171 [details]
OVAL definitions

Description of problem:
When evaluating attached OVAL definitions that uses OVAL sets OpenSCAP prints warnings about obtrusive data.

Version-Release number of selected component (if applicable):
openscap-1.3.0-7.el8.x86_64

How reproducible:
always

Steps to Reproduce:
1. oscap oval eval oval.xml


Actual results:
W: oscap:     Obtrusive data from probe!
W: oscap:     Obtrusive data from probe!
Definition oval:test-sssd:def:1: false
Evaluation done.


Expected results:
No warnings.

Additional info:
Check if OVAL results are expected.

Comment 2 Jan Černý 2020-09-25 13:44:14 UTC
This link shows that we should investigate it further: https://github.com/OpenSCAP/openscap/pull/1502

Comment 4 Jan Černý 2020-12-14 14:58:25 UTC
We need to fix this. The previous attemp to fix wasn't successful. Now, it started to be a potential problem for SCAP certification as this warning is produced with validation test content. See https://github.com/OpenSCAP/openscap/issues/1632. Definitely it will be embarrassing.

Comment 6 Jan Černý 2021-01-28 09:41:04 UTC
https://github.com/OpenSCAP/openscap/pull/1678

Comment 7 Jan Černý 2021-01-29 08:30:11 UTC
and also additional PR https://github.com/OpenSCAP/openscap/pull/1679

Comment 9 RHEL Program Management 2021-02-01 07:41:36 UTC
After evaluating this issue, there are no plans to address it further or fix it in an upcoming release.  Therefore, it is being closed.  If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened.