Red Hat Bugzilla – Bug 1029879
remediation text is shown in case of result XCCDF_RESULT_PASS
Last modified: 2014-01-23 06:17:48 EST
Description of problem: When the SCE check script return XCCDF_RESULT_PASS and remediation is not script but remediation text then the text is shown html and xml output. But it should not be. Version-Release number of selected component (if applicable): openscap-0.9.11 How reproducible: Steps to Reproduce: 1. copy files all-xccdf.xml and selinux.sh into some location 2. oscap xccdf eval --results all-xccdf-tmp.xml --profile xccdf_preupg_profile_default --report all-xccdf-tmp.html all-xccdf.xml 3. Actual results: solution text is shown in case of XCCDF_RESULT_PASS Expected results: solution text should be either hidden or not available Additional info: It is under discussion whether this behaviour is correct. I think that solution text should not be shown.
Fixed upstream. 19a37e8afbc27cc6a80c1e706ff254b408b8627f Will became a part of next update.
openscap-1.0.2-1.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/openscap-1.0.2-1.fc20
Package openscap-1.0.2-1.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing openscap-1.0.2-1.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-0618/openscap-1.0.2-1.fc20 then log in and leave karma (feedback).
I tested the problem and it seems that Remediation Instructions are still shown in case of XCCDF_RESULT_PASS. Is this expected state? Shall I reopen bug?
I cannot reproduce your problem. We need more information. I have used openscap-1.0.2 and run following two commands command: $ cat > selinux.sh <<__END__ #!/bin/bash exit \$XCCDF_RESULT_PASS __END__ $ oscap xccdf eval --results /tmp/blah.xml --report /tmp/blah.html \ all-xccdf.xml And the report does not the remediation instruction. What should I have done differently to exhibit the bug?
Thank you for confirmation!
openscap-1.0.3-1.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/openscap-1.0.3-1.fc20
openscap-1.0.3-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.