Bug 1292510 - [RFE] Satellite should support OpenSCAP tailoring file
[RFE] Satellite should support OpenSCAP tailoring file
Product: Red Hat Satellite 6
Classification: Red Hat
Component: SCAP Plugin (Show other bugs)
All Linux
medium Severity medium (vote)
: GA
: --
Assigned To: Ondřej Pražák
Sanket Jagtap
: FutureFeature, Triaged
Depends On:
Blocks: 1454565
  Show dependency treegraph
Reported: 2015-12-17 11:05 EST by Rob Marti
Modified: 2018-02-21 07:33 EST (History)
27 users (show)

See Also:
Fixed In Version:
Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2018-02-21 07:33:41 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
wizard for adding tailoring file (20.09 KB, image/png)
2017-10-24 15:25 EDT, Sanket Jagtap
no flags Details

External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 2159621 None None None 2016-02-12 01:28 EST
Red Hat Knowledge Base (Solution) 2377951 None None None 2016-07-11 13:17 EDT
Foreman Issue Tracker 14158 None None None 2016-11-29 05:10 EST
Red Hat Product Errata RHSA-2018:0336 normal SHIPPED_LIVE Important: Satellite 6.3 security, bug fix, and enhancement update 2018-02-21 17:43:42 EST

  None (edit)
Comment 6 Bryan Kearney 2016-07-08 16:23:08 EDT
Per 6.3 planning, moving out non acked bugs to the backlog
Comment 8 Martin Preisler 2016-07-11 11:51:07 EDT
This is a very common issue that I get asked about all the time when talking about OpenSCAP. It should be fairly easy to implement. Is there anything I can do to help get this done for Satellite 6.3?
Comment 9 Rob Marti 2016-10-12 22:48:47 EDT
Are we still on track for 6.3 for this?
Comment 10 Bryan Kearney 2016-11-29 06:15:54 EST
Upstream bug assigned to oprazak@redhat.com
Comment 11 Bryan Kearney 2016-11-29 06:16:01 EST
Upstream bug assigned to oprazak@redhat.com
Comment 13 pm-sat@redhat.com 2017-01-06 08:15:20 EST
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/14158 has been resolved.
Comment 15 Sanket Jagtap 2017-10-24 15:24:13 EDT
Build : Satellite 6.3.0 snap 21

Tailoring File support is added in 6.3.
New option to add a tailoring file is added to scap section 
tailoring File is associated with policy and configured in respective clients


Client output:

foreman_scap_client 1
File /var/lib/openscap/content/96c2a9d5278d5da905221bbb2dc61d0ace7ee3d97f021fccac994d26296d986d.xml is missing. Downloading it from proxy.
Download SCAP content xml from: https://.com:9090/compliance/policies/1/content/96c2a9d5278d5da905221bbb2dc61d0ace7ee3d97f021fccac994d26296d986d
File /var/lib/openscap/tailoring/dec2ea0e92e7abeccabff684631a1bb3f18d040a8f23cb172074776af4b41991.xml is missing. Downloading it from proxy.
Download Tailoring file xml from: https://.com:9090/compliance/policies/1/tailoring/dec2ea0e92e7abeccabff684631a1bb3f18d040a8f23cb172074776af4b41991
DEBUG: running: oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common_customized_tailoring1 --tailoring-file /var/lib/openscap/tailoring/dec2ea0e92e7abeccabff684631a1bb3f18d040a8f23cb172074776af4b41991.xml --results-arf /tmp/d20171024-2789-b266bk/results.xml /var/lib/openscap/content/96c2a9d5278d5da905221bbb2dc61d0ace7ee3d97f021fccac994d26296d986d.xml
WARNING: This content points out to the remote resources. Use `--fetch-remote-resources' option to download them.
WARNING: Skipping https://www.redhat.com/security/data/oval/com.redhat.rhsa-RHEL7.xml.bz2 file which is referenced from XCCDF content
DEBUG: running: /usr/bin/bzip2 /tmp/d20171024-2789-b266bk/results.xml
Uploading results to https://.com:9090/compliance/arf/1
Comment 16 Sanket Jagtap 2017-10-24 15:25 EDT
Created attachment 1342934 [details]
wizard for adding tailoring file
Comment 19 errata-xmlrpc 2018-02-21 07:33:41 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.