Bug 1379185 – [RFE] Allow to configure OpenSCAP CVE definitions URL

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1379185 - [RFE] Allow to configure OpenSCAP CVE definitions URL

Summary:	[RFE] Allow to configure OpenSCAP CVE definitions URL

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat CloudForms Management Engine
Classification:	Red Hat
Component:	SmartState Analysis (Show other bugs)
Sub Component:
Version:	5.6.0
Hardware:	Unspecified Unspecified

Priority	medium Severity medium
Target Milestone:	MVP
Target Release:	5.9.0
Assigned To:	Erez Freiberger
QA Contact:	brahmani
Docs Contact:

URL:
Whiteboard:	container
Keywords:	FutureFeature

Depends On:	1462835
Blocks:	1459189 1480786
	Show dependency tree / graph

Reported:	2016-09-25 18:29 EDT by Brennan Vincello
Modified:	2018-04-09 09:22 EDT (History)
CC List:	17 users (show)

See Also:
Fixed In Version:	5.9.0.4
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2018-03-01 08:07:41 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	Container Management

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2018:0380	normal	SHIPPED_LIVE	Moderate: Red Hat CloudForms security, bug fix, and enhancement update	2018-03-01 13:37:12 EST

Groups: None (edit)

Description Brennan Vincello 2016-09-25 18:29:29 EDT

Description of problem:

The OpenShift image-scanning module does not work offline - it attempts to download its feed from a fixed URL.  It would be nice if we can set an environment variable to point to an alternate URL where the OpenSCAP utilities can download the OpenSCAP feed. 

Additional info:

Submitted on behalf of customer.

Comment 7 Federico Simoncelli 2017-06-19 12:17:54 EDT

This requires the per-provider instance advanced settings.

Comment 8 Federico Simoncelli 2017-07-12 03:51:32 EDT

Erez can you add the relevant PRs here?
Please move to ON_DEV if you have all the PRs up for review.

Comment 9 Erez Freiberger 2017-07-12 03:56:19 EDT

The main PR in the UI, still WIP:
https://github.com/ManageIQ/manageiq-ui-classic/pull/1652

It depends on:
ManageIQ/manageiq#15398
ManageIQ/manageiq-schema#23
ManageIQ/manageiq-providers-kubernetes#45
ManageIQ/manageiq-providers-openshift#32

Comment 10 brahmani 2017-11-12 09:56:34 EST

Verify on cfme 5.9.0.8.
update CVE location with value https://www.redhat.com/security/data/metrics/ds --> SSA work OK.

update CVE location with wrong value  https://www.redhat.com/security/data/metrics --> SSA fail with Unable to run OpenSCAP: OpenSCAP error as expected.

Comment 13 errata-xmlrpc 2018-03-01 08:07:41 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:0380

Note You need to log in before you can comment on or make changes to this bug.