Bug 1533108 – Generation of result-based remediation roles does not work for tailored profiles.

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 1533108 - Generation of result-based remediation roles does not work for tailored profiles.

Summary:	Generation of result-based remediation roles does not work for tailored profi...

Status:	NEW

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	scap-workbench (Show other bugs)
Sub Component:
Version:	7.5
Hardware:	Unspecified Unspecified

Priority	low Severity low
Target Milestone:	rc
Target Release:	---
Assigned To:	Matěj Týč
QA Contact:	BaseOS QE Security Team
Docs Contact:	Mirek Jahoda

URL:
Whiteboard:
Keywords:

Duplicates:	1578907 (view as bug list)
Depends On:
Blocks:	1640715
	Show dependency tree / graph

Reported:	2018-01-10 08:25 EST by Matěj Týč
Modified:	2018-10-18 11:06 EDT (History)
CC List:	6 users (show)

See Also:
Fixed In Version:
Doc Type:	Known Issue
Doc Text:	SCAP Workbench fails to generate results-based remediations from tailored profiles The following error occurs when trying to generate results-based remediation roles from a customized profile using the the SCAP Workbench tool: Error generating remediation role '.../remediation.sh': Exit code of 'oscap' was 1: [output truncated] To work around this problem, use the "oscap" command with the "--tailoring-file" option.
Story Points:	---
Clone Of:
Clones:	1640715 (view as bug list)
Environment:
Last Closed:
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Github	OpenSCAP/scap-workbench/issues/148	None	None	None	2018-01-10 08:26 EST

Groups: None (edit)

Description Matěj Týč 2018-01-10 08:25:08 EST

Description of problem:
Scap-workbench won't support generation of result-based remediation roles from tailored profiles. This is caused by a deficiency in openscap https://github.com/OpenSCAP/openscap/issues/902 that however may be fixed on the workbench side.

Version-Release number of selected component (if applicable):
1.2.17

How reproducible:
Reliably

Steps to Reproduce:
1. Select any profile from any datastream.
2. Customize the profile, add any new rule to it.
3. Run the check, then choose to generate remediation.

Actual results:

Error will occur, the error message will be similar to:
Error generating remediation role '.../remediation.sh': Exit code of 'oscap' was 1: OpenSCAP Error: Could not find Profile/@id="..." to build policy from TestResult/@id="" [../../../src/XCCDF/xccdf_session.c:1738] 

Expected results:

The remediation script is generated without errors.

Additional info:
This is primarily caused by deficiency in OpenSCAP: https://github.com/OpenSCAP/openscap/issues/902

Comment 3 Marek Haicman 2018-05-16 11:57:12 EDT

*** Bug 1578907 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.