Hide Forgot
For system security checks, it is useful to have a bit more precisious information than just binary pass/fail. For example when seeking for SUID binaries you probably don't want just to know there are some -- a list of them would be useful as well. Since it is not clear how to accomplish the task wrt current SCAP specifications, we do not include this kind of data in the XCCDF result file itself and rather make them available in report HTML or Docbook file. It would be implemented using a XSLT transform.
This has been done as described above. The patches are in OpenSCAP git.