Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

oscap generate fix complains about remote resources even though it doesn't need them #723

Closed
mpreisler opened this issue Apr 20, 2017 · 2 comments
Closed

oscap generate fix complains about remote resources even though it doesn't need them #723

mpreisler opened this issue Apr 20, 2017 · 2 comments
Assignees
@jan-cerny
Milestone
1.2.15

Comments

@mpreisler
Copy link
Member

No need to load OVAL to generate remediations.

Scanning dependencies of target generate-ssg-centos5-role.yml
[ 40%] [centos5-guides] generating urn:xccdf:fix:script:ansible remediation roles for all profiles in ssg-centos5-ds.xml
WARNING: This content points out to the remote resources. Use `--fetch-remote-resources' option to download them.
WARNING: Skipping http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_5.xml file which is referenced from XCCDF content
WARNING: This content points out to the remote resources. Use `--fetch-remote-resources' option to download them.
WARNING: Skipping http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_5.xml file which is referenced from XCCDF content
Generated '/home/mpreisle/d/scap-security-guide/build/roles/ssg-centos5-role-default.yml' for profile ID '' in benchmark 'xccdf_org.ssgproject.content_benchmark_RHEL-5', template=urn:xccdf:fix:script:ansible.Generated '/home/mpreisle/d/scap-security-guide/build/roles/ssg-centos5-role-stig-rhel5-server-upstream.yml' for profile ID 'xccdf_org.ssgproject.content_profile_stig-rhel5-server-upstream' in benchmark 'xccdf_org.ssgproject.content_benchmark_RHEL-5', template=urn:xccdf:fix:script:ansible.[ 40%] Built target generate-ssg-centos5-role.yml
Scanning dependencies of target generate-ssg-centos5-role.sh
[ 40%] [centos5-guides] generating urn:xccdf:fix:script:sh
@mpreisler mpreisler added this to the 1.2.15 milestone Apr 20, 2017
@mpreisler mpreisler mentioned this issue Apr 20, 2017
Merged
@jan-cerny jan-cerny self-assigned this Jun 19, 2017
@jan-cerny
Copy link
Member

I think we can skip OVAL completely in "oscap xccdf generate fix". I will verify.

jan-cerny added a commit to jan-cerny/openscap that referenced this issue Jun 27, 2017
@jan-cerny
Issue OpenSCAP#723: Don't require other resources in "generate fix"
cfbf9dc 
Checks are not necessary to load OVAL because the remediation
scripts are stored in the XCCDF. This will remove the warning
for remote resources that are not needed.
jan-cerny added a commit to jan-cerny/openscap that referenced this issue Jul 3, 2017
@jan-cerny
Issue OpenSCAP#723: Don't require other resources in "generate fix"
4c75a5a 
Checks are not necessary to load OVAL because the remediation
scripts are stored in the XCCDF. This will remove the warning
for remote resources that are not needed. The commit introduces
new type, xccdf_session_flags_t, which speciefies flags
for XCCDF session. These flags drive loading content in XCCDF
session.
jan-cerny added a commit to jan-cerny/openscap that referenced this issue Jul 17, 2017
@jan-cerny
Issue OpenSCAP#723: Don't require other resources in "generate fix"
f5345fd 
Checks are not necessary to load OVAL because the remediation
scripts are stored in the XCCDF. This will remove the warning
for remote resources that are not needed. The commit introduces
new type, xccdf_session_flags_t, which speciefies flags
for XCCDF session. These flags drive loading content in XCCDF
session.
yuumasato added a commit that referenced this issue Jul 18, 2017
@yuumasato
Merge pull request #764 from jan-cerny/issue723
8424385 
Issue #723: Don't require other resources in "generate fix"
@mpreisler
Copy link
Member Author

Fixed #764

2xyo pushed a commit to 2xyo/openscap that referenced this issue Aug 1, 2017
@jan-cerny @2xyo
Issue OpenSCAP#723: Don't require other resources in "generate fix"
cc53ba8 
Checks are not necessary to load OVAL because the remediation
scripts are stored in the XCCDF. This will remove the warning
for remote resources that are not needed. The commit introduces
new type, xccdf_session_flags_t, which speciefies flags
for XCCDF session. These flags drive loading content in XCCDF
session.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jan-cerny jan-cerny

Labels
None yet
Projects
None yet
Milestone
1.2.15
Development

No branches or pull requests
2 participants
@mpreisler @jan-cerny