Project

General

Profile

Actions

action #154696

closed

[security] Most oscap tests fail on 15-SP6 in eval or remediate

Added by tjyrinki_suse 3 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Category:
Bugs in existing tests
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
32.00 h
Difficulty:
Tags:

Description

Most oscap tests are failing on 15-SP6. See https://openqa.suse.de/tests/overview?arch=&flavor=&machine=&test=&modules=oscap_xccdf_eval&module_re=&group_glob=¬_group_glob=&comment=&distri=sle&version=15-SP6&build=50.2&groupid=268# or latest build.

As an example https://openqa.suse.de/tests/13393791/modules/oscap_xccdf_eval#2/steps/25
"fail" count in file stdout is 7, expected 3. Failed rules:
xccdf_org.ssgproject.content_rule_aide_build_database, CCE-85787-0
xccdf_org.ssgproject.content_rule_aide_periodic_cron_checking, CCE-85671-6
xccdf_org.ssgproject.content_rule_aide_scan_notification, CCE-91214-7
xccdf_org.ssgproject.content_rule_accounts_passwords_pam_tally2, CCE-85554-4
xccdf_org.ssgproject.content_rule_audit_rules_privileged_commands_kmod, CCE-85591-6
xccdf_org.ssgproject.content_rule_audit_rules_time_stime, CCE-85815-9
xccdf_org.ssgproject.content_rule_grub2_l1tf_argument,

Actions #1

Updated by tjyrinki_suse 3 months ago

  • Description updated (diff)
Actions #2

Updated by tjyrinki_suse 3 months ago

  • Subject changed from [security] oscap tests fail on 15-SP6_xccdf_eval#2 to [security] Most oscap tests fail on 15-SP6 in eval or remediate
  • Description updated (diff)
Actions #3

Updated by viktors.trubovics about 2 months ago

  • Status changed from Workable to Resolved
Actions

Also available in: Atom PDF