On Ubuntu 20.04, following the tests outlined in the description, below is the result:
$ uname -a Linux sec-focal-amd64 5.4.0-181-generic #201-Ubuntu SMP Thu Mar 28 15:39:01 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux $ dpkg -l | grep libopenscap ii libopenscap8 1.2.16-2ubuntu3.3 amd64 Set of libraries enabling integration of the SCAP line of standards $ oscap oval eval --id "oval:ssg-service_rsyslog_enabled:def:1" ssg-ubuntu2004-oval.xml Definition oval:ssg-service_rsyslog_enabled:def:1: true Evaluation done. $ sudo apt install ceph-mds $ oscap oval eval --id "oval:ssg-service_rsyslog_enabled:def:1" ssg-ubuntu2004-oval.xml W: oscap: Can't receive message: 103, Software caused connection abort. W: oscap: Can't receive message: 103, Software caused connection abort. OpenSCAP Error: Probe with PID=8143 has been killed with signal 11 [../../../../../src/OVAL/probes/SEAP/sch_pipe.c:178] Probe with PID=8143 has core dumped. [../../../../../src/OVAL/probes/SEAP/sch_pipe.c:182] Item corresponding to object 'oval:ssg-object_multi_user_target_for_rsyslog_enabled:obj:1' from test 'oval:ssg-test_multi_user_wants_rsyslog:tst:1' has an unknown flag. This may indicate a bug in OpenSCAP. [../../../../src/OVAL/results/oval_resultTest.c:913] Probe with PID=8154 has been killed with signal 11 [../../../../../src/OVAL/probes/SEAP/sch_pipe.c:178] Probe with PID=8154 has core dumped. [../../../../../src/OVAL/probes/SEAP/sch_pipe.c:182] Item corresponding to object 'oval:ssg-object_multi_user_target_for_rsyslog_socket_enabled:obj:1' from test 'oval:ssg-test_multi_user_wants_rsyslog_socket:tst:1' has an unknown flag. This may indicate a bug in OpenSCAP. [../../../../src/OVAL/results/oval_resultTest.c:913] # INSTALL -proposed VERSION $ sudo apt install libopenscap8=1.2.16-2ubuntu3.4 # SUCCESSFUL PASS $ oscap oval eval --id "oval:ssg-service_rsyslog_enabled:def:1" ssg-ubuntu2004-oval.xml Definition oval:ssg-service_rsyslog_enabled:def:1: true Evaluation done. ** Tags removed: verification-needed-focal ** Tags added: verification-done-focal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2062389 Title: [SRU] Fix segfault in systemdunitdependency probe To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/2062389/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs