Hi I am using oscap on centos 7.1 to run a PCI profile check. The system is 64 bit (see arch and uname -a). However, when I run the remediation I get some 32 bit runs (see /etc/audit/rules.d/audit_time_rules.rules). Can anybody explain why this would be? Or is it a bug?
COMMAND oscap xccdf eval --remediate --tailoring-file tailoring.xml --report report.html --profile xccdf_org.ssgproject.content_profile_pci-dss_with_ot /usr/share/xml/scap/ssg/content/ssg-centos7-ds.xml CONFIRM 64BIT [root@test ~]# arch x86_64 [root@test ~]# uname -a Linux test.checkoutstagingapp.com 3.10.0-229.el7.x86_64 #1 SMP Fri Mar 6 11:36:42 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux 32 BIT REMEDIATION RULE [root@test ~]# cat /etc/audit/rules.d/audit_time_rules.rules -a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k audit_time_rules -w /etc/localtime -p wa -k audit_time_rules Thanks, Josh Moore Chief Architect TarokoSoftware
_______________________________________________ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list
