Here is a script that changes IFS and then tries to restore it using "unset $IFS", and, the script shows IFS was not reset. Then it does "unset IFS", which does restore it.
//test_unset_ifs.sh #!/bin/bash echo "before changing IFS" echo $IFS > stdout od stdout echo "" echo "changing IFS" IFS='\n' echo $IFS > stdout od stdout echo "" echo "try to restore IFS with 'unset $IFS'" unset $IFS echo $IFS > stdout od stdout echo "" echo "try to restore IFS with 'unset IFS'" unset IFS echo $IFS > stdout od stdout -----Original Message----- From: open-scap-list-boun...@redhat.com [mailto:open-scap-list-boun...@redhat.com] On Behalf Of open-scap-list-requ...@redhat.com Sent: Wednesday, April 12, 2017 4:51 PM To: open-scap-list@redhat.com Subject: Open-scap-list Digest, Vol 97, Issue 14 Send Open-scap-list mailing list submissions to open-scap-list@redhat.com To subscribe or unsubscribe via the World Wide Web, visit https://www.redhat.com/mailman/listinfo/open-scap-list or, via email, send a message with subject or body 'help' to open-scap-list-requ...@redhat.com You can reach the person managing the list at open-scap-list-ow...@redhat.com When replying, please edit your Subject line so it is more specific than "Re: Contents of Open-scap-list digest..." Today's Topics: 1. Pleas explain this (Greg Silverman (CS)) 2. Re: Pleas explain this (Shawn Wells) 3. Stigviewer (Matthew) 4. Re: Stigviewer (Shawn Wells) 5. Re: Stigviewer (Dan White) ---------------------------------------------------------------------- Message: 1 Date: Wed, 12 Apr 2017 17:15:44 +0000 From: "Greg Silverman (CS)" <greg.silver...@veritas.com> To: "open-scap-list@redhat.com" <open-scap-list@redhat.com> Cc: DL-VTAS-AS-Team-Sangria <dl-vtas-as-team-sang...@veritas.com> Subject: [Open-scap] Pleas explain this Message-ID: <675329def2504742aec893b0bc5e5...@vrtsxchclupin05.community.veritas.com> Content-Type: text/plain; charset="us-ascii" Many of the generated fixes uses this idiom IFS=$'\n' ... unset $IFS IFS is a variable, but, $IFS is a character string, so, unsetting it does not restore IFS to its default value. What am I missing? Thanks, Greg Silverman Mountain View, Ca -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://www.redhat.com/archives/open-scap-list/attachments/20170412/a3ae3561/attachment.html> ------------------------------ Message: 2 Date: Wed, 12 Apr 2017 17:05:38 -0400 From: Shawn Wells <sh...@redhat.com> To: open-scap-list@redhat.com Subject: Re: [Open-scap] Pleas explain this Message-ID: <78219038-667f-32be-af65-ab384b12d...@redhat.com> Content-Type: text/plain; charset="windows-1252" On 4/12/17 1:15 PM, Greg Silverman (CS) wrote: > > Many of the generated fixes uses this idiom > > IFS=$?\n? ? > > unset $IFS > > IFS is a variable, but, $IFS is a character string, so, unsetting it > does not restore IFS to its default value. What am I missing? > Those lines are from the audit remediation templates, e.g.: https://github.com/OpenSCAP/scap-security-guide/blob/master/shared/xccdf/remediation_functions.xml#L97#L99 > IFS=$'\n' matches=($(sed -s -n -e "/${pattern}/!d" -e "/${arch}/!d" -e > "/${group}/!d;F" /etc/audit/rules.d/*.rules)) # Reset IFS back to > default unset $IFS Because the variable is used multiple times (e.g. each audit remediation), it is a good practice to completely remove the variable/data from the system between function calls. For example: $ stringVar="This is my string" $ echo $stringVar This is my string $ unset stringVar $ echo $stringVar -bash: stringVar: unbound variable -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://www.redhat.com/archives/open-scap-list/attachments/20170412/81b7336c/attachment.html> ------------------------------ Message: 3 Date: Wed, 12 Apr 2017 19:08:33 -0400 From: Matthew <simon...@gmail.com> To: open-scap-list@redhat.com Subject: [Open-scap] Stigviewer Message-ID: <CAHc5b7-_qJD0NEL_Ap7fE=nvw9whapugm8qslggc00utwr+...@mail.gmail.com> Content-Type: text/plain; charset="utf-8" Curious, what's the best way to use openscap, and be able to get results for stigviewer? Matthew Conley 912-398-6704 -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://www.redhat.com/archives/open-scap-list/attachments/20170412/02e8c15e/attachment.html> ------------------------------ Message: 4 Date: Wed, 12 Apr 2017 19:42:20 -0400 From: Shawn Wells <sh...@redhat.com> To: open-scap-list@redhat.com Subject: Re: [Open-scap] Stigviewer Message-ID: <8b5630e6-b78b-475c-6250-6b9bb5571...@redhat.com> Content-Type: text/plain; charset=windows-1252 On 4/12/17 7:08 PM, Matthew wrote: > Curious, what's the best way to use openscap, and be able to get > results for stigviewer? IIRC, stigviewer can consume OVAL results. Something like: oscap xccdf eval --profile stig --report human-readable.html --results stigviewer-readable.xml ssg-rhel7-ds.xml ------------------------------ Message: 5 Date: Wed, 12 Apr 2017 19:50:28 -0400 From: Dan White <d_e_wh...@icloud.com> To: open-scap-list@redhat.com Subject: Re: [Open-scap] Stigviewer Message-ID: <430b66a4-295c-4a3a-977d-e36a70e4b...@icloud.com> Content-Type: text/plain; charset=us-ascii Are you referring to the DISA tool or the COTS/freeware tool ? > On Apr 12, 2017, at 7:42 PM, Shawn Wells <sh...@redhat.com> wrote: > > > >> On 4/12/17 7:08 PM, Matthew wrote: >> Curious, what's the best way to use openscap, and be able to get >> results for stigviewer? > > IIRC, stigviewer can consume OVAL results. Something like: > > oscap xccdf eval --profile stig --report human-readable.html --results > stigviewer-readable.xml ssg-rhel7-ds.xml > > _______________________________________________ > Open-scap-list mailing list > Open-scap-list@redhat.com > https://www.redhat.com/mailman/listinfo/open-scap-list ------------------------------ _______________________________________________ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list End of Open-scap-list Digest, Vol 97, Issue 14 ********************************************** _______________________________________________ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list