----- Original Message ----- > From: "Shawn Wells" <[email protected]> > To: "Martin Preisler" <[email protected]> > Cc: "open-scap-list" <[email protected]>, > [email protected], "SCAP Security Guide" > <[email protected]> > Sent: Thursday, November 6, 2014 5:33:43 PM > Subject: Re: Waiver support in HTML report > > The post mentions users won't be able to create waivers in the HTML report > itself. What's the workflow to introduce a waiver?
I have done initial research on how to implementing adding waivers from the report. See the prototype: https://mpreisle.fedorapeople.org/openscap/interactive_waiver.html Please note that this is not committed yet. It needs quite some cleanup. As discussed previously this allows integrations of openscap to preprocess the HTML report and insert their own callback. That's how they get notified about added waivers. A nice accidental feature I discovered today is that you can waive the report in firefox and when you "Save as" it saves the report with the waivers. Could be useful in small deployments. Known issues: - score not recomputed - number of rules that fail, pass, ... isn't recomputed Feedback appreciated! -- Martin Preisler -- SCAP Security Guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide https://github.com/OpenSCAP/scap-security-guide/
