Hello Dhanushka,
first of, I added scap-security-guide list, as that will make more sense
for this kind of questions. open-scap-list is mostly about scanner
issues (and in 99% cases, problem is in content, not in the scanner).
Regarding the problem itself, it would be great if you took a look at
the sources for the oval, maybe you'll be able to find the issue
yourself. As you are on the platform.
To find the source for the issue, I have checked the ID of the rule is
rule_apt_sources_official. So calling this in cloned git repo:
`find . | grep apt_sources_list`
will tell you where are the sources:
./linux_os/guide/services/apt/apt_sources_list_official/oval/shared.xml
is the source for check.
There is no complexity, there just regexes, so if you find an issue,
pull request with the fix would be awesome, but explanation what is the
bug will also do.
Thanks!
Marek
On 09/07/2018 07:38 AM, Dhanushka Parakrama wrote:
Hi Team
In Debian 8 */etc/apt/sources.list *file include below repositories
deb http://ftp.us.debian.org/debian/ jessie main
deb-src http://ftp.us.debian.org/debian/ jessie main
deb http://security.debian.org/ jessie/updates main
deb-src http://security.debian.org/ jessie/updates main
but still *oscap xccdf eval --profile
xccdf_org.ssgproject.content_profile_anssi_np_nt28_high --report
report.html ssg-debian8-ds.xml * Scan says
image.png
*Ensure that official distribution repositories are used * -> *FAIL*
Is there any reason for that ?
Thank You
Dhanushka
_______________________________________________
Open-scap-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/open-scap-list
_______________________________________________
scap-security-guide mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
