Kuko,
I don’t have answers, but thought you would like to know that your question was 
extremely professional, asked specific questions, and demonstrated that you’ve 
given this some real effort so far. Thanks for a great question. I’ve learned 
something from both question and answer today.

Charlie Todd
Ball Aerospace

On Dec 16, 2019, at 5:44 AM, Kuko Armas <[email protected]> wrote:



I've been playing with remediation code, and I've seen that remediation code 
for many checks fails due to undefined functions as "populate" (to populate 
defined variables) and "fix_audit_syscall_rule" (for audit checks)

I've seen that both functions (and many more) are defined inside the 
datasource, in group xccdf_org.ssgproject.content_group_remediation_functions

Since I'm a complete newbie in openSCAP, I'm not sure how it should work:


  *   Is remediation code supposed to be selt-contained in the data source? Or 
does it depend on the host having the security-guide package installed ir order 
to have that functions code?
  *   If it's self contained, how and where are the functions code file 
extracted and read by remediation code?
     *   If it's extracted, is there an option to keep the temp files around to 
take a look?
  *   Maybe I need a more recent openscap version? (I'm using 1.2.17-4.el7 in 
centos7)
  *   Should I file an issue on ComplianceAsCode GitHub repo? or am I doing 
something wrong?

Thanks a lot!
--
Miguel Armas
CanaryTek Consultoria y Sistemas SL
http://www.canarytek.com/<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.canarytek.com_&d=DwMFAw&c=jF7FvYH6t0RX1HrEjVCgHQ&r=EtM8rzsgMR2aFrLOrhF8eg&m=MO7OWCdDicEQRIR94Rk4AtQt5qaFmdbsipsE1K-WnjA&s=s3LG181dbFbtT00ovomneDzQPXpSATtq0GgDHGm5ZKU&e=>

_______________________________________________
scap-security-guide mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.fedoraproject.org_en-2DUS_project_code-2Dof-2Dconduct_&d=DwIGaQ&c=jF7FvYH6t0RX1HrEjVCgHQ&r=EtM8rzsgMR2aFrLOrhF8eg&m=MO7OWCdDicEQRIR94Rk4AtQt5qaFmdbsipsE1K-WnjA&s=fo4poTHroZIgQ19C08jnmCcajg5kaOoAqWa764UgNpc&e=
List Guidelines: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__fedoraproject.org_wiki_Mailing-5Flist-5Fguidelines&d=DwIGaQ&c=jF7FvYH6t0RX1HrEjVCgHQ&r=EtM8rzsgMR2aFrLOrhF8eg&m=MO7OWCdDicEQRIR94Rk4AtQt5qaFmdbsipsE1K-WnjA&s=M7beC11uC_bDkdY8NVTWxL8L_WWC-pVmF6W5ZLTgV5s&e=
List Archives: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.fedorahosted.org_archives_list_scap-2Dsecurity-2Dguide-40lists.fedorahosted.org&d=DwIGaQ&c=jF7FvYH6t0RX1HrEjVCgHQ&r=EtM8rzsgMR2aFrLOrhF8eg&m=MO7OWCdDicEQRIR94Rk4AtQt5qaFmdbsipsE1K-WnjA&s=ZN-4parFEeEUPyclKTxAO8zGhPG8gzsbrjjZLW2fUZs&e=

This message and any enclosures are intended only for the addressee.  Please 
notify the sender by email if you are not the intended recipient.  If you are 
not the intended recipient, you may not use, copy, disclose, or distribute this 
message or its contents or enclosures to any other person and any such actions 
may be unlawful.  Ball reserves the right to monitor and review all messages 
and enclosures sent to or from this email address.
_______________________________________________
scap-security-guide mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to