Hi Thomas, Thank you for the detailed report and the clear reproduction steps.
This is a packaging issue that originates upstream in the OpenSCAP spec file. The oscap-run-sce-script helper is placed in the utils subpackage, which has a Requires: on scanner, not the reverse. The same split exists in Fedora and other distros, so this is not an Ubuntu-specific packaging choice. The fix would need to land in the upstream openscap (e.g. moving oscap- run-sce-script into the scanner subpackage, or adding a Requires: from scanner to utils), and then all downstream distros would pick it up. Could you please file an issue on the OpenSCAP GitHub repository describing the packaging gap? The relevant prior issues for context are: https://github.com/OpenSCAP/openscap/issues/528 https://github.com/OpenSCAP/openscap/pull/1418 https://github.com/OpenSCAP/openscap/issues/2243 In the meantime, installing openscap-utils is the correct approach. ** Bug watch added: github.com/OpenSCAP/openscap/issues #528 https://github.com/OpenSCAP/openscap/issues/528 ** Bug watch added: github.com/OpenSCAP/openscap/issues #2243 https://github.com/OpenSCAP/openscap/issues/2243 ** Changed in: openscap (Ubuntu) Importance: Undecided => Low ** Changed in: openscap (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2166636 Title: openscap-scanner SCE checks fail with /tmp mounted noexec unless openscap-utils is installed To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/2166636/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
