-
Notifications
You must be signed in to change notification settings - Fork 417
Open
Description
Description of Problem:
Seems to similar to #1942.
When scanning a redhat container image (like ubi8 and ubi9) using oscap-docker, all rules are evaluated as notapplicable.
OpenSCAP Version:
bash-5.3# oscap -V
OpenSCAP command line tool (oscap) 1.4.2
Steps to Reproduce:
- sudo systemctl start docker
- docker pull registry.access.redhat.com/ubi8/ubi
- Enter the container that is connected to the docker environment or run locally (Am running in an image as root)
- oscap-docker image registry.access.redhat.com/ubi8/ubi:latest xccdf eval --profile xccdf_org.ssgproject.content_profile_stig /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml
Additional Information / Debugging Steps:
might be unrelated, but I can see these warnings at the ending of the output
W: oscap: OVAL object 'rpminfo_object' is not supported.
W: oscap: OVAL object 'rpminfo_object' is not supported.
W: oscap: OVAL object 'rpminfo_object' is not supported.
orenlevi333
Metadata
Metadata
Assignees
Labels
No labels