Description
XCCDF content defines many security setting that might be organized into different profiles. The settings that are selected in profile called "Desktop" are supposed to pass on "clean" Fedora system. The Aim of this test case is to ensure that oscap tool can process provided SCAP content and get proper results.
Setup
The basic test day setup is sufficient, no extra action needed.
How to test
Run
# oscap xccdf eval --result-file result.xml --report-file report.html --oval-results --profile Desktop scap-fedora14-xccdf.xml scap-fedora14-oval.xml
Expected Results
All Rules should give result: pass
Note that some tests have significant memory consumption. It depends on how many files are on your local filesystems. Info about relation between number of files and max memory usage would help us. Useful commands:
# find `mount | egrep ' (ext|reiser|xfs|jfs|btrfs)' | sed -n 's|^.*on \([/a-z0-9]*\) .*$|\1|p'` -xdev | wc -l # top -b | grep probe_file
Unexpected Results
If there are rules with result other than pass it does not need to be problem. Your system might have different configuration. Please, see report.html file for detailed rule description and then check whether rule results are correct or incorrect. If in doubts, paste relevant messages to fpaste and ask us on IRC.
If you hit a bug and you are about to file a bugzilla, please include scap-fedora14-oval.xml.result.xml file that should be generated in your working directory.