Skip to content
This repository has been archived by the owner on Jan 3, 2023. It is now read-only.

openscap container image: provide option for user to find out what datastreams and profiles are supported #122

Open
matusmarhefka opened this issue Nov 14, 2017 · 3 comments

Comments

@matusmarhefka
Copy link
Member

matusmarhefka commented Nov 14, 2017

When scanning for configuration compliance using atomic scan user has no easy way how to find out what datastreams and profiles are supported (bundled inside the openscap container image).

The issue is partialy fixed by added support for atomic help command which at least prints the version of bundled scap-security-guide inside the openscap container image (PR #118).

@matusmarhefka
Copy link
Member Author

I can think of two solutions for this issue:

  • Update atomic help command to print all supported datastreams and profiles.
  • Change the default behavior that configuration compliance scan without any arguments will print info about supported XCCDF components and profiles of the selected datastream (as we would have the target image for scan, oscapd-evaluate will select the corresponding datastream file and it will print the required info). There might be a problem when scanning multiple images/containers at once (using --images or --all) - in this case we would not print info and rather scan all images with profile selected by user.

@jan-cerny
Copy link
Member

Maybe atomic help could print a table, where rows would be unique profile IDs.
Example

Available profiles and their applicability
==========================================

Profile ID   | Fedora | EL7 | EL6 |
===================================
pci-dss      |        |  X  |  X  |
common       |    X   |  X  |  X  |
cjis         |        |  X  |     |   
...
...

@matusmarhefka
Copy link
Member Author

@jan-cerny I like the idea with table.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants