QA:TestCase OpenSCAP Fedora default settings

From FedoraProject

Jump to: navigation, search

Contents

Description

XCCDF content defines many security setting that might be organized into different profiles. The settings that are selected in profile called "Desktop" are supposed to pass on "clean" Fedora system. The Aim of this test case is to ensure that oscap tool can process provided SCAP content and get proper results.

Setup

The basic test day setup is sufficient, no extra action needed.

How to test

Run

# oscap xccdf eval --result-file result.xml --report-file report.html --oval-results --profile Desktop scap-fedora14-xccdf.xml scap-fedora14-oval.xml

Expected Results

All Rules should give result: pass

Note that some tests have significant memory consumption. It depends on how many files are on your local filesystems. Info about relation between number of files and max memory usage would help us. Useful commands:

# find `mount | egrep ' (ext|reiser|xfs|jfs|btrfs)' | sed -n 's|^.*on \([/a-z0-9]*\) .*$|\1|p'` -xdev | wc -l
# top -b | grep probe_file

Unexpected Results

If there are rules with result other than pass it does not need to be problem. Your system might have different configuration. Please, see report.html file for detailed rule description and then check whether rule results are correct or incorrect. If in doubts, paste relevant messages to fpaste and ask us on IRC.

If you hit a bug and you are about to file a bugzilla, please include scap-fedora14-oval.xml.result.xml file that should be generated in your working directory.