Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSGTS --remediate-using causes test scenario errors #8024

Closed
mildas opened this issue Jan 4, 2022 · 3 comments
Closed

SSGTS --remediate-using causes test scenario errors #8024

mildas opened this issue Jan 4, 2022 · 3 comments
Assignees
Labels
productization-issue Issue found in upstream stabilization process.

Comments

@mildas
Copy link
Contributor

mildas commented Jan 4, 2022

Description of problem:

When --remediate-using option is used, SSGTS final phase results in error because it can't download ARF file from VM.

SCAP Security Guide Version:

8837604

Operating System Version:

RHEL9

Steps to Reproduce:

  1. $ python3 tests/test_suite.py rule --libvirt qemu:///session test-suite-rhel9 --datastream build/ssg-rhel9-ds.xml --scenarios service_disabled --remediate-using bash service_pcscd_enabled

Actual Results:

Setting console output to log level INFO                                                                               
INFO - The base image option has not been specified, choosing libvirt-based test environment.                                                                                                                                                 
INFO - Logging into /home/mlysonek/SCAP/content/logs/rule-custom-2022-01-04-1200/test_suite.log                                                                                                                                               
INFO - xccdf_org.ssgproject.content_rule_service_pcscd_enabled                                                                                                                                                                                
INFO - Script service_disabled.fail.sh using profile (all) OK                                                          
ERROR - oscap info /home/mlysonek/SCAP/content/logs/rule-custom-2022-01-04-1200/service_pcscd_enabled-service_disabled.fail.sh-remediation-arf.xml returned 1 exit code
ERROR - Failed to copy root@192.168.122.8:/xccdf_org.ssgproject.content_rule_service_pcscd_enabled.sh to /home/mlysonek/SCAP/content/logs/rule-custom-2022-01-04-1200: 'scp' command returned non-zero.
ERROR - Failed to download file /xccdf_org.ssgproject.content_rule_service_pcscd_enabled.sh                                                                                                                                                   
ERROR - The remediation failed for rule 'xccdf_org.ssgproject.content_rule_service_pcscd_enabled'.                                                                                                                              

Expected Results:

No error

Additional Information/Debugging Steps:

Without --remediate-using, it's fine:

$ python3 tests/test_suite.py rule --libvirt qemu:///session test-suite-rhel9 --datastream build/ssg-rhel9-ds.xml --scenarios service_disabled service_pcscd_enabled                                                 
                                                           
Setting console output to log level INFO                                                                               
INFO - The base image option has not been specified, choosing libvirt-based test environment.                                                                                                                                                 
INFO - Logging into /home/mlysonek/SCAP/content/logs/rule-custom-2022-01-04-1158/test_suite.log                                                                                                                                               
INFO - xccdf_org.ssgproject.content_rule_service_pcscd_enabled                                                                                                                                                                                
INFO - Script service_disabled.fail.sh using profile (all) OK     
@matejak
Copy link
Member

matejak commented Jan 4, 2022

Damn, another issue caused by #7750, I will take a look into it.

@matejak
Copy link
Member

matejak commented Jan 4, 2022

Should be fixed by #8025

@matusmarhefka matusmarhefka added the productization-issue Issue found in upstream stabilization process. label Jan 6, 2022
@mildas
Copy link
Contributor Author

mildas commented Jan 14, 2022

I believe this has been fixed. Closing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
productization-issue Issue found in upstream stabilization process.
Projects
None yet
Development

No branches or pull requests

3 participants