Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable tests to store additional metadata for waiving as logs #64

Open
comps opened this issue Aug 25, 2023 · 0 comments
Open

Enable tests to store additional metadata for waiving as logs #64

comps opened this issue Aug 25, 2023 · 0 comments

Comments

@comps
Copy link
Contributor

comps commented Aug 25, 2023

When the hardening/scanning tests parse oscap xccdf eval outputs (stdout/err, or via results ARF XML as suggested by #24), they could collect additional metadata - ie. openscap probe details about file paths that failed the check, or other details.

Since TMT doesn't allow arbitrary result line extensions, these would have to be stored as logs (for each reported rule result), because adding them to reported name would likely be too verbose.

They could then also be accessible to waiving logic as a dict() of logs, so a waiving rule could match on oscap probe details, ie.

    rhel == 8 and '/etc/passwd' in logs['paths']

or something of that nature.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant