When i query proof with proofAsText for remove html on results.
I compared results between “proof” column and “proofAsText(proof)” and found proofAsText function result display not complete.(See example in below)
proofAsText(proof) :
This is a complex check. Operator = OR * oval-org.cisecurity.benchmarks.redhat_redhat_enterprise_linux_8-def-1652518: FAILBased on the following 1 results: * * The specified RPM Package Information entry must not match the given criteria.instance: 1
proof:
This is a complex check. Operator = OR
-
oval-org.cisecurity.benchmarks.redhat_redhat_enterprise_linux_8-def-1652518: FAIL
Based on the following 1 results:
-
-
The specified RPM Package Information entry must not match the given criteria.
Entry 1 findings: PASS name: openssh-server arch: x86_64 epoch: (none) release: 10.el8 version: 8.0p1 evr: 0:8.0p1-10.el8 signature_keyid: 199e2f91fd431d51 extended_name: openssh-server-0:8.0p1-10.el8.x86_64 filepath:
-
-
-
This is a complex check. Operator = AND
-
oval-org.cisecurity.benchmarks.redhat_redhat_enterprise_linux_8_se-def-1193: PASS
Based on the following 1 results:
-
-
At least one specified ShellCommand entry must match the given criteria. At least one evaluation must pass.
Entry 1 findings: PASS command: XCCDF_VALUE_REGEX="^permituserenvironment\s*no\s*$";output="";passing="";hn=$(hostname);ha=$(grep "$hn" /etc/hosts | awk '{print $1}');if echo "$XCCDF_VALUE_REGEX" | grep -Eq '^\^\\s\*'; then output="$(sshd -T -C user=root -C host="$hn" -C addr="$ha" | grep -E "$(echo "$XCCDF_VALUE_REGEX" | cut -d'*' -f2 | cut -d'\' -f1)")";elif echo "$XCCDF_VALUE_REGEX" | grep -Eq '^\^\\s\*\('; then output="$(sshd -T -C user=root -C host="$hn" -C addr="$ha" | grep -E "$(echo "$XCCDF_VALUE_REGEX" | cut -d'*' -f2)")";elif echo "$XCCDF_VALUE_REGEX" | grep -Eq '^(\^\(|\()'; then if sshd -T -C user=root -C host="$hn" -C addr="$ha" | grep -Eq "$XCCDF_VALUE_REGEX"; then output="$(sshd -T -C user=root -C host="$hn" -C addr="$ha" | grep -Eq "$XCCDF_VALUE_REGEX")";else output="$(echo "$XCCDF_VALUE_REGEX" | awk -F"[()]" '{print $2}')";fi;else output="$(sshd -T -C user=root -C host="$hn" -C addr="$ha" | grep -E "$(echo "$XCCDF_VALUE_REGEX" | cut -d'\' -f1)")";fi;sshd -T -C user=root -C host="$hn" -C addr="$ha" | grep -Eq "$XCCDF_VALUE_REGEX" && passing=true;if [ "$passing" = true ] ; then echo "PASSED! sshd parameter: \"$output\"";echo "XCCDF_RESULT:PASS";else echo "FAILED! check sshd parameter: \"$output\"";echo "XCCDF_RESULT:FAIL";fi; line_selection: .+ stdout_line: PASSED! sshd parameter: "permituserenvironment no" stdout_line: XCCDF_RESULT:PASS
-
-
-
oval-org.cisecurity.benchmarks.redhat_redhat_enterprise_linux_8-def-1652519: PASS
Based on the following 1 results:
-
-
The specified Text File Content entry must not match the given criteria.
The specified Text File Content entry was not found based on the given criteria: filepath: /etc/ssh/sshd_config pattern: ^(?i)\s*PermitUserEnvironment\s+yes instance: 1
-
-
-
Admin or support team, please help to fix or explain.
Best Regards,