Skip to content
This repository was archived by the owner on Jan 3, 2023. It is now read-only.
This repository was archived by the owner on Jan 3, 2023. It is now read-only.

Remediation of containers for configuration compliance has inconsistent output #121

Description

@matusmarhefka

When remediating containers for configuration compliance, the output of scan vs. remediation is inconsistent:

# atomic scan --remediate --scan_type configuration_compliance --scanner_args \
   profile=xccdf_org.ssgproject.content_profile_stig-rhel7-disa \
   registry.access.redhat.com/rhel7:latest

.............

     Configure Time Service Maxpoll Interval
     Severity: Low
       XCCDF result: fail

     Configure LDAP Client to Use TLS For All Transactions
     Severity: Moderate
       XCCDF result: fail

.............
Remediating rule 43/44: 'xccdf_org.ssgproject.content_rule_chronyd_or_ntpd_set_maxpoll'
Remediating rule 44/44: 'xccdf_org.ssgproject.content_rule_ldap_client_start_tls'

Scan results do not state the rule IDs only descriptions and on the other hand, remediations of rules are stating rule IDs which might be confusing for user to map to the original scan results.

I think we should either print rule descriptions in remediations (as for the scan) or add rule IDs to the scan output as proposed in the issue #108

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions