Skip to content
This repository has been archived by the owner on Sep 27, 2024. It is now read-only.

Message error while scanning a remote machine #258

Open
Ricky-Tigg opened this issue Mar 27, 2020 · 3 comments
Open

Message error while scanning a remote machine #258

Ricky-Tigg opened this issue Mar 27, 2020 · 3 comments

Comments

@Ricky-Tigg
Copy link

Component: scap-workbench.x86_64 1.2.1-2.fc32 @fedora, compiled with Qt 5.13.2, using OpenSCAP 1.3.2; Kernel: 5.6.0-0.rc7.git0.2.fc32.x86_64

Dry-run output:
oscap-ssh [email protected] 22 xccdf eval --datastream-id scap_org.open-scap_datastream_from_xccdf_ssg-fedora-xccdf-1.2.xml --xccdf-id scap_org.open-scap_cref_ssg-fedora-xccdf-1.2.xml --tailoring-file /home/yk/ssg-fedora-ds-muutos.xml --profile xccdf_firefox_profile_ospp_muokattu --oval-results --results /tmp/xccdf-results.xml --results-arf /tmp/arf.xml --report /tmp/report.html /tmp/scap-workbench-RrsTQS/ssg-fedora-ds.xml

Message produced during scanning:

15:30:31 info     SCAP Workbench 1.2.1, compiled with Qt 5.13.2, using OpenSCAP 1.3.2
15:30:35 info     Opened file '/usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml'.
15:47:54 info     Establishing a connection to remote target...
15:48:00 info     Connection established.
15:48:00 info     Checking if oscap is available on remote machine...
15:48:00 info     Querying capabilities on remote machine...
15:48:00 info     Copying input data to remote target...
15:48:01 info     Starting the remote process...
15:48:01 info     Processing on the remote machine...
15:50:22 error    The 'oscap' process has written the following content to stderr: E: oscap: Can't read sysctl value from "/proc/sys/net/core/bpf_jit_harden": 13, Permission denied 
15:50:31 info     Cleaning up...
15:50:32 info     Processing has been finished!
16:02:01 info     Establishing a connection to remote target...
16:02:12 info     Connection established.
16:02:12 info     Checking if oscap is available on remote machine...
16:02:12 info     Querying capabilities on remote machine...
16:02:12 info     Copying input data to remote target...
16:02:13 info     Starting the remote process...
16:02:13 info     Processing on the remote machine...
16:04:25 error    The 'oscap' process has written the following content to stderr: E: oscap: Can't read sysctl value from "/proc/sys/net/core/bpf_jit_harden": 13, Permission denied 
16:04:33 info     Cleaning up...
16:04:33 info     Processing has been finished!
@redhatrises
Copy link
Member

@Ricky-Tigg did you run as root on the remote?

@Ricky-Tigg
Copy link
Author

On remote host, the user name is visible in the main message; then it is yk; in my system it is member of wheel group , which contains sudo-allowed users.

$ id
uid=1000(yk) gid=1000(yk) ryhmät=1000(yk),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c102

@Ricky-Tigg
Copy link
Author

Planning to close my reports that remain open on this platform indefinitely in undone/unfixed states soon. Rare is the developer that comprehends that getting rid off a simplest task as soon as it arrives and keeping a challenging task for the long term are the only healthy practises. Pity for the project owner.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants