Skip to content
This repository has been archived by the owner on Sep 27, 2024. It is now read-only.

Program hanging/oscap errors after remediation and subsequent scans with workbench on new profile #311

Open
j-ode opened this issue Apr 27, 2023 · 1 comment

Comments

@j-ode
Copy link

j-ode commented Apr 27, 2023

When implementing a new Fedora profile in #10506, I encountered issues when remediating the profile using workbench.
When running workbench without sudo, either from terminal or from GNOME, scap workbench hangs before remediation finishes, and you are given a choice to kill the program or wait, but an even an hour later nothing happens. When running workbench with sudo, the remediation finished, however oscap errors are raised, even when subsequently scanning the system using the profile. Strangely, if you remediate the system using the oscap cli tool and then scan the system using workbench, no oscap errors in workbench appear. See the attached screenshots.

fedora-result
fedora-remediate-sudo-bench

SCAP Security Guide Version:

latest master, OpenSCAP 1.3.7

Operating System Version:

Fedora 37 fresh install VM with 4GB RAM, Fedora 38 fresh install on laptop with 16GB RAM

Steps to Reproduce:

  1. Use branch in PR #10506
  2. Build the fedora product
  3. Try to scan and remediate a fresh fedora system using workbench with the cusp_fedora profile

Actual Results:

When using workbench without sudo, it hangs during remediation. When using with sudo, it produces oscap errors.

Expected Results:

Workbench remediates the system without hanging or errors just as oscap does

@jan-cerny
Copy link
Member

The error about "Can't statvfs" is proabably fine, it's related to permissions of the file being read and shouldn't have impact on results. So the real problem here is the hanging and freezing.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants