[Open-scap] 32-bit arch check

Peter Vrabec pvrabec at redhat.com
Wed Sep 14 14:04:42 UTC 2011


Hi Janzen,

I'm sorry for late reply.

The intension  was to run  32bit audit rules tests on 64bit platforms too. 
Basically, I was told that you need to configure both "arch=b32" and "arch=b64" 
audit rules on 64bit system.

I admit it's not clear from the content - comment tags was not adjusted 
anywhere. :(

Peter.


On Tuesday, August 30, 2011 05:26:56 PM Janzen Brewer wrote:
> I recently pulled changes and had a few of my tests break. I noticed
> that there has been a change in how 32-bit architectures are detected.
> Git tells me that the change was from commit 697601aa earlier this
> month. These lines seem to be my issue
> (dist/rhel6/scap-rhel6-oval.xml:3586):
> 
> <unix-def:uname_state id="oval:org.open-scap.rhel6:ste:112911"
> version="1" comment="architectures that run 32-bit userspace">
> <unix-def:processor_type operation="pattern
> match">^.*$</unix-def:processor_type> <!-- So far, at least... -->
> 
> The pattern match was formerly for i[3-6]86, etc. Now my tests involving
> /etc/audit/audit.rules (e.g. RHEL6 rule 1129) fail because they don't
> think they can skip the 32-bit rules. Was this the intended outcome?




More information about the Open-scap-list mailing list