OSCAP Offline Remediation Steps Fail

Latest response

In the RedHat Enterprise Linux 7.4 documentation, section 7.4.6.2. OpenSCAP Offline Remediation has steps that fail in a minimal installation. The bug seems to reside within oscap, specifically that the probe_system_info libexec does not work when a system is offline, and returns an error. This error ultimately causes the oscap operation to fail. Can this section be verified functional by anyone else?

Responses

After performing further investigation, it appears the content of this section could be a bit more descriptive. I suspect the offline term, does not refer to turning off all network devices including the loopback adapter. It appears the probe_system_info libexec used by oscap requires the loopback adapter to be on to function, but does not need other network adapters to be up.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.