Re: Waiver support in HTML report

[Gabe Alford]

Really like the new feature! One thing is how do I remove a waiver, e.g.
what if I accidentally add a waiver to the wrong rule?

Gabe

On Wed, Nov 12, 2014 at 9:36 AM, Martin Preisler 
wrote:
> ----- Original Message -----
> > From: "Shawn Wells" 
> > To: "Martin Preisler" 
> > Cc: "open-scap-list" ,
>
> [e-mail], "SCAP Security Guide"
> > Sent: Thursday, November 6, 2014 5:33:43 PM
> > Subject: Re: Waiver support in HTML report
> >
> > The post mentions users won't be able to create waivers in the HTML
>
> report
> > itself. What's the workflow to introduce a waiver?
>
> I have done initial research on how to implementing adding waivers from
> the report.
>
> See the prototype:
> https://mpreisle.fedorapeople.org/openscap/interactive_waiver.html
>
> Please note that this is not committed yet. It needs quite some cleanup.
> As discussed previously this allows integrations of openscap to preprocess
> the HTML report and insert their own callback. That's how they get notified
> about added waivers.
>
> A nice accidental feature I discovered today is that you can waive the
> report
> in firefox and when you "Save as" it saves the report with the waivers.
> Could be useful in small deployments.
>
> Known issues:
> score not recomputed
> number of rules that fail, pass, ... isn't recomputed
>
> Feedback appreciated!
>
> --
> Martin Preisler
> --
> SCAP Security Guide mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/