Re: Waiver support in HTML report

[Martin Preisler]

----- Original Message -----
> From: "Shawn Wells" 
> To: "Martin Preisler" 
> Cc: "open-scap-list" , [e-mail], "SCAP Security Guide"
>
> Sent: Thursday, November 6, 2014 5:33:43 PM
> Subject: Re: Waiver support in HTML report
>
> The post mentions users won't be able to create waivers in the HTML report
> itself. What's the workflow to introduce a waiver?

I have done initial research on how to implementing adding waivers from
the report.

See the prototype:
https://mpreisle.fedorapeople.org/openscap/interactive_waiver.html

Please note that this is not committed yet. It needs quite some cleanup.
As discussed previously this allows integrations of openscap to preprocess
the HTML report and insert their own callback. That's how they get notified
about added waivers.

A nice accidental feature I discovered today is that you can waive the report
in firefox and when you "Save as" it saves the report with the waivers.
Could be useful in small deployments.

Known issues:
- score not recomputed
- number of rules that fail, pass, ... isn't recomputed

Feedback appreciated!