** Description changed: + [Impact] + The impact is fairly low because the problem can be mitigated by copying or linking a default cpe dictionary into place after installing. This prevents the error: + + $ sudo ln -s /usr/share/scap-security-guide/ssg-ubuntu1604-cpe- + dictionary.xml /usr/share/openscap/cpe/openscap-cpe-dict.xml + + + However, it would be better if it just worked correctly without requiring any manual steps after installation. + + [Test Case] + The original description provides good instructions for reproducing under bionic: + $ sudo apt install libopenscap8 ssg-debderived + $ oscap info /usr/share/scap-security-guide/ssg-ubuntu1604-ds.xml + <snip> + OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284] + Failed to add default CPE to newly created CPE Session. [../../../src/CPE/cpe_session.c:58] + <snip> + + [Regression Potential] + The likelyhood of a regression seems very low since this change provides a default cpe dictionary with the installation instead of requiring that one be manually copied into place after installation. In the event that this default cpe dictionary does somehow causes a regression, it could be mitigated by explicitly specifying a cpe dictionary rather than relying on the default or copying a new file over the default (which is basically what has to be done now to make the current oscap work correctly). + + ----- Original description ---- /usr/share/openscap/cpe/openscap-cpe-dict.xml is included in later versions such as 1.2.16-2: https://packages.debian.org/buster/amd64/libopenscap8/filelist - How to reproduce with Ubuntu 18.04 LTS: $ sudo apt install libopenscap8 ssg-debderived $ oscap info /usr/share/scap-security-guide/ssg-ubuntu1604-ds.xml Document type: Source Data Stream Imported: 2017-08-11T09:18:08 ... Dictionaries: - Ref-Id: scap_org.open-scap_cref_output--ssg-ubuntu1604-cpe-dictionary.xml + Ref-Id: scap_org.open-scap_cref_output--ssg-ubuntu1604-cpe-dictionary.xml OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284] Failed to add default CPE to newly created CPE Session. [../../../src/CPE/cpe_session.c:58] ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: libopenscap8 1.2.15-1build1 ProcVersionSignature: User Name 4.15.0-58.64-generic 4.15.18 Uname: Linux 4.15.0-58-generic x86_64 ApportVersion: 2.20.9-0ubuntu7.7 Architecture: amd64 Date: Tue Sep 24 14:13:09 2019 ProcEnviron: - TERM=screen-256color - PATH=(custom, no user) - XDG_RUNTIME_DIR=<set> - LANG=C.UTF-8 - SHELL=/bin/bash + TERM=screen-256color + PATH=(custom, no user) + XDG_RUNTIME_DIR=<set> + LANG=C.UTF-8 + SHELL=/bin/bash SourcePackage: openscap UpgradeStatus: No upgrade log present (probably fresh install)
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1845216 Title: OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe /openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284] To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/1845216/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
