OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284]
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openscap (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Xenial |
Fix Released
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Disco |
Fix Released
|
Undecided
|
Unassigned | ||
Eoan |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Impact]
The impact is fairly low because the problem can be mitigated by copying or linking a default cpe dictionary into place after installing. This prevents the error:
$ sudo ln -s /usr/share/
However, it would be better if it just worked correctly without requiring any manual steps after installation.
[Test Case]
The original description provides good instructions for reproducing under bionic:
$ sudo apt install libopenscap8 ssg-debderived
$ oscap info /usr/share/
<snip>
OpenSCAP Error: Unable to open file: '/usr/share/
Failed to add default CPE to newly created CPE Session. [../../
<snip>
[Regression Potential]
The likelyhood of a regression seems very low since this change provides a default cpe dictionary with the installation instead of requiring that one be manually copied into place after installation. In the event that this default cpe dictionary does somehow causes a regression, it could be mitigated by explicitly specifying a cpe dictionary rather than relying on the default or copying a new file over the default (which is basically what has to be done now to make the current oscap work correctly).
----- Original description ----
/usr/share/
https:/
How to reproduce with Ubuntu 18.04 LTS:
$ sudo apt install libopenscap8 ssg-debderived
$ oscap info /usr/share/
Document type: Source Data Stream
Imported: 2017-08-11T09:18:08
...
Dictionaries:
Ref-Id: scap_org.
OpenSCAP Error: Unable to open file: '/usr/share/
Failed to add default CPE to newly created CPE Session. [../../
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: libopenscap8 1.2.15-1build1
ProcVersionSign
Uname: Linux 4.15.0-58-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.7
Architecture: amd64
Date: Tue Sep 24 14:13:09 2019
ProcEnviron:
TERM=screen-
PATH=(custom, no user)
XDG_RUNTIME_
LANG=C.UTF-8
SHELL=/bin/bash
SourcePackage: openscap
UpgradeStatus: No upgrade log present (probably fresh install)
Changed in openscap (Ubuntu Xenial): | |
status: | New → Confirmed |
Changed in openscap (Ubuntu Bionic): | |
status: | New → Confirmed |
Changed in openscap (Ubuntu Disco): | |
status: | New → Fix Released |
Changed in openscap (Ubuntu Eoan): | |
status: | New → Fix Released |
description: | updated |
Changed in openscap (Ubuntu Xenial): | |
status: | Confirmed → In Progress |
Changed in openscap (Ubuntu Bionic): | |
status: | Confirmed → In Progress |
tags: |
added: verification-done-bionic verification-done-xenial removed: verification-needed-bionic verification-needed-xenial |
tags: |
added: verification-done removed: verification-needed |
Hello Nobuto, or anyone else affected,
Accepted openscap into bionic-proposed. The package will build now and be available at https:/ /launchpad. net/ubuntu/ +source/ openscap/ 1.2.15- 1ubuntu0. 1 in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See https:/ /wiki.ubuntu. com/Testing/ EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.
If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification- needed- bionic to verification- done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed- bionic. In either case, details of your testing will help us make a better decision.
Further information regarding the verification process can be found at https:/ /wiki.ubuntu. com/QATeam/ PerformingSRUVe rification . Thank you in advance!