oscap fails to evaluate rule "Enable systemd_timesyncd Service" (xccdf_org.ssgproject.content_rule_service_timesyncd_enabled)

Bug #2060356 reported by Przemyslaw Hausman
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu Security Guide
New
Undecided
Unassigned

Bug Description

Ubuntu 22.04.4 LTS
usg version: 22.04.6

Evaluating rule "Enable systemd_timesyncd Service" (xccdf_org.ssgproject.content_rule_service_timesyncd_enabled) fails with result "error" and the following log entries in /var/lib/usg/usg-log-<date>.log:

```
I: oscap: Evaluating definition 'oval:ssg-service_timesyncd_enabled:def:1': Enable systemd_timesyncd Service.
I: oscap: Evaluating dpkginfo test 'oval:ssg-test_service_systemd-timesyncd_package_systemd_installed:tst:1': package systemd is installed.
I: oscap: Querying dpkginfo object 'oval:ssg-obj_test_service_systemd-timesyncd_package_systemd_installed:obj:1', flags: 0.
I: oscap: Creating new syschar for dpkginfo_object 'oval:ssg-obj_test_service_systemd-timesyncd_package_systemd_installed:obj:1'.
I: probe_dpkginfo: systemd: element found version 0:249.11-0ubuntu3.12
I: probe_dpkginfo: Extracting item from the cache queue: cnt=2, beg=4
I: probe_dpkginfo: cache MISS
I: probe_dpkginfo: Extracting item from the cache queue: cnt=1, beg=5
I: oscap: Test 'oval:ssg-test_service_systemd-timesyncd_package_systemd_installed:tst:1' requires that every object defined by 'oval:ssg-obj_test_service_systemd-timesyncd_package_systemd_installed:obj:1' exists on the system.
I: oscap: 1 objects defined by 'oval:ssg-obj_test_service_systemd-timesyncd_package_systemd_installed:obj:1' exist on the system.
I: oscap: Test 'oval:ssg-test_service_systemd-timesyncd_package_systemd_installed:tst:1' does not contain any state to compare object with.
I: oscap: All items matching object 'oval:ssg-obj_test_service_systemd-timesyncd_package_systemd_installed:obj:1' were collected. (flag=complete)
I: oscap: Test 'oval:ssg-test_service_systemd-timesyncd_package_systemd_installed:tst:1' evaluated as true.
I: oscap: Evaluating systemdunitproperty test 'oval:ssg-test_service_running_systemd-timesyncd:tst:1': Test that the systemd-timesyncd service is running.
I: oscap: Querying systemdunitproperty object 'oval:ssg-obj_service_running_systemd-timesyncd:obj:1', flags: 0.
I: oscap: Creating new syschar for systemdunitproperty_object 'oval:ssg-obj_service_running_systemd-timesyncd:obj:1'.
I: oscap: Starting probe on URI 'pipe:///usr/lib/x86_64-linux-gnu/openscap/probe_systemdunitproperty'.
I: probe_systemdunitproperty: Extracting item from the cache queue: cnt=1, beg=0
I: probe_systemdunitproperty: cache MISS
I: probe_systemdunitproperty: Extracting item from the cache queue: cnt=1, beg=1
I: oscap: Test 'oval:ssg-test_service_running_systemd-timesyncd:tst:1' requires that at least one object defined by 'oval:ssg-obj_service_running_systemd-timesyncd:obj:1' exists on the system.
I: oscap: 1 objects defined by 'oval:ssg-obj_service_running_systemd-timesyncd:obj:1' exist on the system.
I: oscap: All items matching object 'oval:ssg-obj_service_running_systemd-timesyncd:obj:1' were collected. (flag=complete)
I: oscap: In test 'oval:ssg-test_service_running_systemd-timesyncd:tst:1' at least one of the collected items must satisfy these states: 'oval:ssg-state_service_running_systemd-timesyncd:ste:1'.
I: oscap: Entity 'value'='active' of item '12112691' matches corresponding entity in state 'oval:ssg-state_service_running_systemd-timesyncd:ste:1'.
I: oscap: Item '12112691' compared to state 'oval:ssg-state_service_running_systemd-timesyncd:ste:1' with result true.
I: oscap: Test 'oval:ssg-test_service_running_systemd-timesyncd:tst:1' evaluated as true.
I: oscap: Evaluating systemdunitdependency test 'oval:ssg-test_multi_user_wants_systemd-timesyncd:tst:1': systemd test.
I: oscap: Querying systemdunitdependency object 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_enabled:obj:1', flags: 0.
I: oscap: Creating new syschar for systemdunitdependency_object 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_enabled:obj:1'.
I: oscap: Starting probe on URI 'pipe:///usr/lib/x86_64-linux-gnu/openscap/probe_systemdunitdependency'.
I: oscap: zero bytes received -> EOF
I: oscap: FAIL: ctx=0x56300f49c250, sd=3, errno=103, Software caused connection abort.
W: oscap: Can't receive message: 103, Software caused connection abort.
I: oscap: Connection was aborted.
I: oscap: Closing sd=-1 (pd=0x563012325180) after abort
I: oscap: Test 'oval:ssg-test_multi_user_wants_systemd-timesyncd:tst:1' requires that zero or more objects defined by 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_enabled:obj:1' exist on the system.
I: oscap: 0 objects defined by 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_enabled:obj:1' exist on the system.
I: oscap: Test 'oval:ssg-test_multi_user_wants_systemd-timesyncd:tst:1' evaluated as error.
I: oscap: Evaluating systemdunitdependency test 'oval:ssg-test_multi_user_wants_systemd-timesyncd_socket:tst:1': systemd test.
I: oscap: Querying systemdunitdependency object 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_socket_enabled:obj:1', flags: 0.
I: oscap: Creating new syschar for systemdunitdependency_object 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_socket_enabled:obj:1'.
I: oscap: Starting probe on URI 'pipe:///usr/lib/x86_64-linux-gnu/openscap/probe_systemdunitdependency'.
I: oscap: zero bytes received -> EOF
I: oscap: FAIL: ctx=0x5630119c6b10, sd=32, errno=103, Software caused connection abort.
W: oscap: Can't receive message: 103, Software caused connection abort.
I: oscap: Connection was aborted.
I: oscap: Closing sd=-1 (pd=0x5630123254a0) after abort
I: oscap: Test 'oval:ssg-test_multi_user_wants_systemd-timesyncd_socket:tst:1' requires that zero or more objects defined by 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_socket_enabled:obj:1' exist on the system.
I: oscap: 0 objects defined by 'oval:ssg-object_multi_user_target_for_systemd-timesyncd_socket_enabled:obj:1' exist on the system.
I: oscap: Test 'oval:ssg-test_multi_user_wants_systemd-timesyncd_socket:tst:1' evaluated as error.
I: oscap: Definition 'oval:ssg-service_timesyncd_enabled:def:1' evaluated as error.
```

Machine under CIS hardening runs ceph-osd juju charm.

Potentially related to:
- https://bugs.launchpad.net/usg/+bug/2060345

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.