On Nov 6, 2014, at 10:49 AM, Martin Preisler <mpreisle(a)redhat.com&gt; wrote: Hi, I wrote a short blog post about waivers in HTML report. These changes are coming in 1.2.0 so we would like to gather some feedback before the release. Suggestions welcome! http://martin.preisler.me/2014/11/waivers-in-openscap-html-report/ -- Martin Preisler _______________________________________________ scap-workbench mailing list scap-workbench(a)lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-workbench

From: "Shawn Wells" <shawn(a)redhat.com&gt; To: "Martin Preisler" <mpreisle(a)redhat.com&gt; Cc: "open-scap-list" <open-scap-list(a)redhat.com&gt;, scap-workbench(a)lists.fedorahosted.org, "SCAP Security Guide" <scap-security-guide(a)lists.fedorahosted.org&gt; Sent: Thursday, November 6, 2014 5:33:43 PM Subject: Re: Waiver support in HTML report The post mentions users won't be able to create waivers in the HTML report itself. What's the workflow to introduce a waiver?

----- Original Message ----- > > From: "Shawn Wells" <shawn(a)redhat.com&gt; > > To: "Martin Preisler" <mpreisle(a)redhat.com&gt; > > Cc: "open-scap-list" <open-scap-list(a)redhat.com&gt;, scap-workbench(a)lists.fedorahosted.org, "SCAP Security Guide" > > <scap-security-guide(a)lists.fedorahosted.org&gt; > > Sent: Thursday, November 6, 2014 5:33:43 PM > > Subject: Re: Waiver support in HTML report > > > > The post mentions users won't be able to create waivers in the HTML report > > itself. What's the workflow to introduce a waiver? I have done initial research on how to implementing adding waivers from the report. See the prototype: https://mpreisle.fedorapeople.org/openscap/interactive_waiver.html Please note that this is not committed yet. It needs quite some cleanup. As discussed previously this allows integrations of openscap to preprocess the HTML report and insert their own callback. That's how they get notified about added waivers. A nice accidental feature I discovered today is that you can waive the report in firefox and when you "Save as" it saves the report with the waivers. Could be useful in small deployments. Known issues: - score not recomputed - number of rules that fail, pass, ... isn't recomputed Feedback appreciated!