Skip to content

Commit

Permalink
Add false negative test scenario
Browse files Browse the repository at this point in the history
In this scenario, the test should return fail, but returns pass.
The smallest unit of time in OVAL is one second, there is no way to
differentiate files that were changed less than one second appart
from each other.
  • Loading branch information
yuumasato committed Dec 4, 2020
1 parent 3df3833 commit 48e2b97
Showing 1 changed file with 9 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
#!/bin/bash
# platform = Red Hat Enterprise Linux 8

# IMPORTANT: This is a false negative scenario.
# File /etc/crypto-policies/config is newer than /etc/crypto-policies/state/current, thus incompliant,
# but the OVAL evaluation restuls in pass.
# With a precision of seconds in OVAL, there is not really much we can do to detect this.
update-crypto-policies --set "DEFAULT"
touch /etc/crypto-policies/config

0 comments on commit 48e2b97

Please sign in to comment.