{"action":"created","issue":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2631","repository_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide","labels_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2631/labels{/name}","comments_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2631/comments","events_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2631/events","html_url":"https://github.com/OpenSCAP/scap-security-guide/issues/2631","id":300834994,"number":2631,"title":"GNOME3 Screensaver Lock  - Checks Error out","user":{"login":"OnceUponALoop","id":3958336,"avatar_url":"https://avatars1.githubusercontent.com/u/3958336?v=4","gravatar_id":"","url":"https://api.github.com/users/OnceUponALoop","html_url":"https://github.com/OnceUponALoop","followers_url":"https://api.github.com/users/OnceUponALoop/followers","following_url":"https://api.github.com/users/OnceUponALoop/following{/other_user}","gists_url":"https://api.github.com/users/OnceUponALoop/gists{/gist_id}","starred_url":"https://api.github.com/users/OnceUponALoop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OnceUponALoop/subscriptions","organizations_url":"https://api.github.com/users/OnceUponALoop/orgs","repos_url":"https://api.github.com/users/OnceUponALoop/repos","events_url":"https://api.github.com/users/OnceUponALoop/events{/privacy}","received_events_url":"https://api.github.com/users/OnceUponALoop/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-02-27T23:35:46Z","updated_at":"2018-02-28T22:49:34Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"#### Description of problem:\r\nThe following checks produce an error (not a failure)\r\n`dconf_gnome_screensaver_lock_enabled`\r\n`dconf_gnome_screensaver_lock_delay`\r\n\r\n#### SCAP Security Guide Version:\r\nGit master 02/27 (bb897175d0695dd6b6ec434e727f66fb6eb13eea)\r\n\r\n#### Operating System Version:\r\nRHEL 7.4\r\n\r\n#### Steps to Reproduce:\r\n\r\n1. Fresh Installation\r\n2. Run USGCB Gnome checks with remediation\r\n3. Note results for both checks are 'error'\r\n\r\n#### Actual Results:\r\n```\r\n[root@rh-test gnome]# oscap oval eval --id oval:ssg-dconf_gnome_screensaver_lock_delay:def:1 ssg-rhel7-ds.xml\r\nDefinition oval:ssg-dconf_gnome_screensaver_lock_delay:def:1: error\r\nEvaluation done.\r\n```\r\n\r\n#### Expected Results:\r\nShould pass or fail instead of error\r\n\r\n#### Addition Information/Debugging Steps:\r\n\r\nContents of `/etc/dconf/db/local.d/10-scap-security-guide` (no other file in local.d or local profile)\r\n```\r\n[org/gnome/desktop/screensaver]\r\nlock-enabled=true\r\nlock-delay=uint32 0\r\n```\r\n\r\nI was able to narrow down the failure\r\n```\r\ndconf_gnome_screensaver_lock_delay\r\n      ----> test_screensaver_lock_delay\r\n      ----> test_prevent_user_lock_delay\r\n      ----> test_screensaver_lock_delay_setting (FAILURE)\r\n```\r\n\r\nI spent a bunch of time looking into this but couldn't resolve it. \r\nThe pattern match does actually pull in the correct value but I think the issue is caused by the external variable `var_screensaver_lock_delay` unfortunately oscap doesn't log that value or success/failure of resolving it.\r\n\r\nThe `var_screensaver_lock_delay` doesn't get refined in the USGCB profile but it should still revert to it's default value defined in `shared/xccdf/system/software/gnome.xml`.\r\n``` xml\r\n<Value id=\"var_screensaver_lock_delay\" type=\"number\" operator=\"equals\">\r\n<title>Screensaver Lock Delay</title>\r\n<description>Choose allowed duration (in seconds) after a screensaver becomes active before displaying an authentication prompt</description>\r\n<value>0</value>\r\n<value selector=\"immediate\">0</value>\r\n<value selector=\"5_seconds\">5</value>\r\n<value selector=\"10_seconds\">10</value>\r\n</Value>\r\n```\r\n\r\nNot sure where to go from here so i'm passing the buck 😞 \r\n"},"comment":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/comments/369411276","html_url":"https://github.com/OpenSCAP/scap-security-guide/issues/2631#issuecomment-369411276","issue_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2631","id":369411276,"user":{"login":"redhatrises","id":8398836,"avatar_url":"https://avatars2.githubusercontent.com/u/8398836?v=4","gravatar_id":"","url":"https://api.github.com/users/redhatrises","html_url":"https://github.com/redhatrises","followers_url":"https://api.github.com/users/redhatrises/followers","following_url":"https://api.github.com/users/redhatrises/following{/other_user}","gists_url":"https://api.github.com/users/redhatrises/gists{/gist_id}","starred_url":"https://api.github.com/users/redhatrises/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/redhatrises/subscriptions","organizations_url":"https://api.github.com/users/redhatrises/orgs","repos_url":"https://api.github.com/users/redhatrises/repos","events_url":"https://api.github.com/users/redhatrises/events{/privacy}","received_events_url":"https://api.github.com/users/redhatrises/received_events","type":"User","site_admin":false},"created_at":"2018-02-28T22:49:34Z","updated_at":"2018-02-28T22:49:34Z","author_association":"MEMBER","body":"That does seem odd. I would maybe open a ticket at https://github.com/openscap/openscap as that could be a bug with `oscap`."}}
{"actor":{"display_login":"redhatrises"}}