{"action":"created","issue":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1030","repository_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide","labels_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1030/labels{/name}","comments_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1030/comments","events_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1030/events","html_url":"https://github.com/OpenSCAP/scap-security-guide/issues/1030","id":131144637,"number":1030,"title":"False positive with auditd_data_retention_num_logs","user":{"login":"pkbarbiedoll","id":1170685,"avatar_url":"https://avatars3.githubusercontent.com/u/1170685?v=4","gravatar_id":"","url":"https://api.github.com/users/pkbarbiedoll","html_url":"https://github.com/pkbarbiedoll","followers_url":"https://api.github.com/users/pkbarbiedoll/followers","following_url":"https://api.github.com/users/pkbarbiedoll/following{/other_user}","gists_url":"https://api.github.com/users/pkbarbiedoll/gists{/gist_id}","starred_url":"https://api.github.com/users/pkbarbiedoll/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pkbarbiedoll/subscriptions","organizations_url":"https://api.github.com/users/pkbarbiedoll/orgs","repos_url":"https://api.github.com/users/pkbarbiedoll/repos","events_url":"https://api.github.com/users/pkbarbiedoll/events{/privacy}","received_events_url":"https://api.github.com/users/pkbarbiedoll/received_events","type":"User","site_admin":false},"labels":[{"id":96001992,"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/labels/bugfix","name":"bugfix","color":"fbca04","default":false}],"state":"open","locked":false,"assignee":{"login":"iankko","id":8414918,"avatar_url":"https://avatars2.githubusercontent.com/u/8414918?v=4","gravatar_id":"","url":"https://api.github.com/users/iankko","html_url":"https://github.com/iankko","followers_url":"https://api.github.com/users/iankko/followers","following_url":"https://api.github.com/users/iankko/following{/other_user}","gists_url":"https://api.github.com/users/iankko/gists{/gist_id}","starred_url":"https://api.github.com/users/iankko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iankko/subscriptions","organizations_url":"https://api.github.com/users/iankko/orgs","repos_url":"https://api.github.com/users/iankko/repos","events_url":"https://api.github.com/users/iankko/events{/privacy}","received_events_url":"https://api.github.com/users/iankko/received_events","type":"User","site_admin":false},"assignees":[{"login":"iankko","id":8414918,"avatar_url":"https://avatars2.githubusercontent.com/u/8414918?v=4","gravatar_id":"","url":"https://api.github.com/users/iankko","html_url":"https://github.com/iankko","followers_url":"https://api.github.com/users/iankko/followers","following_url":"https://api.github.com/users/iankko/following{/other_user}","gists_url":"https://api.github.com/users/iankko/gists{/gist_id}","starred_url":"https://api.github.com/users/iankko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iankko/subscriptions","organizations_url":"https://api.github.com/users/iankko/orgs","repos_url":"https://api.github.com/users/iankko/repos","events_url":"https://api.github.com/users/iankko/events{/privacy}","received_events_url":"https://api.github.com/users/iankko/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2016-02-03T20:35:52Z","updated_at":"2017-10-09T19:57:26Z","closed_at":null,"author_association":"NONE","body":"**Summary**:\nnum_logs is set to 6 in `/etc/audit/auditd.conf` (auditd restarted before re-running oscap)\n\n**OS**: \n\n```\ncat /etc/redhat-release\nRed Hat Enterprise Linux Server release 7.2 (Maipo)\n(minimal install)\n```\n\n**OpenSCAP**:\n\n```\nName        : openscap\nArch        : x86_64\nVersion     : 1.2.5\nRelease     : 3.el7\nSize        : 49 M\nRepo        : installed\nFrom repo   : rhel-7-server-rpms\n```\n\n**SCAP Security Guide**:\n\n```\nName        : scap-security-guide\nArch        : noarch\nVersion     : 0.1.25\nRelease     : 3.el7\nSize        : 11 M\nRepo        : installed\nFrom repo   : rhel-7-server-rpms\n\n```\n\n**/etc/audit/auditd.conf**\n\n```\nnum_logs = 6\n```\n\n**Command used to generate report:**\n`oscap oval eval --results $file_xml --report $file_html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml`\n\n**Results:**\n\n> oval:ssg:def:738  **error**   compliance  [RHEL6_20150812], [RHEL7_20150812], [FEDORA22_20150812], [**auditd_data_retention_num_logs**]   Auditd Maximum Number of Logs to Retain\n\n**Expected Results:**\n\n> oval:ssg:def:738  **true**    compliance  [RHEL6_20150812], [RHEL7_20150812], [FEDORA22_20150812], [auditd_data_retention_num_logs]   Auditd Maximum Number of Logs to Ret\n"},"comment":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/comments/335269291","html_url":"https://github.com/OpenSCAP/scap-security-guide/issues/1030#issuecomment-335269291","issue_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/1030","id":335269291,"user":{"login":"redhatrises","id":8398836,"avatar_url":"https://avatars2.githubusercontent.com/u/8398836?v=4","gravatar_id":"","url":"https://api.github.com/users/redhatrises","html_url":"https://github.com/redhatrises","followers_url":"https://api.github.com/users/redhatrises/followers","following_url":"https://api.github.com/users/redhatrises/following{/other_user}","gists_url":"https://api.github.com/users/redhatrises/gists{/gist_id}","starred_url":"https://api.github.com/users/redhatrises/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/redhatrises/subscriptions","organizations_url":"https://api.github.com/users/redhatrises/orgs","repos_url":"https://api.github.com/users/redhatrises/repos","events_url":"https://api.github.com/users/redhatrises/events{/privacy}","received_events_url":"https://api.github.com/users/redhatrises/received_events","type":"User","site_admin":false},"created_at":"2017-10-09T19:57:26Z","updated_at":"2017-10-09T19:57:26Z","author_association":"MEMBER","body":"@pkbarbiedoll is this still an issue for you?"}}
{"actor":{"display_login":"redhatrises"}}