Gecko [ 122.154.134.11 ]

Name	Size	Permission
AUTHORS	391 B	-rw-r--r--
COPYING	25.82 KB	-rw-r--r--
ChangeLog	1.23 MB	-rw-r--r--
NEWS	30.62 KB	-rw-r--r--
README.md	3.93 KB	-rw-r--r--

Code Editor : ChangeLog

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 17:26:38 2016 -0500

Use the correct directory for output in nist_test.sh
    
    Don't dump results in root builddir

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 17:16:40 2016 -0500

Remove the forgotten R700 datastream from Makefile.am

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 17:07:41 2016 -0500

Added --outputdir to test_worker.py and started using it
    
    Also removed an unused function in test_worker.py

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 16:57:58 2016 -0500

Check the oscap return code in test_worker.py
    
    Might catch some more issues.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 16:54:32 2016 -0500

Removed the set_up and tear_down code from test_worker.py
    
    We don't add tests that require it to upstream test suite anyway. We
    can't rely on externalities.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 16:49:18 2016 -0500

Removed the R700 test from nist tests
    
    It relies on file outside of build dir and needs to be changed before we
    can include it.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 16:45:55 2016 -0500

Removed the dry-run functionality from test_worker.py
    
    We don't plan to use it in upstream test-suite.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 16:44:30 2016 -0500

Remove SCAPVal functionality from test_worker.py
    
    We don't need it in upstream because we don't plan to ship the Java
    based SCAPVal in upstream git anyway.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 16:26:15 2016 -0500

Fixed a misleading comment in nist_test.sh

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 15:52:06 2016 -0500

Double quote variables to prevent word splitting in nist_test.sh

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Dec 6 15:35:18 2016 -0500

Use absolute builddir and srcdir in nist_test.sh

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 14:18:14 2016 +0100

Add Makefiles for NIST tests and integrate them to build system

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 14:17:07 2016 +0100

Add test harness for NIST validation test suite

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:55:38 2016 +0100

Add R3300 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:54:37 2016 +0100

Add R3010 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:53:33 2016 +0100

Add R3005 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:52:31 2016 +0100

Add R2940 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:51:33 2016 +0100

Add R2920 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:50:12 2016 +0100

Add R1200 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:46:37 2016 +0100

Add R1100 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:43:21 2016 +0100

Add R700 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:40:24 2016 +0100

Add R600 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:39:20 2016 +0100

Add R500 test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:37:45 2016 +0100

Add ind_variable_test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:34:36 2016 +0100

Add ind_unknown_test

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 30 13:32:27 2016 +0100

Add ind_family_test

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Dec 1 12:39:29 2016 +0100

Merge pull request #596 from rsprudencio/maint-1.2-ds-verbose
    
    Added --verbose and --verbose-log-file to 'oscap ds rds-validate'.

Author: Raphael Sanchez Prudencio <rsprudencio@gmail.com>
Date:   Wed Nov 30 17:16:31 2016 +0100

Merge pull request #602 from mpreisler/remove_arf_workaround_with_no_applicable_checks
    
    Remove the ARF schematron workaround when there are no applicable checks

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 29 13:41:36 2016 -0500

Changed XCCDF unit tests to reflect removal of the notchecked workaround
    
    See the parent commit.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 29 12:59:30 2016 -0500

Remove the ARF schematron workaround when there are no applicable checks
    
    The workaround helps with old ARF schematron issues, see
    http://making-security-measurable.1364806.n2.nabble.com/Xccdf-dev-xccdf-rule-result-element-properties-td7582721.html
    However it also causes issues in SCAPVal which expects no check elements
    in rule-result if none are applicable.
    
    Resolves issues with SCAPVal requirements 370-1 and 370-2.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Tue Nov 29 10:19:20 2016 +0100

Added '[options]' to usage string in rds-validate.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Mon Nov 28 18:27:41 2016 +0100

Added --verbose and --verbose-log-file to 'oscap ds rds-validate'.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Nov 23 13:43:01 2016 -0500

Merge pull request #593 from rsprudencio/maint-1.2-sysinfo-docker
    
    Fixed a corner case when /etc/hostname is empty, now it sets

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 23 15:29:40 2016 +0100

Merge pull request #588 from rsprudencio/maint-1.2-improve-generate-fix
    
    Maint 1.2 improve generate fix

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Wed Nov 23 14:39:19 2016 +0100

Removed unneeded '&& true' from XCCDF applicability test scripts.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Wed Nov 23 14:28:41 2016 +0100

Fixed a corner case when /etc/hostname is empty, now it sets
    sysinfo hostname to 'Unknown' instead of an empty string.

Author: Watson Yuuma Sato <wsato@redhat.com>
Date:   Mon Nov 21 13:43:13 2016 +0100

Merge pull request #592 from rsprudencio/maint-1.2-sysinfo-coverity
    
    Fixed some warnings reported by Coverity in #590.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 21 11:17:38 2016 +0100

Bump version after release
    
    Next release from the maint-1.2 branch will be 1.2.13.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Mon Nov 21 10:57:01 2016 +0100

Fixed some warnings reported by Coverity in #590.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Wed Nov 16 11:40:18 2016 +0100

Template misleading name is actually related to fix-system,
    so we check for it everytime the user provide a template.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Wed Nov 16 11:20:55 2016 +0100

Fix XCCDF applicability make check-TEST, there were
    some semantics errors in 2 anaconda tests.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 16 11:07:14 2016 +0100

openscap-1.2.12

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 16 10:46:44 2016 +0100

Bump soname from 8.9.0 to 8.10.0
    
    Two new symbols were added, no symbols were removed.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Nov 15 09:40:38 2016 -0500

Merge pull request #574 from vvinay2/maint-1.2
    
    Skip assessment_check, scanner and discovered-datetime while parsing the CVE entry

Author: Raphael Sanchez Prudencio <rsprudencio@gmail.com>
Date:   Tue Nov 15 15:25:22 2016 +0100

Merge pull request #585 from mpreisler/export_win_namespaces
    
    Export OVAL windows namespaces as well

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Tue Nov 15 15:12:13 2016 +0100

Added --verbose support in 'oscap xccdf generate fix'

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Tue Nov 15 15:10:55 2016 +0100

Removed fix filtering by applicability, which was filtering fixes
    matching CPE for the running machine that might be different
    from the scanned one.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 15 14:57:02 2016 +0100

Merge pull request #586 from mpreisler/replace_old_arfrel_ns
    
    Replace old arfrel ns

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 15 08:13:30 2016 -0500

Fixed the rountrip OVAL results serialization test, it was missing the win NS

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 15 07:51:57 2016 -0500

Added a comment about arfrel deprecation to rds_index.c

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 15 07:49:43 2016 -0500

NIST SP800-126 errata unified namespaces for arf vocabulary, let's use the new variant
    
    Resolves:
    WARN : SCHEMATRON - [G2.R3010.results_arf.xml] NIST SP800-126 errata has updated the "arf-rel" namespace to http://scap.nist.gov/specifications/arf/vocabulary/relationships/1.0# The original namespace of http://scap.nist.gov/vocabulary/arf/relationships/1.0# has been detected.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 15 07:16:12 2016 -0500

Export OVAL windows namespaces as well
    
    This fixes validation issues with CPE OVALs that check for multiple platforms.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 15 13:13:19 2016 +0100

Merge pull request #584 from mpreisler/segfault_fix_oval_ocil_mappings
    
    Create XCCDf session result maps even when no oval agents are set

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 15 05:39:23 2016 -0500

Create XCCDf session result maps even when no oval agents are set
    
    Resolves:
    Program received signal SIGSEGV, Segmentation fault.
    oscap_htable_lookup (htable=0x0, key=0x14c3470 "r3300-OCIL.xml") at list.c:441
    
    0  oscap_htable_lookup (htable=0x0, key=0x14c3470 "r3300-OCIL.xml") at list.c:441
    1  0x00007ffff7b285d9 in oscap_htable_get (htable=<optimized out>, key=<optimized out>) at list.c:495
    2  0x00007ffff7b3206d in ds_rds_report_inject_check_content_ref (arf_report_mapping=0x0,
        check_content_ref=0x14c05a0) at rds.c:460
    3  ds_rds_report_inject_rule_result_check_refs (doc=<optimized out>, rule_result=0x14bfbc0,
        arf_report_mapping=0x0) at rds.c:483
    4  ds_rds_report_inject_rule_result_refs (doc=<optimized out>, test_result_node=<optimized out>,
        arf_report_mapping=0x0) at rds.c:499
    5  ds_rds_report_inject_refs (report=report@entry=0x14bcb10,
        asset_id=asset_id@entry=0x14c2bc0 "asset0", arf_report_mapping=arf_report_mapping@entry=0x0,
        doc=<optimized out>) at rds.c:585
    6  0x00007ffff7b32a35 in ds_rds_add_xccdf_test_results (
        report_request_id=0x7ffff7b9830c "collection1", arf_report_mapping=0x0, assets=0x1498300,
        relationships=0x14980c0, xccdf_result_file_doc=0x1474db0, reports=0x14b8830, doc=0x1497d80)
        at rds.c:658
    7  ds_rds_create_from_dom (arf_report_mapping=0x0, oval_result_mapping=0x0, oval_result_sources=0x0,
        xccdf_result_file_doc=0x1474db0, sds_doc=<optimized out>, ret=<synthetic pointer>) at rds.c:723
    8  ds_rds_create_source (sds_source=<optimized out>, xccdf_result_source=<optimized out>,
        oval_result_sources=0x0, oval_result_mapping=0x0, arf_report_mapping=0x0,
        target_file=0x1473cb0 "benchmark1.results_arf.xml") at rds.c:757
    9  0x00007ffff7b8b16c in xccdf_session_create_arf_source (session=0x61ca80) at xccdf_session.c:229
    10 0x00007ffff7b8cf25 in xccdf_session_create_arf_source (session=0x61ca80) at xccdf_session.c:1446
    11 xccdf_session_export_arf (session=session@entry=0x61ca80) at xccdf_session.c:1428
    12 0x000000000040beb0 in app_evaluate_xccdf (action=0x7fffffffde90) at oscap-xccdf.c:523
    13 0x0000000000408120 in oscap_module_call (action=0x7fffffffde90) at oscap-tool.c:261
    14 oscap_module_process (module=0x6154e0 <XCCDF_EVAL>, module@entry=0x614a60 <OSCAP_ROOT_MODULE>,
        argc=argc@entry=8, argv=argv@entry=0x7fffffffe128) at oscap-tool.c:346
    15 0x00000000004071bf in main (argc=8, argv=0x7fffffffe128) at oscap.c:80

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 14 14:26:04 2016 -0500

Merge pull request #583 from jan-cerny/fix_complex_check_in_arf_results
    
    Fix injecting references to check-content-ref@href

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 14 18:58:35 2016 +0100

Fix injecting references to check-content-ref@href
    
    This enables to reference OVAL results in arf:report
    if the XCCDF rule contains xccdf:complex-check.
    Previously xccdf:complex-check were ignored.

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 14 04:35:20 2016 -0500

Merge pull request #582 from jan-cerny/fix_arf_scapval_errors
    
    Fix invalid ARF results

Author: Watson Yuuma Sato <wsato@redhat.com>
Date:   Fri Nov 11 17:57:52 2016 +0100

Merge pull request #567 from mpreisler/sds_schematron_version
    
    Changed sds schematron-version attribute to the latest, 1.2

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Nov 11 13:03:33 2016 +0100

Add const modifiers on some variables

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Nov 11 12:59:21 2016 +0100

Remove an outdated comment

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 22:57:06 2016 +0100

Fix invalid free function

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 22:00:02 2016 +0100

Inject references to arf:report in xccdf:check-content-ref
    
    We have to replace the check-content-ref@href attribute. Originally
    it contains refernce to OVAL definitions. Instead, we need to put there
    ID of arf:report element that conatins OVAl result document with evaluation
    results for the referenced OVAl check.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 21:57:43 2016 +0100

Pass arf:report IDs into ds_rds_report_inject_refs

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 21:55:44 2016 +0100

Pass arf:report IDs to ds_rds_add_xccdf_test_results
    
    We will need soon arf:report IDs to use them in
    xccdf:check-content-ref@href attribute.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 21:33:37 2016 +0100

Use ARF report ID while creating ARF report
    
    Instead of XCCDF Benchmark ID, we will put the real OVAL results ID
    as ARF report ID. This will allow us to reference the part of
    ARF report conataining OVAL results. We will use this ID in
    xccdf:rule-result/check-content-ref@href attribute.
    We need to figure out which OVAL results corresponds with
    which OVAL definitions document, so we use the mapping hash tables
    we created and passed in previous commits.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 21:20:04 2016 +0100

Pass the mappings to ds_rds_create_source

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 16:48:31 2016 +0100

Populate results_mapping and arf_report_mapping with data

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 10 14:17:55 2016 +0100

Add mappings of OVAL filename into XCCDF session
    
    This commit adds two new hash tables that will contain mapping from
    OVAL definitions filename to ARF report ID and OVAL results filename.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Nov 8 10:57:42 2016 -0500

Merge pull request #578 from OpenSCAP/revert-575-maint-1.2-add-rhel-computenode-cpe
    
    Revert "RHEL 6 ComputeNode CPE and RHEL 7 ComputeNode CPE"

Author: Watson Yuuma Sato <wsato@redhat.com>
Date:   Tue Nov 8 15:41:33 2016 +0100

Revert "RHEL 6 ComputeNode CPE and RHEL 7 ComputeNode CPE"

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 8 05:18:03 2016 -0500

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 7 12:29:23 2016 -0500

Merge pull request #577 from rsprudencio/maint-1.0-spb_pick_refactor
    
    Small refactor in spb_pick() fix when size == 0, just return

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Mon Nov 7 17:51:30 2016 +0100

Small refactor in spb_pick() fix when size == 0, just return
    right away instead of getting inside of copy block.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Nov 7 10:24:45 2016 -0500

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 7 10:24:22 2016 -0500

Merge pull request #576 from rsprudencio/maint-1.0-sexp_parser_issue
    
    Fixed spb_pick() to add 0 sized S-Expression even if our

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Mon Nov 7 14:16:59 2016 +0100

Fixed spb_pick() to add 0 sized S-Expression even if our
    position index points to end of the string.

Author: Raphael Sanchez Prudencio <rsprudencio@gmail.com>
Date:   Mon Nov 7 13:20:46 2016 +0100

Merge pull request #560 from radzy/20161019-osrelease-singoovi
    
    Update is_wrlinux to check /etc/os-release

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 7 05:55:24 2016 -0500

Merge pull request #575 from yuumasato/maint-1.2-add-rhel-computenode-cpe
    
    RHEL 6 ComputeNode CPE and RHEL 7 ComputeNode CPE

Author: Watson Sato <wsato@redhat.com>
Date:   Mon Nov 7 07:44:43 2016 +0100

RHEL 6 ComputeNode CPE and RHEL 7 ComputeNode CPE
    
    Adding definitions to openscap-shipped CPE dictionary.
    Related to rhbz#1311054.

Author: V Vinay <vvinay@hpe.com>
Date:   Mon Nov 7 11:07:36 2016 +0530

Skip assessment_check, scanner and discovered-datetime while parsing the CVE entry
    
    Skip assessment_check, scanner and discovered-datetime while parsing the
    CVE entry

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Nov 4 12:51:18 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Nov 4 12:50:25 2016 -0400

Remove author and date info from manual.adoc
    
    It's very challenging to keep it up to date. Please use git to get the
    list of contributors and latest changed date.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 2 17:03:06 2016 +0100

Fix shebangs
    
    /usr/bin/bash is not present on every system, eg. RHEL6.
    Let's replace these with a more universal /bin/bash.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 27 14:38:59 2016 -0400

Change @style from SCAP_1.1 to SCAP_1.2 when converting XCCDF from 1.1 to 1.2

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 2 13:37:20 2016 +0100

Merge pull request #572 from OpenSCAP/html_guide_anchors
    
    Add [ref] links to HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 1 19:59:49 2016 -0400

Provide [ref] links next to xccdf Rules as well.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Nov 1 19:57:24 2016 -0400

Provide a [ref] link next to group titles in HTML guide
    
    This way users can right click and copy link. This link will go to that
    XCCDF group. This is a very practical way to reference XCCDF groups.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Nov 1 12:16:48 2016 -0400

Merge pull request #569 from yuumasato/maint-1.2-fix-leak-tailoring_source
    
    Fixing a resource leak reported by coverity scan

Author: T.O. Radzy Radzykewycz <radzy@windriver.com>
Date:   Wed Oct 19 16:54:38 2016 -0700

Update is_wrlinux to check /etc/os-release
    
    Instead of checking the presence of /etc/wrlinux-release, we open
    /etc/os-release and check for the CPE_NAME entry.
    
    Signed-off-by: T.O. Radzy Radzykewycz <radzy@windriver.com>

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Nov 1 10:28:41 2016 -0400

Merge pull request #559 from rsprudencio/maint-1.2-offline-sysinfo
    
    Temporary fix to remove the need of environment variables

Author: Watson Sato <wsato@redhat.com>
Date:   Tue Nov 1 15:14:38 2016 +0100

Fixing a resource leak reported by coverity scan
    
    Memory allocated by oscap_source_new_from_xmlDoc() to tailoring_source was not freed.
    The fix relies on the fact that freeing an oscap_source also frees the
    xmlDoc used in its creation.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Nov 1 09:43:14 2016 -0400

Merge pull request #561 from jan-cerny/issue475
    
    Issue#475: RHBZ#1387248: Fix oscap-docker reporting incompliance

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Oct 24 10:30:07 2016 +0200

Issue#475: RHBZ#1387248: Fix oscap-docker reporting incompliance
    
    Compliance scan of a Docker image/container using oscap-docker reported
    incorrectly that there had been an error even if scan had been successful
    but incompliance of the assessed system had been found.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Tue Nov 1 10:09:20 2016 +0100

Fixed free logic making it more simple in system_info probe.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Mon Oct 31 18:31:56 2016 +0100

Added support for POSIX Regex in system_info probe.
    
    Refactored the code to move regex compilation outside loops.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 27 15:24:30 2016 -0400

Changed sds schematron-version attribute to the latest, 1.2

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 20 15:25:03 2016 +0200

RHBZ#1387166: Fix oscap-docker man page inconsistence

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Thu Oct 20 09:55:13 2016 +0200

Fixed file descriptors leak in offline system_info probe.

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Wed Oct 19 17:07:54 2016 +0200

Temporary fix to remove the need of environment variables
    to feed system_info for chroot/vm scans, it currently relies
    on the use of grub2.
    
    Small change in system_info probe logic, it doesn't fail if
    it was not possible to collect system_info, it reports as
    "Unknown" OS name/version/arch and hostname.

Author: Zbyněk Moravec <moraveczbynek@gmail.com>
Date:   Wed Oct 19 15:08:01 2016 +0200

Merge pull request #555 from mpreisler/sce_separate_stderr
    
    Separate stderr from stdout in SCE

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 14 19:44:36 2016 +0200

Bump version after release
    
    Next version from the maint-1.2 branch will be 1.2.12.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 13 16:24:40 2016 +0200

openscap-1.2.11

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 13 16:15:21 2016 +0200

Bump soname from 8.8.1 to 8.9.0
    
    6 symbols were added, no symbols were removed.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Oct 13 15:27:03 2016 -0400

Merge pull request #556 from ybznek/maint-1.2
    
    Print error message if oscap loads bz2 files and doesn't support them

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Oct 13 20:14:41 2016 +0200

Print error if oscap doesn't support bz2

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Oct 13 20:04:14 2016 +0200

benchmark.c: fix indentation (fix GCC hint)

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 13 14:00:25 2016 -0400

Fixed comment in SCE engine
    
    Indentation and mention that we now use 2 separate pipes

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 13 13:59:41 2016 -0400

Fix error checking when opening the SCE stderr pipe

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 13 13:58:15 2016 -0400

Add optional stderr element to SCE result schema
    
    It's optional so that SCE results generated in older versions of
    OpenSCAP validate with newer versions of OpenSCAP.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 13 12:09:29 2016 -0400

Use the separate stderr SCE result in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 13 12:04:12 2016 -0400

Don't interleave stdout and stderr, separate them in SCE

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 13 13:44:27 2016 +0200

Merge branch 'maint-1.0' into maint-1.2

Author: Zbyněk Moravec <moraveczbynek@gmail.com>
Date:   Mon Oct 10 14:24:37 2016 +0200

Merge pull request #552 from GautamSatish/update_suse11_cpe
    
    Update SUSE 11 CPE

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Oct 10 13:41:58 2016 +0200

Merge pull request #553 from rsprudencio/maint-1.0-fix-arithmetic
    
    Fix a bug in Arithmetic complex function

Author: Raphael Sanchez Prudencio <rsprudencio@redhat.com>
Date:   Thu Oct 6 18:25:48 2016 +0200

Fix a bug in Arithmetic complex function, it was not
    following specification, it should attempt to cast a
    value to correct type before reporting an error.

Author: Gautam Satish <gautams@hpe.com>
Date:   Wed Oct 5 21:26:14 2016 -0700

Update SUSE 11 CPE

Author: Zbyněk Moravec <moraveczbynek@gmail.com>
Date:   Wed Oct 5 15:54:07 2016 +0200

Merge pull request #551 from ybznek/maint-1.2-remediation-report
    
    xccdf-share.xsl: HTML report - fix empty table

Author: Zbyněk Moravec <moraveczbynek@gmail.com>
Date:   Wed Oct 5 15:08:46 2016 +0200

Merge pull request #549 from jan-cerny/tailoring_external_datastream
    
    Add support for tailoring of external datastreams

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Oct 5 14:58:06 2016 +0200

xccdf-share.xsl: HTML report - fix empty table
    
    If these attributes are not provided we don't want to print
    empty table.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Oct 4 15:34:34 2016 +0200

Add support for tailoring of external datastreams

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Oct 3 13:54:04 2016 -0400

Merge pull request #547 from ybznek/maint-1.2-tailor2
    
    enable oscap oval eval --fetch-remote-resources + cleanup

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Oct 3 13:52:30 2016 -0400

Merge pull request #548 from ybznek/maint-1.2-remediation-report
    
    xccdf report: Add fix attributes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 3 14:56:43 2016 +0200

xccdf report: Add fix attributes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 3 11:23:51 2016 +0200

ds_sds_session_set_remote_resources() set default callback instead of NULL
    
    Like nullobject design pattern

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 3 11:15:31 2016 +0200

download_reporting_callback: Print always to stderr

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 3 10:31:44 2016 +0200

move xccdf_download_cb.h => oscap_download_cb.h
    
    Download CB isn't related to XCCDF

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 3 10:25:28 2016 +0200

Deduplicate reporting_callback

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 3 10:01:55 2016 +0200

Enable oscap oval eval --fetch-remote-resources

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Sep 29 12:42:01 2016 -0400

Merge pull request #546 from redhatrises/add_puppet_report
    
    Add puppet to report generation

Author: Gabe <redhatrises@gmail.com>
Date:   Thu Sep 29 09:19:10 2016 -0600

Add puppet to report generation

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Sep 29 16:53:40 2016 +0200

Merge pull request #534 from ybznek/maint-1.2-tailor2
    
    Add support for external (http) components

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 29 15:13:49 2016 +0200

sds.c: Add Warning prefix

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 29 15:12:41 2016 +0200

sds.c: Fix indentation

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 29 14:39:09 2016 +0200

sds.c: Workaround for multiple components
    
    We weren't checking return values of caller functions, so
    we ignored return value & error state. In previous commits
    I started to check return values, but it broke some use
    cases. So rather then ignore all error states, we will ignore
    only error caused by adding already added component.
    https://github.com/OpenSCAP/openscap/issues/545

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 29 13:18:27 2016 +0200

sds.c: fix return value

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 15:27:16 2016 +0200

oscap ds sds-split: enable --fetch-remote-resources

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 14:16:39 2016 +0200

man: Add --fetch-remote-resources to info

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 14:16:05 2016 +0200

bash completion: Add --fetch-remote-resources to info

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 13:38:21 2016 +0200

sds.c: Always exit oscap if cannot fetch remote resources

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 13:34:03 2016 +0200

sds.c: Reduce scope of variables

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 13:25:21 2016 +0200

Fix english

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 13:19:56 2016 +0200

sds.c: Fix output for workbench

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 26 13:19:05 2016 +0200

sds.c: Add "\n" after ok/error status

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Sep 21 10:10:46 2016 +0200

oscap_acquire_url_download: Enable redirect
    
    We need it for certification R2910

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Sep 21 09:50:39 2016 +0200

rename function ds_sds_dump_component -> ds_sds_dump_local_component
    
    Currently we have ...dump_remote_component, ...dump_file_component. Renaming should
    make name more explicit

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 19 15:08:12 2016 +0200

oscap-info: Add support for --fetch-remote-resources

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 19 14:33:54 2016 +0200

DS: improve downloading status

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 19 13:16:48 2016 +0200

Download callback: cleanup
    
    Use "null object" design pattern & merge two same types

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 19 09:24:15 2016 +0200

sds.c: Print warning if --fetch-remote-resources is not allowed

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 20:43:54 2016 +0200

sds.c: Allow to download external content (http)

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 20:20:51 2016 +0200

sds.c: Introduce ds_sds_dump_component_by_href
    
    Move part of function to this function

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 20:02:11 2016 +0200

sds.c: Remove "filename" parameter ds_sds_dump_component()
    
    Function doesn't need to support loading of files, yet.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 20:00:38 2016 +0200

sds.c: Refactoring: use ds_sds_dump_file_component
    
    Start to use function introduced in previous commit

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 19:58:56 2016 +0200

sds.c: Refactoring: create compose_target_filename_dirname
    
    Move part of function to another function

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 19:52:56 2016 +0200

sds.c: Refactoring: create ds_sds_dump_file_component
    
    Currently not used - similar to ds_sds_dump_component

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 19:42:13 2016 +0200

sds.c: Refactoring: create ds_sds_get_component_root_by_id
    
    move part of function to another function

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 19:36:52 2016 +0200

sds.c: Refactoring: ds_sds_register_component

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 19:27:17 2016 +0200

sds.c: Refactoring: create ds_sds_register_xmlDoc
    
    Move part of function to another function

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 19:22:13 2016 +0200

sds.c: Refactoring: create ds_sds_register_sce
    
    Move part of function to another function

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 17:23:40 2016 +0200

sds.c: Refactoring: create ds_sds_register_component
    
    Move part of function to separate function

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 26 16:00:29 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Sep 26 14:53:10 2016 -0400

Merge pull request #536 from jan-cerny/tailoring_fix
    
    Support tailoring of a checklist located in a different datastream

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Sep 26 15:44:14 2016 +0200

Fix memory leaks

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Sep 26 15:23:39 2016 +0200

add a simple test for tailoring in datastreams

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Mon Sep 26 11:57:38 2016 +0200

Merge pull request #538 from jan-cerny/issue529
    
    Issue #529: Fix a segmentation fault

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Sep 26 10:01:36 2016 +0200

Merge pull request #540 from yuumasato/maint-1.0-fetch-remote-resource-warning
    
    Consider suggestion to use "--fetch-remote-resources" a warning

Author: Watson Sato <wsato@redhat.com>
Date:   Thu Sep 22 17:43:46 2016 +0200

Consider suggestion to use "--fetch-remote-resources" a warning
    
    SCAP Workbench is parsing this message as progress status and
    showing errors, while actually this message is a warning.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Sep 22 15:04:38 2016 +0200

Issue #529: Fix a segmentation fault
    
    Strings expected in format strings were not supplied.
    Compiler was OK with that because it is a function with
    variable count of parameters.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Sep 22 12:42:40 2016 +0200

Support tailoring of a checklist located in a different datstream
    
    This commit fixes processing of tailoring within datastreams.
    It is now possible to have a datastream collection with multiple datastreams,
    where XCCDF tailoring and XCCDF checklist are not both in the same datastream.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 21 14:16:55 2016 -0400

Merge branch 'maint-1.2-doc2' of https://github.com/ybznek/openscap into ybznek-maint-1.2-doc2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 21 12:41:18 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Sep 21 12:40:54 2016 -0400

Merge pull request #518 from ybznek/maint-1.0-doc
    
    Add missing manual sections

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:23:20 2016 +0200

manual.adoc: OVAL: add --without-syschar paragraph

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 15:53:30 2016 +0200

manual.adoc: Fix grammar

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:42:45 2016 +0200

manual.adoc: Evaluation of content use passive

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:37:14 2016 +0200

manual.adoc: Evaluation of content: can contains -> can contain

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:36:21 2016 +0200

manual.adoc: tailoring - use passive

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:32:34 2016 +0200

manual.adoc: Despite of -> Instead of

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:31:49 2016 +0200

manual.adoc: change fetch -> download

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:26:35 2016 +0200

manual.adoc: change is -> are

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:25:53 2016 +0200

manual.adoc: CCE,CVE identifiers - add explanation

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 09:22:25 2016 +0200

manual.adoc: OVAL rewrite to passive form

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 1 14:39:46 2016 +0200

manual.adoc: directives file

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 5 13:26:42 2016 +0200

manual.adoc: Add tailoring

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Aug 31 13:15:19 2016 +0200

manual.adoc: Add example of evaluation without profile

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Aug 31 09:39:22 2016 +0200

manual.adoc: Add patches are up-to-date section

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 5 13:20:28 2016 +0200

manual.adoc: Add <rule-result> to identifiers

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 21 13:02:27 2016 +0200

Merge pull request #533 from yuumasato/maint-1.0
    
    Fix results of XCCDF rules with @role="unscored".

Author: Watson Sato <wsato@redhat.com>
Date:   Wed Sep 21 10:47:35 2016 +0200

Fix indentation

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 21 10:45:19 2016 +0200

Merge pull request #531 from ybznek/maint-1.2-tailor3
    
    Loading of external components

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 16:01:08 2016 +0200

tests: Load external xccdf component

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 16:18:42 2016 +0200

sds.c: Add support to reference external WHOLE file

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 15:31:23 2016 +0200

sds.c: Fix error checking

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 16 15:24:06 2016 +0200

sds.c: Load file from right relative path

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 13 19:06:41 2016 +0200

sds.c: Fix memory leaks

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 13 17:12:57 2016 +0200

sds.c: Allow load components using xlink file:

Author: Watson Sato <wsato@redhat.com>
Date:   Mon Sep 19 15:44:00 2016 +0200

Fix results of XCCDF rules with @role="unscored".
    
    When a XCCDF rule has @role="unscored", perform all the checks but mark
    the result as XCCDF_RESULT_INFORMATIONAL.
    
    https://github.com/OpenSCAP/openscap/issues/525

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Sep 19 10:47:43 2016 -0400

Merge pull request #530 from ybznek/maint-1.2-wi
    
    bash_completion: add --without-syschar

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 19 15:15:29 2016 +0200

bash_completion: add --without-syschar

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 16 10:14:21 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Sep 16 10:13:56 2016 -0400

Merge pull request #527 from yuumasato/maint-1.0-fix-export-override
    
    Fix export of overrided oscap_text

Author: Watson Sato <wsato@redhat.com>
Date:   Fri Sep 16 11:47:38 2016 +0200

Only export override attribute when necessary
    
    Export override attribute of oscap_text only when the element can
    override parent value and it does override the value.
    
    The default value for override is false, there is no need to export it
    if it`s false.

Author: Watson Sato <wsato@redhat.com>
Date:   Thu Sep 15 18:19:34 2016 +0200

Fix export of overrided oscap_text
    
    This change allows attributes marked as overriders by
    oscap_text_set_override() to be exported.
    
    Exportation of an overrider attribute is conditioned by override_given.
    But override_given is only set when an imported attribute has override
    capability set. So, when an oscap_text was marked as overrider by
    oscap_text_set_set_override() the attribute was never exported.
    
    Related to RHBZ#1320194.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Sep 13 11:20:40 2016 +0200

Merge pull request #523 from ybznek/without-syschar
    
    Added support to not to export system characteristics

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 15:48:50 2016 +0200

test_without_syschars.sh: Update --without-syschars -> --without-syschar

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 15:44:46 2016 +0200

utils/oscap.8: Add --without-syschar

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 12 15:41:05 2016 +0200

change --without-syschars => --without-syschar

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Sep 12 12:43:21 2016 +0200

Merge pull request #521 from ybznek/maint-1.2-disable-ansible
    
    xccdf_policy_remediate.c: Disable run of ansible remediation

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Sep 11 19:59:40 2016 +0200

Add test for --without-syschars

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Sep 11 19:45:33 2016 +0200

Add --without-syschars option
    
    http://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.7511r4.pdf req. SCAP.R.1900
    
    What are system characteristics?
    http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-126r1.pdf page 27

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 6 20:15:24 2016 +0200

xccdf_policy_remediate.c: Remove ansible support
    
    We cannot run ansible snippet easily, now - due to missing header

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Sep 9 09:52:58 2016 -0400

Merge pull request #522 from ybznek/maint-1.2-generate-fix
    
    ansible generate fix - add header & indentation

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 9 13:24:01 2016 +0200

xccdf_policy_remediate.c: Prevent unwanted run of ansible
    
    This force users to check output & add right host

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 6 14:14:58 2016 -0400

Show remediation as collapsed by default, add a button to HTML guide and report to expand
    
    Remediations can be quite long and this improves the UX of HTML guide
    and report.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 6 18:09:32 2016 +0200

xccdf_policy_remediate.c: Add correct ansible indentation
    
    When we generate ansible playbook with header, we need to add indentation to
    ansible tasks

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 6 13:51:15 2016 -0400

Show the type of remediation script, shell script vs ansible snippet in HTML guide and report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 6 13:42:40 2016 -0400

Moved the remediation description labels in report and guide to xccdf-share.xsl

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 6 13:40:34 2016 -0400

Moved the remediation script label in report and guide to xccdf-share.xsl

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 6 17:40:01 2016 +0200

xccdf_policy_remediate.c: Add ansible header to fix output

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 6 17:30:01 2016 +0200

xccdf_policy_remediate.c: Split _write_text_to_fd_and_free

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Sep 5 10:46:03 2016 -0400

Merge pull request #517 from ybznek/maint-1.2-tailoring-fix
    
    xccdf_session.c: Fix free of dirname

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 5 10:32:44 2016 +0200

xccdf_session.c: Fix free of dirname
    
    RHBZ: #1367896
    According to man page, dirname can return pointer to original
    path. So we should not call free on returned value

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Mon Sep 5 09:40:38 2016 +0200

Merge pull request #516 from ybznek/maint-1.0-manual-fix
    
    update repository name

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 1 10:42:40 2016 +0200

update repository name

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Sep 1 10:58:06 2016 +0200

Merge pull request #515 from ybznek/maint-1.0-manual
    
    manual.adoc: Update repository path

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 1 10:42:40 2016 +0200

update repository name

Author: Ján Lieskovský <jlieskov@redhat.com>
Date:   Wed Aug 31 11:46:12 2016 +0200

Merge pull request #514 from ybznek/maint-1.0-doc
    
    manual.adoc: Updates/Fixes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Aug 31 00:24:21 2016 +0200

manual.adoc: Change openscap -> OpenSCAP

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Aug 31 00:19:09 2016 +0200

manual.adoc: Fix SCE URL

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Aug 31 00:30:18 2016 +0200

manual.adoc: Fix XLS -> XSL

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Fri Aug 19 18:33:20 2016 +0200

Merge pull request #511 from radzy/2016-08-16-wrlinux-maint-iejah2ua
    
    Initial Wind River Linux support

Author: T.O. Radzy Radzykewycz <radzy@windriver.com>
Date:   Fri Jul 29 08:14:02 2016 -0700

Initial Wind River Linux support
    
    Signed-off-by: T.O. Radzy Radzykewycz <radzy@windriver.com>

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 10 14:45:15 2016 -0400

Use the cached rule-result test-result lookup in both leaf and detail templates in HTML report
    
    new: 0m0.700s
    old: 0m0.848s

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 10 14:42:49 2016 -0400

Cache test result rule result lookup when generating HTML report
    
    This may only be worth it if the ARF has a limited amount of TestResult elements.
    In our typical cases it's one TestResult per ARF and very rarely more.
    
    new: 0m0.848s
    old: 0m0.994s

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 10 14:11:46 2016 -0400

Added a comment about correctness of the 'references' XSLT map
    
    Wanted to fix it but then realized it was correct from the beginning.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 10 14:06:40 2016 -0400

Very small optimization in get-all-references in HTML report XSLT
    
    <5% but it simplified the queries which makes it simpler for me to
    optimize further.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 10 13:58:27 2016 -0400

Don't lookup profile selects the brute force method
    
    Oh man, another 50+% saved...
    
    new: 0m0.219s
    old: 0m0.506s
    
    --Martin, the XSLT optimizer!

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 10 13:41:43 2016 -0400

Use a separator when mapping the benchmark @id and Value @id to Value elements
    
    To be on the safe side...

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 10 13:38:35 2016 -0400

Do not look up cdf:Value by ID brute-force in HTML reports and guides
    
    Instead, make a map that maps benchmark/@id and the value/@id to the
    element.
    
    This saves roughly 50% of the time generating guides...
    
    new: 0m0.506s
    old: 0m0.921s

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 8 17:21:33 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 8 17:20:53 2016 -0400

Allow NULL to be passed to xccdf_policy_model_set_tailoring
    
    This enables us to reset tailoring after it has previously been set to
    something. Not very useful for the oscap tool but very useful for SCAP
    Workbench.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Aug 5 15:32:49 2016 -0400

Updated jQuery to 1.12.4
    
    Bugfixes, improved browser compatibility, ...

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Aug 5 15:29:14 2016 -0400

Updated bootstrap to 3.3.7
    
    Bugfixes, improved browser compatibility.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Aug 5 15:13:50 2016 -0400

Optimized xccdf_1.1_remove_dangling_sub.xsl, now it takes 25% of the time
    
    It's the same thing again, avoid looking up through huge nodesets
    repeatedly.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 4 17:35:54 2016 -0400

Show which profiles are abstract when doing `oscap info`
    
    We suggest `oscap info` when user selects the wrong profile ID. oscap
    info shows all profiles, including abstract profiles. But abstract
    profiles disappear after benchmark is resolved. So they can't be
    selected even though they are shown in `oscap info` This left me very
    confused when I just encountered it.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 1 14:46:19 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 1 14:44:33 2016 -0400

W/o optional deps openscap will be compiled without some features
    
    You don't have to turn off the features yourself, it will be done
    automatically. Thanks goes to Rongli Shi for notifying us about this
    confusion in the README.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jul 29 14:42:36 2016 -0400

Use build_opener() in get_cve_input.py, it's simpler and honors proxy settings
    
    See https://bugzilla.redhat.com/show_bug.cgi?id=1351952

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 27 17:04:15 2016 -0400

More optimization in HTML report generation, only lookup rule-results once
    
    Not as dramatic of a speed-up as before but 15% is not too shabby.
    
    old: real       0m1.212s
    new: real       0m1.010s

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 27 16:57:43 2016 -0400

Optimization when generating HTML reports, lookup child rules once
    
    *facepalm*
    
    old: real       0m2.917s
    new: real       0m1.212s

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 17:53:14 2016 -0400

Slighly cut down the nodeset when figuring out the list of all references

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 17:06:41 2016 -0400

More optimization in xccdf_1.1_to_1.2.xsl
    
    We now only do 4 full nodeset lookups and that's it, for everything else
    we use keys. This saves another 50%. Overall the XSLT is now 100x faster
    now.
    
    This optimization was more for consistency than for performance, the 50%
    saved is roughly 170ms for SCAP Security Guide benchmarks.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 16:45:50 2016 -0400

Optimized xccdf_1.1_to_1.2.xsl by a factor of about 50
    
    Using xsl:key instead of horrible full nodeset lookups is a good idea...
    
    old: real       0m17.295s
    new: real       0m0.296s

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 16:28:05 2016 -0400

Optimized xccdf_1.1_to_1.2.xsl @idref translation
    
    It's still pretty stupid and does subtree lookups but this shaves off a
    lot of processing time. This transformation is used for SSG builds of
    all the products so optimizing it greatly improves SSG build times.
    
    old: [0]    99.04   27.813    0.000   3526     @idref[parent::xccdf_11:*][not(parent::xccdf_11:platform)][not(parent::xccdf_11:requires)] [0]
    new: [0]    98.44   16.831    0.000   3526     @idref[parent::xccdf_11:*][not(parent::xccdf_11:platform)][not(parent::xccdf_11:requires)] [0]

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 14:38:09 2016 -0400

Optimized cdf:sub in xccdf-share.xsl
    
    Fairly basic stuff, let's not do lookups twice, let's not do them when
    we don't have to.
    
    old: [0]    61.03    0.557    0.000     95     cdf:sub[sub-testresult] [0]
    new: [0]    47.56    0.321    0.000     95     cdf:sub[sub-testresult] [0]

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 14:19:56 2016 -0400

Refactored the cdf:sub template in xccdf-share
    
    In preparation for optimization.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 11:29:32 2016 -0400

Count number of selected rules in HTML guide using string-length
    
    No idea wtf I was thinking counting the number of substrings there...
    This only saves 5% but still, why not...

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 26 11:20:43 2016 -0400

Minor optimization in xccdf-guide-impl.xsl, saves about 15%

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 19 13:38:50 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jul 19 13:34:07 2016 -0400

Merge pull request #501 from ybznek/maint-1.0
    
    Fix format string of debug message

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Jul 19 18:43:32 2016 +0200

Fix format string of debug message

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jul 19 11:15:03 2016 -0400

Merge pull request #498 from ybznek/maint-1.0
    
    Refactoring: Remove misleading indexing

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jul 18 13:31:26 2016 +0200

Remove misleading indexing

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jul 15 14:20:32 2016 -0400

Use /bin/bash as the interpreter for sectool scripts
    
    There won't be much difference between /usr/bin/env bash and /bin/bash
    in practical use-cases but it triggers warnings with various automated
    QA tools.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 15 15:04:59 2016 +0200

Merge pull request #497 from ybznek/maint-1.0-indent
    
    Fix some gcc warnings

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 15 15:00:48 2016 +0200

Merge pull request #496 from ybznek/maint-1.0-static
    
    oval_probe_session.c: Add missing 'static'

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 15 14:56:33 2016 +0200

Merge pull request #495 from ybznek/maint-1.0
    
    tests/process58: some minor patches

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 15 13:58:44 2016 +0200

cpename.c: Delete CPE_SEP_CHAR
    
    This constant is unused and ':' is used in many
    places, including regexp etc. So usage of the
    constant will not improve readability

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 15 13:49:51 2016 +0200

xccdf_policy.c: Fix indentation

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 15 13:43:15 2016 +0200

oval_probe_session.c: Add missing 'static'

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 15 13:27:08 2016 +0200

tests/process58: Increase wait time for processess

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 15 13:21:59 2016 +0200

tests/process58: improve performance of test
    
    We wait for processes later, so they could be loaded
    during start of other processes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 15 13:09:03 2016 +0200

tests/process58: fix some shellcheck warnings

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jul 14 12:12:35 2016 +0200

Merge branch 'maint-1.0' into maint-1.2
    
     Conflicts:
            src/OVAL/probes/probe/icache.c
            tests/probes/file/Makefile.am

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Jul 13 20:22:11 2016 -0400

Merge pull request #494 from ybznek/maint-1.0
    
    icache.c: refactoring

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 13 19:50:30 2016 +0200

probes/icache.c: Don't pass to function useless parameter

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 13 19:36:42 2016 +0200

probes/icache.c: introduce icache_add_to_tree

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 13 19:10:06 2016 +0200

probes/icache.c: Refactor icache_lookup

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 13 18:52:59 2016 +0200

probes/icache.c: introduce icache_lookup

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Wed Jul 13 19:10:59 2016 +0200

Merge pull request #492 from jan-cerny/icache_refactoring
    
    Unlock the mutex after signaling

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 13 19:09:00 2016 +0200

Merge pull request #491 from ybznek/maint-1.0
    
    call signal in mutex

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 13 18:27:01 2016 +0200

Unlock the mutex after signaling

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 13 18:18:26 2016 +0200

probes/icache.c: Refactoring
    
    don't fix indentation, I expect more changes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 13 17:59:25 2016 +0200

probes/icache.c: Refactoring

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 13 18:00:57 2016 +0200

probes/icache.c: Call pthread_cond_signal in locked mutex

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Wed Jul 13 15:11:07 2016 +0200

Merge pull request #489 from jan-cerny/null_check
    
    Add a NULL pointer check

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 13 13:51:56 2016 +0200

Add a NULL pointer check

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 13 12:42:39 2016 +0200

Merge pull request #468 from ybznek/maint-1.0-fileprobe-test
    
    test/file: Add test to strange filenames (missing fix)

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jun 29 14:36:08 2016 +0200

test/file: Add test to strange filenames
    
    Should check that we are correctly escape not printable characters
    and returns error when we cannot match filename by regex

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 12 13:45:11 2016 +0200

Merge branch 'maint-1.0' into maint-1.2
    
     Conflicts:
            src/OVAL/probes/oval_fts.c

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Tue Jul 12 13:27:14 2016 +0200

Merge pull request #486 from jan-cerny/enhance_valgrind_test
    
    Adjust the valgrind test to detect all kinds of memory errors

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 12 10:46:02 2016 +0200

Adjust the valgrind test to detect all kinds of memory errors
    
    This commit enables us to detect also other memory errors,
    not only the memory leaks, but also invalid reads etc.
    We will use --error-code to detect that valgrind failed.
    This option is designed for usage in automated test suites (see man).
    Parsing the log is not necessary to detect the fail.
    Also valgrind has to generate a special logfile for each child process
    to avoid undefined results (see man).

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Jul 11 11:44:34 2016 -0400

Merge pull request #485 from ybznek/maint-1.0-fts
    
    probes/oval_fts: Return error if regex issue occurs

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 11 15:06:56 2016 +0200

Merge pull request #484 from ybznek/maint-1.0
    
    probes/sysctl.c: Fix typo

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jul 11 14:55:52 2016 +0200

probes/oval_fts: Return error if regex issue occurs

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jul 11 13:53:37 2016 +0200

probes/sysctl.c: Fix typo

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Mon Jul 11 12:27:02 2016 +0200

Merge pull request #483 from jan-cerny/complete_readme
    
    Add a missing build dependency to README

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 11 10:40:02 2016 +0200

Add a missing build dependency to README
    
    The header file dbus.h provided by the dbus-devel package is required
    to build systemd probes, we should list the package in our build
    dependencies list.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Jul 7 11:25:40 2016 -0400

Merge pull request #482 from ybznek/maint-1.0-fix-double-escape
    
    Fix double escape + test fix

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 7 16:01:22 2016 +0200

oval_sysEnt.c: fix double escaping
    
    xmlEncodeEntitiesReentrant() + xmlNewTextChild() caused
    that characters like '<','>' were escaped twice

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 7 15:59:45 2016 +0200

test/remediation results: Delete test_file before test
    
    If test failed, next time 'test_file' was already created with
    required right and fix wasn't applied

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 7 15:57:41 2016 +0200

test/remediation results: Check double escaping
    
    Test now should test, that we don't escape <,> twice

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 7 15:56:07 2016 +0200

Fix double escaping in remediation results
    
    xmlEncodeEntitiesReentrant() + xmlNewTextChild() caused
    that characters like '<','>' were escaped twice

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jul 5 11:00:23 2016 -0400

Merge pull request #473 from ybznek/maint-1.0-oval-r
    
    oval_sysEnt.c: fix invalid characters in oval results

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jul 5 10:57:52 2016 -0400

Merge pull request #481 from ybznek/maint-1.0-vg-fix-probe-session
    
    Fix usage of probe_session after free

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Jul 4 16:38:27 2016 -0400

Merge pull request #480 from ybznek/maint-1.0-vg-fix
    
    rds: Move free after usage

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jul 4 16:30:03 2016 +0200

Fix usage of probe_session after free
    
    oval_agent_reset_session() was creating new probe_session,
    but the probe_session were rerefenced rom ag_sess->res_model, too.
    So when oscap used probe_session from res_model, it got old free'ed
    version.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jul 4 13:34:26 2016 +0200

rds: Move free after usage
    
    We were using asset_id after its free

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 1 11:54:07 2016 +0200

oval_sysEnt.c: fix invalid characters in oval results

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 30 09:53:03 2016 +0200

Bump version after release
    
    Next version from the maint-1.2 branch will be 1.2.11.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 15:53:42 2016 +0200

openscap-1.2.10

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 15:52:36 2016 +0200

Bump soname from 8.8.0 to 8.8.1
    
    No symbols have been added or removed

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 14:23:16 2016 +0200

Merge branch 'maint-1.0' into maint-1.2
    
     Conflicts:
            src/OVAL/oval_probe.c
            tests/probes/process58/all.sh
            tests/test_common.sh.in

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 14:11:09 2016 +0200

Merge pull request #466 from ybznek/maint-1.0
    
    tests/cpe: update for fedora24

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jun 29 11:01:09 2016 +0200

tests/cpe: update for fedora24

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 13:09:50 2016 +0200

Merge pull request #465 from ybznek/maint-1.2-xslt
    
    Fix dotted remediation scripts

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jun 29 10:20:38 2016 +0200

guide/xslt: Fix dotted remediation scripts
    
    https://github.com/OpenSCAP/openscap/issues/460

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 10:15:17 2016 +0200

Merge pull request #462 from ybznek/maint-1.0
    
    tests/process58: Use specified xpath

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 10:13:24 2016 +0200

Merge pull request #463 from ybznek/maint-1.2-systemd
    
    Fix systemd test on fedora24

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 29 08:49:17 2016 +0200

Merge pull request #464 from ybznek/maint-1.0-xpath-wrapper
    
    xpath wrapper

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Jun 28 23:04:24 2016 +0200

tests: Add xpath wrapper for newer version
    
    Newer version of xpath has different interface
    https://github.com/OpenSCAP/openscap/issues/461

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Jun 28 21:26:12 2016 +0200

test/systemdunitproperty: Separete to conditional part
    
    "-.mount Wants" isn't presented on Fedora24, so part of test
    was separated and now it should be started only on supported
    system

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Jun 28 19:55:09 2016 +0200

tests/process58: Use specified xpath

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jun 27 15:18:26 2016 -0400

Fixed a few one-byte buffer overflow bugs in intelisteningservers.c

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Mon Jun 27 18:43:54 2016 +0200

Merge pull request #459 from jan-cerny/issue281
    
    Issue #281: Fix invalid characters in remediation results

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jun 27 15:22:25 2016 +0200

Add a simple test for issue #281

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jun 27 13:23:08 2016 +0200

Issue #281: Fix invalid characters in remediation results
    
    We include stdout of a remediation script to the XCCDF results.
    But the output of the remediation script can contain characters
    that are forbidden in XML documents, eg. most of the non-printable
    characters. We need to escape or remove them from the string
    before we include it to the XML document. Libxml provides a
    function to get rid of those characters.

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Fri Jun 24 15:59:25 2016 +0200

Merge pull request #457 from jan-cerny/issue372
    
    Issue #372: Add xccdf:TestResult@test-system attribute

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 24 13:47:23 2016 +0200

Add a simple test for xccdf:TestResult@test-system

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 24 12:26:15 2016 +0200

Merge pull request #454 from ybznek/maint-1.2-file-probe-test
    
    probes/file: Add debug output & modify test

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Fri Jun 24 12:08:38 2016 +0200

Merge pull request #456 from jan-cerny/fix_a_typo
    
    Fix a typo

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Fri Jun 24 12:08:00 2016 +0200

Merge pull request #452 from jan-cerny/maint-1.2-fix-rhel5
    
    Issue #393: Fix rpmverifyfile compilation on RHEL5

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 24 10:30:45 2016 +0200

Issue #372: Add xccdf:TestResult@test-system attribute
    
    The xccdf:TestResult element should contain a test-system
    attribute which is defined in specification as follows:
    Name of the benchmark consumer program that generated this
    <xccdf:TestResult> element; SHOULD be either a CPE name or a
    CPE applicability language expression.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 24 09:48:12 2016 +0200

Fix a typo

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 24 09:42:17 2016 +0200

Fix a typo

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jun 23 14:41:07 2016 +0200

probes/file: Add debug output & modify test
    
    We have often randomly failed file probe test, it should
    help us to find an issue

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 23 13:31:12 2016 +0200

Add a comment

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Thu Jun 23 13:14:50 2016 +0200

Merge pull request #451 from jan-cerny/small_typo_fix
    
    Fix a typo

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Thu Jun 23 11:05:17 2016 +0200

Merge pull request #450 from jan-cerny/remove_callback
    
    Remove callback on RPM < 4.6

Author: Jan Cerny <jcerny@redhat.com>
Date:   Thu Jun 23 09:50:15 2016 +0200

Issue #393: Fix rpmverifyfile compilation on RHEL5
    
    One missing include and some fallback definition of macros
    will fix the issue.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 23 09:05:24 2016 +0200

Fix a typo

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 22 15:15:58 2016 +0200

Remove callback on RPM < 4.6
    
    Recently we have merged a fix to compile the rpm probes
    on maint-1.0 on systems with older versions of rpmlib.
    However, the reporting function  is not present there,
    so it does not make any sense to set the logging callback,
    because it has no effect. This commit removes the callback
    on those systems.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Jun 22 11:04:06 2016 -0400

Merge pull request #448 from jan-cerny/issue401-maint-1.0
    
    Issue #401: OVAL tests can reference only objects of same type

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 22 14:11:44 2016 +0200

Merge pull request #449 from ybznek/maint-1.2-vg
    
    Valgrind_test: Add free-fill, malloc-fill

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jun 22 13:58:04 2016 +0200

Valgrind_test: Add free-fill, malloc-fill

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 22 13:47:18 2016 +0200

Merge pull request #440 from ybznek/maint-1.2-offline-scan-rpmdb
    
    Fix offline scan of rpmverifypackage

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 21 16:16:24 2016 +0200

Issue #401: OVAL tests can reference only objects of same type
    
    Tests referencing objects of different type should be
    rejected by OpenSCAP. For example, a textfilecontent54_object
    can be referenced only from textfilecontent54_test, but NOT from
    sysctl_test. Such referencing is wrong according to
    schematron validation.
    This commit adds a new runtime check to verify that a valid
    content is processed.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 21 16:03:21 2016 +0200

Fix invalid OVAL content in test suite
    
    This commit fixes the following warnings of schematron validation:
    oval:x:tst:8 - the object child element of a textfilecontent54_test must reference a textfilecontent54_object
    oval:x:obj:4 - operation attribute for the pattern entity of a textfilecontent54_object should be 'pattern match'

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jun 22 10:12:29 2016 +0200

probes/rpmverifypackage: fix comment

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jun 22 04:48:22 2016 +0200

probes/rpmverifypackage: move #include <config.h> to c file

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jun 22 00:46:58 2016 +0200

probes/rpmverifypackage: Don't use RPMTRANS_FLAG_NOPLUGINS
    
    ./configure on rhel7 is not able to detect right rpm version, so
    we will fallback solution everytime

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jun 17 14:56:16 2016 +0200

probes/rpmverifypackage: Use own offline mode & probe_chroot

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jun 20 12:44:25 2016 +0200

rpmLibsPreload: Make preloading faster

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jun 17 14:27:19 2016 +0200

probes: introduce probe_chroot*

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jun 17 13:40:58 2016 +0200

Introduce OFFLINE_MODE_OWN
    
    Currently we support two offline modes - chroot, rpmdb
    This offline mode let decide probe how to implement
    offline mode.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 21 16:30:10 2016 +0200

Merge branch 'maint-1.0' into maint-1.2
    
     Conflicts:
            ac_probes/configure.ac.tpl
            configure.ac
            src/OVAL/probes/unix/linux/rpmverify.c
            src/OVAL/probes/unix/linux/rpmverifyfile.c
            src/OVAL/probes/unix/linux/rpmverifypackage.c

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jun 21 09:36:37 2016 -0400

Merge pull request #443 from jan-cerny/issue408
    
    Issue #408: Fix compilation on older systems

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jun 21 09:15:17 2016 -0400

Merge pull request #442 from jan-cerny/autoconf_fix
    
    Fix autoconf issues

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 21 10:52:31 2016 +0200

Issue #408: Fix compilation on older systems
    
    Function rpmLogSetCallback has changed its prototype in RPM 4.6 API.
    Before it had only one parameter, now it has two parameters.
    Older version (RPM 4.4.x) is shipped in RHEL5, therefore we must use
    conditional compilation to get the rpm probes compiled on RHEL5.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 21 14:06:30 2016 +0200

Fix autoconf issues
    
    Changes made recently in src/OVAL/probes/Makefile.am caused that
    ./confgen.sh removed check macros for header files that are needed
    for rpm probes from configure.ac.
    This commit fixes the syntax of respective Makefile.am and also
    includes freshly generated configure.ac.

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Jun 20 10:32:38 2016 -0400

Merge pull request #439 from ybznek/maint-1.0-offline-attr
    
    probes/fileextendedattribute.c: Fix offline-mode option position

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Jun 19 23:36:46 2016 +0200

probes/fileextendedattribute.c: Fix offline-mode option position

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Jun 15 10:43:33 2016 -0400

Merge pull request #433 from ybznek/maint-1.0-extended-attribute
    
    probe extended attribute fix

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Jun 15 10:42:34 2016 -0400

Merge pull request #432 from ybznek/maint-1.0-off
    
    Offline scan option position

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jun 13 15:03:46 2016 +0200

probes/fileextendedattribute.c: refactoring - remove goto

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jun 13 16:43:38 2016 +0200

probes/fileextendedattribute.c: Fix possible buffer overflow

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jun 13 15:50:37 2016 +0200

probes/fileextendedattribute.c: Fix missing '\0'
    
    From man page of lgetxattr() - there is no information, that
    returned string should be with trailing \0

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jun 13 15:28:59 2016 +0200

probes/fileextendedattribute.c: Fix neverending loop
    When index stays on '\0', it cannot be increased any more
    
    Fixed loop condition, because after newly added '++i' index can
    point after our buffer

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Jun 12 23:17:21 2016 +0200

probes/filehash: Fix offline mode support

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Jun 12 22:25:47 2016 +0200

probes/filehash58: Fix offline support

Author: Martin Preisler <martin@preisler.me>
Date:   Sat Jun 11 13:40:11 2016 -0400

Merge pull request #427 from ybznek/maint-1.2
    
    oscap-docker: *-cve scan of non-rhel fix

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jun 10 16:48:40 2016 +0200

oscap-docker: remove deprecated comments

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jun 10 12:31:45 2016 +0200

oscap-docker: Print error message when target is not RHEL

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jun 10 12:22:59 2016 +0200

oscap-docker: Unmount container when cve-scan fail

Author: Jason Newton <nevion@gmail.com>
Date:   Wed May 25 00:07:42 2016 -0400

add opensuse 42.1

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue May 31 13:05:56 2016 -0400

oscap-docker fixed to be source compatible with py2 and py3
    
    set_defaults is problematic on subparsers in argparse, it changed
    behavior in python2 and python3
    upstream discussion: http://bugs.python.org/issue9351#msg244786

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue May 24 13:51:46 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Daniel Kopecek <dkopecek@redhat.com>
Date:   Tue May 24 11:48:54 2016 +0200

rpminfo: fixed handling of probe_item_collect return value
    
    The probe_item_collect function uses its return value to signal
    several things. The previous usage was wrong by assuming that it
    could be coerced to a boolean value and interpreting 1/true as an
    error state.
    
    The function returns an integer value. Negative values can be
    interpreted as fatal errors, 0 as success, 1 as an indication of
    the collected item being filtered out from the result (which is
    normal behaviour when using filters) and the value 2 as an indication
    of not including the item because of memory shortage (at which point
    the probe might decide wheter to do something to release memory to be
    able to continue or short-circuit the collection process).
    
    Related: https://www.redhat.com/archives/open-scap-list/2016-May/msg00036.html
    
    Addresses:
    ```
    OpenSCAP Error: Probe at sd=1 (rpminfo) reported an error: Invalid type, value or format [oval_probe_ext.c:393]
    Unable to receive a message from probe [oval_probe_ext.c:579]
    Invalid oval result type: -1. [oval_resultTest.c:179]
    ```

Author: Martin Preisler <martin@preisler.me>
Date:   Thu May 19 09:21:16 2016 -0400

Merge pull request #414 from jan-cerny/issue394
    
    Fix Issue #394 (SCE results aren't embedded in XCCDF reports) + test

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu May 19 13:34:05 2016 +0200

Merge pull request #416 from jan-cerny/issue_345
    
    Issue #345: Fix error message when <generator> is missing

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu May 19 13:12:00 2016 +0200

Merge pull request #415 from jan-cerny/issue_370
    
    Issue #370: Fix a segmentation fault

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 19 10:11:56 2016 +0200

Issue #345: Fix error message when <generator> is missing
    
    When oscap reports that the document is invalid, it reports
    against which schema it is invalid. However if the generator
    element is missing the schema version is unknown.
    This commit handles a situation when schema version is missing.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 19 09:08:43 2016 +0200

Fix shebangs

Author: Martin Preisler <martin@preisler.me>
Date:   Wed May 18 10:11:54 2016 -0400

Merge pull request #412 from jan-cerny/add_dep
    
    Add GConf2-devel to build dependencies list

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 18 14:55:41 2016 +0200

Issue #370: Fix a segmentation fault
    
    Addressing:
    
    oscap_source_free (source=0x13313d90) at oscap_source.c:129
    0x00007ffff7b8ac5e in xccdf_session_free (session=0x61cb30) at xccdf_session.c:249
    0x000000000040ba1f in app_evaluate_xccdf (action=<optimized out>) at oscap-xccdf.c:548
    0x0000000000407f8e in oscap_module_call (action=0x7fffffffd7b0) at oscap-tool.c:261
    oscap_module_process (module=0x6154c0 <XCCDF_EVAL>, module@entry=0x614a40 <OSCAP_ROOT_MODULE>,
    argc=argc@entry=6, argv=argv@entry=0x7fffffffda48) at oscap-tool.c:346
    0x000000000040702f in main (argc=6, argv=0x7fffffffda48) at oscap.c:80

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 18 13:33:52 2016 +0200

Test for SCE results in HTML report

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 18 11:33:52 2016 +0200

Issue#394: Add missing default template for SCE results
    
    The oscap xccdf generate report module is able to embed SCE results
    into the HTML report. To do that, a template for results file name
    must be specified using the "--sce-template" option.
    However, users expect that if they omit "--sce-template" option,
    a default file name template will be used.
    It works like that for OVAL results, so it should work the same way
    also for SCE results.
    To fix this issue, this commit adds a default file name template
    for SCE into the xccdf module.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 18 11:27:18 2016 +0200

Describe "--sce-template" option in man page
    
    The "--sce-template" option is available in oscap xccdf generate report
    module for a long time (since f88d6cee276ef56464e591629e484041864e0f68),
    but it was not documented in the manual page.
    The behavior of this option is very similar to "--oval-template",
    expect this one is for SCE results.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue May 17 16:19:44 2016 -0400

Fix compilation issues
    
    Martin should pay more attention to his commits in the evenings...

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue May 17 14:15:52 2016 -0400

Support --benchmark-id when running `oscap generate guide`
    
    This allows us to select a benchmark with source datastreams having more
    than one XCCDF benchmark in them.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu May 12 11:19:51 2016 +0200

Merge pull request #413 from jan-cerny/fix_double_free
    
    Fix a double free

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 12 09:50:19 2016 +0200

Fix a double free
    
    Addressing:
    Invalid free() / delete / delete[] / realloc()
       at 0x4C29CF0: free (vg_replace_malloc.c:530)
       by 0x4EC6DD5: xccdf_benchmark_import (benchmark.c:70)
       by 0x40CD38: app_info (oscap-info.c:151)
       by 0x4079BD: oscap_module_call (oscap-tool.c:261)
       by 0x4079BD: oscap_module_process (oscap-tool.c:346)
       by 0x4069BE: main (oscap.c:79)
     Address 0xc84a6a0 is 0 bytes inside a block of size 312 free'd
       at 0x4C29CF0: free (vg_replace_malloc.c:530)
       by 0x4EC6C97: xccdf_benchmark_parse (benchmark.c:145)
       by 0x4EC6D54: xccdf_benchmark_import (benchmark.c:65)
       by 0x40CD38: app_info (oscap-info.c:151)
       by 0x4079BD: oscap_module_call (oscap-tool.c:261)
       by 0x4079BD: oscap_module_process (oscap-tool.c:346)
       by 0x4069BE: main (oscap.c:79)
     Block was alloc'd at
       at 0x4C2A988: calloc (vg_replace_malloc.c:711)
       by 0x4E7E1C8: __oscap_calloc (alloc.c:68)
       by 0x4EC7B2D: xccdf_item_new (item.c:120)
       by 0x4EC5461: xccdf_benchmark_new (benchmark.c:96)
       by 0x4EC6D46: xccdf_benchmark_import (benchmark.c:64)
       by 0x40CD38: app_info (oscap-info.c:151)
       by 0x4079BD: oscap_module_call (oscap-tool.c:261)
       by 0x4079BD: oscap_module_process (oscap-tool.c:346)
       by 0x4069BE: main (oscap.c:79)

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 11 14:21:21 2016 +0200

Add GConf2-devel to build dependencies list
    
    This package is needed to build gconf probe.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue May 10 16:23:23 2016 +0200

Merge pull request #411 from dkopecek/dkopecek-patch-1
    
    Update README.md

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue May 10 09:35:29 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue May 10 09:34:58 2016 -0400

Added libblkid-devel to the list of suggested dependencies

Author: Daniel Kopeček <dnk1618@gmail.com>
Date:   Tue May 10 13:47:50 2016 +0200

Update README.md
    
    Added libblkid-devel to build dependencies list.
    
    Related: https://www.redhat.com/archives/open-scap-list/2016-May/msg00016.html

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri May 6 14:27:46 2016 -0400

Revert "enable subdir-objects in automake"
    
    subdir-objects breaks the build.
    This reverts commit a138dcc3adde1c1fbdeae6b5d0a509bda9d8c5ec.

Author: Gabe <redhatrises@gmail.com>
Date:   Wed May 4 14:24:20 2016 -0600

enable subdir-objects in automake
    
    - Silences warnings and deprecation notice about subdir-objects

Author: Martin Preisler <martin@preisler.me>
Date:   Mon May 2 20:37:19 2016 -0400

Merge pull request #405 from jan-cerny/fix_rhbz1250072
    
    RHBZ#1250072: Fix regression in loading DS session

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 2 17:45:53 2016 +0200

RHBZ#1250072: Fix regression in loading DS session
    
    Loading session for a DS file multiple times with different XCCDF IDs
    didn't work. When a session for a data stream is created using Python API
    and then it is loaded twice with different XCCDF IDs being set,
    the session doesn't reflect the change of the XCCDF ID.
    This commit fixes the regression by resetting the DS session
    when a new XCCDF session is loaded. Therefore the IDs are resetted.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Apr 22 15:34:25 2016 +0200

Bump version after release
    
    Next version from the maint-1.2 branch will be 1.2.10.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Apr 22 10:05:59 2016 +0200

openscap-1.2.9

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 21 15:33:10 2016 +0200

Bump soname from 8.7.1 to 8.8.0
    
    1 symbol was added, no symbols were removed

Author: Ján Lieskovský <jlieskov@redhat.com>
Date:   Fri Apr 22 14:15:56 2016 +0200

Merge pull request #398 from jan-cerny/issue364
    
    Issue #364: Fix OCIL in data streams

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Apr 22 11:56:11 2016 +0200

Issue #364: Fix OCIL in data streams
    
    Oscap ds sds-compose does not recognize OCIL file as SCAP-1.2
    check system and places it into <ds:extended-components>
    element (intended for non-SCAP content) rather into
    <ds:checks> element (intended for SCAP-1.2 check systems)
    That caused build problems in SSG - error message displayed
    and invalid datastream created.
    This commit adds basic support for including OCILs in data streams.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Apr 20 14:48:31 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Apr 20 14:43:07 2016 -0400

Merge pull request #389 from ybznek/maint-1.0-preload-2
    
    probes dynamic library preloading

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Apr 20 14:42:57 2016 -0400

Merge pull request #396 from ybznek/maint-1.0-manual-coverage
    
    Add code coverage info into manual

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Apr 20 15:52:15 2016 +0200

docs/manual: Add coverage generation info

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Apr 20 13:40:55 2016 +0200

probes/rpm: Fix erro cb return value
    
    We have to use RPMLOG_DEFAULT, because RPMLOG_EXIT
    cause exit of whole probe.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Apr 12 17:07:00 2016 +0200

probes/rpm: Add probe_preload function

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Apr 13 10:58:01 2016 +0200

probes/rpm-helper: Add rpmLibsPreload

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Apr 12 16:55:21 2016 +0200

probes: Use probe_preload before chroot

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Apr 12 16:55:05 2016 +0200

probes: Introduce probe_preload

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Apr 12 17:02:25 2016 +0200

probes: Preload libraries requiered for pthread_cancel

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Apr 13 12:04:14 2016 -0400

Merge pull request #388 from ybznek/maint-1.0-sysctl-local
    
    sysctl - test

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Apr 12 17:25:08 2016 +0200

probes/rpm-helper: fix #endif position

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Wed Apr 13 10:33:22 2016 +0200

Merge pull request #382 from jan-cerny/user_manual_fix
    
    Remove information about spec files from user manual

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Apr 10 23:49:40 2016 +0200

tests/sysctl: Add test_sysctl_probe_all
    
    Compare all collected names with names of sysctl

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 11 18:01:44 2016 +0200

Merge pull request #387 from ybznek/maint-1.0-sysctl-local
    
    probes/sysctl: Enable scan 'files' through different devices

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 11 14:27:28 2016 +0200

Merge pull request #385 from ybznek/rpm-handler
    
    rpm error handler

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Apr 11 12:57:40 2016 +0200

probes/sysctl: Enable scan 'files' through different devices
    
    /proc/sys/fs/binfmt_misc is on different device than rest of /proc/sys
    (stat /proc/sys/fs/binfmt_misc). This commit enable to scan it too

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Apr 11 10:42:28 2016 +0200

Merge branch 'maint-1.0' into maint-1.2

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Apr 11 09:44:41 2016 +0200

probes/rpm: Use rpmErrorCb to handle rpm errors

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Apr 11 09:43:22 2016 +0200

probes/rpm: Introduce rpmErrorCb

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sat Apr 9 14:36:14 2016 +0200

Merge pull request #380 from NonerKao/maint-1.2
    
    Reuse existing function during the check

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Apr 8 11:38:48 2016 +0200

Merge pull request #381 from ybznek/maint-1.0-rpm-mods
    
    RPM probes - refactoring only

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Apr 7 11:27:40 2016 +0200

probes/rpm: merge struct to rpm-helper

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Apr 7 11:14:51 2016 +0200

probes/rpm: refactoring - change order of #include

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Apr 7 10:53:36 2016 +0200

probes/rpm: rpm_mutex_(un)lock

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Apr 7 10:47:19 2016 +0200

probes/rpm: merge common rpm-deps

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Apr 7 10:38:32 2016 +0200

probes/rpm: Move common macros to rpm-helper

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Apr 7 10:27:22 2016 +0200

probes/rpm: Introduce rpm-helper

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 7 17:01:11 2016 +0200

Remove information about spec files from user manual
    
    The spec files are not present in maint-1.2 anymore.
    They were removed in commits
    3fe208f3caf1f3a46cd2ee2ea7baa88154600674
    41fe1106a680885cd684313d306c12eb54d4353d

Author: Quey-Liang Kao <s101062801@m101.nthu.edu.tw>
Date:   Thu Apr 7 00:36:46 2016 +0800

Improve readability for assert_exists calls
    
    Fix: remove the temp files after assert_exists calls

Author: Quey-Liang Kao <s101062801@m101.nthu.edu.tw>
Date:   Wed Apr 6 22:02:22 2016 +0800

Reuse existing function during the check
    
    The two modified script files explicitly parse the formatted file
    by xpath command, which act the same as the assert_exists function
    in tests/test_common.sh.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Apr 5 12:05:24 2016 -0400

Merge pull request #378 from jan-cerny/fix_compiler_warning
    
    Fix compiler warning: unused variable

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 5 17:46:06 2016 +0200

Fix compiler warning: unused variable
    
    Addressing:
    unix/runlevel.c: In function ‘get_runlevel_redhat’:
    unix/runlevel.c:227:13: warning: unused variable ‘runlevel_list’ [-Wunused-variable]
      const char runlevel_list[] = {'0', '1', '2', '3', '4', '5', '6'};

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 5 17:35:01 2016 +0200

Merge pull request #369 from GautamSatish/add_suse_runlevel
    
    Adding implementation for runlevel probe on SUSE

Author: Gautam Satish <gautams@hpe.com>
Date:   Thu Mar 31 00:08:43 2016 -0400

Adding implementation for runlevel probe on SUSE
    
    Updated the runlevel probe with some refactoring.

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 4 11:29:20 2016 -0400

Merge pull request #374 from jan-cerny/deprecate_oval_probe_query_definition
    
    Deprecate function oval_probe_query_definition

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 4 11:28:54 2016 -0400

Merge pull request #375 from jan-cerny/move_messages_to_results_model
    
    Move messages to results model

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 4 11:27:31 2016 -0400

Merge pull request #334 from jan-cerny/indent
    
    Indent messages in verbose log

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 4 11:22:03 2016 -0400

Merge pull request #373 from jan-cerny/move_message
    
    Move a message from unused code

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 4 17:07:51 2016 +0200

Merge pull request #377 from OpenSCAP/revert-376-maint-1.0-merge-oval-cpe
    
    Revert "openscap-cpe-*.xml: update from maint-1.2"

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 4 09:52:55 2016 -0400

Revert "openscap-cpe-*.xml: update from maint-1.2"

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 4 13:45:22 2016 +0200

Merge pull request #376 from ybznek/maint-1.0-merge-oval-cpe
    
    openscap-cpe-*.xml: update from maint-1.2

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Apr 4 10:15:53 2016 +0200

openscap-cpe-*.xml: update from maint-1.2

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Apr 3 15:36:09 2016 +0200

Indent messages in verbose log
    
    This commit indents messages inside test or definition
    to better distiguish between individual tests or definitions
    and improve orientientation in log for user.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Feb 28 19:21:53 2016 +0100

Add possibility for indent of messages in verbose log
    
    This commit adds a macro that can either increase or
    decrease indent of messages in verbose log.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Apr 3 11:02:42 2016 +0200

Move message about test evaluating
    
    After refactoring done in #360, we can move this message
    to results model without affecting functionality.
    The new place is more logical, because the two corresponding
    messages are now near to each other in source code.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Apr 3 10:56:21 2016 +0200

Move message about definition evaluating
    
    After refactoring done in #360, we can move this message
    to results model without affecting functionality.
    The new place is more logical, because the two corresponding
    messages are now near to each other in source code.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Apr 3 09:47:27 2016 +0200

Deprecate function oval_probe_query_definition
    
    We have moved querying definitions into results model and
    removed call of oval_probe_query_definition in
    b8e8860fa362b37201f3f46cb6f3dc1da6863246 .
    The only case where this function is called now (oval_probe.c:433)
    is a recursive call.
    We can deprecate the function and remove it in next major release,
    because it is a dead code.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Apr 3 09:10:06 2016 +0200

Move a message from unused code
    
    Since we have merged PR #360, we miss a message reporting extended
    definition in our verbose mode. This commit moves a message from
    function which is not used now to the right place.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 1 12:17:31 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Wed Mar 16 12:27:46 2016 -0700

Fixed for solaris to use fts_

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Mar 30 11:16:47 2016 -0400

Merge pull request #363 from ybznek/maint-1.2-mount-dir
    
    oscap-docker: Mount in safe temporary container

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 30 16:22:39 2016 +0200

Merge pull request #361 from ybznek/maint-1.0-rpm-not-applicable
    
    RPM probes: return "Not applicable" without valid db

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 30 15:38:12 2016 +0200

Merge pull request #362 from ybznek/maint-1.0-cpe-oval
    
    Fix openscap-cpe-oval.xml: Remove check to unix family

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Mar 30 14:56:23 2016 +0200

probes/rpm: fix whitespaces

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Mar 29 17:51:16 2016 +0200

oscap-docker: refactoring

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Mar 30 05:11:37 2016 +0200

openscap-cpe-oval: Remove unused test to unix family

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Mar 30 05:09:36 2016 +0200

openscap-cpe-oval: Don't check unix family

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Mar 29 11:08:33 2016 +0200

Merge pull request #360 from jan-cerny/merge_probing_to_results
    
    Query test and evaluate its results in one step

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sat Mar 26 19:05:36 2016 +0100

Merge pull request #365 from jan-cerny/verbose_on_stderr
    
    If verbose log file is not specified, write messages on stderr

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 26 16:29:30 2016 +0100

Fix verbose mode in XCCDF module
    
    If we will write verbose messages on stderr, we should not
    split printing result of XCCDF rule into two functions.
    Otherwise the messages would be mixed between "Result" and result.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 26 16:29:18 2016 +0100

Update user manual - changes in verbose mode

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 26 16:26:53 2016 +0100

Allow stderr in probes
    
    If verbose mode is turned on and no file is specified for the log,
    stderr should be used. We need to allow this also for messages from probes.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 26 16:26:20 2016 +0100

Do not require --verbose-log-file option

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 26 16:24:52 2016 +0100

Write messages on stderr if log file is not specified

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 24 12:24:28 2016 +0100

oscap-docker: Mount in safe temporary container
    
    https://github.com/OpenSCAP/openscap/issues/329

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 24 09:18:40 2016 +0100

probe/rpm*: Return "Not applicable" without valid db
    
    https://github.com/OpenSCAP/openscap/issues/348

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 16:43:23 2016 +0100

Evaluate criteria only if criteria node is present
    
    If there is a definition without criteria chlid element,
    the result should be "not evaluated".
    This case used to be cached in oval_probe_query_definition.
    After we moved querying into results evalaution,
    we need to check it here.
    Otherwise it breaks test tests/API/OVAL/unittests/test_deprecated_def.sh.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 14:34:56 2016 +0100

Do not call oval_probe_query_definition
    
    Since we merged probing for tests into test evaluation in previous commits,
    calling oval_probe_query_definition can be removed now as superfluous action.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 14:28:35 2016 +0100

Query test and evaluate its results in one step
    
    If a probe session is started, we can query the test and collect the objects
    just when the result of a test is going to be evaluated.
    After applying this commit we will not need to browse
    the criteria tree twice as we do now.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 14:25:11 2016 +0100

Create results model with probe session
    
    Other occurences of oval_result_model_new are not required to be replaced,
    because in other cases it doesn't need to probe the system.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 13:46:54 2016 +0100

Add a getter of probe_session for results model

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 13:44:33 2016 +0100

Add probe_session into results model
    
    The probe_session will be added by a special constructor

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 12:58:34 2016 +0100

Expose function oval_probe_query_test
    
    This commit removes static modifier from function oval_probe_query_tests
    and adds protytype of this function to a private header file.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 23 09:51:53 2016 +0100

Change oval_probe_query_criterion to oval_probe_query_test
    
    This function takes oval_criteria_node *cnode as its second paramater.
    But it assumes that cnode is a criterion and it only uses this paramater
    to get the oval_test referenced by the criterion.
    The function is static and it is called only in one place,
    where we are already sure that cnode is a criterion.
    So we can move some part of code to the caller in a way
    that we can change the type of second parameter to oval_test.
    This change is done because we would like to reuse the code
    in results_model.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Mar 22 15:58:20 2016 -0400

Merge branch 'maint-1.0' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Mar 22 15:53:18 2016 -0400

Correctly parse and write-out version/@time and version/@update in XCCDF Benchmark
    
    Previously we were parsing this correctly but not writing it out when
    serializing. I have changed tests accordingly.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 19 17:34:03 2016 +0100

Refactor: Extract function oval_probe_query_var_ref
    
    This commit extracts a part of code which handles references to variables
    and moves the code to a new separate static function.
    The purose of this commit is to make the function oval_probe_query_criterion
    more understandable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 19 16:53:55 2016 +0100

Evaluate extended definition directly
    
    We can use oval_probe_query_definition here
    because it will wuery its criteria the same way.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 19 16:14:19 2016 +0100

Refactor: extract function oval_probe_query_extend_definition
    
    This commit only moves a block of code to a new separate static function.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Mar 19 16:06:06 2016 +0100

Refactor: Extract function oval_probe_query_criterion
    
    This commit only moves a block of code to a new separate static function.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Mar 21 10:27:42 2016 +0100

Add a test_sce_in_ds.sh back
    
    This test was skipped since 920d633e9b4c7fc006e6c8aa80fdd388240dac3f
    after it was added in 609ccc7cf64f63901d174c1f7295f33739065874.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 21 08:47:15 2016 +0100

Merge branch 'maint-1.0' into maint-1.2
    
     Conflicts:
            tests/sce/Makefile.am

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 21 08:41:38 2016 +0100

Merge pull request #349 from ybznek/maint-1.2-sds-sce-fix
    
    SDS SCE fix

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Mar 18 09:57:24 2016 -0400

Merge pull request #357 from jan-cerny/issue_342
    
    Fix grouping in HTML report

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Mar 16 16:41:30 2016 -0400

Merge pull request #358 from ybznek/maint-1.0-fix-tests
    
    tests/sce-in-ds: Add to Makefile.am

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 16 10:09:44 2016 +0100

Do not expose oval_result_criteria_node_negate in public API
    
    Move the function to oval_results_impl.h

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Feb 22 17:00:17 2016 +0100

Make public a function negating criteria
    
    In future we will need it in other modules.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Feb 22 20:33:27 2016 +0100

Refactor: Extract function oval_result_system_prepare_definition
    
    We will need a part of this code in oval_probe_query_definition.
    It wouldn't be good to just copy and paste, instead we can
    extract the code to a separate function.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Mar 15 22:25:41 2016 +0100

tests/sce-in-ds: Add to Makefile.am
    
    Append forgotten test

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Mar 15 22:07:39 2016 -0400

Merge pull request #359 from ybznek/maint-1.2-sce-errors
    
    tests/sce_parse_errors: Add test to Makefile.am

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Mar 15 22:33:20 2016 +0100

tests/sce_parse_errors: Add test to Makefile.am

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Mar 14 15:13:49 2016 +0100

xccdf_policy: refine detection of realpath
    
    We need to detect only relative path to subdir, not to
    parent dir

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Mar 11 10:09:47 2016 +0100

sds.c: Refactoring - add consts

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 10 13:43:16 2016 +0100

sds.c: Refactoring

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 10 13:40:08 2016 +0100

sds.c: Fix licence whitespace

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 10 13:09:50 2016 +0100

sds: refactoring
    
    Create SCE path only when is needed - Don't
    create temp directory in all cases

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 10 13:04:01 2016 +0100

sds: refactoring
    
    Doesn't make sense by itself. Should be part
    of group of commits to avoid of create temp
    directory if is not needed

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 10 12:29:28 2016 +0100

xccdf_policy: Fix windows support
    
    Windows absolute path doesn't start with '/'

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Mar 10 11:10:41 2016 +0100

fix DS with SCE

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Mar 15 13:37:53 2016 +0100

Regenerate xccdf-resources.xsl

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Mar 15 13:34:48 2016 +0100

Support CIS recommendations in HTML report

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 14 16:10:09 2016 +0100

Do not rely on exact URLs to create groups
    
    When a new revision of a security guidance is released it breaks
    the groupping. This situation already happened for PCI DSS.
    This commit tries to fix it by matching only a common prefix,
    not the exact match of the whole URL.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 14 16:05:51 2016 +0100

Issue #342: Fix sorting of groups in HTML report
    
    This commit introduces a more generic sorting algorithm to sort
    groups in HTML report.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Mar 9 17:39:37 2016 +0100

sds-session: Add debug output

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Mar 14 14:43:38 2016 +0100

Merge pull request #356 from ybznek/maint-1.2-test-minor-fix
    
    test: XCCDF/test_platform_element fix var

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 14 14:27:19 2016 +0100

Use names of known types in JSON instead of the URLs

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 14 14:25:59 2016 +0100

Refactor XSLT code to a new template
    
    This way we can reuse the code.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Mar 14 13:28:00 2016 +0100

test: XCCDF/test_platform_element fix print

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Mar 14 13:09:09 2016 +0100

test: XCCDF/test_platform_element fix var
    
    Fix : integer expression expected

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Mar 13 12:46:12 2016 +0100

Tests: Remove testing file after the test finishes.
    
    We do not need to .gitignore them.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Mar 13 12:38:27 2016 +0100

Tests: Fix validation
    
    The 13 & 16 numbers were copy pasted from another directory. The correct
    numbers are 8 & 8.
    
    This test has been failing since day 0. We haven't seen this test failing,
    because there was not `set -e`.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Mar 13 12:19:14 2016 +0100

Simplify control flow.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Mar 13 12:17:28 2016 +0100

Tests: Be strict and exit on failure.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Mar 13 11:46:53 2016 +0100

Remove oval details file once you are done.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sat Mar 12 20:57:22 2016 +0100

Ignore binaries build for testing

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sat Mar 12 20:36:02 2016 +0100

Merge branch 'maint-1.0' into maint-1.2
    
    Conflicts:
            tests/sce/Makefile.am

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sat Mar 12 20:17:30 2016 +0100

Merge pull request #347 from ybznek/maint-1.0-sce-test
    
    tests/sce: Add test for SCE in DS

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Mar 11 16:03:38 2016 -0500

Merge pull request #354 from ybznek/maint-1.2-sce-errors
    
    Stop printing of XML errors during SCE loading

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Mar 11 16:01:45 2016 -0500

Merge pull request #355 from ybznek/maint-1.2-test-minor-fix
    
    test: XCCDF/test_platform_element fix var

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Mar 11 14:37:54 2016 -0500

Merge pull request #353 from ybznek/maint-1.2-rpm-probe-another-fix
    
    rpm* another probes fix

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Mar 11 20:30:18 2016 +0100

test: XCCDF/test_platform_element fix var
    
    When oscap finish successfully, $ret is not set and
    we will get 'line 15: [: -eq: unary operator expected'

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Mar 11 17:09:18 2016 +0100

tests/sce: Add test to check XML errors
    
    We tries to load every file as XML and if we get .sh file
    we should not to print error messages on stderr

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Mar 11 11:44:22 2016 +0100

oscap_source: Don't print parsing XML errors
    
    Don't print parsing xml error when we read script
    I can be easier to check executability before XML parsing,
    but SCE is only extension and we don't want open file
    once more everytime.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Mar 11 19:46:19 2016 +0100

Issue #348: Fix rpmverifypackage probe
    
    Similar to 91a5dd92512585b0c6b0fa2fcd2f8ef700fd9b6f

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Mar 11 19:38:30 2016 +0100

Issue #348: Fix rpmverify probe
    
    Similar to 1bf9b8bbb8bee732ea3e870d5510dcbf52f96705

Author: Zbyněk Moravec <ybznek@users.noreply.github.com>
Date:   Fri Mar 11 19:34:10 2016 +0100

Merge pull request #350 from jan-cerny/fix_rpmverifyfile_probe
    
    Issue #348: Fix offline mode in rpmverifyfile probe

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Mar 11 10:40:46 2016 -0500

Merge pull request #351 from jan-cerny/fix_file_probe
    
    Fix offline mode in file probe

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Mar 11 14:08:09 2016 +0100

Fix offline mode in file probe
    
    I have found a logical error in file probe.
    The offline mode in file probe is enabled on only when a mutex cannot be initialized,
    which is not very likely and also it is definitely not what we want.
    This commit enables the offline mode in file probe.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Mar 11 11:42:51 2016 +0100

Issue #348: Fix rpminfo probe
    
    Similar to 91a5dd92512585b0c6b0fa2fcd2f8ef700fd9b6f

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Mar 11 10:49:02 2016 +0100

Issue #348: Fix offline mode in rpmverifyfile probe
    
    If we chroot into filesystem where is not a RPM database,
    we should not fail to init the probe.

Author: Zbynek Moravec <xmorav27@stud.fit.vutbr.cz>
Date:   Fri Mar 11 09:37:36 2016 +0100

tests/sce: refactoring

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Feb 24 11:57:35 2016 +0100

tests/sce: Add test for SCE in DS
    
    https://github.com/OpenSCAP/openscap/issues/295

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Mar 9 13:23:27 2016 -0500

Merge pull request #327 from ybznek/maint-1.2-offline-scan-support
    
    Enable offline scan of some probes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Feb 16 09:49:38 2016 +0100

probe/shadow: ofline scan
    
    Offline scan of the probe currently isn't possible
    without some hacking. More info:
    https://github.com/OpenSCAP/openscap/issues/344

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Feb 12 12:54:45 2016 +0100

probe/password: offline scan
    
    Offline scan of the probe currently isn't possible
    without some hacking. More info:
    https://github.com/OpenSCAP/openscap/issues/344

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Feb 12 12:51:59 2016 +0100

probe/partition: offline scan
    Current way of offline scan doesn't support this
    probe to be offline. More info here:
    https://github.com/OpenSCAP/openscap/issues/343

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Mar 8 14:40:05 2016 -0500

Merge branch 'maint-1.0' into maint-1.2

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Mar 7 14:55:11 2016 +0100

Seap: Fix double free
    
    The free caused "double free or corruption (fasttop)" when I was using
    probe from commandline. Free is already in SEXP_list_free

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Mar 4 10:42:38 2016 -0500

Merge pull request #337 from jan-cerny/fix_old_glibc
    
    Fix compiler errors on older systems

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Mar 4 13:08:07 2016 +0100

Fix compilation on RHEL5
    
    The ARGV_const_t is not defined in RHEL5 rpm library.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Mar 3 15:59:46 2016 +0100

Ignore gnulib files that we do not include yet

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 3 14:35:00 2016 +0100

Fix compiler errors on older systems
    
    Functions pthread_getname_np and pthread_setname_np were introduced
    in glibc 2.12. With older versions of glibc used on RHEL5 or SLES11
    OpenSCAP failed to compile. This commit adds an autoconf rule
    to detect the presence of these functions.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Mar 3 14:27:51 2016 +0100

Merge pull request #336 from jan-cerny/issue_317
    
    Issue #317: Fix oscap-docker traceback

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Mar 3 14:09:15 2016 +0100

Other files worth hiding

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Mar 3 14:03:09 2016 +0100

Hide even less typical files that starts with 'tests_'

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Mar 3 14:00:39 2016 +0100

Use test_*.log glob to ignore files
    
    We have been adding new test directories while forgeting .gitigore
    recently. That is because it was inpractical.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Mar 3 12:42:54 2016 +0100

Ignore config/test-driver it should never be commited
    
    See 0802fb2326f6f189f8d31ad9cb84c9c4e8fd340f

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 3 11:36:22 2016 +0100

Issue #317: Fix oscap-docker traceback
    
    Oscap-docker gave a traceback when providing a wrong image ID
    or wrong container ID.
    This commit fixes the traceback by catching the exception
    and writes an error message on stderr.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Mar 1 16:09:48 2016 +0100

Merge pull request #332 from mpreisler/oscap_chroot
    
    Added the oscap-chroot tool - scan filesystems on arbitrary paths

Author: Martin Preisler <martin@preisler.me>
Date:   Sun Feb 28 17:28:02 2016 -0500

Merge pull request #335 from jan-cerny/cleanup_devel
    
    Change messages category to DEVEL

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Feb 28 20:36:29 2016 +0100

Change messages category to DEVEL
    
    While browsing verbose log produced on Fedora SSG,
    I have discovered several messages which disturb in INFO level.
    They should be in DEVEL category instead.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Feb 25 15:40:19 2016 -0500

Fixes in oscap-chroot manpage, replaced oscap-vm with oscap-chroot

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Feb 25 15:37:57 2016 -0500

Added the oscap-chroot tool - scan filesystems on arbitrary paths

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Feb 25 15:13:16 2016 +0100

Merge branch 'maint-1.0' into maint-1.2
    
    Before 1.2.9
    
    Conflicts:
            cpe/openscap-cpe-dict.xml
            cpe/openscap-cpe-oval.xml

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Feb 25 14:57:23 2016 +0100

Fedora 25 CPE
    
    Fedora 24 has been branched.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Feb 25 14:23:18 2016 +0100

Refactor: replace implementation by function call.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Feb 25 13:47:26 2016 +0100

Build policies that are useful.
    
    This supports:
     * Anaconda installer showing only useful profiles (rhbz#1256879)
     * Satellite 6 showing only useful profiles (rhbz#1302230)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Feb 25 11:40:15 2016 +0100

Move xccdf_policy_model_create_policy_by_id to policy_model module.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Feb 25 11:06:05 2016 +0100

Refactor: Extract function: _xccdf_policy_model_create_policy_by_id
    
    Let's put it into a separate file. I have been playing with the idea of
    creating xccdf_policy_model module for ages. I never wanted to copy code
    from one file to another, however we can start levitating slowly by
    changes towards separate file for each.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Feb 24 23:55:48 2016 +0100

Remove OSCAP_DEPRECATED from .c file
    
    It does not work as intended. It only works in the header file.
    it makes following function deprecated as well.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Feb 24 23:53:45 2016 +0100

Refactor: Extract function: _xccdf_policy_model_create_policy_by_id

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Feb 24 21:55:45 2016 +0100

Update copyright notice.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Feb 24 11:11:10 2016 -0500

Merge pull request #331 from ybznek/maint-1.2-offline-scan-tested-probes
    
    Maint 1.2 offline scan tested probes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Feb 16 09:49:21 2016 +0100

probe/rpmverifypackage: enable ofline scan

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Feb 12 14:28:31 2016 +0100

probe/symlink: enable ofline scan

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Feb 12 13:44:46 2016 +0100

probes/rpmverify: enable offline scan

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Feb 12 12:53:42 2016 +0100

probe/rpmverifyfile: enable offline scan

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Feb 24 13:05:21 2016 +0100

Whitespace fix, remove tabulator.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Feb 16 10:51:26 2016 +0100

Merge pull request #325 from jan-cerny/open_file_message
    
    Improve a message about opening file

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Feb 15 16:40:07 2016 +0100

Merge pull request #314 from jan-cerny/test_results
    
    Provide basic information about evaluating test results in verbose log

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Feb 15 16:00:24 2016 +0100

Merge pull request #326 from jan-cerny/fix_man
    
    Fix manual page for oscap-docker

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Feb 15 15:57:38 2016 +0100

Merge pull request #324 from jan-cerny/type_of_test
    
    Show type of test and test comment in verbose log

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Feb 15 15:54:31 2016 +0100

Merge pull request #316 from jan-cerny/issue303
    
    Issue #303: Fix oscap-docker traceback

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Feb 15 10:37:31 2016 +0100

Fix manual page for oscap-docker
    
    The tool is called oscap-docker, not docker-oscap.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Feb 14 20:42:56 2016 +0100

Improve a message about opening file
    
    This should show a more understandable message
    when a probe opens some file (eg. configuration file)
    to collect data.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Feb 14 20:03:16 2016 +0100

Show type of test and test comment in verbose log
    
    Currently we show only test id in log message.
    However, if we show only id, user will need look
    to the OVAL file to figure out which test is which.
    We can easily improve it by adding object type and its comment
    into the message.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Feb 14 15:11:31 2016 +0100

Describe check_existence parameter in verbose log
    
    Every test in OVAL has a check_existence attribute, which
    describe how many objects must exist on the system to evaluate
    as true. This affects result of OVAL test.
    This commit adds messages for each possible value of the
    check_existence attribute.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Feb 13 15:17:35 2016 +0100

Inform about flags of items
    
    Collected objects in OVAL can have different flags.
    Those flags affect result of OVAL test.
    This commit adds some messages to verbose log that
    will report the flag and its meaning.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Feb 13 13:25:33 2016 +0100

Drop one of the messages about item-state comparison
    
    This commit also ensures that the remaining message
    will not be displayed when a test does not contain any state.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Feb 13 13:23:58 2016 +0100

Add a comment

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Feb 13 13:05:19 2016 +0100

Do not expose oval_check_get_description() in public API

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Feb 13 11:28:41 2016 +0100

Return NULL if a test contains no states

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Feb 13 10:55:14 2016 +0100

Do not expose oval_test_get_state_names() in public API

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 9 17:59:53 2016 +0100

Inform about result of item-state comparison

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 9 14:09:29 2016 +0100

Improve format of a message

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 9 14:08:57 2016 +0100

Inform user about item-state comparison in verbose log

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 9 14:07:20 2016 +0100

Show some information about result evaluation

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 9 19:59:34 2016 +0100

Create another function to convert oval_check_t to string
    
    There already exists oval_check_get_text() function.
    However, the returned string cannot be easily used in a meaningful
    English sentence, because some of values contains a verb but some
    of them does not.
    This new function will be used in verbose debugging messages.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 9 12:10:45 2016 +0100

Add function generating string with list of states

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Feb 12 15:11:43 2016 +0100

Merge pull request #323 from jan-cerny/extend_definition
    
    Add message about extend definition

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Feb 12 15:10:07 2016 +0100

Merge pull request #322 from jan-cerny/tests
    
    Inform user in verbose log that a test will be evaluated

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Feb 12 15:09:03 2016 +0100

Merge pull request #321 from jan-cerny/definition_result
    
    Show definition result in verbose log

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Feb 12 15:07:58 2016 +0100

Merge pull request #320 from jan-cerny/item_vs_state
    
    Add an info message

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Feb 12 14:14:45 2016 +0100

Add message about extend definition
    
    In OVAL the definitions usually contain one or more tests,
    but they can also be extended by referencing to other definitions.
    The refrenced definitions are required to be evaluated to get
    final result of the definition under the evaluation.
    This construct is sometimes used in SSG.
    Currently we don't show the information about extending definition
    in verbose log. The log is very confusing for a reader if a
    extended definition is evaluated.
    This commit adds an info message when extend_definition is used.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Feb 12 14:07:05 2016 +0100

Inform user of verbose log that a test will be evaluated
    
    We currently inform user that a definition will be evaluated,
    but definition contains one or more tests, and we currently
    don't show it in log, which complicates the understanding
    of whole story.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Feb 12 10:39:59 2016 +0100

Show definition result in verbose log
    
    Verbose log is missing the most basic information - final result
    of a definition.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Feb 11 15:59:40 2016 +0100

Add an info message
    
    This message informs that some item of a collected object has matched a state.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Feb 11 11:22:44 2016 +0100

Merge pull request #319 from isimluk/maint-1.0
    
    Desperate grave digger

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Feb 11 10:27:49 2016 +0100

Voodoo: Tell us where is zombie
    
    We think she left dead, but the priest (ps) conceals where it is.
    
    This is not a black magic really. We think the zombie process should be
    listed in cemetery, but sometimes it is missing. Good thing is to put
    more details into the log. Next time we need to record the moon phase.
    
    See github issue #315 for more details.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Feb 11 09:55:08 2016 +0100

Issue #303: Fix oscap-docker traceback
    
    The oscap-docker utility failed with a traceback with Python 3
    whe invoked with no argument.
    It will print the help instead.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Feb 10 21:48:50 2016 +0100

Merge pull request #313 from jan-cerny/reply_message
    
    Change category of two messages to DEVEL

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 9 19:06:59 2016 +0100

Change category of two messages to DEVEL
    
    These messages informs about some details in communication protocol
    between library and probes. They are not interesting from point of
    view of OVAL content.

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Feb 8 09:20:05 2016 +0100

Merge pull request #308 from ybznek/maint-1.2-oscap-docker-http-fix
    
    oscap docker http header fix

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Feb 8 09:10:46 2016 +0100

oscap-docker: Fix oversight
    
    True was only for my debugging. Shoult not be commited.

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Feb 8 00:13:46 2016 +0100

Merge pull request #311 from jan-cerny/fix_suppression_file
    
    Adjust the valgrind suppression file

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Feb 7 21:48:49 2016 +0100

Adjust the valgrind suppression file
    
    After merging c97417a328687ebf49f4da0ac54d6104d15297c7, we must suppress
    the memory leak in curl_global_init directly, not via curl_easy_init.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Feb 7 17:32:05 2016 +0100

Merge pull request #309 from moolitayer/readme_fix
    
    [doc] remove duplicate line from readme

Author: Mooli Tayer <mtayer@redhat.com>
Date:   Sun Feb 7 15:24:15 2016 +0200

[doc] remove duplicate line from readme

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Feb 3 16:48:15 2016 +0100

oscap-docker: Fix last-modified error condition

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Feb 2 16:37:28 2016 +0100

oscap-docker: Fix HTTP last-modified issue
    
    Fix problem where server sends Last-modified and oscap-docker
    wants to read header with key last-modified

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Feb 2 14:20:33 2016 +0100

Oscap-docker fix no last-modified header message

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Feb 2 14:20:04 2016 +0100

Oscap-docker refactoring

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 28 13:58:56 2016 +0100

Update issue tracker url in our man pages.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 28 13:56:27 2016 +0100

Update issue tracker url in our man page.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 28 13:53:35 2016 +0100

Update scap-workbench url in the user manual

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 28 13:43:44 2016 +0100

rhbz#1299969: The /bin/oscap does not exists everywhere
    
    while the /usr/bin/oscap does.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Jan 28 13:18:35 2016 +0100

Merge pull request #301 from dahaic/oscap-vm
    
    oscap-vm cosmetic changes

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Jan 17 23:13:23 2016 +0100

Remove the code that has been commented out.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Jan 17 22:11:49 2016 +0100

Make the SCE test a little bit stricter
    
    And remove some unnecessary characters along the way.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Jan 17 22:00:44 2016 +0100

Refactor: Rename variable to reflect the purpose better
    
    Currently, the oscap_source is used for non-SCE files, therefore, the
    full path is now used only for SCE files.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 16 17:24:31 2016 +0100

tests: arf processing: Assert for bits in oscap info

Author: Marek Haicman <dahaic@gmail.com>
Date:   Wed Jan 27 22:27:49 2016 +0100

Updated oscap-vm to fallback to fusermount only if guestunmount is not present on the system

Author: Marek Haicman <dahaic@gmail.com>
Date:   Tue Jan 26 23:02:30 2016 +0100

Update oscap-vm to require only fuse for unmounting (to enable older versions of libguestfs)

Author: Marek Haicman <dahaic@gmail.com>
Date:   Tue Jan 26 21:15:27 2016 +0100

Update oscap-vm to print --help even if dependencies are not met

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Jan 26 09:51:22 2016 +0100

Merge pull request #293 from jan-cerny/fix_debug
    
    Fix scope of a global variable

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Jan 26 09:35:20 2016 +0100

Merge pull request #299 from jan-cerny/maint-1.0
    
    Fix SCE tests

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 25 12:49:04 2016 +0100

Fix SCE tests
    
    This commit adds missing files to the EXTRA_DIST section of makefile.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Jan 23 09:09:42 2016 +0100

Merge pull request #298 from mpreisler/envp_fix_maint12
    
    Use canonical PATH when executing remediations

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jan 21 14:44:50 2016 +0100

Use canonical PATH when executing remediations
    
    This makes content author's life a little bit easier. The change doesn't
    break any existing remediations but new remediations relying on these
    PATHs won't work with old openscap!

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jan 21 11:55:00 2016 +0100

Merge branch 'maint-1.0' into maint-1.2

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jan 21 09:06:56 2016 +0100

Merge pull request #297 from mpreisler/remediation_envp
    
    Use { NULL } instead of NULL as envp when executing remediations

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jan 20 16:31:05 2016 +0100

Use { NULL } instead of NULL as envp when executing remediations
    
    Using just NULL is discouraged and nonportable, see `man 2 execve`.
    This commit doesn't change behavior, just improves portability.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Jan 20 14:17:45 2016 +0100

Merge pull request #294 from jan-cerny/change_category
    
    Change messages category to DEVEL

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jan 19 17:23:29 2016 +0100

Change messages category to DEVEL
    
    These messages has not value from the OVAL evaluation point of view.
    They may be interesting for OpenSCAP developers, so they should
    have DEVEL category.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jan 19 15:56:25 2016 +0100

Fix scope of a global variable
    
    Static modifier made the pointer to log file unreachable
    from other modules. It caused that some debug messages from some
    functions (eg. SEXP_list_sort()) could not be printed into log.
    This commit fixes the bug by removing the 'static' modifier.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 18 17:33:20 2016 +0100

Bump version after release
    
    Next release from the maint-1.2 branch will be 1.2.9

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 18 16:42:59 2016 +0100

OpenSCAP 1.2.8

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 18 15:24:10 2016 +0100

Bump soname from 8.7.0 to 8.7.1
    
    No symbols have been added or removed

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 18 10:45:45 2016 +0100

Merge branch 'maint-1.0' into maint-1.2
    
     Conflicts:
            src/OVAL/oval_component.c
            src/XCCDF_POLICY/xccdf_policy.c
            src/common/oscap_acquire.c
            tests/API/OVAL/unittests/Makefile.am
            tests/API/XCCDF/unittests/Makefile.am

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Jan 18 09:35:44 2016 +0100

Merge pull request #291 from jan-cerny/filter_msg
    
    Add a message about filter used within an object

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Jan 16 20:43:09 2016 +0100

Add a message about filter used within an object
    
    OVAL objects can contain optional filter element. The filter
    references a state. The filter can exclude or include items
    conforming to the state from the set of collected objects.
    Since the filter can significantly affect the result of
    object evaluation it would be nice to inform user about
    processing the filter. This commit adds a short message to the
    verbose log.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 15 10:06:43 2016 +0100

Let's make a warning when unsupported relationship is processed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 15 09:54:52 2016 +0100

Allow both arfvocab and arfrel in core:relationship
    
    To my understanding of NISTIR-7694 is not very clear on the topic.
    Reading the prose, the 'isAbout' is supposed to be a part of arfrel,
    however in the example, the isAbout is prefixed by arfvocab.
    
    I guess it is better to suppose both.
    
    Afterall, so far, we are exporting arfrel:isAbout, while we are
    supporting only arfvocab:isAbout when reading it.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 17:29:05 2016 +0100

Refactor: Let's break existing condition into prefix/suffix parts
    
    This is needed because in a next commit I want to introduce various
    other prefixes.
    
    This slightly changes behaviour for cases like "ardvocab::blah::isAbout.
    I tend to think this is acceptable since any such case would render RDS
    invalid.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 17:11:56 2016 +0100

Introduce oscap_str_endswith

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 16:59:11 2016 +0100

Refactor: Promote oscap_str_startswith function.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 16:54:03 2016 +0100

Notify user when a DataStream without a relationship element is encoutered.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 16:48:36 2016 +0100

Refactor: Extract function: _parse_relationships_node

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 15:50:26 2016 +0100

Refactor functions related to rds_report_request_index to a module.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 15:19:48 2016 +0100

Refactor functions related to rds_report_index to a module.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 15:11:32 2016 +0100

Comment the rds_asset_index structure's item.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 14:56:06 2016 +0100

Refactor function related to rds_asset_index to a module.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Jan 14 14:04:24 2016 +0100

Merge pull request #290 from jan-cerny/improve_format
    
    Improve format of verbose log

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 13:58:16 2016 +0100

Update 'ds *' bash completion with recently introduced --skip-valid option.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 14 13:54:12 2016 +0100

Add missing bash completion for rds-split command.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jan 13 12:22:57 2016 +0100

Change message category to DEVEL
    
    These messages encapsulate the SEXP object dump, which is already in DEVEL level,
    so it seems to be a good idea to have corresponding messages also in devel level.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jan 8 14:19:53 2016 +0100

Change format of verbose log
    
    To improve readibility of the log, this commit:
    * begins each line with category of message
    * then shows name of the process
    * next after that displays the message itself
    * displays additional info (pid, thread id, function names)
      at the end of line and only in DEVEL level to not disturb non-develepers
    * displays SEXP dumps only in devel level

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 21:01:35 2016 +0100

Refactor: Extract function: _xccdf_session_load_xccdf_benchmark
    
    This is one of the classy refactoring commits that decreases complexity
    a lot. Enjoy the silence.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jan 12 16:54:51 2016 +0100

Merge pull request #274 from jan-cerny/soup
    
    Add libcurl leak to valgrind suppression file

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Jan 11 16:09:56 2016 +0100

Merge pull request #280 from jan-cerny/object_component_report_todos
    
    Report errors on evaluation of object component of a variable + TEST

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Jan 11 15:44:51 2016 +0100

Merge pull request #287 from jan-cerny/add_curl_global_init
    
    Use global functions to initialize libcurl

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Dec 31 19:39:05 2015 +0100

Test reporting errors on evaluation of object component of an variable
    
    This test tests whether The ObjectComponentType complex type is processed
    as defined in OVAL specification.  It contains one correct case and two
    cases which should lead to report an error.
    For details see comments in supplied OVAL content.
    However the test does not test fields of the record data type, because the record
    data type is used only within ldap_item and sql57_item which we don't test in upstream.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Dec 31 19:33:00 2015 +0100

Report errors on evaluation of object component of an variable
    
    This commit removes TODOs in _oval_component_evaluate_OBJECTREF() function
    by implementing error reporting as required by OVAL specification:
    If an entity is not found with a name that matches the value of the item_field
    an error is be reported when determining the value of an variable.
    Similar statement applies also for entities of the record data type.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Jan 11 14:15:12 2016 +0100

Merge pull request #276 from jan-cerny/issue272
    
     Issue #272: XCCDF rule unscored role is not working

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 11 13:42:17 2016 +0100

Use global functions to initialize libcurl
    
    As from the libcurl API documentation,
    http://curl.haxx.se/libcurl/c/curl_easy_init.html
    we should call curl_global_init to initialize the libcurl library
    and curl_global_cleanup to clean the memory.
    We should not rely on the fact that it would be called automatically.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Jan 11 12:59:40 2016 +0100

Merge pull request #286 from jan-cerny/remove_line_maint-1.2
    
    Remove linebreaks from debug messages in maint-1.2

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 11 11:52:26 2016 +0100

Print end of line explicetely at the end of each message

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jan 11 10:43:40 2016 +0100

Remove linebreaks from debug messages in maint-1.2
    
    To allow to change or redesign the format of verbose log we have to remove
    line breaks at the end of some messages. Then it will be possible to move
    the message to the begining or middle of a line without any hacks.
    The commit also enforces usage of dI, dE, dW macros instead of
    ocassionaly appearing oscap_dlprintf macro. This change makes
    codebase more consistent regarding the debugging.
    This is a continuing of work done in PR#282, which has already removed
    the line breaks from maint-1.0 branch.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Jan 10 17:14:18 2016 +0100

Merge branch 'maint-1.0' into maint-1.2
    
     Conflicts:
            src/OVAL/oval_defModel.c
            src/OVAL/oval_probe.c
            src/OVAL/oval_probe_ext.c
            src/OVAL/oval_probe_session.c
            src/OVAL/oval_sexp.c
            src/OVAL/probes/SEAP/generic/strbuf.c
            src/OVAL/probes/SEAP/seap-command.c
            src/OVAL/probes/SEAP/seap-message.c
            src/OVAL/probes/SEAP/seap-packet.c
            src/OVAL/probes/oval_fts.c
            src/OVAL/probes/probe/entcmp.c
            src/OVAL/probes/probe/icache.c
            src/OVAL/probes/probe/input_handler.c
            src/OVAL/probes/probe/worker.c
            src/OVAL/probes/unix/linux/partition.c
            src/XCCDF_POLICY/xccdf_policy.c
            src/common/debug.c
            src/common/elements.c
            src/common/oscapxml.c

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 20:29:49 2016 +0100

Refactor: Extract function: _print_xccdf_status
    
    Also, print status when presenting a Benchmark within a DataStream

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 20:25:48 2016 +0100

Print-out 'resolved' info even for Benchmarks within a DataStream.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 20:19:30 2016 +0100

Refactor: Expand function: _print_sds_component_xccdf_benchmark
    
    It turned out that this indirection is no longer needed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 19:59:41 2016 +0100

oscap info should handle tailoring file.
    
    No matter how non trivial this is. It is useful info for the user.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 19:53:33 2016 +0100

Refactor: pass profile profile to the function instead of the benchmark
    
    That will allow us to re-use the function for profiles in Tailoring
    file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 19:02:58 2016 +0100

Refactor: Extract function: _print_xccdf_benchmark

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 18:56:38 2016 +0100

Remove unneeded workaround
    
    This workaround has been introduced by move of oscap_acquire module to
    the public api (6cf83d89). Nowdays, the directories are no longer used
    when parsing datastream. Thus, the workaround for should not.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 18:51:40 2016 +0100

Refactor: Extract function: _print_xccdf_testresults

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 18:45:55 2016 +0100

Refactor: Extract function: _print_xccdf_referenced_files

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 18:38:36 2016 +0100

Parse Tailoring/profiles even when the Benchmark is not present

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 18:09:38 2016 +0100

Refactor: Extract function: _print_xccdf_profiles

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 17:34:00 2016 +0100

Tests: Ensure that unselected&unchecked rule results in unselected

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 16:56:36 2016 +0100

Check Rule's role after checking the selection.
    
    We need to obey the Item Processing Algorithm that requires the @selected
    attribute to be processed *before* the @role attribute. See Table 35:
    Item Processing Algorithm Sub-Steps in NISTIR-7275r4 for further info.
    
    The issue has been introduced by 90128e9f37bdaa796496a67c2600c37794562698.
    
    Addressing broken output of the oscap scanner such as:
    Title   Test something
    Rule    xccdf_gov.nist_rule_validation.r3005_rule_5
    Result  fail
    
    notchecked
    
    notchecked
    
    notchecked

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 9 16:32:50 2016 +0100

Extend existing test to cover DataStream split

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 8 16:54:21 2016 +0100

Extend existing test to cover DataStream evaluation
    
    of XCCDF with multiple OVAL files that each have the same basename.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 8 16:03:25 2016 +0100

Fix broken 'ds sds-split'
    
    The sds-split has been broken since 159dc7a8.
    
    Now, The sessions know the components by theirs relative name. That is
    mainly because of trac#434. Since oscap_source, we only need real path
    for XMLs when dumping on disk and for SCE (any operation).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 8 15:54:34 2016 +0100

Pass target_dir downto ds_dump_component_sources
    
    The variable is unused atm.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Jan 8 16:12:02 2016 +0100

Merge pull request #285 from jan-cerny/review_multiline
    
    Reviewed linebreaks in multiline calls of debugging macros

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jan 8 15:18:28 2016 +0100

Reviewed linebreaks in multiline calls of debugging macros
    
    All messages should not finish with '\n'.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Jan 8 11:53:19 2016 +0100

Merge pull request #284 from jan-cerny/remove_pathstrip
    
    Always strip the source file path

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Jan 8 11:40:01 2016 +0100

Merge pull request #282 from jan-cerny/remove_linebreaks
    
    Remove EOLs from messages and use macros everywhere

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Jan 8 11:15:54 2016 +0100

Merge pull request #283 from jan-cerny/textfilecontent_bug
    
    RHBZ#1285757: OpenSCAP pattern match test wrongly results with pass

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jan 8 10:50:17 2016 +0100

Always strip the source file path
    
    Do not depend on an environment variable.
    Now we will use behavior which used to be default.
    Showing the full filepath is not as helpful to slow down the program
    by reading an environment variable.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 8 10:45:52 2016 +0100

Improve error message when user selects tailoring instead of benchmark
    
    Previously:
    OpenSCAP Error: Find element 'Tailoring' while expecting element: 'Benchmark' [benchmark.c:140]
    Failed to import XCCDF content from 'xccdf.xml'. [benchmark.c:73]
    
    Now:
    OpenSCAP Error: The selected checklist document is not 'XCCDF Checklist', but 'XCCDF Tailoring'. [xccdf_session.c:485]

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jan 8 09:54:37 2016 +0100

RHBZ#1285757: OpenSCAP pattern match test wrongly results with pass
    
    The textfilecontent54 probe currrently works only with UTF8 strings.
    It is unable to assess files in different encodings (eg. ISO 8859-1),
    because pcre_exec returns an error code. However, the probe reports
    that assessed file does not exist. This commit fixes this wrong
    behavior in a way that the probe will report an error message
    in OVAL results and set the object flag to error when regular
    expression matching failed and pcre_exec() returned an error code.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 8 09:53:19 2016 +0100

Improve the error message when asserting for element.
    
    Previously:
    OpenSCAP Error: Failed to import XCCDF content from 'xccdf.xml'. [benchmark.c:73]
    
    Now:
    OpenSCAP Error: Find element 'Tailoring' while expecting element: 'Benchmark' [benchmark.c:140]
    Failed to import XCCDF content from 'xccdf.xml'. [benchmark.c:73]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 8 09:48:43 2016 +0100

Introduce xccdf_element_to_str function
    
    This can be useful in many places. I am wondering why we don't have it
    already.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jan 7 17:28:54 2016 +0100

Add a end of line

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jan 7 17:01:01 2016 +0100

Remove EOL from messages and use macros everywhere
    
    To allow to change or redesign the format of verbose log we have to remove
    line breaks at the end of some messages. Then it will be possible to move
    the message to the begining or middle of a line without any hacks.
    The commit also enforces usage of dI, dE, dW macros instead of
    ocassionaly appearing oscap_dlprintf macro. This change makes
    codebase more consistent regarding the debugging.
    To avoid possible wrong usage of debugging macros or wrong formating
    by developers in future, first part of this change has to be done
    in the maint-1.0 branch.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jan 7 15:04:46 2016 +0100

Introduce the concept of frozen branches in the versioning document

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 7 14:44:16 2016 +0100

Do not try to read Tailoring file by Benchmark parser
    
    Addressing:
    Ref-Id: scap_gov.nist_cref_r3005-xccdf_tailored_01
    OpenSCAP Error: Failed to import XCCDF content from 'xccdf.xml'. [benchmark.c:73]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 7 14:22:41 2016 +0100

Refactor: Extract function: _print_sds_component_xccdf_benchmark

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 7 13:00:12 2016 +0100

Merge branch 'maint-1.0' into maint-1.2
    
    Conflicts:
          src/common/oscap_acquire.c
          tests/API/OVAL/unittests/Makefile.am
          tests/API/OVAL/unittests/all.sh
          tests/probes/Makefile.am

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 7 09:45:58 2016 +0100

Add missing scap document name for tailoring

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 1 19:29:54 2016 +0100

Bump the date.
    
    We wish happy new year to all our users.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jan 1 17:48:17 2016 +0100

A man page typo correction.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jan 1 13:01:51 2016 +0100

Merge pull request #275 from msrubar/create_dir_model
    
    Create dir model

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Dec 16 11:48:39 2015 +0100

Add test for basic usage of OVAL Directives
    
    This test tests a case when the user decides to use OVAL Directires to remove
    the <definitions> element from OVAL Results.

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Dec 16 10:24:49 2015 +0100

Create directives model before importing OVAL Directives into it.
    
    I forgot to add the line which creates a directives model when I introduced the
    OVAL Session. The line was forgotten during the refactoring and wasn't caught
    yet because we don't have and UNIT tests using OVAL Directives.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Dec 22 14:08:34 2015 +0100

Improve verbose logging experience when var/ent comparison fails
    
    Addressing scenarios with error message like:
    OpenSCAP Error: Conversion of the string "" to an integer (64 bits) failed: Invalid argument [oval_cmp.c:110]

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Dec 21 15:03:34 2015 +0100

Merge pull request #278 from jan-cerny/issue277
    
    Issue #277: Fix a segmentation fault

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 21 13:26:01 2015 +0100

Issue #277: Fix a segmentation fault
    
    When a variable is not found in OVAL document, the OpenSCAP should
    write an error message and finish correctly.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Dec 16 18:51:46 2015 +0100

Add a test for issue #272
    
    This test tests counting scores of rules with role attribute set
    to "unscored" on all 4 scoring models.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Dec 16 18:16:32 2015 +0100

Issue #272: XCCDF rule unscored role is not working
    
    A rule with unscored role should not be counted in score.
    XCCDF sepcification says about xccdf:Rule/@role="unscored":
    if the rule is selected, then check it and include the results in
    any report, but do not include the result in score computations.
    This commit fixes counting scores to be in line with specification.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Dec 16 13:15:19 2015 +0100

Add libcurl leak to valgrind suppression file
    
    Valgrind reports memory leaks when using curl_easy_init(),
    but we clean the memory correctly.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Dec 16 08:27:16 2015 +0100

Merge pull request #271 from jan-cerny/fix_shellcheck
    
    Fix shellcheck warning

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Dec 15 14:22:53 2015 +0100

Fix Shellcheck warnings
    
    Fixed two warnings of SC2155: Declare and assign separately
    to avoid masking return values.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Dec 15 14:02:01 2015 +0100

Fix shellcheck warning
    
    SC2155: Declare and assign separately to avoid masking return values

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Dec 15 10:42:01 2015 +0100

Merge pull request #268 from jan-cerny/fixleak2
    
    Plug a memory leak

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Dec 15 10:01:57 2015 +0100

Merge pull request #269 from jan-cerny/fix_missing_initialisation
    
    Fix using uninitialized value

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Dec 15 10:00:22 2015 +0100

Merge pull request #267 from jan-cerny/fixleak1
    
    Fix a resource leak reported by coverity scan

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Dec 15 09:54:44 2015 +0100

Merge pull request #266 from jan-cerny/fix_negative_returns
    
    Fix wrong check of return value

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 14 14:18:51 2015 +0100

Fix using uninitialized value
    
    Coverity scan has reported this function may return unitialized value.
    Although it is not likely to happen, it is easily to fix it.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 14 13:46:58 2015 +0100

Plug a memory leak
    
    Fixing a resource leak reported by coverity scan.
    SEXP_string_cstr allocates memory which was not freed.
    Pay attention that SEXP_string_cstr is a confusing name,
    because it returns "char *", not "const char *".
    Therefore the return value must be freed after use.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 14 13:28:28 2015 +0100

Fix a resource leak reported by coverity scan
    
    Variable "fp" going out of scope leaks the storage it points to.
    We should close the file.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 14 12:58:03 2015 +0100

Fix wrong check of return value
    
    Coverity scan has reported NEGATIVE_RETURNS defect.
    The "dup(fd)" was passed to a parameter that cannot be negative.
    This commit fixes the issue by checking the value for possible -1.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 14 11:53:57 2015 +0100

Merge pull request #265 from mzaoui/fix_264
    
    Fix issue #264: Path to 'oscap_source.h' header file is missing

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 14 11:50:37 2015 +0100

Merge pull request #263 from mzaoui/fix_262
    
    Fix issue #262: Docs: Missing build dependency in README.md

Author: Michaël Zaoui <mzaoui@localhost.localdomain>
Date:   Sun Dec 13 19:09:49 2015 +0100

Fix issue #264: Path to 'oscap_source.h' header file is missing
    
    When configuring OpenSCAP with the --enable-cce flag and building OpenSCAP, the following error message is produced: "cce.c:40:26: fatal error: oscap_source.h: No such file or directory".
    
    Solution to this problem consists in adding the '-I$(top_srcdir)/src/source/public' to the 'libcce_la_CPPFLAGS' directive of the "src/CCE/Makefile.am" file.

Author: Michaël Zaoui <mzaoui@localhost.localdomain>
Date:   Sun Dec 13 18:20:24 2015 +0100

Fix issue #262: Docs: Missing build dependency in README.md
    
    Add bzip2-devel build dependency to the 'README.md' file.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sat Dec 12 07:05:41 2015 +0100

Merge pull request #261 from msrubar/add_xpath_package
    
    Package perl-XML-XPath in needed for 'make check'

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Fri Dec 11 20:43:30 2015 +0100

Package perl-XML-XPath in needed for 'make check'

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Dec 11 09:34:11 2015 +0100

Merge pull request #260 from jan-cerny/sysctl_test
    
    Add a test for sysctl probe

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Dec 11 09:33:05 2015 +0100

Merge pull request #259 from jan-cerny/test_segfault
    
    Test behavior of OVAL module with invalid OVAL content

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Dec 9 14:16:39 2015 +0100

Add a test for sysctl probe
    
    This is a very simple test for sysctl probe.
    We haven't had test the probe yet.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Dec 10 15:03:51 2015 +0100

Add more assertions to a test
    
    This commit adds an assert to invalid state in result file
    and that a error message happens to stderr.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Dec 9 16:27:36 2015 +0100

Test behavior of OVAL module with invalid OVAL content
    
    This test tests "oscap oval eval" with "--skip-valid" option
    on invalid OVAL content. The tested content references a not
    existent state. This situation was one of two reasons of
    a segmentation fault, described in issue #191.
    The issue #191 has been fixed already. This commit wants to
    test it to avoid regressions in future.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Dec 10 14:48:20 2015 +0100

Improve error message

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Dec 8 13:49:35 2015 +0100

Merge pull request #257 from ybznek/maint-1.2-oscap-docker-fix
    
    oscap-docker: fix CVE path

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Dec 8 12:59:02 2015 +0100

oscap-docker: fix CVE path

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Dec 7 14:16:09 2015 +0100

Merge pull request #254 from jan-cerny/new_sce_test
    
    Add a new test for SCE module

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 7 10:55:32 2015 +0100

Add a new test for SCE module
    
    Test "--check-engine-results" together with "--report" options
    on SCE content. Tests for issue #231 and RHBZ #1275369.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 7 11:02:07 2015 +0100

Merge pull request #253 from ybznek/maint-1.2-oscap-docker-fix
    
    Oscap-docker: python3 fix

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 7 07:58:59 2015 +0100

Merge pull request #252 from msrubar/fix_typo
    
    The package is called libtool not libtools

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Dec 4 20:03:34 2015 +0100

oscap-docker: fix debug messages format

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Dec 4 18:43:02 2015 +0100

oscap-docker: Python3 fix: convert bytes to string

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Sun Dec 6 20:52:25 2015 +0100

The package is called libtool not libtools

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Dec 4 17:31:52 2015 +0100

Allow use of https:// method within check-content-ref/@href.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Dec 4 17:31:13 2015 +0100

Refactor: Extract function: _str_startswith

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Dec 3 10:56:44 2015 +0100

Bump version after release
    
    Next release from the maint-1.2 branch will be 1.2.8

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Dec 1 18:56:04 2015 +0100

openscap-1.2.7

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Dec 1 17:28:11 2015 +0100

Bump soname from 8.6.0 to 8.7.0
    
    Two new symbols has been added, one enum has changed.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Dec 1 12:36:01 2015 +0100

Merge pull request #246 from jan-cerny/object_var_ref
    
    Inform about referencing variable in a object component

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Dec 1 12:31:41 2015 +0100

Merge pull request #245 from jan-cerny/variables
    
    Write values of referenced variables to log

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Dec 1 10:46:17 2015 +0100

Merge branch 'maint-1.0' into maint-1.2

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 30 12:58:35 2015 +0100

Merge pull request #244 from jan-cerny/improve_warning
    
    Improve a warning

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 30 12:46:30 2015 +0100

Inform about referencing variable in a object component
    
    In OVAL objects, object components can have var_ref attribute,
    using him it is possible to reference a variable. This variable
    affects the final content of a collected object. This is one of
    tricky things in OVAL, so it may be useful to report it in log.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 30 08:26:28 2015 +0100

Write values of referenced variables to log
    
    If an OVAL definition contains objects indirectly referenced by
    a local variable, it is useful to see the values of this variable
    after the referenced object has been evaluated.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 30 10:41:26 2015 +0100

Merge pull request #243 from jan-cerny/objects_via_variables
    
    Inform users about indirect references of objects

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 30 08:23:52 2015 +0100

Improve a warning
    
    Adding a missing end of line and change wording of this message.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Nov 29 12:21:49 2015 +0100

Merge pull request #242 from jan-cerny/fix_typo
    
    Fix a typo

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Nov 29 12:21:30 2015 +0100

Merge pull request #241 from jan-cerny/oval_sexp
    
    Change category of a message to devel

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Nov 29 12:21:01 2015 +0100

Merge pull request #240 from jan-cerny/xccdf_policy_messages
    
    Add info messages to xccdf_policy.c

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Sun Nov 29 12:19:24 2015 +0100

Merge pull request #239 from jan-cerny/manual
    
    Issue #238: Mention verbose mode in user manual

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Nov 28 19:31:25 2015 +0100

Add a info message when a variable is querying

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Nov 28 19:24:18 2015 +0100

Inform user about referencing an object from a variable
    
    In an OVAL definitions document, a local variable can contain
    an object_component subelement which references an OVAL object
    identified by its href arrtibute. This object must be evaluated
    in order to complete evaluating a state that variable belongs to.
    This commit adds info message about processing this speciality.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Nov 28 19:16:15 2015 +0100

Inform user when a state references a variable
    
    A state can reference a variable. This information is important
    when that variable references an object which needs to be evaluated
    first. This commit adds a info message which prints state id,
    variable id and type of variable (local/static/external).

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Nov 28 19:01:05 2015 +0100

Fix a typo

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Nov 28 16:56:17 2015 +0100

Change category of a message to devel
    
    For the evaluation process it is not useful to know that
    an object was decoded from SEXP successfully. It seems
    to be a message for a developer.

Author: Jan Černý <jcerny@redhat.com>
Date:   Sat Nov 28 10:13:37 2015 +0100

Add info messages to xccdf_policy.c
    
    This commit gives user basic understanding of XCCDF evaluation process.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Nov 27 17:47:58 2015 +0100

Issue #238: Mention verbose mode in user manual
    
    Describe new verbose mode and update the manual. Also typo fixes.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 26 13:00:55 2015 +0100

Merge pull request #237 from jan-cerny/seap_packet
    
    Change category of messages

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 26 13:00:39 2015 +0100

Merge pull request #236 from jan-cerny/seap_command
    
    Change category of messges in SEAP command function

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 26 10:40:37 2015 +0100

Merge pull request #235 from jan-cerny/seap_message_free
    
    Change category of a message

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 26 10:40:20 2015 +0100

Merge pull request #234 from jan-cerny/worker
    
    Change category of messages in worker routine to devel

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 26 10:30:06 2015 +0100

Change category of messages
    
    These messages were not suitable be in info category.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 26 10:10:24 2015 +0100

Change category of messges in SEAP command function
    
    Hexa values of some variables are interesting only for a developer.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 26 09:53:24 2015 +0100

Change category of a message
    
    Information about freeing memory is interesting only for a C developer.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 26 09:45:29 2015 +0100

Change category of messages in worker routine to devel
    
    These messages are not important from OVAL content point of view.
    We should put them to devel level to improve readability of log.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Nov 25 11:34:43 2015 +0100

Merge pull request #233 from jan-cerny/issue231
    
    Issue #231: Fix a segmentation fault

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Nov 25 11:33:10 2015 +0100

Merge pull request #232 from jan-cerny/fix_sce
    
    RHBZ#1275369: Fix retrieving SCE results from external results file

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 25 10:25:04 2015 +0100

Issue #231: Fix a segmentation fault
    
    We should use here xmlSetGenericErrorFunc instead of initGenericErrorDefaultFunc
    because initGenericErrorDefaultFunc resets only error handler, but we must
    also reset the error context, which is possible only by xmlSetGenericErrorFunc.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 25 09:56:41 2015 +0100

RHBZ#1275369: Fix retrieving SCE results from external results file
    
    OpenSCAP was not able to show SCE results from external SCE results file
    in the HTML report, because incorrect XPath expression was in our XSLT
    template which is used to genarate the HTML report.
    According to the XCCDF specification, the path to the external SCE results file
    should be found in a "href" attribute of a "check-content-ref" element.
    But we were trying to get it from a "check" element, where it shouldn't be.
    This caused I/O warnings. In my opinion there must be some cases when
    some information would be missing in a HTML report.

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 23 19:57:19 2015 +0100

Merge pull request #228 from jan-cerny/xccdf_session_new
    
    Add an info message + refactor

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 23 19:55:03 2015 +0100

Merge pull request #229 from jan-cerny/fix_invalid_read
    
    Fix valgrind warning in rpmverifyfile probe

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 23 16:49:46 2015 +0100

Merge pull request #227 from isimluk/maint-1.0
    
    Prefer to pass message up to the caller over stderr print-out

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 23 16:19:46 2015 +0100

Fix valgrind warning in rpmverifyfile probe
    
    When we were invetigating issue #212, we found that there are some
    invalid reads from memory in the rpmverifyfile_probe.
    This commit fixes the valgrind warning, however it does not fix
    the issue.
    Addressing:
    Invalid read of size 1
       at 0x4C2BC22: strlen (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4E9D9E5: probe_item_create (probe-api.c:1431)
       by 0x405BAB: rpmverify_additem (rpmverifyfile.c:352)
       by 0x405BAB: rpmverify_collect (rpmverifyfile.c:297)
       by 0x405BAB: probe_main (rpmverifyfile.c:472)
       by 0x40761F: probe_worker (worker.c:951)
       by 0x407242: probe_worker_runfn (worker.c:54)
       by 0x715F554: start_thread (pthread_create.c:333)
       by 0x767EB9C: clone (clone.S:109)
     Address 0xc933bc0 is 0 bytes inside a block of size 37 free'd
       at 0x4C29D6A: free (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x5441DA1: rpmfiFN (rpmfi.c:1640)
       by 0x544F84D: rpmVerifyFile (verify.c:62)
       by 0x40595E: rpmverify_collect (rpmverifyfile.c:294)
       by 0x40595E: probe_main (rpmverifyfile.c:472)
       by 0x40761F: probe_worker (worker.c:951)
       by 0x407242: probe_worker_runfn (worker.c:54)
       by 0x715F554: start_thread (pthread_create.c:333)
       by 0x767EB9C: clone (clone.S:109)

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 23 11:52:21 2015 +0100

Add an info message

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 23 11:46:00 2015 +0100

Refactor - avoid repeated calls to a function
    
    We call oscap_source_get_scap_type 5 times here.
    It would be better to call it only once, store the return value
    to a variable and use that variable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 23 10:31:05 2015 +0100

Merge pull request #226 from jan-cerny/msg_input_handler
    
    Change category of messages to DEVEL

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 23 10:03:18 2015 +0100

Prefer to pass message up to the caller over stderr print-out

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 23 10:01:10 2015 +0100

Make sure to report text of CannotContinueError exception

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 23 09:51:09 2015 +0100

Merge pull request #219 from jan-cerny/small_message_improvements
    
    Small message improvements

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 23 09:50:06 2015 +0100

Merge pull request #218 from jan-cerny/msg_oval_session
    
    Add new messages to OVAL session

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 23 09:26:25 2015 +0100

Change category of messages to DEVEL

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Nov 22 21:49:21 2015 +0100

Avoid traceback on rpmbuild errors
    
    Chances are that the rpmbuild failure is not a problem in our source,
    but in the inputs given to the tool.
    
    Otherwise, we receive unneeded Abrt reports like
    https://retrace.fedoraproject.org/faf/reports/723484/

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Nov 20 17:02:32 2015 +0100

Show profile description in HTML report and guide

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Nov 20 14:55:27 2015 +0100

Merge pull request #224 from jan-cerny/fix_named_threads
    
    Move setting thread names to a right place

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 18 09:08:43 2015 +0100

Add new messages to OVAL session
    
    With those few messages we would slowly start to see
    the "story of OVAL evaluation" in the log file.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 18 09:22:45 2015 +0100

Add a message which says that validation will be started

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Nov 20 11:54:19 2015 +0100

Merge pull request #217 from jan-cerny/msg_oval_agent
    
    Add new debugging messages to OVAL agent.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Nov 19 12:11:52 2015 +0100

Preliminary support for Ansible Playbooks within xccdf:fix
    
    How to test:
    1) Put appropriate fix element into your content:
      <fix system="urn:xccdf:fix:script:ansible">
        - name: testing xccdf fix
          file:
               path=/etc/passwd
               mode=0644
      </fix>
    
    2) Run the remediation either:
    
      # oscap xccdf eval --remediate ...
    
    or
    
      # oscap xccdf eval --results /tmp/x.xml
      # oscap xccdf remediate /tmp/x.xml

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 18 08:59:11 2015 +0100

Add new debugging messages to OVAL agent.
    
    This will make the log file more understandable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 19 11:19:19 2015 +0100

Move setting thread names to a right place
    
    Thread names should be set inside the thread routine.
    This fixes a segfault which might happen when a thread termitates
    sooner than its name could be set.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 19 10:06:29 2015 +0100

Merge pull request #220 from jan-cerny/msg_oval_probe
    
    Add debugging messages to oval_probe.c

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 19 09:54:05 2015 +0100

Merge pull request #215 from jan-cerny/fix_logfile
    
    Fix opening a log file

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 19 09:50:33 2015 +0100

Merge pull request #211 from jan-cerny/improve_verbose
    
    Improve verbose mode

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 19 09:47:26 2015 +0100

Merge pull request #223 from jan-cerny/maint-1.0
    
    Add set -x to a test

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Nov 19 09:43:48 2015 +0100

Add set -x to a test
    
    This test sometimes randomly fails. I would like to know more
    when it will happen next time.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 18 09:54:20 2015 +0100

Add information about querying system information

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 18 09:51:44 2015 +0100

Add messages about creating or querying the system characteristics model

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 18 09:49:47 2015 +0100

Add a message about querying an object

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 18 09:18:28 2015 +0100

Tell user what "URI" means
    
    Also use a macro instead of a function for better readability

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 16 18:19:42 2015 +0100

Fix opening a log file
    
    There was a serious issue in verbosing feature. Some messages were
    missing in log file. It is fixed by opening log file in append mode
    in both library and probes.
    The commit also improves error messages which are displayed when
    an error happens while opening file by adding message representing
    the error code (errno).

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 16 12:53:50 2015 +0100

Merge pull request #213 from jan-cerny/issue206
    
    Issue #206: Improve error messages for verbose feature

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Nov 16 12:51:41 2015 +0100

Merge pull request #214 from jan-cerny/issue205
    
    Issue #205: Fix header dependencies

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 16 11:08:05 2015 +0100

Issue #205: Fix header dependencies
    
    The util.h doesn't depend on public/oscap_debug.h, so we should
    remove the include from there. On the other hand, debug_priv.h
    depends on public/oscap_debug.h, so we should add include there.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 16 10:36:40 2015 +0100

Issue #206: Improve error messages for verbose feature
    
    This helps users who used incorrectly --verbose and --verbose-log-file
    how to use those features right.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 10 10:05:18 2015 +0100

Add missing end of line after SEXP dump in verbose log

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 10 09:59:19 2015 +0100

Change verbosity level of some messages to DEVEL
    
    These messages are interesting only from a developer point of view.
    They can be ignored by users interested only in OVAL evaluation.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 9 16:32:09 2015 +0100

Merge pull request #210 from jan-cerny/change_level
    
    Change category of some debug messages to DEVEL verbosity level

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 9 14:18:48 2015 +0100

Change category of some messages to DEVEL
    
    These messages describe implementation details and can be ignored
    by users who are interested in OVAL evaluation.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 9 10:15:06 2015 +0100

Merge branch 'maint-1.0' into maint-1.2
    
    Promoting recent fixes to maint-1.2.
    
    Conflicts:
            cpe/openscap-cpe-oval.xml
            tests/Makefile.am

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 9 09:27:45 2015 +0100

Merge pull request #209 from jan-cerny/fix_cpe_schematron
    
    Fix and test openscap-cpe-oval.xml

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Nov 6 11:19:23 2015 +0100

Merge pull request #208 from jan-cerny/refactor
    
    Refactor + fix a segfault

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Nov 6 10:20:25 2015 +0100

Use $top_srcdir for better readability

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Nov 5 18:02:33 2015 +0100

Merge pull request #201 from jan-cerny/dpkg
    
    Support  OVAL 5.11.1 in dpkginfo probe

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Nov 5 17:55:03 2015 +0100

Merge pull request #207 from jan-cerny/fix_cpe
    
    Fix invalid CPE content

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 4 17:49:42 2015 +0100

Issue #191: Fix a segfault

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 20:39:49 2015 +0100

Move an item to the bottom of oval_datatype_t enum

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 20:38:27 2015 +0100

Add a warning message

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 29 10:14:48 2015 +0100

Support OVAL 5.11.1 in dpkginfo probe
    
    This adds new data type "debian_evr_string" and uses it in dpkginfo probe
    to process OVAL content of version 5.11.1 and newer.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 29 10:12:56 2015 +0100

Fix build system to build the dpkginfo probe

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 4 15:46:55 2015 +0100

Add a test checking validity of CPE OVAL content

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 3 11:32:12 2015 +0100

Fix schematron warnings in openscap-cpe-oval.xml
    
    This OVAL file did not pass validation by schematron.
    A rpminfo_test should not reference a rpmverifyfile_object,
    it can be referenced only from a rpmverifyfile_test.
    We must change tests to rpmverifyfile_test and
    also change respective states.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 2 17:55:23 2015 +0100

Refactor: Extract function oval_family_to_namespace
    
    This code repeats 4 times in OpenSCAP. This commit refactors it out
    to a single function. This functions converts oval family to a XML namespace.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 3 09:10:47 2015 +0100

Fix invalid CPE content
    
    This OVAL file was invalid. There were missing objects and states.
    It was one of causes of issue #191 (segfault on oscap xccdf eval).

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 3 08:33:31 2015 +0100

Merge pull request #190 from isimluk/gcc-warn
    
    Fix some gcc warnings

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Oct 24 13:39:33 2015 +0200

Be explicit when casting type.
    
    Addressing:
    unix/linux/rpmverifypackage.c: In function ‘rpmverify_collect’:
    unix/linux/rpmverifypackage.c:286:32: error: passing argument 3 of
    ‘rpmcliVerify’ from incompatible pointer type
    [-Werror=incompatible-pointer-types]
        ret = rpmcliVerify(ts, qva, poptGetArgs(rpmcli_context));
                                    ^
    In file included from unix/linux/rpmverifypackage.c:54:0:
    /usr/include/rpm/rpmcli.h:269:5: note: expected ‘ARGV_const_t {aka char
    * const*}’ but argument is of type ‘const char **’
     int rpmcliVerify(rpmts ts, QVA_t qva, ARGV_const_t argv);
         ^

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 2 19:21:09 2015 +0100

Merge pull request #169 from jan-cerny/verbose
    
    Add `--verbose` option to OpenSCAP

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 2 17:04:22 2015 +0100

Revert "Make oval-testdef key less consuming."
    
    This reverts commit 6b278aad5943249dbc871ccca710306be4b76db2.
    
    See github issue #202

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Nov 2 16:57:54 2015 +0100

Merge pull request #204 from jan-cerny/issue203
    
    Issue #203: oscap oval eval --skip-valid doesn't skip validating

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 2 16:11:20 2015 +0100

Issue #203: oscap oval eval --skip-valid doesn't skip validating
    
    When refactoring the code into the "OVAL session", we have probably
    forgotten about the --skip-valid option.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 20:16:47 2015 +0100

Move string conversion up in code and check for operation result

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 16:58:49 2015 +0100

Terminate program if an error ocurred while turning verbose mode on

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 16:58:32 2015 +0100

Change meaning of return value of oscap_set_verbose

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 16:55:08 2015 +0100

Use more convenient variable type

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 16:51:10 2015 +0100

Change function return type from int to oscap_verbosity_levels

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 16:48:15 2015 +0100

Move an enumeration of levels to a public header file
    
    This commit moves oscap_verbosity_levels enum to public/oscap_debug.h
    which will allow us to use it in whole codebase.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 16:03:14 2015 +0100

Use " *" instead of "* " in definition of a function

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 30 15:59:50 2015 +0100

Move debug.h to public/oscap_debug.h
    
    Also update includes and Makefile appropriately.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 23 18:17:21 2015 +0200

Add "static" modifier for __debuglog_level variable
    
    We don't need to declare __debuglog_level variable as extern anymore,
    because macro debug(l) that used it has been already removed.
    This commit declares this variable as static, because it is used only inside
    this module, and also removes it from header file from hidden API.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 17:46:15 2015 +0200

New macro name in a header file

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 14:17:40 2015 +0200

Add debug.h to Makefile.am

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 14:13:01 2015 +0200

Remove unused macros

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:43:48 2015 +0200

Update bash automatic completion function
    
    Adding verbosity options

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:42:43 2015 +0200

Add verbose option to the  manual page

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:35:57 2015 +0200

Add a function checking correct usage of "verbose*" options
    
    This function checks that both --verbose and --verbose-log-file
    are used, and not only one of them. Also checks that only specified
    level names are used.
    If an user uses the options incorrectly, then appropriate error
    message will help him.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:28:16 2015 +0200

Enable debbugging messages in probes
    
    A probe retreives verbosity level and log file name from 2
    environmental variables. When some of these environmental variables
    is not set, debugging messages remain turned off.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:25:51 2015 +0200

Introduce verbosity options to oscap XCCDF module
    
    The "oscap xccdf eval" module will have two new options
    --verbose and --verbose-log-file.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:22:14 2015 +0200

Introduce verbosity options to oscap oval module
    
    Two new options --verbose and --verbose-log-file will be added to
    oscap oval eval, oscap oval collect and oscap oval analyse.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:16:46 2015 +0200

Add new fields to oscap_action structure
    
    This commit adds "verbosity level" and "verbose log file" into the
    oscap_action structure. These will be used later to store values of
    new options that will be introduced to the oscap command line tool:
    --verbose and --verbose-log-file.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 13:08:48 2015 +0200

Make debugging functions possibly working in standard mode
    
    Debugging functions of OpenSCAP can be now turned on by calling
    the oscap_set_verbose() function.
    Also refactors and removes code duplicities in debug.c.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Oct 26 13:46:21 2015 +0100

Merge branch 'maint-1.0' into maint-1.2

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Oct 24 11:32:31 2015 +0200

new glibc forces us to use _DEFAULT_SOURCE
    
    but we keep _BSD_SOURCE here for compatibility with older libc.
    
    Addressing:
    In file included from /usr/include/string.h:25:0,
                     from cpename.c:37:
    /usr/include/features.h:148:3: error: #warning "_BSD_SOURCE and
    _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" [-Werror=cpp]
     # warning "_BSD_SOURCE and _SVID_SOURCE are deprecated, use
     # _DEFAULT_SOURCE"

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 23 17:48:59 2015 +0200

Avoid variable that is present only in debug mode
    
    Addressing:
    probes/probe-api.c: In function 'probe_obj_attrexists':
    probes/probe-api.c:552:9: error: variable 'name_len' set but not used
    [-Werror=unused-but-set-variable]
      size_t name_len;
             ^

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 23 16:57:38 2015 +0200

Avoid variable that is present only in debug mode
    
    Addressing:
    probes/probe-api.c: In function 'probe_obj_getattrval':
    probes/probe-api.c:507:9: error: variable 'name_len' set but not used
    [-Werror=unused-but-set-variable]
      size_t name_len;
             ^

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 23 16:53:25 2015 +0200

Fix a typo.
    
    This is where I lost my dignity. By fixing a warning I broke the build!

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 23 16:35:37 2015 +0200

Fix freshly introduced warnings.
    
    Addressing:
    oscap_acquire.c: In function 'oscap_acquire_url_download':
    oscap_acquire.c:146:32: warning: implicit declaration of function
    'oscap_buffer_new' [-Wimplicit-function-declaration]
      struct oscap_buffer* buffer = oscap_buffer_new();
                                    ^
    oscap_acquire.c:146:32: warning: initialization makes pointer from
    integer without a cast [-Wint-conversion]
    oscap_acquire.c:157:3: warning: implicit declaration of function
    'oscap_buffer_free' [-Wimplicit-function-declaration]
       oscap_buffer_free(buffer);
       ^
    oscap_acquire.c:161:17: warning: implicit declaration of function
    'oscap_buffer_get_length' [-Wimplicit-function-declaration]
      *memory_size = oscap_buffer_get_length(buffer);
                     ^
    oscap_acquire.c:162:15: warning: implicit declaration of function
    'oscap_buffer_bequeath' [-Wimplicit-function-declaration]
      char* data = oscap_buffer_bequeath(buffer); // get data and free
    buffer struct
                   ^
    oscap_acquire.c:162:15: warning: initialization makes pointer from
    integer without a cast [-Wint-conversion]
    oscap_acquire.c: In function 'write_to_memory_callback':
    oscap_acquire.c:169:2: warning: implicit declaration of function
    'oscap_buffer_append_binary_data' [-Wimplicit-function-declaration]
      oscap_buffer_append_binary_data((struct oscap_buffer*)userdata, ptr,
    new_received_size);

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 9 13:18:40 2015 +0200

Make oval-testdef key less consuming.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Oct 21 20:16:23 2015 +0200

Merge pull request #188 from jan-cerny/pci_dss_group_in_report
    
     Group rules by PCI DSS requirement in HTML report

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 17:39:41 2015 +0200

Regenerate xccdf-resources.xsl

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Oct 21 17:26:31 2015 +0200

Group rules by PCI DSS requirement in HTML report
    
    References to PCI DSS have been added recently for rules in SCAP Security
    Guide. Although it is possible now to group these rules by their
    PCI DSS identifiers in HTML report, it is not user-friendly.
    An URL is displayed in combobox and the groups are in random order.
    This commit improves the usability of report. First, "PCI DSS Requirement"
    is displayed in combobox instead of an URL. Second, groups are sorted
    by the requirement number.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 20 20:22:11 2015 +0200

typo in test comment

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Oct 20 16:21:32 2015 +0200

Merge pull request #185 from ybznek/maint-1.0-versioning
    
    Add versioning document

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Oct 20 10:52:31 2015 +0200

Add versioning document

Author: Zbynek <ybznek@users.noreply.github.com>
Date:   Tue Oct 20 10:29:07 2015 +0200

Merge pull request #179 from mpreisler/bzip_in_oscap_docker
    
    Download bzipped variants of RHSA OVAL data in oscap-docker

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Oct 19 10:04:34 2015 +0200

Merge pull request #183 from msrubar/add_how_to_contribute
    
    Add how to contribute

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Fri Oct 16 11:27:54 2015 +0200

Enhance README and Convert it into Markdown.
    
    The markdown version of the README document is already in the maint-1.2 but we
    also want it in the the maint-1.0 branch so we can have all the contribute
    documents and manuals in the maint-1.0. The commit also adds links to the new
    "How to contribute to the openscap" and versioning and will replace the old link
    to documentation to our new oscap user manual.

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Fri Oct 16 11:07:44 2015 +0200

Add "How to contribute to OpenSCAP" document
    
    This little how-to can help new Red Hat interns and contributors with basic
    questions that I have in the beginnings.

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Oct 16 16:45:00 2015 +0200

Merge pull request #184 from ybznek/maint-1.0-xccdf-resolve-test
    
    tests: add test to oscap xccdf resolve

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 16 12:15:01 2015 +0200

tests: add test for oscap xccdf resolve

Author: Marcus Meissner <meissner@suse.de>
Date:   Wed Oct 14 14:47:38 2015 +0200

this patch autodetects the SUSE Linux Enterprise versions (without SP) and openSUSE versions

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Oct 14 14:37:04 2015 +0200

Added /utils/oscap-docker to .gitignore
    
    It is auto-generated as part of ./configure

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Oct 13 16:10:32 2015 +0200

Don't check for `umount` in oscap-vm, it's not used in the script

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Oct 14 14:33:50 2015 +0200

Fail at configure if oscap-docker is enable but bzip2 wasn't found
    
    This prevents surprises later when oscap-docker downloads bzipped RHSA
    OVAL and oscap fails to load it.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Oct 14 11:07:42 2015 +0200

Download bzipped variants of RHSA OVAL data in oscap-docker
    
    Saves bandwidth and (at least in most cases) time.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Oct 13 18:18:58 2015 +0200

Merge pull request #178 from mpreisler/https_in_oscap_docker
    
    Use HTTPS for fetching the CVE OVALs in oscap-docker

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Oct 13 15:54:36 2015 +0200

Use HTTPS for fetching the CVE OVALs in oscap-docker
    
    Added HTTPSHandler in case other people want to use https for fetching
    and they want to change the URL.

Author: Zbynek <ybznek@users.noreply.github.com>
Date:   Mon Oct 12 20:58:52 2015 +0200

Merge pull request #173 from ybznek/maint-1.2-oval-results-relative-path
    
    Fix loading oval results from relative path

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Oct 12 11:56:28 2015 +0200

Merge pull request #175 from mpreisler/oscap_vm
    
    oscap-vm - scan virtual machines and their images

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 12 11:17:53 2015 +0200

tests: Replace realpath by readlink
    
    Realpath doesn't exists on rhel6

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 17 20:55:07 2015 +0200

tests: Add test for loading OVAL/OVAL results using relative path

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Oct 6 07:48:46 2015 +0200

Remove oval_template parameter from oval_results
    
    Data from arf are now used, so we don't need to load OVAL
    results files

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Oct 6 07:33:23 2015 +0200

Store generated arf report
    
    When you need generate ARF report and HTML report the arf is
    generated only once now.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 29 12:49:27 2015 +0200

Refactoring: Skip ARF creation when report was not requested.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 28 20:03:00 2015 +0200

Use arf to export oval_results to report
    
    This commit solve problem with escaped oval_results path
    which wasn't loadable from xslt

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 28 18:36:14 2015 +0200

Move create_arf_source to extra function

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 18 11:27:27 2015 +0200

Escape relative path of oval results.
    
    as well as we did with absolute path.

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Oct 9 17:44:24 2015 +0200

Merge pull request #177 from jan-cerny/fix_sysctl
    
    Fix errors of sysctl probe

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 9 16:53:39 2015 +0200

Improve comments

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 9 14:18:37 2015 +0200

Skip "stable_secret" files in sysctl probe
    
    Files /proc/sys/net/ipv6/conf/*/stable_secret cannot be read until
    they are not set. It caused read error when collecting data
    in sysctl probe. In case of error while reading from some of
    these files, the probe will skip it.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Oct 9 14:08:44 2015 +0200

Fix errors of sysctl probe caused by reading write-only files
    
    While collecting data from the /proc/sys filesystem, the sysctl probe
    tried to read from some files that are write-only, for example
    /proc/sys/net/ipv4/route/flush. The "sysctl" utility skips those files.
    This commit introduce skipping them to OpenSCAP.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Oct 9 13:19:56 2015 +0200

Merge pull request #176 from ybznek/maint-1.0-env-variable
    
    environmentvariable58 refactoring

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Oct 9 13:12:21 2015 +0200

Removed --remediate from supported options in oscap-vm
    
    Remediation doesn't work in offline mode, oscap will tell that to the
    user if it's attempted.

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Oct 9 11:56:06 2015 +0200

Use guestunmount instead of just umount in oscap-vm

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Oct 9 11:54:27 2015 +0200

Removed a comment in oscap-vm that is no longer true, any storage can be root now

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Oct 9 11:47:47 2015 +0200

shellcheck related fixes in utils/oscap-vm

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 9 11:17:25 2015 +0200

environmentvariable58 refactoring int->bool

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Oct 8 19:28:39 2015 +0200

Let guestmount guess the mountpoints for us

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Oct 8 19:26:12 2015 +0200

Minor doc fixes for oscap-vm, added a manpage

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Oct 8 19:20:36 2015 +0200

rmdir the mountpoint after oscap-vm unmounts

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Oct 8 19:19:24 2015 +0200

Added oscap-vm to the autotools machinery

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Oct 8 19:13:22 2015 +0200

Initial version of oscap-vm, supports both image and domain scanning

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 7 15:47:11 2015 +0200

Ensure position of fd is always set correctly.
    
    With newer glibc, rewind is enough. However, with older glibc (rhel6)
    rewind does not affect underlying fd. Let's use lseek directly to
    ensure the position is correct everywhere.
    
    http://projects.theforeman.org/issues/12073

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 7 14:05:55 2015 +0200

whitespace fix

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Oct 5 14:40:46 2015 +0200

Merge pull request #160 from jan-cerny/rpmverifyfile
    
    Support OVAL 5.11.1 in rpmverifyfile probe + test

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Oct 5 01:35:15 2015 +0200

Bump version after release
    
    Next release from maint-1.2 branch will be 1.2.7.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 2 18:20:53 2015 +0200

openscap-1.2.6

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 2 18:34:43 2015 +0200

Fix distibution of oscap-docker
    
    oscap-docker should not be in archive generated by make dist
    It should be generated from oscap-docker.id

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Oct 2 17:18:25 2015 +0200

Merge pull request #172 from ybznek/maint-1-2-release
    
    oscap-docker changes before release

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 2 11:14:53 2015 +0200

oscap-docker: fix some pylint hints

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 2 10:56:12 2015 +0200

oscap-docker: improve python3 compatibility

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 2 10:42:45 2015 +0200

oscap-docker: fix issue with HTTP HEAD unavailable
    
    When oscap-docker cannot determine last-modified of remote file
    because HTTP HEAD request cannot be performed, don't use local copy

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Oct 2 08:53:25 2015 +0200

dynamically determine oscap-docker python dir
    
    Use default python version to determine in which folder should be oscap-docker
    installed.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 1 21:19:09 2015 +0200

Use /etc/passwd instead of /etc/redhat-release in rpmverifyfile tests

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Oct 1 13:13:53 2015 +0200

Merge pull request #154 from jan-cerny/check_existence
    
    Support check_existence attribute in state entities + test

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 29 19:16:29 2015 +0200

openscap-1.2.6

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 29 18:18:08 2015 +0200

Bump soname from 8.5.1 to 8.6.0
    
    23 new symbol has beed added, one enum has been changed

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 29 15:26:49 2015 +0200

Merge branch 'maint-1.1' into maint-1.2

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 29 15:06:17 2015 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Sep 17 14:12:28 2015 +0200

Rename to oval_status_counter

Author: Martin Preisler <martin@preisler.me>
Date:   Sun Sep 27 15:21:52 2015 +0200

Merge pull request #168 from ybznek/maint-1.0-fix-oscap-string-test
    
    Maint 1.0 fix oscap string test

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 18:57:18 2015 +0200

tests: test_oscap_string add #include <config.h>

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 18:56:20 2015 +0200

tests: test_oscap_string add licence

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Sep 25 18:35:55 2015 +0200

Merge pull request #167 from ybznek/maint-1.2-glob-to-regex
    
    test: glob-to-regex fix #include <config.h>

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 17:51:44 2015 +0200

test: glob-to-regex fix #include <config.h>

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Fri Sep 25 13:53:06 2015 +0200

Distribute the html version of the oscap user manual

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 16:35:02 2015 +0200

Merge branch 'baude-improve_fetch' into maint-1.2

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 10:34:21 2015 +0200

Fix getting of non-mandatory HTTP header field
    
    When HTTP server doen't provide last-modified header, it can cause error
    state. https://tools.ietf.org/html/rfc7232#section-2.2

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 09:34:19 2015 +0200

oscap_docker print debug messages to stderr instead of stdout

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 09:31:54 2015 +0200

oscap_docker fix return value

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 25 09:30:04 2015 +0200

Merge branch 'improve_fetch' of git://github.com/baude/openscap into baude-improve_fetch

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 24 15:28:38 2015 +0200

Merge branch 'maint-1.1' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 24 15:27:27 2015 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Sep 24 15:26:45 2015 +0200

Merge pull request #164 from ybznek/maint-1.1-oval-details
    
    tests: oval_details fix issue with make distclean

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Sep 22 17:07:42 2015 +0200

tests: oval_details fix issue with make distclean
    
    make distclean was deleting important test files (countries.xml, foo.txt)

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Sep 22 16:19:53 2015 +0200

Basic test for rpmverifyfile probe with OVAL 5.11 content

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 16 17:05:41 2015 +0200

Test rpmverifyfile probe, with focus on OVAL 5.11.1 support

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 16 16:58:09 2015 +0200

Support OVAL 5.11.1 in rpmverifyfile probe
    
    New attributes "nocaps" and "nodigest" in rpmverifyfile_object/behaviors
    were introduced and attribute "nomd5" was deprecated in OVAL 5.11.1.
    Also a new child element "filedigest_differs" within rpmverifyfile_item
    deprecates element "md5_differs" in OVAL 5.11.1.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 22 16:53:54 2015 +0200

Fixed a logical error in strto_uint64_bin sanity check

Author: Brent Baude <bbaude@redhat.com>
Date:   Fri Sep 18 10:35:26 2015 -0500

Improve caching and fetching of CVE input data
    
        Previously, we determined if new CVE data should be
        fetched by specificying the max age of the files in
        units of hours.
    
        The new implementation uses the following to determine
        if it should fetch the new file:
    
            * If the file isn't in the local cache dir, fetch it
            * If the file is local, check the mtime of the remote
              file and compare it to the local file.  If they
              differ by more than two seconds, fetch a new one.
            * Else, do not fetch a new one.
    
        We also now return the fully qualified file name in question
        from _fetch_single.  And in the case of fetch_dist_data, we
        return a list of all the filenames.  This is in preparation
        of the files being compressed upstream as we will want to know
        which file(s) we are dealing with.
    
        And finally, debug was added to the time related functions so
        they are easier to debug.  This will also come in handy when
        we contemplate handling of compressed and/or uncompressed
        files.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Sep 15 10:41:01 2015 +0200

Add documentation

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 14 17:48:31 2015 +0200

Added version numbers to oscap-docker error messages

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 14 16:39:54 2015 +0200

Removed oscap-docker from shell script check
    
    It is no longer a bash script.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 14 13:23:58 2015 +0200

Check that '_clean_temp_container_by_path' method is available in DockerMount
    
    The code relies on it but this method is not in upstream yet, only in a
    pull request.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Sep 14 12:43:54 2015 +0200

Move item statuses to a separate file

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Sep 14 12:45:03 2015 +0200

Add reference to 'man oscap' to --help

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 11 20:10:31 2015 +0200

Do not print None to stdout

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 11 20:11:42 2015 +0200

Do not print newline after returned string wih newline
    
    print creates empy line after output and cause tests dont pass

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Sep 14 10:33:21 2015 +0200

Merge pull request #159 from jan-cerny/named_threads
    
    Show process name and thread name in debug logs

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Sep 14 09:51:16 2015 +0200

Use correct error family

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Sep 13 09:22:08 2015 +0200

Show process name and current thread name in debug logs

Author: Jan Černý <jcerny@redhat.com>
Date:   Sun Sep 13 09:21:15 2015 +0200

Name threads

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 11 17:07:14 2015 +0200

Fail with nicer messages when user has old Atomic or no Atomic at all

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 11 16:39:42 2015 +0200

Added license headers, renamed classes to shut up PEP8, minor refactoring

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 11 16:23:44 2015 +0200

oscap_docker_python .pyc files added to gitignore

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 11 16:22:54 2015 +0200

Install the oscap_docker_python helper package as part of `make install`

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Sep 11 16:16:57 2015 +0200

Merge pull request #149 from msrubar/oscap_user_manual
    
    Add user manual for oscap

Author: Lenka Horáková <lhorakov@redhat.com>
Date:   Tue Sep 1 16:02:22 2015 +0200

Add user manual for oscap

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 11 11:13:48 2015 +0200

Replaced old oscap-docker with oscap-docker.py
    
    Fixed up shebang, executable bit

Author: Brent Baude <bbaude@redhat.com>
Date:   Wed Aug 19 15:25:18 2015 -0500

Port oscap-docker from bash to python
    
        This supports two key changes in scanning docker images
        and containers where now both atomic and openscap-daemon
        are capable of scanning.  The port to python should allow
        more utilities to leverage the existing openscap-docker
        function and create less diversion.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Sep 10 21:38:20 2015 +0200

Merge pull request #158 from msrubar/remove_unused_func
    
    Remove unused oval_gen_report function

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Thu Sep 10 16:25:51 2015 +0200

Remove unused oval_gen_report function
    
    Functionality of this function was moved into the OVAL Sesssion during the
    refactoring of app_evaluate_oval (see 42895cc157905036b0c7e11772fa9e9cbabb3f30)
    and it's not used anymore. The function wasn't remove during the refactoring
    because the warning complaining about it got lost among other warnings.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 9 16:37:33 2015 +0200

Fix bad variable name

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 9 16:09:32 2015 +0200

Serialize check_existence attribute only if OVAL core schema version >= 5.11.1

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 2 15:49:02 2015 +0200

Test support of check_existence attribute in state entities

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 29 14:55:18 2015 +0200

Support check_existence attribute in state entities

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Sep 9 15:31:51 2015 +0200

Merge pull request #107 from jan-cerny/schv
    
    Parsing and populating multiple platform-specific schema_version elements

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 9 13:07:46 2015 +0200

Move components enumeration to a header file, add count into enum

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Sep 9 13:06:29 2015 +0200

Allocate memory directly on heap, do not use strdup.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Sep 8 14:11:10 2015 +0200

Merge pull request #156 from jan-cerny/trac505_leak
    
    trac#505: Plug memory leaks

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 8 13:13:40 2015 +0200

Added a specific advice how to resolve XCCDF document into the XSLT warning

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 8 13:11:40 2015 +0200

Warn if XCCDF Benchmark is unresolved while HTML guide is being generated

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Sep 8 12:19:02 2015 +0200

trac#505: Plug memory leaks
    
    Addressing:
    
    11 bytes in 1 blocks are indirectly lost in loss record 1 of 5
       at 0x4C29BFD: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x757E529: strdup (in /usr/lib64/libc-2.17.so)
       by 0x4E84D9A: oscap_strdup (util.c:65)
       by 0x4ED3DDF: xccdf_refine_rule_clone (profile.c:107)
       by 0x4EE1780: xccdf_policy_add_profile_refine_rules (xccdf_policy_resolve.c:190)
       by 0x4EE4676: xccdf_policy_new (xccdf_policy.c:1773)
       by 0x4EE42AD: xccdf_policy_model_get_policy_by_id (xccdf_policy.c:1880)
       by 0x4EDF7B4: xccdf_session_set_profile_id (xccdf_session.c:363)
       by 0x40B91B: app_evaluate_xccdf (oscap-xccdf.c:482)
       by 0x407E37: oscap_module_call (oscap-tool.c:260)
       by 0x407E37: oscap_module_process (oscap-tool.c:345)
       by 0x406D5E: main (oscap.c:80)
    24 bytes in 1 blocks are indirectly lost in loss record 2 of 5
       at 0x4C2B974: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4E80488: __oscap_calloc (alloc.c:68)
       by 0x4E81883: oscap_list_clone (list.c:130)
       by 0x4ED3E09: xccdf_refine_rule_clone (profile.c:111)
       by 0x4EE1780: xccdf_policy_add_profile_refine_rules (xccdf_policy_resolve.c:190)
       by 0x4EE4676: xccdf_policy_new (xccdf_policy.c:1773)
       by 0x4EE42AD: xccdf_policy_model_get_policy_by_id (xccdf_policy.c:1880)
       by 0x4EDF7B4: xccdf_session_set_profile_id (xccdf_session.c:363)
       by 0x40B91B: app_evaluate_xccdf (oscap-xccdf.c:482)
       by 0x407E37: oscap_module_call (oscap-tool.c:260)
       by 0x407E37: oscap_module_process (oscap-tool.c:345)
       by 0x406D5E: main (oscap.c:80)
    29 bytes in 1 blocks are indirectly lost in loss record 3 of 5
       at 0x4C29BFD: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x757E529: strdup (in /usr/lib64/libc-2.17.so)
       by 0x4E84D9A: oscap_strdup (util.c:65)
       by 0x4ED3DD3: xccdf_refine_rule_clone (profile.c:106)
       by 0x4EE1780: xccdf_policy_add_profile_refine_rules (xccdf_policy_resolve.c:190)
       by 0x4EE4676: xccdf_policy_new (xccdf_policy.c:1773)
       by 0x4EE42AD: xccdf_policy_model_get_policy_by_id (xccdf_policy.c:1880)
       by 0x4EDF7B4: xccdf_session_set_profile_id (xccdf_session.c:363)
       by 0x40B91B: app_evaluate_xccdf (oscap-xccdf.c:482)
       by 0x407E37: oscap_module_call (oscap-tool.c:260)
       by 0x407E37: oscap_module_process (oscap-tool.c:345)
       by 0x406D5E: main (oscap.c:80)
    104 (40 direct, 64 indirect) bytes in 1 blocks are definitely lost in loss record 5 of 5
       at 0x4C2B974: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4E80488: __oscap_calloc (alloc.c:68)
       by 0x4ED3DC7: xccdf_refine_rule_clone (profile.c:105)
       by 0x4EE1780: xccdf_policy_add_profile_refine_rules (xccdf_policy_resolve.c:190)
       by 0x4EE4676: xccdf_policy_new (xccdf_policy.c:1773)
       by 0x4EE42AD: xccdf_policy_model_get_policy_by_id (xccdf_policy.c:1880)
       by 0x4EDF7B4: xccdf_session_set_profile_id (xccdf_session.c:363)
       by 0x40B91B: app_evaluate_xccdf (oscap-xccdf.c:482)
       by 0x407E37: oscap_module_call (oscap-tool.c:260)
       by 0x407E37: oscap_module_process (oscap-tool.c:345)
       by 0x406D5E: main (oscap.c:80)

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Sep 8 08:08:51 2015 +0200

Merge pull request #155 from ybznek/maint-1.0-fix-include
    
    Fix bad #include in oscap_acquire

Author: z <moraveczbynek@gmail.com>
Date:   Mon Sep 7 19:06:43 2015 +0200

Fix bad #include in oscap_acquire

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Sep 4 14:32:47 2015 +0200

Merge pull request #153 from ybznek/maint-1.2-oscap_string_visibility_fix
    
    oscap_string fix visibility

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Sep 4 14:32:04 2015 +0200

Merge pull request #151 from ybznek/maint-1.2-error-libxml
    
    Push libxml parsing to oscap_seterr

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 4 11:34:33 2015 +0200

Fix test for libxml errors

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 31 17:36:58 2015 +0200

Push libxml parsing to oscap_seterr

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Sep 4 10:29:26 2015 +0200

oscap_string fix visibility
    
    oscap_string_bequeath and oscap_string_clear

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 3 18:29:43 2015 +0200

Merge branch 'maint-1.1' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 3 18:25:32 2015 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Sep 3 18:23:14 2015 +0200

Merge pull request #152 from ybznek/maint-1.0-string-func
    
    Maint 1.0 string func

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Sep 3 18:22:05 2015 +0200

Merge pull request #150 from ybznek/maint-1.2-error-m
    
    Don't print the same error messages multiple times

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 3 12:59:13 2015 +0200

Changed HTML guide so that the newly added print rules apply to it
    
    div with class="identifiers" is now wrapping idents and references in
    HTML guide.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 3 12:58:47 2015 +0200

Hide identifier URL as well in HTML report

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Sep 3 11:24:51 2015 +0200

Add oscap_string_clear

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 31 17:34:12 2015 +0200

Add oscap_string_empty

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 3 11:42:33 2015 +0200

Hide interactive HTML report elements when printing
    
    Tapping on them on paper doesn't do anything :-)

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Sep 3 11:37:08 2015 +0200

Merge pull request #148 from jan-cerny/print_report
    
    trac#501: Do not print tooltips in printed form of HTML report

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Sep 3 10:07:58 2015 +0200

Generate updated xccdf-resources.xsl

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 31 10:37:04 2015 +0200

trac#501: Do not print tooltips in printed form of HTML report
    
    Tooltips will not be printed because it was repeating redundant information.
    It caused lines to span to a half of page.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Sep 2 18:08:52 2015 +0200

Fix multiple printing of same error message
    
    See previous two commits.
    
    Why can I do the change? Before this commit:  When oscap_source_get_scap_type returns OSCAP_DOCUMENT_UNKNOWN,
    It is passed to oscap_source_get_schema_version. oscap_source_get_schema_version can return only NULL for OSCAP_DOCUMENT_UNKNOWN.
    oscap_source_validate_priv returns -1 for NULL version.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Sep 2 17:54:58 2015 +0200

Get schema_version in oscap_source_validate only once

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Sep 2 14:52:47 2015 +0200

Get scap_type in oscap_source_validate only once
    
        Multiple calls cause that oscap tries to parse non-valid xml again and again
        And stderr contains the same error messages many times

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 31 09:45:55 2015 +0200

Name an enum

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 31 09:03:37 2015 +0200

Small improvements
    
    Move declarations closer to their use.
    Add a comment explaining discarding "const" type.
    Declare core_schema_version as "char *" instead of "const char *"
    because it needs to be taken with a free.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Aug 27 15:50:06 2015 +0200

Merge pull request #147 from msrubar/xccdf_set-value_fix
    
    Use a value specified by <set-value> element

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 26 11:05:10 2015 +0200

Test that values specified in a profile are passed to a SCE script correctly

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Tue Aug 25 11:46:25 2015 +0200

Use a value specified by <set-value> element
    
    In case where a value of a Value object is changed by <set-value> element in a
    profile we have to work with that value and the default one.
    
    See: https://fedorahosted.org/openscap/ticket/498

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Aug 25 12:19:04 2015 +0200

Merge pull request #146 from ybznek/maint-1.0-arf-export-segfault
    
    Maint 1.0 arf export segfault - add check  oscap_htable_iterator_has_more

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Aug 25 10:23:26 2015 +0200

oscap_htable_iterator_has_more add check for htable == NULL

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 24 00:12:23 2015 +0200

tests: regression test for arf result of xccdf without reference to oval

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Aug 24 19:13:34 2015 +0200

Allow session to re-try oval_results export
    
    Recently, we are getting weird reports from ABRT retrace server such:
     1: oscap_htable_iterator_has_more
     2: ds_rds_create_from_dom (inlined) src/DS/rds.c +724
     3: ds_rds_create_source src/DS/rds.c +752
     4: xccdf_session_export_arf src/XCCDF/xccdf_session.c +1291
     5: app_evaluate_xccdf utils/oscap-xccdf.c +524
    
    This commit may not fix it. However, I cannot reproduce original
    segfault.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Aug 24 13:31:16 2015 +0200

Fixup the container hostname.
    
    In future, we may perhaps want to query docker for real hostname.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Aug 20 14:07:39 2015 +0200

Merge pull request #142 from ybznek/maint-1.0-config-3
    
    Test: Checking .c sources for #include config.h

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 17 12:05:41 2015 +0200

Add test for checking of including config_h

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Aug 14 13:33:27 2015 +0200

add #include <config.h> to xccdf_policy_resolve.c

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Aug 14 13:38:08 2015 +0200

add #include <config.h> to option.c

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Aug 14 13:40:35 2015 +0200

add #include <config.h> to oval_version.c

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Aug 14 13:32:29 2015 +0200

add #include <config.h> to err_queue.c

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Aug 20 11:01:04 2015 +0200

Rename a variable

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Aug 20 08:44:52 2015 +0200

Test comparing OVAL schema versions

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 19 14:22:30 2015 +0200

Remove debug info

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Aug 18 15:05:25 2015 +0200

Do not use deprecated functions + refactor
    
    Here it is not needed to compare OVAL version in every round of cycle,
    beacuse here OVAL version can be compared only once, before while().

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Aug 18 15:03:40 2015 +0200

Convert OVAL schema version from SEXP

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Aug 18 14:58:16 2015 +0200

Convert OVAL schema version to SEXP
    
    This pass to the probe schema version of specific platform extension.
    This commit changes communication protocol between oscap and probes.
    Before, the version was encoded as an 32 bit integer,
    now, it is a string.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Aug 18 14:52:09 2015 +0200

Do not use deprecated symbols from oval_version.h
    
    This commit replaces usage of deprecated symbols. New functions
    from oval_schema_version.h are used instead.
    That enables support of platform extension schema versions in probes.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Aug 18 14:31:46 2015 +0200

Add functions to get platform and core schema versions
    
    Replaces functions in OVAL definition model, OVAL object
    and OVAL state.
    These new functions return new type "oval_schema_version_t"
    This commit also deprecates old functions returning oval_version_t.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Aug 18 13:28:32 2015 +0200

Add a new module for parsing and comparing OVAL versions

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 12 17:19:35 2015 +0200

Store only platform name, not the whole URI

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 12 14:16:00 2015 +0200

Deprecate oval_version_* functions
    
    These functions don't comply with the new OVAL versioning policy.
    The public API type oval_version_t can't store the platform extension
    schema version. Comparing of versions will be implemeted in
    a new module.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 5 12:41:15 2015 +0200

Do not use deprecated function

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 5 12:32:54 2015 +0200

New getter and setter for the core schema version
    
    This deprecates oval_generator_get_schema_version()
    and oval_generator_set_schema_version(), because their names became
    confusing after introducing platform-specific versions. This commit
    introduces new functions with more understandable names,
    but very same functionality.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 5 09:02:31 2015 +0200

Move oscap_free to a better place

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 5 08:54:29 2015 +0200

Unify variable types

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Aug 5 08:45:00 2015 +0200

Use already existing code

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 21 09:41:47 2015 +0200

Move generating timestamp to a separate function

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 13 11:35:36 2015 +0200

test multiple schema versions for different platform extensions in OVAL

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 10 10:59:30 2015 +0200

Have multiple schema_version elements

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Aug 18 13:15:05 2015 +0200

Merge pull request #139 from ybznek/maint-1.0-oscap-buffer-oscap_acquire_pipe_to_string
    
    oscap_acquire use oscap_buffer

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Aug 13 18:13:01 2015 +0200

oscap_acquire use oscap_string

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Aug 14 14:33:39 2015 +0200

oscap_string add oscap_string_bequeath

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 13 15:21:28 2015 +0200

Force pseudo-tty allocation when sudo is used with oscap-ssh
    
    This enables users to potentially type their passwords if their
    configuration requires it.

Author: Fen Labalme <fen@civicactions.com>
Date:   Mon Aug 10 21:55:42 2015 -0400

oscap-ssh - enable remote sudo operation by non-privileged users updated to use --sudo arg and fixed missing brackets

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 13 14:16:46 2015 +0200

Merge branch 'maint-1.1' into maint-1.2

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Aug 13 14:09:18 2015 +0200

Merge pull request #138 from jan-cerny/groupby2
    
    Groupby2

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Aug 13 14:01:54 2015 +0200

Minify new version of script to xccdf-resources.xsl

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Aug 13 10:14:37 2015 +0200

Replace tabs by spaces

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 10 15:33:27 2015 +0200

Populate the combobox dynamically
    
    Some values are harcoded, but just for better user experience.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 10 14:39:49 2015 +0200

Improve sorting groups of rules

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 10 14:37:51 2015 +0200

Use more robust way to get severity

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Aug 6 15:54:47 2015 +0200

Stripe the treetable
    
    Special thanks to Zbyněk Moravec who invented this solution.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Aug 6 14:53:49 2015 +0200

Polish the code, stick to conventions, improve comments

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 28 09:37:34 2015 +0200

Define constants in an enum

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 27 16:00:20 2015 +0200

Fix "Group By" feature in Google Chrome
    
    We can't use "onclick" attribute in "option" element,
    because it works only in Firefox. We must use "onchange" on "select"
    element to make it portable to other web browsers.
    This also requires to invoke Reset() using GroupBy();

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 27 15:58:20 2015 +0200

Change table header from Title to Group

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 27 13:36:33 2015 +0200

Sort the rule groups

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 24 13:36:12 2015 +0200

Add grouping by result + change implementation of grouping by severity

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 24 11:41:09 2015 +0200

Refactor: Extract function to create new table row for a group

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 24 08:48:09 2015 +0200

trac#484: Add the "group by" criteria rules capability in HTML report
    
    This adds the "group by" functionality to the HTML report.
    It is possible to group XCCDF rules results by rule severity,
    DISA ID and NIST ID.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 24 08:44:03 2015 +0200

Add attributes containing severity, DISA and NIST IDs
    
    The table rows elements in the Rule overview table in HTML report
    will hold inforamtion with severity, DISA and NIST IDs.
    This will be useful for implementing "group by" feature in
    HTML report.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 13 13:21:00 2015 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Aug 13 13:02:02 2015 +0200

Merge pull request #102 from ybznek/maint-1.0process58
    
    trac#449 Fix process58 collect command_line not just command

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Aug 11 17:07:43 2015 +0200

process58 fix terminating of function if read error occurs

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 10 15:54:42 2015 +0200

process58 fix memory leak if opendir() fail

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 20:41:27 2015 +0200

tests: process58 fix typo

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 19:14:07 2015 +0200

tests: process58 fix killing of not running processes

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 19:13:19 2015 +0200

tests: process58 fix function return value
    
    Fix return value if something fails. Prevent to test unnecessary exit

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 17:41:47 2015 +0200

tests: change order of files in Makefile.am

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 02:49:56 2015 +0200

tests: process58 increased waiting time for processes start

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 00:05:30 2015 +0200

tests: process58 removed unused xml file

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 00:03:08 2015 +0200

tests: process58 command_line oval xml: cleanup

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Sun Aug 9 00:02:25 2015 +0200

tests: Fix process58 makefile.am

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Aug 7 10:28:45 2015 +0200

tests: process58 do not compare command-line with output of ps
    
    ps's versions have different behaviour and it is causing problems with testing on different systems
    I have recorded output of ps on my fedora(should has some new version of ps) and test will compare
    recorded output with output from probe.
    
    There is some xpath bug that sometimes convert entities back and sometimes not. I've fixed it with sed

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Aug 6 13:29:20 2015 +0200

tests: process58 - fix cleaning of processes in case of test failure

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Aug 4 17:01:45 2015 +0200

tests: Fix process58 tests on jenkins
    
    Tests compare output of ps with output of oscap. This commit fix issue, when ps read command_line of forked bash(before exec). Now, get_child_cmdline waits for execution of stopped_process

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Aug 4 10:15:23 2015 +0200

refactoring: swap lines in Makefile.am

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 19:26:00 2015 +0200

Refactoring: process58 now use oscap_buffer

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 13:33:33 2015 +0200

tests: process58 add file to Makefile.am

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 14:25:22 2015 +0200

Process58 replaced character for printing non-printable characters
    
    ps use '.' for LC_ALL=C

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 14:22:16 2015 +0200

tests: Add process58 tests

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 16 13:46:28 2015 +0200

trac#449 Fix \n replacing in order to ps behaviour

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Jul 13 13:22:45 2015 +0200

trac#449 Refactoring, bug fixing with not null terminated strings in cmdline

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 10 11:43:14 2015 +0200

trac#449 Fix process58 collect command_line not just command
    
    Modify only part of code for Linux

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Aug 12 11:03:10 2015 +0200

Merge pull request #115 from msrubar/os
    
    OVAL Session

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:48:53 2015 +0200

Refactor oscap's evaluation into OVAL Session

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:45:02 2015 +0200

Refactor exporting of results into OVAL Session
    
    The fucntion handles export of OVAL Results into a file. It also handles the
    convertion of OVAL Results into the HTML format.

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Aug 7 13:28:29 2015 +0200

Merge pull request #134 from jan-cerny/report_improvemnets
    
    Report improvements

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 27 15:07:58 2015 +0200

trac#444: Make group titles in HTML report clickable
    
    This allows user to click the title of group to expand or
    collapse the group. The titles are a bigger click target
    than the small triangle arrows on the left.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 27 14:57:53 2015 +0200

trac#427: Improve searching in HTML report
    
    This allows searching also in severity of rules.

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:43:18 2015 +0200

Refactor evaluation of OVAL Definitions into OVAL Session

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Aug 6 18:47:17 2015 +0200

Merge pull request #130 from ybznek/maint-1.0-dead-probe-msg
    
    Add PID to error message when probe has been killed

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Aug 6 18:11:40 2015 +0200

Merge pull request #132 from msrubar/seg_fault_fix
    
    Use oscap_strcmp() instead of strcmp()

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Thu Aug 6 17:21:48 2015 +0200

Use oscap_strcmp() instead of strcmp()
    
    It will prevent calling strcmp with NULL arguments.
    
    See: https://fedorahosted.org/openscap/ticket/492

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Aug 6 15:57:24 2015 +0200

Add PID to error message when probe has terminated

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Aug 6 15:52:37 2015 +0200

Fix __oscap_vdlprintf PID printing

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Aug 6 15:22:04 2015 +0200

Fix __oscap_debuglog_object PID printing
    
    printing PID as signed long is safer
    
    Fix __oscap_debuglog_object PID printing

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Thu Aug 6 14:35:26 2015 +0200

Turn the search engine on in Doxygen documentation
    
    This will enable us to easily search through the Doxygen documentation.
    
    See: https://fedorahosted.org/openscap/ticket/493

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:41:48 2015 +0200

Refactor evaluation of a specific OVAL Defition into OVAL Session

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:37:52 2015 +0200

Refactor of setting up the OVAL Agent
    
    This funciton will set up the OVAL Agent Session which will be used in both
    oval_session_evaluate() and oval_session_evaluate_id().

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:25:28 2015 +0200

Refactor loading of OVAL sources
    
    This function handles loading of all OVAL Definitions and OVAL Variables if any.
    It also performs validation and variable binding.

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:22:40 2015 +0200

Refactor loading of OVAL Variables
    
    This function loads and creates OVAL Variables model and binds the variables to
    existing definition model.

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:19:30 2015 +0200

Refactor loading of OVAL Definitions

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:12:46 2015 +0200

Refactor validation of OVAL or SDS into OVAL Session

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:10:21 2015 +0200

Introduce a new setter for XML reporter fucntion

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:07:33 2015 +0200

Introduce a new setter for an export of OVAL Results converted to HTML

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:06:07 2015 +0200

Introduce a new setter for an export of OVAL Results

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:04:32 2015 +0200

Introduce a new datastream's component-id setter

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:02:54 2015 +0200

Introduce a new datastream id setter

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 09:01:28 2015 +0200

Introduce a new OVAL Session's validation level setter

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 08:54:52 2015 +0200

Introduce a new OVAL Directives setter

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 08:53:30 2015 +0200

Introduce a new OVAL Variables setter

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Aug 5 08:51:44 2015 +0200

Introduce a new OVAL Session structure and module

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Aug 6 11:43:07 2015 +0200

Merge pull request #128 from ybznek/maint-1.2-remote-resources-oscap_string
    
    --fetch-remote-resources oscap_acquire_url_download use oscap_buffer now

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Aug 5 13:24:08 2015 +0200

Fix oscap_buffer deallocation if curl is not initialized properly

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 00:14:57 2015 +0200

oscap_acquire_url_download use oscap_buffer now

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Aug 4 16:37:29 2015 +0200

Merge branch 'maint-1.1' into maint-1.2
    
    This is needed to get oscap_buffer to maint-1.2
    for further work.
    
    Conflicts:
            ac_probes/configure.ac.tpl
            configure.ac
            src/XCCDF_POLICY/xccdf_policy_priv.h
            src/XCCDF_POLICY/xccdf_policy.c
            src/common/Makefile.am
            src/common/oscap_string.c
            src/common/oscap_string.h
            tests/API/XCCDF/unittests/Makefile.am
            tests/Makefile.am
            tests/oscap_string/Makefile.am
            tests/oscap_string/test_oscap_string.c
            tests/oscap_string/test_oscap_string.sh

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Aug 4 12:47:14 2015 +0200

Merge branch 'maint-1.0' into maint-1.1
    
    This is needed to get oscap_buffer to maint-1.2
    for a further work.
    
    Conflicts:
            tests/Makefile.am

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Aug 4 12:45:11 2015 +0200

Fix whitespace errors.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Aug 4 12:26:05 2015 +0200

Merge pull request #127 from ybznek/maint-1.0-oscapStringPridatTesty
    
    Maint-1.0 oscap_buffer tests

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Aug 4 12:17:59 2015 +0200

tests: oscap_string_test Fix Makefile.am for oscap_buffer

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 18:58:03 2015 +0200

tests: add test for oscap_string_clear

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 16:28:32 2015 +0200

tests: oscap_string add test for NULL parameter

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 16:51:33 2015 +0200

tests: oscap_string - add test for oscap_buffer_append_binary_data()

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 16:49:25 2015 +0200

tests: oscap_string fix test return value
    
    When first test failed and second test passed, return value was 0

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Aug 4 11:35:31 2015 +0200

Merge pull request #126 from jan-cerny/maint-1.2-sds_schema
    
    Maint 1.2 sds schema

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Aug 4 11:33:56 2015 +0200

Merge pull request #125 from jan-cerny/maint-1.2_makefile_fix
    
    Added OVAL 5.11.1 schemas to Makefile.am

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Aug 4 11:31:29 2015 +0200

Merge pull request #117 from jan-cerny/maint-1.0
    
    Test oscap_string

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Aug 4 10:56:42 2015 +0200

Fix make distcheck using srcdir variable

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 24 09:13:40 2015 +0200

trac#495: Remove oscap_string from public API and fix test
    
    (cherry picked from commit 43cb8a556354886081cf7dc90430e94407b4007b)

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 13 17:47:57 2015 +0200

Test oscap_string
    
    (cherry picked from commit 7907e1c69ec3db99b7d0d557f671916cec1f6350)
    
    Conflicts:
            ac_probes/configure.ac.tpl
            configure.ac
            tests/Makefile.am

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 24 10:55:12 2015 +0200

Added OVAL 5.11.1 schemas to Makefile.am

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Aug 4 09:55:32 2015 +0200

Merge pull request #124 from ybznek/maint-1.0-cista
    
    oscap_string & oscap_buffer

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 3 14:05:51 2015 +0200

Test composing datastream with an OVAL 5.11.1 source
    
    Tests possibility to create a datastream from OVAL 5.11.1
    whith changed datastream schema.
    See Issue #118

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 19:37:31 2015 +0200

Add OSCAP_HIDDEN macros to oscap_buffer.h

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 19:29:43 2015 +0200

Refactoring: rename struct oscap_buffer.str -> struct oscap_buffer.data

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 16:27:30 2015 +0200

Fix oscap_buffer_free for NULL parameter

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 16:12:19 2015 +0200

add oscap_buffer_bequeath

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 16:09:10 2015 +0200

Add oscap_buffer_get_length

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 16:06:51 2015 +0200

Add oscap_buffer_clear

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 16:04:37 2015 +0200

Remove oscap_buffer_append_char

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 15:58:59 2015 +0200

Separate oscap_buffer_append_binary_data from oscap_buffer_append_string

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 15:51:01 2015 +0200

rename const char* oscap_buffer_get_cstr to char* oscap_buffer_get_raw

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 18:00:37 2015 +0200

Move body of oscap_string to oscap_buffer

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 14:21:11 2015 +0200

Add oscap_buffer files

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Aug 3 16:19:03 2015 +0200

Merge pull request #122 from msrubar/comp_ref_err_fix
    
    Let the sds session set the error when there is no component ref found

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Aug 3 15:10:13 2015 +0200

Introduce CPE name for upcomming Fedora 24

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Mon Aug 3 14:41:53 2015 +0200

Let the sds session set the error when there is no component ref found

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Aug 3 14:31:08 2015 +0200

Merge pull request #119 from ybznek/maint-1.0-refine-pull
    
    Refine-rule

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Aug 3 12:04:51 2015 +0200

Support OVAL 5.11.1 for datastreams
    
    Similar to 0aa1a0d02046f26935aa0f3833e7edf531662237
    See Issue #118

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Aug 3 12:12:17 2015 +0200

Deprecate xccdf_policy_tailor_item
    
    It has been used by vintage scap-workbench releases (the pythonic). The
    newer scap-workbench does not need this function. Hence, I conclude that
    it is not really that useful. I would like to drop this function from
    future releases of OpenSCAP as its usefulness and quality is not
    known.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 11:21:51 2015 +0200

tests: Add xccdf_refine_rule_refine to Makefile.am

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 11:14:14 2015 +0200

Refactoring: use XCCDF_LEVEL_NOT_DEFINED instead 0

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Mon Aug 3 11:10:39 2015 +0200

hide xccdf_refine_rule_internal and make getters

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Aug 3 10:53:55 2015 +0200

Merge pull request #120 from ybznek/maint-1.0-oscap_string-free
    
    oscap_string fix oscap_string_free()

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 17:30:22 2015 +0200

oscap_string fix oscap_string_free()
    
    Every oscap_string_* function check if ptr is NULL, except oscap_string_free()

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jul 31 16:13:00 2015 +0200

Let oval_syschar_model_free accept NULL pointer.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jul 31 15:53:09 2015 +0200

Let oval_definition_model_free accept NULL pointer.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jul 31 14:36:48 2015 +0200

Make oval_agent_destroy_session accept NULL pointer.
    
    And also drop two useless lines from it.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jul 31 14:33:26 2015 +0200

Hide test-suite.log from git.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jul 31 14:25:51 2015 +0200

Hide cscope files from git.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 31 11:40:51 2015 +0200

Move refine-rule resolution from xccdf_policy.c to xccdf_policy_resolve.c

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 30 16:37:45 2015 +0200

Fix memory leak in xccdf_policy_free()

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jul 30 14:48:46 2015 +0200

Useless code removal.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 30 14:48:09 2015 +0200

tests: Add tests for refine-rule

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Thu Jul 30 13:01:11 2015 +0200

Add refine-rule resolution
    
    Add support for refine-rule role/weight/selector, BUT refined group weight
    is not propagated to score. There is also problem with with partially overriding of refine rules,
    because refine-rules is loaded during profile creating and some attributes are lost there

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Jul 30 10:43:32 2015 +0200

Merge pull request #116 from ybznek/maint-1.2-oprava-segfault_
    
    Fix segfault after error during tailoring file loading

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 29 15:24:55 2015 +0200

Fix segfault after error during tailoring file loading
    
    Second free() in cleanup section was causing segfault

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Jul 29 13:55:43 2015 +0200

Merge pull request #114 from ybznek/maint-1.0-oprava-parametru
    
    Fix missing parameter in calling oscap_seterr()

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 29 13:43:27 2015 +0200

Fix missing parameter in calling oscap_seterr()

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Jul 24 21:09:37 2015 +0200

Merge pull request #111 from jan-cerny/new_schematrons
    
    Add OVAL 5.11.1 schematrons

Author: Michal Šrubař <msrubar@redhat.com>
Date:   Wed Jul 15 17:32:05 2015 +0200

Remove oval_probe_int module
    
    The oval_proble_ext_handler() was replaced in the commit
    13207612ef6dfe10745843be4f6ef58a9cfab2be. Both files are
    dead code and they are not used by any other code.
    
    See https://fedorahosted.org/openscap/ticket/455

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jul 23 08:43:47 2015 +0200

Add OVAL 5.11.1 schematrons

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 13 17:44:10 2015 +0200

Minor improvements.
    Included config.h, changed datatype of length and capacity, aligning memory.
    
    (cherry picked from commit 5b87e0d09f6dc03b6f4c1ae9b71404b699c5583d)

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 6 17:43:56 2015 +0200

Small improvements of string module.
    
    Using oscap_alloc, oscap_free and oscap_realloc.
    Make code more human-readable.
    
    (cherry picked from commit defae489fff955a7c673b2f38fb2abb243c6bf81)

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 4 11:10:25 2015 +0200

Improved oscap string module.
    
    Hidden definition of a structure to not be accessible from outside.
    New function to access the data.
    
    (cherry picked from commit 8a293e8608b0604e76d53bd47321e4edca6090dd)

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 16 08:47:26 2015 +0200

Implemented oscap_string_free
    
    (cherry picked from commit 126d05bf81238613b9b1998ce4f40176dc36c76d)

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 14 15:14:11 2015 +0200

A module implementing dynamic strings
    
    Taking down to maint-1.0.
    (cherry picked from commit bb3c3dcab1064e926c5fed70be96915c44b48f92)
    
    Conflicts:
            src/common/Makefile.am

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 16 13:35:23 2015 +0200

Show RHSA identifiers as clickable links in HTML report and guide
    
    This fixes a regression between openscap 1.0.x and 1.1.x.
    See rhbz#1243808.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Jul 15 13:14:36 2015 +0200

Merge pull request #106 from jan-cerny/new_schemas
    
    New schemas

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 15 09:36:14 2015 +0200

rhbz#1220262: Modify OVAL-5.11 schema files to be backward compatible
    
    Similar to ebc82944e9c3f436a57539ff118b78c04eb2b238.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jul 14 16:08:53 2015 +0200

Merge pull request #109 from jan-cerny/masking
    
    Changed masking behaviour

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 14 13:03:56 2015 +0200

Fix a missing $srcdir in path
    
    Missing $srcdir caused that test_common.sh could not be found
    when running `make distcheck`.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jul 9 15:04:48 2015 +0200

Test behaviour of the mask attribute

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 1 10:55:50 2015 +0200

Changed masking behaviour.
    
    According to the clarified specification, the "mask" attribute
    should not affect oval_definitions section in oval_results.
    It says: ... the"oval_definitions" section must not be altered
    and must be an exact copy of the definitions evaluated.
    The behaviour has changed since OVAL 5.10,
    we must keep the old behaviour for OVAL 5.9 and older.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 8 15:10:18 2015 +0200

trac#469 Add Python3 support. Fix --srpm-destination

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Wed Jul 8 15:10:18 2015 +0200

trac#469 Add Python3 support. Fix --srpm-destination

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 13 16:18:49 2015 +0200

Merge branch 'maint-1.1' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 13 16:17:21 2015 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 13 14:45:34 2015 +0200

added missing config.h

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Fri Jul 3 11:47:19 2015 +0200

436 Downloading OVAL file only into memory not to temp file
    472 --fetch-remote-resources support bz2 now

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 13 13:05:42 2015 +0200

Remove unused schema file.
    
    The schemas/common/xmldsig-core-schema.xsd is used instead.
    similar to de6d7d727be9100e4d22060912f4490553e5f1c7

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jul 13 13:03:06 2015 +0200

Use a single (OpenSCAP wide) XSD schema for XML signatures
    similar to 5b2c5f8c8d6665ffb84223f962ae20ec577bd7c8

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Jul 13 11:16:37 2015 +0200

Merge pull request #99 from jan-cerny/guide_bug
    
    trac#482: Fixed table of contents in HTML guide.

Author: Zbynek Moravec <zmoravec@redhat.com>
Date:   Tue Jul 7 00:53:57 2015 +0200

Bash autocompletion support .xml.bz2 files, not only .xml trac#433

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jul 10 14:04:22 2015 +0200

Resolve parsing issues with OVAL 5.11.1 schemas
    and fixed wrong OVAL version in schemas.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 8 16:53:45 2015 +0200

Add OVAL 5.11.1 schemas

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jul 9 16:20:14 2015 +0200

trac#482: Fixed table of contents in HTML guide.
    The table of contents now contains only selected groups.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 9 14:08:24 2015 +0200

Removed outdated TODO items from xccdf-guide-impl.xsl

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Jul 9 13:55:09 2015 +0200

Merge pull request #96 from jan-cerny/cim_datetime
    
    CIM_DATETIME format + test

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 9 13:23:17 2015 +0200

Merge branch 'maint-1.1' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 9 13:22:54 2015 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jul 8 14:15:48 2015 +0200

Refactoring the parse_fmt_cim() function.
    
    - extract the regex matching into a new function
    - moved formating strings nex to regular expressions
    - check for sscanf return value
    - do not repeat the code

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 7 13:06:58 2015 +0200

Test for the CIM_DATETIME format.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 7 13:05:57 2015 +0200

Implemented the CIM_DATETIME format.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jul 7 17:58:55 2015 +0200

Merge pull request #98 from jan-cerny/maint-1.0
    
    Fixed missing referencing operator and wrong variable name

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 7 10:31:36 2015 +0200

Fixed missing referencing operator and wrong variable name

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jul 7 14:46:45 2015 +0200

Merge pull request #97 from jan-cerny/ml2
    
    trac#480: plug a memory leak

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jul 7 14:30:41 2015 +0200

trac#480: plug a memory leak
    
    Addressing:
       at 0x4C2B946: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4E7F818: __oscap_calloc (alloc.c:68)
       by 0x4E80DC2: oscap_iterator_new (list.c:242)
       by 0x4EE1D2D: _xccdf_text_substitution_cb (xccdf_policy_substitute.c:174)
       by 0x4E84727: xml_element_dfs_callback (xml_iterate.c:31)
       by 0x4E84775: xml_element_dfs_callback (xml_iterate.c:36)
       by 0x4E8481E: xml_iterate_dfs (xml_iterate.c:70)
       by 0x4EE2124: xccdf_policy_resolve_fix_substitution (xccdf_policy_substitute.c:201)
       by 0x4EE1528: xccdf_policy_rule_result_remediate (xccdf_policy_remediate.c:387)
       by 0x4EE1B44: xccdf_policy_remediate (xccdf_policy_remediate.c:439)
       by 0x40B7B9: app_evaluate_xccdf (oscap-xccdf.c:513)
       by 0x407BFC: oscap_module_call (oscap-tool.c:260)
       by 0x407BFC: oscap_module_process (oscap-tool.c:345)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Jul 6 13:40:28 2015 +0200

Bump version after release
    
    Next release from maint-1.2 branch will be 1.2.6.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Jul 6 13:16:25 2015 +0200

openscap-1.2.5

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Jul 6 13:08:16 2015 +0200

Bump soname from 8.5.0 to 8.5.1
    
    No symbol has been added, removed, or modified.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Jul 6 12:39:15 2015 +0200

Merge branch 'maint-1.1' into maint-1.2
    
    Before OpenSCAP 1.2.5 release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Jul 6 12:18:51 2015 +0200

Merge branch 'maint-1.0' into maint-1.1
    
    Before OpenSCAP 1.2.5 release

Author: Michal Šrubař <xsruba03@stud.fit.vutbr.cz>
Date:   Fri Jul 3 17:51:51 2015 +0200

The original regex skiped all the files before */source/oscap_source.c.
    
    See https://fedorahosted.org/openscap/ticket/470

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jul 3 16:57:32 2015 +0200

Download bzip2ed RHSA OVAL.
    
    It is much quicker to download.

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Wed Jul 1 11:42:28 2015 -0700

Added libgen.h which includes basename(char*)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jul 2 10:10:38 2015 +0200

trac#472: Use no-verbose instead of non-verbose
    
    As adviced in OpenSCAP/container-compliance#3.

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Thu Jun 25 15:28:39 2015 -0700

Fixed patch for system_info on solaris.

Author: zemb <zember@gmail.com>
Date:   Thu Jun 25 14:53:29 2015 +0200

README.md typos

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 23 10:28:44 2015 +0200

Fix a warning.
    warning: variable 'left_bracket' set but not used
    This variable was used only to print a error message
    if debug informations are enabled.
    Changed error message to not use this variable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 23 09:07:16 2015 +0200

Fix warning: extra tokens at end of #else directive.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 24 08:37:45 2015 +0200

Fix invalid dereference. (coverity)
    Null-checking "session" suggests that it may be null,
    but it has already been dereferenced on all paths leading to the check.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jun 24 08:05:05 2015 +0200

Fix shellcheck warnings.
    Use * instead of @ for arrays expansion.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 23 08:47:51 2015 +0200

Plug a memory leak (coverity scan).
    Variable "pathname" going out of scope leaks the storage it points to.
    Function SEXP_string_cstr(ent_val) allocates memory that must be freed.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 23 08:15:32 2015 +0200

trac#471: Fix boolean parsing in glob_noescape
    Using oval_parser_boolean_attribute() to boolean parsing.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jun 22 14:09:00 2015 +0200

Test the "does not exist" flag at collected objects.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Jun 21 11:29:25 2015 +0200

Bump version after release
    
    Next release from maint-1.2 branch will be 1.2.5

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 23:12:20 2015 +0200

openscap-1.2.4

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 23:14:01 2015 +0200

Bump soname from 8.4.3 to 8.5.0
    
    13 new symbols have been added.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 18:46:37 2015 +0200

Manual page for oscap-ssh

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 18:16:23 2015 +0200

Change oscap-docker license to LGPLv2+

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 18:12:54 2015 +0200

Die on incorrect arguments

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 18:12:41 2015 +0200

Manual page for oscap-docker

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 16:57:18 2015 +0200

Tests: check codestyle of distributed shell scripts

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 16:38:52 2015 +0200

Unify usage printout for oscap-ssh and oscap-docker

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 16:25:46 2015 +0200

Refactor: Extract function: usage

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jun 20 16:15:42 2015 +0200

Install oscap-docker when running `make install`.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 19 16:19:58 2015 +0200

Removed overabundant break, evaluate conditions in better order

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 19 16:16:19 2015 +0200

Extended test of external variables. Testing possible_restrictions

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 19 16:12:41 2015 +0200

Handling possible_restrictions

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 19 16:07:30 2015 +0200

new getter oval_variable_possible_restriction_get_operator

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 18 12:37:16 2015 +0200

test handling possible_value elements in external_variable

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 18 12:33:23 2015 +0200

Handle possible_value elements

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jun 19 20:15:18 2015 +0200

Merge branch 'maint-1.1' into maint-1.2
    
    Just before 1.2.4 release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jun 19 18:13:55 2015 +0200

Merge branch 'maint-1.0' into maint-1.1
    
    To pick last time patches to maint-1.0 before 1.2.4 release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jun 19 18:12:34 2015 +0200

Regenerate configure.ac after system_info solaris patch.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 19 16:09:44 2015 +0200

Refectoring: Extract function:  oval_str_cmp_str
    I need this function for checking that an external variable
    satisfies its possible_restriction element.

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Fri Jun 19 07:31:43 2015 -0700

Fixed systeminfo probe to return defaults on solaris.

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Wed Jun 17 12:01:26 2015 -0700

Fixed file probe to be zone aware on solaris. This fix prevents the file probe from descending into non-global-zones from the global-zone when local is specified on solaris.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Jun 19 15:59:22 2015 +0200

Merge branch 'maint-1.0' into maint-1.1
    
    Before OpenSCAP-1.2.4 release.
    
    Conflicts:
            Makefile.am
            ac_probes/configure.ac.tpl
            configure.ac
            src/XCCDF_POLICY/xccdf_policy.c

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 18 18:56:11 2015 +0200

Move variable declaration closer to its use.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 18 12:35:25 2015 +0200

Handle flag SYSCHAR_FLAG_DOES_NOT_EXIST, add a message to collected object

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 18 17:56:51 2015 +0200

rhbz#1220944: Fix crash on invalid value selectors
    
    Addressing:
     #0  xccdf_value_instance_get_value (item=0x0) at value.c:437
     #1  0x00007f6835881eac in xccdf_policy_get_value_of_item (policy=policy@entry=0x7f68371a1b10, item=<optimized out>) at xccdf_policy.c:2426
     #2  0x00007f6835881f01 in xccdf_policy_add_final_setvalue (policy=policy@entry=0x7f68371a1b10, value=0x7f6836f8bbb0, result=result@entry=0x7f6837850d80) at xccdf_policy.c:2193
     #3  0x00007f6835881fa3 in xccdf_policy_add_final_setvalues (policy=policy@entry=0x7f68371a1b10, item=0x7f6836f8a040, result=result@entry=0x7f6837850d80) at xccdf_policy.c:2213
     #4  0x00007f6835881fe3 in xccdf_policy_add_final_setvalues (policy=policy@entry=0x7f68371a1b10, item=0x7f6836f1f280, result=result@entry=0x7f6837850d80) at xccdf_policy.c:2220
     #5  0x00007f6835881fe3 in xccdf_policy_add_final_setvalues (policy=policy@entry=0x7f68371a1b10, item=0x7f6836e57630, result=result@entry=0x7f6837850d80) at xccdf_policy.c:2220
     #6  0x00007f6835882083 in xccdf_policy_add_final_setvalues (policy=policy@entry=0x7f68371a1b10, item=0x7f6836e186c0, result=result@entry=0x7f6837850d80) at xccdf_policy.c:2235
     #7  0x00007f683588220d in xccdf_policy_evaluate (policy=policy@entry=0x7f68371a1b10) at xccdf_policy.c:2318
     #8  0x00007f683587ddea in xccdf_session_evaluate (session=session@entry=0x7f6836d00b60) at xccdf_session.c:906
     #9  0x00007f6835cf4210 in app_evaluate_xccdf (action=0x7fff67b1c800) at oscap-xccdf.c:490
     #10 0x00007f6835cefc69 in oscap_module_call (action=0x7fff67b1c800) at oscap-tool.c:261
     #11 oscap_module_process (module=0x7f6835efdb60 <XCCDF_EVAL>, module@entry=0x7f6835efd0e0 <OSCAP_ROOT_MODULE>, argc=argc@entry=8, argv=argv@entry=0x7fff67b1ca88) at oscap-tool.c:346
     #12 0x00007f6835cee9b1 in main (argc=8, argv=0x7fff67b1ca88) at oscap.c:79

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 18 17:15:33 2015 +0200

Use 'does not exist' flag when value does not validate
    
    Based on the OVAL specification the 'does not exist' seem to be
    more appropriate in such scenario.
    
    This is based patch from Jan Černý.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 18 10:22:03 2015 +0200

New function oval_collection_is_empty

Author: Charles Bushong <bushong1@gmail.com>
Date:   Wed Jun 17 15:48:34 2015 -0400

Fix heading elements to include spaces after hash
    
    This is to comply with markdown standards found here: https://help.github.com/articles/markdown-basics/
    Other markdown viewers will improperly display the headers.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 18 10:42:12 2015 +0200

Document schemes a little bit.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Jun 17 17:22:37 2015 +0200

trac#466: What happened to our children?

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 18 10:38:58 2015 +0200

Reformat CPPFLAGS in SEAP.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Jun 17 14:14:08 2015 +0200

rhbz#1209969: Amend configure.ac as well.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Jun 17 13:33:11 2015 +0200

rhbz#1209969: drop selinux policy from OpenSCAP upstream
    
    Alas, SELinux team identified some problems with confining
    oscap process itself. Probes could be confined.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Jun 17 13:22:53 2015 +0200

trac#466 Always show 'Unable...' message.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Jun 17 13:12:06 2015 +0200

trac#466 Use protect_errno instead of saving the state
    
    Note that errno is used later on.
    
    This change will give user a little more useful error message when probe
    dies.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jun 16 17:25:54 2015 +0200

Show XCCDF rule-result/message elements in HTML report
    
    These contain useful info, especially about remediation results.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jun 16 16:35:31 2015 +0200

Show profile title or ID under benchmark title heading in HTML guide and report

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Jun 16 09:36:45 2015 +0200

Get a rid of unneeded case statement

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Jun 15 19:46:52 2015 +0200

Refactor: Extract error handling to function.
    
    This is not pure refactoring -- there slight side effects.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 11 17:19:04 2015 +0200

More verbose message when probe dies.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 11 12:51:06 2015 +0200

Merge branch 'maint-1.1' into maint-1.2
    
    Conflicts:
            tests/API/OVAL/unittests/all.sh

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 11 12:23:18 2015 +0200

Merge branch 'maint-1.0' into maint-1.1
    
    To pick-up the distcheck fix for Fedora 22.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Jun 11 12:18:39 2015 +0200

Merge pull request #84 from jan-cerny/ip
    
    Improve IP address comparison + test

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 11 11:47:04 2015 +0200

Do not use $srcdir/$srcdir/$1 to refer file
    
    This started to backfire on Fedora 22, where the newest autotools
    create one more directory (_build/sub/ instead of _build/) during
    `make distcheck`.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 11 11:06:05 2015 +0200

Refactor: Extract function: oval_variable_validate_ext_var
    
    This change also introduces SYSCHAR_FLAG_ERROR when the values
    are empty.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jun 11 10:45:02 2015 +0200

Remove a todo comment.
    
    This comment may have been applicable when designing variable &
    variable_model. Now it seems that design decisions are all in place and
    there is not need to point out to the variable_model from each external
    variable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jun 11 09:35:41 2015 +0200

Improve IP address comparison + test

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Jun 10 15:46:07 2015 +0200

re-run confgen
    
    This misorder was perhaps caused by moving stuff around
    in src/OVAL/probes/Makefile.am before merge.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Jun 9 15:02:15 2015 +0200

Merge pull request #81 from jan-cerny/ext_var
    
    trac#461: We should populate child elements of OVAL external_variable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 9 13:59:42 2015 +0200

Test result and stderr meaningfully

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 9 13:56:29 2015 +0200

Removed excess external variable file

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 9 10:31:27 2015 +0200

Test populating possible_restriction and possible_values element.
    OVAL checks borrowed from tests/mitre.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 9 09:28:21 2015 +0200

New functions manipulating oval_variable.
    Added oval_variable_add_possible_value and oval_variable_add_possible_restriction
    use them in the code where suitable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 9 08:30:38 2015 +0200

Avoid possibly memory leak.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 9 08:19:30 2015 +0200

Rename oval_variable_get_restrictions to oval_variable_possible_restriction_get_restrictions.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jun 5 14:56:16 2015 +0200

Move the function oval_variable_possible_restriction_add_restriction next to the functions of same type.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 2 15:17:35 2015 +0200

Improved header file, corrected documentation comments.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 2 14:36:26 2015 +0200

Fixed serializing external_variable.
    We shoud not allow to use API to create invalid output.
    Create "possible_restriction" node only if there will be some
    "restriction" children, because each "possible_restriction"
    node must have at least one "restriction" child.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jun 2 14:19:01 2015 +0200

Use correct forms of remedied and remediation
    
    Thanks goes to Martin Zember for reporting this.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Jun 2 13:13:14 2015 +0200

Removed redundant condition.
    Restrictions will never be NULL, because we allocate it in constructor.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jun 1 16:49:45 2015 +0200

Simplify functions returning iterators.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jun 1 14:16:58 2015 +0200

Allocate collections for possible_values and possible_restrictions
    every time when we are creating external variable,
    not only when we need them.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jun 1 15:08:40 2015 +0200

Changed scap-as-rpm to work with Python 2.6
    
    Thanks goes to Tilo Mey for the report and initial patch. I couldn't use
    the initial patch as is because it would silently pass when `rpm` is not
    available. Or in other cases where `rpm` returns a non-zero exit code.
    The function I ended up using instead is by Peter Astrand and Eduardo Felipe,
    taken from Python 2.7.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Jun 1 13:11:48 2015 +0200

Moved destructors just under constructors.

Author: Martin Preisler <martin@preisler.me>
Date:   Sun May 31 19:03:02 2015 +0200

Merge pull request #83 from redhatrises/maint-1.2
    
    [Enhancement] add Scientific Linux CPEs

Author: Gabe <redhatrises@gmail.com>
Date:   Fri May 29 09:35:23 2015 -0600

[bugfix][enhancement] use scientific as identifier for scientific linux

Author: Gabe <redhatrises@gmail.com>
Date:   Fri May 29 07:47:14 2015 -0600

[Enhancement] add Scientific Linux CPEs
    
    - Add Scientific Linux CPEs to inbuilt OpenSCAP CPE
    - Part of https://github.com/openscap/scap-security-guide/pull/571

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 28 13:18:03 2015 +0200

trac#461: We should populate child elements of OVAL external_variable.
    Collect elements possible_value and possible_restriction
    and propagate them to OVAL results.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed May 27 11:44:59 2015 +0200

Merge pull request #80 from jan-cerny/proc_test
    
    Test properly if stderr is empty and result is not empty

Author: Martin Preisler <martin@preisler.me>
Date:   Wed May 27 11:33:55 2015 +0200

Merge pull request #78 from jan-cerny/capability
    
    Updated enumerations for posix_capability item

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue May 26 15:09:02 2015 +0200

Test properly if stderr is empty and result is not empty

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue May 26 14:57:24 2015 +0200

Test properly empty content of stderr and nonempty result.

Author: Martin Preisler <martin@preisler.me>
Date:   Mon May 25 13:33:22 2015 +0200

Merge pull request #77 from jan-cerny/symlink
    
    Symlink

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 25 12:32:58 2015 +0200

Correctly specify version of OVAL where process capabilities were introduced.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 25 12:28:04 2015 +0200

Add a comment

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 21 14:44:16 2015 +0200

Test process58 probe with OVAL 5.11

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 18 14:31:05 2015 +0200

Updated enumerations for posix_capability item

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 21 10:38:46 2015 +0200

Improved test fro symlink probe

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 21 10:35:47 2015 +0200

Using realpath() to resolve the symlink

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 18 15:04:18 2015 +0200

Use probe_msg_creat instead of probe_msg_creatf where possible

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 18 13:14:37 2015 +0200

Fixed buffer size for readlink() and added an explaining comment.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri May 15 17:01:03 2015 +0200

symlink probe test

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri May 15 15:08:12 2015 +0200

symlink probe

Author: Martin Preisler <martin@preisler.me>
Date:   Fri May 15 10:33:25 2015 +0200

Merge pull request #73 from jan-cerny/string_improved
    
    String improved

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu May 14 11:11:46 2015 +0200

Added a license

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 13 17:47:57 2015 +0200

Test oscap_string

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 13 17:44:10 2015 +0200

Minor improvements.
    Included config.h, changed datatype of length and capacity, aligning memory.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue May 12 11:40:08 2015 +0200

Merge pull request #76 from isimluk/maint-1.2
    
    rhbz#1220262: Modify OVAL-5.11 schema files to be backward compatible

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue May 12 10:22:13 2015 +0200

rhbz#1220262: Modify OVAL-5.11 schema files to be backward compatible
    
    Previously, OVAL-5.10 allowed for missing epoch/version/release/arch.
    The upstream OVAL-5.11 schema is now more strict and not backward
    compatible.
    
    We need to make OVAL-5.11 schema backward compatible to support
    DataStream content that includes such OVAL-5.10 content. Note that
    DataStream 1.2 schema imports fixed version of OVAL schemas.
    
    Addressing:
    File '/tmp/ssg-rhel6-ds.xml' line 8755: Element
    '{http://oval.mitre.org/XMLSchema/oval-definitions-5#linux}filepath':
    This element is not expected. Expected is (
    {http://oval.mitre.org/XMLSchema/oval-definitions-5#linux}epoch ).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue May 12 09:58:27 2015 +0200

Rebuild configure.ac after a change in partition probe
    
    Requirement on linux/fs.h has been added.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed May 6 17:43:56 2015 +0200

Small improvements of string module.
    
    Using oscap_alloc, oscap_free and oscap_realloc.
    Make code more human-readable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 4 11:12:52 2015 +0200

Using oscap_string_free and oscap_string_get_string in glob_to_regex.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon May 4 11:10:25 2015 +0200

Improved oscap string module.
    
    Hidden definition of a structure to not be accessible from outside.
    New function to access the data.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue May 5 09:01:59 2015 +0200

Checking for remount, bind and move mount options

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue May 5 10:56:39 2015 +0200

rhbz#1215220: Fix tests for ppc64 little endian arch

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 28 16:48:01 2015 +0200

Test - evaluating invalid regex in pattern match operations
    
    We had to verify that an invalid regex leads to error in
    pattern mattern match operations.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri May 1 16:40:26 2015 +0200

Bump version after release
    
    Next release from maint-1.2 branch will be 1.2.4.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri May 1 15:25:57 2015 +0200

openscap-1.2.3

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri May 1 15:01:36 2015 +0200

Bump soname from 8.4.2 to 8.4.3
    
    No new symbols have been added.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri May 1 12:39:50 2015 +0200

Hint user to install missing packages
    
    before generating incomplete file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri May 1 11:59:45 2015 +0200

Merge branch 'maint-1.1' into maint-1.2
    
    Before 1.2.3 release.
    
    Conflicts:
            xsl/xccdf-resources.xsl

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri May 1 11:24:52 2015 +0200

Merge branch 'maint-1.0' into maint-1.1
    
    Before 1.2.3 release.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 30 16:43:41 2015 +0200

Removed code duplication in HTML guide and report, removed unnecessary ifs
    
    The report indeed does require benchmark, so we need to check that it is
    available.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 30 16:21:12 2015 +0200

Unified how HTML guide and report show title, desc and front-matter
    
    In an ideal world this would be refactored into a template in xccdf-share,
    however there are conflicting requirements and different assumptions in
    report and guide. Maybe one day we can roll it into one template.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 30 16:06:37 2015 +0200

Removed leftover dead code from HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 30 16:04:14 2015 +0200

Insert 10px before rear-matter and notices element in HTML report and guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 30 15:57:30 2015 +0200

Moved rear-matter template from HTML guide to shared, used it in report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 30 15:55:24 2015 +0200

Show benchmark front-matter, description and notices in HTML report

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Apr 30 12:29:14 2015 +0200

Merge pull request #69 from mpreisler/oscap_ssh
    
    oscap-ssh - remote oval and xccdf evaluation

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 30 00:37:00 2015 +0200

Support remote -h and --help in oscap-ssh
    
    Yes, it's useless but the docs say -h and --help is supported
    and it's too confusing to explain that it's only supported
    locally.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 30 00:34:58 2015 +0200

Use -O exit instead of just exit when closing the ssh master socket

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 30 00:33:27 2015 +0200

Support --version as well as --v in oscap-ssh

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 27 14:20:00 2015 +0200

Merge pull request #70 from jan-cerny/maint-1.2
    
    Fixed bad namespace in unix definitions schema and schematron

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 20 15:39:46 2015 +0200

Fixed bad object names in unix definitions schema and schematron

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Apr 24 10:34:57 2015 +0200

Merge pull request #67 from jan-cerny/glob2regex
    
    Glob2regex

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Apr 24 10:13:44 2015 +0200

Changed datatype of attribute glob_noescape from char* to bool.
    
    We need only boolean value here, no need to store a string.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 23 17:22:41 2015 +0200

Better error message.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 23 17:21:29 2015 +0200

Fix bad indentation

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 23 17:20:33 2015 +0200

Correctly name header file according to conventions

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 21 17:36:17 2015 +0200

Test - glob_to_regex function
    
    Needs to unhide the symbol form a header file.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 23 15:03:42 2015 +0200

Merge pull request #71 from jan-cerny/validate_test
    
    Test oscap oval validate on OVAL 5.11 content.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Apr 22 10:12:39 2015 +0200

Test oscap oval validate on OVAL 5.11 content.
    
    We need to test `oscap oval validate`
    and `oscap oval validate --schematron` on OVAL 5.11 content
    to avoid mistakes in OVAL 5.11 schematron.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 21 15:48:10 2015 +0200

Removed overabundant "exit 1" - replaced by assert_exist.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Apr 20 16:48:53 2015 +0200

Refactored <fix/> and <fixtext/> rendering into 2 templates in report and guide
    
    This will prevent code duplication in very near future.

Author: Martin Preisler <martin@preisler.me>
Date:   Sat Apr 18 15:48:34 2015 +0200

Install oscap-ssh when running `make install`

Author: Martin Preisler <martin@preisler.me>
Date:   Sat Apr 18 15:39:11 2015 +0200

Moved oscap-ssh to utils, next to scap-as-rpm

Author: Martin Preisler <martin@preisler.me>
Date:   Sat Apr 18 15:33:22 2015 +0200

Support -h and --help arguments in the oscap-ssh script

Author: Martin Preisler <martin@preisler.me>
Date:   Sat Apr 18 13:10:47 2015 +0200

Check all file paths before any copying takes place

Author: Martin Preisler <martin@preisler.me>
Date:   Sat Apr 18 12:40:22 2015 +0200

Check whether local file path is a valid and existing file path

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:53:54 2015 +0200

Support `oval eval --directives` option

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:50:28 2015 +0200

`oscap-ssh user@host 22 --v` is supported now

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:45:06 2015 +0200

Added support for `oval {eval,collect} --variables option`

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:42:17 2015 +0200

Added support for `oval collect --syschar` option

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:38:15 2015 +0200

Basic --cpe support for xccdf eval, external OVAL files not supported yet!

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:33:09 2015 +0200

Added basic support for `oval collect`, fixed docs

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:28:26 2015 +0200

Added `oscap info` to usage docs

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:27:04 2015 +0200

Added basic support for `oval eval`, improved documentation

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:13:39 2015 +0200

Renamed TARGET_RESULTS_XCCDF to just TARGET_RESULTS
    
    It will be used for more modes than just xccdf eval.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:10:33 2015 +0200

Added support for `info` command line options
    
    $ oscap-ssh user@host 22 info local-file.xml

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:07:10 2015 +0200

Simpler check for `xccdf eval`
    
    This is in preparation for more supported command line options.

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Apr 9 22:05:40 2015 +0200

Check for dependencies with which, fail as early as possible

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 6 17:49:49 2015 +0200

Initial prototype
    
    Error handling and the arguments rewriting is a little shoddy but it
    works!

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 17 15:25:34 2015 +0200

Merge branch 'maint-1.1' into maint-1.2
    
    Conflicts:
            xsl/xccdf-report-impl.xsl
            xsl/xccdf-resources.xsl

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 17 15:09:57 2015 +0200

Scroll the HTML report CPE platforms and Addresses as well
    
    This fixes an overflow when user's browser is set to very large font.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 17 15:01:02 2015 +0200

Scroll evaluation characteristics table if it overflows in HTML report
    
    We can't predict values of target hostname and/or benchmark URL. They
    can be very large in practice and the words may not be splittable. This
    change causes the table to show horizontal scrollbar instead of
    overflowing right.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Apr 17 13:53:34 2015 +0200

trac#457: Skip transient files when traversing /proc
    
    Addressing:
    lstat failed when processing /proc/27762/task/27762/fd/7: errno=2, No
    such file or directory.
    
    (Where fd=7 was directory openned by openat during fts_read)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Apr 16 15:26:59 2015 +0200

Make the error message actually useful
    
    While leaving this commit message sarcasm free.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 16 08:47:26 2015 +0200

Implemented oscap_string_free

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 16 08:27:28 2015 +0200

Using OSCAP_HIDDEN_START/END to not export the symbol

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 15 10:43:26 2015 +0200

trac#458: Avoid double free
    
    These hunks are missing from 41ef893e.
    
    Addressing segmentation fault:
     #0  0x00007ffff561108d in xmlHashFree () from /lib64/libxml2.so.2
     #1  0x00007ffff560865c in xmlFreeDoc () from /lib64/libxml2.so.2
     #2  0x00007ffff7ad39f8 in oscap_source_free (source=0xf45e90) at oscap_source.c:109
     #3  0x00007ffff7ace116 in oscap_htable_free (htable=0xd7dd90, destructor=0x7ffff7ad3968 <oscap_source_free>) at list.c:532
     #4  0x00007ffff7b6f79f in _xccdf_session_free_oval_result_sources (session=0x61fb40) at xccdf_session.c:1023
     #5  0x00007ffff7b6cf73 in xccdf_session_free (session=0x61fb40) at xccdf_session.c:205
     #6  0x000000000040bfe4 in app_evaluate_xccdf (action=0x7fffffffd430) at oscap-xccdf.c:540
     #7  0x0000000000407f8b in oscap_module_call (action=0x7fffffffd430) at oscap-tool.c:260
     #8  0x0000000000408408 in oscap_module_process (module=0x617700 <XCCDF_EVAL>, argc=12, argv=0x7fffffffd6a8) at oscap-tool.c:345
     #9  0x0000000000406e1d in main (argc=12, argv=0x7fffffffd6a8) at oscap.c:80

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 14 15:42:10 2015 +0200

Move the glob_to_regex function to a separate file

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Apr 14 15:14:11 2015 +0200

A module implementing dynamic strings

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Apr 13 15:17:39 2015 +0200

Display <fixtext> elements in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Apr 13 15:10:38 2015 +0200

Better support for <Rule> with multiple <fix> elements in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Apr 13 15:08:27 2015 +0200

Display <fixtext> elements in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Apr 13 14:59:03 2015 +0200

Better support for <Rule> with multiple <fix> elements in HTML report

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 13 14:26:44 2015 +0200

Provided a different example of invalid glob

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Apr 13 14:09:24 2015 +0200

Merge pull request #68 from jan-cerny/doublefree
    
    Fix possible double free

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 13 14:01:26 2015 +0200

Improve a comment

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 13 13:40:09 2015 +0200

Fixed evaluating af backslash at the end of glob expression.
    
    If a backslash is at the end of glob, it should be evaluated
    as a literal.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 13 11:43:24 2015 +0200

Handle error of glob_to_regex function.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Apr 13 11:06:56 2015 +0200

Make sure to initialize epoch string before a use
    
    Addressing (CWE-457):
    src/OVAL/probes/unix/linux/rpmverifypackage.c:151: uninit_use_in_call:
    Using uninitialized element of array "ent_str" when calling "strcmp".

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Apr 13 10:46:30 2015 +0200

Plug a memory leak
    
    Addressing (CWE-772):
    utils/oscap-xccdf.c:1048: leaked_storage: Variable "source" going out of
    scope leaks the storage it points to.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Apr 13 10:35:14 2015 +0200

Give up on error
    
    Addressing (CWE-476):
    src/DS/ds_sds_session.c:299: var_deref_model: Passing null pointer "xccdf"
    to "oscap_source_apply_xslt_path_mem", which dereferences it.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Apr 13 10:01:36 2015 +0200

Fix possible double free

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Apr 13 10:10:15 2015 +0200

Do not dereference NULL pointer
    
    Addressing (CWE-476):
    src/source/bz2.c:63: var_deref_op: Dereferencing null pointer "b".

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Apr 13 10:02:41 2015 +0200

Fix double free and deprecate function use
    
    Addressing:
    src/XCCDF/xccdf_session.c:498:3: warning: 'xccdf_policy_model_add_cpe_autodetect' is deprecated (declared at src/XCCDF_POLICY/public/xccdf_policy.h:234)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Apr 13 09:54:17 2015 +0200

Do not free a structure that is not owned
    
    Addressing (CWE-825):
    src/XCCDF/tailoring.c:229: double_free: Calling "oscap_source_free"
    frees pointer "source" which has already been freed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Apr 13 09:46:35 2015 +0200

Do not pass NULL to xccdf_benchmark_get_schema_version
    
    Addressing (CWE-476):
    src/XCCDF/item.c:834: var_deref_model: Passing null pointer "top_benchmark"
    to "xccdf_benchmark_get_schema_version", which dereferences it.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Apr 10 19:41:34 2015 +0200

Do not free a structure that is not owned
    
    Addressing (CWE-825):
    src/OVAL/oval_varModel.c:327: double_free: Calling "oscap_source_free"
    frees pointer "source" which has already been freed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Apr 10 19:20:12 2015 +0200

Make sure to always initialize varref_type.
    
    Addressing (CWE-457):
    src/OVAL/oval_entity.c:365: uninit_use_in_call: Using uninitialized value "varref_type" when calling "oval_entity_set_varref_type".

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Apr 10 18:53:20 2015 +0200

Do not pass NULL to ds_doc_from_foreign_node
    
    Addressing CWE-476:
    src/DS/ds_common.c:43:3: deref_parm: Directly dereferencing parameter "node".

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Apr 10 18:35:39 2015 +0200

Plug a memory leak.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Apr 10 15:44:57 2015 +0200

Added invalid globs to test cases for the glob_to_regex function

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 10 15:44:36 2015 +0200

Prevent every <br/> showing up as two <br> in HTML report and guide
    
    Ah, the endless joy of trying to make XSLT, XHTML and HTML5 work
    together.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 10 15:31:17 2015 +0200

Show warnings for Rules in HTML report
    
    There is no opportunity in HTML report to show warnings of Groups.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 10 15:30:58 2015 +0200

Show warnings for Groups and Rules in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 10 14:41:09 2015 +0200

Fixed XHTML to HTML5 transformation in report and guide substitution code

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 10 13:35:18 2015 +0200

Show cdf:rationale in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 10 11:27:48 2015 +0200

Show cdf:rationale in HTML report
    
    Fixes a regression - the old report did show rationale.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 9 15:33:45 2015 +0200

Disambiguate ./autogen.sh in README.md, only run when cloning from repo
    
    See https://fedorahosted.org/openscap/ticket/451

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Mar 26 13:34:10 2015 +0100

Use substitutionGroup change to the OVAL 5.11 schema from David Solin
    
    With a very small change by me to be compatible with both OVAL 5.10 and 5.11.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Mar 24 18:28:15 2015 +0100

Revert "Changed OVAL 5.11 XSD, allow oval:note and oval-def:note inside notes"
    
    This reverts commit 8e1f69c0bacb974f604f56a12da5386e1bfa8c8f.
    
    David Solin provided a better fix for this issue that is compatible with
    more XML parsers than just libxml2.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 9 14:49:03 2015 +0200

Added comment in _glob_to_regex()

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 9 09:54:40 2015 +0200

Test update - correction of converting glob * and ? to regex

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 9 09:32:07 2015 +0200

Improved glob_to_regex function.
    
    This make the glob_to_regex more compatible with unix globs.
    See man 7 glob.
    The * and ? should never match /. Deal with dots at begining.
    Fixes possible buffer overrun.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 2 16:59:25 2015 +0200

Test glob_to_regex function

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Apr 2 16:52:44 2015 +0200

New OVAL function glob_to_regex.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Apr 2 16:26:33 2015 +0200

Bump version after release
    
    Next release from maint-1.2 branch will be 1.2.3 (yax!)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Apr 2 15:06:41 2015 +0200

openscap-1.2.2

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Apr 2 14:46:05 2015 +0200

Bump soname from 8.4.1 to 8.4.2
    
    No new symbols have been added.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 22:52:31 2015 +0200

tests: Test suite shall not create fixed path files.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 30 14:09:03 2015 +0200

Test for rpmverifypackage probe.
    
    Tests proper evaluating of the rpmverifypackage_object.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 22:27:59 2015 +0200

Merge branch 'maint-1.1' into maint-1.2
    
    Before OpenSCAP 1.2.2 release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 22:06:28 2015 +0200

Merge branch 'maint-1.0' into maint-1.1
    
    Before OpenSCAP 1.2.2 release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 20:58:40 2015 +0200

tests: Assert Fedora 23 CPE implementation

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 20:23:03 2015 +0200

Introduce CPE name for upcomming Fedora 23

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 17:20:37 2015 +0200

Advise users not to use var_ref/@var_ref
    
    OVAL 5.6+ schematron rules tell the same.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 16:47:18 2015 +0200

Refactor: Extract function: oval_definition_model_get_schema_version

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Apr 1 15:35:27 2015 +0200

trac#450: Make sure variable is found
    
    during parsing of input document.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 26 09:53:23 2015 +0100

Fixed bug in rpm epoch.
    
    The epoch "(none)" has caused that object can't be found.
    The fix skips modifying RPM iterator with regular expression
    for the epoch tag.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 23 15:48:26 2015 +0100

New error message for environmentvariable58 objects.
    
    When process with requested PID does not exist, a message will
    be added to OVAL results.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Mar 19 17:33:18 2015 +0100

Update Copyright notice.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Mar 19 17:10:32 2015 +0100

Merge branch 'maint-1.1' into maint-1.2
    
    Conflicts:
            utils/oscap-ds.c

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Mar 19 17:07:42 2015 +0100

Merge branch 'maint-1.0' into maint-1.1
    
    Conflicts:
            ac_probes/configure.ac.tpl
            configure.ac

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Mar 19 16:50:21 2015 +0100

Merge pull request #59 from jan-cerny/skip-valid
    
    Added misssing parametr --skip-valid for oscap ds sds-compose

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 19 15:49:08 2015 +0100

Add --skip-valid to DS actions in manual page

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 19 15:26:48 2015 +0100

Fixed NULL pointer dereferencing.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Mar 18 17:51:55 2015 +0100

Option --skip-valid for actions in ds module

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Mar 19 14:23:00 2015 +0100

Merge pull request #60 from jan-cerny/oval5.11
    
    Added schematron files for OVAL 5.11

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Mar 18 19:51:16 2015 +0100

Changed OVAL 5.11 XSD, allow oval:note and oval-def:note inside notes
    
    Fixes backward compatibility issues with OVAL 5.10, see:
    https://github.com/OVALProject/Language/issues/237

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 16 17:08:09 2015 +0100

add oscap ds sds-compose --skip-valid to the manual page

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 16 17:00:15 2015 +0100

Add --skip-valid to the help text of oscap ds sds-compose

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Mar 16 16:35:18 2015 +0100

Merge pull request #57 from jan-cerny/oval_details
    
    OVAL details in HTML report for passed rules.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 16 16:22:05 2015 +0100

Limit of displayed items in OVAL details changed from 50 to 100.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 16 13:37:02 2015 +0100

Added schematron files for OVAL 5.11

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 12 10:31:59 2015 +0100

Added misssing parametr --skip-valid for oscap ds sds-compose

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 12 09:40:13 2015 +0100

OVAL details items heading more self-documenting

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Mar 16 10:45:37 2015 +0100

Tests: Ensure that bad selector does not produce segfault

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Mar 12 14:05:00 2015 +0100

Merge pull request #58 from jan-cerny/oval5.11
    
    Support for OVAL 5.11 for generating datastreams

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 12 09:04:36 2015 +0100

add a comment in xsd schema

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Mar 11 11:20:33 2015 +0100

Fix segfault on invalid xccdf:refine-value selector.
    
    Addressing:
     #0 in xccdf_value_instance_get_value (item=0x0) at value.c:437
     #1 in xccdf_policy_get_value_of_item (policy=0x630a00, item=0x63ad80) at xccdf_policy.c:2426
     #2 in xccdf_policy_add_final_setvalue (policy=0x630a00, value=0x63ad80, result=0x630870) at xccdf_policy.c:2193
     #3 in xccdf_policy_add_final_setvalues (policy=0x630a00, item=0x631d90, result=0x630870) at xccdf_policy.c:2228
     #4 in xccdf_policy_evaluate (policy=0x630a00) at xccdf_policy.c:2318
     #5 in xccdf_session_evaluate (session=0x61fb00) at xccdf_session.c:907
     #6 in app_evaluate_xccdf (action=0x7fffffffd4a0) at oscap-xccdf.c:490
     #7 in oscap_module_call (action=0x7fffffffd4a0) at oscap-tool.c:261
     #8 in oscap_module_process (module=0x6176c0 <XCCDF_EVAL>, argc=8, argv=0x7fffffffd718) at oscap-tool.c:346
     #9 in main (argc=8, argv=0x7fffffffd718) at oscap.c:79

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Mar 9 17:53:57 2015 +0100

Support for OVAL 5.11 for generating datastreams

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Mar 10 16:12:29 2015 +0100

Enhancement of visualisation of not found objects in HTML report.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 5 17:39:50 2015 +0100

Tests that fixes containing unresolved elements can't be executed.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Mar 3 16:23:09 2015 +0100

trac#265: substituing xccdf:fix/xccdf:instance elements + test

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Mar 5 16:18:12 2015 +0100

OVAL details in HTML report for passed rules.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Mar 6 09:17:42 2015 +0100

Return not_applicable item if offline mode is not suported
    
    Previously, we have been returning random snack from the stack.
    
    Addressing:
     ------
      ("seap.msg" ":id" 0 ":reply-id" 0 (21351608 () () () ) )
     ------
    OpenSCAP Error: Unknown syschar flag: 21351608. [oval_resultTest.c:837]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Mar 5 14:09:57 2015 +0100

Improve handling of unsupported offline mode
    
    Make it clear in the debug log what happened.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Feb 25 13:32:46 2015 +0100

Merge pull request #49 from jan-cerny/maly_test
    
    trac#282: small test that checks possibility of placing comment before r...

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Feb 25 13:31:13 2015 +0100

Merge pull request #53 from jan-cerny/maint-1.1
    
    trac#269: Test checking the xccdf:platform element within xccdf:TestResu...

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Feb 23 14:09:22 2015 +0100

trac#269: Test checking the xccdf:platform element within xccdf:TestResult

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 17 15:45:18 2015 +0100

trac#282: small test that checks possibility of placing comment before root element in OVAL files

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Feb 20 15:23:12 2015 +0100

Merge pull request #51 from jan-cerny/asdf
    
    Avoids possible dereferencing a null pointer.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 17 17:03:01 2015 +0100

Avoids possible dereferencing a null pointer.

Author: Martin Preisler <martin@preisler.me>
Date:   Fri Feb 20 14:54:04 2015 +0100

Merge pull request #48 from jan-cerny/maint-1.1
    
    trac#447: Table of Contents added to generated HTML guide.

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Feb 20 12:46:59 2015 +0100

trac#447: Small improvements in table of contents.

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Fri Feb 20 11:21:44 2015 +0100

Fixed a Solaris build issue in src/OVAL/probes/unix/file.c

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Fri Feb 20 11:07:27 2015 +0100

Only include <sys/prctl.h> on Linux in SCE
    
    Fixes build issues on Solaris.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Feb 18 13:13:15 2015 +0100

Merge pull request #50 from jan-cerny/maint-1.0
    
    Eliminated warning: initialization discards qualifiers from pointer targ...

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 17 16:56:06 2015 +0100

Eliminated warning: initialization discards qualifiers from pointer target type

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Feb 16 14:39:29 2015 +0100

trac#447: Table of Contents added to generated HTML guide.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Feb 16 21:45:17 2015 +0100

Merge branch 'maint-1.1' into maint-1.2
    
    Conflicts:
            ac_probes/configure.ac.tpl
            configure.ac
            tests/Makefile.am

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Feb 16 21:12:40 2015 +0100

Merge maint-1.0 into maint-1.1
    
    After OpenSCAP 1.0.10 release.
    
    Conflicts:
            NEWS
            ac_probes/configure.ac.tpl
            configure.ac

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Feb 16 17:56:07 2015 +0100

Bump version after release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Feb 16 16:06:41 2015 +0100

openscap-1.0.10

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Feb 16 14:39:30 2015 +0100

Bump soname from 8.3.0 to 8.3.1
    
    No new symbols have been added.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Feb 16 12:26:48 2015 +0100

Bump version after release
    
    Next release from maint-1.2 branch will be 1.2.2.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Feb 16 11:00:14 2015 +0100

declaration of ‘time’ shadows a global declaration
    
    Fixes #42.
    
    Addressing:
    result.c: In function ‘xccdf_rule_result_override’:
    result.c:1157: warning: declaration of ‘time’ shadows a global declaration
    /usr/include/time.h:186: warning: shadowed declaration is here

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Feb 10 17:39:30 2015 +0100

Merge pull request #47 from jan-cerny/oprava3
    
    Fix a double free.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Feb 10 17:37:57 2015 +0100

Merge pull request #46 from jan-cerny/maint-1.0
    
    trca#352: <connection_string> should be exported before <sql> within <sq...

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 10 17:17:39 2015 +0100

Fix a double free.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Feb 10 16:45:19 2015 +0100

trca#352: <connection_string> should be exported before <sql> within <sql57_item>

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Feb 10 13:31:27 2015 +0100

Merge pull request #44 from jan-cerny/oprava1
    
    Plug a memory leak.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Feb 10 13:30:12 2015 +0100

Merge pull request #40 from jan-cerny/maint-1.1
    
    Show info about objects and states in OVAL details in HTML report when o...

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Feb 9 16:28:27 2015 +0100

Plug a memory leak.
    
     18. openscap-1.1.1/src/OVAL/probes/unix/linux/systemdunitproperty.c:107: alloc_fn: Storage is returned from allocation function "oscap_strdup".
    21. openscap-1.1.1/src/common/util.c:65:2: alloc_fn: Storage is returned from allocation function "strdup".
    22. openscap-1.1.1/src/common/util.c:65:2: var_assign: Assigning: "m" = "strdup(str)".
    25. openscap-1.1.1/src/common/util.c:70:2: return_alloc: Returning allocated memory "m".
    26. openscap-1.1.1/src/OVAL/probes/unix/linux/systemdunitproperty.c:107: var_assign: Assigning: "property_name" = storage returned from "oscap_strdup(value.str)".
    33. openscap-1.1.1/src/OVAL/probes/unix/linux/systemdunitproperty.c:116: leaked_storage: Variable "property_name" going out of scope leaks the storage it points to.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Feb 8 13:56:59 2015 +0100

Revert "trac#390: fixing build on my shinny little fedora 21"
    
    This reverts commit 6c93bbfb6c2db0bdce501c6aa471c45e7bc7d2cc.
    
    Not really works. It was in hurry.

Author: Shawn Wells <shawn@redhat.com>
Date:   Fri Feb 6 14:18:31 2015 -0500

[issue 41] added AC_CHECK_HEADER for pcre.h
    
    Every time I meet Simon, I break OpenSCAP :)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Feb 8 01:01:53 2015 +0100

trac#390: fixing build on my shinny little fedora 21

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Feb 5 10:09:38 2015 +0100

Used @mode in applying templates, changed idendation.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Feb 4 14:52:59 2015 +0100

Show info about objects and states in OVAL details in HTML report when object could not be found

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Feb 2 17:09:15 2015 +0100

Merge pull request #37 from jan-cerny/xsl
    
    trac#426: Labels in OVAL details in HTML report should start with capita...

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Feb 2 17:06:27 2015 +0100

Merge pull request #38 from jan-cerny/details
    
    Show a message in HTML report when OVAL object could not be found.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Feb 2 17:05:32 2015 +0100

Merge pull request #39 from jan-cerny/maint-1.1
    
    Fix test_oval_details partition test to be able to run on RHEL 7.

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Feb 2 15:36:18 2015 +0100

Fix test_oval_details partition test to be able to run on RHEL 7.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Fri Jan 30 13:45:54 2015 +0100

Merge pull request #36 from jan-cerny/maint-1.1
    
    Test OVAL details in HTML reports

Author: Jan Černý <jcerny@redhat.com>
Date:   Fri Jan 30 11:57:56 2015 +0100

Show a message in HTML report when OVAL object could not be found.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Jan 28 15:58:44 2015 +0100

Tests check presence of OVAL details in HTML report.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Jan 29 15:42:20 2015 +0100

trac#426: Labels in OVAL details in HTML report should start with capital letters.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jan 16 15:57:31 2015 +0100

Export @var_check together with @var_ref for objects
    
    Addresses rhbz#1182242 and rhbz#1159289.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 10 12:43:07 2015 +0100

openscap-1.2.1

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jan 10 12:42:13 2015 +0100

Bump soname from 8.4.0 to 8.4.1
    
    No interface changes.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jan 9 19:10:54 2015 +0100

Provide tooltips for identifiers and references in HTML report and guide
    
    Both aren't self documenting and we can't expect users to read the
    entire XCCDF specification.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jan 9 18:11:46 2015 +0100

Merge branch 'maint-1.1' into maint-1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jan 9 18:02:15 2015 +0100

Use XCCDF item IDs as CSS classes in HTML report
    
    Integrations can use this to jump to the right Rule or Group.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jan 9 17:59:24 2015 +0100

Use XCCDF item IDs as CSS classes in HTML guide
    
    Integrations can use this to jump to the right Rule or Group.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 8 22:51:13 2015 +0100

Merge branch 'maint-1.1' into maint-1.2
    
    Conflicts:
            xsl/xccdf-resources.xsl
    
    What a painful merge conflict.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 8 16:30:58 2015 +0100

Merge branch 'maint-1.0' into maint-1.1
    
    Just before OpenSCAP 1.2.1 release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 8 16:14:57 2015 +0100

Add missing files to makefile.

Author: Daniel Kopecek <dkopecek@redhat.com>
Date:   Tue Jan 6 16:23:14 2015 +0100

Set async thread cancelation before entering probe_main
    
    Set thread cancelation type to PTHREAD_CANCEL_ASYNCHRONOUS to prevent
    the code in probe_main to defer the cancelation for too long.
    
    Related: rhbz#1165139

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 8 14:59:27 2015 +0100

Make sure that DS eval have blank stderr

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jan 8 14:27:28 2015 +0100

tests: trac#434: Ensure that CPE in DataStream is used correctly

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Jan 6 17:45:37 2015 +0100

trac#434: Keep the relative path canonical
    
    Do not create things like: "./oval.xml"
    
    Addressing:
    Unable to parse XML at: './ssg-fedora-cpe-oval.xml' [oscap_source.c:187]
    Can't import OVAL definition model './ssg-fedora-cpe-oval.xml' for CPE applicability checking [cpe_session.c:108]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Jan 6 17:40:23 2015 +0100

Refactor: Extract function: _cpe_get_oval_href

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Jan 6 17:18:32 2015 +0100

trac#434: oscap_source(s) of ds_sds_session should only have relative href
    
    This change concurs with 187bfd11d0a85f5101e9a5816444bcca2e546d3d
    
    Addressing:
    Unable to parse XML at: '/tmp/oscap.XUC2eE/./ssg-fedora-cpe-oval.xml' [oscap_source.c:187]
    Can't import OVAL definition model '/tmp/oscap.XUC2eE/./ssg-fedora-cpe-oval.xml' for CPE applicability checking [cpe_session.c:107]

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jan 5 16:20:08 2015 +0100

Visual tweak to close button, modal dialog backdrop click fix in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jan 5 15:59:54 2015 +0100

Use a larger times / X sign in close button for modal dialogs in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jan 5 15:37:31 2015 +0100

Label OVAL details coming from ARF as so in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jan 5 13:57:07 2015 +0100

Move OpenSCAP text from SVG logo to <h1/> element in HTML report and guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jan 5 13:10:54 2015 +0100

Merge commit '313650810d5727e1a259d13e9c454a1c3abbd73f' into maint-1.2
    
    Conflicts:
            schemas/oval/5.11/oval-definitions-schema.xsd
            schemas/oval/5.11/oval-directives-schema.xsd
            schemas/oval/5.11/oval-results-schema.xsd
            schemas/oval/5.11/oval-system-characteristics-schema.xsd
            schemas/oval/5.11/oval-variables-schema.xsd
            schemas/oval/5.11/xmldsig-core-schema.xsd

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jan 5 11:52:35 2015 +0100

Updated OVAL 5.11 schemas to the officially released schemas

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Dec 27 16:06:29 2014 +0100

Refactor: Rename functions to structure bz2 module
    
    Bz2 module contains two structures bz2_file and bz2_mem and functions
    working with either structure. Let's rename older functions to include
    the bz2_file prefix.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Dec 26 15:43:42 2014 +0100

tests: trac#429: check bzip2 support for oscap_source_new_from_memory

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Dec 25 10:35:08 2014 +0100

trac#429: bzip2 support for oscap_source_new_from_memory

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Dec 18 16:57:08 2014 +0100

Always show score percentage, even if it can't fit to the green part of the bar

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Dec 18 16:16:43 2014 +0100

Slight heading and string changes in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Dec 18 16:10:15 2014 +0100

Use "Percent" instead of "%" for scoring column header in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Dec 18 15:42:04 2014 +0100

Show high severity on the right in severity breakdown in HTML report
    
    This is consistent with showing failed rules on the right.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Dec 18 10:04:59 2014 +0100

Merge pull request #33 from jan-cerny/maint-1.0
    
    Fixed a segfault when working with empty xccdf variable.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Dec 18 09:43:32 2014 +0100

New unit test, which tests possibility of segmentation fault when
    working with empty XCCDF element "<variable/>".

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Dec 17 14:01:42 2014 +0100

Fixed a segfault when working with empty xccdf variable.
    Put an empty string instead of NULL if xccdf_value_binding_get_value
    returns NULL.
    First, we do that before resolving variables conflict.
    Second, we do that when adding variables to variable model.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Dec 10 14:31:18 2014 +0100

Do not use a/@name in HTML5 report and guide, @name is deprecated
    
    The @id attribute is used instead. It seems libxml2 2.9.2 treats @name
    as if it shared namespace with @id. This causes issues because there are
    duplicates. This commit fixes that.
    
    element a: validity error : ID characteristics already defined
    element a: validity error : ID compliance-and-scoring already defined
    element a: validity error : ID rule-overview already defined
    element a: validity error : ID result-details already defined
    element a: validity error : ID rule-detail-idp172343684 already defined
    element a: validity error : ID rule-detail-idp172345764 already defined
    element a: validity error : ID rule-detail-idp172348060 already defined
    element a: validity error : ID rule-detail-idp172350140 already defined
    element a: validity error : ID rule-detail-idp172353252 already defined
    element a: validity error : ID rule-detail-idp172355332 already defined
    element a: validity error : ID rule-detail-idp172357412 already defined
    element a: validity error : ID rule-detail-idp172359500 already defined
    element a: validity error : ID rule-detail-idp172362620 already defined

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Dec 2 11:13:56 2014 +0100

Bump version after release
    
    Next release from main-1.2 branch will be 1.2.1

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Dec 2 10:17:58 2014 +0100

openscap-1.2.0

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Dec 2 10:11:19 2014 +0100

Bump soname from 8.3.2 to 8.4.0
    
    50 new symbols has been added.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Dec 1 15:51:01 2014 +0100

Merge branch 'maint-1.1' into master
    
    Shortly before 1.2.0 release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Dec 1 14:38:20 2014 +0100

Merge branch 'maint-1.0' into maint-1.1
    
    Shortly before 1.2.0 release.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Dec 1 14:36:54 2014 +0100

Merge pull request #32 from jan-cerny/maint-1.1
    
    trac#421: initialization discards 'const' qualifier from pointer target ...

Author: Marcus Meissner <meissner@suse.de>
Date:   Mon Dec 1 13:36:22 2014 +0100

cron snippet: removed bashisms
    
    Contributed by Led <ledest@gmail.com>
    - fix bashism in oscap-scan.cron script

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Dec 1 14:26:02 2014 +0100

trac#421: initialization discards 'const' qualifier from pointer target type

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Nov 27 10:49:36 2014 +0100

Use calloc to allocate new rds_index
    
    The functions in the module like (rds_report_index_get_request) assume
    zeroed memory.
    
    Addressing SEGFAULT. (Stacktraces are from master, but segfault is
    present in maint-1.0 branch as well).
    
      in rds_report_request_index_get_id (s=0x8282828282828282) at rds_index.c:62
      in ds_rds_session_select_report_request (session=0x73d7f0, report_request_id=0x0) at ds_rds_session.c:153
      in app_ds_rds_split (action=0x7fffffffd950) at oscap-ds.c:402
      in oscap_module_call (action=0x7fffffffd950) at oscap-tool.c:260
      in oscap_module_process (module=0x615ca0 <DS_RDS_SPLIT_MODULE>, argc=5, argv=0x7fffffffdbc8) at oscap-tool.c:345
      in main (argc=5, argv=0x7fffffffdbc8) at oscap.c:80
    
    Conditional jump or move depends on uninitialised value(s)
      at 0x4C67564: ds_rds_session_select_report_request (ds_rds_session.c:150)
      by 0x409151: app_ds_rds_split (oscap-ds.c:402)
      by 0x407F88: oscap_module_call (oscap-tool.c:260)
      by 0x408405: oscap_module_process (oscap-tool.c:345)
      by 0x406E16: main (oscap.c:80)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Nov 26 17:33:10 2014 +0100

trac#422: Split Source DataStream to the correct directory.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 26 15:46:16 2014 +0100

Use the shared xmldsig-core-schema.xsd even in OVAL 5.11 schemas

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 26 15:27:05 2014 +0100

Added OVAL 5.11 schemas to Makefile.am

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 26 15:08:14 2014 +0100

Enabled validation for systemd tests, fixed them to pass the validation

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 26 15:07:07 2014 +0100

Resolve parsing issues with OVAL 5.11 schemas
    
    Similar to e64ba09361ab2e62125abc38b96b8918f78b1fac but for OVAL 5.11 schemas

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 26 14:57:16 2014 +0100

Added OVAL 5.11 Release Candidate schemas

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Nov 26 11:27:41 2014 +0100

Introduce function for recalculation of TestResult scores.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Nov 26 12:08:20 2014 +0100

Merge pull request #30 from jan-cerny/master
    
    trac#421: warning: initialization discards 'const' qualifier from

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Nov 26 10:28:52 2014 +0100

Refactor: Extract scoring functionalityu to separate module.
    
    Generaly, we prefer not to move code around like this. However, there
    are multiple reasons for this move:
     * Scoring code has characteristics of module
     * Scoring is independent of XCCDF Policy
     * XCCDF Policy module is big and hairy
     * We need to introduce functions like xccdf_result_recalculate_scores,
       it would be unfortunate to have these functions in XCCDF Policy
       module.

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 26 10:15:20 2014 +0100

trac#421: warning: initialization discards 'const' qualifier from
    pointer target type

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Nov 26 10:07:48 2014 +0100

Refactor: Extract function: xccdf_result_calculate_score

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Nov 25 20:05:02 2014 +0100

Implementation may refer to the specification
    
    I was tempted to rewrite this code to be independent of xccdf:Benchmark.
    However, I have found that the code must depend on xccdf:Benchamark as
    Group's score needs to be considered during the calculation.
    
    The comment shall help future generations to determine this quicker.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Nov 21 14:53:34 2014 +0100

Include README.md in tarball

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Nov 18 11:16:48 2014 +0100

Merge pull request #29 from jan-cerny/master
    
    Change parameter of oscap_generator_set functions on const char *.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 18 08:54:50 2014 +0100

Change parameter of oscap_generator_set functions on const char *.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 17 09:52:05 2014 +0100

Introduce: ds_sds_session_get_html_guide.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Nov 12 14:27:26 2014 +0100

Merge pull request #28 from jan-cerny/master
    
    edit README

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 5 13:31:18 2014 +0100

edit README

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Nov 11 18:43:22 2014 +0100

Merge pull request #27 from jan-cerny/oprava
    
    trac#419: passing argument 2 of 'oval_generator_set_product_version' dis...

Author: Jan Černý <jcerny@redhat.com>
Date:   Mon Nov 10 13:33:03 2014 +0100

trac#419: passing argument 2 of 'oval_generator_set_product_version' discards qualifiers from pointer target type

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Nov 6 16:27:33 2014 +0100

Initial support for cdf:override / waivers in HTML report

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Nov 6 13:47:12 2014 +0100

Merge branch 'maint-1.1'
    
    We need to merge the test/remediate fix to master to avoid nightly
    test failures with --enable-valgrind option. The test has assumed
    that the run would take just a few second, while with valgrind it
    takes a few more seconsds and we see failures.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Nov 6 10:17:56 2014 +0100

Merge branch 'maint-1.0' into maint-1.1
    
    We need to merge the test/remediate fix to master to avoid nightly
    test failures with --enable-valgrind option. The test has assumed
    that the run would take just a few second, while with valgrind it takes
    a few more seconsds and we see failures.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 5 16:25:02 2014 +0100

Added oscap_source_get_raw_memory

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 5 15:54:01 2014 +0100

filepath in oscap_source.origin should be char*, not const char*
    
    We own it, we free it in the destructor.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 5 15:13:36 2014 +0100

Allow creation of oscap_source from raw memory

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Nov 5 11:18:27 2014 +0100

Expose oscap_textlist_get_preferred_text in public API
    
    This function is needed to get XHTML descriptions for scap-workbench.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Nov 5 09:49:20 2014 +0100

Merge pull request #26 from jan-cerny/format
    
    trac#411: Remove references to docbook feature

Author: Jan Černý <jcerny@redhat.com>
Date:   Wed Nov 5 09:22:33 2014 +0100

trac#411: Remove references to docbook feature
    Removed --format feature.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Nov 4 17:35:11 2014 +0100

Merge pull request #25 from isimluk/overrides
    
    Overrides

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Nov 4 16:47:57 2014 +0100

New line shall not be sent to oscap_seterr
    
    The message get appended '[file_name:line]\n'

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Nov 4 16:36:30 2014 +0100

tests: Make sure that TestResult is exported to correct namespace.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Nov 4 16:31:40 2014 +0100

Make sure to export TestResult to correct namespace.
    
    Addressing export like:
    <TestResult xmlns="unknown" ...

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Nov 4 15:46:52 2014 +0100

Introduce xccdf_version_info property of TestResult.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 3 23:51:56 2014 +0100

Assert for the content of the ARF with overriden results

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 3 18:43:23 2014 +0100

tests: API for waivers within ARF

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Nov 4 16:30:22 2014 +0100

Merge pull request #24 from jan-cerny/master
    
    Send xpath stderr to /dev/null.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Nov 4 16:30:03 2014 +0100

Merge pull request #23 from jan-cerny/maint-1.0
    
    trac#406: tests/API/XCCDF/unittests/test_remediate_simple.sh is not dete...

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 4 09:36:36 2014 +0100

Send xpath stderr to /dev/null.
    
    I could not come up with a scenario under which the stderr
    would be usefull.

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 30 17:46:28 2014 +0100

trac#406: tests/API/XCCDF/unittests/test_remediate_simple.sh is not deterministic
    New way to test start-time and end-time.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Nov 4 16:04:06 2014 +0100

Merge pull request #22 from jan-cerny/version
    
    trac#358: OVAL generator element exported by OpenSCAP shall include <ova...

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Nov 4 15:51:10 2014 +0100

trac#358: OVAL generator element exported by OpenSCAP shall include <oval:product_version> element.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Nov 3 19:49:06 2014 +0100

Export var_check in OVAL object when var_ref is present
    
    Fixes validation issues with schematron, such as:
    
    oval:mil.disa.fso.redhat.rhel6:obj:3184 - a var_ref has been supplied for the
    ind-def:pattern entity so a var_check should also be provided

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 3 18:54:20 2014 +0100

Promote oscap_source_save_as to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Nov 3 18:48:58 2014 +0100

Introduce: xccdf_rule_result_override.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Nov 2 11:01:06 2014 +0100

Introduce: ds_rds_session_replace_report_with_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Nov 2 10:50:44 2014 +0100

Allow ds_rds_session_select_report to be re-entrant with the same id.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Sat Nov 1 19:24:39 2014 +0100

Fixed a regression in search functionality in HTML report
    
    Now it filters both rule overview and rule result details.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Nov 1 10:45:01 2014 +0100

Promote ds_rds_lookup_component to privileged
    
    and change parameter sorting to better make sense.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Nov 1 10:37:49 2014 +0100

Promote ds_rds_lookup_container from static to privileged.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Nov 1 10:07:27 2014 +0100

Promote ds_rds_create_report from static to privileged.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Nov 1 09:20:44 2014 +0100

Deprecate function: xccdf_result_export.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Nov 1 09:18:46 2014 +0100

Refactor: Extract function: xccdf_result_export_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Nov 1 09:11:08 2014 +0100

Use oscap_source to export TestResult.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Oct 30 18:04:32 2014 +0100

Merge pull request #21 from jan-cerny/maint-1.0
    
    Maint 1.0

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 30 16:23:36 2014 +0100

trac#308: export TestResult[@version]

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 30 16:20:44 2014 +0100

trac#308: Never export element version to TestResult
    
    Addressing:
    OpenSCAP Error: File '/tmp/test_xccdf_multiple_testresults.out.t0OrWR' line 0: Element '{http://checklists.nist.gov/xccdf/1.2}version': This element is not expected. Expected is one of ( {http://checklists.nist.gov/xccdf/1.2}benchmark, {http://checklists.nist.gov/xccdf/1.2}tailoring-file, {http://checklists.nist.gov/xccdf/1.2}title, {http://checklists.nist.gov/xccdf/1.2}remark, {http://checklists.nist.gov/xccdf/1.2}organization, {http://checklists.nist.gov/xccdf/1.2}identity, {http://checklists.nist.gov/xccdf/1.2}profile, {http://checklists.nist.gov/xccdf/1.2}target ).

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 30 16:13:01 2014 +0100

trac#308: Fill in TestResult[@version] every time new TestResult gets created.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Oct 30 14:01:45 2014 +0100

Merge branch 'maint-1.1'

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 30 13:37:58 2014 +0100

Avoid freeing uninitialized pointer when error handling in app_cpe_match

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Oct 30 13:24:52 2014 +0100

Merge pull request #17 from isimluk/ds_rds_session
    
    ds_rds_session

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Oct 30 12:56:08 2014 +0100

Merge pull request #20 from jan-cerny/maint-1.1
    
    trac#411: Remove references to docbook feature

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 30 10:27:12 2014 +0100

trac#411: Remove references to docbook feature

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Oct 30 10:41:25 2014 +0100

Merge branch 'maint-1.0' into maint-1.1

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Thu Oct 30 10:16:38 2014 +0100

Merge pull request #18 from jan-cerny/maint-1.0
    
    trac#377: oscap xccdf resolve: invalid option -- 'f'

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 30 10:13:10 2014 +0100

trac#377: oscap xccdf resolve: invalid option -- 'f'
    Removed "or -f" from help text.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 16:23:30 2014 +0100

Deprecate: ds_rds_decompose.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 12:46:29 2014 +0100

oscap-ds should leverage ds_rds_session for split.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 12:38:32 2014 +0100

Introduce: ds_rds_session_select_report_request

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 12:21:46 2014 +0100

Introduce: ds_rds_session_select_report

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 12:05:27 2014 +0100

Refactore: Promote: ds_rds_dump_arf_content

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 15:39:47 2014 +0100

Lookup parent of arf:content within the dump procedure.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 15:12:09 2014 +0100

Drop specific error message for report_id=NULL
    
    It was a dead code from day 1, the report_id=NULL would bring
    this to the segfault anyway.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 14:48:44 2014 +0100

Refactor: target_file can be responsibility of ds_rds_dump_arf_content

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 13:50:05 2014 +0100

Add target_dir property to ds_rds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 11:48:09 2014 +0100

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 11:39:31 2014 +0100

Refactor: Pass rds_session downto ds_rds_dump_arf_content.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 11:33:01 2014 +0100

Introduce ds_rds_session_get_xmlDoc
    
    This follows the very same patter as ds_sds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 11:20:30 2014 +0100

Use ds_rds_session to save ARF components.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 10:56:07 2014 +0100

Introduce: ds_rds_session_dump_component_files
    
    This follows the very same patter as ds_sds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 10:38:42 2014 +0100

Refactor: promote oscap_acquire_ensure_parent_dir

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 10:17:16 2014 +0100

Promote mkdir_p() to oscap_acquire module.
    
    It is good fit there. Then it is already used outside of DS module
    and we can get a rid of MAX_PATHLEN this way.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 09:57:17 2014 +0100

Introduce internal cache to ds_rds_session.
    
    This follows the very same patter as ds_sds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 09:21:23 2014 +0100

Refactor: Make ds_rds_dump_arf_content return oscap_source
    
    This actually grows the size of code a little bit. That's because we
    are adding error handling that has been previously missing.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 09:07:58 2014 +0100

Refactor: Extract function: _lookup_in_arf

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 08:47:20 2014 +0100

Do not guess request_id when splitting ARF.
    
    This is fishy. If there is no report-request in relationship with the
    report we will try to find the very first one. This seems incorrect,
    because we were requested to dump a couple of specific IDs. (compare
    code of utils/oscap-ds.c with rds.c).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 08:40:58 2014 +0100

tests: The oscap_source capitalized encoding.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 08:21:06 2014 +0100

Use oscap_source to save arf components (arf:content)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 12:43:04 2014 +0200

Drop rds_index_import_source.
    
    Introducing was not a good move. It will be better to keep rds_index
    initialized (parsed) only by ds_rds_session. That approach has following
    two benefits: (1) ds_rds_session operations will mimic the
    ds_sds_session, (2) callers will not be tempted to parse the thing
    twice. The initialization of ds_rds_session in oscap-info only for sake
    of getting index is cost I prefer to undertake.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 12:36:03 2014 +0200

Make a use of ds_rds_session_get_rds_idx

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 12:17:44 2014 +0200

Make a use of ds_rds_session_get_rds_idx

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 12:10:23 2014 +0200

Introduce: ds_rds_session_get_rds_idx

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 12:04:19 2014 +0200

Promote rds_index_parse from static to privileged.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 11:52:08 2014 +0200

Deprecate function: rds_index_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 11:49:25 2014 +0200

Make a use of rds_index_import_source
    
    Each of the changes avoids an extra file open/parse.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Oct 24 11:43:35 2014 +0200

Refactor: Extract function: rds_index_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 29 15:19:53 2014 +0100

trac#415: Fix parsing of TestResult/profile.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 29 10:04:35 2014 +0100

Send error message when TestResult could not be parsed.
    
    (cherry picked from commit dbe3d5f05526e97728d42cf88bce7c8e9ff94ed0)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 16:32:35 2014 +0100

Introduce: xccdf_result_import_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 13:52:13 2014 +0100

tests: Do not wipe out testing directory on error.
    
    Addressing testers wondering like:
    Only in /tmp/tmp.QMXpY8mvdu: (null)
    Only in ./rds_split_simple: report-request.xml
    Only in ./rds_split_simple: report.xml
    The files are different after going through result data stream!
    $ ls /tmp/tmp.QMXpY8mvdu/
    ls: cannot access /tmp/tmp.QMXpY8mvdu/: No such file or directory

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 13:11:31 2014 +0100

Remove overabundant line
    
    This is needed to keep ac_probes/configure.ac.tpl and configure.ac
    in sync. The disparity has been brought in by
    a827774ff5a3aa631c694af8a091493f6ecd10c1.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 28 11:55:38 2014 +0100

rds_index*free procedures shall be able to handle NULL
    
    The very most of the OpenSCAP _free routines can take NULL pointer so
    the caller does not need to care. rds_index*free procedures should not
    be an exception.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 27 13:41:31 2014 +0100

Fixup the the error message.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 23 17:20:24 2014 +0200

Added error checking when adding CPEs in xccdf_session_load_cpe, use oscap_source
    
    Also added tests testing the above.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 23 17:18:55 2014 +0200

Allow adding CPE dict, lang_model or autodetect via oscap_source
    
    And deprecated the old way via filenames.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 22 17:40:24 2014 +0200

Introduce: ds_rds_session_get_html_report.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 22 17:02:39 2014 +0200

Introduce ds_rds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 22 14:02:24 2014 +0200

Introduce: oscap_source_apply_xslt_path_mem.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 22 13:43:26 2014 +0200

Refactor: Extract function: apply_xslt_path_internal.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 22 13:13:10 2014 +0200

Free XSLT arguments immediatelly.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 22 13:05:16 2014 +0200

Refactor: Extract function: save_stylesheet_result_to_file.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Oct 22 08:45:43 2014 +0200

Merge pull request #15 from jan-cerny/conffail
    
    trac#408: ./configure --enable-valgrind should fail when valgrind comman...

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Oct 22 08:44:10 2014 +0200

Merge pull request #14 from jan-cerny/master
    
    Plug a memory leak.

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Oct 21 16:13:36 2014 +0200

trac#408: ./configure --enable-valgrind should fail when valgrind command was not found

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Oct 21 15:30:44 2014 +0200

trac#410:bz2 opener leaks
    Plug a memory leak.
    Addressing:
    568 bytes in 1 blocks are still reachable in loss record 1 of 1
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x3C2B46C17C: __fopen_internal (iofopen.c:73)
       by 0x4C63FEC: bz2_open (bz2.c:49)
       by 0x4C641D1: bz2_read_doc (bz2.c:97)
       by 0x4C6499B: oscap_source_get_xmlDoc (oscap_source.c:143)
       by 0x4C6483B: oscap_source_get_xmlTextReader (oscap_source.c:110)
       by 0x4C648E4: oscap_source_get_scap_type (oscap_source.c:125)
       by 0x40E226: app_info (oscap-info.c:81)
       by 0x407E28: oscap_module_call (oscap-tool.c:260)
       by 0x4082A5: oscap_module_process (oscap-tool.c:345)
       by 0x406CB6: main (oscap.c:80)
    LEAK SUMMARY:
       definitely lost: 0 bytes in 0 blocks
       indirectly lost: 0 bytes in 0 blocks
         possibly lost: 0 bytes in 0 blocks
       still reachable: 568 bytes in 1 blocks
            suppressed: 0 bytes in 0 blocks

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Oct 21 13:18:47 2014 +0200

Merge pull request #13 from jan-cerny/lcall
    
    trac#405: move LC_ALL=C from Makefile.am to test_common.sh.in

Author: Jan Černý <jcerny@redhat.com>
Date:   Tue Oct 21 13:00:58 2014 +0200

trac#405: move LC_ALL=C from Makefile.am to test_common.sh.in

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Tue Oct 21 12:57:09 2014 +0200

Merge pull request #12 from jan-cerny/master
    
    trac#409

Author: Jan Černý <jcerny@redhat.com>
Date:   Thu Oct 16 17:30:45 2014 +0200

Updated path to test_common.sh and xmldiff.pl

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Oct 15 16:11:06 2014 +0200

Pass version_info to xccdf_item_to_dom
    
    This allows tailoring export to function properly with oscap_source.
    I am not terribly happy about this solution but it doesn't break
    behavior and it doesn't break API. Right now the xccdf items don't have
    to know their XCCDF version to function properly but that may change in
    the future. At which point we will have to deal with this issue in a
    cleaner way.

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Wed Oct 15 15:49:46 2014 +0200

trac#409: tests_common.sh should not be part of distribution tarball
    tests_common.sh removed from makefiles

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Oct 15 15:41:05 2014 +0200

Create xccdf ns always in some node, don't rely on nsDef workarounds

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Oct 15 15:35:08 2014 +0200

Merge pull request #11 from jan-cerny/maint-1.0
    
    Plug a memory leak.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Oct 15 15:34:32 2014 +0200

Merge pull request #10 from jan-cerny/master
    
    removed + memory leak

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Wed Oct 15 14:53:07 2014 +0200

Plug a memory leak.
    
    Addressing:
    12 bytes in 1 blocks are definitely lost in loss record 1 of 2
       at 0x4A0858C: memalign (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4A08651: posix_memalign (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4C8DC13: SEXP_val_new (sexp-value.c:38)
       by 0x4C8B2D0: SEXP_parse_kl_string (sexp-parser.c:1638)
       by 0x4C8D8EA: SEXP_parse (sexp-parser.c:525)
       by 0x4C858F4: SEAP_packet_recv (seap-packet.c:721)
       by 0x4C871CA: SEAP_recvmsg (seap.c:356)
       by 0x4C7E998: oval_probe_comm (oval_probe_ext.c:487)
       by 0x4C7FC5E: oval_probe_ext_eval (oval_probe_ext.c:1085)
       by 0x4C7FF19: oval_probe_ext_handler (oval_probe_ext.c:902)
       by 0x4C6EC02: oval_probe_query_object (oval_probe.c:285)
       by 0x4C6EE73: oval_probe_query_criteria (oval_probe.c:374)
    
    16 bytes in 1 blocks are definitely lost in loss record 2 of 2
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4C890DD: SEXP_new (sexp-manip.c:1593)
       by 0x4C8CB48: SEXP_parse (sexp-parser.c:490)
       by 0x4C858F4: SEAP_packet_recv (seap-packet.c:721)
       by 0x4C871CA: SEAP_recvmsg (seap.c:356)
       by 0x4C7E998: oval_probe_comm (oval_probe_ext.c:487)
       by 0x4C7FC5E: oval_probe_ext_eval (oval_probe_ext.c:1085)
       by 0x4C7FF19: oval_probe_ext_handler (oval_probe_ext.c:902)
       by 0x4C6EC02: oval_probe_query_object (oval_probe.c:285)
       by 0x4C6EE73: oval_probe_query_criteria (oval_probe.c:374)
       by 0x4C6EDAF: oval_probe_query_criteria (oval_probe.c:427)
       by 0x4C6EDAF: oval_probe_query_criteria (oval_probe.c:427)

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Mon Oct 13 17:36:18 2014 +0200

Valgrind test script.
    Script for memory leak testing. Enable by ./configure --enable-valgrind

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Oct 15 11:34:43 2014 +0200

Fixed xccdf_session error message when exporting XCCDF results

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Oct 15 11:08:42 2014 +0200

Added OSCAP_DOCUMENT_UNKNOWN to oscap_document_type_t enum, use it instead of 0

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Oct 14 17:03:12 2014 +0200

tests: Make sure diff is always shown.
    
    Even in cases, when the failure (and set -e) would end the test.

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Mon Oct 13 17:18:58 2014 +0200

Plug a memory leak.
    
    Addressing:
     59 bytes in 1 blocks are definitely lost in loss record 2 of 3
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x4C593D8: __oscap_alloc (alloc.c:52)
        by 0x4C5DD52: oscap_vsprintf (util.c:170)
        by 0x4C5DE0B: oscap_sprintf (util.c:184)
        by 0x4C5BD00: oscap_acquire_guess_realpath (oscap_acquire.c:244)
        by 0x4CB2541: _xccdf_session_export_oval_result_file (xccdf_session.c:1072)
        by 0x4CB44BC: xccdf_session_export_oval (xccdf_session.c:1161)
        by 0x40B72B: app_evaluate_xccdf (oscap-xccdf.c:501)
        by 0x407A7F: oscap_module_process (oscap-tool.c:260)
        by 0x406B1E: main (oscap.c:80)

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Mon Oct 13 15:16:54 2014 +0200

Removed old valgrind tests.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Oct 13 14:23:41 2014 +0200

Merge branch 'maint-1.1'
    
    We want to have all the memore leaks merged to master. So we can
    introduce automated tests for memory leaks.

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Mon Oct 13 14:23:13 2014 +0200

Merge pull request #9 from isimluk/master
    
    Enable multiple scans and remediation in oscap-scan service.

Author: Trey Henefield <trey.henefield@ultra-ats.com>
Date:   Thu Oct 9 10:12:44 2014 +0200

Enable multiple scans and remediation in oscap-scan service.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 8 17:18:06 2014 +0200

Export request for valgrind test to all the tests.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 8 16:10:30 2014 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Oct 8 16:08:16 2014 +0200

Merge pull request #8 from jan-cerny/maint-1.0
    
    Plug a memory leak.

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Wed Oct 8 14:42:24 2014 +0200

Plug a memory leak.
    Addressing:
     4 bytes in 1 blocks are definitely lost in loss record 1 of 1
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x31EAC860B9: strdup (in /usr/lib64/libc-2.18.so)
        by 0x4C5DBDA: oscap_strdup (util.c:65)
        by 0x4C9743C: cpe_parser_ctx_set_schema_version (cpe_ctx_priv.c:97)
        by 0x4C99A37: cpe_generator_parse (cpedict_priv.c:710)
        by 0x4C9B2C9: cpe_dict_model_parse (cpedict_priv.c:644)
        by 0x4C9B4C9: cpe_dict_model_parse_xml (cpedict_priv.c:580)
        by 0x4C955E2: cpe_dict_model_import (cpedict.c:56)
        by 0x40CBE1: app_info (oscap-info.c:220)
        by 0x4079BF: oscap_module_process (oscap-tool.c:261)
        by 0x4069BE: main (oscap.c:79)

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Wed Oct 8 11:21:02 2014 +0200

Plug a memory leak.
    
    Addressing:
     37 bytes in 1 blocks are definitely lost in loss record 2 of 3
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x31EAC860B9: strdup (in /usr/lib64/libc-2.18.so)
        by 0x4C5DBDA: oscap_strdup (util.c:65)
        by 0x4CB1AEF: xccdf_session_set_report_export (xccdf_session.c:291)
        by 0x40B9D1: app_evaluate_xccdf (oscap-xccdf.c:507)
        by 0x4079BF: oscap_module_process (oscap-tool.c:261)
        by 0x4069BE: main (oscap.c:79)

Author: Šimon Lukašík <isimluk@fedoraproject.org>
Date:   Wed Oct 8 10:56:52 2014 +0200

Merge pull request #7 from jan-cerny/maint-1.0
    
    Maint 1.0

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Wed Oct 8 10:04:45 2014 +0200

Plug a memory leak.
    Addressing:
     35 bytes in 1 blocks are definitely lost in loss record 2 of 3
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x4C58B38: __oscap_alloc (alloc.c:52)
        by 0x4C9688C: cpe_name_get_as_format (cpename.c:670)
        by 0x4C97F3B: cpe_testexpr_export (cpelang_priv.c:571)
        by 0x4C98047: cpe_testexpr_export (cpelang_priv.c:603)
        by 0x4C9811B: cpe_platform_export (cpelang_priv.c:556)
        by 0x4C981B7: cpe_lang_export (cpelang_priv.c:538)
        by 0x4C9FF8A: xccdf_benchmark_to_dom (benchmark.c:303)
        by 0x4CA0246: xccdf_benchmark_export (benchmark.c:236)
        by 0x4CB2CE5: xccdf_session_export_xccdf (xccdf_session.c:998)
        by 0x40B9D9: app_evaluate_xccdf (oscap-xccdf.c:508)
        by 0x4079BF: oscap_module_process (oscap-tool.c:261)

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Tue Oct 7 17:28:34 2014 +0200

Plug a memory leak.
    
    Addressing:
     379 bytes in 7 blocks are definitely lost in loss record 4 of 4
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x31F78AE548: xmlStrndup (in /usr/lib64/libxml2.so.2.9.1)
        by 0x31F78EBB8C: xmlTextReaderGetAttribute (in /usr/lib64/libxml2.so.2.9.1)
        by 0x4C9B86A: cpe23_item_parse (cpedict_ext_priv.c:244)
        by 0x4C9B08C: cpe_item_parse (cpedict_priv.c:840)
        by 0x4C9B2E2: cpe_dict_model_parse (cpedict_priv.c:646)
        by 0x4C9B4B9: cpe_dict_model_parse_xml (cpedict_priv.c:580)
        by 0x4C955E2: cpe_dict_model_import (cpedict.c:56)
        by 0x40CBE1: app_info (oscap-info.c:220)
        by 0x4079BF: oscap_module_process (oscap-tool.c:261)
        by 0x4069BE: main (oscap.c:79)

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Tue Oct 7 17:26:25 2014 +0200

Plug a memory leak.
    
    Addressing:
     148 bytes in 3 blocks are definitely lost in loss record 3 of 4
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x31F78AE548: xmlStrndup (in /usr/lib64/libxml2.so.2.9.1)
        by 0x31F78EBB8C: xmlTextReaderGetAttribute (in /usr/lib64/libxml2.so.2.9.1)
        by 0x4C9BA87: cpe23_item_parse (cpedict_ext_priv.c:128)
        by 0x4C9B08C: cpe_item_parse (cpedict_priv.c:840)
        by 0x4C9B2E2: cpe_dict_model_parse (cpedict_priv.c:646)
        by 0x4C9B4B9: cpe_dict_model_parse_xml (cpedict_priv.c:580)
        by 0x4C955E2: cpe_dict_model_import (cpedict.c:56)
        by 0x40CBE1: app_info (oscap-info.c:220)
        by 0x4079BF: oscap_module_process (oscap-tool.c:261)
        by 0x4069BE: main (oscap.c:79)

Author: Jan Černý <jcerny@dhcp-2-155.brq.redhat.com>
Date:   Tue Oct 7 17:18:44 2014 +0200

Plug a memory leak.
    
    Addressing:
    48 bytes in 3 blocks are definitely lost in loss record 2 of 4
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x31F78AE548: xmlStrndup (in /usr/lib64/libxml2.so.2.9.1)
        by 0x31F78EBB8C: xmlTextReaderGetAttribute (in /usr/lib64/libxml2.so.2.9.1)
        by 0x4C9BA9A: cpe23_item_parse (cpedict_ext_priv.c:129)
        by 0x4C9B08C: cpe_item_parse (cpedict_priv.c:840)
        by 0x4C9B2E2: cpe_dict_model_parse (cpedict_priv.c:646)
        by 0x4C9B4B9: cpe_dict_model_parse_xml (cpedict_priv.c:580)
        by 0x4C955E2: cpe_dict_model_import (cpedict.c:56)
        by 0x40CBE1: app_info (oscap-info.c:220)
        by 0x4079BF: oscap_module_process (oscap-tool.c:261)
        by 0x4069BE: main (oscap.c:79)

Author: Martin Preisler <martin@preisler.me>
Date:   Mon Oct 6 14:46:48 2014 +0200

Merge pull request #6 from isimluk/bzip2
    
    Bzip2 support for openning SCAP files

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Oct 3 13:55:47 2014 +0200

Removed the tailoring parser workaround, it's no longer needed
    
    The issue was fixed in maint-1.0

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Oct 3 13:54:16 2014 +0200

Merge branch 'maint-1.1'
    
    Conflicts:
            ac_probes/configure.ac.tpl
            configure.ac

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Oct 3 13:52:39 2014 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Oct 3 13:50:48 2014 +0200

XCCDFE_RESULT_BENCHMARK and XCCDFE_BENCHMARK_REF are indistinguishable
    
    So lets use the same enum code for both. This fixes the tailoring
    parser, benchmark_ref is loaded properly now.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Oct 3 13:44:42 2014 +0200

xccdf_session can open XCCDF tailoring files directly

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Oct 2 16:48:40 2014 +0200

Refactoring regarding user_tailoring_file and cid in xccdf_session

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Oct 2 10:14:30 2014 +0200

Make sure that SCE compilation finds oscap_source.
    
    Addressing:
    ../../src/XCCDF/public/xccdf_benchmark.h:40:26: fatal error:
    oscap_source.h: No such file or directory
     #include <oscap_source.h>
                              ^

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 1 22:21:17 2014 +0200

tests: Run bz2 tests only when bzlib.h and /bin/bzip found

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 30 08:42:20 2014 +0200

tests: The very first test for bz2 openner.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 30 17:58:49 2014 +0200

Change prototype of bz2_read to avoid a lot of casts.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 30 17:54:41 2014 +0200

Make sure to never run BZ2_bzRead after eof
    
    Addressing:
    OpenSCAP Error: Could not read from bZ2FILE: SEQUENCE_ERROR [bz2.c:77]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 29 14:20:35 2014 +0200

Open bzip2ed files nativaly.
    
    When their name ends with '.xml.bz2'.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 29 13:40:08 2014 +0200

Find libbz2 if available.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Oct 1 14:03:50 2014 +0200

Bump version after release.

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Oct 1 13:35:25 2014 +0200

Merge pull request #5 from OpenSCAP/oscap_source
    
    Oscap source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 30 18:06:23 2014 +0200

A typo fix.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 30 10:38:34 2014 +0200

Add missing backslash to include assume.h to the dist.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 30 10:07:53 2014 +0200

tests: Assume.h is not needed to test codestyle.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 19:23:33 2014 +0200

Rename private constant to better reflect its use.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 19:20:02 2014 +0200

Remove TODO that no longer applies
    
    The oscap_source originated from DataStream is currently known as
    OSCAP_SRC_FROM_EXPORT_XML_DOM, the internal temp files do not need
    to be handled explicitly.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 19:15:22 2014 +0200

Improve documentation of oscap_source and ds_sds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 19:06:16 2014 +0200

Fix a typo.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 18:34:27 2014 +0200

Make sure that error message is generic enough.
    
    Kudos go to Martin, who noticed that this function is generic
    but the error message assumes we are exporting a file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 18:23:12 2014 +0200

Merge branch 'master' into oscap_source
    
    Before we merge oscap_source to master we want to test
    the-latest-greatest HEAD in oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 18:16:35 2014 +0200

Merge branch 'maint-1.1'
    
    This is merge after 1.1.1 release. It brings us the soname
    bump and changelog entries.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 18:15:34 2014 +0200

Wipe a strange bytes from date string caused by solar eruptions.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 18:08:44 2014 +0200

Avoid direct use of xmlSaveFileEnc.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 17:52:15 2014 +0200

Export XCCDF TestResult only when explicitly requested.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 17:44:23 2014 +0200

Drop xccdf_session->oval.result_files.
    
    No longer need to have them. (oval.result_sources
    structure took over all responsibilities.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 17:37:23 2014 +0200

Use exported source to validate ARF DOM directly.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 16:27:36 2014 +0200

Avoid direct use of xmlSaveFileEnc.
    
    MAke a use of oscap_source facility instead.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 16:15:24 2014 +0200

Refactor: Extract function: ds_rds_create_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 15:24:39 2014 +0200

tests: Forbid direct use of xmlReadFile within OpenSCAP project

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 15:18:52 2014 +0200

tests: Check codestyle only in C,C++ sources and header files.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:54:44 2014 +0200

Avoid direct use of xmlReadFile.
    
    This also changes the oval_result_* structure from array
    to oscap_htable. The manipulation is easier and more
    straight forward. Additionally, this will allow us to
    pass xccdf_session->oval.result_sources directly here.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:34:49 2014 +0200

Avoid direct use of xmlReadFile
    
    Make a use of oscap_source facility instead.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:22:53 2014 +0200

Avoid direct use of xmlReadFile
    
    Make a use of oscap_source facility instead.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:17:58 2014 +0200

Re-use existing oscap_source to add component with dependencies.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:12:50 2014 +0200

Avoid direct use of xmlReadFile
    
    Use oscap_source facility instead.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:07:00 2014 +0200

Avoid direct use of xmlReadFile
    
    Use oscap_source facility instead.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:03:39 2014 +0200

Refactor: Merge two subsequent conditions together
    
    Decrease a codebase and increase readability.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 14:01:17 2014 +0200

Do not attempt to open SCE script to DOM

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 13:55:29 2014 +0200

Avoid direct use of xmlReadFile.
    
    Use oscap_source facility instead.
    
    This also fixes a leak when ds_sds_compose_add_component_with_ref fails.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 13:42:25 2014 +0200

Drop xccdf_session->filename.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 13:38:33 2014 +0200

session->xccdf.source should never be owned directly.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 13:30:16 2014 +0200

Refactor: Extract function ds_sds_compose_component_add_script_content
    
    This also fixes a leak. The 'component' variable was not freed
    before, but it should have been.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 28 12:51:48 2014 +0200

Use exported XCCDF dom to generate HTML report.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 20:48:11 2014 +0200

Avoid using oscap_apply_xslt.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 20:47:02 2014 +0200

Promote oscap_path_to_xslt to privileged.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 20:19:59 2014 +0200

Deprecate: cpe_dict_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 20:01:29 2014 +0200

ds_sds_session switches from absolute paths to relative
    
    The firstly it seemed that it will be much more easier to calculate
    realpath of each file. However, later on, standard realpath() function
    stopped working. As we stopped to create directories and storing files
    on the disc.
    
    Problematic were the tests from tests/API/XCCDF/applicability that
    use oval component with filepath like: ../unittests/oval.xml. When
    the ds_sds_session uses /tmp/tmp.XXXXXX it will attempt to get realpath
    of /tmp/unittests and that will fail. Stopping the ds_sds_session
    from finding appropriate oscap_source for the given file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 19:04:45 2014 +0200

Refactor: rename variable.
    
    This needs to be done to improve readability. This whole relative
    versus absolute paths is a mess. There are some variables that can
    carry only filename others can carry filepath (some relative, some
    absolute or some both).
    
    There is a benefit of passing down the relative path. Because relative
    path is the catalogue value and the name how the file is known to
    other components.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 18:26:39 2014 +0200

Avoid use of cpe_dict_model_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 18:15:55 2014 +0200

Tests: Forbid use of xmlTextReaderReadString.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 18:12:12 2014 +0200

Avoid using xmlTextReaderReadString function.
    
    It requires that we have correct position on the TextNode.
    Interestingly, there were no problems with native xmlTextReader,
    but with xmlWalkerReader we are hitting xmllib2 TODO like:
    
        Unimplemented block at xmlreader.c:1794

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 18:00:56 2014 +0200

tests: Introduce test for a codestyle
    
    Let's forbid ourselves from useing certain functions.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 16:53:38 2014 +0200

Drop libxml_error_handler.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 16:34:49 2014 +0200

Avoid use of xmlReaderForFile
    
    Also avoid use of xmlTextReaderSetErrorHandler and libxml_error_handler.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 16:27:45 2014 +0200

Deprecate: ds_sds_index_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 16:24:56 2014 +0200

Deprecate: ds_sds_decompose_custom.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 16:23:22 2014 +0200

Deprecate: ds_sds_decompose.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 15:32:07 2014 +0200

Reset sds_session after each checklist selection
    
    Addressing:
    OpenSCAP Error: File /tmp/oscap.e9MUC8/second-oval.xml has already been
    register with Source DataStream session: /tmp/tmp.0WrzQNTVWK/sds.xml
    [ds_sds_session.c:230]
    
    When working with DataStream whose checklists referenced the very same
    file with different content (different datastream component).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 15:28:04 2014 +0200

Introduce function: ds_sds_session_reset.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 15:48:46 2014 +0200

Use ds_sds_session within oscap ds sds-split.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 14:14:12 2014 +0200

Refactor: Extract function: _gcwd.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 14:12:09 2014 +0200

Show errno to the user.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 27 14:10:04 2014 +0200

Error shall go to stderr.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 17:46:20 2014 +0200

Deprecate: oscap_validate_document.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 16:32:57 2014 +0200

Do not forget to take break
    
    Addressing:
    4 bytes in 1 blocks are definitely lost in loss record 1 of 2
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x33AD886139: strdup (strdup.c:42)
       by 0x4C648B8: oscap_source_get_schema_version (oscap_source.c:186)
       by 0x4C646DD: oscap_source_validate (oscap_source.c:154)
       by 0x4091E5: app_ds_rds_validate (oscap-ds.c:488)
       by 0x407CFC: oscap_module_call (oscap-tool.c:260)
       by 0x408179: oscap_module_process (oscap-tool.c:345)
       by 0x406BA6: main (oscap.c:79)
    
    4 bytes in 1 blocks are definitely lost in loss record 2 of 2
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x33AD886139: strdup (strdup.c:42)
       by 0x4C648B8: oscap_source_get_schema_version (oscap_source.c:186)
       by 0x4C6478B: oscap_source_validate (oscap_source.c:161)
       by 0x4091E5: app_ds_rds_validate (oscap-ds.c:488)
       by 0x407CFC: oscap_module_call (oscap-tool.c:260)
       by 0x408179: oscap_module_process (oscap-tool.c:345)
       by 0x406BA6: main (oscap.c:79)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 15:52:15 2014 +0200

Avoid use of oscap_validate_document from xccdf_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 26 13:28:34 2014 +0200

openscap-1.1.1

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 26 13:27:00 2014 +0200

Bump soname from 8.3.1 to 8.3.2
    
    The interface has not changed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 26 10:41:04 2014 +0200

Merge branch 'maint-1.1'

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 26 10:16:10 2014 +0200

Test driver must not be part of openscap repo.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 26 09:46:09 2014 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 16:41:07 2014 +0200

Promote ds_sds_session_set_target_dir to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 15:46:47 2014 +0200

Promote ds_sds_session_dump_component_files to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 15:35:29 2014 +0200

Drop validation_failed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 15:34:09 2014 +0200

Avoid use of oscap_validate_document within oscap-cve.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 15:29:27 2014 +0200

Avoid use of oscap_validate_document within oscap-ds.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 14:58:50 2014 +0200

Drop oscap_acquire_temp_dir_bundled.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 14:57:20 2014 +0200

Promote ds_sds_session_register_component_with_dependencies to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 14:52:31 2014 +0200

Promote ds_sds_session_get_component_by_href to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 14:29:13 2014 +0200

Use ds_sds_session to extract OVAL file from DataStream.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 14:18:45 2014 +0200

Promote ds_sds_session_set_datastream_id to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 13:33:25 2014 +0200

Deprecate oscap_determine_document_type.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 13:31:37 2014 +0200

Avoid use of oscap_determine_document_type.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 14:01:45 2014 +0200

Promote oscap_source_readable_origin to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 13:14:23 2014 +0200

Drop oscap_acquire_cleanup_dir_bundled.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 13:11:08 2014 +0200

Import XCCDF file from the DataStream DOM.
    
    Avoid dumping file to the disc.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 13:03:53 2014 +0200

Deprecate xccdf_benchmark_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 12:52:26 2014 +0200

Avoid using xccdf_benchmark_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 12:49:56 2014 +0200

No need to set-up temp_dir when loading XCCDF.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 12:47:07 2014 +0200

Use ds_sds_session to build ds_sds_index.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 12:45:24 2014 +0200

Build ds_sds_session when querying DataStream for info

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 12:38:47 2014 +0200

Do not open XCCDF and CPE again when we already have them parsed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 12:32:51 2014 +0200

Do not dump CPE files from DataStream on the disc.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 00:40:32 2014 +0200

Remove duplicate definitions.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 24 00:25:32 2014 +0200

Do not dispose an item that is not owned
    
    Addressing:
    Invalid read of size 8
       at 0x4C5BCE4: __oscap_free_dbg (alloc.c:183)
       by 0x4C642A2: oscap_source_free (oscap_source.c:93)
       by 0x4CDB547: cpe_session_lookup_oval_session (cpe_session.c:106)
       by 0x4D00B03: _xccdf_policy_cpe_check_cb (xccdf_policy.c:811)
       by 0x4CD184A: cpe_check_evaluate (cpedict.c:190)
       by 0x4CD18A3: cpe_item_is_applicable (cpedict.c:200)
       by 0x4CD17C4: cpe_name_applicable_dict (cpedict.c:174)
       by 0x4D00D0B: xccdf_policy_model_platforms_are_applicable_dict (xccdf_policy.c:874)
       by 0x4D01031: xccdf_policy_model_platforms_are_applicable (xccdf_policy.c:971)
       by 0x4D010BC: xccdf_policy_model_item_is_applicable (xccdf_policy.c:985)
       by 0x4D011AF: _xccdf_policy_rule_evaluate (xccdf_policy.c:1016)
       by 0x4D016F2: xccdf_policy_item_evaluate (xccdf_policy.c:1133)
     Address 0x56aabc8 is 24 bytes inside a block of size 40 free'd
       at 0x4A07577: free (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x4C5BCFA: __oscap_free_dbg (alloc.c:184)
       by 0x4C642F3: oscap_source_free (oscap_source.c:98)
       by 0x4C6F52A: _oval_definition_model_merge_source (oval_defModel.c:219)
       by 0x4C6F5B3: oval_definition_model_import_source (oval_defModel.c:236)
       by 0x4CDB537: cpe_session_lookup_oval_session (cpe_session.c:105)
       by 0x4D00B03: _xccdf_policy_cpe_check_cb (xccdf_policy.c:811)
       by 0x4CD184A: cpe_check_evaluate (cpedict.c:190)
       by 0x4CD18A3: cpe_item_is_applicable (cpedict.c:200)
       by 0x4CD17C4: cpe_name_applicable_dict (cpedict.c:174)
       by 0x4D00D0B: xccdf_policy_model_platforms_are_applicable_dict (xccdf_policy.c:874)
       by 0x4D01031: xccdf_policy_model_platforms_are_applicable (xccdf_policy.c:971)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 13:58:35 2014 +0200

Use ds_sds_session to cache oscap_source for OVAL CPE.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 13:51:35 2014 +0200

CPE sesion may take external cache of oscap_sources

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 13:31:48 2014 +0200

Introduce: ds_sds_session_get_component_sources.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 13:02:57 2014 +0200

Introduce xccdf_policy_model_get_cpe_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 12:43:41 2014 +0200

Move default_cpe initializator to cpe_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 12:28:50 2014 +0200

Refactor: Extract function: cpe_session_add_cpe_autodetect_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 12:19:47 2014 +0200

Always use oscap_source to import cpe_dict.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 23 00:01:41 2014 +0200

Introduce: cpe_session_add_cpe_dict_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:57:07 2014 +0200

Drop cpe_dict_model_parse_xml

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:53:26 2014 +0200

Refactor: Extract function: cpe_dict_model_import_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:46:02 2014 +0200

Drop cpe_parser_ctx_new.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:43:11 2014 +0200

Use oscap_source for parsing cpe_dict.
    
    Drop cpe_validate_xml. XML_PARSE_DTDATTR does not imply any validation.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:36:07 2014 +0200

Deprecate: cpe_lang_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:32:28 2014 +0200

Always use oscap_source to import cpe_lang.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:29:05 2014 +0200

Introduce: cpe_session_add_cpe_lang_model_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:20:15 2014 +0200

Drop cpe_lang_model_parse_xml.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 23:13:00 2014 +0200

Refactor: Extract function: cpe_lang_model_import_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 19:14:26 2014 +0200

Use oscap_source to parse cpe_lang_model.
    
    The cpe_validate_xml could be dropped as it does basically nothing.
    
    (XML_PARSE_DTDATTR is useless).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 18:45:29 2014 +0200

Refactor: Extract function: cpe_session_lookup_oval_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 17:05:14 2014 +0200

Refactor: Extract function: cpe_session_free.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 16:52:35 2014 +0200

Refactor: Extract funciton: cpe_session_new

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 16:47:41 2014 +0200

Make cpe an allocated property.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 22 15:33:35 2014 +0200

oscap_source_get_scap_type shall recognize TestResult.
    
    This is needed since oscap_source is used to validate input
    files for ARF compose.
    
    Addressing:
    OpenSCAP Error: Unknown document type: './rds_testresult/results-xccdf.xml' [oscap_source.c:133]
    Unknown document type: './rds_testresult/results-xccdf.xml' [oscap_source.c:133]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:54:45 2014 +0200

Avoid use of ds_sds_decompose_custom
    
    And re-use existing oscap_sources for validatio purposes.
    
    Removing a FIXME! :)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:41:07 2014 +0200

Deprecate: xccdf_detect_version.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:39:49 2014 +0200

Use oscap_source to validate input XCCDF for evaluation.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:36:49 2014 +0200

Use oscap_source to validate input of xccdf resolve.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:34:25 2014 +0200

Use oscap_source to validate resolved XCCDF.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:30:40 2014 +0200

Use oscap_source to validate input testresult.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:26:37 2014 +0200

Use oscap_source to determine XCCDF version within info module.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:19:00 2014 +0200

Do not pass filepath to cpe_lang_model_detect_version.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:15:05 2014 +0200

Refactor: Extract function: cpe_lang_model_detect_version_priv
    
    This is kida funny move, but we need to deprecate the function
    cpe_lang_model_detect_version which takes the filepath in. To ensure
    that oscap_source is able to operate without file existence.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:07:03 2014 +0200

Deprecate: cpe_dict_detect_version

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 21:04:26 2014 +0200

Use oscap_source to validate cpe documents from command-line

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:56:46 2014 +0200

Use oscap_source to validate CPE file from user.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:50:12 2014 +0200

Use oscap_source when determining version of CPE dict
    
    This avoids yet another use of xmlReaderForFile.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:45:11 2014 +0200

CPE version should be received using existing textReader.
    
    This avoids another open of a file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:42:38 2014 +0200

Refactor: Extract function: cpe_dict_detect_version_priv.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:36:58 2014 +0200

Deprecate: oval_determine_document_schema_version.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:33:55 2014 +0200

Promote oscap_source_get_schema_version to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:31:29 2014 +0200

Use oscap_source to validate OVAL results within datastream
    
    And avoid using oval_determine_document_schema_version.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:23:09 2014 +0200

Use oscap_source when determining version of OVAL document.
    
    This avoids yet another use of xmlReaderForFile.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Sep 21 20:15:07 2014 +0200

Use oscap_source to validate embedded CPE.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 17:19:38 2014 +0200

Refactor: Extract structure: cpe_session

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 17:15:08 2014 +0200

Move CPE applicable_platforms from policy to child structure.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 17:12:47 2014 +0200

Move CPE oval_sessions from policy to a child structure.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 17:10:58 2014 +0200

Move CPE lang_models from policy to a child structure.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 17:08:42 2014 +0200

Move CPE dicts from policy to a new child structure.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 17:03:00 2014 +0200

Do not store tailoring component on disk.
    
    Just use oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 16:57:41 2014 +0200

Deprecate: xccdf_tailoring_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 16:41:28 2014 +0200

Use oscap_source to import tailoring from session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 16:38:32 2014 +0200

Refactor: Extract function: xccdf_tailoring_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 16:30:25 2014 +0200

Use oscap_source to parse tailoring file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 16:29:46 2014 +0200

Remove unneeded code.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 16:24:45 2014 +0200

Use oscap_source to validate tailoring file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 15:56:49 2014 +0200

Introduce: ds_sds_session_select_tailoring

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 19 15:34:54 2014 +0200

Hint towards `oscap info` when profile is not found in oscap tool

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Sep 19 14:15:25 2014 +0200

Source OVAL results from ARF if available when generating HTML report

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 14:11:30 2014 +0200

Stop storing component files on disk.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 11:47:58 2014 +0200

Drop filename property from oval_content_resource.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 11:39:27 2014 +0200

Re-use existing oscap_source for each OVAL file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 11:37:39 2014 +0200

Remove a dead code
    
    The contents->source is always not NULL.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 11:05:32 2014 +0200

oval_content_resource should always point to an oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 10:36:00 2014 +0200

Use existing oscap_source for validation.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 10:32:17 2014 +0200

Fix sorting in error message arguments.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 10:27:07 2014 +0200

Return NULL on error
    
    Addressing:
    src/XCCDF/benchmark.c:233:3: warning: statement with no effect [-Wunused-value]
       NULL;

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 10:23:54 2014 +0200

Prepare already parsed oscap_sources to oval_content_resource list.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 10:13:40 2014 +0200

Introduce function: ds_sds_session_get_component_by_href

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 09:21:46 2014 +0200

Refactor: Drop component_id property from xccdf_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 09:17:13 2014 +0200

Refactor: Drop datastream_id property from xccdf_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 08:28:57 2014 +0200

Refactor: replace variable with function call.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 19 00:00:03 2014 +0200

Do not set target_directory for sds_session.
    
    It is no longer needed because we derive path to XCCDF from the
    sds_session and not from xccdf_session. (Hence the temp_dir doesn't
    need to be shared.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 23:27:23 2014 +0200

Drop XCCDF_XML literal constant

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 23:26:42 2014 +0200

Drop session->xccdf.file property.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 23:25:00 2014 +0200

Avoid using session->xccdf.source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 22:32:46 2014 +0200

Plug a memory leak
    
    Addressing:
    7 bytes in 1 blocks are definitely lost in loss record 1 of 2
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x3D134AE548: xmlStrndup (xmlstring.c:45)
       by 0x4C6ABAC: ds_rds_add_ai_from_xccdf_results (rds.c:311)
       by 0x4C6B9DF: ds_rds_add_xccdf_test_results (rds.c:688)
       by 0x4C6BDC4: ds_rds_create_from_dom (rds.c:760)
       by 0x4C6C08A: ds_rds_create (rds.c:826)
       by 0x4CFE994: xccdf_session_export_arf (xccdf_session.c:1340)
       by 0x40BF41: app_evaluate_xccdf (oscap-xccdf.c:515)
       by 0x407EA0: oscap_module_call (oscap-tool.c:261)
       by 0x40831D: oscap_module_process (oscap-tool.c:346)
       by 0x406CD6: main (oscap.c:79

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 22:29:53 2014 +0200

Plug a memory leak.
    
    Addressing:
    4,096 bytes in 1 blocks are definitely lost in loss record 4 of 4
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x33AD842F4B: realpath@@GLIBC_2.3 (canonicalize.c:78)
       by 0x4C60848: oscap_acquire_guess_realpath (oscap_acquire.c:233)
       by 0x4C66C5E: ds_sds_dump_component (sds.c:226)
       by 0x4C66E9B: ds_sds_dump_component_ref_as (sds.c:263)
       by 0x4C671CD: ds_sds_dump_component_ref_as (sds.c:320)
       by 0x4C66449: ds_sds_session_register_component_with_dependencies (ds_sds_session.c:240)
       by 0x4C66085: ds_sds_session_select_checklist (ds_sds_session.c:174)
       by 0x4CFBBF0: xccdf_session_load_xccdf (xccdf_session.c:408)
       by 0x4CFB8DA: xccdf_session_load (xccdf_session.c:351)
       by 0x40BCB4: app_evaluate_xccdf (oscap-xccdf.c:469)
       by 0x407EA0: oscap_module_call (oscap-tool.c:261)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 22:11:50 2014 +0200

Start using XCCDF source from DataStream.
    
    We still dump the XCCDF to a disk among all the files from catalog,
    but we no longer parse XCCDF twice in the xccdf_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 22:09:18 2014 +0200

ds_sds_session_select_checklist should return XCCDF source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 20:43:00 2014 +0200

Allows for elements like: <plain-text id='empty'/>
    
    The issue manifestated itself, when we started to use xmlReaderWalker.
    As a DOM representation of <plain-text id='empty'></plain-text> is
    <plain-text id='empty'/>. That is hard to parse.
    
    Let me explain why we use xmlTextReaderReadInnerXml call here. The
    problem is that once we move from element to attribute we cannot
    easily read the text value of the element. Remember that
    xmlTextReaderReadString cannot be used as it does not work with
    xmlReaderWalker. The xmlTextReader*Value cannot be used as it will
    just return value of the attribute. The xmlTextReaderIsEmptyElement
    is not useful either.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 18:17:20 2014 +0200

Promote oscap_text_consumer to commons
    
    This should be useful beyond OVAL parser.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 17:48:57 2014 +0200

Promote oval_parser_text_value to commons
    
    This is far more rigorous way to parse text content of a node. It should
    be useful beyond the OVAL parser.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 17:45:30 2014 +0200

Promote oval_xml_value_consumer to commons
    
    This should be useful beyond OVAL parser.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 17:31:18 2014 +0200

Do not pass oval_context to oval_parser_text_value
    
    It is not used.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 16:15:25 2014 +0200

Firsly created XCCDF namespace shall be assigned with Benchmark node.
    
    Previous assumption that xmlSetNs sets the namespace declaration
    was high-flying.
    
    Addressing:
    37 bytes in 1 blocks are indirectly lost in loss record 2 of 3
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x3D134AE548: xmlStrndup (xmlstring.c:45)
       by 0x3D1345489B: xmlNewNs (tree.c:757)
       by 0x4CE3C4B: lookup_xccdf_ns (elements.c:457)
       by 0x4CE497E: xccdf_item_to_dom (item.c:348)
       by 0x4CE0C7C: xccdf_benchmark_to_dom (benchmark.c:258)
       by 0x4CE0B96: xccdf_benchmark_export_source (benchmark.c:235)
       by 0x4CFD9C2: _build_xccdf_result_source (xccdf_session.c:1001)
       by 0x4CFDAD5: xccdf_session_export_xccdf (xccdf_session.c:1023)
       by 0x40BECA: app_evaluate_xccdf (oscap-xccdf.c:509)
       by 0x407EA0: oscap_module_call (oscap-tool.c:261)
       by 0x40831D: oscap_module_process (oscap-tool.c:346)
    
    85 (48 direct, 37 indirect) bytes in 1 blocks are definitely lost in loss record 3 of 3
       at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x3D1345482B: xmlNewNs (tree.c:748)
       by 0x4CE3C4B: lookup_xccdf_ns (elements.c:457)
       by 0x4CE497E: xccdf_item_to_dom (item.c:348)
       by 0x4CE0C7C: xccdf_benchmark_to_dom (benchmark.c:258)
       by 0x4CE0B96: xccdf_benchmark_export_source (benchmark.c:235)
       by 0x4CFD9C2: _build_xccdf_result_source (xccdf_session.c:1001)
       by 0x4CFDAD5: xccdf_session_export_xccdf (xccdf_session.c:1023)
       by 0x40BECA: app_evaluate_xccdf (oscap-xccdf.c:509)
       by 0x407EA0: oscap_module_call (oscap-tool.c:261)
       by 0x40831D: oscap_module_process (oscap-tool.c:346)
       by 0x406CD6: main (oscap.c:79)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 16:02:15 2014 +0200

Pass NS to the node upon creation.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 14:59:27 2014 +0200

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 13:23:39 2014 +0200

Use oscap_source to parse XCCDF content within session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 13:20:38 2014 +0200

Refactor: Extract function: xccdf_benchmark_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 12:17:46 2014 +0200

Drop XCCDF version from XCCDF Session
    
    The oscap_source at session.xccdf.source already holds it.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 12:15:46 2014 +0200

Use oscap_source to validate XCCDF document within session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 12:05:20 2014 +0200

Use existing DOM to detect version of XCCDF file.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 12:01:16 2014 +0200

Refactor: Extract function: xccdf_detect_version_priv.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 11:46:53 2014 +0200

Start building oscap_source for XCCDF file within session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 11:31:20 2014 +0200

Refactor: Extract function: ds_sds_session_register_component_with_dependencies.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 11:19:09 2014 +0200

Refactor: Promote: ds_sds_dump_component_ref* to privileged.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 11:04:07 2014 +0200

Refactor: Promote: containter_get_component_ref_by_id to privileged.,

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 10:50:03 2014 +0200

Postpone the creation of target dir.
    
    Create directories right before exporting.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 10:19:36 2014 +0200

Do not pass target_dir to ds_sds_find_component_ref.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 10:15:50 2014 +0200

Set target_dir to sds_session before split.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 10:12:01 2014 +0200

Remove oscap_debug.log.* from split directory
    
    The oscap info module started to create these debug files after
    switch to oscap_source.
    
    Addressing:
    rmdir: failed to remove ‘/tmp/tmp.VmUI3fIhII’: Directory not empty
    $ ls /tmp/tmp.VmUI3fIhII/
    oscap_debug.log.17855
    $ cat /tmp/tmp.VmUI3fIhII/oscap_debug.log.17855
    =============== LOG: Thu Sep 18 10:07:26 2014 ===============
    (17855:7fbaf886e840) [I:doc_type.c:92:oscap_determine_document_type_reader] Identified document type: data-stream-collection

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 10:05:50 2014 +0200

Introduce target_dir as a property of ds_sds_session.
    
    Distinction between target_dir and temp_dir allows users to set their
    own target_dir or use automatic tamp_dir.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 09:41:45 2014 +0200

Tests: Files are now exported with encoding="UTF-8".
    
    This is result of using oscap_source for splitting the datastream.
    This may change once more in future (once everything uses oscap_source
    we may determine what would be pros and cons).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 09:03:19 2014 +0200

Override return code of oscap_xml_save_filename
    
    Prose: The most libopenscap api return (int)0 as a sign of success.
    A few functions return (bool)true to indicate success. This alone
    may cause a headache to juniors. This particular function trains
    our brains and returns 1 to indicate success. A consistent world
    would be very boring place to live in.
    
    First, I propagated oscap_xml_save_filename return code to
    oscap_source_save_as. Because a lot of *_export functions returned
    what oscap_xml_save_filename passed on them. However, I figured out
    that these *_export functions will be deprecated. Hence, there seems
    to be a little reason to take them into consideration. Let's make
    oscap_source_save_as return (int)0 as sign of success. That should
    improve consistency going forward and make this world boring once
    again.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 18 08:05:20 2014 +0200

Serialize all files from sds split at once

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 18:16:05 2014 +0200

Introduce function: ds_sds_session_dump_component_files.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 17:31:47 2014 +0200

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 17:55:43 2014 +0200

Refactor: Promote _guess_real_path to oscap_acquire module.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 17:29:23 2014 +0200

Introduce function: ds_sds_session_register_component_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 17:14:35 2014 +0200

Pass sds_session downto ds_sds_dump_componen

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 17:10:21 2014 +0200

Reuse existing code in ds_sds_find_component_ref.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 14:48:32 2014 +0200

Pass only sds_session to ds_sds_dump_component_ref_as

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 14:38:48 2014 +0200

Pass only sds_session to ds_sds_dump_component_ref.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 14:36:12 2014 +0200

Introduce function: ds_sds_session_get_xmlDoc

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 13:23:41 2014 +0200

Refactor: Extract function: ds_sds_session_get_selected_datastream

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 11:45:14 2014 +0200

Introduce function: ds_sds_session_set_datastream_id

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 11:31:46 2014 +0200

Wrap oscap_source within ds_sds_decompose_custom by sds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 11:26:11 2014 +0200

Yell an error message when a datastream session could not be created.
    
    No need to include all the details in the message. More detailed error
    message should already have been registered by prior function call.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 11:10:51 2014 +0200

Wrap DOM within ds_sds_decompose_custom by oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 10:50:01 2014 +0200

Refactor: Extract function: _containter_get_component_ref_by_id

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 15 17:02:25 2014 +0200

Refactor: Checklist selection is responsibility of ds_sds_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 16 10:05:43 2014 +0200

Refactor: Rename function: xccdf_session_get_ds_sds_session

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 15 16:27:10 2014 +0200

temp_directory will be property of ds_sds_session

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 11 14:10:48 2014 +0200

Refactor: Rename structure: sds_registry --> sds_session
    
    I was truly struggling to find best name for this structure. It relates
    to the fact that I was also struggling to draw line about sds_session
    responsibilities.
    
    First I thought it will be something like oscap_source managing only
    low level thing of split DS oscap_source to many OVAL/XCCDF
    oscap_sources. However, I later found that notion of DataStream
    internals needs to be build in to roots of sds_session to be really
    useful. That was a time I decide sds_registry is appropriate name.
    
    Later on, I understood that whole registry of DataStrem content is not
    needed. And that caller would need to remember datastream_id and lot of
    component_ids. That's how the idea of sds_ctx emerged. Then I think it
    will be much more intuitive to call this sds_session, since we already
    have xccdf_session and there are certain similarities.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 11 11:52:55 2014 +0200

Refactor: Extract function: ds_doc_from_foreign_node
    
    Change the error messages along the way.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 18:22:28 2014 +0200

Refactor: Extract function: ds_sds_dump_component_sce.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 18:09:37 2014 +0200

Never try to export a file twice.
    
    Changes behavior only for invalid content. Otherwise
    it does not change behavior.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 17:00:57 2014 +0200

Start using ds_sds_registry to query sds_index
    
    This again reduce number of file opens we need to do.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 16:58:46 2014 +0200

Make sure the sds_idx is available.
    
    Addressing segfault.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 16:54:29 2014 +0200

ds_sds_registry should better not own the oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 16:02:53 2014 +0200

Introduce ds_sds_registry_get_sds_idx

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 16:33:41 2014 +0200

Refactor: Drop _build_new_xmlTextReader function.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 16:14:56 2014 +0200

xmlTextReader should not be cached by oscap_source
    
    The reader cannot be reused like DOM can.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 16:01:51 2014 +0200

Refactor: Promote ds_sds_index_parse to privileged

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 11 17:37:48 2014 +0200

Better support for (default) in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 11 17:34:16 2014 +0200

Avoid cdf12:notice appearing in generate HTML guide, only its contents

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Sep 11 14:12:39 2014 +0200

xccdf_policy_get_readable_item_{title,description} shall not segfault with no texts

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 19:48:20 2014 +0200

Introduce new structure ds_sds_registry.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 10 14:07:59 2014 +0200

Highlight notchecked rules in HTML report, treat them as rules that need attention

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 10 13:59:04 2014 +0200

Show info about selected profile in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 10 13:49:16 2014 +0200

Show benchmark title in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 10 13:32:38 2014 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 11:00:13 2014 +0200

Use already parsed sds for validation.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 10:30:16 2014 +0200

Use oscap_source to query scap_type of session document.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 10:24:19 2014 +0200

Build oscap_source for main file of xccdf_session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 02:15:29 2014 +0200

Export <metadata> to XCCDF namespace
    
    Addressing (validation prior export):
    OpenSCAP Error: File '/tmp/test_xccdf_sub_title.res.CzgNxf' line 1: Element 'metadata': This element is not expected. Expected is one of (
    {http://checklists.nist.gov/xccdf/1.2}metadata,
    {http://checklists.nist.gov/xccdf/1.2}model,
    {http://checklists.nist.gov/xccdf/1.2}Profile,
    {http://checklists.nist.gov/xccdf/1.2}Value,
    {http://checklists.nist.gov/xccdf/1.2}Group,
    {http://checklists.nist.gov/xccdf/1.2}Rule,
    {http://checklists.nist.gov/xccdf/1.2}TestResult,
    {http://checklists.nist.gov/xccdf/1.2}signature ).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 02:05:07 2014 +0200

Export <fix> element to the XCCDF namespace
    
    Addressing (validation of DOM before export):
    OpenSCAP Error: File '/tmp/test_xccdf_fix_attr_export.out.Dasz2C' line 1: Element 'fix': This element is not expected. Expected is one of (
    {http://checklists.nist.gov/xccdf/1.2}status,
    {http://checklists.nist.gov/xccdf/1.2}dc-status,
    {http://checklists.nist.gov/xccdf/1.2}version,
    {http://checklists.nist.gov/xccdf/1.2}title,
    {http://checklists.nist.gov/xccdf/1.2}description,
    {http://checklists.nist.gov/xccdf/1.2}warning,
    {http://checklists.nist.gov/xccdf/1.2}question,
    {http://checklists.nist.gov/xccdf/1.2}reference,
    {http://checklists.nist.gov/xccdf/1.2}metadata,
    {http://checklists.nist.gov/xccdf/1.2}rationale ).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 02:03:22 2014 +0200

Refactor: pass version_info downto xccdf_fix_to_dom()

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 01:52:54 2014 +0200

Do not recreate xccdf namespace, just look it up.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 01:49:54 2014 +0200

Refactor: Declutter code and make it more compact and readable

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 01:45:44 2014 +0200

Do not set namespace to Benchmark element. It already has one assigned.
    
    Addressing:
    OpenSCAP Error: File '/tmp/tmp.eufUBtxpsQ' line 0: Element 'Benchmark': No matching global declaration available for the validation root. [xccdf_session.c:350]
    
    Interestingly, this error is also produced only when validating our DOM
    prior the export.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 10 01:42:10 2014 +0200

Make sure that xccdf:item gets always created with namespace
    
    This avoids declaring namespace in each Benchmark's child.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 9 18:07:23 2014 +0200

Make sure to create xccdf namespace if that is missing.
    
    Addressing (validation of exported xmlDom):
    File '/tmp/tmp.4h6LOGMsaX' line 0: Element 'status': This element is not
    expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}status ).
    
    We have never seen this error before until switching validation
    from file to exported DOM. We have always created the DOM incorrectly
    (i.e. without namespace). However, this error had never been exercised
    because libxml exported nodes without namespace to the "parent/default"
    namespace.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 9 17:55:36 2014 +0200

Refactor: Extract function: lookup_xccdf_ns

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 9 16:01:03 2014 +0200

Refactor: Extract function: _build_xccdf_result_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 9 15:37:55 2014 +0200

Do not export namespaced property by xmlNewProp
    
    Use xmlNewNsProp instead.
    
    Addressing (pre-export validation error):
    OpenSCAP Error: File '/tmp/tmp.k8sAMVDRGW' line 0: Element '{http://checklists.nist.gov/xccdf/1.1}Benchmark', attribute 'xml:lang': The attribute 'xml:lang' is not allowed. [xccdf_session.c:350]
    Could not export OVAL Results correctly to /tmp/tmp.k8sAMVDRGW [xccdf_session.c:1020]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 9 11:08:12 2014 +0200

Validate XCCDF results using oscap_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 9 11:05:42 2014 +0200

Use oscap_source to export XCCDF results from session.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 9 10:47:45 2014 +0200

Refactor: Extract function: xccdf_benchmark_export_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 8 21:10:56 2014 +0200

We cannot use realpath easily, we need to play guessing game
    
    Previously, we avoided duplicates just by calling realpath.
    But realpath only works for exisiting files. We changed export
    code and we no longer have files exported, but we still need
    to avoid duplicates.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 6 23:43:12 2014 +0200

Export all oval results at once, after sources are prepared.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 6 23:38:01 2014 +0200

Refactor: Extract function: _build_oval_result_sources

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 6 23:30:00 2014 +0200

Make sure that oscap_source is added to the table.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 6 23:25:33 2014 +0200

Do not free string when you need to allocate it again.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 6 17:40:20 2014 +0200

Store oval result sources to a map instead of disposing them

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 19:58:21 2014 +0200

tests: XSI namespace is now exported only once
    
    Amend the exemplary content.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 19:52:18 2014 +0200

tests: namespaces gets exported before the properties
    
    Amend the exemplary content.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 19:38:22 2014 +0200

Drop XCCDF_XSI_NAMESPACE.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 19:33:27 2014 +0200

Drop OVAL_XMLNS_XSI.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 19:14:30 2014 +0200

Do not export namespaced property by xmlNewPror
    
    Use xmlNewNsProp instead.
    
    Addressing (pre-export validation error):
    OpenSCAP Error: File '/tmp/oscap.HceiZV/stub-oval.xml.result.xml' line 0:
            Element '{http://oval.mitre.org/XMLSchema/oval-results-5}oval_results',
            attribute 'xsi:schemaLocation': The attribute 'xsi:schemaLocation' is not allowed.
                    [xccdf_session.c:346]
    Could not export OVAL Results correctly to /tmp/oscap.HceiZV/stub-oval.xml.result.xml [xccdf_session.c:1202]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 19:12:16 2014 +0200

Refactor: Extract function: lookup_xsi_ns.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 18:01:19 2014 +0200

Move oval_results_model_export_source to public API.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 23:14:53 2014 +0200

Use oscap_source within _xccdf_session_export_oval_result_file

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 22:13:45 2014 +0200

OVAL Results export should use oscap_source_save_as.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 17:23:19 2014 +0200

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 11:30:31 2014 +0200

Do not try to open file again to determine oval version
    
    Reuse existing DOM instead.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 11:13:43 2014 +0200

Refactor: Extract function: oval_determine_document_schema_version_priv.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 16:35:20 2014 +0200

tests: Expect different output after xmlTextReader changes.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 13:01:55 2014 +0200

Do not report errno when xmlError is encountered
    
    It is not terribly useful.
    
    Addressing output like:
    test_unfinished.xccdf.xml:18: parser error : Premature end of data in
    tag Benchmark line 2
    
    ^
    Could not dermine document type
    OpenSCAP Error: Unable to parse XML at: 'test_unfinished.xccdf.xml' (Do
    not report errno when xmlError is encountered
    
    It is not terribly usefull ) [oscap_source.c:161]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 12:54:39 2014 +0200

Do not report the same error multiple times
    
    Addressing output like:
    test_unfinished.xccdf.xml:18: parser error : Premature end of data in
    tag Benchmark line 2
    
    ^
    Could not dermine document type
    OpenSCAP Error: Unable to parse XML at: 'test_unfinished.xccdf.xml' (No
    such file or directory) [oscap_source.c:161]
    Unable to open file: 'test_unfinished.xccdf.xml' (No such file or
    directory) [oscap_source.c:145]

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 12:33:49 2014 +0200

Do not pass NULL to strregcomp
    
    xmlWalkerReader may give us NULL where we used to get "" from
    xmlTextReader
    
    Addressing:
     #1  0x00007ffff7d5cd3b in strregcomp (pattern=0x629a70 ".*", test_str=0x0)
            at oval_cmp_basic.c:143
     #2  0x00007ffff7d5cecf in oval_string_cmp (state=0x629a70 ".*", syschar=0x0,
            operation=OVAL_OPERATION_PATTERN_MATCH) at oval_cmp_basic.c:192
     #3  0x00007ffff7d5c362 in oval_ent_cmp_str (state_data=0x629a70 ".*",
            state_data_type=OVAL_DATATYPE_STRING, sysent=0x62a210,
            operation=OVAL_OPERATION_PATTERN_MATCH) at oval_cmp.c:99
     #4  0x00007ffff7d64a44 in _evaluate_sysent (syschar_model=0x61c870,
            item_entity=0x62a210, state_entity=0x6299c0,
            state_entity_operation=OVAL_OPERATION_PATTERN_MATCH,
            content=0x629970) at oval_resultTest.c:464
     #5  0x00007ffff7d64cd5 in eval_item (syschar_model=0x61c870,
            cur_sysitem=0x61f200, state=0x61fab0) at oval_resultTest.c:546
     #6  0x00007ffff7d65021 in eval_check_state (test=0x627d60,
            args=0x7fffffffd600) at oval_resultTest.c:644
     #7  0x00007ffff7d6553a in _oval_result_test_evaluate_items
            (test=0x627d60, syschar_object=0x61e180, args=0x7fffffffd600)
            at oval_resultTest.c:805
     #8  0x00007ffff7d65765 in _oval_result_test_result (rtest=0x62a770,
            args=0x7fffffffd600) at oval_resultTest.c:870
     #9  0x00007ffff7d65af4 in oval_result_test_eval (rtest=0x62a770) at
            oval_resultTest.c:966
     #10 0x00007ffff7d5f907 in _oval_result_criteria_node_result
            (node=0x62d510) at oval_resultCriteriaNode.c:357
     #11 0x00007ffff7d5f99f in oval_result_criteria_node_eval (node=0x62d510)
            at oval_resultCriteriaNode.c:378
     #12 0x00007ffff7d5f8a5 in _oval_result_criteria_node_result
            (node=0x61e1e0) at oval_resultCriteriaNode.c:348

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Sep 5 11:05:54 2014 +0200

Build xmlTextReader from the existing DOM.
    
    This change will allow us to decrease ammount of open() calls
    per file by 1 or by three in certain cases.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 22:04:03 2014 +0200

Refactor: Extract function: oscap_xml_save_filename

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 21:53:26 2014 +0200

Refactor: Rename function to oscap_xml_save_filename_free
    
    To indicate that this function disposes the xmlNode afterwards.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 21:41:51 2014 +0200

Introduce: oval_results_model_export_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 21:31:10 2014 +0200

Introduce new function: oscap_source_new_from_xmlDoc

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 17:45:07 2014 +0200

Refactor: Promote node_get_child_element to priviledged.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 20:22:47 2014 +0200

Refactor: Promote _lookup_datastream_in_collection to priviledged.

Author: Martin Preisler <martin@preisler.me>
Date:   Tue Sep 9 13:17:46 2014 +0200

Merge pull request #2 from isimluk/maint-1.0
    
    Do not wipe last_fqdn out in each iteration

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 8 13:58:53 2014 +0200

Don't assume cdf:Value is directly in cdf:Benchmark when substituting

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Sep 6 18:04:28 2014 +0200

Plug a memory leak.
    
    Addressing:
     7 bytes in 1 blocks are definitely lost in loss record 1 of 2
        at 0x4A0645D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
        by 0x33B44AE548: xmlStrndup (xmlstring.c:45)
        by 0x4C6A11B: ds_rds_add_ai_from_xccdf_results (rds.c:332)
        by 0x4C6AF4E: ds_rds_add_xccdf_test_results (rds.c:709)
        by 0x4C6B333: ds_rds_create_from_dom (rds.c:781)
        by 0x4C6B5F9: ds_rds_create (rds.c:847)
        by 0x4CFE086: xccdf_session_export_arf (xccdf_session.c:1340)
        by 0x40BF41: app_evaluate_xccdf (oscap-xccdf.c:515)
        by 0x407EA0: oscap_module_call (oscap-tool.c:261)
        by 0x40831D: oscap_module_process (oscap-tool.c:346)
        by 0x406CD6: main (oscap.c:79)

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 4 15:13:44 2014 +0200

Do not wipe last_fqdn out in each iteration
    
    Addressing coverity findings:
    1. openscap-1.1.0/src/DS/rds.c:366:assignment – Assigning: "last_fqdn" = "NULL".
    2. openscap-1.1.0/src/DS/rds.c:374:null – At condition "last_fqdn", the value of "last_fqdn" must be NULL.
    3. openscap-1.1.0/src/DS/rds.c:374:dead_error_condition – The condition "!last_fqdn" must be true.
    4. openscap-1.1.0/src/DS/rds.c:378:dead_error_line – Execution cannot reach this statement "xmlAddNextSibling(last_fqdn...".

Author: Martin Preisler <martin@preisler.me>
Date:   Thu Sep 4 14:53:55 2014 +0200

Merge pull request #1 from isimluk/maint-1.1
    
    Always check return from dbus_message_iter_next

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 4 14:38:43 2014 +0200

Always check return from dbus_message_iter_next

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 4 14:31:07 2014 +0200

Always check return value of fscanf.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 4 14:22:43 2014 +0200

Remove a code that has been commented out.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 4 14:06:27 2014 +0200

Plug a memory leak.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Sep 4 13:58:02 2014 +0200

Plug a memory leak.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 08:46:48 2014 +0200

Use oscap_source_validate when validating OVAL input.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 08:31:43 2014 +0200

Deprecate: oscap_schematron_validate_document.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 08:24:07 2014 +0200

Make use of oscap_source_validate_schematron.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 08:20:03 2014 +0200

Introduce oscap_source_validate_schematron

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 08:09:05 2014 +0200

Refactor: Extract function: oscap_source_validate_schematron_priv
    
    Also improve error messages and start using outfile for xslt
    transformations.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 1 23:53:25 2014 +0200

Refactor: Expand and drop function: oscap_apply_xslt_path

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 1 23:41:25 2014 +0200

Refactor: Extract function: oscap_source_apply_xslt_path

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 1 23:13:32 2014 +0200

Rewrite OVAL's validate_inputs to use oscap_source_validate.
    
    This provides more detailed reporting. Multiple errors will be
    reported at once. Type mismatch will be spelled out separately.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 1 21:19:55 2014 +0200

Start using oscap_source_validate for generated oval results.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 1 21:11:32 2014 +0200

Start using oscap_source_validate for generated syschar.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Sep 1 21:09:40 2014 +0200

Notify user when oscap_source_validate failed.
    
    This will allow us to drop validation_failed and _validation_failed
    functions.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 19:51:02 2014 +0200

Introduce oscap_source_validate
    
    This is a revolution in the SCAP document validation! You don't need to
    know type and version of your document oscap_source will do the right
    thing.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 19:39:01 2014 +0200

Refactor: Hide oscap_validate_xml

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 19:34:14 2014 +0200

Refactor: Extract function: oscap_source_validate_priv

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 19:06:47 2014 +0200

Implement oscap_source_get_schema_version
    
    The oscap_source should be responsible to handle such stuff.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 18:36:25 2014 +0200

Correct the error message. ARF is only version 1.1

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 18:10:54 2014 +0200

Re-use oscap_source to query document type.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 18:05:31 2014 +0200

Refactor: Move oscap_source initialization upward in the scope.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Aug 9 09:57:44 2014 +0200

Refactor: oscap_validate_xml should take oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Aug 8 15:03:01 2014 +0200

Refactor: rename a variable: avoid having two void *user pointers

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Fri Aug 8 12:02:45 2014 +0200

Use oscap_source within oscap_validate_xml.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 7 09:21:34 2014 +0200

Promote and rename oscap_source_readable_origin.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 17:26:26 2014 +0200

Refactor: Move oscap_validate_xml to the sources module
    
    Later, it will be dependent on the oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 16:34:09 2014 +0200

Introduce oscap_source_get_xmlDoc

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 09:55:38 2014 +0200

Deprecate function: oval_directives_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 09:50:28 2014 +0200

Do not use oval_directives_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 09:43:50 2014 +0200

Refactor: Extract function: oval_directives_model_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 09:34:17 2014 +0200

Deprecate function: oval_syschar_model_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 09:32:31 2014 +0200

Do not use oval_syschar_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 09:24:02 2014 +0200

Refactor: Extract function: oval_syschar_model_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 08:38:43 2014 +0200

Deprecate function: oval_variable_model_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 08:35:05 2014 +0200

Do not use oval_variable_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 08:30:35 2014 +0200

Bind correct filename to the error message.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 08:16:40 2014 +0200

Refactor: Extract function: oval_variable_model_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 08:08:36 2014 +0200

Deprecate function: oval_results_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Aug 6 08:00:03 2014 +0200

Do not use oval_results_model_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Aug 5 13:27:47 2014 +0200

Revert small part of 3df010c0
    
    I don't understand it.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Aug 5 13:24:51 2014 +0200

Refactor: Extract function: oval_results_model_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Aug 5 13:13:17 2014 +0200

Deprecate function: oval_definition_model_import.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Mon Aug 4 18:10:14 2014 +0200

Do not use oval_definition_model_import

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 18:20:22 2014 +0200

No need to include CVE path twice.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 18:13:15 2014 +0200

Take oscap_source_get_xmlTextReader back to private.
    
    It needs libxml and it is unnecessary to have libxml requirement
    in public API.
    
    Addressing:
      CC       oscap-oscap-oval.o
    In file included from ../src/OVAL/public/oval_definitions.h:42:0,
                     from ../src/OVAL/public/oval_probe.h:37,
                     from oscap-oval.c:29:
    ../src/source/public/oscap_source.h:29:30: fatal error:
    libxml/xmlreader.h: No such file or directory
     #include <libxml/xmlreader.h>
                                  ^

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 17:53:40 2014 +0200

Refactor: Extract function: oval_definition_model_import_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 17:48:14 2014 +0200

Deprecate oval_definition_model_merge.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 17:42:34 2014 +0200

oval_definition_model_import should use oscap_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 17:15:03 2014 +0200

Refactor: Extract function: _oval_definition_model_merge_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 16:59:18 2014 +0200

Make oscap_source thingy public.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 16:11:33 2014 +0200

Consolidate error messages from oscap_source
    
    Once we have the code on the single place we can spot inconsistencies
    easily.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 16:08:41 2014 +0200

_build_new_xmlTextReader could SetErrorHandler

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 16:03:23 2014 +0200

oscap_source_get_xmlTextReader should ensure that error handler is set

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 15:53:27 2014 +0200

Do not forward parser context to error handler.
    
    The libxml_error_handler does not take any user data anyway.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 15:49:25 2014 +0200

Introduce new responsibility for oscap_source: get_scap_type

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 15:27:08 2014 +0200

Refactor: Extract function: _build_new_xmlTextReader

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 15:20:55 2014 +0200

Refactor: Extract function: _readable_origin.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 15:16:54 2014 +0200

Refactor: Move determine_type implementation to the source module tree.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 14:48:13 2014 +0200

Refactor: Extract function: _oscap_determine_document_type_reader

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 13:01:27 2014 +0200

CCE parser should use oscap_source

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 12:51:56 2014 +0200

OVAL directives parser should use oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 12:45:33 2014 +0200

OVAL syschar parser should use oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 12:38:15 2014 +0200

OVAL variables parser should use oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 12:31:48 2014 +0200

OVAL result parser should use oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 12:26:47 2014 +0200

OVAL definition parser should use oscap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 26 12:20:28 2014 +0200

Introduce very simple file openner to scap_source.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 19 13:31:58 2014 +0200

Introduction of oscap_source
    
    This is pretty much an empty suit now.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 22:31:04 2014 +0200

bump version after release
    
    Next release from master branch will be 1.2+

Author: Martin Preisler <martin@preisler.me>
Date:   Wed Sep 3 19:07:02 2014 +0200

Merge branch 'maint-1.1'

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 3 19:03:21 2014 +0200

Merge branch 'maint-1.0' into maint-1.1

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Sep 3 18:59:45 2014 +0200

Repository moved to github

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 18:38:00 2014 +0200

lib/sys/types.h is product, it should not be in repo.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 16:45:20 2014 +0200

We need to include absolute-header.m4 everywhere
    
    Addressing:
    checking for complete errno.h... yes
    ./configure: line 7133: syntax error near unexpected token `errno.h'
    ./configure: line 7133: `           gl_ABSOLUTE_HEADER_ONE(errno.h)'

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 13:37:11 2014 +0200

Updating Gnulib to commit 78f00bd0af9a940d40decad6099b828e08aa91d1

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Wed Sep 3 13:31:00 2014 +0200

Bump version after release.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 23:07:53 2014 +0200

openscap-1.1.0

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 20:57:29 2014 +0200

Bump soname from 8.3.0 to 8.3.1
    
    The interface has not changed.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Sep 2 20:25:04 2014 +0200

Merge branch 'maint-1.0'

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 2 18:31:43 2014 +0200

Look for the first cdf:Benchmark anywhere in the XML file as last resort in report
    
    This means we now support ARFs with XCCDF 1.1 inside.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 2 18:25:57 2014 +0200

Use utf-8 consistently as encoding in XSLTs

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 2 18:25:21 2014 +0200

Extended the ns_workaround to look for all XCCDF 1.1 occurences, even nested

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 2 14:54:04 2014 +0200

Minor indentation fixes in the new XSLTs to make them consistent

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Sep 2 14:43:09 2014 +0200

Less "startling" summary messages in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 19:34:37 2014 +0200

Don't show Benchmark item twice in HTML guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 19:13:28 2014 +0200

Description should also be scrollable in report instead of overflowing

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 16:28:23 2014 +0200

Added tooltip to score that points to XCCDF spec

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 16:28:06 2014 +0200

Added tooltip to failed rules severity breakdown in report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 16:27:48 2014 +0200

Added tooltip to rule result breakdown in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 15:58:15 2014 +0200

Make OVAL test more apparent in check system details in report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 15:47:06 2014 +0200

Remediation should also scroll instead of overflow in HTMLreport

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 15:41:57 2014 +0200

check-system-details should scroll when overflowing
    
    This is still not ideal becuase it's inconvenient to have to scroll
    but it's better than before.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 15:24:13 2014 +0200

Colors in HTML report are now consistent with Bootstrap colors

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 15:16:08 2014 +0200

Show Evaluation Characteristics as a table instead of prose in report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Sep 1 15:00:25 2014 +0200

Lock rule detail column sizes so that they are consistent in report

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Aug 31 23:25:14 2014 +0200

Refactor: cve parser shall check node type only once.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Aug 31 23:19:27 2014 +0200

Do not continue parsing, when unknown element occur.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sun Aug 31 23:04:53 2014 +0200

Plug a memory leak.
    
    Addressing:
    30 bytes in 1 blocks are definitely lost in loss record 1 of 1
       at 0x4C2745D: malloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
       by 0x348A2AE548: xmlStrndup (xmlstring.c:45)
       by 0x348A2EBB8C: xmlTextReaderGetAttribute (xmlreader.c:2400)
       by 0x4EFBBBD: cve_model_parse (cve_priv.c:436)
       by 0x4EFBAE5: cve_model_parse_xml (cve_priv.c:414)
       by 0x4EFAA19: cve_model_import (cve.c:60)
       by 0x40E150: app_cve_find (oscap-cve.c:119)
       by 0x407D20: oscap_module_call (oscap-tool.c:261)
       by 0x40819D: oscap_module_process (oscap-tool.c:346)
       by 0x406B56: main (oscap.c:79)

Author: Shawn Wells <shawn@redhat.com>
Date:   Fri Aug 29 03:40:36 2014 +0200

fixing extended definition segfault
    
    after three days of an SCAP conference, in which multiple whiskeys were
    had, I mistyped an extended definition and crashed openscap. whoops.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 27 15:47:21 2014 +0200

Added test for no title and title scenarios in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 27 15:08:32 2014 +0200

Show identifiers and references in XCCDF report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 27 14:58:24 2014 +0200

Show ID for rules, groups, benchmarks in guide, report if title is N/A

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 26 17:15:10 2014 +0200

Added python3 swig generated files to .gitignore

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 26 16:46:42 2014 +0200

Use ${prefix} for python3 directories, avoid permission errors on distcheck

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 26 15:07:09 2014 +0200

Don't build python3 by default
    
    --enable-python3 requires python3-config or ./configure fails.
    python3 is not readily available on EL6.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 19:53:32 2014 +0200

Merge branch 'xslt-devel'

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 19:50:41 2014 +0200

Added labels for group and rule in guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 19:20:53 2014 +0200

Link CVE idents to CVE browser

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 16:57:16 2014 +0200

Rework of guide, children are added to a special neighbor node of parent
    
    Also removed dead code in report.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 16:00:29 2014 +0200

Refactored report and guide entry templates

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 15:24:50 2014 +0200

Unified remediation and check system details labels between report and guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 13:53:38 2014 +0200

Only show OVAL results if there are any to show, same with SCE

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 25 13:37:47 2014 +0200

Only show check-system-details if the rule failed

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 21 16:39:57 2014 +0200

Output messages about used benchmark and profile if $verbosity is true

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 21 16:11:17 2014 +0200

Start building python3 bindings.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 21 16:08:24 2014 +0200

Changed tests to suit the new report and guide

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 21 16:05:08 2014 +0200

sub-testresult substitution, don't show unselected items in guide
    
    If set-value is in TestResult we are guaranteed to make the right
    substitution.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 14 11:32:10 2014 +0200

python3: Introduce new option and probe python3 existence
    
    ./configure --enable-python3=yes

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 21 16:01:50 2014 +0200

Put openscap version that was used into report and guide

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 21 15:04:08 2014 +0200

Always include swig directory.
    
    It should be intelligent enough to do the right thing.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 21 14:58:42 2014 +0200

Refactor: Move pel bindings to a separate subdirectory.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 21 13:51:40 2014 +0200

Refactor: Move python2 bindings to a separate subdirectory.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 21 13:38:15 2014 +0200

Refactor: Move openscap.i to src/ sub-dir.

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Aug 21 15:50:47 2014 +0200

Remove my outdated networking information.
    
    I am unable to keep it up to date.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 21 15:14:02 2014 +0200

Fixed a typo in remediation, "comleted" should be "completed"
    
    I have fixed this in master and not in the maintenance branch to avoid
    breaking code that may be relying on this broken behavior. As did our
    tests.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 21 11:57:34 2014 +0200

Fixed a strangely widespread typo "parameteres"

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 20 13:37:32 2014 +0200

Added xccdf-resources.xsl to the repo, changed Makefile.am accordingly

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 19 16:48:55 2014 +0200

fix.xsl is now legacy-fix.xsl, the old broken behavior is kept

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 18 19:23:44 2014 +0200

Altered systemd probes tests to use -.mount instead of boot.mount
    
    boot.mount needn't be enabled or even present on a fully functional
    system.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 18 18:16:54 2014 +0200

Fixed systemdunitproperty tests, default.target is an alias, not a unit name
    
    There were other issues as well, the tests had human readable text in
    @comment, verify_results expects true or false there.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 18 18:16:23 2014 +0200

Moved functions from systemdshared to the probes that use them

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 18 17:49:13 2014 +0200

Removed a check that every dependency of sockets.target has to be active
    
    The assumption is not correct. We can't rely on it. Also fixed the
    verify_results invocation to pass the correct amount of tests and defs.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 18 17:19:27 2014 +0200

Only run systemd probes tests if systemd is on the system
    
    Both tests have the assumption that systemd is the used init system.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 18 16:42:48 2014 +0200

Merge branch 'maint-1.0'

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 18 16:41:19 2014 +0200

Slightly slower xmldiff.pl but without Digest::MD5 perl dependency

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Aug 14 11:44:54 2014 +0200

Removed unnecessary namespaces from xccdf-guide-impl

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 13 16:45:49 2014 +0200

Split xccdf-guide into xccdf-guide and xccdf-guide-impl
    
    Same situation as in xccdf-report, xccdf-guide will handle ARF vs XCCDF
    1.1 vs XCCDF 1.2 negotiation. The guide itself will be implemented in
    xccdf-guide-impl.xsl.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 13 15:50:09 2014 +0200

security-guide.xsl was renamed to xccdf-guide.xsl

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 13 15:46:36 2014 +0200

HTML report tests reflect that the new stylesheet is for XCCDF 1.2

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 13 15:45:39 2014 +0200

If TestResult doesn't supply the benchmark/@id, try to use root Benchmark
    
    This is mostly for backwards compatibility, openscap always references
    the benchmark in TestResult nowadays.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 13 15:44:10 2014 +0200

The ns_workaround now changes XCCDF 1.1 to 1.2 instead of the other way around

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 13 15:33:52 2014 +0200

Allow selection of Benchmark ID in the same way TestResult ID is selected
    
    This means that HTML report can be generated from Result DataStream
    since this commit. (and the crowd goes wild!)
    
    Both TestResult ID and Benchmark ID are autodetected when not supplied.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Aug 13 15:06:54 2014 +0200

Split off the entry point for xccdf-report to a separate file
    
    This will help contain all the ARF vs XCCDF 1.1 vs XCCDF 1.2 negotiating
    logic. xccdf-report-impl will get all the elements as parameters.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 12 15:55:23 2014 +0200

Renamed oval-report.xsl to xccdf-report-oval-details.xsl to avoid confusion

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 12 13:23:19 2014 +0200

Rewrite of oval-report.xsl to use HTML5 instead of docbook

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 12 12:53:21 2014 +0200

Initial support for check system result details
    
    OVAL results are written out as docbook, this will be changed in future
    commits.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 12 12:52:54 2014 +0200

Added labels for progress bars displaying rule result breakdown

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 12 12:51:35 2014 +0200

Removed top navigation menu from HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 12 12:50:40 2014 +0200

Deleted unused XSL files

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 5 11:37:10 2014 +0200

Removed an unused XSLT responsible for tailoring functionality
    
    We do tailoring in the openscap API, duplicating that in XSLT increases
    maintenance costs.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 5 10:52:35 2014 +0200

Added breakdown by severity for failed rules in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Aug 5 10:29:50 2014 +0200

Correctly show used profile's ID in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 4 20:46:15 2014 +0200

Use $benchmark instead of a hard coded XPath to get cdf:Benchmark
    
    We can use the parameter to later pass ARF component contents instead of
    just the root element.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 4 20:42:48 2014 +0200

Changed xccdf-report.xsl to take testresult id parameter

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 4 20:22:49 2014 +0200

Reworked xccdf-guide.xsl to take params for benchmark and profile

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Aug 4 18:18:23 2014 +0200

Display identifiers and references in XCCDF guide
    
    Plus related refactoring to reuse XSLT templates.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 31 17:47:30 2014 +0200

Added rule overview to HTML guide, refactoring to share code with report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 31 16:41:13 2014 +0200

Removed unnecessary XSLT files

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 31 16:07:36 2014 +0200

Started rewrite of XCCDF guide, just intro and footer for now

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 31 10:29:06 2014 +0200

Copy the DBus8ByteStruct typedef as well, old libdbus APIs don't have it

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 30 17:30:34 2014 +0200

Moved xccdf substitution code to xccdf-share.xsl, HTML report now substitutes

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 30 17:20:26 2014 +0200

Close button in rule modal should appear top right

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 30 13:54:28 2014 +0200

Fixed SIGSEGV with non-existant systemd units or units that don't depend on anything

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 30 11:23:28 2014 +0200

Do not attempt to get file descriptors out of DBus values
    
    We have no need for this functionality and it may not be supported
    depending on the libdbus version we are using.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 30 11:21:37 2014 +0200

Only attempt to get int64 and uint64 out of dbus if it supports it

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 30 11:18:57 2014 +0200

Old versions of libdbus-1 API don't have DBusBasicValue as a public typedef
    
    We have to define it ourselves to prevent build errors.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 29 20:36:52 2014 +0200

Get rid of hardcoded libdbus-1 library paths, use the configure system

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 29 20:20:38 2014 +0200

Merge branch 'systemdtests-devel'

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 28 16:54:11 2014 +0200

Removed unused jquery.treetable CSS

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 28 16:53:51 2014 +0200

Removed glyphicon usage, we are not shipping the glyphicon fonts

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 28 16:34:09 2014 +0200

Refactored logo into a separate XSL template to make patching easier

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 28 16:33:43 2014 +0200

Regenerated bootstrap with just what we need to save space

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 28 15:47:34 2014 +0200

Avoid needless whitespace in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 17:47:59 2014 +0200

Bundle bootstrap.min.css and jquery.min.js as well but don't minify

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 17:33:37 2014 +0200

Initial work to bundle CSS and JS in a sane way, it's still a bit insane though

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 15:31:25 2014 +0200

Embedded the OpenSCAP logo in xccdf-branding as a minified SVG

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 15:18:25 2014 +0200

Split header and footer code into xccdf-branding.xsl
    
    xccdf-brainding.xsl is a file that can be patched by downstreams to
    provide their own logos and other branding.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 15:13:05 2014 +0200

Extra compliance state for just unknown rules in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 15:07:23 2014 +0200

Fixed compliant / non-compliant icons to be glyphicons

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 13:31:40 2014 +0200

Minor styling for result details of rules that need attention in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 13:29:59 2014 +0200

Rule result gets CSS treatment and a tooltip in result details in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 13:16:03 2014 +0200

Removed identifiers from rule overview in HTML report
    
    Identifiers are in result details, they take too much space in overview.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 24 13:11:54 2014 +0200

Self documenting tooltips for XCCDF results in HTML report

Author: Jakub Jelen <jjelen@redhat.com>
Date:   Thu Jul 24 11:09:31 2014 +0200

Update RHEL6 OVAL file to ignore world-writable files in /proc/ directory
    
     * This change is made in reference to message in SSG [1]
     * Kernel people says that files have write flag, but they are not writable,
       so it is ok.
    
    [1] https://lists.fedorahosted.org/pipermail/scap-security-guide/2014-May/005512.html

Author: Jan Lieskovsky <jlieskov@redhat.com>
Date:   Thu Jul 17 18:26:20 2014 +0200

Don't be so strict when retrieving content items & result items within verify_results() routine
    
    Current implementation retrieved just OVAL IDs prefixed with "oval:1". Doing so
    might skip some tests (e.g. textfilecontent54 or systemd* probes ones) from
    evaluation.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 23 16:19:16 2014 +0200

Show identifiers in result details, add them to keywords

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 23 16:18:54 2014 +0200

Don't indent output to speed up XSLT transformation in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 23 14:34:00 2014 +0200

Report number of rules that match when searching in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 23 14:33:42 2014 +0200

Footer no longer takes more than 100% of screen width in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 22 19:37:56 2014 +0200

Hide the huge result details list by default when JavaScript is available
    
    This is mostly a performance fix for huge XCCDFs. The browser is very
    busy doing reflows and relayouts when filtering and having all result
    details shown all the time is wasteful. Most people who have JavaScript
    should use the modal dialogs in rule overview anyway.
    
    Rule results can still be shown using a button.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 22 19:37:42 2014 +0200

Show identifiers in rule overview in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 22 18:14:10 2014 +0200

Correctly show profile name in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 22 18:09:20 2014 +0200

"notselected" rules are hidden by default in HTML report
    
    Had to rewrite the rule hiding logic a bit to accomplish this.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 22 15:35:58 2014 +0200

Don't show @authenticated and @authorized from cdf:identity in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue Jul 22 15:34:40 2014 +0200

All keywords have to match when searching through XCCDF rules in HTML report

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Tue Jul 22 10:31:30 2014 +0200

trac#387: A typo fix

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 21 15:42:31 2014 +0200

Array type dbus properties are reported as one value per one element
    
    If there is an array of arrays the internal elements are ", " delimited
    as before. The non-nested elements are one value per one element.

Author: Jan Lieskovsky <jlieskov@redhat.com>
Date:   Fri Jul 18 16:13:32 2014 +0200

Add (currently failing) test to check if value of sockets.target unit Wants property contains two or more values

Author: Jan Lieskovsky <jlieskov@redhat.com>
Date:   Wed Jul 16 17:42:06 2014 +0200

Add another failing systemdunitproperty probe test, which should pass
    
    Because default.target should be enabled on common system.

Author: Jan Lieskovsky <jlieskov@redhat.com>
Date:   Wed Jul 16 16:27:25 2014 +0200

Add example of test for systemdunitproperty probe returning unknown result

Author: Jan Lieskovsky <jlieskov@redhat.com>
Date:   Wed Jul 16 15:50:20 2014 +0200

Add systemdunitproperty probe test returning incorrect result (IMHO should be true, but returns false).

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 19 09:48:36 2014 +0200

Merge branch 'maint-1.0'

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Sat Jul 19 09:43:17 2014 +0200

trac#387: Fix segfault on incorrect content
    
    Addressing:
      #0  0x000000391c035c39 in raise () from /lib64/libc.so.6
      #1  0x000000391c037348 in abort () from /lib64/libc.so.6
      #2  0x00007ffff7d390fa in oval_string_map_get_value (map=0x62a080, key=0x0)
          at oval_string_map.c:237
      #3  0x00007ffff7d057eb in oval_definition_model_get_test (model=0x61ec20, key=0x0)
          at oval_defModel.c:262
      #4  0x00007ffff7d05ddd in oval_definition_model_get_new_test (model=0x61ec20, id=0x0)
          at oval_defModel.c:443
      #5  0x00007ffff7d20cc3 in oval_test_parse_tag (reader=0x61eac0, context=0x7fffffffd840,
        usr=0x0) at oval_test.c:365
      #6  0x00007ffff7d15134 in oval_parser_parse_tag (reader=0x61eac0, context=0x7fffffffd840,
          tag_parser=0x7ffff7d20c63 <oval_test_parse_tag>, user=0x0) at oval_parser.c:59
      #7  0x00007ffff7d15608 in oval_definition_model_parse (reader=0x61eac0,
          context=0x7fffffffd840) at oval_parser.c:177
      #8  0x00007ffff7d0573b in oval_definition_model_merge (model=0x61ec20,
          file=0x61c9f0 "/tmp/1.xml") at oval_defModel.c:245
      #9  0x00007ffff7d055ea in oval_definition_model_import (file=0x61c9f0 "/tmp/1.xml")
          at oval_defModel.c:214
      #10 0x0000000000409c8c in app_evaluate_oval (action=0x7fffffffd990) at oscap-oval.c:390
      #11 0x0000000000407d21 in oscap_module_call (action=0x7fffffffd990) at oscap-tool.c:261
      #12 0x000000000040819e in oscap_module_process (module=0x616f00 <OVAL_EVAL>, argc=5,
          argv=0x7fffffffdc08) at oscap-tool.c:346
      #13 0x0000000000406b57 in main (argc=5, argv=0x7fffffffdc08) at oscap.c:79

Author: Šimon Lukašík <slukasik@redhat.com>
Date:   Thu Jul 17 20:28:56 2014 +0200

trac#386: Remove overabundant and wrong declaration.
    
    And replace it with unnecessary but right declaration.
    
    I could not verify that we ever had oval_string_map declared
    correctly.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 17 19:55:51 2014 +0200

First version of XCCDF rule search in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 17 17:12:13 2014 +0200

Implemented rule filtering by XCCDF result in HTML report (JavaScript)

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 17 17:11:53 2014 +0200

Don't count notchecked and notselected into total rule count in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 17 16:05:27 2014 +0200

Use text color instead of border-left to highlight rules that need attention

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 17 14:41:01 2014 +0200

Tooltips for CPE platforms, faster selectors for rule detail modal

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 17 13:50:03 2014 +0200

Tree indentation now works even without JavaScript in HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 17 13:28:31 2014 +0200

Get rid of PatternFly for now, minor fixes

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 16 17:46:17 2014 +0200

Rule results shall be badges and have borders in the HTML report

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 16 17:32:01 2014 +0200

Better styling in rule overview, left border is red for rules needing attention

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 16 16:50:17 2014 +0200

Anchors to jump to rule result detail

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 16 16:42:56 2014 +0200

Severity and badges that show how many rules in a given group are not passing

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jul 16 14:29:38 2014 +0200

Rewrite of HTML report and HTML guide XSLTs
    
    Please note that this does break unit tests, the recommended way to test:
    xsltproc --stringparam result-id xccdf_org.open-scap_testresult_xccdf_org.ssgproject.content_profile_common xccdf-report.xsl ssg-fedora-ds-xccdf.results.xml > openscap-xsl-prototype/out.html
    
    Where openscap-xsl-prototype contains the necessary JS and CSS files.
    This arrangement will of course change later on where no such tricks
    will be necessary.

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Tue Jul 15 13:01:48 2014 +0200

Merge branch 'maint-1.0'
    
    Conflicts:
            ac_probes/configure.ac.tpl
            configure.ac

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Tue Jul 15 12:56:07 2014 +0200

Introduce CPE name for upcomming Fedora 22

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Tue Jul 15 12:44:38 2014 +0200

Remove specfiles for Red Hat Enterprise Linux from upstream repository
    
    Consumers are adviced to refer to the specfiles shipped by Red Hat, Inc.
    
    We learned through history that  maintaing the same spec file
    in two repositories was tedious job. There were multiple
    reasons why the specfiles diverged from each other. Going
    forward, we cannot see a value in duplicate work.

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Tue Jul 15 11:22:01 2014 +0200

Remove specfile for Fedora from upstream repository
    
    Consumers are adviced to refer to Fedora packaging repository.
    Where the authoritative packaging information lays.
    
    We learned through history that maintaing the same spec file
    in two repositories was tedious job. There were multiple
    reasons why the specfiles diverged from each other. Going
    forward, we cannot see a value in duplicate work.

Author: Jan Lieskovsky <jlieskov@redhat.com>
Date:   Fri Jul 11 18:07:27 2014 +0200

Add three new tests for systemdunitdependency probe

Author: Jan Lieskovsky <jlieskov@redhat.com>
Date:   Fri Jul 11 19:29:38 2014 +0200

Add three new tests for systemdunitproperty probe

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 10 18:36:50 2014 +0200

Empty dbus string arrays are no longer reported as "(null)"

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 10 18:13:11 2014 +0200

[systemdunitdependency] check the callback return for 0, not for true

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jul 10 18:05:40 2014 +0200

Rerun confgen.sh to rescan deps for the 2 new tests

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu Jul 10 15:03:10 2014 +0200

Bump version after release.

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu Jul 10 14:52:02 2014 +0200

Merge branch 'maint-1.0'

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu Jul 10 14:37:55 2014 +0200

trac#385: Missing version should not be fatal
    
    We already handle @comment similarly.
    
    Addressing:
        #0  0x000000391c03a997 in ____strtoll_l_internal () from /lib64/libc.so.6
        #1  0x000000391c0371d0 in atoi () from /lib64/libc.so.6
        #2  0x00007ffff7d20f52 in oval_test_parse_tag (reader=0x61eac0, context=0x7fffffffd840, usr=0x0) at oval_test.c:402
        #3  0x00007ffff7d151f4 in oval_parser_parse_tag (reader=0x61eac0, context=0x7fffffffd840, tag_parser=0x7ffff7d20d23 <oval_test_parse_tag>, user=0x0) at oval_parser.c:59
        #4  0x00007ffff7d156c8 in oval_definition_model_parse (reader=0x61eac0, context=0x7fffffffd840) at oval_parser.c:177
        #5  0x00007ffff7d057fb in oval_definition_model_merge (model=0x61ec20, file=0x61c9f0 "/var/tmp/1.xml") at oval_defModel.c:245
        #6  0x00007ffff7d056aa in oval_definition_model_import (file=0x61c9f0 "/var/tmp/1.xml") at oval_defModel.c:214
        #7  0x0000000000409c8c in app_evaluate_oval (action=0x7fffffffd990) at oscap-oval.c:390
        #8  0x0000000000407d21 in oscap_module_call (action=0x7fffffffd990) at oscap-tool.c:261
        #9  0x000000000040819e in oscap_module_process (module=0x616f00 <OVAL_EVAL>, argc=5, argv=0x7fffffffdc08) at oscap-tool.c:346
        #10 0x0000000000406b57 in main (argc=5, argv=0x7fffffffdc08) at oscap.c:79

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jul 7 16:06:08 2014 +0200

Improved the work in progress systemd tests
    
    Both tests (systemdunitdependency and systemdunitproperty) run the XML
    attached in the folder and produce results.xml (this is an OVAL results
    file).

Author: Daniel Kopecek <dkopecek@redhat.com>
Date:   Mon Jul 7 09:31:58 2014 +0200

[tests/probes] Remove invalid entities from systemd probe testing XMLs

Author: Daniel Kopecek <dkopecek@redhat.com>
Date:   Mon Jul 7 09:30:02 2014 +0200

[probes/linux] Finalized prototypes of systemdunit{property,dependency} probes

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu Jul 3 17:20:06 2014 +0200

trac#384: Report when has_extended_acl does not exist correctly

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jun 26 12:59:19 2014 +0200

systemd tests shared API now uses callbacks to report unit properties

Author: Daniel Kopecek <dkopecek@redhat.com>
Date:   Wed Jun 25 14:39:32 2014 +0200

[probes/systemd API] If not sure, use a callback.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jun 25 14:10:13 2014 +0200

openscap-1.0.9

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jun 25 12:32:29 2014 +0200

Bump soname from 8.2.3 to 8.3.0
    
    One new symbol has been added:
    
        xccdf_policy_get_value_of_item

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jun 23 18:18:07 2014 +0200

Added get_all_systemd_units to the shared systemd tests mini API
    
    This functionality is required for pattern matching across systemd
    units.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Jun 23 17:37:00 2014 +0200

Do not destroy SVG data in XCCDF elements that allow XHTML (and SVG) content
    
    SVG is allowed in XHTML so we shall pass it through the guide and report
    generating machinery.

Author: Greg Elin <greg@fotonotes.net>
Date:   Thu Jun 19 20:02:39 2014 -0400

Display severity, weight in summary section

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Jun 20 13:38:37 2014 +0200

Merge branch 'maint-1.0'

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Mon Apr 28 15:55:53 2014 +0200

tests: Take only one of the installed versions for comparison.
    
    Addressing:
    version=2.7.62.7.6 on multilib systems

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Mon Apr 28 13:36:36 2014 +0200

tests: Skip test when libxml 2.7.6-14 is around
    
    Addressing false negative:
    $ echo 2.7.6-14.el6 |  awk -F. '{print ($1 == 2 && ($2 < 7 || ($2 == 7 && $3 <= 6))) ? "true" : "false"}'
    false
    
    Fixed:
    $ echo 2.7.6-14.el6 |  awk -F. '{print ($1 == 2 && ($2 < 7 || ($2 == 7 && $3 < 7))) ? "true" : "false"}'
    true

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Tue Apr 22 19:55:21 2014 +0200

Export results only after evaluation
    
    Addressing (Segmentation Fault):
    libopenscap_testing.so(+0xd2674) [0x7f87337ab674] item.c:176
    libopenscap_testing.so(xccdf_result_clone+0x4e) [0x7f87337b88bb] result.c:78
    libopenscap_testing.so(xccdf_session_export_xccdf+0xe3) [0x7f87337c4fd3] xccdf_session.c:991

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Apr 14 14:58:19 2014 +0200

Cast enums to int before comparing them to 0 in xccdf_policy.c
    
    Pointed out by Jacob Varughese, thanks!

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 4 19:07:02 2014 +0200

Export set-value in TestResult correctly

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 4 16:47:37 2014 +0200

Only export the effective set-value in each profile
    
    Otherwise we may end up with invalid content being exported.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 4 16:27:33 2014 +0200

Consider the last set-value as the effective set-value
    
    This makes openscap behave correctly in cases where there are more
    set-values setting the same item. While this is forbidden in serialized
    content it makes sense to create such content via the API.

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Fri Apr 4 16:21:13 2014 +0200

trac#378: Return non-zero when cannot resolve XCCDF.
    
    Regression, brought by 7363256124d414

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu Apr 3 16:14:08 2014 +0200

rhbz#1084067: Make sure the OVAL session is created before using it
    
    Addressing segfault:
     #0  oval_agent_eval_definition (ag_sess=0x0, id=0x7f0513727580 "oval:org.open-scap.cpe.rhel:def:6") at oval_agent.c:160
     #1  0x00007f0512638fb1 in _xccdf_policy_cpe_check_cb (sys=<value optimized out>, href=0x7f051367b6c0 "openscap-cpe-oval.xml",
         name=0x7f0513727580 "oval:org.open-scap.cpe.rhel:def:6", usr=<value optimized out>) at xccdf_policy.c:823
     #2  0x00007f0512616b54 in cpe_check_evaluate (item=<value optimized out>, cb=0x7f0512638f00 <_xccdf_policy_cpe_check_cb>, usr=0x7f0513670940) at cpedict.c:173
     #3  cpe_item_is_applicable (item=<value optimized out>, cb=0x7f0512638f00 <_xccdf_policy_cpe_check_cb>, usr=0x7f0513670940) at cpedict.c:183
     #4  0x00007f0512616c0c in cpe_name_applicable_dict (cpe=0x7f0513670800, dict=<value optimized out>, cb=0x7f0512638f00 <_xccdf_policy_cpe_check_cb>, usr=0x7f0513670940)
         at cpedict.c:157
     #5  0x00007f05126391af in xccdf_policy_model_platforms_are_applicable_dict (model=0x7f051366bb20, dict=0x7f0513676960, platforms=0x7f05136707a0) at xccdf_policy.c:880
     #6  0x00007f0512639322 in xccdf_policy_model_platforms_are_applicable (model=0x7f051366bb20, platforms=0x7f05136707a0) at xccdf_policy.c:972

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 3 14:56:26 2014 +0200

Correctly skip "Signature" when parsing sds_index without spewing out an error

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Apr 3 14:51:06 2014 +0200

Expose xccdf_policy_get_value_of_item as public API

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu Jun 19 12:09:16 2014 +0200

Renames and minor fixes in systemd probe tests, distcheck passes

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jun 18 15:47:40 2014 +0200

Renamed systemdunitdependency test data

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed Jun 18 15:45:15 2014 +0200

Initial versions of systemdunit{property,dependency} tests

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu May 29 18:10:00 2014 +0200

Refactoring to avoid code duplication in systemdunitdependency probe

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Thu May 29 18:06:45 2014 +0200

Only recurse into target units in systemdunitdependency probe
    
    Same behavior as systemctl list-dependencies --plain $UNIT

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu May 29 10:54:04 2014 +0200

Merge branch 'maint-1.0'

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu May 29 10:52:14 2014 +0200

Next version from main-1.0 branch will be 1.0.9

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed May 28 19:20:10 2014 +0200

Initial code for systemdunitdependency test, prints transitive deps for given unit

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed May 28 19:19:33 2014 +0200

Getting all properties is only required in the unit property probe, cleanup

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Wed May 28 18:26:56 2014 +0200

Merge branch 'maint-1.0'

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Wed May 28 18:26:43 2014 +0200

xccdf_session_export_arf must not return 0 if the export failed.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Wed May 28 16:00:16 2014 +0200

Extracted shared systemd test functionality into systemdshared.h, added a simple test function

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Tue May 27 18:25:20 2014 +0200

Initial dbus array to string support in systemdunitproperty probe

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon May 26 19:30:23 2014 +0200

Fixed single property retrieval in systemdunitproperty probe

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon May 26 19:26:44 2014 +0200

Only query properties from the systemd Unit interface, skip the rest

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon May 26 17:28:47 2014 +0200

Skip complex dbus properties when querying systemd unit properties

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri May 23 15:44:12 2014 +0200

Changed signature of get_all_properties_by_unit_path to return exit code

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri May 23 14:56:20 2014 +0200

Added work in progress function to retrieve one property value from systemd unit path

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri May 23 13:41:49 2014 +0200

libdbus code to query all properties of a unit by its path
    
    The properties are just outputted using dI for now.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri May 23 13:40:44 2014 +0200

libdbus code to query unit dbus path by systemd unit name

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri May 23 13:35:38 2014 +0200

Temporary build system hacks regarding libdbus

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Fri May 23 11:21:47 2014 +0200

rhbz#1085977: OpenSCAP inbuild dictionary shall include CentOS

Author: Daniel Kopecek <dkopecek@redhat.com>
Date:   Tue May 6 10:21:38 2014 +0200

Initial systemdunitproperty and systemdunitdependency object implementation

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Fri May 16 11:20:02 2014 -0700

Fixed recurse directories when local is specified.

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Tue May 13 10:53:00 2014 -0700

Fixed gmake check failure.

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu May 15 15:05:18 2014 +0200

The sys/systeminfo.h should have only been an optional dependency

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Thu May 1 10:14:13 2014 -0700

Fixed uname probe to return processor type for solaris

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Thu May 15 14:28:03 2014 +0200

The sys/acl.h should have been only an optional dependency

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Wed May 14 15:43:52 2014 +0200

Make at least one debug message usefull.

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Fri May 9 13:45:33 2014 +0200

Check for sys/acl.h since 8faff9719b426807cf5053a6d16e93e763b2a73e

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Fri May 9 13:44:22 2014 +0200

Next release from master branch will be openscap-1.1.x
    
    The openscap-1.0.x can be build from maint-1.0 branch.

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Thu May 1 10:23:52 2014 -0700

Fixed issue with textfilecontent54 not matching patterns in certain files on solaris

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Thu May 1 09:40:45 2014 -0700

Fixed file probe failure when encountering door,port file types on solaris.

Author: Jacob Varughese <jacob.varughese@ORACLE.COM>
Date:   Tue Apr 29 12:35:37 2014 +0200

[probes] file: set the has_extended_acl entity on Solaris too

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Mon Apr 28 15:55:53 2014 +0200

tests: Take only one of the installed versions for comparison.
    
    Addressing:
    version=2.7.62.7.6 on multilib systems

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Mon Apr 28 13:36:36 2014 +0200

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Thu Apr 17 09:49:57 2014 -0700

Fixed debug logging on solaris

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Tue Apr 22 19:55:21 2014 +0200

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Tue Apr 15 09:34:30 2014 +0200

Fixed broken build issues on solaris.
    
    Addressing:
    unix/solaris/isainfo.c: In function 'read_sysinfo':
    unix/solaris/isainfo.c:74:2: warning: implicit declaration of function 'dI' [-Wimplicit-function-declaration]
      CCLD   probe_isainfo
    Undefined symbol dI first referenced in file isainfo.o
    ld: fatal: symbol referencing errors
    collect2: error: ld returned 1 exit status
    make[4]: *** [probe_isainfo] Error 1

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Mon Apr 14 14:58:19 2014 +0200

Cast enums to int before comparing them to 0 in xccdf_policy.c
    
    Pointed out by Jacob Varughese, thanks!

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Mon Apr 14 09:51:44 2014 +0200

Rename stdout to std_out
    
    That should fix a broken build on solaris.

Author: Simon Lukasik <slukasik@redhat.com>
Date:   Mon Apr 14 09:47:03 2014 +0200

Fix broken build issues on solaris.
    
    We can source the PATH_MAX frim limits.h

Author: Jacob Varughese <jacob.varughese@oracle.com>
Date:   Mon Apr 14 09:15:02 2014 +0200

Fixed broken build issues on solaris.

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 4 19:07:02 2014 +0200

Export set-value in TestResult correctly

Author: Martin Preisler <mpreisle@redhat.com>
Date:   Fri Apr 4 18:42:52 2014 +0200

Add final values used in evaluation to TestResult