openscap-1.2.16-8.el7

The OpenSCAP suite enables integration of the Security Content Automation Protocol (SCAP) line of standards. The openscap packages provide the OpenSCAP library and the oscap utility that provides various SCAP capabilities.

This update fixes the following bugs:

* Previously, the textfilecontent54 probe did not work properly in offline mode. As a consequence, the oscap-docker tool and the atomic scan command reported different results for the same rule that checked the contents of a file. With this update, the previous removal of the chroot() function in offline mode of the textfilecontent54 probe has been reverted. As a result, oscap-docker and atomic scan no longer report different results with the same rule in the described scenario. (BZ#1566588)

* Prior to this update, the rpminfo, rpmverify, rpmverifyfile, and rpmverifypackage probes did not fully support offline mode. Consequently, OpenSCAP RPM verification rules did not work correctly when scanning virtual machine (VM) and container file systems in offline mode. With this update, the previous removal of the chroot() function in the offline scan in rpm probes has been reverted and offline mode in those probes has been fixed. Results of scanning VM and container file systems in offline mode no longer contain false negatives. (BZ#1569150)

Users of openscap are advised to upgrade to these updated packages, which fix these bugs.