summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLuke Hinds <lukehinds@gmail.com>2016-06-14 11:07:38 +0100
committerLuke Hinds <lukehinds@gmail.com>2016-06-14 13:13:03 +0100
commitd313edf7da239ab1dd711b25440db1d7916b9680 (patch)
tree4973a22c898149412246f5f84c1cb5dd624b8446
parent3ce041f875fa66ddecde577fdd7041abb3fc5ba9 (diff)
Enable security scanning
Change-Id: Ib179ee6b2fcc7cf6c9ac522fdb83755ecbb99f52 Signed-off-by: Luke Hinds <lukehinds@gmail.com>
-rwxr-xr-xci/exec_test.sh3
-rw-r--r--testcases/security_scan/config.ini4
2 files changed, 3 insertions, 4 deletions
diff --git a/ci/exec_test.sh b/ci/exec_test.sh
index 2269aa7f9..3af16495b 100755
--- a/ci/exec_test.sh
+++ b/ci/exec_test.sh
@@ -134,8 +134,7 @@ function run_test(){
# ${repos_dir}/ovno/Testcases/RunTests.sh
;;
"security_scan")
- # To be enabled once verified manually
- # python ${FUNCTEST_REPO_DIR}/Testcases/security_scan/security_scan.py --config config.ini
+ python ${FUNCTEST_REPO_DIR}/testcases/security_scan/security_scan.py --config ${FUNCTEST_REPO_DIR}/testcases/security_scan/config.ini
;;
*)
echo "The test case '${test_name}' does not exist."
diff --git a/testcases/security_scan/config.ini b/testcases/security_scan/config.ini
index bfbcf82d3..9d97fc12d 100644
--- a/testcases/security_scan/config.ini
+++ b/testcases/security_scan/config.ini
@@ -10,7 +10,7 @@ user = heat-admin
scantype = xccdf
secpolicy = /usr/share/xml/scap/ssg/content/ssg-centos7-xccdf.xml
cpe = /usr/share/xml/scap/ssg/content/ssg-rhel7-cpe-dictionary.xml
-profile = standard
+profile = stig-rhel7-server-upstream
report = report.hmtl
results = results.xml
reports_dir=/home/opnfv/functest/results/security_scan/
@@ -22,7 +22,7 @@ user = heat-admin
scantype = xccdf
secpolicy = /usr/share/xml/scap/ssg/content/ssg-centos7-xccdf.xml
cpe = /usr/share/xml/scap/ssg/content/ssg-rhel7-cpe-dictionary.xml
-profile = standard
+profile = sstig-rhel7-server-upstream
report = report.hmtl
results = results.xml
reports_dir=/home/opnfv/functest/results/security_scan/