Hi all,
When security scanning is performing by compliance team, in two servers scanning is failed.
can you please tell me what i have to check from our iem side and how can i fix?
Thanks for the reply.
Hi all,
When security scanning is performing by compliance team, in two servers scanning is failed.
can you please tell me what i have to check from our iem side and how can i fix?
Thanks for the reply.
This question is sort of like asking “my computer is broke, please tell me the steps to fix it with all the steps required.” well what is the problem? How can anyone provide steps for a problem that you have not identified.
I am sorry if this come across as rude, but you have asked a couple questions on the forum that are very similar to this.
What steps have you tried so far? What was the result?
We need to see what you have tried to help us help you.
Martin
i didn’t performed any steps till now.this is the request from compliance team.
What scan are you running? Is the scan initiated by a task or fixlet? What content site is the scan initiated from?
Is this a scan through SCA / BigFix Compliance?
Is this a custom scan tool?
Can you provide actionscript or relevance?
hi @jgstew ,
thanks for the reply i answered your questions below
A: BigFix
A:YES
(
name of operating system = "Win2003"
or
name of operating system starts with "Win2008"
or
name of operating system = "Win2012"
or
name of operating system = "Win2012R2"
)
AND
(
name of operating system = "Win2003"
or
name of operating system = "Win2008"
or
name of operating system = "Win2008R2"
or
name of operating system = "Win2012"
or
name of operating system = "Win2012R2"
)
(name of operating system = "Win2003" or name of operating system starts with "Win2008" or name of operating system = "Win2012" or name of operating system = "Win2012R2") AND (name of operating system = "Win2003" or name of operating system = "Win2008" or name of operating system = "Win2008R2" or name of operating system = "Win2012" or name of operating system = "Win2012R2")
begin prefetch block
add prefetch item name=Permissions.exe sha1=bcc31a4c277555124e224f81ab2009feee189e62 size=163840 url=GTSProtocol://download.bigfix.com/download/gtscontent/windows/osr/20130227-1608/Permissions.exe
collect prefetch items
end prefetch block
utility __Download\Permissions.exe
parameter "tasks_folder" = "{pathname of parent folder of parent folder of folder (pathname of client folder of current site)& "/Fusion/Windows/" & (name of client folder of current site)& "/Tasks"}"
if {not exists folder (parameter "tasks_folder")}
folder create "{parameter "tasks_folder"}"
endif
parameter "TS_HOME" = "{(parameter "tasks_folder")&"\ts"}"
if {not exists folder (parameter "TS_HOME")}
folder create "{parameter "TS_HOME"}"
endif
if {not exist file (parameter "TS_HOME" & "\Permissions.exe")}
copy "__Download\Permissions.exe" "{parameter "TS_HOME" & "\Permissions.exe"}"
else
if {(size of it != 163840 or sha1 of it != "bcc31a4c277555124e224f81ab2009feee189e62") of file (parameter "TS_HOME" & "\Permissions.exe")}
delete "{parameter "TS_HOME" & "\Permissions.exe"}"
copy "__Download\Permissions.exe" "{parameter "TS_HOME" & "\Permissions.exe"}"
endif
endif
if {exist file (parameter "TS_HOME" & "\parameters.txt")}
delete "{parameter "TS_HOME" & "\parameters.txt"}"
endif
This can be simplified a bit to:
parameter "tasks_folder" = "{(pathname of parent folder of parent folder of it & "/Fusion/Windows/" & name of it & "/Tasks") of client folder of current site}"
But to your main problem this is only copying a file to a location on the disk, it doesn’t seem to execute the program?
What is this scanner?
Is there documentation for it from the vendor?
It would be nice to know how it is supposed to be run from the command line so then we can help debug doing so through BigFix ActionScript, but you really need to be able to use it through the command line first before trying to get it to work through BigFix.
From the ActionScript you provide, I’m not certain the scanner is ever actually invoked. Which I believe @AlanM is stating as well.
Agree @jgstew - Your downloading the “file” and setting up paths… but no where in there do I see you actually run it…