HTML report doesn't show OVAL details for a specific rule

[jan-cerny]

When I run this command:

$ oscap xccdf eval --profile xccdf_scap-workbench_profile_customized \
--results results.xml --oval-results --report report.html \
--tailoring-file ssg-rhel7-ds-tailoring.xml \
/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml

I got a HTML report with no OVAL details for the rule xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict

That is a bug, because:

• I have specified --oval-results which implies OVAL details in HTML report
• A collected item is collected in the oval results file, yet this item isn't displayed in HTML report.

Please notice no OVAL details on the screenshot.

You can download tailoring file here:
ssg-rhel7-ds-tailoring.xml.zip

You can download my HTML report here:
report.html.zip

I am using openscap-1.2.14-2.el7.x86_64 and scap-security-guide-0.1.33-6.el7_4.noarch on Red Hat Enterprise Linux 7.4.

EDIT: I think that one of the possible problems here could be that the XCCDF rule xccdf_org.ssgproject.content_rule_sysctl_kernel_dmesg_restrict references an OVAL defintion oval:ssg-sysctl_kernel_dmesg_restrict:def:1 but that definition doesn't contain any test, instead it breaks down to 2 other OVAL defintions using extend_definiton.

<ns0:criteria operator="AND">
 <ns0:extend_definition comment="kernel.dmesg_restrict configuration setting check" definition_ref="oval:ssg-sysctl_static_kernel_dmesg_restrict:def:1"/>
 <ns0:extend_definition comment="kernel.dmesg_restrict runtime setting check" definition_ref="oval:ssg-sysctl_runtime_kernel_dmesg_restrict:def:1"/>
</ns0:criteria>

We need to investigate if our XSLT template supports handling extend_definition

Any help would be very appreciated.