Hello everyone,
I am trying to use Retina (engine 5.17.2) to perform a SCAP benchmark audit on a Solaris 10 target. After importing the benchmark in the SCAP job wizard and kicking off the scan, the log file is showing "missing ]" errors due to the default shell on the target being csh. If I change the default shell to bash it runs fine, as it's now compatible with the benchmark syntax, however that is not the ideal option. Changing the shell configuration values in the host system's registry (Windows XP) according to this website:
http://www.eeye.com/Support/Knowledge-Base/Article.aspx?id=KB000885&...
does not help. I'm pretty sure the SCAP audits are completely self contained within xccdf_ssh.dll and xccdf_engine.exe and do not use the normal Retina audit config settings found in the registry. Does anyone have any suggestions on configuring this without changing the target's default shell?
Thanks in advance.