SAS NCM 9.4: Compliance will always pass when using User Defined Fields and Exact Order; Compliance Audits are not failing when they should

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:


High - Compliance Audits will pass when they should fail. 

Compliance will always pass when using user defined fields and Exact Order. (See below)

This shows the exact order test without utilizing any User Data Field variables. 


The test should pass and it does with no issues. 



Now we will create a User Data Field


And add the UDF to the test. The UDF replaces the string "pop3" in line 4.


And the test shows compliant as it should because the config matches the test.


Now change the config by adding a new line 182 - and the test should fail... but it incorrectly shows complaint.

Environment

VMware Smart Assurance - NCM

Resolution

To resolve the issue please follow the steps below:

1. Download the attached NCM-9.4.0.0-08092015.tar.gz
2. gunzip NCM-9.4.0.0-08092015.tar.gz
3. tar -xvf NCM-9.4.0.0-08092015.tar
4. Take a backup of existing services-9.4.0.0.jar file
   • cp $VOYENCE_HOME/ncmcore/webapps/ncm-webapp/WEB-INF/lib/services-9.4.0.0.jar <BACKUP DIR>
5. Copy the attached services-9.4.0.0.jar to the same location $VOYENCE_HOME/ncmcore/webapps/ncm-webapp/WEB-INF/lib/
6. Check the permissions and ownership
   • chown root:voyence services-9.4.0.0.jar
   • chmod 640 services-9.4.0.0.jar
7. service ncm-as restart