OPSWAT. Any experience passing its validation?

Does anybody have any experience in installing OPSWAT and actually passing its validation?

I have been fighting numerous validation fails (ClamAV, DNF) and faced the final bigarse Boss called

Lock screen timeout check is not supported on this operating system.

After speaking with several bearded wizards of my company, I got two points that suggest that I should give up and go for corporate Ubuntu:

  1. KDE is not supported by OPSWAT. We tried passing this precise problem several times, and simply got a reply from OPSWAT that it will not be supported.
  2. Ubuntu (somehow) works with MS Teams (with screen share).

Before I go the last resort of Ubuntu (which for me is MS Windows in world of Linuxes), I want to try out Fedora XFce (if I manage to figure out the scaling problem), and regular Fedora (why only Fedora? Simply because I have tried Manjaro, Mint, OpenSUSE and a few others and all started to work clunky after a few month of use, while Fedora worked perfect for year+).

But maybe some people already tried this and can stop me before I end up in the same familiar brick wall.

xfce4-screensaver has these settings for Lock screen timeout:


Do I understand correctly that your suggestion would be to try and install xfce4-screensaver in KDE just for OPSWAT to recognize it (and stop bothering me)?

If so, do you have any experience in terms of “will it play along” with KDE?

Nah that’s for if you wanted to know if the settings existed before installing a Xfce edition OS.

I wouldn’t install that on KDE and wouldn’t expect it to integrate ideally, but if you were going to install a Xfce OS anyway you could try it real quick on KDE and see :stuck_out_tongue:

The sick sophisticated joke is that I just finished doing a full reinstall of Fedora to XFce. And I still ended up getting this precise error with Lock screen.

… the tool is looking in the wrong place for the settings … they are in ~/.config/kscreenlockerrc

Any ideas on how to make it right?

Well. It would seem that OPSWAT doesn’t like both KDE and XFce(the only two environments I really like)… or maybe I did a bad thing and not remove the ~/.config, but doubt it.

Finally managed to pass the validation with the regular Fedora 41 (at least I know its not Fedora 41 itself for some reason).

1 Like

Provide feedback to the provider of the auditing software OR show the actual auditor that you are compliant via providing a screenshot of the contents of the settings…

That would be a reasonable thing to do, BUT:

  1. Frodo, you have two paths. In one you setup our corporate Ubuntu image, in the other - you solve the problems yourself.
  2. I have spoken to my company admins (the good ones), and they said that tried pushing KDE for this, but OPSWAT’s support said that they will not be supporting KDE(and XFce I assume).
  3. Sadly, OPSWAT runs as a service, to which the corporate resources (which I actually need) call everytime I need to access them (OPSWAT says “Ney” → No access).

Hi Draakz,

I “suppose” you could try a practical work-around. I don’t if it will work but:

  1. install the GNOME desktop environment
  2. set the screen-lock in GNOME
  3. Install switchdesk and swithcdesk-gui
  4. once settings are done in the GNOME desktop such that OPSWAT no longer complains, switchdesk kde and see if OPSWAT stays happy.

Basically try putting the settings where OPSWAP would expect them and see what happens.

1 Like

Ah, that one will be a hassle. OPSWAT does a check every 10 minutes or something.

Hi Draakz,

OPSWAT does a check every 10 minutes or something.

Yes, but the idea is that you set up for GNOME and use KDE … their settings are in 2 different places. So, while in KDE, the settings for GNOME do not change and OPSWAT stays happy?

1 Like

This does sounds interesting, but I think opswat is a bit more than sophisticated.

There is a command to call the general stats. And one thing I noticed was that under kde it was buggy - it simply hanged without returning info sometimes when I called it. At first I thought that this is either because it didn’t like Fedora, or opswat itself. And this was consistent even under XFce.

But then I tried it under Gnome. And there it works much faster and without glitches.

And, apart from that, opswat reacted to clamav onprem service not working, and autoupdates(or was it just some patch missing). So my guess would be that its actually diging up processes.

Although KDE is actually that one graphic environment that I really like (the configurable panels), I gave up for now and make most of Gnome.

Hi Draakz,

Wellll … it was just a thought :slight_smile:

I’ve been using GNOME for a few years now and it’s not to bad. The only things I don’t care for about GNOME are:

  1. every now and then, the team at GNOME decides to throw the baby out with the bath water kinds of changes … VERY annoying!
  2. I would prefer it stored its settings in a plain old text flat file ---- yeah I’m a bit old school like that
  3. The documentation for GNOME leaves a lot to be desired… missing or outdated most of the time

----- BUT … from an end-user point of view, it’s usable enough …

1 Like

Hi,

Yeah, Gnome is definitely not a bad choice, but I like to have an autohide side panel with running apps. I do use Dash to dock, but that one is less mature in terms of small details if to compare with what KDE brings to the table.

Same for the top panel.

And Gnome is the only version of Fedora that didn’t have things like ctrl alt t for terminal out of the box. And I constantly have issues with copy pasting to gnomes terminal(an old bug), where I need to specifically rmb and press Copy and in the terminal press Paste.

But, beside that, yes, Gnome is good. I do have things to figure out, but meh. At least now I have 10 seconds of starting a platform sized project, where as on my previous win system it took somewhere close to two minutes. And the thing even has a sweet Linux integration, sending me a notification that the system has started (tehehe)