Thanks, Gautam. I will follow as you suggested. Stay in touch!
________________________________________
From: [email protected] <[email protected]> on
behalf of [email protected] <[email protected]>
Sent: Monday, April 4, 2016 9:30 PM
To: [email protected]
Subject: Open-scap-list Digest, Vol 85, Issue 4
Send Open-scap-list mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://www.redhat.com/mailman/listinfo/open-scap-list
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Open-scap-list digest..."
Today's Topics:
1. All those beautiful days ... (?imon Luka??k)
2. Re: OVAL content authoring tool (S, Gautam)
3. Re: Template for file pattern match (S, Gautam)
4. Re: All those beautiful days ... (Peter Vrabec)
----------------------------------------------------------------------
Message: 1
Date: Mon, 4 Apr 2016 10:25:34 +0200
From: ?imon Luka??k <[email protected]>
To: "[email protected]" <[email protected]>
Subject: [Open-scap] All those beautiful days ...
Message-ID: <[email protected]>
Content-Type: text/plain; charset=utf-8
Hiya,
I step aside from lead developer role in the OpenSCAP ecosystem, so I
can focus on things under the hood of manageiq.org
Just wanted to drop a note that I am changing my mindset towards
ecosystem today. I may contribute here and there whenever I enjoy it,
however I may not be able to respond to all the opened questions we may
have.
You have been amazing community! I had a great time here and I wish the
OpenSCAP good luck going forward!
Cheers,
~?.
------------------------------
Message: 2
Date: Mon, 4 Apr 2016 08:26:49 +0000
From: "S, Gautam" <[email protected]>
To: "[email protected]" <[email protected]>
Subject: Re: [Open-scap] OVAL content authoring tool
Message-ID:
<tu4pr84mb00782df1fbac4370c4ee0944b0...@tu4pr84mb0078.namprd84.prod.outlook.com>
Content-Type: text/plain; charset="us-ascii"
Hi Pravin,
I had done a trial of a similar exercise recently and these are the
observations I have. Please note that my final intent was to create both XCCDF
and OVAL files, so some things might be relevant in your case. In case the
community is interested, I can make patches available.
Assuming you have a directory structure similar to "/RHEL/6" for "SLES/11" with
all the Make, python, template files etc. in place:
1) Change the platform CPE in <<SLES>>/input/guide.xml: <platform
idref="cpe:/o:suse:sles:11" />
3) MakeFile changes:
Renamed the product: PROD = sles11
Commented out the enable-derivative modules as they do not
recognize SLES anyhow.
4) Changed the CPE dictionary input/oval/platform/sles-cpe-dictionary.xml using
oscap CPE dictionary as reference.
5) Added the CPE OVAL implementation
../../shared/oval/installed_OS_is_sles11.xml
6) Modified python modules ../../shared/transforms/combineremediations.py and
../../shared/transforms/combineovals.py
a) Added MakeFile target mapping for SLES
b) Added SLES switch case in map_product()
c) Added support for multi-digit version number >>> Currently
the modules assume that the version number is the last one digit.
d) Added sles in multi-platform checks
7) Updated the OVAL file pointer in <xsl:variable name="ovalfile"> in
/input/transforms/shorthand2xccdf.xslt
8) I believe you can reuse the templates and Python modules that transform
them, they worked for me; I just updated the platform.
Thank you.
Regards,
Gautam.
------------------------------
Message: 3
Date: Mon, 4 Apr 2016 09:00:10 +0000
From: "S, Gautam" <[email protected]>
To: "[email protected]" <[email protected]>
Subject: Re: [Open-scap] Template for file pattern match
Message-ID:
<tu4pr84mb0078de5ab978d4d36f7d263cb0...@tu4pr84mb0078.namprd84.prod.outlook.com>
Content-Type: text/plain; charset="us-ascii"
Hi Pravin,
This was something I also wondered about. However, there are some subtle
aspects that might affect this which I learned once I gave it a shot.
1) Not all pattern matches are same. Some search whether a pattern exists in a
file, some check for the absence, some check for the first match only, some for
all matches, some checks will involve external variables passed in as well. At
the very least, you will need </path/to/file>,<regex to
find>,<check_existence>,<instance> for basic ones.
2) You will have to keep the title, description and comments extremely generic
or else update them individually and they are generated. I found this to be a
huge deterrent to making everything into a template.
Thank you.
Regards,
Gautam.
------------------------------
Message: 4
Date: Mon, 4 Apr 2016 13:28:28 +0200
From: Peter Vrabec <[email protected]>
To: [email protected]
Subject: Re: [Open-scap] All those beautiful days ...
Message-ID: <[email protected]>
Content-Type: text/plain; charset=utf-8; format=flowed
Hi Simon,
thanks for all your great work and I wish you good luck with the new
projects and challenges!
Peter.
On 04/04/2016 10:25 AM, ?imon Luka??k wrote:
> Hiya,
>
> I step aside from lead developer role in the OpenSCAP ecosystem, so I
> can focus on things under the hood of manageiq.org
>
> Just wanted to drop a note that I am changing my mindset towards
> ecosystem today. I may contribute here and there whenever I enjoy it,
> however I may not be able to respond to all the opened questions we may
> have.
>
> You have been amazing community! I had a great time here and I wish the
> OpenSCAP good luck going forward!
>
> Cheers,
> ~?.
>
> _______________________________________________
> Open-scap-list mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/open-scap-list
>
--
Peter Vrabec
Engineering Manager, Security Technologies
Red Hat, Inc.
------------------------------
_______________________________________________
Open-scap-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/open-scap-list
End of Open-scap-list Digest, Vol 85, Issue 4
*********************************************
_______________________________________________
Open-scap-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/open-scap-list
