Thanks Shawn for the clarification… One last thing I want to mention here is… some of the RHEL boxes in my environment are locked down from internet.. .so they will not have access to the repository to fetch oscap binaries, and that’s the reason I had raised this question. Do you have any better suggestion for this scenario?
From: [email protected] [mailto:[email protected]] On Behalf Of Shawn Wells Sent: Friday, April 27, 2018 4:29 AM To: [email protected] Subject: Re: [Open-scap] [Suspected Spam] Re: OSCAP Scanner Binaries On 4/26/18 1:09 PM, Mohanraj, Bharath wrote: I tried to download only the oscap rpms by using the below command, yum install --downloadonly --downloaddir=/opt/oscaprpm openscap-scanner And once the above command is triggered, it downloaded the below bunch of RPMs… [cid:[email protected]] My intention here is to get the rpms downloaded, copy it to my other RHEL machines that don’t have yum… and directly install the rpms… and I’m interested in running the oscap to scan my RHEL machines… Now, my question here is, should I install all the downloaded RPMs to get the oscap scanning work? The other RPMs contain needed libraries or deprencies of the OpenSCAP tooling. This all seems very unusual. YUM is installed on *every* RHEL host out of the box. Administrators would actively have to remove it for this use case to be applicable. Even if OpenSCAP and associated dependencies were installed through RPMs, YUM would still be available (and likely ideal) to install software through.
_______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
