On 2/26/19 12:07 PM, Boucher, William wrote:
My only concern is that sometimes a government customer will mandate using some flavor of RHEL 6, for whatever reason they may have. For example, we have a government customer mandating we use 6.5 at the moment. And they are perfectly happy to have us STIG the 6.5 OS manually, page by page, if there is no way to automate it.
The end of RHEL 6's maintenance support 2 phase isn't until 30-NOV-2020 . Until then OpenSCAP should be prepared to release security advisories (RHSAs) and urgent bug fixes (RHBAs) for OpenSCAP.
Developers judgement call whether downstream RHSAs and RHBAs can be released in a timely, high-quality manner, without an upstream CI.
In reality there may have been little to no RHSAs or RHBAs for OpenSCAP. However it's the Red Hat brand promise that if there ever are, we'll be ready.
 https://access.redhat.com/support/policy/updates/errata _______________________________________________ Open-scap-list mailing list Openemail@example.com https://www.redhat.com/mailman/listinfo/open-scap-list