From a2b3cc56fd1d684b7ab24e0d48873b742a5f7691 Mon Sep 17 00:00:00 2001 From: Jan Lieskovsky <[email protected]> Date: Tue, 17 Sep 2013 16:57:02 +0200 Subject: [PATCH 0/8] Introduce FEDORA directory skeleton and 'common' profile having two gpgcheck scans
This is the second version of FEDORA SCAP initial content (https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-September/004001.html) Second version: * included testcheck.py and utils/verify-input-sanity.py scripts, * removed attestation parts and CCE definitions: https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-September/004020.html * updated FEDORA rpm license to be just Public Domain: https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-September/004050.html Let me know if there are any issues with the proposal yet. Thank you && Regards, Jan. -- Jan iankko Lieskovsky / Red Hat Security Technologies Team Jan Lieskovsky (8): Add FEDORA Makefile, README, and scap-security-guide.spec files. Add input/checks subdir content: Two gpgchecks, testcheck.py script, F-19 detection, and F-19 CPE dictionary. Add F-19 basic guide XML (and corresponding XSLT) files. Add Introduction and System Settings XML files. Common profile XML definition. Add 'Installing and Maintaining Software', and 'Updating Software' XML files. Add transformations *.py scripts and XSLT content. Make a link for testcheck.py. Add FEDORA/utils content (README plus two verification scripts). Update main Makefile it to reflect new FEDORA content. FEDORA/Makefile | 58 +++ FEDORA/README | 30 ++ .../checks/ensure_gpgcheck_never_disabled.xml | 28 ++ FEDORA/input/checks/idtranslate.py | 1 + FEDORA/input/checks/installed_OS_is_fedora19.xml | 41 ++ .../checks/platform/fedora-cpe-dictionary.xml | 10 + FEDORA/input/checks/testcheck.py | 124 ++++++ .../checks/yum_gpgcheck_global_activation.xml | 24 + FEDORA/input/guide.xml | 40 ++ FEDORA/input/guide.xslt | 43 ++ FEDORA/input/intro/intro.xml | 167 +++++++ FEDORA/input/profiles/common.xml | 8 + FEDORA/input/system/software/software.xml | 8 + FEDORA/input/system/software/updating.xml | 68 +++ FEDORA/input/system/system.xml | 4 + FEDORA/scap-security-guide.spec | 53 +++ FEDORA/transforms/combinechecks.py | 79 ++++ FEDORA/transforms/constants.xslt | 21 + FEDORA/transforms/cpe_generate.py | 112 +++++ FEDORA/transforms/idtranslate.py | 138 ++++++ FEDORA/transforms/relabelids.py | 108 +++++ FEDORA/transforms/shorthand2xccdf.xslt | 494 +++++++++++++++++++++ FEDORA/transforms/xccdf-removeaux.xslt | 22 + FEDORA/transforms/xccdf-removetested.xslt | 20 + FEDORA/utils/README | 36 ++ FEDORA/utils/verify-input-sanity.py | 151 +++++++ FEDORA/utils/verify-references.py | 185 ++++++++ Makefile | 42 ++ 28 files changed, 2115 insertions(+) create mode 100644 FEDORA/Makefile create mode 100644 FEDORA/README create mode 100644 FEDORA/input/checks/ensure_gpgcheck_never_disabled.xml create mode 120000 FEDORA/input/checks/idtranslate.py create mode 100644 FEDORA/input/checks/installed_OS_is_fedora19.xml create mode 100644 FEDORA/input/checks/platform/fedora-cpe-dictionary.xml create mode 100755 FEDORA/input/checks/testcheck.py create mode 100644 FEDORA/input/checks/yum_gpgcheck_global_activation.xml create mode 100644 FEDORA/input/guide.xml create mode 100644 FEDORA/input/guide.xslt create mode 100644 FEDORA/input/intro/intro.xml create mode 100644 FEDORA/input/profiles/common.xml create mode 100644 FEDORA/input/system/software/software.xml create mode 100644 FEDORA/input/system/software/updating.xml create mode 100644 FEDORA/input/system/system.xml create mode 100644 FEDORA/scap-security-guide.spec create mode 100755 FEDORA/transforms/combinechecks.py create mode 100644 FEDORA/transforms/constants.xslt create mode 100755 FEDORA/transforms/cpe_generate.py create mode 100755 FEDORA/transforms/idtranslate.py create mode 100755 FEDORA/transforms/relabelids.py create mode 100644 FEDORA/transforms/shorthand2xccdf.xslt create mode 100644 FEDORA/transforms/xccdf-removeaux.xslt create mode 100644 FEDORA/transforms/xccdf-removetested.xslt create mode 100644 FEDORA/utils/README create mode 100755 FEDORA/utils/verify-input-sanity.py create mode 100755 FEDORA/utils/verify-references.py -- 1.7.11.7
_______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
