Restructuring/Update of Trac
by Shawn Wells
Hey Guys,
I had some time to go in and (finally!) restructure Trac, the
Fedora Hosted provided ticketing system. In short:
- Killed off stale milestones and reassigned open tickets to new ones
which make sense. Note many items, such as CCE mappings, I'm considering
a ticket of a milestone (vs a milestone itself). To my knowledge we
cannot setup "sub milestones," so this approach seems best for now.
Current OPEN milestones are below:
* Remediation Content Synchronization (adding in TBD
remediation scripts)
* RHEL6 STIG - DISA InitialDraft Submission Feedback
- Updated "Components" of the project, which allows users to place
tickets against specific subsections. The updated list:
* Build System
* OVAL Content
* Remediation Content
* Tools
* XCCDF Content
- By default all new tickets will be owned by Michele Newman, who will
screen them and pass along as appropriate.
For those interested, here is a list of all open tickets by milestone:
https://fedorahosted.org/scap-security-guide/report/3
-Shawn
11 years, 4 months
Fwd: [Open-scap] openscap-0.9.2
by Shawn Wells
For those not on the open-scap tool mailing list
-------- Original Message --------
Subject: [Open-scap] openscap-0.9.2
Date: Mon, 19 Nov 2012 16:13:28 +0100
From: Petr Lautrbach <plautrba(a)redhat.com>
To: open-scap-list(a)redhat.com
Hi all,
a new OpenSCAP release is available - openscap-0.9.2.
Changes:
- rewritten the heuristic for pattern matching on path and filepath
- CPE 2.3 language applicability testing
- new ds_sds_index API providing a datastream overview
- CPEs in source datastreams are automatically registered and used
for XCCDF evaluation
- --cpe option autodetects CPE dictionary and language
- CVE support (validate feed, print CVEs)
- introduced info module
- made "$oscap xccdf generate custom" work again -> man page update
- bug fixes
Download:
https://fedorahosted.org/releases/o/p/openscap/openscap-0.9.2.tar.gz
SHA1:
4c1e6a2b612bc5d882889198a87b0df25b12317d
Note: If you use RHEL-5 with libxml2-2.6.26-2, you won't be able to validate
various XML content using XML schemas, see [1]. As a workaround, it's possible to
build and use oscap with the version of libxml2 from RHEL-6 installed.
[1] https://bugzilla.redhat.com/show_bug.cgi?id=877348
Petr
--
Petr Lautrbach, Red Hat, Inc.
http://cz.redhat.com
_______________________________________________
Open-scap-list mailing list
Open-scap-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list
11 years, 4 months
odd copy editing requests
by Jeffrey Blank
(Trying to catch back up now.)
Why are we changing colons to periods?
If there are style requests that decrease readability (but are required
for some peculiar reason), please try to macro these out so that at
least some outputs look literate.
11 years, 4 months
Only get (null) results when executing scap-security-guide-0.1-7
by Peter Gustafsson
Hi,
I only get (null) result on almost all test when using
scap-security-guide-0.1-6 or scap-security-guide-0.1-7.
I'm executing the test on a rhel 6.3 box having below version of
openscap installed:
openscap-utils-0.8.0-2.el6.x86_64
openscap-0.8.0-2.el6.x86_64
# oscap xccdf eval --profile server /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
Rule ID: partition_for_tmp
Title: Ensure /tmp Located On Separate Partition
Result: (null)
Rule ID: partition_for_var
Title: Ensure /var Located On Separate Partition
Result: (null)
Rule ID: partition_for_var_log
Title: Ensure /var/log Located On Separate Partition
Result: (null)
Rule ID: partition_for_var_log_audit
Title: Ensure /var/log/audit Located On Separate Partition
Result: (null)
Rule ID: partition_for_home
Title: Ensure /home Located On Separate Partition
Result: (null)
......
Br,
Peter Gustafsson
11 years, 4 months