That's exactly correct. Basically, you would add a rule binding line for
each type of connection that you want to make.
It can (and in my opinion should) be used across the board.
Thanks,
Trevor
On Mon, Feb 20, 2017 at 9:08 AM, Zbynek Moravec <zmoravec(a)redhat.com> wrote:
Hi,
database sounds like interesting idea. I didn't think about it in that way.
In my opinion, XML DB could be way how to store many SSG "items", not only
OVALs/remediations.
If I understood it correctly, only overhead of adding of new remediation
would be
adding bindings to product, right?
I don't have own experience with XML databases. What does rest of SSG
community think about it?
Z.
----- Original Message -----
> From: "Trevor Vaughan" <tvaughan(a)onyxpoint.com>
> To: "SCAP Security Guide"
<scap-security-guide(a)lists.fedorahosted.org>
> Sent: Wednesday, February 15, 2017 3:14:33 PM
> Subject: Re: SSG structure without duplicates (OVAL/remediations)
>
> I would structure it as a 3NF or 5NF XML database with join files.
>
> Absolutely minimizes repetition and make is both easier to maintain and
> extend.
>
> Trevor
>
> On Mon, Feb 13, 2017 at 4:50 AM, Zbynek Moravec < zmoravec(a)redhat.com >
> wrote:
>
>
> Hi,
>
> we have lot of same files in SSG - especially OVAL checks and
remediations
> and it becoming hard to maintain such many files. Every new product means
> copy&paste of many new files. Bugfix in one product doesn't fix same
files
> in another product. We are not able to see, that we forgot remediation
for
> OVAL check, etc.
>
> Currently, I am trying to remove generated files and update old csv &
> templates.
>
> I would like to introduce new structure to allow sharing of files between
> products. Do you have any ideas/requirements?
>
https://github.com/OpenSCAP/scap-security-guide/issues/1668
>
> Thank you
>
> Z.
> _______________________________________________
> scap-security-guide mailing list --
> scap-security-guide(a)lists.fedorahosted.org
> To unsubscribe send an email to
> scap-security-guide-leave(a)lists.fedorahosted.org
>
>
>
> --
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699 x788
>
> -- This account not approved for unencrypted proprietary information --
>
> _______________________________________________
> scap-security-guide mailing list --
> scap-security-guide(a)lists.fedorahosted.org
> To unsubscribe send an email to
> scap-security-guide-leave(a)lists.fedorahosted.org
>
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.
fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@
lists.fedorahosted.org
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --