Trey,

Could you please provide a bit more detail?  

I am interested bc I am trying to understand best way of eventually adding Ubuntu SCAP into SSG, and have been wondering to link or not to link? That is the question. Whether tis better to suffer to link shared files and risk fragility in future or to pick up and clone rules into each distribution and battle the onslaught of synchronizing changes in multiple directories. 

In any case, I thought the share folder was holding source code for oval checks that were common to more than one target platform. Then, when SSG is built the shared source is turned into actual OVAL xml SCAP. 

Have I completely missed that actual shared OVAL xml SCAP is in the distributed SSG?

If the share is just in the source code, I am not following the idea of running tests in both shared and non shared folders. 

If the share is in the distribution, are you suggesting that a scan just run all tests in both shared and non shared?

Greg Elin
P: 917-304-3488
E:  gregelin@gitmachines.com

Sent from my iPhone

On Apr 8, 2015, at 5:13 PM, Trey Henefield <trey.henefield@ultra-ats.com> wrote:



Greetings,

 

I wanted to propose a change to the current structure in place for shared checks (shared/oval) and fixes (shared/fixes/bash). I was curious to get everyone’s opinion before committing.

 

So the problem I see is with the symbolic linking of checks and fixes to the shared folder. I have found it problematic when working between different operating systems, file systems, and version control systems.

 

Rather than creating symbolic links to certain oval checks in the shared/oval folder, we could choose to just process all oval checks in both the project’s checks folder and the shared/oval folder.

 

However, not all checks in the current ‘shared/oval’ folder are shared by all OS. For example, there are some that only apply to RHEL7 and Fedora, and not RHEL6.

 

Any thoughts?

 

Thanks!

 

Best regards,

 

Trey Henefield, CISSP

Senior IAVA Engineer

 

Ultra Electronics

Advanced Tactical Systems, Inc.

4101 Smith School Road

Building IV, Suite 100

Austin, TX 78744 USA

 

Trey.Henefield@ultra-ats.com

Tel: +1 512 327 6795 ext. 647

Fax: +1 512 327 8043

Mobile: +1 512 541 6450

 

www.ultra-ats.com

 



Disclaimer
The information contained in this communication from
trey.henefield@ultra-ats.com sent at 2015-04-08 17:13:55 is private and may be legally privileged or export controlled. It is intended solely for use by scap-security-guide@lists.fedorahosted.org and others authorized to receive it. If you are not scap-security-guide@lists.fedorahosted.org you are hereby notified that any disclosure, copying, distribution or taking action in reliance of the contents of this information is strictly prohibited and may be unlawful.

--
SCAP Security Guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/