On 03/11/2013 05:37 PM, Gary Gapinski wrote:
> I am interested because I am looking into support of zip file in
the
> > OpenSCAP (no promises, just looking there).
What would be quite useful is to specify content using a URI with
support for http, https, and file schemes (file being the default scheme
for unadorned file names). While additional schemes besides those
(perhaps zip or jar) might prove useful, my personal preference would be
for http, https, and file.
oscap already supports remote URI if the URI is used within
check-content-ref/@href. You can enable this functionality by
--fetch-remote-resources command-line option.
However, I am afraid to allow remote URI even on the command-line. Some
of the risks are discussed at
https://fedorahosted.org/openscap/ticket/213 .