I guess I was thinking of this being the modernized version of the CMDB
effort that keeps trying to live because, frankly, it literally is CM
information.
This was the first FOSS-core thing that popped up in my search and seems
reasonable at first glance.
I'd love to be part of this, I'd also love to not reinvent the wheel
(again). That said, as an extendable platform, maybe iTop is horrible,
there needs to be a global conversation about it (and FIPS, SSP, etc...)
https://www.combodo.com/itop-193
Trevor
On Thu, Feb 1, 2018 at 11:41 AM, Shawn Wells <shawn(a)redhat.com> wrote:
On 2/1/18 1:21 PM, Luke Salsich wrote:
Thanks for the comments guys. It helps me understand where things are and
where they might be going.
For me, I would write a (initial) user story much along the lines of:
"I would like to be able to parse oscap results into a MySQL database so
that I can compare specific aspects of these results to others from the
same server or from other servers."
I word it like this because I (personally) am not looking for a larger
application framework (user interface, authentication, etc) that has to
come along with the central database. I also like the idea of not being
tied to one database engine and/or using a standardized API, but an API
sounds like a few stories down the road.
Anyway, I'm grateful for the thoughts. I was initially just checking to
make sure that before I start working on converting the XML to SQL
(probably with xslt and Python) that someone else hasn't already done that.
I hate it when I build something only to find out later that someone in the
community has already built it (and probably way better).
Imagine something like
https://osquery.io/, except with enriched
compliance data.
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.
fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@
lists.fedorahosted.org
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --