Could anyone speak to SSG support for check content written for SCE (vs. OVAL)? The
developer's guide (section 7 intro) implies XCCDF check content is not required to be
in OVAL, but in fleshing out support for checks later in that section it's hard to see
how anything but shorthand OVAL could be supported. If not SCE directly, might it be
possible to somehow use raw XCCDF snippets to incorporate SCE check content?
I'm on the hook to support some custom content for an internal need, and have found
OVAL to be a bit inflexible (unless I want to propose extensions to OVAL itself which is a
bit beyond the scope I can take on at the moment). One example is retrieving additional
metadata from an RPM beyond what OVAL's rpminfo supports.
Admittedly, since my effort is internal, I'm misusing SSG in the sense that I
wouldn't be contributing the custom content back to the SSG repo. SSG still offers an
excellent framework for my isolated situation though, except that without support for
non-OVAL checks, I'm not sure if I can author the content i need with it.
Show replies by thread