Also, we're trying to do an ACK/NACK model for commits (posting all
commits to the mailing list, and permitting the push once someone else
has verified it). It may not make sense for your portion of the project
yet, but it might be where you want to end up.
I found it very helpful for getting contributors up to speed on the
right level of granularity for Rules and checks.
On 06/15/2012 04:18 PM, Jeffrey Blank wrote:
We also hope that our authoring tools/scripts are of use to you, and
hope to evolve them to meet the needs of content developers comfortable
in a Unix-like environment for software development, using distributed
We generally want to use the site in the style of a software repo (with
discrete source/input files turned into output, driven by Make) and
avoid using it as a file drop for output documents that can be generated
from the SCAP content itself, such as HTML docs. But hey, an initial
commit is an initial commit, and great to see. (We also generally want
to provide links/info for downloadable dependencies stored elsewhere,
such as the Mitre OVAL/OCIL interpreter.)
In fact, I would expect that once OCIL is supported by OpenSCAP, there
should be no dependencies that are not satisfied by the platform itself
out of the box.
Again, welcome to the repo!
On 06/13/2012 02:45 AM, Kenny Peeples wrote:
> I am pleased to announce that the JBoss Enterprise Application
> Platform (EAP) SCAP project has been added to the scap-security-guide
> project. The initial content (OVAL and OCIL) has been added to the
> repository under JBossEAP5. We have released the initial content to
> the NIST NCP and to DISA for approval as a STIG. The content
> includes the Common Criteria Certification guidelines, Red Hat best
> practices and some DISA guidelines as well as mappings to NIST and
> DISA security controls. Additional content will be added for EAP 5.
> Future milestones should include adding content for EAP 6, SOA-P 5
> and additional JBoss Middleware projects. We look forward to getting
> feedback, comments and suggestions from the community as we build the
> SCAP content for JBoss Middleware.
> Kenneth W. Peeples, C|HFI, Security+ Red Hat Consulting OASIS Member
> (AMQP, SAML, XACML TC), Infragard Member Cell: 843.636.3719 Office:
> 843.323.4261 kpeeples(a)redhat.com http://www.redhat.com
> _______________________________________________ scap-security-guide
> mailing list scap-security-guide(a)lists.fedorahosted.org
scap-security-guide mailing list