[PATCH] Fix paths and requires in spec file.
Steve Grubb
sgrubb at redhat.com
Tue Sep 4 17:44:19 UTC 2012
On Tuesday, September 04, 2012 01:35:53 PM Jeffrey Blank wrote:
> Sounds good. And there is other benefit already in Spencer's patch
> (with regard to RPM Requires), so I'll give Spencer an ACK unless
> someone indicates that they would prefer to wait...
We are setting things up so that policy distributed in rpm form can be located
in /usr/share/xml/scap/<policy-name>. The filesystem rpm will make the
directory for new installations. But each rpm should make and install xml into
their own the policy directory.
So, you could have:
/usr/share/xml/scap/ssg
/usr/share/xml/scap/usgcb
/usr/share/xml/scap/stig
/usr/share/xml/scap/nispom
etc...Tools can also now be coded to scan subdirectories to populate dialog
boxes for policy to use with this layout.
-Steve
> On 08/29/2012 09:44 AM, Steve Grubb wrote:
> > On Wednesday, August 29, 2012 12:59:30 PM Spencer R. Shimko wrote:
> >>>> * Wed Jul 3 2012 Jeffrey Blank <blank at eclipse.ncsc.mil> 1.0-3
> >>>> - Modified install section, made description more concise.
> >>>
> >>> In preparing SSG for packaging into EPEL (and eventually RHEL), one of
> >>> the fedora guys reviewed our RPM build and dropped suggestions on making
> >>> everything FHS compliant. They recommended things be put into
> >>> /usr/share/lib, but I agree that /usr/share/doc is sane given the nature
> >>> of the content. Reference
> >>> https://fedorahosted.org/scap-security-guide/ticket/107
> >>
> >> I considered /usr/lib and /usr/libexec but those are for object files and
> >> helper apps. Since this RPM only contains XML and HTML files it doesn't
> >> seem like a good fit. I'm open to being convinced otherwise though.
> >
> > We are talking this over. Give us a little time to come to a decision. We
> > might do something like /usr/share/xml/scap/<policy> so that apps can
> > have a standard location to expect policy. I'll come back with an
> > official recommendation.
More information about the scap-security-guide
mailing list