[PATCH] Fix paths and requires in spec file.

Steve Grubb sgrubb at redhat.com
Tue Sep 4 17:44:19 UTC 2012


On Tuesday, September 04, 2012 01:35:53 PM Jeffrey Blank wrote:
> Sounds good.  And there is other benefit already in Spencer's patch
> (with regard to RPM Requires), so I'll give Spencer an ACK unless
> someone indicates that they would prefer to wait...

We are setting things up so that policy distributed in rpm form can be located 
in /usr/share/xml/scap/<policy-name>. The filesystem rpm will make the 
directory for new installations. But each rpm should make and install xml into 
their own the policy directory. 

So, you could have:

/usr/share/xml/scap/ssg
/usr/share/xml/scap/usgcb
/usr/share/xml/scap/stig
/usr/share/xml/scap/nispom

etc...Tools can also now be coded to scan subdirectories to populate dialog 
boxes for policy to use with this layout.

-Steve


> On 08/29/2012 09:44 AM, Steve Grubb wrote:
> > On Wednesday, August 29, 2012 12:59:30 PM Spencer R. Shimko wrote:
> >>>>   * Wed Jul 3 2012 Jeffrey Blank <blank at eclipse.ncsc.mil> 1.0-3
> >>>>   - Modified install section, made description more concise.
> >>> 
> >>> In preparing SSG for packaging into EPEL (and eventually RHEL), one of
> >>> the fedora guys reviewed our RPM build and dropped suggestions on making
> >>> everything FHS compliant. They recommended things be put into
> >>> /usr/share/lib, but I agree that /usr/share/doc is sane given the nature
> >>> of the content. Reference
> >>> https://fedorahosted.org/scap-security-guide/ticket/107
> >> 
> >> I considered /usr/lib and /usr/libexec but those are for object files and
> >> helper apps.  Since this RPM only contains XML and HTML files it doesn't
> >> seem like a good fit.  I'm open to being convinced otherwise though.
> > 
> > We are talking this over. Give us a little time to come to a decision. We
> > might do something like  /usr/share/xml/scap/<policy>  so that apps can
> > have a standard location to expect policy.  I'll come back with an
> > official recommendation.



More information about the scap-security-guide mailing list