Generalising SSG ...

Shawn Wells shawn at redhat.com
Tue Aug 20 17:46:36 UTC 2013


On 8/20/13 11:49 AM, Jeffrey Blank wrote:
> Yes, though I simply haven't had time to refactor the code to make it
> easily portable.  And of course I'd welcome tooling improvements as
> commits to SSG, for anyone similarly-minded.
>
> A simplified version has already been dropped here, for another platform:
> $ svn checkout https://svn.macosforge.org/repository/scap-on-apple
>
> (This is also simpler, as there is no OVAL involved.)
>
>
>
> On 08/20/2013 11:36 AM, Trey Henefield wrote:
>>
>> Just food for thought. Has there been any desire to make changes to SSG
>> to accommodate building other (non-rhel6) SSGs?
>>
>>   
>>
>> I am getting up to speed on its processes, and for practice and actual
>> need, was thinking of creating an SSG for Firefox and Java, and
>> potentially webmin and apache. However, I noticed rhel6 is embedded all
>> throughout.
>>
>>   
>>
>> I have noticed that most of the processes in place can be repurposed.
>> With some changes to the makefile and a repurposed input folder, should
>> this be possible?
>>
>>   
>>
>> I was just hoping to get some further insight before going down this
>> long path.
>>
>>   
>>
>> Thanks in advance!

A thousand yes'.

Orchestration has been a bit challenging, largely since vendors desire 
development to happen within their own communities (FedoraHosted for RH, 
MacOSForge for Apple, etc). Less about vendor control, more about what 
open source licenses various people are allowed to follow via their 
employers.

We registered http://www.scapsecurityguides.net thinking it could be a 
"community site" where interested parties could work off a single build 
system, single dissemination site.... though there didn't seem to be 
much community interest in that. What do you think of the idea?

Fortunately RH ships and supports firefox, apache, and kinda sorta Java. 
Patches welcome here for now :)


More information about the scap-security-guide mailing list