Generalising SSG ...
Shawn Wells
shawn at redhat.com
Tue Aug 20 17:46:36 UTC 2013
On 8/20/13 11:49 AM, Jeffrey Blank wrote:
> Yes, though I simply haven't had time to refactor the code to make it
> easily portable. And of course I'd welcome tooling improvements as
> commits to SSG, for anyone similarly-minded.
>
> A simplified version has already been dropped here, for another platform:
> $ svn checkout https://svn.macosforge.org/repository/scap-on-apple
>
> (This is also simpler, as there is no OVAL involved.)
>
>
>
> On 08/20/2013 11:36 AM, Trey Henefield wrote:
>>
>> Just food for thought. Has there been any desire to make changes to SSG
>> to accommodate building other (non-rhel6) SSGs?
>>
>>
>>
>> I am getting up to speed on its processes, and for practice and actual
>> need, was thinking of creating an SSG for Firefox and Java, and
>> potentially webmin and apache. However, I noticed rhel6 is embedded all
>> throughout.
>>
>>
>>
>> I have noticed that most of the processes in place can be repurposed.
>> With some changes to the makefile and a repurposed input folder, should
>> this be possible?
>>
>>
>>
>> I was just hoping to get some further insight before going down this
>> long path.
>>
>>
>>
>> Thanks in advance!
A thousand yes'.
Orchestration has been a bit challenging, largely since vendors desire
development to happen within their own communities (FedoraHosted for RH,
MacOSForge for Apple, etc). Less about vendor control, more about what
open source licenses various people are allowed to follow via their
employers.
We registered http://www.scapsecurityguides.net thinking it could be a
"community site" where interested parties could work off a single build
system, single dissemination site.... though there didn't seem to be
much community interest in that. What do you think of the idea?
Fortunately RH ships and supports firefox, apache, and kinda sorta Java.
Patches welcome here for now :)
More information about the scap-security-guide
mailing list