question about fix-common code

Jeffrey Blank blank at eclipse.ncsc.mil
Sun Jun 2 17:57:27 UTC 2013


Francisco, Shawn,

What was your thinking behind the common-fix elements?
Please also see (shortly) my new patches for fix insertion.
I've re-written the fix insertion stuff.  So that people can "declare"
their use of particular environment variables in bash (using a bash
function).

Then the reworked combinefixes.py will pick up on the declaration and
assign an XCCDF <sub idref/> to that variable.  <sub idref/> is how oscap
supports inserting particular values inside a fix.

For unit testing (still incomplete), the bash function "needs" should grab
the right value from XCCDF and populate it accordingly.

Do we still need the fix-common elements, to insert them into the XCCDF?
I like to delete unused code.

Jeff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130602/d3c37db2/attachment.html>


More information about the scap-security-guide mailing list