[PATCH 2/2] [Fedora] Introduce 'Ensure Software Security Patches Installed' rule

Steve Grubb sgrubb at redhat.com
Thu Oct 3 18:07:32 UTC 2013


On Thursday, October 03, 2013 01:54:17 PM Jan Lieskovsky wrote:
> It uses SCE script to determine if there are security
> updates available, and requires former 'ensure
> yum fedora-updates.repo enabled' rule to pass first.

What are the possibilities of tying the bodhi release system to create OVAL 
files for the Fedora project? All we'd need to do is when the release is 
security sensitive, add the CVE information. Then Bodhi can use this to make 
OVAL files to be downloaded.

-Steve


More information about the scap-security-guide mailing list