[PATCH 1/3] Adding datastream output for RHEL6

Shawn Wells shawn at redhat.com
Tue Feb 18 17:32:03 UTC 2014


-------------- next part --------------
>From 2411c946d507e4b744a118ce7a417da929d88606 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sat, 15 Feb 2014 09:50:16 -0500
Subject: [PATCH 1/3] Adding datastream output for RHEL6

Updated RHEL6 build process to generate a SCAP datastream (ssg-rhel6-ds.xml). This is required by several tools, such as oscap-anaconda and SCAP Workbench. Additionally, this sets us up for signing content.

Did *not* update the RPM build process and documentation yet. The datastream will be generated via `make content` and should be considered a developer preview at this time. As additional testing occurs we'll evaluate shipping the DS in the next RPM release.
---
 RHEL/6/Makefile |   10 ++++++++++
 1 files changed, 10 insertions(+), 0 deletions(-)

diff --git a/RHEL/6/Makefile b/RHEL/6/Makefile
index 4c9b062..2835c94 100644
--- a/RHEL/6/Makefile
+++ b/RHEL/6/Makefile
@@ -86,6 +86,16 @@ content: shorthand2xccdf guide checks
 	$(TRANS)/cpe_generate.py $(OUT)/unlinked-rhel6-oval.xml $(IN)/checks/platform/rhel6-cpe-dictionary.xml $(ID)
 	$(TRANS)/relabelids.py unlinked-rhel6-xccdf.xml $(ID)
 	$(TRANS)/relabelids.py unlinked-ocilrefs-rhel6-xccdf.xml $(ID)
+# 	Once things are relabelled, create a datastream
+	xsltproc /usr/share/openscap/xsl/xccdf_1.1_remove_dangling_sub.xsl $(OUT)/$(ID)-rhel6-xccdf.xml \
+		> $(OUT)/$(ID)-rhel6-xccdf-nodangles.xml
+	xsltproc --stringparam reverse_DNS org.ssgproject.content /usr/share/openscap/xsl/xccdf_1.1_to_1.2.xsl \
+		$(OUT)/$(ID)-rhel6-xccdf-nodangles.xml > $(OUT)/$(ID)-rhel6-xccdf-1.2.xml
+	sed -i '/idref="dangling reference to /d' $(OUT)/$(ID)-rhel6-xccdf-1.2.xml
+	oscap ds sds-compose $(OUT)/$(ID)-rhel6-xccdf-1.2.xml $(OUT)/$(ID)-rhel6-ds.xml
+#	Add in CPE and OVAL content to datastream
+	oscap ds sds-add $(OUT)/$(ID)-rhel6-cpe-dictionary.xml $(OUT)/$(ID)-rhel6-ds.xml
+	oscap ds sds-add $(OUT)/$(ID)-rhel6-oval.xml $(OUT)/$(ID)-rhel6-ds.xml
 
 content-stig: shorthand2xccdf guide checks
 	xmllint --format --output $(OUT)/unlinked-stig-rhel6-xccdf.xml $(OUT)/unlinked-stig-rhel6-xccdf.xml 
-- 
1.7.1



More information about the scap-security-guide mailing list