[PATCH 0/3] Added datastream outputs for Fedora, RHEL7, RHEL6

Shawn Wells shawn at redhat.com
Thu Feb 20 22:34:32 UTC 2014


On 2/20/14, 12:51 PM, Martin Preisler wrote:
>> Thanks, Shawn. Would it be possible to make a new RHEL-6 rpm version bump too
>> >and upload it to hosting service? (I would like to enhance Fedora's rpm
>> >to include datastreams for both of RHEL-6 and RHEL-7 so it would be
>> >possible from Fedora host to scan RHEL-{6,7} guests / remote systems too)
>> >
>> >The motivation behind having remote RHEL-{6,7} system scans possibility
>> >is to provide chance content to be more widely used / tested without the
>> >need to install it explicitly on each of the remote system scheduled to be
>> >scanned (vision being: more wider easier usage => more sooner bug reports
>> >=> higher chance to fix them very soon).
> \o/
>
> I am planning for scap-workbench 0.8.8 to open datastream by default instead of XCCDF - seehttps://fedorahosted.org/scap-workbench/ticket/184
> Please make sure you commit to a single file name and never change it as that would break the default content path.

I searched through NIST's SCAP 1.2 spec and didn't find datastream 
(file) naming standards:
http://csrc.nist.gov/publications/nistpubs/800-126-rev2/SP800-126r2.pdf

Within SSG we've been using ssg-$(PRODUCT)-{cpe oval xccdf ds}.xml. I 
don't envision this to change.

I'd wager Gary knows off the top of his head if there's a DS naming 
convention.... ;)


More information about the scap-security-guide mailing list