Shared Checks/Fixes ...

Simon Lukasik isimluk at fedoraproject.org
Thu Apr 9 08:09:39 UTC 2015


On 04/08/2015 11:13 PM, Trey Henefield wrote:
>
>
> Greetings,
>
> I wanted to propose a change to the current structure in place for
> shared checks (shared/oval) and fixes (shared/fixes/bash). I was curious
> to get everyone’s opinion before committing.
>
> So the problem I see is with the symbolic linking of checks and fixes to
> the shared folder. I have found it problematic when working between
> different operating systems, file systems, and version control systems.
>
> Rather than creating symbolic links to certain oval checks in the
> shared/oval folder, we could choose to just process all oval checks in
> both the project’s checks folder and the shared/oval folder.
>
> However, not all checks in the current ‘shared/oval’ folder are shared
> by all OS. For example, there are some that only apply to RHEL7 and
> Fedora, and not RHEL6.
>
> Any thoughts?
>

I propose

  * to remove symlinks
  * to amend build process to look into shared directory if fix/check is 
missing in current directory

That should be the easiest path that enables flexibility and lower maint 
costs going forward.

-- 
Šimon Lukašík
Security Technologies, Red Hat, Inc.


More information about the scap-security-guide mailing list