OpenStack scap content

Jeff Pullen jpullen at redhat.com
Sat Nov 14 04:07:25 UTC 2015


I'm new here... so I apologize if this has already been discussed.  It seems that not much has been done lately with the OpenStack SCAP content. So it seems like a good place to start learning how to contribute to this project.

1. I wanted to get opinions on how to tackle the quick release cycle, and various components used within OpenStack. I noticed that in RHEL it is broken into versions (5/6/7), but Fedora isn't. OpenStack has a Fedora like release cycle, and it may be difficult to maintain numerous versions. Does it make sense to just have this work with the latest version?

2. OpenStack also has different server roles that will have different requirements, and services. For example the controllers have databases and web servers, where the computes will not. What is the best way to separate these?


Finally, if there are resources that can cut down on the learning curve on how all the scap files interact with each other I would really appreciate if you could send me those (off list).


More information about the scap-security-guide mailing list