<div dir="ltr">In general, it&#39;s probably more a documentation and marketing issue. More could be done to publish examples of SSG being used with other tools.<div><br></div><div>Most people are going to be installing SSG via YUM. If the documentation indicates installing both, that is probably fine. <div>
<br></div><div>I agree with Paul that it is nice to install both and oscap is needed to test SSG content.</div><div><br></div><div>With my newbie hat on, it&#39;s taken me some time to understand the difference between OpenSCAP and SSG. I&#39;ve been wondering why. After all, I&#39;ve understood the difference between a browser and html page; between Excel and a Excel file. </div>
<div><br></div><div>I come back to the marketing piece. </div><div><br></div><div>Greg</div><div><br></div><div><br></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, May 27, 2014 at 2:57 PM, Paul Tittle (Contractor) <span dir="ltr">&lt;<a href="mailto:ptittle@cmf.nrl.navy.mil" target="_blank">ptittle@cmf.nrl.navy.mil</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000"><div><div class="h5">
    <div>On 5/27/14 2:43 PM, Shawn Wells wrote:<br>
    </div>
    </div></div><blockquote type="cite"><div><div class="h5">
      <br>
      On 5/26/14, 10:56 AM, Jan Lieskovsky wrote:
      <br>
      </div></div><blockquote type="cite"><div><div class="h5">
        <br>
        <br>
        0002-RHEL-6-RHEL-7-Fedora-Drop-Requires-on-openscap-utils.patch
        <br>
        <br>
        <br>
         From 3c42c661b4f12d57fda35c3506bde1140a09a02f Mon Sep 17
        00:00:00 2001
        <br>
        From: Jan Lieskovsky<a href="mailto:jlieskov@redhat.com" target="_blank">&lt;jlieskov@redhat.com&gt;</a>
        <br>
        Date: Mon, 26 May 2014 16:26:08 +0200
        <br>
        Subject: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on
        openscap-utils.
        <br>
          Add a note into                          manual pages
        regarding that.
        <br>
        <br>
        Signed-off-by: Jan Lieskovsky<a href="mailto:jlieskov@redhat.com" target="_blank">&lt;jlieskov@redhat.com&gt;</a>
        <br>
        ---
        <br>
          Fedora/input/auxiliary/scap-security-guide.8 | 7 +++++++
        <br>
          Fedora/scap-security-guide.spec              | 2 +-
        <br>
          RHEL/6/input/auxiliary/scap-security-guide.8 | 7 +++++++
        <br>
          RHEL/7/input/auxiliary/scap-security-guide.8 | 7 +++++++
        <br>
          scap-security-guide.spec                     | 2 +-
        <br>
          5 files changed, 23 insertions(+), 2 deletions(-)
        <br>
        <br>
        diff --git a/Fedora/input/auxiliary/scap-security-guide.8
        b/Fedora/input/auxiliary/scap-security-guide.8
        <br>
        index 7758f37..50235d9 100644
        <br>
        --- a/Fedora/input/auxiliary/scap-security-guide.8
        <br>
        +++ b/Fedora/input/auxiliary/scap-security-guide.8
        <br>
        @@ -33,6 +33,13 @@ scanning of general-purpose Fedora systems.
        <br>
              .SH EXAMPLES
        <br>
        +
        <br>
        +.B &quot;NOTE: &quot;
        <br>
        +Example below assumes the openscap-utils package is installed
        on the system.
        <br>
        +If that&#39;s not the case to install the openscap-utils package
        run the
        <br>
        +.I yum install openscap-utils
        <br>
        +command as the root user.
        <br>
        +
        <br>
          To scan your system utilizing the OpenSCAP utility against the
        <br>
          common profile, run:
        <br>
          diff --git a/Fedora/scap-security-guide.spec
        b/Fedora/scap-security-guide.spec
        <br>
        index c5a8911..adf92a5 100644
        <br>
        --- a/Fedora/scap-security-guide.spec
        <br>
        +++ b/Fedora/scap-security-guide.spec
        <br>
        @@ -23,7 +23,7 @@ Source0:   
        <a href="http://fedorapeople.org/~jlieskov/%" target="_blank">http://fedorapeople.org/~jlieskov/%</a>{name}-%{version}.tar.gz
        <br>
          Source1:   
        <a href="http://repos.ssgproject.org/sources/%" target="_blank">http://repos.ssgproject.org/sources/%</a>{name}-%{rhelssgversion}.tar.gz
        <br>
          BuildArch:    noarch
        <br>
          BuildRequires:    libxslt, expat, python, openscap-utils &gt;=
        0.9.1, python-lxml
        <br>
        -Requires:    xml-common, openscap-utils &gt;= 0.9.1
        <br>
        +Requires:    xml-common
        <br>
          Obsoletes:    openscap-content &lt; 0:0.9.13
        <br>
          Provides:    openscap-content
        <br>
          diff --git a/RHEL/6/input/auxiliary/scap-security-guide.8
        b/RHEL/6/input/auxiliary/scap-security-guide.8
        <br>
        index 44ae1ab..e676d35 100644
        <br>
        --- a/RHEL/6/input/auxiliary/scap-security-guide.8
        <br>
        +++ b/RHEL/6/input/auxiliary/scap-security-guide.8
        <br></div></div>
        @@ -68,6 +68,13 @@ webpage
        athttp://<a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a>.
        <br><div class="">
              .SH EXAMPLES
        <br>
        +
        <br>
        +.B &quot;NOTE: &quot;
        <br>
        +Example below assumes the openscap-utils package is installed
        on the system.
        <br>
        +If that&#39;s not the case to install the openscap-utils package
        run the
        <br>
        +.I yum install openscap-utils
        <br>
        +command as the root user.
        <br>
        +
        <br>
          To scan your system utilizing the OpenSCAP utility against the
        <br>
          stig-rhel6-server-upstream profile:
        <br>
          diff --git a/RHEL/7/input/auxiliary/scap-security-guide.8
        b/RHEL/7/input/auxiliary/scap-security-guide.8
        <br>
        index 97c4aec..7625fdd 100644
        <br>
        --- a/RHEL/7/input/auxiliary/scap-security-guide.8
        <br>
        +++ b/RHEL/7/input/auxiliary/scap-security-guide.8
        <br></div>
        @@ -58,6 +58,13 @@ webpage
        athttp://<a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a>.
        <br><div><div class="h5">
              .SH EXAMPLES
        <br>
        +
        <br>
        +.B &quot;NOTE: &quot;
        <br>
        +Example below assumes the openscap-utils package is installed
        on the system.
        <br>
        +If that&#39;s not the case to install the openscap-utils package
        run the
        <br>
        +.I yum install openscap-utils
        <br>
        +command as the root user.
        <br>
        +
        <br>
          To scan your system utilizing the OpenSCAP utility against the
        <br>
          stig-rhel6-server profile:
        <br>
          diff --git a/scap-security-guide.spec
        b/scap-security-guide.spec
        <br>
        index fad1c6f..c23be44 100644
        <br>
        --- a/scap-security-guide.spec
        <br>
        +++ b/scap-security-guide.spec
        <br>
        @@ -15,7 +15,7 @@ Source0:   
        <a href="http://repos.ssgproject.org/sources/%" target="_blank">http://repos.ssgproject.org/sources/%</a>{name}-%{version}.tar.gz
        <br>
          BuildArch:    noarch
        <br>
            BuildRequires:    libxslt, expat, python, openscap-utils
        &gt;= 0.9.1, python-lxml
        <br>
        -Requires:    xml-common, openscap-utils &gt;= 0.9.1
        <br>
        +Requires:    xml-common
        <br>
            %description
        <br>
          The scap-security-guide project provides a guide for
        configuration of the
        <br>
        -- 1.8.3.1
        <br>
      </div></div></blockquote><div><div class="h5">
      <br>
      <br>
      <br>
      I&#39;d like to open this up to the community.....  Is it beneficial
      for OpenSCAP to simultaneously installed with SSG?
      <br>
      <br>
      On one side the inclusion means you get tools+content with one
      command, which is particularly useful for those new to SCAP. On
      the other hand it&#39;s been mentioned that this drives users to
      believing SSG only works with OpenSCAP. There&#39;s no intention of
      &quot;forcing&quot; OpenSCAP on people.
      <br>
      <br>
      So, to the user community, is auto inclusion of OpenSCAP annoying
      or useful?
      <br>
      <br>
      <br>
    </div></div></blockquote>
    <br>
    I think it&#39;s useful to require OpenSCAP to be installed
    simultaneously. It&#39;s used to test SSG content, for one. <br>
    <br>
    There have been some patches recently which were made in response to
    the latest build of OpenSCAP, such as the world_writeable_files
    patch. recurse_file_system=&quot;local&quot; does something different in the
    latest OpenSCAP build, which potentially breaks the test for some
    environments (it broke for mine). This tells me that SSG&#39;s tests are
    somewhat reliant on the SCAP tools that are used with the content. <br>
    <br>
    If all SCAP tools behaved the same way for all input, I would say
    that OpenSCAP shouldn&#39;t be a requirement for SSG. But they probably
    don&#39;t, so my vote is for requiring OpenSCAP.<br>
    <br>
    <blockquote type="cite">
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
scap-security-guide mailing list
<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.fedorahosted.org</a>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a>
</pre>
    </blockquote>
    <br>
    <br>
    <br>
  </div>

<br>_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
<br></blockquote></div><br></div>