<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 5/27/14 2:43 PM, Shawn Wells wrote:<br>
    </div>
    <blockquote cite="mid:5384DCC6.6050504@redhat.com" type="cite">
      <br>
      On 5/26/14, 10:56 AM, Jan Lieskovsky wrote:
      <br>
      <blockquote type="cite">
        <br>
        <br>
        0002-RHEL-6-RHEL-7-Fedora-Drop-Requires-on-openscap-utils.patch
        <br>
        <br>
        <br>
         From 3c42c661b4f12d57fda35c3506bde1140a09a02f Mon Sep 17
        00:00:00 2001
        <br>
        From: Jan Lieskovsky<a class="moz-txt-link-rfc2396E" href="mailto:jlieskov@redhat.com">&lt;jlieskov@redhat.com&gt;</a>
        <br>
        Date: Mon, 26 May 2014 16:26:08 +0200
        <br>
        Subject: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on
        openscap-utils.
        <br>
          Add a note into                          manual pages
        regarding that.
        <br>
        <br>
        Signed-off-by: Jan Lieskovsky<a class="moz-txt-link-rfc2396E" href="mailto:jlieskov@redhat.com">&lt;jlieskov@redhat.com&gt;</a>
        <br>
        ---
        <br>
          Fedora/input/auxiliary/scap-security-guide.8 | 7 +++++++
        <br>
          Fedora/scap-security-guide.spec              | 2 +-
        <br>
          RHEL/6/input/auxiliary/scap-security-guide.8 | 7 +++++++
        <br>
          RHEL/7/input/auxiliary/scap-security-guide.8 | 7 +++++++
        <br>
          scap-security-guide.spec                     | 2 +-
        <br>
          5 files changed, 23 insertions(+), 2 deletions(-)
        <br>
        <br>
        diff --git a/Fedora/input/auxiliary/scap-security-guide.8
        b/Fedora/input/auxiliary/scap-security-guide.8
        <br>
        index 7758f37..50235d9 100644
        <br>
        --- a/Fedora/input/auxiliary/scap-security-guide.8
        <br>
        +++ b/Fedora/input/auxiliary/scap-security-guide.8
        <br>
        @@ -33,6 +33,13 @@ scanning of general-purpose Fedora systems.
        <br>
              .SH EXAMPLES
        <br>
        +
        <br>
        +.B "NOTE: "
        <br>
        +Example below assumes the openscap-utils package is installed
        on the system.
        <br>
        +If that's not the case to install the openscap-utils package
        run the
        <br>
        +.I yum install openscap-utils
        <br>
        +command as the root user.
        <br>
        +
        <br>
          To scan your system utilizing the OpenSCAP utility against the
        <br>
          common profile, run:
        <br>
          diff --git a/Fedora/scap-security-guide.spec
        b/Fedora/scap-security-guide.spec
        <br>
        index c5a8911..adf92a5 100644
        <br>
        --- a/Fedora/scap-security-guide.spec
        <br>
        +++ b/Fedora/scap-security-guide.spec
        <br>
        @@ -23,7 +23,7 @@ Source0:   
        <a class="moz-txt-link-freetext" href="http://fedorapeople.org/~jlieskov/%">http://fedorapeople.org/~jlieskov/%</a>{name}-%{version}.tar.gz
        <br>
          Source1:   
        <a class="moz-txt-link-freetext" href="http://repos.ssgproject.org/sources/%">http://repos.ssgproject.org/sources/%</a>{name}-%{rhelssgversion}.tar.gz
        <br>
          BuildArch:    noarch
        <br>
          BuildRequires:    libxslt, expat, python, openscap-utils &gt;=
        0.9.1, python-lxml
        <br>
        -Requires:    xml-common, openscap-utils &gt;= 0.9.1
        <br>
        +Requires:    xml-common
        <br>
          Obsoletes:    openscap-content &lt; 0:0.9.13
        <br>
          Provides:    openscap-content
        <br>
          diff --git a/RHEL/6/input/auxiliary/scap-security-guide.8
        b/RHEL/6/input/auxiliary/scap-security-guide.8
        <br>
        index 44ae1ab..e676d35 100644
        <br>
        --- a/RHEL/6/input/auxiliary/scap-security-guide.8
        <br>
        +++ b/RHEL/6/input/auxiliary/scap-security-guide.8
        <br>
        @@ -68,6 +68,13 @@ webpage
        athttp://usgcb.nist.gov/usgcb_content.html.
        <br>
              .SH EXAMPLES
        <br>
        +
        <br>
        +.B "NOTE: "
        <br>
        +Example below assumes the openscap-utils package is installed
        on the system.
        <br>
        +If that's not the case to install the openscap-utils package
        run the
        <br>
        +.I yum install openscap-utils
        <br>
        +command as the root user.
        <br>
        +
        <br>
          To scan your system utilizing the OpenSCAP utility against the
        <br>
          stig-rhel6-server-upstream profile:
        <br>
          diff --git a/RHEL/7/input/auxiliary/scap-security-guide.8
        b/RHEL/7/input/auxiliary/scap-security-guide.8
        <br>
        index 97c4aec..7625fdd 100644
        <br>
        --- a/RHEL/7/input/auxiliary/scap-security-guide.8
        <br>
        +++ b/RHEL/7/input/auxiliary/scap-security-guide.8
        <br>
        @@ -58,6 +58,13 @@ webpage
        athttp://usgcb.nist.gov/usgcb_content.html.
        <br>
              .SH EXAMPLES
        <br>
        +
        <br>
        +.B "NOTE: "
        <br>
        +Example below assumes the openscap-utils package is installed
        on the system.
        <br>
        +If that's not the case to install the openscap-utils package
        run the
        <br>
        +.I yum install openscap-utils
        <br>
        +command as the root user.
        <br>
        +
        <br>
          To scan your system utilizing the OpenSCAP utility against the
        <br>
          stig-rhel6-server profile:
        <br>
          diff --git a/scap-security-guide.spec
        b/scap-security-guide.spec
        <br>
        index fad1c6f..c23be44 100644
        <br>
        --- a/scap-security-guide.spec
        <br>
        +++ b/scap-security-guide.spec
        <br>
        @@ -15,7 +15,7 @@ Source0:   
        <a class="moz-txt-link-freetext" href="http://repos.ssgproject.org/sources/%">http://repos.ssgproject.org/sources/%</a>{name}-%{version}.tar.gz
        <br>
          BuildArch:    noarch
        <br>
            BuildRequires:    libxslt, expat, python, openscap-utils
        &gt;= 0.9.1, python-lxml
        <br>
        -Requires:    xml-common, openscap-utils &gt;= 0.9.1
        <br>
        +Requires:    xml-common
        <br>
            %description
        <br>
          The scap-security-guide project provides a guide for
        configuration of the
        <br>
        -- 1.8.3.1
        <br>
      </blockquote>
      <br>
      <br>
      <br>
      I'd like to open this up to the community.....  Is it beneficial
      for OpenSCAP to simultaneously installed with SSG?
      <br>
      <br>
      On one side the inclusion means you get tools+content with one
      command, which is particularly useful for those new to SCAP. On
      the other hand it's been mentioned that this drives users to
      believing SSG only works with OpenSCAP. There's no intention of
      "forcing" OpenSCAP on people.
      <br>
      <br>
      So, to the user community, is auto inclusion of OpenSCAP annoying
      or useful?
      <br>
      <br>
      <br>
    </blockquote>
    <br>
    I think it's useful to require OpenSCAP to be installed
    simultaneously. It's used to test SSG content, for one. <br>
    <br>
    There have been some patches recently which were made in response to
    the latest build of OpenSCAP, such as the world_writeable_files
    patch. recurse_file_system="local" does something different in the
    latest OpenSCAP build, which potentially breaks the test for some
    environments (it broke for mine). This tells me that SSG's tests are
    somewhat reliant on the SCAP tools that are used with the content. <br>
    <br>
    If all SCAP tools behaved the same way for all input, I would say
    that OpenSCAP shouldn't be a requirement for SSG. But they probably
    don't, so my vote is for requiring OpenSCAP.<br>
    <br>
    <blockquote cite="mid:5384DCC6.6050504@redhat.com" type="cite">
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
scap-security-guide mailing list
<a class="moz-txt-link-abbreviated" href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a>
</pre>
    </blockquote>
    <br>
    <br>
    <br>
  </body>
</html>