<div dir="ltr">Shawn, you said "<span style="font-family:arial,sans-serif;font-size:13px"> OpenSCAP comes natively with RHEL".</span><div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div>
<div><font face="arial, sans-serif">Does that mean you do not to add EPEL repo to install openSCAP anymore?</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">Greg</font></div>
<div><font face="arial, sans-serif"><br></font></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Jun 3, 2014 at 5:47 AM, Jan Lieskovsky <span dir="ltr"><<a href="mailto:jlieskov@redhat.com" target="_blank">jlieskov@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Thank you for your feedback Paul, Greg.<br>
<div class=""><br>
----- Original Message -----<br>
> From: "Greg Elin" <<a href="mailto:gregelin@gitmachines.com">gregelin@gitmachines.com</a>><br>
> To: "SCAP Security Guide" <<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>><br>
> Sent: Tuesday, May 27, 2014 9:08:00 PM<br>
> Subject: Re: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on openscap-utils. Add a note into manual pages<br>
> regarding that.<br>
><br>
</div><div class="">> In general, it's probably more a documentation and marketing issue. More<br>
> could be done to publish examples of SSG being used with other tools.<br>
><br>
> Most people are going to be installing SSG via YUM. If the documentation<br>
> indicates installing both, that is probably fine.<br>
><br>
> I agree with Paul that it is nice to install both and oscap is needed to test<br>
> SSG content.<br>
<br>
</div>Wondering if two votes for leaving scap-security-guide RPM dependency on openscap-utils<br>
can be considered as "sufficiently demonstrating community opinion". It's better than<br>
nothing (we know there are people preferring we to keep the current situation), but wondering<br>
if there are (also) people which would want the opposite? (would be good to know,<br>
so this topic could be closed and we could move to other issues)<br>
<br>
So anyone with desire in order to scap-security-guide removed Requires dependency<br>
on openscap-utils? If so, could you also provide also clarification / reasoning<br>
behind this motivation? (except the already mentioned one that having Requires on<br>
openscap-utils might induce impression SSG content can be used with OpenSCAP tools<br>
only)<br>
<br>
Thank you && Regards, Jan.<br>
--<br>
Jan iankko Lieskovsky / Red Hat Security Technologies Team<br>
<div class="HOEnZb"><div class="h5"><br>
><br>
> With my newbie hat on, it's taken me some time to understand the difference<br>
> between OpenSCAP and SSG. I've been wondering why. After all, I've<br>
> understood the difference between a browser and html page; between Excel and<br>
> a Excel file.<br>
><br>
> I come back to the marketing piece.<br>
><br>
> Greg<br>
><br>
><br>
><br>
><br>
> On Tue, May 27, 2014 at 2:57 PM, Paul Tittle (Contractor) <<br>
> <a href="mailto:ptittle@cmf.nrl.navy.mil">ptittle@cmf.nrl.navy.mil</a> > wrote:<br>
><br>
><br>
><br>
> On 5/27/14 2:43 PM, Shawn Wells wrote:<br>
><br>
><br>
><br>
><br>
> On 5/26/14, 10:56 AM, Jan Lieskovsky wrote:<br>
><br>
><br>
><br>
><br>
><br>
> 0002-RHEL-6-RHEL-7-Fedora-Drop-Requires-on-openscap-utils.patch<br>
><br>
><br>
> From 3c42c661b4f12d57fda35c3506bde1140a09a02f Mon Sep 17 00:00:00 2001<br>
> From: Jan Lieskovsky <<a href="mailto:jlieskov@redhat.com">jlieskov@redhat.com</a>><br>
> Date: Mon, 26 May 2014 16:26:08 +0200<br>
> Subject: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on<br>
> openscap-utils.<br>
> Add a note into manual pages regarding that.<br>
><br>
> Signed-off-by: Jan Lieskovsky <<a href="mailto:jlieskov@redhat.com">jlieskov@redhat.com</a>><br>
> ---<br>
> Fedora/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>
> Fedora/scap-security-guide.spec | 2 +-<br>
> RHEL/6/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>
> RHEL/7/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>
> scap-security-guide.spec | 2 +-<br>
> 5 files changed, 23 insertions(+), 2 deletions(-)<br>
><br>
> diff --git a/Fedora/input/auxiliary/scap-security-guide.8<br>
> b/Fedora/input/auxiliary/scap-security-guide.8<br>
> index 7758f37..50235d9 100644<br>
> --- a/Fedora/input/auxiliary/scap-security-guide.8<br>
> +++ b/Fedora/input/auxiliary/scap-security-guide.8<br>
> @@ -33,6 +33,13 @@ scanning of general-purpose Fedora systems.<br>
> .SH EXAMPLES<br>
> +<br>
> +.B "NOTE: "<br>
> +Example below assumes the openscap-utils package is installed on the system.<br>
> +If that's not the case to install the openscap-utils package run the<br>
> +.I yum install openscap-utils<br>
> +command as the root user.<br>
> +<br>
> To scan your system utilizing the OpenSCAP utility against the<br>
> common profile, run:<br>
> diff --git a/Fedora/scap-security-guide.spec<br>
> b/Fedora/scap-security-guide.spec<br>
> index c5a8911..adf92a5 100644<br>
> --- a/Fedora/scap-security-guide.spec<br>
> +++ b/Fedora/scap-security-guide.spec<br>
> @@ -23,7 +23,7 @@ Source0: <a href="http://fedorapeople.org/~jlieskov/%" target="_blank">http://fedorapeople.org/~jlieskov/%</a><br>
> {name}-%{version}.tar.gz<br>
> Source1: <a href="http://repos.ssgproject.org/sources/%" target="_blank">http://repos.ssgproject.org/sources/%</a><br>
> {name}-%{rhelssgversion}.tar.gz<br>
> BuildArch: noarch<br>
> BuildRequires: libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml<br>
> -Requires: xml-common, openscap-utils >= 0.9.1<br>
> +Requires: xml-common<br>
> Obsoletes: openscap-content < 0:0.9.13<br>
> Provides: openscap-content<br>
> diff --git a/RHEL/6/input/auxiliary/scap-security-guide.8<br>
> b/RHEL/6/input/auxiliary/scap-security-guide.8<br>
> index 44ae1ab..e676d35 100644<br>
> --- a/RHEL/6/input/auxiliary/scap-security-guide.8<br>
> +++ b/RHEL/6/input/auxiliary/scap-security-guide.8<br>
> @@ -68,6 +68,13 @@ webpage athttp:// <a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a> .<br>
> .SH EXAMPLES<br>
> +<br>
> +.B "NOTE: "<br>
> +Example below assumes the openscap-utils package is installed on the system.<br>
> +If that's not the case to install the openscap-utils package run the<br>
> +.I yum install openscap-utils<br>
> +command as the root user.<br>
> +<br>
> To scan your system utilizing the OpenSCAP utility against the<br>
> stig-rhel6-server-upstream profile:<br>
> diff --git a/RHEL/7/input/auxiliary/scap-security-guide.8<br>
> b/RHEL/7/input/auxiliary/scap-security-guide.8<br>
> index 97c4aec..7625fdd 100644<br>
> --- a/RHEL/7/input/auxiliary/scap-security-guide.8<br>
> +++ b/RHEL/7/input/auxiliary/scap-security-guide.8<br>
> @@ -58,6 +58,13 @@ webpage athttp:// <a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a> .<br>
> .SH EXAMPLES<br>
> +<br>
> +.B "NOTE: "<br>
> +Example below assumes the openscap-utils package is installed on the system.<br>
> +If that's not the case to install the openscap-utils package run the<br>
> +.I yum install openscap-utils<br>
> +command as the root user.<br>
> +<br>
> To scan your system utilizing the OpenSCAP utility against the<br>
> stig-rhel6-server profile:<br>
> diff --git a/scap-security-guide.spec b/scap-security-guide.spec<br>
> index fad1c6f..c23be44 100644<br>
> --- a/scap-security-guide.spec<br>
> +++ b/scap-security-guide.spec<br>
> @@ -15,7 +15,7 @@ Source0: <a href="http://repos.ssgproject.org/sources/%" target="_blank">http://repos.ssgproject.org/sources/%</a><br>
> {name}-%{version}.tar.gz<br>
> BuildArch: noarch<br>
> BuildRequires: libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml<br>
> -Requires: xml-common, openscap-utils >= 0.9.1<br>
> +Requires: xml-common<br>
> %description<br>
> The scap-security-guide project provides a guide for configuration of the<br>
> -- 1.8.3.1<br>
><br>
><br>
><br>
> I'd like to open this up to the community..... Is it beneficial for OpenSCAP<br>
> to simultaneously installed with SSG?<br>
><br>
> On one side the inclusion means you get tools+content with one command, which<br>
> is particularly useful for those new to SCAP. On the other hand it's been<br>
> mentioned that this drives users to believing SSG only works with OpenSCAP.<br>
> There's no intention of "forcing" OpenSCAP on people.<br>
><br>
> So, to the user community, is auto inclusion of OpenSCAP annoying or useful?<br>
><br>
><br>
><br>
> I think it's useful to require OpenSCAP to be installed simultaneously. It's<br>
> used to test SSG content, for one.<br>
><br>
> There have been some patches recently which were made in response to the<br>
> latest build of OpenSCAP, such as the world_writeable_files patch.<br>
> recurse_file_system="local" does something different in the latest OpenSCAP<br>
> build, which potentially breaks the test for some environments (it broke for<br>
> mine). This tells me that SSG's tests are somewhat reliant on the SCAP tools<br>
> that are used with the content.<br>
><br>
> If all SCAP tools behaved the same way for all input, I would say that<br>
> OpenSCAP shouldn't be a requirement for SSG. But they probably don't, so my<br>
> vote is for requiring OpenSCAP.<br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> scap-security-guide mailing list <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
> <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> scap-security-guide mailing list<br>
> <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
> <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
><br>
><br>
><br>
> _______________________________________________<br>
> scap-security-guide mailing list<br>
> <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
> <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
><br>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</div></div></blockquote></div><br></div>