<div dir="ltr">Shawn, you said &quot;<span style="font-family:arial,sans-serif;font-size:13px"> OpenSCAP comes natively with RHEL&quot;.</span><div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div>

<div><font face="arial, sans-serif">Does that mean you do not to add EPEL repo to install openSCAP anymore?</font></div><div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">Greg</font></div>
<div><font face="arial, sans-serif"><br></font></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Jun 3, 2014 at 5:47 AM, Jan Lieskovsky <span dir="ltr">&lt;<a href="mailto:jlieskov@redhat.com" target="_blank">jlieskov@redhat.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Thank you for your feedback Paul, Greg.<br>
<div class=""><br>
----- Original Message -----<br>
&gt; From: &quot;Greg Elin&quot; &lt;<a href="mailto:gregelin@gitmachines.com">gregelin@gitmachines.com</a>&gt;<br>
&gt; To: &quot;SCAP Security Guide&quot; &lt;<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>&gt;<br>
&gt; Sent: Tuesday, May 27, 2014 9:08:00 PM<br>
&gt; Subject: Re: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on    openscap-utils. Add a note into manual pages<br>
&gt; regarding that.<br>
&gt;<br>
</div><div class="">&gt; In general, it&#39;s probably more a documentation and marketing issue. More<br>
&gt; could be done to publish examples of SSG being used with other tools.<br>
&gt;<br>
&gt; Most people are going to be installing SSG via YUM. If the documentation<br>
&gt; indicates installing both, that is probably fine.<br>
&gt;<br>
&gt; I agree with Paul that it is nice to install both and oscap is needed to test<br>
&gt; SSG content.<br>
<br>
</div>Wondering if two votes for leaving scap-security-guide RPM dependency on openscap-utils<br>
can be considered as &quot;sufficiently demonstrating community opinion&quot;. It&#39;s better than<br>
nothing (we know there are people preferring we to keep the current situation), but wondering<br>
if there are (also) people which would want the opposite? (would be good to know,<br>
so this topic could be closed and we could move to other issues)<br>
<br>
So anyone with desire in order to scap-security-guide removed Requires dependency<br>
on openscap-utils? If so, could you also provide also clarification / reasoning<br>
behind this motivation? (except the already mentioned one that having Requires on<br>
openscap-utils might induce impression SSG content can be used with OpenSCAP tools<br>
only)<br>
<br>
Thank you &amp;&amp; Regards, Jan.<br>
--<br>
Jan iankko Lieskovsky / Red Hat Security Technologies Team<br>
<div class="HOEnZb"><div class="h5"><br>
&gt;<br>
&gt; With my newbie hat on, it&#39;s taken me some time to understand the difference<br>
&gt; between OpenSCAP and SSG. I&#39;ve been wondering why. After all, I&#39;ve<br>
&gt; understood the difference between a browser and html page; between Excel and<br>
&gt; a Excel file.<br>
&gt;<br>
&gt; I come back to the marketing piece.<br>
&gt;<br>
&gt; Greg<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; On Tue, May 27, 2014 at 2:57 PM, Paul Tittle (Contractor) &lt;<br>
&gt; <a href="mailto:ptittle@cmf.nrl.navy.mil">ptittle@cmf.nrl.navy.mil</a> &gt; wrote:<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; On 5/27/14 2:43 PM, Shawn Wells wrote:<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; On 5/26/14, 10:56 AM, Jan Lieskovsky wrote:<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; 0002-RHEL-6-RHEL-7-Fedora-Drop-Requires-on-openscap-utils.patch<br>
&gt;<br>
&gt;<br>
&gt; From 3c42c661b4f12d57fda35c3506bde1140a09a02f Mon Sep 17 00:00:00 2001<br>
&gt; From: Jan Lieskovsky &lt;<a href="mailto:jlieskov@redhat.com">jlieskov@redhat.com</a>&gt;<br>
&gt; Date: Mon, 26 May 2014 16:26:08 +0200<br>
&gt; Subject: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on<br>
&gt; openscap-utils.<br>
&gt; Add a note into manual pages regarding that.<br>
&gt;<br>
&gt; Signed-off-by: Jan Lieskovsky &lt;<a href="mailto:jlieskov@redhat.com">jlieskov@redhat.com</a>&gt;<br>
&gt; ---<br>
&gt; Fedora/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>
&gt; Fedora/scap-security-guide.spec | 2 +-<br>
&gt; RHEL/6/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>
&gt; RHEL/7/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>
&gt; scap-security-guide.spec | 2 +-<br>
&gt; 5 files changed, 23 insertions(+), 2 deletions(-)<br>
&gt;<br>
&gt; diff --git a/Fedora/input/auxiliary/scap-security-guide.8<br>
&gt; b/Fedora/input/auxiliary/scap-security-guide.8<br>
&gt; index 7758f37..50235d9 100644<br>
&gt; --- a/Fedora/input/auxiliary/scap-security-guide.8<br>
&gt; +++ b/Fedora/input/auxiliary/scap-security-guide.8<br>
&gt; @@ -33,6 +33,13 @@ scanning of general-purpose Fedora systems.<br>
&gt; .SH EXAMPLES<br>
&gt; +<br>
&gt; +.B &quot;NOTE: &quot;<br>
&gt; +Example below assumes the openscap-utils package is installed on the system.<br>
&gt; +If that&#39;s not the case to install the openscap-utils package run the<br>
&gt; +.I yum install openscap-utils<br>
&gt; +command as the root user.<br>
&gt; +<br>
&gt; To scan your system utilizing the OpenSCAP utility against the<br>
&gt; common profile, run:<br>
&gt; diff --git a/Fedora/scap-security-guide.spec<br>
&gt; b/Fedora/scap-security-guide.spec<br>
&gt; index c5a8911..adf92a5 100644<br>
&gt; --- a/Fedora/scap-security-guide.spec<br>
&gt; +++ b/Fedora/scap-security-guide.spec<br>
&gt; @@ -23,7 +23,7 @@ Source0: <a href="http://fedorapeople.org/~jlieskov/%" target="_blank">http://fedorapeople.org/~jlieskov/%</a><br>
&gt; {name}-%{version}.tar.gz<br>
&gt; Source1: <a href="http://repos.ssgproject.org/sources/%" target="_blank">http://repos.ssgproject.org/sources/%</a><br>
&gt; {name}-%{rhelssgversion}.tar.gz<br>
&gt; BuildArch: noarch<br>
&gt; BuildRequires: libxslt, expat, python, openscap-utils &gt;= 0.9.1, python-lxml<br>
&gt; -Requires: xml-common, openscap-utils &gt;= 0.9.1<br>
&gt; +Requires: xml-common<br>
&gt; Obsoletes: openscap-content &lt; 0:0.9.13<br>
&gt; Provides: openscap-content<br>
&gt; diff --git a/RHEL/6/input/auxiliary/scap-security-guide.8<br>
&gt; b/RHEL/6/input/auxiliary/scap-security-guide.8<br>
&gt; index 44ae1ab..e676d35 100644<br>
&gt; --- a/RHEL/6/input/auxiliary/scap-security-guide.8<br>
&gt; +++ b/RHEL/6/input/auxiliary/scap-security-guide.8<br>
&gt; @@ -68,6 +68,13 @@ webpage athttp:// <a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a> .<br>
&gt; .SH EXAMPLES<br>
&gt; +<br>
&gt; +.B &quot;NOTE: &quot;<br>
&gt; +Example below assumes the openscap-utils package is installed on the system.<br>
&gt; +If that&#39;s not the case to install the openscap-utils package run the<br>
&gt; +.I yum install openscap-utils<br>
&gt; +command as the root user.<br>
&gt; +<br>
&gt; To scan your system utilizing the OpenSCAP utility against the<br>
&gt; stig-rhel6-server-upstream profile:<br>
&gt; diff --git a/RHEL/7/input/auxiliary/scap-security-guide.8<br>
&gt; b/RHEL/7/input/auxiliary/scap-security-guide.8<br>
&gt; index 97c4aec..7625fdd 100644<br>
&gt; --- a/RHEL/7/input/auxiliary/scap-security-guide.8<br>
&gt; +++ b/RHEL/7/input/auxiliary/scap-security-guide.8<br>
&gt; @@ -58,6 +58,13 @@ webpage athttp:// <a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a> .<br>
&gt; .SH EXAMPLES<br>
&gt; +<br>
&gt; +.B &quot;NOTE: &quot;<br>
&gt; +Example below assumes the openscap-utils package is installed on the system.<br>
&gt; +If that&#39;s not the case to install the openscap-utils package run the<br>
&gt; +.I yum install openscap-utils<br>
&gt; +command as the root user.<br>
&gt; +<br>
&gt; To scan your system utilizing the OpenSCAP utility against the<br>
&gt; stig-rhel6-server profile:<br>
&gt; diff --git a/scap-security-guide.spec b/scap-security-guide.spec<br>
&gt; index fad1c6f..c23be44 100644<br>
&gt; --- a/scap-security-guide.spec<br>
&gt; +++ b/scap-security-guide.spec<br>
&gt; @@ -15,7 +15,7 @@ Source0: <a href="http://repos.ssgproject.org/sources/%" target="_blank">http://repos.ssgproject.org/sources/%</a><br>
&gt; {name}-%{version}.tar.gz<br>
&gt; BuildArch: noarch<br>
&gt; BuildRequires: libxslt, expat, python, openscap-utils &gt;= 0.9.1, python-lxml<br>
&gt; -Requires: xml-common, openscap-utils &gt;= 0.9.1<br>
&gt; +Requires: xml-common<br>
&gt; %description<br>
&gt; The scap-security-guide project provides a guide for configuration of the<br>
&gt; -- 1.8.3.1<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; I&#39;d like to open this up to the community..... Is it beneficial for OpenSCAP<br>
&gt; to simultaneously installed with SSG?<br>
&gt;<br>
&gt; On one side the inclusion means you get tools+content with one command, which<br>
&gt; is particularly useful for those new to SCAP. On the other hand it&#39;s been<br>
&gt; mentioned that this drives users to believing SSG only works with OpenSCAP.<br>
&gt; There&#39;s no intention of &quot;forcing&quot; OpenSCAP on people.<br>
&gt;<br>
&gt; So, to the user community, is auto inclusion of OpenSCAP annoying or useful?<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; I think it&#39;s useful to require OpenSCAP to be installed simultaneously. It&#39;s<br>
&gt; used to test SSG content, for one.<br>
&gt;<br>
&gt; There have been some patches recently which were made in response to the<br>
&gt; latest build of OpenSCAP, such as the world_writeable_files patch.<br>
&gt; recurse_file_system=&quot;local&quot; does something different in the latest OpenSCAP<br>
&gt; build, which potentially breaks the test for some environments (it broke for<br>
&gt; mine). This tells me that SSG&#39;s tests are somewhat reliant on the SCAP tools<br>
&gt; that are used with the content.<br>
&gt;<br>
&gt; If all SCAP tools behaved the same way for all input, I would say that<br>
&gt; OpenSCAP shouldn&#39;t be a requirement for SSG. But they probably don&#39;t, so my<br>
&gt; vote is for requiring OpenSCAP.<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; _______________________________________________<br>
&gt; scap-security-guide mailing list <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
&gt; <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; _______________________________________________<br>
&gt; scap-security-guide mailing list<br>
&gt; <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
&gt; <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; _______________________________________________<br>
&gt; scap-security-guide mailing list<br>
&gt; <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
&gt; <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
&gt;<br>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</div></div></blockquote></div><br></div>