<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>The official EL6 (and EL5) updates (May 1<sup>st</sup>) started including openscap-1.0.8.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>No need to add EPEL.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap-security-guide-bounces@lists.fedorahosted.org] <b>On Behalf Of </b>Greg Elin<br><b>Sent:</b> terça-feira, 3 de Junho de 2014 12:22<br><b>To:</b> SCAP Security Guide<br><b>Subject:</b> Re: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on openscap-utils. Add a note into manual pages regarding that.<o:p></o:p></span></p></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Shawn, you said "<span style='font-size:10.0pt;font-family:"Arial","sans-serif"'> OpenSCAP comes natively with RHEL".</span><o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Does that mean you do not to add EPEL repo to install openSCAP anymore?</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Greg</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Tue, Jun 3, 2014 at 5:47 AM, Jan Lieskovsky <<a href="mailto:jlieskov@redhat.com" target="_blank">jlieskov@redhat.com</a>> wrote:<o:p></o:p></p><p class=MsoNormal>Thank you for your feedback Paul, Greg.<o:p></o:p></p><div><p class=MsoNormal><br>----- Original Message -----<br>> From: "Greg Elin" <<a href="mailto:gregelin@gitmachines.com">gregelin@gitmachines.com</a>><br>> To: "SCAP Security Guide" <<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>><br>> Sent: Tuesday, May 27, 2014 9:08:00 PM<br>> Subject: Re: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on openscap-utils. Add a note into manual pages<br>> regarding that.<br>><o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'>> In general, it's probably more a documentation and marketing issue. More<br>> could be done to publish examples of SSG being used with other tools.<br>><br>> Most people are going to be installing SSG via YUM. If the documentation<br>> indicates installing both, that is probably fine.<br>><br>> I agree with Paul that it is nice to install both and oscap is needed to test<br>> SSG content.<o:p></o:p></p></div><p class=MsoNormal>Wondering if two votes for leaving scap-security-guide RPM dependency on openscap-utils<br>can be considered as "sufficiently demonstrating community opinion". It's better than<br>nothing (we know there are people preferring we to keep the current situation), but wondering<br>if there are (also) people which would want the opposite? (would be good to know,<br>so this topic could be closed and we could move to other issues)<br><br>So anyone with desire in order to scap-security-guide removed Requires dependency<br>on openscap-utils? If so, could you also provide also clarification / reasoning<br>behind this motivation? (except the already mentioned one that having Requires on<br>openscap-utils might induce impression SSG content can be used with OpenSCAP tools<br>only)<br><br>Thank you && Regards, Jan.<br>--<br>Jan iankko Lieskovsky / Red Hat Security Technologies Team<o:p></o:p></p><div><div><p class=MsoNormal><br>><br>> With my newbie hat on, it's taken me some time to understand the difference<br>> between OpenSCAP and SSG. I've been wondering why. After all, I've<br>> understood the difference between a browser and html page; between Excel and<br>> a Excel file.<br>><br>> I come back to the marketing piece.<br>><br>> Greg<br>><br>><br>><br>><br>> On Tue, May 27, 2014 at 2:57 PM, Paul Tittle (Contractor) <<br>> <a href="mailto:ptittle@cmf.nrl.navy.mil">ptittle@cmf.nrl.navy.mil</a> > wrote:<br>><br>><br>><br>> On 5/27/14 2:43 PM, Shawn Wells wrote:<br>><br>><br>><br>><br>> On 5/26/14, 10:56 AM, Jan Lieskovsky wrote:<br>><br>><br>><br>><br>><br>> 0002-RHEL-6-RHEL-7-Fedora-Drop-Requires-on-openscap-utils.patch<br>><br>><br>> From 3c42c661b4f12d57fda35c3506bde1140a09a02f Mon Sep 17 00:00:00 2001<br>> From: Jan Lieskovsky <<a href="mailto:jlieskov@redhat.com">jlieskov@redhat.com</a>><br>> Date: Mon, 26 May 2014 16:26:08 +0200<br>> Subject: [PATCH 2/2] [RHEL/6, RHEL/7, Fedora] Drop Requires on<br>> openscap-utils.<br>> Add a note into manual pages regarding that.<br>><br>> Signed-off-by: Jan Lieskovsky <<a href="mailto:jlieskov@redhat.com">jlieskov@redhat.com</a>><br>> ---<br>> Fedora/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>> Fedora/scap-security-guide.spec | 2 +-<br>> RHEL/6/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>> RHEL/7/input/auxiliary/scap-security-guide.8 | 7 +++++++<br>> scap-security-guide.spec | 2 +-<br>> 5 files changed, 23 insertions(+), 2 deletions(-)<br>><br>> diff --git a/Fedora/input/auxiliary/scap-security-guide.8<br>> b/Fedora/input/auxiliary/scap-security-guide.8<br>> index 7758f37..50235d9 100644<br>> --- a/Fedora/input/auxiliary/scap-security-guide.8<br>> +++ b/Fedora/input/auxiliary/scap-security-guide.8<br>> @@ -33,6 +33,13 @@ scanning of general-purpose Fedora systems.<br>> .SH EXAMPLES<br>> +<br>> +.B "NOTE: "<br>> +Example below assumes the openscap-utils package is installed on the system.<br>> +If that's not the case to install the openscap-utils package run the<br>> +.I yum install openscap-utils<br>> +command as the root user.<br>> +<br>> To scan your system utilizing the OpenSCAP utility against the<br>> common profile, run:<br>> diff --git a/Fedora/scap-security-guide.spec<br>> b/Fedora/scap-security-guide.spec<br>> index c5a8911..adf92a5 100644<br>> --- a/Fedora/scap-security-guide.spec<br>> +++ b/Fedora/scap-security-guide.spec<br>> @@ -23,7 +23,7 @@ Source0: <a href="http://fedorapeople.org/~jlieskov/%25" target="_blank">http://fedorapeople.org/~jlieskov/%</a><br>> {name}-%{version}.tar.gz<br>> Source1: <a href="http://repos.ssgproject.org/sources/%25" target="_blank">http://repos.ssgproject.org/sources/%</a><br>> {name}-%{rhelssgversion}.tar.gz<br>> BuildArch: noarch<br>> BuildRequires: libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml<br>> -Requires: xml-common, openscap-utils >= 0.9.1<br>> +Requires: xml-common<br>> Obsoletes: openscap-content < 0:0.9.13<br>> Provides: openscap-content<br>> diff --git a/RHEL/6/input/auxiliary/scap-security-guide.8<br>> b/RHEL/6/input/auxiliary/scap-security-guide.8<br>> index 44ae1ab..e676d35 100644<br>> --- a/RHEL/6/input/auxiliary/scap-security-guide.8<br>> +++ b/RHEL/6/input/auxiliary/scap-security-guide.8<br>> @@ -68,6 +68,13 @@ webpage athttp:// <a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a> .<br>> .SH EXAMPLES<br>> +<br>> +.B "NOTE: "<br>> +Example below assumes the openscap-utils package is installed on the system.<br>> +If that's not the case to install the openscap-utils package run the<br>> +.I yum install openscap-utils<br>> +command as the root user.<br>> +<br>> To scan your system utilizing the OpenSCAP utility against the<br>> stig-rhel6-server-upstream profile:<br>> diff --git a/RHEL/7/input/auxiliary/scap-security-guide.8<br>> b/RHEL/7/input/auxiliary/scap-security-guide.8<br>> index 97c4aec..7625fdd 100644<br>> --- a/RHEL/7/input/auxiliary/scap-security-guide.8<br>> +++ b/RHEL/7/input/auxiliary/scap-security-guide.8<br>> @@ -58,6 +58,13 @@ webpage athttp:// <a href="http://usgcb.nist.gov/usgcb_content.html" target="_blank">usgcb.nist.gov/usgcb_content.html</a> .<br>> .SH EXAMPLES<br>> +<br>> +.B "NOTE: "<br>> +Example below assumes the openscap-utils package is installed on the system.<br>> +If that's not the case to install the openscap-utils package run the<br>> +.I yum install openscap-utils<br>> +command as the root user.<br>> +<br>> To scan your system utilizing the OpenSCAP utility against the<br>> stig-rhel6-server profile:<br>> diff --git a/scap-security-guide.spec b/scap-security-guide.spec<br>> index fad1c6f..c23be44 100644<br>> --- a/scap-security-guide.spec<br>> +++ b/scap-security-guide.spec<br>> @@ -15,7 +15,7 @@ Source0: <a href="http://repos.ssgproject.org/sources/%25" target="_blank">http://repos.ssgproject.org/sources/%</a><br>> {name}-%{version}.tar.gz<br>> BuildArch: noarch<br>> BuildRequires: libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml<br>> -Requires: xml-common, openscap-utils >= 0.9.1<br>> +Requires: xml-common<br>> %description<br>> The scap-security-guide project provides a guide for configuration of the<br>> -- 1.8.3.1<br>><br>><br>><br>> I'd like to open this up to the community..... Is it beneficial for OpenSCAP<br>> to simultaneously installed with SSG?<br>><br>> On one side the inclusion means you get tools+content with one command, which<br>> is particularly useful for those new to SCAP. On the other hand it's been<br>> mentioned that this drives users to believing SSG only works with OpenSCAP.<br>> There's no intention of "forcing" OpenSCAP on people.<br>><br>> So, to the user community, is auto inclusion of OpenSCAP annoying or useful?<br>><br>><br>><br>> I think it's useful to require OpenSCAP to be installed simultaneously. It's<br>> used to test SSG content, for one.<br>><br>> There have been some patches recently which were made in response to the<br>> latest build of OpenSCAP, such as the world_writeable_files patch.<br>> recurse_file_system="local" does something different in the latest OpenSCAP<br>> build, which potentially breaks the test for some environments (it broke for<br>> mine). This tells me that SSG's tests are somewhat reliant on the SCAP tools<br>> that are used with the content.<br>><br>> If all SCAP tools behaved the same way for all input, I would say that<br>> OpenSCAP shouldn't be a requirement for SSG. But they probably don't, so my<br>> vote is for requiring OpenSCAP.<br>><br>><br>><br>><br>> _______________________________________________<br>> scap-security-guide mailing list <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>> <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>><br>><br>><br>><br>> _______________________________________________<br>> scap-security-guide mailing list<br>> <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>> <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>><br>><br>><br>> _______________________________________________<br>> scap-security-guide mailing list<br>> <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>> <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>><br>_______________________________________________<br>scap-security-guide mailing list<br><a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br><a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><o:p></o:p></p></div></div></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>