Project

General

Profile

Actions

Feature #9950

closed

Add default RHEL / Fedora scap contents to foreman_scap_client and seed in foreman_openscap

Added by Shlomi Zadok about 9 years ago. Updated over 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Difficulty:
medium
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

We'd like to ease the use of the default scap-security-guide xml files.
The scenario is:
scap-security-guide xml files are on the client host.
A user creates policies on Foreman. The policies' data is synced via puppet to the client host.
The user does not need to copy / move scap-security-guide xml files to /var/lib/openscap/content/<digest>.xml

On Client host side
  1. Add scap-security-guide as an RPM dependency to foreman_scap_client RPM
  2. Post install creates a symlink between the security guide xmls to /var/lib/openscap/content/<digest>.xml:
    1. Extract scap-security-guide xml digest
    2. symlink scap-security-guide xml to /var/lib/openscap/content/<digest>.xml
On foreman_openscap
  1. Add scap-security-guide as an RPM dependency to rubygem-foreman_openscap RPM
  2. A seed which automatically creates a Scaptimony::ScapContent with the contents of the scap-security-guide
Actions

Also available in: Atom PDF