Project

General

Profile

Actions

Feature #9950

closed

Add default RHEL / Fedora scap contents to foreman_scap_client and seed in foreman_openscap

Added by Shlomi Zadok over 9 years ago. Updated about 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Difficulty:
medium
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

We'd like to ease the use of the default scap-security-guide xml files.
The scenario is:
scap-security-guide xml files are on the client host.
A user creates policies on Foreman. The policies' data is synced via puppet to the client host.
The user does not need to copy / move scap-security-guide xml files to /var/lib/openscap/content/<digest>.xml

On Client host side
  1. Add scap-security-guide as an RPM dependency to foreman_scap_client RPM
  2. Post install creates a symlink between the security guide xmls to /var/lib/openscap/content/<digest>.xml:
    1. Extract scap-security-guide xml digest
    2. symlink scap-security-guide xml to /var/lib/openscap/content/<digest>.xml
On foreman_openscap
  1. Add scap-security-guide as an RPM dependency to rubygem-foreman_openscap RPM
  2. A seed which automatically creates a Scaptimony::ScapContent with the contents of the scap-security-guide
Actions #1

Updated by Shlomi Zadok over 9 years ago

  • Bugzilla link set to 1207304
Actions #3

Updated by Shlomi Zadok over 9 years ago

  • Assignee changed from Shlomi Zadok to Steve Loranz
Actions #4

Updated by Marek Hulán over 9 years ago

While this seems to be present, it contains a bug. If database already contains content with the same digest it fails. If I rerun seed task it conflicts even with the content created by previous run.

Actions #5

Updated by Shlomi Zadok over 9 years ago

  • Status changed from New to Ready For Testing
  • Assignee changed from Steve Loranz to Shlomi Zadok
  • Pull request https://github.com/theforeman/foreman_openscap/pull/112 added
  • Pull request deleted ()
Actions #6

Updated by Marek Hulán over 9 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF