Actions
Feature #9950
closedAdd default RHEL / Fedora scap contents to foreman_scap_client and seed in foreman_openscap
Difficulty:
medium
Triaged:
No
Bugzilla link:
Description
We'd like to ease the use of the default scap-security-guide xml files.
The scenario is:
scap-security-guide xml files are on the client host.
A user creates policies on Foreman. The policies' data is synced via puppet to the client host.
The user does not need to copy / move scap-security-guide xml files to /var/lib/openscap/content/<digest>.xml
- Add scap-security-guide as an RPM dependency to foreman_scap_client RPM
- Post install creates a symlink between the security guide xmls to /var/lib/openscap/content/<digest>.xml:
- Extract scap-security-guide xml digest
- symlink scap-security-guide xml to /var/lib/openscap/content/<digest>.xml
- Add scap-security-guide as an RPM dependency to rubygem-foreman_openscap RPM
- A seed which automatically creates a Scaptimony::ScapContent with the contents of the scap-security-guide
Actions