On 03/11/2013 05:37 PM, Gary Gapinski wrote: >> I am interested because I am looking into support of zip file in the >> > OpenSCAP (no promises, just looking there). > What would be quite useful is to specify content using a URI with > support for http, https, and file schemes (file being the default scheme > for unadorned file names). While additional schemes besides those > (perhaps zip or jar) might prove useful, my personal preference would be > for http, https, and file.
oscap already supports remote URI if the URI is used within check-content-ref/@href. You can enable this functionality by --fetch-remote-resources command-line option. However, I am afraid to allow remote URI even on the command-line. Some of the risks are discussed at https://fedorahosted.org/openscap/ticket/213 . _______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
