On 04/08/2015 11:13 PM, Trey Henefield wrote:


Greetings,

I wanted to propose a change to the current structure in place for
shared checks (shared/oval) and fixes (shared/fixes/bash). I was curious
to get everyone’s opinion before committing.

So the problem I see is with the symbolic linking of checks and fixes to
the shared folder. I have found it problematic when working between
different operating systems, file systems, and version control systems.

Rather than creating symbolic links to certain oval checks in the
shared/oval folder, we could choose to just process all oval checks in
both the project’s checks folder and the shared/oval folder.

However, not all checks in the current ‘shared/oval’ folder are shared
by all OS. For example, there are some that only apply to RHEL7 and
Fedora, and not RHEL6.

Any thoughts?


I propose

 * to remove symlinks
* to amend build process to look into shared directory if fix/check is missing in current directory

That should be the easiest path that enables flexibility and lower maint costs going forward.

--
Šimon Lukašík
Security Technologies, Red Hat, Inc.
--
SCAP Security Guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/

Reply via email to