Re: [Open-scap] Guide Mergers and Simplifications in SCAP Security Guide

2018-08-29 Thread Martin Preisler
s, merging the guides was an important step in reducing > technical debt in SCAP Security Guide. > > Below, I outline one of the things we’ve improved this summer, with the hopes > of encouraging more individuals to contribute to the SSG project. Hopefully a > few users will be inspir

Re: [Open-scap] Guide Mergers and Simplifications in SCAP Security Guide

2018-08-29 Thread Martin Preisler
roject tremendously! I hope you had fun! -- Martin Preisler ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] OSCAP Platform Support

2018-07-06 Thread Martin Preisler
roblems > will be very isolated and solvable by #ifdef-s. If you happen to find any > such problems don't hesitate to send patches upstream! > > All the best! > ~š. > > ___ > Open-scap-list mailing list > Open-scap-list@redhat.com > https://www.redhat.com/mailman/listinfo/open-scap-list -- Martin Preisler ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] New GitHub teams

2018-06-28 Thread Martin Preisler
at we have. Please tell me the exact github username and I will add it. > > Thank you very much! > > Regards > > Jan Černý > Security Technologies | Red Hat, Inc. > > - Original Message - > > From: "Martin Preisler" > > To: "open-scap-l

[Open-scap] New GitHub teams

2018-06-13 Thread Martin Preisler
I will fix it. -- Martin Preisler ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] OpenSCAP Work bench on Windows

2018-05-25 Thread Martin Preisler
_ > Open-scap-list mailing list > Open-scap-list@redhat.com > https://www.redhat.com/mailman/listinfo/open-scap-list -- Martin Preisler ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] Logos and other materials for SCAP projects

2017-07-21 Thread Martin Preisler
how many projects we could bundle on one of the bigger sticker sheets. > > Trevor > > On Mon, Jul 17, 2017 at 3:03 PM, Shawn Wells <sh...@redhat.com> wrote: >> >> >> >> On 7/17/17 2:59 PM, Martin Preisler wrote: >> > Hi, >> > I have gather

Re: [Open-scap] what profile to use in RHEL7

2017-07-18 Thread Martin Preisler
On Tue, Jul 18, 2017 at 1:34 PM, Shawn Wells <sh...@redhat.com> wrote: > > > On 7/18/17 1:09 PM, Martin Preisler wrote: > > On Mon, Jul 17, 2017 at 6:44 PM, Smith, Cathy <cathy.sm...@pnnl.gov> wrote: > > Folks > > I’m trying to build a customized profile for

Re: [Open-scap] what profile to use in RHEL7

2017-07-18 Thread Martin Preisler
ys tell you both title and ID of each. Hope this helps! -- Martin Preisler ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] OpenSCAP Evaluation Report summary

2017-07-17 Thread Martin Preisler
eighted average? What is > the formula? > > > > Thanks, > > > > Greg Silverman > > Veritas Technologies > > Mountain View, CA > > > > > > > ___ > Open-scap-list mai

[Open-scap] Logos and other materials for SCAP projects

2017-07-17 Thread Martin Preisler
appreciate tips and recommendations how to make nice and reasonably priced sticker sheets . Maybe we could even try to get t-shirts done with these. -- Martin Preisler ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com

Re: [Open-scap] Oracle Linux CPE name support patch

2017-06-02 Thread Martin Preisler
On Wed, May 31, 2017 at 6:15 AM, Ilya Okomin <ilya.oko...@oracle.com> wrote: > Hello, team! Hi Ilya, > I'm working on patch to add Oracle Linux CPE names support in openscap. > These changes already available in Oracle EL SRPM which Martin Preisler > noticed as upstream

Re: [Open-scap] OpenSCAP 1.0.x to be retired

2017-06-01 Thread Martin Preisler
anyone wants to pick it up. On Wed, Apr 26, 2017 at 2:56 PM, Martin Preisler <mprei...@redhat.com> wrote: > Recently we were looking into the possibility of retiring 1.0.x to > lower the maintenance cost of OpenSCAP. OpenSCAP 1.2.x has been > certified and the only users of the 1.0.x

Re: [Open-scap] running a 64 bit machine but remediation creates 32 bit rules

2017-04-03 Thread Martin Preisler
ay -S stime -k > audit_time_rules > -w /etc/localtime -p wa -k audit_time_rules > Thanks, > > > Josh Moore > Chief Architect > TarokoSoftware > > ___ > Open-scap-list mailing

Re: [Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Martin Preisler
On Thu, Mar 23, 2017 at 4:34 PM, Mohanraj, Bharath <bharath_mohanraj...@bmc.com> wrote: > Thankyou for the clarification. So, other than Linux which other platforms > does oscap scanner support? Linux and Solaris. -- Martin Preisler _

Re: [Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Martin Preisler
n-scap scanner on a Mac box (just > like how I did it on a Linux with 'yum'), and once its installed can the same > commandline options of oscap used in Mac as well? This is not supported. It would be (probably) simple to implement it but we haven't looked into this yet

[Open-scap] OpenSCAP 1.2.13

2017-01-05 Thread Martin Preisler
: 393b426f3278ab9438439df9a077b95b29bba66dfc2c799b7b40c2bf3980cf619aa1efc27225785ec780aa75926af6751b10fdb0b8d561c8056bf9a9a087792a -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] SCAP Security Guide 0.1.31

2016-11-29 Thread Martin Preisler
ity-guide/ RHEL7 RPMs: https://copr-be.cloud.fedoraproject.org/results/openscapmaint/openscap-latest/epel-7-x86_64/00482175-scap-security-guide/ -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. ___ Open-scap-list mailing list

Re: [Open-scap] Really nice tool

2016-09-27 Thread Martin Preisler
> Hello David, > > [snip] > > > - I did not see anyindication of using the Asset Identification (AI) > > specification. > > OpenSCAP doesn't support this. Just a small clarification: We do support AI but only a subset of it used in ARF, also called Result DataStream

Re: [Open-scap] Enforcing OpenSCAP policy through kickstart (Satellite 6 as well) ?

2016-09-02 Thread Martin Preisler
el7-ospp-ks.cfg#L121 for an example. Just change the profile ID for another profile and you should be good to go. -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] Latest OpenSCAP changes to speed up SSG builds

2016-07-27 Thread Martin Preisler
- Original Message - > From: "Martin Preisler" <mprei...@redhat.com> > To: "SCAP Security Guide" <scap-security-gu...@lists.fedorahosted.org>, > "open-scap-list" <open-scap-list@redhat.com> > Sent: Tuesday, July 26, 2016 5:24:1

[Open-scap] Latest OpenSCAP changes to speed up SSG builds

2016-07-26 Thread Martin Preisler
Perhaps it would be worth it to deploy this on our Jenkins slaves even before it hits releases? What do you think? -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. ___ Open-scap-list mailing list Open-scap-list@redhat.com

Re: [Open-scap] New COPR repository for OpenSCAP projects

2016-07-19 Thread Martin Preisler
; > Jan Černý > Security Technologies | Red Hat, Inc. CC-ing scap-security-guide. The new COPR repo contains latest SSG packages and might be useful to our community members. The repo is: https://copr.fedorainfracloud.org/coprs/openscapmaint/openscap-latest/ Instructions on how to enable the re

Re: [Open-scap] process58_object is not supported

2016-05-12 Thread Martin Preisler
t; > Do you have an ETA when this process58_test will be supported? > > Currently, I am getting: “ OVAL object not > supported ” Hi Dragos, process and process58 tests are both fully supported. Could you paste your `./configure` output? Maybe some dependencies are missing or were no

Re: [Open-scap] openscap does not collect the uuid property

2016-05-06 Thread Martin Preisler
> The OpenSCAP 1.2.10 does not collect the uuid property: Hi, thanks for reporting. I have create a bug to track fixing this. See https://github.com/OpenSCAP/openscap/issues/410 -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. _

Re: [Open-scap] oscap-ssh based remediation killing remote server

2016-04-25 Thread Martin Preisler
ing login of the user you are scanning with? oscap-ssh doesn't check for that or handle that in any way. It will run all remediations even if it cuts you off ssh. -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. ___ Open-sca

Re: [Open-scap] compile - where is configure - 1.2.8

2016-04-05 Thread Martin Preisler
github tarball from the tag. The configure script is one of the major differences between the two. https://github.com/OpenSCAP/openscap/releases/download/1.2.8/openscap-1.2.8.tar.gz $ less openscap-1.2.8.tar.gz | grep configure -rwxrwxr-x jcerny/jcerny 977548 2016-01-18 09:26 openscap-1.2.8/c

Re: [Open-scap] OVAL content authoring tool

2016-03-29 Thread Martin Preisler
t of some 500+ OVAL rules. So, I am just > ensuring that I can make the best use of tools or processes already known to > the community. I recommend leveraging this community. I don't know if the project you will be working on is an open source project but if so we will be able (and happy) to

Re: [Open-scap] fix for solaris to use fts_sun.h

2016-03-18 Thread Martin Preisler
le. Which branch are you targeting? maint-1.0? -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list