SCAP for RaspberryPI?

[Foxy Lady]

Hi, as RaspberryPI is getting more and more used in amateur- and
educational IOT setups it would be very helpful to have SCAP available on
that platform, but it looks like there is no SCAP for Raspberry Pi?

I hope I am wrong?

Thanks for your help!
Have a nice day,
Foxy Lady

[Alexander Bergmann]

Hello Foxy Lady,

basically the OpenSCAP tools can be compiled on any platform. I'm not
sure if it is directly available on Raspbian, but on openSUSE it would
work out of the box.

https://en.opensuse.org/HCL:Raspberry_Pi3

Regards,
Alex~

On Mon, Nov 25, 2019 at 06:46:13PM +0100, Foxy Lady wrote:
> Hi, as RaspberryPI is getting more and more used in amateur- and
> educational IOT setups it would be very helpful to have SCAP available on
> that platform, but it looks like there is no SCAP for Raspberry Pi?
>
> I hope I am wrong?
>
> Thanks for your help!
> Have a nice day,
> Foxy Lady
> scap-security-guide mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...

[Foxy Lady]

Thanks, Alex, I had the same impression, but want to avoid having to
maintain packages myself, there are too many things already that I have to
maintain.
Is there no interest in supporting Raspberry Pi by the maintainers of this
project? I read about Raspis as the entry drug to IOT everywhere - and see
it in educational settings, all places where it would be of extraordinary
value to implement scap security and make people aware!
Thank you very much for your attention!

On Mon, Nov 25, 2019 at 8:52 PM Alexander Bergmann 
wrote:
> Hello Foxy Lady,
>
> basically the OpenSCAP tools can be compiled on any platform. I'm not
> sure if it is directly available on Raspbian, but on openSUSE it would
> work out of the box.
>
> https://en.opensuse.org/HCL:Raspberry_Pi3
>
> Regards,
> Alex~
>
> On Mon, Nov 25, 2019 at 06:46:13PM +0100, Foxy Lady wrote:
> > Hi, as RaspberryPI is getting more and more used in amateur- and
> > educational IOT setups it would be very helpful to have SCAP available on
> > that platform, but it looks like there is no SCAP for Raspberry Pi?
> >
> > I hope I am wrong?
> >
> > Thanks for your help!
> > Have a nice day,
> > Foxy Lady
> > scap-security-guide mailing list --
>
> [e-mail]
> > To unsubscribe send an email to
>
> [e-mail]
> > Fedora Code of Conduct:
>
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
>
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>
> --
> Alexander Bergmann 
> Security Engineer, GPG: E30A 65A4 0F50 0066 B2B5  F614 DE54 E875 9FFA 4886
> SUSE Software Solutions Germany GmbH
> Maxfeldstr. 5, 90409 Nuremberg, Germany
> (HRB 36809, AG Nürnberg)
> Managing Director: Felix Imendörffer

[Alexander Bergmann]

Hi,

The development of the OpenSCAP tools and the integration into a
distribution are two pair of shoes. There are so may Linux distributions
that it would make absolutely no sense to provide packages to all of
them. Furthermore, to build packages is actually part of the
distribution workflow.

I've checked and OpenSCAP is already available within Rasbian. The
following command should do the trick.

#> apt-get install libopenscap8

Regards,
Alex~

On Tue, Nov 26, 2019 at 01:13:08PM +0100, Foxy Lady wrote:
> Thanks, Alex, I had the same impression, but want to avoid having to
> maintain packages myself, there are too many things already that I have to
> maintain.
> Is there no interest in supporting Raspberry Pi by the maintainers of this
> project? I read about Raspis as the entry drug to IOT everywhere - and see
> it in educational settings, all places where it would be of extraordinary
> value to implement scap security and make people aware!
> Thank you very much for your attention!
>
> On Mon, Nov 25, 2019 at 8:52 PM Alexander Bergmann 
> wrote:
> > Hello Foxy Lady,
> >
> > basically the OpenSCAP tools can be compiled on any platform. I'm not
> > sure if it is directly available on Raspbian, but on openSUSE it would
> > work out of the box.
> >
> > https://en.opensuse.org/HCL:Raspberry_Pi3
> >
> > Regards,
> > Alex~
> >
> > On Mon, Nov 25, 2019 at 06:46:13PM +0100, Foxy Lady wrote:
> > > Hi, as RaspberryPI is getting more and more used in amateur- and
> > > educational IOT setups it would be very helpful to have SCAP available on
> > > that platform, but it looks like there is no SCAP for Raspberry Pi?
> > >
> > > I hope I am wrong?
> > >
> > > Thanks for your help!
> > > Have a nice day,
> > > Foxy Lady
> > > scap-security-guide mailing list --
> >
> > [e-mail]
> > > To unsubscribe send an email to
> >
> > [e-mail]
> > > Fedora Code of Conduct:
> >
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> >
> > https://lists.fedorahosted.org/archives/list/[e-mail]...
> >
> > --
> > Alexander Bergmann 
> > Security Engineer, GPG: E30A 65A4 0F50 0066 B2B5  F614 DE54 E875 9FFA 4886
> > SUSE Software Solutions Germany GmbH
> > Maxfeldstr. 5, 90409 Nuremberg, Germany
> > (HRB 36809, AG Nürnberg)
> > Managing Director: Felix Imendörffer
> scap-security-guide mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...

[Shawn Wells]

On 11/26/19 7:13 AM, Foxy Lady wrote:
> Thanks, Alex, I had the same impression, but want to avoid having to 
> maintain packages myself, there are too many things already that I 
> have to maintain.
> Is there no interest in supporting Raspberry Pi by the maintainers of 
> this project? I read about Raspis as the entry drug to IOT everywhere
> and see it in educational settings, all places where it would be of
>
> extraordinary value to implement scap security and make people aware!
> Thank you very much for your attention!

With Rasberry Pi now a first-class citizen of Fedora [0], very 
surprising the OpenSCAP and scap-security-guide packages aren't being 
built automatically.

The build system *should* be generating packages for every Fedora 
supported architecture. What's needed to enable that?

Foxy, note there are two independent communities. One is for the 
OpenSCAP scanner at [1], whereas this is for the scanning content itself 
[2].

Should be a small lift update the content to support. Perhaps by 
updating the CPEs for both OpenSCAP and ComplianceAsCode?

[0] https://fedoraproject.org/wiki/Architectures/ARM/Raspberry_Pi

[1] https://github.com/openscap/openscap

[2] https://github.com/ComplianceAsCode/content

[3] 
https://github.com/ComplianceAsCode/content/blob/master/rhel8/cpe/rhel8-cpe-...