xsltproc and bash-ks

[Spencer R. Shimko]

Jeff,

Back on September 4th you submitted a patch that commented out the xsltproc for generating the fixes.  The commit message wasn't clear on the rationale for this removal.  The change set in question is here:

https://fedorahosted.org/scap-security-guide/changeset/19b174a275c6d60d5a42d...

I'm referring to the change in line 17/18.  Was there a problem with the transform?

Thanks,
--Spencer

[Steve Grubb]

On Thursday, September 20, 2012 07:40:04 PM Spencer R. Shimko wrote:
> Jeff,
>
> Back on September 4th you submitted a patch that commented out the xsltproc
> for generating the fixes.  The commit message wasn't clear on the rationale
> for this removal.  The change set in question is here:
>
> https://fedorahosted.org/scap-security-guide/changeset/19b174a275c6d60d5a42d
> 47930defac963b93ce1
>
> I'm referring to the change in line 17/18.  Was there a problem with the
> transform?

I have no idea if there was anything wrong with the document or not, but in
the interest of trying to be helpful, I thought I would mention that oscap
tool can generate fix files using oscap xccdf generate fix ...

One person even blogged about it here:
http://blog.siphos.be/2011/12/supporting-fix-scripts-for-xccdf-content-and-m...

-Steve

[Jeffrey Blank]

Hi Spencer,

The only rationale was that I wasn't aware of anyone using it, and also
because the fixes file that it references wasn't at all complete.  I had
considered deleting both fix insertion lines just to keep things as
simple as possible in the Makefile.  But I'm perfectly happy to keep it
in or change it if it helps you.

The complication of adding OCIL generation to the Makefile will likely
prompt me to re-work some of the Makerules before too long.  Renaming
all the output files to comply with (IIRC) 800-126 is also long overdue.

Please also be aware that David is working on making some of the messier
Rules (and OVAL checks) more granular, so I'd keep an eye out for that.
 I think we both know that developing remediation content prior to
comprehensive QA of the SCAP checking content made any bumps so very
predictable, but we certainly intend to be responsive with regard to
interoperation with remediation tooling.

Jeff

On 09/20/2012 03:40 PM, Spencer R. Shimko wrote:
> Jeff,
>
> Back on September 4th you submitted a patch that commented out the
> xsltproc for generating the fixes.  The commit message wasn't clear
> on the rationale for this removal.  The change set in question is
> here:
>
> https://fedorahosted.org/scap-security-guide/changeset/19b174a275c6d60d5a42d...
>
> I'm referring to the change in line 17/18.  Was there a problem with
> the transform?
>
> Thanks, --Spencer _______________________________________________ 
> scap-security-guide mailing list 
> [e-mail] 
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide