ComplianceAsCode Content 0.1.58

[Watson Sato]

Hello all,

ComplianceAsCode/content 0.1.58 has been released:

Among the highlights of this release are:
- Support for Script Checking Engine (SCE)
- Split RHEL 8 CIS profile using new controls file format
- CIS Profiles for SLE12
- Initial Ubuntu 20.04 STIG Profiles
- Addition of an automated CCE adder

For full release notes, please have a look at:
- https://github.com/ComplianceAsCode/content/releases/tag/v0.1.58

Zip archive with pre-built content:
-
https://github.com/ComplianceAsCode/content/releases/download/v0.1.58/scap-s...

Zip archive with pre-built content using only OVAL-5.10:
-
https://github.com/ComplianceAsCode/content/releases/download/v0.1.58/scap-s...

Thank you to everyone who contributed!

[Watson Sato]

Hello folks,

I'd just like to let you know that the Compliance As Code Blog
https://complianceascode.github.io/ has a new post about content 0.1.58:
https://complianceascode.github.io/template/2021/09/30/release-0.1.58.html

Check it out for a more detailed write up about some of the newly released
bits.

On Fri, Sep 24, 2021 at 5:04 PM Watson Sato  wrote:
> Hello all,
>
> ComplianceAsCode/content 0.1.58 has been released:
>
> Among the highlights of this release are:
> Support for Script Checking Engine (SCE)
> Split RHEL 8 CIS profile using new controls file format
> CIS Profiles for SLE12
> Initial Ubuntu 20.04 STIG Profiles
> Addition of an automated CCE adder
>
> For full release notes, please have a look at:
> https://github.com/ComplianceAsCode/content/releases/tag/v0.1.58
>
> Zip archive with pre-built content:
>
> https://github.com/ComplianceAsCode/content/releases/download/v0.1.58/scap-s...
>
> Zip archive with pre-built content using only OVAL-5.10:
>
> https://github.com/ComplianceAsCode/content/releases/download/v0.1.58/scap-s...
>
> Thank you to everyone who contributed!
>
> --
>
> Watson Sato
> https://www.redhat.com

Derivative Distros

[Jon Thompson]

Are there any articles or reading on how to create content for downstream
distributions like Rocky and Alma?

Derivative Distros

[Gabriel Gaspar Becker]

This is most likely what CentOS (not CentOS Stream) is in the
ComplianceAsCode, it's a derivative product of RHEL. There are no official
documentation for that, but you can quickly identify places where the
CentOS derivative is enabled and do the same for these other distributions,
they will inherit any content applicable for the given RHEL version for
example.

a useful command and useful links:

$ ./build_product rhel8 --derivatives

https://github.com/ComplianceAsCode/content/blob/master/CMakeLists.txt#L98
https://github.com/ComplianceAsCode/content/blob/master/products/rhel8/CMake...

On Thu, Nov 4, 2021 at 10:51 PM Jon Thompson  wrote:
> Are there any articles or reading on how to create content for downstream
> distributions like Rocky and Alma?
> _______________________________________________
> scap-security-guide mailing list --
> [e-mail]
> To unsubscribe send an email to
> [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure