scap-security-guide April 2012

scap-security-guide@lists.fedorahosted.org

12 participants
70 discussions

Start a nNew thread

[PATCH 4/9] Mapped CCI-000169 to service_auditd_enabled
by Shawn Wells 24 Apr '12

24 Apr '12

1 0

[PATCH 3/9] Mapped CCI-001339 to audit group
by Shawn Wells 24 Apr '12

24 Apr '12

1 0

[PATCH 2/9] Mapped CCI-001338 to auditing group
by Shawn Wells 24 Apr '12

24 Apr '12

1 0

[PATCH] Fix tarball deps and tar.
by Spencer R. Shimko 24 Apr '12

24 Apr '12

Recursively expanded vars used as target deps are expanded early when make is constructing the dep graph. Thus, $(TAR_DEPS) will be empty when evaluated. For now use the $(DIST) as a quick fix. We need to cleanup all the deps as we pretty much ignore this in favor of targets that will always be ran. Signed-off-by: Spencer Shimko <sshimko(a)tresys.com> --- rhel6/src/Makefile | 6 ++---- 1 files changed, 2 insertions(+), 4 deletions(-) diff --git a/rhel6/src/Makefile b/rhel6/src/Makefile index 27d86af..9d75999 100644 --- a/rhel6/src/Makefile +++ b/rhel6/src/Makefile @@ -23,8 +23,6 @@ SRPM_OUTPUT_DIR ?= $(OUTPUT_DIR) # This file will be created by tar'ing up $(OUT)/ TARBALL = $(SRPM_OUTPUT_DIR)/$(DIST).tar.gz -# exhaustive list of deps for the RPM, used to determine if RPM needs to be rebuilt -TAR_DEPS = $(wildcard $(DIST)/*) RPM_DEPS := $(TARBALL) $(RPM_SPEC) Makefile RPM_TMPDIR ?= $(ROOT_DIR)/tmp @@ -126,8 +124,8 @@ dist: content guide tables tarball: $(TARBALL) -$(TARBALL): dist $(TAR_DEPS) - tar -czf $@ $(TAR_DEPS) +$(TARBALL): dist $(DIST) + tar -czf $@ $(DIST) srpm: $(SRPM_OUTPUT_DIR)/$(DIST)-$(RELEASE).src.rpm -- 1.7.1

2 2

[PATCH 0/1] Added 800-53 references where missing to rules in partitions.xml
by Willy Santos 24 Apr '12

24 Apr '12

Added references to NIST 800-53 to rules that did not have them. Signed-off-by: Willy Santos <wsantos(a)redhat.com> Willy Santos (1): Added 800-53 references where missing. rhel6/src/input/system/permissions/partitions.xml | 14 +++++++------- 1 files changed, 7 insertions(+), 7 deletions(-) -- 1.7.7.6

1 1

[PATCH 2High Priority: Fix for "tar: Cowardly refusing to create an empty archive" from 'make tarball'
by Shawn Wells 23 Apr '12

23 Apr '12

3 2

[PATCH] Updated Makefile to include all policymaps in dist
by Shawn Wells 23 Apr '12

23 Apr '12

3 2

(no subject)
by Mike Palmiotto 22 Apr '12

22 Apr '12

Incomplete Milestone Guidance for Tickets #23,26,40

4 10

[PATCH 0/4] RPM spec and Makefile updates
by Spencer R. Shimko 20 Apr '12

20 Apr '12

This series of patches modifies the method for generating RPMs to remove hard-coded directory structure expectations and some other minor clean ups. Spencer Shimko (4): Switch rpm gen to use command-line macro defs. Add generated files to ignore list. Switch from curly braces to parens in Makefile Minor cleanups in Makefile rhel6/src/.gitignore | 2 + rhel6/src/Makefile | 201 ++++++++++++-------- .../input/rpmbuild/scap-security-guide-alpha.spec | 11 +- 3 files changed, 132 insertions(+), 82 deletions(-)

2 5

Request for those submitting patches and ACK/NACK model
by Spencer R. Shimko 20 Apr '12

20 Apr '12

All, Some patches have been posted to the list as attachments instead of in-line. This makes it very difficult to provide feedback on parts of the patch. I'd like to see everyone submitting patches use "git format-patch" and "git send-email.. Additionally a [PATCH 0/?] should be generated and a signed-off-by line added. Basic workflow to accomplish this: 1. Modify code. 2. Pull from master and rebase your patches on top of any changes pulled down. 3. $ git format-patch --cover-letter -s HEAD~4 (where 4 equals the number of commits you submitting to the list) 4. $ git send-email --to "scap-security-guide(a)lists.fedorahosted.org <scap-security-guide(a)lists.fedorahosted.org>" *.patch I've had some discussions with Jeff and we are moving to the ACK/NACK model. If you have commit access please wait for an ACK from another maintainer prior to pushing to master. If the person submitting the patch does not have commit access the maintainer providing the ACK should push it into master. Thanks, --Spencer

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide April 2012