In the rhel7 rpm we use the ssgproject.org namespace in the data stream file. Should we change that to RedHat.com or at least open-scap.org?
I'd concur with the namespace change to support delineation with other projects. The specific namespace is important: there are multiple projects, such as PCI-DSS ongoing.
Bill (aka billd@redhat.com)
On Jun 28, 2016, at 16:03, Shawn Wells swells@redhat.com wrote:
In the rhel7 rpm we use the ssgproject.org namespace in the data stream file. Should we change that to RedHat.com or at least open-scap.org? -- SCAP Security Guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/scap-security-guide@lists.fedorah... https://github.com/OpenSCAP/scap-security-guide/
Hey Shawn,
----- Original Message -----
From: "Shawn Wells" swells@redhat.com To: "scap-security-guide" scap-security-guide@lists.fedorahosted.org Sent: Wednesday, June 29, 2016 1:03:43 AM Subject: SSG namespace in rhel7 data steam
In the rhel7 rpm we use the ssgproject.org namespace in the data stream file.
Nice catch.
Should we change that to RedHat.com or at least open-scap.org?
FWIW for me I like the latter one better (since people might get wondering why e.g. Debian/8 benchmark has RedHat.com in the datastream namespace). Especially when the Debian/8 benchmark wasn't contributed by Red Hat AFAIK.
Having separate strings in datastream namespaces for various products isn't a way to go either IMHO (since it would introduce worthless? complexity).
From the above the latter proposal comes out like reasonable alternative.
Thank you && Regards, Jan -- Jan iankko Lieskovsky / Red Hat Security Technologies Team
-- SCAP Security Guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/scap-security-guide@lists.fedorah... https://github.com/OpenSCAP/scap-security-guide/
scap-security-guide@lists.fedorahosted.org
-
Bill Diamond -
Jan Lieskovsky -
Shawn Wells