Hi, I have finished the first phase of Windows porting and have executables that are actually quite useful for content customization. The next step is to enable remote scanning from Windows.
Read more, see the screenshots and download the testing executables at: http://martin.preisler.me/2015/02/openscap-and-scap-workbench-on-windows/
On 02/18/2015 03:00 PM, Martin Preisler wrote:
Hi, I have finished the first phase of Windows porting and have executables that are actually quite useful for content customization. The next step is to enable remote scanning from Windows.
Read more, see the screenshots and download the testing executables at: http://martin.preisler.me/2015/02/openscap-and-scap-workbench-on-windows/
Wow! Very impressive!
----- Original Message -----
From: "Simon Lukasik" slukasik@redhat.com To: "Martin Preisler" mpreisle@redhat.com, "open-scap-list" open-scap-list@redhat.com Cc: scap-workbench@lists.fedorahosted.org, scap-security-guide@lists.fedorahosted.org Sent: Thursday, February 19, 2015 9:34:46 AM Subject: Re: [Open-scap] Windows support in OpenSCAP and SCAP Workbench
On 02/18/2015 03:00 PM, Martin Preisler wrote:
Hi, I have finished the first phase of Windows porting and have executables that are actually quite useful for content customization. The next step is to enable remote scanning from Windows.
Read more, see the screenshots and download the testing executables at: http://martin.preisler.me/2015/02/openscap-and-scap-workbench-on-windows/
Wow! Very impressive!
I second to Simon. Looks very nice. Great work!
Do we already know a way how this will get shipped? Is there a plan to build also MS Windows zips for each upcoming OpenSCAP / scap-workbench releases? Or in the future it should be possible to build also Windows binaries right from the git repo?
Thanks, Jan. -- Jan iankko Lieskovsky / Red Hat Security Technologies Team
-- Simon Lukasik Security Technologies, Red Hat, Inc. https://github.com/isimluk
Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list
----- Original Message -----
From: "Jan Lieskovsky" jlieskov@redhat.com To: "Martin Preisler" mpreisle@redhat.com Cc: "open-scap-list" open-scap-list@redhat.com, scap-workbench@lists.fedorahosted.org, scap-security-guide@lists.fedorahosted.org, "Simon Lukasik" slukasik@redhat.com Sent: Thursday, February 19, 2015 9:44:11 AM Subject: Re: [Open-scap] Windows support in OpenSCAP and SCAP Workbench
----- Original Message -----
From: "Simon Lukasik" slukasik@redhat.com To: "Martin Preisler" mpreisle@redhat.com, "open-scap-list" open-scap-list@redhat.com Cc: scap-workbench@lists.fedorahosted.org, scap-security-guide@lists.fedorahosted.org Sent: Thursday, February 19, 2015 9:34:46 AM Subject: Re: [Open-scap] Windows support in OpenSCAP and SCAP Workbench
On 02/18/2015 03:00 PM, Martin Preisler wrote:
Hi, I have finished the first phase of Windows porting and have executables that are actually quite useful for content customization. The next step is to enable remote scanning from Windows.
Read more, see the screenshots and download the testing executables at: http://martin.preisler.me/2015/02/openscap-and-scap-workbench-on-windows/
Wow! Very impressive!
Thanks. I was surprised how easy it was to port.
I second to Simon. Looks very nice. Great work!
Do we already know a way how this will get shipped? Is there a plan to build also MS Windows zips for each upcoming OpenSCAP / scap-workbench
I plan to make a proper MSI installer for workbench releases in the future. For the super early testing phase I will just provide zips because creating the installer is a lot of added complexity I don't need right now.
Not sure if plain OpenSCAP windows binaries are useful at this stage. The plan is to ship workbench with openscap bundled inside.
Do you think oscap.exe with no evaluation support is useful?
releases? Or in the future it should be possible to build also Windows binaries right from the git repo?
That is already possible with master branches of both openscap and workbench.
On 2/19/15 4:41 AM, Martin Preisler wrote:
----- Original Message -----
From: "Jan Lieskovsky" jlieskov@redhat.com To: "Martin Preisler" mpreisle@redhat.com Cc: "open-scap-list" open-scap-list@redhat.com, scap-workbench@lists.fedorahosted.org, scap-security-guide@lists.fedorahosted.org, "Simon Lukasik" slukasik@redhat.com Sent: Thursday, February 19, 2015 9:44:11 AM Subject: Re: [Open-scap] Windows support in OpenSCAP and SCAP Workbench
----- Original Message -----
From: "Simon Lukasik" slukasik@redhat.com To: "Martin Preisler" mpreisle@redhat.com, "open-scap-list" open-scap-list@redhat.com Cc: scap-workbench@lists.fedorahosted.org, scap-security-guide@lists.fedorahosted.org Sent: Thursday, February 19, 2015 9:34:46 AM Subject: Re: [Open-scap] Windows support in OpenSCAP and SCAP Workbench
On 02/18/2015 03:00 PM, Martin Preisler wrote:
Hi, I have finished the first phase of Windows porting and have executables that are actually quite useful for content customization. The next step is to enable remote scanning from Windows.
Read more, see the screenshots and download the testing executables at: http://martin.preisler.me/2015/02/openscap-and-scap-workbench-on-windows/
Wow! Very impressive!
+∞, 👏👏👏
Thanks. I was surprised how easy it was to port.
I second to Simon. Looks very nice. Great work!
Do we already know a way how this will get shipped? Is there a plan to build also MS Windows zips for each upcoming OpenSCAP / scap-workbench
I plan to make a proper MSI installer for workbench releases in the future. For the super early testing phase I will just provide zips because creating the installer is a lot of added complexity I don't need right now.
Not sure if plain OpenSCAP windows binaries are useful at this stage. The plan is to ship workbench with openscap bundled inside.
Do you think oscap.exe with no evaluation support is useful?
Incredibly useful!
Many within the US Gov are using Windows desktops. This gives them a GUI tool to tailor their content and either SCP it back to their server or throw it into RHN Satellite. HUGE usability improvement!
Also, having a "OpenSCAP for Windows v1" that only does content tailoring is still very worthwhile. This would allow customers to get the Windows build on their approved product list (which frequently takes forever!), ensuring that when v1.future or v2.0 comes out, the software is already a known entity.
releases? Or in the future it should be possible to build also Windows binaries right from the git repo?
That is already possible with master branches of both openscap and workbench.
----- Original Message -----
From: "Shawn Wells" shawn@redhat.com Cc: scap-workbench@lists.fedorahosted.org, scap-security-guide@lists.fedorahosted.org, "open-scap-list" open-scap-list@redhat.com Sent: Saturday, February 21, 2015 3:33:57 AM Subject: Re: [Open-scap] Windows support in OpenSCAP and SCAP Workbench
[snip]
Do you think oscap.exe with no evaluation support is useful?
Incredibly useful!
Many within the US Gov are using Windows desktops. This gives them a GUI tool to tailor their content and either SCP it back to their server or throw it into RHN Satellite. HUGE usability improvement!
Yeah but that is SCAP Workbench that does the tailoring. oscap.exe is not used at all in the current Windows build of workbench.
I will still build it and include it in the future but the only valid use cases I can think of are oscap info, datastream splitting and various validations.
Also, having a "OpenSCAP for Windows v1" that only does content tailoring is still very worthwhile. This would allow customers to get the Windows build on their approved product list (which frequently takes forever!), ensuring that when v1.future or v2.0 comes out, the software is already a known entity.
Is there anything I can do to make workbench+openscap more likely to be added into approved product lists? What are the common requirements?
----- Original Message -----
From: "Martin Preisler" mpreisle@redhat.com To: "open-scap-list" open-scap-list@redhat.com Cc: scap-workbench@lists.fedorahosted.org Sent: Wednesday, February 18, 2015 3:00:53 PM Subject: Windows support in OpenSCAP and SCAP Workbench
[snip]
Remote scan sort of works now, if you are willing to type your credentials over and over again. Definitely needs to be fixed in the future. Opening Windows content works now, had to fix openscap to support all the tests.
See the new blog post with more screenshots: http://martin.preisler.me/2015/03/openscap-and-scap-workbench-on-windows-par...
scap-workbench@lists.fedorahosted.org
-
Jan Lieskovsky -
Martin Preisler -
Shawn Wells -
Šimon Lukašík