Merge pull request #1356 from jan-cerny/oscap_podman_cmake

Add `oscap-podman` to CMake and add man page for `oscap-podman`

Author: matusmarhefka

CMakeLists.txt

@@ -289,6 +289,7 @@ endif()
 cmake_dependent_option(ENABLE_OSCAP_UTIL_AS_RPM "enable the scap-as-rpm utility, this lets you package SCAP data as RPMs" ON "NOT WIN32" OFF)
 cmake_dependent_option(ENABLE_OSCAP_UTIL_SSH "enables the oscap-ssh utility, this lets you scan remote machines over ssh" ON "NOT WIN32" OFF)
 cmake_dependent_option(ENABLE_OSCAP_UTIL_VM "enables the oscap-vm utility, this lets you scan VMs and VM storage images" ON "NOT WIN32" OFF)
+cmake_dependent_option(ENABLE_OSCAP_UTIL_PODMAN "enables the oscap-podman utility, this lets you scan Podman containers and container images" ON "NOT WIN32" OFF)
 cmake_dependent_option(ENABLE_OSCAP_UTIL_CHROOT "enables the oscap-chroot utility, this lets you scan entire chroots using offline scanning" ON "NOT WIN32" OFF)
 
 # ---------- TEST-SUITE SWITCHES
@@ -355,6 +356,7 @@ message(STATUS "oscap-docker: ${ENABLE_OSCAP_UTIL_DOCKER}")
 message(STATUS "scap-as-rpm: ${ENABLE_OSCAP_UTIL_AS_RPM}")
 message(STATUS "oscap-ssh: ${ENABLE_OSCAP_UTIL_SSH}")
 message(STATUS "oscap-vm: ${ENABLE_OSCAP_UTIL_VM}")
+message(STATUS "oscap-podman: ${ENABLE_OSCAP_UTIL_PODMAN}")
 message(STATUS "oscap-chroot: ${ENABLE_OSCAP_UTIL_CHROOT}")
 message(STATUS " ")
 

utils/CMakeLists.txt

@@ -71,6 +71,14 @@ if(ENABLE_OSCAP_UTIL_VM)
 		DESTINATION "${CMAKE_INSTALL_MANDIR}/man8"
 	)
 endif()
+if(ENABLE_OSCAP_UTIL_PODMAN)
+	install(PROGRAMS "oscap-podman"
+		DESTINATION ${CMAKE_INSTALL_BINDIR}
+	)
+	install(FILES "oscap-podman.8"
+		DESTINATION "${CMAKE_INSTALL_MANDIR}/man8"
+	)
+endif()
 if(ENABLE_OSCAP_UTIL_AS_RPM)
 	install(PROGRAMS "scap-as-rpm"
 		DESTINATION ${CMAKE_INSTALL_BINDIR}

utils/oscap-podman.8

@@ -0,0 +1,29 @@
+.TH oscap-podman "8" "June 2019" "Red Hat, Inc." "System Administration Utilities"
+
+.SH NAME
+oscap-podman \- Tool for offline SCAP evaluation of Podman container images and Podman containers
+.SH DESCRIPTION
+oscap-podman runs oscap tool on a given container image or container.
+
+This script cannot run in rootless mode.
+
+.SH USAGE
+
+Usage of the tool mimics usage and options of oscap(8) tool.
+
+.SS Compliance scan of Podman container image:
+oscap-podman IMAGE_NAME OSCAP_ARGUMENT [OSCAP_ARGUMENT...]
+
+.SS Compliance scan of Podman container:
+oscap-podman CONTAINER_NAME OSCAP_ARGUMENT [OSCAP_ARGUMENT...]
+
+Refer to oscap(8) to learn about OSCAP_ARGUMENT options.
+
+.SH REPORTING BUGS
+.nf
+Please report bugs using https://github.com/OpenSCAP/openscap/issues
+
+.SH AUTHORS
+.nf
+Jan Černý <[email protected]>
+.fi