Skip to content

Commit f188c9d

Browse files
Add procedure to get SCAP contents for Enterprise Linux from RPM (#4218)
https://github.com/ComplianceAsCode/content does not provide any SCAP contents for hosts running Rocky Linux. Instead, the Rocky Linux project packages SCAP contents as RPM. Refs PR #4193 (cherry picked from commit 0ab63db) Resolved a minor merge conflict by dropping changes in "guides/common/assembly_configuring-scap-contents.adoc". Instead, the procedure is part of "guides/doc-Managing_Security_Compliance/master.adoc". Fixed a broken xref.
1 parent 6088c5c commit f188c9d

File tree

3 files changed

+39
-0
lines changed

3 files changed

+39
-0
lines changed

guides/common/attributes-base.adoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -151,6 +151,7 @@
151151
:SmartProxy: Smart{nbsp}Proxy
152152
:SmartProxyServer: {SmartProxy}{nbsp}server
153153
:SmartProxyServers: {SmartProxyServer}s
154+
:ssg-file-name: ssg-rl10-ds.xml
154155
:ssg-version: 0.1.77
155156
:Team: {Project} community
156157
// Red Hat Insights
Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
:_mod-docs-content-type: PROCEDURE
2+
3+
[id="getting-scap-contents-for-enterprise-linux"]
4+
= Getting SCAP contents for {EL}
5+
6+
You can get the packaged SCAP Security Guide (SSG) for {EL} from its default operating system repositories.
7+
8+
// Example is for Rocky Linux because that's the only Client OS that is not part of https://github.com/ComplianceAsCode/content
9+
ifndef::orcharhino[]
10+
This example works for Rocky Linux 10.
11+
For AlmaLinux 10, you have to adjust the file name.
12+
endif::[]
13+
14+
.Prerequisites
15+
* Your host runs {EL}.
16+
+
17+
Alternatively, you can perform this procedure in a container on your local machine.
18+
* Your host has `dnf-command(download)` and `cpio` installed.
19+
20+
.Procedure
21+
. On your host running {EL}, download the packaged SCAP contents:
22+
+
23+
[options="nowrap", subs="+quotes,attributes,verbatim"]
24+
----
25+
$ dnf download scap-security-guide
26+
----
27+
. Extract the SCAP contents from the RPM package:
28+
+
29+
[options="nowrap", subs="+quotes,attributes,verbatim"]
30+
----
31+
$ rpm2cpio scap-security-guide* | cpio -iv --to-stdout ./usr/share/xml/scap/ssg/content/{ssg-file-name} > {ssg-file-name}
32+
----
33+
+
34+
This example extracts SCAP contents for {EL} 10.
35+
. Upload the data streams to {Project}.
36+
For more information, see xref:uploading-additional-scap-content-using-web-ui[].

guides/doc-Managing_Security_Compliance/master.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,8 @@ include::common/modules/proc_getting-supported-scap-contents-for-rhel.adoc[level
4949

5050
ifndef::satellite[]
5151
include::common/modules/proc_getting-scap-contents-from-upstream.adoc[leveloffset=+2]
52+
53+
include::common/modules/proc_getting-scap-contents-for-enterprise-linux.adoc[leveloffset=+2]
5254
endif::[]
5355

5456
include::common/modules/proc_uploading-additional-scap-content-using-web-ui.adoc[leveloffset=+2]

0 commit comments

Comments
 (0)