[Open-scap] Editing XCCDF/OVAL

[Peter Vrabec]

Hi Svan,

scap-workbench is a tool developed by us. It allows user to do the local scan, 
"tailor"(adjust) XCCDF checklist profile and edit XCCDF content.

> Hi Sven,
> 
> You might want to check out the SCAP Workbench
> (https://fedorahosted.org/scap-workbench/), the Recommendation Tracker
> (http://sourceforge.net/projects/rectracker/), 
rectracker is a new to me. It looks it use mysql. Good.

> and the eSCAPe editor
> (http://www.g2-inc.com/escape)?

What all these have in common is that they are all GUI tools. I'd like to 
point you at this approach:

https://fedorahosted.org/scap-security-guide/

It's a combination of: Makefiles, XSLT, XML, SCC and GIT. 
Please don't get scared now. It might look like a mess but it's not. ;) 
Personally, I like it more then GUI approach. 

* Version control system comes very handy in process of content development. 
(Undo, Redo, History, ...)
* SCC gets you thru OVAL disadventages. 
* XML for XCCDF is doable. You can also use XML editor. 
* XSLT for html.
* Finally, Makefile to "build" it a all.

Please take a look and I'll be glad if you share your opinion with us.

Peter.



> Hope this helps.
> 
> Thanks,
> 
> Danny
> 
> -----Original Message-----
> From: open-scap-list-bounces at redhat.com
> [mailto:open-scap-list-bounces at redhat.com] On Behalf Of Sven Vermeulen
> Sent: Monday, October 31, 2011 12:03 PM
> To: open-scap-list at redhat.com
> Subject: [Open-scap] Editing XCCDF/OVAL
> 
> Hi guys,
> 
> I'm currently trying to get a hardening guide up (through XCCDF) with
> support for validation (through OVAL) for the Gentoo distribution. For the
> time being, I'm editing the document through whatever favorite text editor
> is out there (in my case, vim) but this is becoming quite an effort.
> 
> What kind of tools are out there for developing XCCDF/OVAL content? I have
> seen a few graphical tools (but they didn't help much beyond automated id
> generation) and Tresys' SCC, but that didn't reduce the complexity as much.
> 
> Wkr,
> 	Sven Vermeulen
> 
> _______________________________________________
> Open-scap-list mailing list
> Open-scap-list at redhat.com
> https://www.redhat.com/mailman/listinfo/open-scap-list