[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#853903: RFS: scap-security-guide/0.1.31-6 [ITP] -- security guides and conformity checks using SCAP standard



Hello,


sorry for not doing this earlier, but life happened, some
showstoppers were preventing me from uploading them and somebody else
sponsored it.
(and new packages can't go in Stretch, so during freeze there is no real hurry
to upload them)

However (even if I didn't upload the package), I would like to see something fixed:

e.g.
Build-Depends: debhelper (>=9), 

^^ it is 10 now (also compat level should be 10)

bash (>=4.3), sed (>=4.2)
^^

the version is satisfied in old-old-stable already, and they should be part of essential packages,
so don't need to manually specify them

same happens for runtime dependencies:
Suggests: ansible (>= 2), puppet (>= 4.8), bash (>= 4.4)

ansible is satisfied in stable and stable-bpo, so I would just remove that dependency, same for puppet
and I would just remove bash

(this package can't migrate to Stretch because of freeze, it can't go in stable right now)
it might end in Buster, and then go in Stretch backports, or Jessie-backports-sloppy, and all the above
versions will be satisfied.



BTW the README.Debian seems still not pointing to real locations:

# oscap xccdf eval --profile <profilename> \
--cpe /usr/share/<package-name>/ssg-<target>-cpe-dictionary.xml \
--results <resulsfile>.xml \
--report <reportfile>.html \
/usr/share/<package-name>/ssg-<target>-xccdf.xml


cheers!

G.


Reply to: