Wazuh: oscap wodle: tailoring files

Created on 27 Apr 2017 · 4Comments · Source: wazuh/wazuh

openscap supports tailoring files, which can be used to change the behaviour of SCAP content, e.g. the default ssg-* rules. (un-selecting rules, etc)

https://static.open-scap.org/openscap-1.0/oscap_user_manual.html#_how_to_tailor_source_data_stream

perhaps, add the path as attribute to the tag?
https://github.com/wazuh/wazuh/blob/4f0529ddde3a01b90dbe09d83a755bc86099a412/etc/templates/config/debian/8/wodle-openscap.template#L7

community coropenscap enhancement

Source

hex2a

Most helpful comment

Hi @hex2a,

that is a great suggestion, we may add a tag like <tailor> to the OpenSCAP content item:

<content type="xccdf" path="ssg-rhel6-ds.xml">
  <profile>xccdf_org.ssgproject.content_profile_C2S_customized</profile>
  <tailor>ssg-rhel6-ds-tailoring.xml</tailor>
</content>

We will add it to the roadmap. Thank you for your feedback.

Best regards.

vikman90 on 2 May 2017

👍2

All 4 comments

Hi @hex2a,

that is a great suggestion, we may add a tag like <tailor> to the OpenSCAP content item:

<content type="xccdf" path="ssg-rhel6-ds.xml">
  <profile>xccdf_org.ssgproject.content_profile_C2S_customized</profile>
  <tailor>ssg-rhel6-ds-tailoring.xml</tailor>
</content>

We will add it to the roadmap. Thank you for your feedback.

Best regards.

vikman90 on 2 May 2017

👍2

Any plan or timeline to implement this feature ?

kaneda-fr on 4 Oct 2018

👍1

Any updates to the time scale for this feature @vikman90 ? I think it would be really useful! :)

32bitbradley on 17 Jun 2019

👍1

Hello @kaneda-fr, @32bitbradley and @hex2a,

sorry for the late response.

We are going to assign this issue to a project and we and start working on it as soon as possible. We will update this thread with more information.

Kind regards,

Juan Pablo Sáez