4:27 p.m.
The need for documentation has increased as the project matures and
gained popularity. To this end a "User Guide" and a "Developers Guide"
has taken shape. The initial code dump (original patch was ~4MB, hence
not posting to list first!):
https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/docs
This initial patch should provide a base framework to build out these
documents, and should be considered alpha/draft. The intent is to
provide a User Guide which comprehensively documents the usage of SSG,
and a Developers Guide that details out our build process, coding
standards, and other information a new project member would find useful.
This code is currently running at http://docs.ssgproject.org/, however I
can't stress enough the need to consider this alpha/beta at best! At
some point Jenkins may be setup to push doc updates to
docs.ssgproject.org .... help would be much appreciated if anyone knows
Jenkins!
8:28 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Thu, Nov 07, 2013 at 05:27:42PM -0500, Shawn Wells wrote:
The need for documentation has increased as the project matures and
gained popularity. To this end a "User Guide" and a "Developers
Guide" has taken shape. The initial code dump (original patch was
~4MB, hence not posting to list first!):
https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/docs
This is great news. I'll take a read through this soon.
It appears (based on the website) that this is DocBook XML (and Publican for the
renderer). I'm fluent in DocBook XML so if anyone needs anything added but
doesn't feel comfortable writing it please shoot it my way for markup.
Are we going to start using a ticketing system of some kind to track additions (to docs
and/or the rules) or just keep things on the mailing list?
- -- Eric
- --------------------------------------------------
Eric "Sparks" Christensen
Red Hat, Inc - Product Security Team
sparks(a)redhat.com - sparks(a)fedoraproject.org
097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=WAKC
-----END PGP SIGNATURE-----
10:20 p.m.
On 11/7/13, 9:28 PM, Eric H. Christensen wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Thu, Nov 07, 2013 at 05:27:42PM -0500, Shawn Wells wrote:
> The need for documentation has increased as the project matures and
> gained popularity. To this end a "User Guide" and a "Developers
> Guide" has taken shape. The initial code dump (original patch was
> ~4MB, hence not posting to list first!):
> https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/docs
This is great news. I'll take a read through this soon.
It appears (based on the website) that this is DocBook XML (and Publican for the
renderer). I'm fluent in DocBook XML so if anyone needs anything added but
doesn't feel comfortable writing it please shoot it my way for markup.
Spot on
for both points. Based upon a recommendation from Gary some time
ago, I went ahead and purchased a copy of Oxygen XML Editor... best.
thing. ever. Native editing of DocBook. Any tips/tools you use for
editing DocBook would be most welcome.
On the content side, converting the Workbook to DocBook has been on the
to do list for at least 6 months. I really don't know how much effort
that'd be... here are copies of the content:
ODT @
http://people.redhat.com/swells/2013-03-25%20SCAP%20Workshop%20-%20Course...
PDF @
http://blog-shawndwells.rhcloud.com/wp-content/uploads/2013/07/SCAP-Works...
How much work do you think that'd be? I tried OpenOffice's ODT->DocBook
conversion.... absolutely no luck.
Are we going to start using a ticketing system of some kind to track
additions (to docs and/or the rules) or just keep things on the mailing list?
https://fedorahosted.org/scap-security-guide/newticket
https://fedorahosted.org/scap-security-guide/report/1
8:43 a.m.
New subject: SCAP & STIG Workbook
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Thu, Nov 07, 2013 at 11:20:09PM -0500, Shawn Wells wrote:
On the content side, converting the Workbook to DocBook has been on
the to do list for at least 6 months. I really don't know how much
effort that'd be... here are copies of the content:
ODT @ http://people.redhat.com/swells/2013-03-25%20SCAP%20Workshop%20-%20Course...
PDF @
http://blog-shawndwells.rhcloud.com/wp-content/uploads/2013/07/SCAP-Works...
Okay, this looks like a good resource.
How much work do you think that'd be? I tried OpenOffice's
ODT->DocBook conversion.... absolutely no luck.
Yeah, I really wouldn't trust any automated solution for moving into DocBook,
unfortunately. I've tried several tools to do so, including ASCIIDoctor, but they are
all lacking at the moment. To do a full conversion I'd think it would probably take a
few days (working off and on since you'd probably get bogged down quickly due to the
boredom).
I might be able to put some time into it. I'll go ahead and commit a starting point
to the repo.
- -- Eric
- --------------------------------------------------
Eric "Sparks" Christensen
Red Hat, Inc - Product Security Team
sparks(a)redhat.com - sparks(a)fedoraproject.org
097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=nOVk
-----END PGP SIGNATURE-----
9:29 a.m.
New subject: SCAP & STIG Workbook
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Fri, Nov 08, 2013 at 09:43:04AM -0500, Eric H. Christensen wrote:
On Thu, Nov 07, 2013 at 11:20:09PM -0500, Shawn Wells wrote:
> On the content side, converting the Workbook to DocBook has been on
> the to do list for at least 6 months. I really don't know how much
> effort that'd be... here are copies of the content:
> ODT @
http://people.redhat.com/swells/2013-03-25%20SCAP%20Workshop%20-%20Course...
> PDF @
http://blog-shawndwells.rhcloud.com/wp-content/uploads/2013/07/SCAP-Works...
What's the license on this? It appears to be a RH guide but I don't see anything
that would say that it's releasable. Did you write the entire thing?
- -- Eric
- --------------------------------------------------
Eric "Sparks" Christensen
Red Hat, Inc - Product Security Team
sparks(a)redhat.com - sparks(a)fedoraproject.org
097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=/shz
-----END PGP SIGNATURE-----
9:54 a.m.
New subject: SCAP & STIG Workbook
On Nov 8, 2013, at 10:29 AM, "Eric H. Christensen"
<sparks(a)fedoraproject.org> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
> On Fri, Nov 08, 2013 at 09:43:04AM -0500, Eric H. Christensen wrote:
>> On Thu, Nov 07, 2013 at 11:20:09PM -0500, Shawn Wells wrote:
>> On the content side, converting the Workbook to DocBook has been on
>> the to do list for at least 6 months. I really don't know how much
>> effort that'd be... here are copies of the content:
>> ODT @
http://people.redhat.com/swells/2013-03-25%20SCAP%20Workshop%20-%20Course...
>> PDF @
http://blog-shawndwells.rhcloud.com/wp-content/uploads/2013/07/SCAP-Works...
What's the license on this? It appears to be a RH guide but I don't see anything
that would say that it's releasable. Did you write the entire thing?
I wrote it in support of a workshop over a year ago.
As several gov agencies collaborate through SSG, it's dramatically easier if
everything is released public domain. Feel free to update any license text to reflect
public domain.
- -- Eric
- --------------------------------------------------
Eric "Sparks" Christensen
Red Hat, Inc - Product Security Team
sparks(a)redhat.com - sparks(a)fedoraproject.org
097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
iQGcBAEBCgAGBQJSfQNWAAoJEB/kgVGp2CYvDygL/iF/U2UCntwfy3tLVBssjIzk
6IM96zkkXhfmtr41sp61KNebdzJw6d5Dn+rvtXSZaPn+7P2R5hJFtpVsWr6FX6z7
2z1eSDHEh0CqM3mr+bGZ8apAhvpPI9pG5bnZT2BXuP0Kshe7K4ItxTIO3H4RehKI
z4pLZsdE8X0cxPDeVgDyXeRpmOa91q/5okR/kUQQqF5MpfjTccMVZgXG6KQRtruP
v8wspPMShEzudt+Gt9Y7HtT0b5vBf16TNEd+DvT/H8F09F7Pgjubl3dM3+/9Tmih
CIppuaCB7JpTzrf8GRxMzImfv3q15Odczy4x8M6HC66vWw66ivRlvqsnvudwm0M9
jYv3OZzHr/BqKzEq/926vTtquvArsZ8tHZVPeJgZ98mMWOPjo8zjdKIhn04dteXD
yIGFJStxNNbJZmp6sgVIj/XYcbZkshWMZTGT8+KIwRE/mKhUGwv82ikZdMU+2mhW
BIMTm6ttyZU4mziJwGKLHiyNVJ5tmJmmkUlLQg0zEg==
=/shz
-----END PGP SIGNATURE-----
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
3:30 p.m.
New subject: SCAP & STIG Workbook
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Fri, Nov 08, 2013 at 10:54:46AM -0500, Shawn Wells wrote:
> On Nov 8, 2013, at 10:29 AM, "Eric H. Christensen"
<sparks(a)fedoraproject.org> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
>> On Fri, Nov 08, 2013 at 09:43:04AM -0500, Eric H. Christensen wrote:
>>> On Thu, Nov 07, 2013 at 11:20:09PM -0500, Shawn Wells wrote:
>>> On the content side, converting the Workbook to DocBook has been on
>>> the to do list for at least 6 months. I really don't know how much
>>> effort that'd be... here are copies of the content:
>>> ODT @
http://people.redhat.com/swells/2013-03-25%20SCAP%20Workshop%20-%20Course...
>>> PDF @
http://blog-shawndwells.rhcloud.com/wp-content/uploads/2013/07/SCAP-Works...
>
> What's the license on this? It appears to be a RH guide but I don't see
anything that would say that it's releasable. Did you write the entire thing?
I wrote it in support of a workshop over a year ago.
As several gov agencies collaborate through SSG, it's dramatically easier if
everything is released public domain. Feel free to update any license text to reflect
public domain.
Okay, I just got all but the last two chapters marked up. I'm publishing the
html-single version on fedorapeople[0]. The source should all be in git under Docs/. The
last two chapters just looked like more than I wanted to dive into today but I suspect it
wouldn't take too long to get it marked up. Now that I have access to the ODT things
should go a bit faster (scraping text from PDF sucks).
[0] http://sparks.fedorapeople.org/SCAP_and_STIG_Workshop/
- -- Eric
- --------------------------------------------------
Eric "Sparks" Christensen
Red Hat, Inc - Product Security Team
sparks(a)redhat.com - sparks(a)fedoraproject.org
097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=A6Ty
-----END PGP SIGNATURE-----
2:12 p.m.
New subject: SCAP & STIG Workbook
On 11/8/13, 4:30 PM, Eric H. Christensen wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Fri, Nov 08, 2013 at 10:54:46AM -0500, Shawn Wells wrote:
>
>> On Nov 8, 2013, at 10:29 AM, "Eric H. Christensen"
<sparks(a)fedoraproject.org> wrote:
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>
>>> On Fri, Nov 08, 2013 at 09:43:04AM -0500, Eric H. Christensen wrote:
>>>> On Thu, Nov 07, 2013 at 11:20:09PM -0500, Shawn Wells wrote:
>>>> On the content side, converting the Workbook to DocBook has been on
>>>> the to do list for at least 6 months. I really don't know how much
>>>> effort that'd be... here are copies of the content:
>>>> ODT @
http://people.redhat.com/swells/2013-03-25%20SCAP%20Workshop%20-%20Course...
>>>> PDF @
http://blog-shawndwells.rhcloud.com/wp-content/uploads/2013/07/SCAP-Works...
>> What's the license on this? It appears to be a RH guide but I don't see
anything that would say that it's releasable. Did you write the entire thing?
>
> I wrote it in support of a workshop over a year ago.
>
> As several gov agencies collaborate through SSG, it's dramatically easier if
everything is released public domain. Feel free to update any license text to reflect
public domain.
Okay, I just got all but the last two chapters marked up. I'm publishing the
html-single version on fedorapeople[0]. The source should all be in git under Docs/. The
last two chapters just looked like more than I wanted to dive into today but I suspect it
wouldn't take too long to get it marked up. Now that I have access to the ODT things
should go a bit faster (scraping text from PDF sucks).
[0] http://sparks.fedorapeople.org/SCAP_and_STIG_Workshop/
- -- Eric
/thank you!
/I pushed a few changes (patches are on the list), largely to get things
lined up in the TOC with the User Guide and Dev Guide.
3844
days inactive
3847
days old
scap-security-guide@lists.fedorahosted.org
7 comments
3 participants
participants (3)
-
Eric Christensen -
Shawn Wells -
Shawn Wells