scap-security-guide: Fix openembedded platform tests and build

Add patches to fix openembedded nodistro tests and openembedded build within
ssg metadata.

Signed-Off-By: Jate Sujjavanich <jatedev@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Jate Sujjavanich
2021-01-10 16:21:04 +00:00
committed by Armin Kuster
parent 0a3c0f3499
commit 16ee7308c9
3 changed files with 82 additions and 0 deletions
@@ -0,0 +1,46 @@
From 2beb4bc83a157b21edb1a3fef295cd4cced467df Mon Sep 17 00:00:00 2001
From: Jate Sujjavanich <jatedev@gmail.com>
Date: Thu, 7 Jan 2021 18:10:01 -0500
Subject: [PATCH 1/3] Fix platform spec, file check, tests in installed OS
detect for openembedded
Change platform to multi in openembedded installed check matching others
and allowing compile of xml into oval
---
shared/checks/oval/installed_OS_is_openembedded.xml | 11 ++++++-----
1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/shared/checks/oval/installed_OS_is_openembedded.xml b/shared/checks/oval/installed_OS_is_openembedded.xml
index 763d17bcb..01df16b43 100644
--- a/shared/checks/oval/installed_OS_is_openembedded.xml
+++ b/shared/checks/oval/installed_OS_is_openembedded.xml
@@ -1,11 +1,9 @@
-</def-group>
-
<def-group>
<definition class="inventory" id="installed_OS_is_openembedded" version="2">
<metadata>
<title>OpenEmbedded</title>
<affected family="unix">
- <platform>OPENEMBEDDED</platform>
+ <platform>multi_platform_all</platform>
</affected>
<reference ref_id="cpe:/o:openembedded:openembedded:0"
source="CPE" />
@@ -20,8 +18,11 @@
</criteria>
</definition>
- <ind:textfilecontent54_object id="test_openembedded" version="1" comment="Check OPenEmbedded version">
- <ind:filepath>/etc/os-release/ind:filepath>
+ <ind:textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="Check OpenEmbedded version" id="test_openembedded" version="1">
+ <ind:object object_ref="obj_openembedded" />
+ </ind:textfilecontent54_test>
+ <ind:textfilecontent54_object id="obj_openembedded" version="1" comment="Check OpenEmbedded version">
+ <ind:filepath>/etc/os-release</ind:filepath>
<ind:pattern operation="pattern match">^VERSION_ID=\"nodistro\.[0-9].$</ind:pattern>
<ind:instance datatype="int">1</ind:instance>
</ind:textfilecontent54_object>
--
2.24.3 (Apple Git-128)
@@ -0,0 +1,34 @@
From 037a12301968a56f0c7e492ea4a05d2eecbd4cc6 Mon Sep 17 00:00:00 2001
From: Jate Sujjavanich <jatedev@gmail.com>
Date: Fri, 8 Jan 2021 20:18:00 -0500
Subject: [PATCH 2/3] Fix missing openembedded from ssg/constants.py
---
ssg/constants.py | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/ssg/constants.py b/ssg/constants.py
index fab7cda5d..2ca289f84 100644
--- a/ssg/constants.py
+++ b/ssg/constants.py
@@ -234,7 +234,8 @@ PRODUCT_TO_CPE_MAPPING = {
}
MULTI_PLATFORM_LIST = ["rhel", "fedora", "rhosp", "rhv", "debian", "ubuntu",
- "wrlinux", "opensuse", "sle", "ol", "ocp", "example"]
+ "wrlinux", "opensuse", "sle", "ol", "ocp", "example",
+ "openembedded"]
MULTI_PLATFORM_MAPPING = {
"multi_platform_debian": ["debian8"],
@@ -249,6 +250,7 @@ MULTI_PLATFORM_MAPPING = {
"multi_platform_sle": ["sle11", "sle12"],
"multi_platform_ubuntu": ["ubuntu1404", "ubuntu1604", "ubuntu1804"],
"multi_platform_wrlinux": ["wrlinux"],
+ "multi_platform_openembedded": ["openembedded"],
}
RHEL_CENTOS_CPE_MAPPING = {
--
2.24.3 (Apple Git-128)
@@ -7,6 +7,8 @@ SRC_URI = "git://github.com/akuster/scap-security-guide.git;branch=oe-0.1.44; \
file://0001-fix-deprecated-instance-of-element.getchildren.patch \
file://0002-fix-deprecated-getiterator-function.patch \
file://0003-fix-remaining-getchildren-and-getiterator-functions.patch \
file://0001-Fix-platform-spec-file-check-tests-in-installed-OS-d.patch \
file://0002-Fix-missing-openembedded-from-ssg-constants.py.patch \
"
PV = "0.1.44+git${SRCPV}"