begin work on enabling oscap-ssh script functionality

GovReady / govready

Toolkit for getting open source apps ready for secure, approved government use

GNU General Public License v3.0

97 stars 31 forks source link

begin work on enabling oscap-ssh script functionality #77

Closed openprivacy closed 9 years ago

openprivacy commented 9 years ago

Not really ready for merging, but I think this is a step forward in that it matches the existing behavior - though with better (IMO) results file naming - and has some initial support for remote (oscap-ssh) scanning.

If you test this and it works for local scanning as expected, perhaps a merge would be good so we both have the same starting place.

openprivacy commented 9 years ago

I believe this pull request is ready to rock. PR supports:

remote scanning and fixing (for a single remote host configured in GovReadyfile)

Not yet supported when using datastream for remote host:

Quickie report not generated
govready compare not working
OVAL variables are not created

The first two items above are rather important - do you have time to resolve?

openprivacy commented 9 years ago

Added functionality to enable Ansible to set GOVREADY_* environment variables so that sites in the inventory can be scanned.

gregelin commented 9 years ago

Thanks for awesome improvements!