OpenSCAP / openscap-daemon

Manages continuous scans of your infrastructure
https://www.open-scap.org/tools/openscap-daemon
GNU Lesser General Public License v2.1
106 stars 32 forks source link

openscap container image: provide option for user to find out what datastreams and profiles are supported #122

Open matusmarhefka opened 6 years ago

matusmarhefka commented 6 years ago

When scanning for configuration compliance using atomic scan user has no easy way how to find out what datastreams and profiles are supported (bundled inside the openscap container image).

The issue is partialy fixed by added support for atomic help command which at least prints the version of bundled scap-security-guide inside the openscap container image (PR https://github.com/OpenSCAP/openscap-daemon/pull/118).

matusmarhefka commented 6 years ago

I can think of two solutions for this issue:

jan-cerny commented 6 years ago

Maybe atomic help could print a table, where rows would be unique profile IDs. Example

Available profiles and their applicability
==========================================

Profile ID   | Fedora | EL7 | EL6 |
===================================
pci-dss      |        |  X  |  X  |
common       |    X   |  X  |  X  |
cjis         |        |  X  |     |   
...
...
matusmarhefka commented 6 years ago

@jan-cerny I like the idea with table.