Add File listing to SWID generator (depends on issue: #30)

[d22]

File tag with locations

[cfaessler]

yum: repoquery --list package-name dpkg: dpkg-query -L package-name

[d22]

repoquery was not preinstalled in the Fedora used in the Vagrant box, it's part of the package 'yum-utils', this means we need root access. I don't know if this is a problem.

Also I think the speed of the yum queries could be a problem, see the quick tests below.

Some performance measurements, for Fedora and Ubuntu, both running in a Vagrant box on my machine:

Fedora: The initial call of 'repoquery --list firefox' had the following time output:

real    0m8.545s
user    0m5.632s
sys     0m0.791s

The second call had the follwoing time output:

real    0m0.440s
user    0m0.321s
sys     0m0.070

165 files were listed.

Ubuntu: First call of 'dpkg-query -L firefox'

real    0m0.038s
user    0m0.012s
sys     0m0.020s

Second call:

real    0m0.046s
user    0m0.020s
sys     0m0.020s

129 files, directories and subdirectories were listed.

[cfaessler]

I implemented first version of file listing for dpkg environment. Full output took on my machine (ubuntu vagrant box):

real    0m5.643s
user    0m3.564s
sys     0m1.288s

[cfaessler]

@d22 could you try with repoquery -C --list firefox to use cache instead of downloading metadata Maybe you need to run yum makecache first http://man7.org/linux/man-pages/man1/repoquery.1.html

Im not shure wheter yum and rpm uses the same database, but if so we could use rpm -qlp firefox to query files. Seems to be faster.

[d22]

I don't know how we should handle this yum "problems". Should we integrate the installation of the dependencies in our tool, or should we just expect it to be installed, same question with the yum cache, should we build/re-build it?

[cfaessler]

i would rather expect the tools to be installed (as i did in the README file). Since the tool works without cache, i would advise to use/update it, but not enforce it. We have to follow up on this, maybe we should discuss it with Hr. Steffen & Tobias

[d22]

Yes, lets discuss this at the next meeting.

[cfaessler]

@dbrgn as discussed please review

[dbrgn]

@cfaessler @d22 what was it again that i should review? I thought this is already implemented and merged?

[d22]

As I this is already merged, I'd say close this one.