Differences between revisions 6 and 7
Revision 6 as of 2016-12-14 07:42:01
Size: 1402
Editor: ?PetterReinholdtsen
Comment: Mention sources for package CPE values.
Revision 7 as of 2016-12-14 07:48:12
Size: 1452
Editor: ?PetterReinholdtsen
Comment: Link to tracker for package information, and move fixed OVAL generation under Done heading.
Deletions are marked like this. Additions are marked like this.
Line 24: Line 24:
 * Fix the [[Bug:738199|broken]] OVAL information for Debian
Line 26: Line 25:
 * Package DebianPkg:openscap (Bug:522265)  * Make sure [[Bug:738199|outdated]] OVAL information for Debian is updated.
 * Package [[https://tracker.debian.org/pkg/openscap|openscap]] (Bug:522265)

Debian SCAP Guide

This page is a TODO/IDEAS list to implement a SCAP guide for Debian. Debian automatically generates and publishes OVAL information for use by SCAP.


  • Define the Profiles we want.
  • What are Debian CPEs (platform, family?). Many CPEs can be found in the testing security SVN repostory, svn+ssh://svn.debian.org/svn/secure-testing, in the data/CPE/ directory. In addition, some source packages include the known CPEs for the package in debian/upstream/metadata).

  • Define distribution we target (typically: testing then stable)
  • How to let our derivative fork easily?
  • How to cooperate with scap-security-guide
  • Test infrastructure?
  • Dashboard
    • Compare: our supported checks, upstream checks, and a wishlist.
    • Each SCAP probe should be tested, both in unstable and testing
    • Each Debian distribution should be evaluated, for each relevant profile.
  • Write docs
  • Define communication channels so contributors can follow and participate (IRC, mailing list, etc.)


  • Translating the SCAP guide
  • Support older distribution
  • provide framework so maintainers can provide probes in their packages