<div dir="ltr"><div>Hi Adam,</div><div><br></div><div>I think the best would be to ask this question on "open-scap-list". I'm forwarding the question there. Also please subscribe to the mailing list here: <a href="https://www.redhat.com/mailman/listinfo/open-scap-list">https://www.redhat.com/mailman/listinfo/open-scap-list</a></div><div><div><br></div><div>Regards.<br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">---------- Forwarded message ---------<br>From: <b class="gmail_sendername" dir="auto">Adam Horeth</b> <span dir="auto"><<a href="mailto:Adam.Horeth@keyesinfotech.com">Adam.Horeth@keyesinfotech.com</a>></span><br>Date: Thu, Oct 29, 2020 at 7:10 PM<br>Subject: OpenSCAP Code Development - some questions about syschar sources<br>To: <a href="mailto:ascheel@redhat.com">ascheel@redhat.com</a> <<a href="mailto:ascheel@redhat.com">ascheel@redhat.com</a>>, <a href="mailto:bbaude@redhat.com">bbaude@redhat.com</a> <<a href="mailto:bbaude@redhat.com">bbaude@redhat.com</a>>, <a href="mailto:ggasparb@redhat.com">ggasparb@redhat.com</a> <<a href="mailto:ggasparb@redhat.com">ggasparb@redhat.com</a>>, <a href="mailto:julian.klode@canonical.com">julian.klode@canonical.com</a> <<a href="mailto:julian.klode@canonical.com">julian.klode@canonical.com</a>>, <a href="mailto:kjankov@redhat.com">kjankov@redhat.com</a> <<a href="mailto:kjankov@redhat.com">kjankov@redhat.com</a>><br>Cc: Rod Castillo <<a href="mailto:Rod.Castillo@keyesinfotech.com">Rod.Castillo@keyesinfotech.com</a>><br></div><br><br>
<div dir="ltr">
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
Hi, my name is Adam Horeth and I was hoping that I might</div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
ask you some questions about the OpenSCAP codebase.</div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
I've been researching <span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">how to use OpenSCAP to test for </span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">vulnerabilities within my </span><span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">company's infrastructure. Most </span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">specifically, we have a database </span><span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">that stores system </span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">characteristics of all our infrastructure and we were </span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">looking into </span><span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">where exactly i</span><span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">n
the code OpenSCAP pulls </span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">system information from. </span><span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">Our overall goal would be to alter</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">the code so we get t</span><span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">his information from the database and </span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">not from probing </span><span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">the actual system the code is run on. </span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt"><br>
</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">We've narrowed down our search to the XML schemas and the</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">libopenscap.so file (is this is the interface between</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">the openscap-maint-1.3 source and libopenscap8 library?).</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt"><br>
</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">I thought i'd reach out to you to see if you might be able to</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">point me in the right direction or provide some insights.</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">And I apologize if i'm stepping over any bounds in asking these</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">questions.</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt"><br>
</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Consolas,Courier,monospace;font-size:11pt">Thanks for your help!</span></div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div>
<div style="font-family:Consolas,Courier,monospace;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_6907918482214603737Signature">
<div>
<div></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<span style="font-size:12.0pt;font-family:"Calibri","sans-serif";color:black">
<p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">
<span style="font-size:18.0pt;font-family:"Monotype Corsiva";color:#1f497d">Adam Horeth</span><span style="font-family:"Times New Roman","serif";color:black"></span></p>
<p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">
<b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#262626">Software Engineer</span></b><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:black"></span></p>
<p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">
<span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#262626">Keyes Security |
<span style="border:none windowtext 1.0pt;padding:0in">242 Washington Street</span></span><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:#262626"></span></p>
<p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">
<span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#262626;border:none windowtext 1.0pt;padding:0in">Watertown, NY 13601</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:black"></span></p>
<p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">
<span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#262626">(315) 778-2322 |
<a href="mailto:jay.booth@keyessecurity.com" target="_blank"><span style="color:blue">adam.horeth@keyesinfotech.com</span></a></span><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:black"></span></p>
<p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">
<i><span style="font-size:10.0pt;font-family:"Helvetica","sans-serif";color:black">A Federally Certified Woman Owned Business</span></i><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:black"></span></p>
</span><img style="max-width:100%" src="cid:175792d36f2b4ca27ea1"><br>
</div>
</div>
</div>
</div>
CONFIDENTIALITY STATEMENT. This email and any attachment is for the sole use of the intended recipient and may contain private, confidential and/or privileged information that may be subject to Keyes Information Technology, LLC internal policies. If you are
not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you have received this transmission in error, please notify Keyes Information Technology, LLC immediately by return email and delete the message and all copies
and attachments from your system.
</div>
</div></div></div></div>