[Open-scap] help regarding implementation of OVAL probes in python

Simon Lukasik slukasik at redhat.com
Thu Apr 4 16:01:25 UTC 2013


On 04/04/2013 05:45 PM, Jacob Varughese wrote:
[snip]
> Solaris happens to use python extensively, so having the ability to
> write probes in
> python would be helpful for us.
> 

Ah I see,

We have never used python for probes, but that *should be* possible.
Probes are stand alone programs communicating with libopenscap using
SEXP and POSIX signals. You will need to reimplement in python this
communication, or at least make it accessible from C to python by some
kind of bindings (as suggested by Martin in other thread).

Also, there might be issues with resources, as the OpenSCAP probes
written in C are highly optimized. We have seen SCAP scanner implemented
in high-level programming language performing significantly worse
compared to openscap (both, memory-wise and CPU-time-wise).

So, in general possible but here be dragons.

-- 
Simon Lukasik
Security Technologies




More information about the Open-scap-list mailing list