[Open-scap] Mommy, where do openscap repos come from?

[Martin Preisler]

----- Original Message -----
> From: "Greg Elin" <gregelin at gitmachines.com>
> To: "open-scap-list" <open-scap-list at redhat.com>
> Sent: Thursday, September 4, 2014 2:56:07 PM
> Subject: Re: [Open-scap] Mommy, where do openscap repos come from?
> 
> Ok, I've started to answer my own question...
> 
> http://rpmfind.net/linux/rpm2html/search.php?query=openscap&submit=Search+.

Installing random RPMs found on the net is very very dangerous. Keep in mind
that you usually have to run `oscap` as root!

> But is there a better way to think this through and understand...

Perhaps read something on "upstream vs downstream relationships".
We really don't have any control over whether Amazon Linux packages openscap
or not. The only party that does have control is Amazon.

-- 
Martin Preisler