[Open-scap] Mommy, where do openscap repos come from?

[Greg Elin]

Thanks Martin. 

Greg Elin
P: 917-304-3488
E:  gregelin at gitmachines.com

Sent from my iPhone

> On Sep 4, 2014, at 9:36 AM, Martin Preisler <mpreisle at redhat.com> wrote:
> 
> ----- Original Message -----
>> From: "Greg Elin" <gregelin at gitmachines.com>
>> To: "open-scap-list" <open-scap-list at redhat.com>
>> Sent: Thursday, September 4, 2014 2:56:07 PM
>> Subject: Re: [Open-scap] Mommy, where do openscap repos come from?
>> 
>> Ok, I've started to answer my own question...
>> 
>> http://rpmfind.net/linux/rpm2html/search.php?query=openscap&submit=Search+.
> 
> Installing random RPMs found on the net is very very dangerous. Keep in mind
> that you usually have to run `oscap` as root!
> 
>> But is there a better way to think this through and understand...
> 
> Perhaps read something on "upstream vs downstream relationships".
> We really don't have any control over whether Amazon Linux packages openscap
> or not. The only party that does have control is Amazon.
> 
> -- 
> Martin Preisler