[Open-scap] Open-scap-list Digest, Vol 108, Issue 15

Fri Apr 27 05:34:34 UTC 2018

Hi,

When you say your other servers don’t have yum I assume you mean they don’t
have access to the yum repos do to policies that prevent these servers from
reaching the internet.

If the above is the case you have two decent options. Do a yum download
only like you have but get all the dependencies as well. Copy those rpms to
your other servers and use yum local install to install the packages. Easy
cheesy that way it’s at least still managed by yum.

Option two and my suggestion would be to install a red hat satallite sever
and allow your servers access to that. Then you have security and the ease
of managing packages with yum.

Cheers

On Fri, Apr 27, 2018 at 12:18 AM <open-scap-list-request at redhat.com> wrote:

> Send Open-scap-list mailing list submissions to
>         open-scap-list at redhat.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://www.redhat.com/mailman/listinfo/open-scap-list
> or, via email, send a message with subject or body 'help' to
>         open-scap-list-request at redhat.com
>
> You can reach the person managing the list at
>         open-scap-list-owner at redhat.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Open-scap-list digest..."
>
>
> Today's Topics:
>
>    1. Re: [Suspected Spam] Re: OSCAP Scanner Binaries (Shawn Wells)
>    2. Re: [Suspected Spam] Re: OSCAP Scanner Binaries
>       (Mohanraj, Bharath)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 26 Apr 2018 19:33:24 -0400
> From: Shawn Wells <shawn at redhat.com>
> To: Christopher Wiedmaier <bike2wrk at gmail.com>
> Cc: "open-scap-list at redhat.com" <open-scap-list at redhat.com>
> Subject: Re: [Open-scap] [Suspected Spam] Re: OSCAP Scanner Binaries
> Message-ID: <462bf33b-3cb7-5224-e109-b9c787e28e45 at redhat.com>
> Content-Type: text/plain; charset=utf-8; format=flowed
>
>
>
> On 4/26/18 7:00 PM, Christopher Wiedmaier wrote:
> > How can I be removed from this list?? I have completed the unsubscribe
> > steps multiple times but I still end up receiving e-mails.
> https://www.redhat.com/mailman/listinfo/open-scap-list
>
> Under the "openscap-list subscribers" section (last section on the page)
> there is a field to enter your EMail and button for unsubscribe.
>
> If having issues, you can ping Martin Preisler (mpreisle at redhat.com) and
> he can manually remove.
>
>
>
> ------------------------------
>
> Message: 2
> Date: Fri, 27 Apr 2018 05:18:43 +0000
> From: "Mohanraj, Bharath" <bharath_mohanraj_tp at bmc.com>
> To: Shawn Wells <shawn at redhat.com>, "open-scap-list at redhat.com"
>         <open-scap-list at redhat.com>
> Subject: Re: [Open-scap] [Suspected Spam] Re: OSCAP Scanner Binaries
> Message-ID:
>         <f2b335bf486c41ba9dbb7ad9de42453e at phx-exmbprd-02.adprod.bmc.com>
> Content-Type: text/plain; charset="utf-8"
>
> Thanks Shawn for the clarification?
>
> One last thing I want to mention here is? some of the RHEL boxes in my
> environment are locked down from internet.. .so they will not have access
> to the repository to fetch oscap binaries, and that?s the reason I had
> raised this question. Do you have any better suggestion for this scenario?
>
> From: open-scap-list-bounces at redhat.com [mailto:
> open-scap-list-bounces at redhat.com] On Behalf Of Shawn Wells
> Sent: Friday, April 27, 2018 4:29 AM
> To: open-scap-list at redhat.com
> Subject: Re: [Open-scap] [Suspected Spam] Re: OSCAP Scanner Binaries
>
>
>
>
> On 4/26/18 1:09 PM, Mohanraj, Bharath wrote:
> I tried to download only the oscap rpms by using the below command,
> yum install --downloadonly --downloaddir=/opt/oscaprpm openscap-scanner
>
> And once the above command is triggered, it downloaded the below bunch of
> RPMs?
> [cid:image001.jpg at 01D3DE14.ED596F90]
>
> My intention here is to get the rpms downloaded, copy it to my other RHEL
> machines that don?t have yum? and directly install the rpms? and I?m
> interested in running the oscap to scan my RHEL machines?
>
> Now, my question here is, should I install all the downloaded RPMs to get
> the oscap scanning work?
> The other RPMs contain needed libraries or deprencies of the OpenSCAP
> tooling.
>
> This all seems very unusual. YUM is installed on *every* RHEL host out of
> the box. Administrators would actively have to remove it for this use case
> to be applicable.
>
> Even if OpenSCAP and associated dependencies were installed through RPMs,
> YUM would still be available (and likely ideal) to install software through.
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://www.redhat.com/archives/open-scap-list/attachments/20180427/3f3b82f2/attachment.html
> >
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: image001.jpg
> Type: image/jpeg
> Size: 27870 bytes
> Desc: image001.jpg
> URL: <
> https://www.redhat.com/archives/open-scap-list/attachments/20180427/3f3b82f2/attachment.jpg
> >
>
> ------------------------------
>
> _______________________________________________
> Open-scap-list mailing list
> Open-scap-list at redhat.com
> https://www.redhat.com/mailman/listinfo/open-scap-list
>
> End of Open-scap-list Digest, Vol 108, Issue 15
> ***********************************************
>
-- 
Ron Herzing
Linux Systems Engineer
<https://www.redhat.com/wapps/training/certification/verify.html?certNumber=150-010-197&isSearch=False&verify=Verify>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20180427/325d2950/attachment.htm>