<HTML><HEAD><TITLE>RE: [Open-scap] picture</TITLE>
<META http-equiv=Content-Type content="text/html; charset=unicode">
<META content="MSHTML 6.00.6001.18203" name=GENERATOR></HEAD>
<BODY><FONT size=2>
<DIV><FONT color=#000000 size=2>Hi Peter,<FONT size=2><BR><BR>I like your ideas, the notion of using lib_openscap to provide an abstraction layer around the raw SCAP content definitely seems like something which would provide alot of value.<BR><BR>One thing I'd like to propose is that we provide both data abstraction and functional capabilities within lib_openscap. The matter of providing functionality in addition to data abstraction is largely academic with the "enumerations" as this functionality is largely related to loading the abstract data types but becomes pretty significant as we start to look towards OVAL and XCCDF.</FONT><FONT size=2><BR><BR>For example:</FONT></FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>lib_openscap.CVE eventually provides the following:</FONT></DIV>
<DIV><FONT size=2><EM>structs:</EM></FONT></DIV>
<DIV><FONT size=2>CVE</FONT></DIV>
<DIV><FONT size=2><EM>functions:</EM></FONT></DIV>
<DIV><FONT size=2>LoadFromNVD</FONT></DIV>
<DIV><FONT size=2>LoadFromFile</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>lib_openSCAP.OVAL provides something along the lines of:</FONT></DIV>
<DIV><FONT size=2><EM>structs:</EM></FONT></DIV>
<DIV><FONT size=2>OvalDefinition</FONT></DIV>
<DIV><FONT size=2>OvalTest</FONT></DIV>
<DIV><FONT size=2>OvalCriterion</FONT></DIV>
<DIV><FONT size=2>OvalObject</FONT></DIV>
<DIV><FONT size=2>OvalState</FONT></DIV>
<DIV><FONT size=2>OvalTestResult</FONT></DIV>
<DIV><FONT size=2>etc.</FONT></DIV>
<DIV><FONT size=2><EM>functions:</EM></FONT></DIV>
<DIV><FONT size=2>load_definitions</FONT></DIV>
<DIV><FONT size=2>export_characteristics</FONT></DIV>
<DIV><FONT size=2>export_results</FONT></DIV>
<DIV><FONT size=2>ProbeObject</FONT></DIV>
<DIV><FONT size=2>ResolveTest</FONT></DIV>
<DIV><FONT size=2>etc.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>In other words, the only tweak I would propose to the architecture you've defined is moving the directly OVAL related capabilities within scap_daemon down into the OVAL library within lib_openscap while leaving the higher level functionality of actually staying memory resident, monitoring for incoming signals, sending results to a server and other such facilities to scap_daemon which is basically our prototype for an app that would live in that top layer (what I believe Net-Centric folks like to call the "utilization layer").</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>What do you think?</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Kevin</FONT></DIV></FONT>
<P><FONT size=2><BR>-----Original Message-----<BR>From: open-scap-list-bounces@redhat.com [<A href="mailto:open-scap-list-bounces@redhat.com">mailto:open-scap-list-bounces@redhat.com</A>] On Behalf Of Peter Vrabec<BR>Sent: Wednesday, February 11, 2009 10:54 AM<BR>To: open-scap-list@redhat.com<BR>Subject: [Open-scap] picture<BR><BR>Hi folks,<BR><BR>I drew a draft of what we doing here, just to make things clear. Or it might be a good start point for discussion.<BR><BR>small explanation:<BR>- library provide interface to SCAP standards, it can parse different xml files and provide their content via abstracted data types to the applications. That's what we do for CPE and CVE. CVSS is a different case.<BR><BR>-applications, for example scap_daemon can load OVAL definitions using the library. Than they can process the objects, create system characteristic, and finally export the characteristic by library function.<BR><BR>- in the end there might be different front-ends for things like scap_daeomon, but that is a different story.<BR><BR>Q:<BR>- How do you like it? :)<BR>- Should library provide some more functions besides "load" and "export"?<BR>- Where should the process of creating system characteristic be placed, inside or outside the library(as it's shown in the picture) ?<BR><BR>I'm looking forward each reply :)<BR>Peter.<BR><BR><BR><BR><BR><BR><BR><BR><BR></P></FONT></BODY></HTML>