README.md in scaptimony-0.2.0 vs README.md in scaptimony-0.3.0
- old
+ new
@@ -8,34 +8,44 @@
+ Current features:
+ Achieve SCAP audit results from your infrastructure
+ Provide API for tools to upload collected SCAP results
+ Define security/compliance policies
+ Upload SCAP content and assign it with the policy
+ + Set-up a periodical schedule of audits for the policy
+ + Organization defined targeting (Assign a set of nodes with the policy)
+ Result post-processing
+ Search SCAP results
+ Search for non-compliant systems
+ + Search for not audited systems
+ Rails artefacts to display audit results within your application
+ Future features:
+ Define security/compliance policies
+ Archive distinct versions of the policy
- + Set-up a periodical schedule of audits for the policy
- + Organization defined targeting (Assign a set of nodes with the policy)
+ Define known-issues and waivers (Assign waivers with a set of nodes and the policy)
+ Set-up rules for automated deletion of results
+ vulnerability assessment (processing OVAL CVE streams)
+ Result post-processing
- + Search for not audited systems
* Comparison of audit results
+ Waive known issues
+ One time waivers of a report
+ Set-up periodic waivers for a given policy and system
+ Set a waiver expirations time (to give the time to remediate things)
+ Calculate score before and after waiver (ammount of risk accepted needs to be made available to the authorizing official)
+ Let us know, if your feature is missing.
-## Installation
+## Installation from RPMs
+- Enable [isimluk/OpenSCAP](https://copr.fedoraproject.org/coprs/isimluk/OpenSCAP/) COPR repository
+
+- Install SCAPtimony
+
+ ```
+ yum install rubygem-scaptimony ruby193-rubygem-scaptimony
+ ```
+
+## Installation from upstream git
+
- Get SCAPtimony sources
```
$ git clone https://github.com/OpenSCAP/scaptimony.git
```
@@ -45,18 +55,18 @@
Enable Software Collections as per [instructions](https://access.redhat.com/documentation/en-US/Red_Hat_Software_Collections/1/html-single/1.1_Release_Notes/index.html#sect-Installation_and_Usage-Subscribe).
```
$ cd scaptimony
$ gem build scaptimony.gemspec
- # yum install yum-utils rpm-build scl-utils scl-utils-build ruby193-rubygems-devel
+ # yum install yum-utils rpm-build scl-utils scl-utils-build ruby193-rubygems-devel ruby193-build ruby193
# yum-builddep extra/rubygem-scaptimony.spec
$ rpmbuild --define "_sourcedir `pwd`" --define "scl ruby193" -ba extra/rubygem-scaptimony.spec
```
- Install SCAPtimony RPM
```
- # yum local install ~/rpmbuild/RPMS/noarch/ruby193-rubygem-scaptimony-*.noarch.rpm
+ # yum localinstall ~/rpmbuild/RPMS/noarch/ruby193-rubygem-scaptimony-*.noarch.rpm
```
## Usage
Users are currently adviced to use SCAPtimony only through