Update openscap policies

Support
1

Hello,

How can we update the openscap policies from foreman programatically? We
would like that after we update the policies on the host to update the
policies in foreman also.

Thank you,
Cristian Falcas

2

Hello

you can use the API that foreman_openscap plugin provides. You should be able
to generate the documentation using

foreman-rake apipie:cache

and then accessing it on
https://$your_foreman/apidoc/v2/foreman_openscap_policies.html

Hope this helps

··· On Monday 18 of January 2016 14:55:19 Cristian Falcas wrote: > Hello, > > How can we update the openscap policies from foreman programatically? We > would like that after we update the policies on the host to update the > policies in foreman also. > > Thank you, > Cristian Falcas

–
Marek

3

And where should I put the new files?

I put the them in /usr/share/xml/scap/ssg/content/, run the foreman rake
task, but on foreman I still have the original version.

··· On Tue, Jan 19, 2016 at 11:01 AM, Marek Hulan wrote:

On Monday 18 of January 2016 14:55:19 Cristian Falcas wrote:

Hello,

How can we update the openscap policies from foreman programatically? We
would like that after we update the policies on the host to update the
policies in foreman also.

Thank you,
Cristian Falcas

Hello

you can use the API that foreman_openscap plugin provides. You should be
able
to generate the documentation using

foreman-rake apipie:cache

and then accessing it on
https://$your_foreman/apidoc/v2/foreman_openscap_policies.html

Hope this helps

–
Marek

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

4

Hello

I meant you'd have to use API to upload the policy file. On the other hand you
can just update the policy in Foreman and let it distribute to your hosts. The
opposite direction was not considered I guess as it may create conflicts if
you do the same from two hosts at the same time.

··· -- Marek

On Tuesday 19 of January 2016 11:50:58 Cristian Falcas wrote:

And where should I put the new files?

I put the them in /usr/share/xml/scap/ssg/content/, run the foreman rake
task, but on foreman I still have the original version.

On Tue, Jan 19, 2016 at 11:01 AM, Marek Hulan mhulan@redhat.com wrote:

On Monday 18 of January 2016 14:55:19 Cristian Falcas wrote:

Hello,

How can we update the openscap policies from foreman programatically? We
would like that after we update the policies on the host to update the
policies in foreman also.

Thank you,
Cristian Falcas

Hello

you can use the API that foreman_openscap plugin provides. You should be
able
to generate the documentation using

foreman-rake apipie:cache

and then accessing it on
https://$your_foreman/apidoc/v2/foreman_openscap_policies.html

Hope this helps

–
Marek

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

–
Marek

5

Are you refering to the foreman api, or there is a foreman_openscap api
that can be used to upload the files. If the second, can you please give an
example?

··· On Thu, Jan 21, 2016 at 5:15 PM, Marek Hulan wrote:

Hello

I meant you’d have to use API to upload the policy file. On the other hand
you
can just update the policy in Foreman and let it distribute to your hosts.
The
opposite direction was not considered I guess as it may create conflicts if
you do the same from two hosts at the same time.

–
Marek

On Tuesday 19 of January 2016 11:50:58 Cristian Falcas wrote:

And where should I put the new files?

I put the them in /usr/share/xml/scap/ssg/content/, run the foreman rake
task, but on foreman I still have the original version.

On Tue, Jan 19, 2016 at 11:01 AM, Marek Hulan mhulan@redhat.com wrote:

On Monday 18 of January 2016 14:55:19 Cristian Falcas wrote:

Hello,

How can we update the openscap policies from foreman
programatically? We

would like that after we update the policies on the host to update
the

policies in foreman also.

Thank you,
Cristian Falcas

Hello

you can use the API that foreman_openscap plugin provides. You should
be

able
to generate the documentation using

foreman-rake apipie:cache

and then accessing it on
https://$your_foreman/apidoc/v2/foreman_openscap_policies.html

Hope this helps

–
Marek

–
You received this message because you are subscribed to the Google
Groups

“Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send
an

email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

–
Marek

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

6

Hi

I mean a foreman_openscap API which extends the Foreman API. You can see that
documented at https://$your_foreman/apidoc/v2/foreman_openscap_policies.html
(if you have the plugin installed). I'm sorry but I don't have a working
example atm, but the plugin just adds new URIs into existing Foreman API for
which there are examples -
http://theforeman.org/manuals/1.10/index.html#5.1API

Hope this helps

··· -- Marek

On Thursday 21 of January 2016 17:42:10 Cristian Falcas wrote:

Are you refering to the foreman api, or there is a foreman_openscap api
that can be used to upload the files. If the second, can you please give an
example?

On Thu, Jan 21, 2016 at 5:15 PM, Marek Hulan mhulan@redhat.com wrote:

Hello

I meant you’d have to use API to upload the policy file. On the other hand
you
can just update the policy in Foreman and let it distribute to your hosts.
The
opposite direction was not considered I guess as it may create conflicts
if
you do the same from two hosts at the same time.

–
Marek

On Tuesday 19 of January 2016 11:50:58 Cristian Falcas wrote:

And where should I put the new files?

I put the them in /usr/share/xml/scap/ssg/content/, run the foreman rake
task, but on foreman I still have the original version.

On Tue, Jan 19, 2016 at 11:01 AM, Marek Hulan mhulan@redhat.com wrote:

On Monday 18 of January 2016 14:55:19 Cristian Falcas wrote:

Hello,

How can we update the openscap policies from foreman

programatically? We

would like that after we update the policies on the host to update

the

policies in foreman also.

Thank you,
Cristian Falcas

Hello

you can use the API that foreman_openscap plugin provides. You should

be

able
to generate the documentation using

foreman-rake apipie:cache

and then accessing it on
https://$your_foreman/apidoc/v2/foreman_openscap_policies.html

Hope this helps

–
Marek

–
You received this message because you are subscribed to the Google

Groups

“Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send

an

email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

–
Marek

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

–
Marek