Jan,
>-----Original Message-----
>From: Jan-Oliver Wagner [mailto:
jan-oliver.wagner@...]
>Sent: Wednesday, July 30, 2008 5:44 AM
>To: oval-developer-list OVAL Developer List/Closed Public Discussion
>Subject: Re: [OVAL-DEVELOPER-LIST] Integrating OVAL (ovaldi) into
>OpenVAS
>
>Jon,
>
>On Donnerstag, 17. Juli 2008, Baker, Jon wrote:
>> I am not familiar with OpenVAS. Based on a couple of your comments
and
>> the change request on the OpenVAS site it looks like you have taken
>the
>> time to understand the OVAL Interpreter and how it could fit into
>> OpenVAS.
>
>yes, we invested a couple of days in reading the ovaldi code and do
>some experiments.
>
>> Leveraging the OVAL Interpreter within OpenVAS seems to make a
>> lot of sense. I suspect it would be fairly straight forward to do.
>
>Indeed.
>
>> Regarding Red Hat as a starting point for a proof of concept. I
think
>> that would be a good start, you should also talk to the Debian team.
I
>> believe they are doing some similar work with OVAL and the OVAL
>> Interpreter.
>
>Debian offers the DSAs as OVAL, but only summarized.
>Also, Debian appears not to be advertizing the OVAL support. Its hard
>to find it on security.debian.org.
>Redhat seems to have OVAL fully integrated into their processes.
>
Debian is not yet as far along as Red Hat in terms of publishing OVAL
Definitions. I expect Debian to continue to progress in this area.
>> If you have specific questions about OVAL or the OVAL Interpreter
let
>> us know and we are happy to help.
>
>We'll come back once we are on it.
>Ideally, it would be great if our patches would go upsteam into
ovaldi.
>I guess we should publish them here for a start.
>Or is ovaldi a closed shop? (There seems to be no public source code
>repository).
>
The OVAL Interpreter has a sourceforge.net project. Please see:
https://sourceforge.net/projects/ovaldiWe would be happy to incorporate any patches you develop. If you have a
patch for a bug you found please submit a bug report and attaché the
patch file as a proposed fix. We will review the patch an apply it. If
you are looking to contribute new features please submit a feature
request describing the new capability and again we will review the
request and respond to it.
We are very happy to receive any fixes to the interpreter.
Thanks,
Jon
============================================
Jonathan O. Baker
The MITRE Corporation
Email:
bakerj@...
To unsubscribe, send an email message to
LISTSERV@... with
SIGNOFF OVAL-DEVELOPER-LIST
in the BODY of the message. If you have difficulties, write to
OVAL-DEVELOPER-LIST-request@....
