On Tue, Feb 09, 2016 at 10:05:30AM +0100, Šimon Lukašík wrote: > >The advantages you describe sound exciting, which falls under the > >offering-carrots aspect: new functionality that we can give people that > >they'll be actively want to switch to. However, I think we also need to > >do the "we replaced your favorite coffee brand... and you don't even > >know it" part wherever possible. * > I always notice when my favorite coffee shops changes a brand!! > However you are right, most people won't. :) Unless you tell them "This coffee shop no longer has coffee. Here, we have chai! It's _way_ better." It might even _be_ better. > >So, I really _do_ want the existing command to work, but maybe it's > >OpenSCAP underneath. > Do you think that this functionality should be integrated with > existing dnf commands? So, yeah, I do -- at least for the demo and basic functionality. It might be that extended functionality better belongs in its own thing. But, hey, part of the justification for all the investment in DNF is supposed to be that it now has a defined plugin API. > That would be beneficial for some, however we are trying to make the > use-case even easier then before. You perhaps do not want to turn on > all the containers and mount all the images and run the command, > right? Yeah, probably not. > >>The problem we are currently facing in Fedora is that you need to > >>have a data that you feed to the scanner. Hence, this CVE analysis [...] > >What is needed for that to happen? > I think Bodhi has all the data it needs. We just need someone to > write a script to query the data from Bodhi database and put it into > that XML that OpenSCAP can parse. So what it sounds like is what we need is to find "someone". :) -- Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> Fedora Project Leader -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx http://lists.fedoraproject.org/admin/lists/devel@xxxxxxxxxxxxxxxxxxxxxxx
