Alexis Lothoré
7c85f3adf4
Introduce the openscap package. openscap is a command line tool allowing to scan a system configuration to perform security compliance checks. The tool consumes XCCDF and OVAL files to perform system evaluation against a list of policies. The package provides both a target and a host build configuration, as it is needed on both sides: - it is needed on the host to allow building the security policy files to be embedded on the target - it is needed on the target to actually parse and evaluate those security policy files. Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com> [Thomas: - Drop dependency on openssl, apparently not needed - Depend on gcrypt if !nss, as either can be used - Add missing dependency on libxslt] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
25 lines
856 B
Plaintext
25 lines
856 B
Plaintext
config BR2_PACKAGE_OPENSCAP
|
|
bool "openscap"
|
|
depends on BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS # libgcrypt
|
|
depends on !BR2_STATIC_LIBS # dlfcn.h
|
|
select BR2_PACKAGE_LIBCURL
|
|
# In theory should build without crypto, but in practice it
|
|
# doesn't: https://github.com/OpenSCAP/openscap/issues/2310
|
|
select BR2_PACKAGE_LIBGCRYPT if !BR2_PACKAGE_LIBNSS
|
|
select BR2_PACKAGE_LIBXML2
|
|
select BR2_PACKAGE_LIBXSLT
|
|
select BR2_PACKAGE_LIBXMLSEC1
|
|
select BR2_PACKAGE_MUSL_FTS if !BR2_TOOLCHAIN_USES_GLIBC
|
|
select BR2_PACKAGE_PCRE
|
|
select BR2_PACKAGE_PCRE_UTF
|
|
help
|
|
The purpose of this project is to create security policy
|
|
content for various platforms
|
|
|
|
https://www.open-scap.org/
|
|
https://github.com/OpenSCAP/openscap
|
|
|
|
comment "openscap needs a toolchain w/ dynamic library"
|
|
depends on BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS
|
|
depends on BR2_STATIC_LIBS
|