Gabe Alford

[RFE] Trust Model for Security Automation Data (TMSAD)

1

TMSAD describes a common trust model that can be applied to specifications within the security automation domain, such as Security Content Automation Protocol (SCAP). Since information in the security automation...

Windows: CMake FindPerlLibs is not finding the Perl Library even when it is installed

1

For example: https://ci.appveyor.com/project/OpenSCAP/openscap#L429

MacOS: Errors building system_info_probe.c

3

``` Users/travis/build/redhatrises/openscap/src/OVAL/probes/independent/system_info_probe.c:106:3: error: "Sorry, your OS isn't supported." # error "Sorry, your OS isn't supported." ```

[RFE] Expand USBGuard to work with optical media

3

While this is most likely out of scope of this project, it would be really, really nice to expand USBGuard to work with optical media (CD/DVD/BluRay) devices as well. Not...

References show what rules map to which policies. For example: ``` RHEL-7-010010 SV-86473r2_rule ``` are not viewable when they need to be. The fact that there is no way to...

When the OpenSCAP scanner has the ability to scan a windows system, we should investigate using PsExec for remote scanning of Windows system in workbench. https://docs.microsoft.com/en-us/sysinternals/downloads/psexec

Per conversation with the operator-framework team at KubeCon, there is an inherent security need for certain operators to only be installed based on a set of permissions in a simplified...

Certain remediations have the ability to brick a system and/or prevent any access to remediated system. An option such as `disable-remediation` or `--disable-remediation` should be added to the Oscap Anaconda...

BOSH-release for Falcon

3

Is there any plan in the pipeline to create a BOSH-release for Falcon?

- Useful for mixed EKS clusters - Needed for certain customer workloads to be able to customize namespace. - Prevents running a non-privileged workload next to a privileged workload