Re: [RFC cip-dev][isar-cip-core][PATCH 04/14] Add github.com/ovh/debian-cis for the hardening validation

On 24.07.26 14:39, Quirin Gylstorff wrote:
> From: Quirin Gylstorff <[email protected]>
> 
> This creates a Debian package out of https://github.com/ovh/debian-cis/
> to validate the hardening level during runtime.
> 
> Co-Authored-by: Felix Moessbauer <[email protected]>
> Signed-off-by: Quirin Gylstorff <[email protected]>
> ---
>  recipes-security/cis-hardening/cis-hardening_4.1-6.bb | 6 ++++++
>  1 file changed, 6 insertions(+)
>  create mode 100644 recipes-security/cis-hardening/cis-hardening_4.1-6.bb
> 
> diff --git a/recipes-security/cis-hardening/cis-hardening_4.1-6.bb b/recipes-security/cis-hardening/cis-hardening_4.1-6.bb
> new file mode 100644
> index 0000000..bed2dae
> --- /dev/null
> +++ b/recipes-security/cis-hardening/cis-hardening_4.1-6.bb
> @@ -0,0 +1,6 @@
> +inherit dpkg
> +
> +DPKG_ARCH = "all"
> +
> +SRC_URI = "git://github.com/ovh/debian-cis.git;protocol=https;destsuffix=${P};nobranch=1"
> +SRCREV = "efbd5b35ba32226e8950d52bd3f3444c702bbd84"

What is the lifecycle of this project? As CIP, we are linking one
specific version of it, and we may have to bump it at some point in
order to fix bugs or add support for newer Debian releases. When will
upstream drop support for older Debian versions then? Will that survive
10 years?

Jan

-- 
Siemens AG, Foundational Technologies
Linux Expert Center