Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Track Red Hat Security Advisories (RHSA) and verifying systems for compliance
Python Shell
tree: 80fa2f1fa2

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
AUTHORS
COPYING
README
TODO
sarahdb.py
sarahinfo.py
sarahlib.py
sarahsql.py

README

DOWNLOADING ERRATA
^^^^^^^^^^^^^^^^^^
Sarah currently requires a stuffed directory of advisories from RHN as XML files.

You can download these files automatically by using the aerrate.py script from
Tim Rupp. Available from:

	cvs -d :pserver:anonymous@cdcvs.fnal.gov:/cvs/scientificlinux co aerrate

And issuing the following script:

	cd aerrate
	for release in rh{el4,el3,21}{as,es,ws} rhel{4,3}-extras rh-desktop-{4,3} rhel3{cluster,devsuite} rh21aw rhshas; do
		for type in security bugs enhancements; do
			echo "== $release / $type =="
			./aerrate.py -r --source=site --type=$type --release=$release
		done
	done
	cd -

This will copy all errata as XML files into ./aerrata/advisories/


USING SARAH
^^^^^^^^^^^
sarah currently expects the advisories to be available from ./advisories/. So making
a symlink from aerrate/advisories to ./advisories is probably easiest.

	ln -sf aerrate/advisories .

Then to create an sqlite database out of these XML files, run:

	./sarahdb.py

You should now have a sarahdb.sqlite file in your current directory.
To create some statistics from this database, use:

	./sarahinfo.py

The sarahinfo utility currently shows how to query the database. Not all information
is currently available in the XML files. Red Hat will be releasing these XML files
in the future with much more info.

Help is welcome to extend sarah much further. The TODO file is the first stop for
interesting parties.


PROXY PROBLEMS ?
^^^^^^^^^^^^^^^^
If you're behind a proxy that only allows SSL Proxy access (CONNECT method) for HTTPS sites,
you're currently out of luck. The urllib2 implementation of python only has the HTTPS GET
method implemented. More information at:

	https://devel.linux.duke.edu/bugzilla/show_bug.cgi?id=543
	http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/456195
Something went wrong with that request. Please try again.