Hello,
sorry for not doing this earlier, but life happened, some showstoppers were preventing me from uploading them and somebody else sponsored it. (and new packages can't go in Stretch, so during freeze there is no real hurry to upload them) However (even if I didn't upload the package), I would like to see something fixed: e.g. Build-Depends: debhelper (>=9), ^^ it is 10 now (also compat level should be 10) bash (>=4.3), sed (>=4.2) ^^ the version is satisfied in old-old-stable already, and they should be part of essential packages, so don't need to manually specify them same happens for runtime dependencies: Suggests: ansible (>= 2), puppet (>= 4.8), bash (>= 4.4) ansible is satisfied in stable and stable-bpo, so I would just remove that dependency, same for puppet and I would just remove bash (this package can't migrate to Stretch because of freeze, it can't go in stable right now) it might end in Buster, and then go in Stretch backports, or Jessie-backports-sloppy, and all the above versions will be satisfied. BTW the README.Debian seems still not pointing to real locations: # oscap xccdf eval --profile <profilename> \ --cpe /usr/share/<package-name>/ssg-<target>-cpe-dictionary.xml \ --results <resulsfile>.xml \ --report <reportfile>.html \ /usr/share/<package-name>/ssg-<target>-xccdf.xml cheers! G.
