OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Secu

 View Only

  • 1.  Proposal

    Posted 06-10-2025 13:56
    All,

    After our conversation today on the call, I would like to propose the following changes.

    1. We rename the command "Bash" to "Shell" and then add a property that captures which type of shell to use, bash, sh, zsh, etc, where bash is the default

    2. Remove the SSH command so that it no longer conflicts with the target of SSH. Since SSH is most often going to be viewed as a transport rather than a command. Now I know that SSH can be viewed as both. But I think the vast majority will think of SSH as a transport to something like running a bash command.

    I think this will be the first step to us separating commands and targets into the right buckets and also open the discussion for how best to deal with transports. Because I am beginning to think that transports need to be their own thing anyways. Some of the problems we have, I believe, is because we are conflating a few of these things. 

    Let me know if you have any questions, concerns, or if you object to this change. If I do not hear any objections, I will move forward with this.

    Bret




  • 2.  RE: Proposal

    Posted 06-10-2025 18:34
    Hi Bret et al - 

    1) I agree with renaming to Shell instead of bash. 
    2) I suggest a slight modification to what you are suggesting. Agree to get rid of SSH as a separate command but also add SSH as an option to the Shell command being renamed in 1).

    I think the key to this proposal is in the name of SSH. It's Secure Shell. :-)

    So it would seem to me that if someone wants to use SSH instead of regular / other shell then just invoke the Shell Command with the SSH option specified.

    I think this fits well.

    Allan

    On Jun 10, 2025, at 10:56 AM, Bret Jordan via OASIS <Mail@mail.groups.oasis-open.org> wrote:





    Original Message


  • 3.  RE: Proposal

    Posted 06-10-2025 19:11
    Agreed. I like that idea. I have made that change.

    Bret

    On Tue, Jun 10, 2025 at 4:34 PM Allan Thomson via OASIS <Mail@mail.groups.oasis-open.org> wrote:
    Hi Bret et al - 1) I agree with renaming to Shell instead of bash. 2) I suggest a slight modification to what you are suggesting. Agree to get... -posted to the "OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Security" community

    OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Secu

    Post New Message
    Re: Proposal
    Reply to Group Reply to Sender via Email
    Jun 10, 2025 6:34 PM
    Allan Thomson
    Hi Bret et al - 

    1) I agree with renaming to Shell instead of bash. 
    2) I suggest a slight modification to what you are suggesting. Agree to get rid of SSH as a separate command but also add SSH as an option to the Shell command being renamed in 1).

    I think the key to this proposal is in the name of SSH. It's Secure Shell. :-)

    So it would seem to me that if someone wants to use SSH instead of regular / other shell then just invoke the Shell Command with the SSH option specified.

    I think this fits well.

    Allan

    On Jun 10, 2025, at 10:56 AM, Bret Jordan via OASIS <Mail@mail.groups.oasis-open.org> wrote:
      Reply to Group via Email   Reply to Sender via Email   View Thread   Recommend   Forward  

    Original Message



     
    You are subscribed to "OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Secu" as bret.jordan.sdo@gmail.com. To change your subscriptions, go to My Subscriptions. To unsubscribe from this community discussion, go to Unsubscribe.



    Original Message:
    Sent: 6/10/2025 6:34:00 PM
    From: Allan Thomson
    Subject: RE: Proposal

    Hi Bret et al - 

    1) I agree with renaming to Shell instead of bash. 
    2) I suggest a slight modification to what you are suggesting. Agree to get rid of SSH as a separate command but also add SSH as an option to the Shell command being renamed in 1).

    I think the key to this proposal is in the name of SSH. It's Secure Shell. :-)

    So it would seem to me that if someone wants to use SSH instead of regular / other shell then just invoke the Shell Command with the SSH option specified.

    I think this fits well.

    Allan

    On Jun 10, 2025, at 10:56 AM, Bret Jordan via OASIS <Mail@mail.groups.oasis-open.org> wrote:






Related Content