2025

January

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

List overview
Download

scap-security-guide September 2012

scap-security-guide@lists.fedorahosted.org

18 participants
92 discussions

Start a nNew thread

[PATCH 7/7] General prose updates to Permissions/Partitions section
by Shawn Wells 04 Sep '12

04 Sep '12

3 4

content validation
by Gary Gapinski 03 Sep '12

03 Sep '12

I did a quick check of the generated content against the SCAP Content Validation Tool <http://scap.nist.gov/revision/1.1/index.html#validation>. I first created CPE definition and OVAL documents (available when needed; I can check into the project after I grok proper commit conduct). These are unfortunately required for conformance with SP 800-126. I then noticed that the OVAL ids are not in OVAL format, so further validation attempts will have to await assignment of OVAL-conformant identifiers. Also noticed: xsi:schemaLocation attributes in XCCDF and OVAL documents should cite "canonical" URIs for desired schema documents rather than document-relative citations they do currently, e.g., xsi:schemaLocation=" http://oval.mitre.org/XMLSchema/oval-common-5 http://oval.mitre.org/language/version5.8/ovaldefinition/complete/oval-comm… http://oval.mitre.org/XMLSchema/oval-definitions-5 http://oval.mitre.org/language/version5.8/ovaldefinition/complete/oval-defi… http://oval.mitre.org/XMLSchema/oval-definitions-5#independent http://oval.mitre.org/language/version5.8/ovaldefinition/complete/independe… http://oval.mitre.org/XMLSchema/oval-definitions-5#linux http://oval.mitre.org/language/version5.8/ovaldefinition/complete/linux-def… http://oval.mitre.org/XMLSchema/oval-definitions-5#unix http://oval.mitre.org/language/version5.8/ovaldefinition/complete/unix-defi…"> As such, the documents cannot be validated using the supplied xsi:schemaLocation attributes. For those who cannot use direct web references, XML Catalog (examples also available) can be used to employ local copies in lieu of direct references. And, an OVAL version (presumably 5.8 or later) should be selected.

3 5