[PATCH] added transform to map SRG elements to guidance Rules - scap-security-guide - Fedora mailing-lists

9 Apr 2012

---
 rhel6/src/transforms/table-srgmap.xslt |  117 ++++++++++++++++++++++++++++++++
 1 files changed, 117 insertions(+), 0 deletions(-)
 create mode 100644 rhel6/src/transforms/table-srgmap.xslt

diff --git a/rhel6/src/transforms/table-srgmap.xslt b/rhel6/src/transforms/table-srgmap.xslt
new file mode 100644
index 0000000..a502d24
--- /dev/null
+++ b/rhel6/src/transforms/table-srgmap.xslt
@@ -0,0 +1,117 @@
+<?xml version="1.0" encoding="utf-8" standalone="yes"?>
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml%22%3E
+
+<!-- this style sheet is designed to take as input the OS SRG and a body of XCCDF content (e.g. draft STIG), 
+     and to map the requirements from the SRG to Rules in the XCCDF (which include CCIs as idents). 
+     The output shows how a body of XCCDF meets SRG requirements. -->
+
+<xsl:include href="constants.xslt"/>
+
+<xsl:variable name="rules" select="document($map-to-rules)//cdf:Rule" />
+<!-- expecting external variable "map-to-rules" is filename to an XCCDF document with Rules -->
+<xsl:variable name="title" select="document($map-to-rules)/cdf:Benchmark/cdf:title" />
+
+	<xsl:template match="/">
+		<html>
+		<head>
+			<title>
+			CCIs from <xsl:value-of select="cdf:Benchmark/cdf:title"/> Mapped to <xsl:value-of select="$title"/>
+ 			</title>
+		</head>
+		<body>
+			<br/> <br/> 
+			<div style="text-align: center; font-size: x-large; font-weight:bold">
+			CCIs from <xsl:value-of select="cdf:Benchmark/cdf:title"/> Mapped to <xsl:value-of select="$title"/>
+			</div>
+			<br/> <br/>
+			<xsl:apply-templates select="cdf:Benchmark"/>
+		</body>
+		</html>
+	</xsl:template>
+
+
+	<xsl:template match="cdf:Benchmark">
+		<style type="text/css">
+		table
+		{
+			border-collapse:collapse;
+		}
+		table,th, td
+		{
+			border: 1px solid black;
+			vertical-align: top;
+			padding: 3px;
+		}
+		thead
+		{
+			display: table-header-group;
+			font-weight: bold;
+		}
+		</style>
+		<table>
+			<thead>
+				<td>SRG ID</td>
+				<td>CCI ID</td>
+				<td>SRG Title</td>
+				<td>SRG Description</td>
+				<td>Rules Mapped</td>
+			</thead>
+			<xsl:for-each select=".//cdf:Rule">
+				<xsl:sort select="cdf:version"/>
+				<xsl:call-template name="output-rule-info"> 
+					<xsl:with-param name="srg_id"><xsl:value-of select="cdf:version"/></xsl:with-param>
+					<xsl:with-param name="srg_cci"><xsl:value-of select="cdf:ident"/></xsl:with-param>
+					<xsl:with-param name="srg_title"><xsl:value-of select="cdf:title"/></xsl:with-param>
+					<xsl:with-param name="srg_desc"><xsl:value-of select="cdf:description"/></xsl:with-param>
+				</xsl:call-template> 
+			</xsl:for-each>
+		</table>
+	</xsl:template>
+
+	<xsl:template name="output-rule-info">
+      <xsl:param name="srg_id" />
+      <xsl:param name="srg_cci" />
+      <xsl:param name="srg_title" />
+      <xsl:param name="srg_desc" />
+		  <tr>
+		  <td> <xsl:value-of select="$srg_id"/> </td> 
+		  <td> <xsl:value-of select="$srg_cci"/> </td> 
+		  <td> <xsl:value-of select="$srg_title"/> </td>
+		  <td> <xsl:value-of select="$srg_desc"/> </td>
+		  <td>
+      		<!-- iterate over the Rules in the (externally-provided) XCCDF document -->
+			<xsl:for-each select="$rules">
+				<xsl:variable name="rule" select="."/>
+				<table>
+				<xsl:for-each select="cdf:ident[@system='http://iase.disa.mil/cci/index.html%27%5D%22%3E 
+			  		<xsl:if test="self::node()[text()=$srg_cci]" >
+						<tr>
+						<td> <xsl:value-of select="$rule/cdf:title"/> </td>
+						<td> <xsl:apply-templates select="$rule/cdf:description"/> </td>
+				  		</tr>
+			  		</xsl:if>
+				</xsl:for-each>
+				</table>
+			</xsl:for-each>
+			</td>
+		  </tr>
+	</xsl:template>
+
+	<!-- get rid of XHTML namespace since we're outputting to HTML -->
+	<xsl:template match="xhtml:*">
+		<xsl:element name="{local-name()}">
+ 			<xsl:apply-templates select="node()|@*"/>
+		</xsl:element>
+	</xsl:template>
+
+	<xsl:template match="@*|node()">
+		xsl:copy
+			<xsl:apply-templates select="@*|node()"/>
+		</xsl:copy>
+	</xsl:template>
+
+	<xsl:template match="cdf:description">
+		<xsl:apply-templates select="@*|node()" />
+	</xsl:template>
+
+</xsl:stylesheet>
-- 
1.7.1


    