This patch takes the "conditional clause" attribute from the contrived "ocil-transitional" check system and uses it to create a question for users.
This should allow the scap-security-guide content to act as a bridge between the robotic and special "this is a finding" phrasing found in DISA STIGs, and OCIL designed for human interaction. We can generate both.
Jeffrey Blank (1): added interrogatory phrase to OCIL questions
RHEL6/transforms/xccdf-create-ocil.xslt | 10 +++++++--- 1 files changed, 7 insertions(+), 3 deletions(-)
Signed-off-by: Jeffrey Blank blank@eclipse.ncsc.mil --- RHEL6/transforms/xccdf-create-ocil.xslt | 10 +++++++--- 1 files changed, 7 insertions(+), 3 deletions(-)
diff --git a/RHEL6/transforms/xccdf-create-ocil.xslt b/RHEL6/transforms/xccdf-create-ocil.xslt index 77a8d05..d4825b1 100644 --- a/RHEL6/transforms/xccdf-create-ocil.xslt +++ b/RHEL6/transforms/xccdf-create-ocil.xslt @@ -1,16 +1,19 @@ <?xml version="1.0"?> -<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" exclude-result-prefixes="cdf"> +<xsl:stylesheet version="1.0" +xmlns:xsl="http://www.w3.org/1999/XSL/Transform" +xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" exclude-result-prefixes="cdf" +xmlns:xhtml="http://www.w3.org/1999/xhtml" +xmlns:date="http://exslt.org/dates-and-times" extension-element-prefixes="date" >
<!-- This transform expects checks with system "ocil-transitional" and that these contain check-content that can transformed into OCIL questionnaires. -->
- <xsl:template match="/"> <ocil xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://scap.nist.gov/schema/ocil/2.0" > <generator> <schema_version>2.0</schema_version> - <timestamp>2009-05-20T12:06:31</timestamp> + <timestamp><xsl:value-of select="date:date()"/></timestamp> </generator>
<questionnaires> @@ -47,6 +50,7 @@ <boolean_question id="{@id}_question"> <question_text> <xsl:apply-templates select="cdf:check[@system='ocil-transitional']/cdf:check-content"/> + Is it the case that <xsl:value-of select="cdf:check[@system='ocil-transitional']/cdf:check-export/@export-name"/>? </question_text> </boolean_question> </xsl:if>
Looks great (and much needed), please push!
On 08/22/2013 11:22 PM, Jeffrey Blank wrote:
This patch takes the "conditional clause" attribute from the contrived "ocil-transitional" check system and uses it to create a question for users.
This should allow the scap-security-guide content to act as a bridge between the robotic and special "this is a finding" phrasing found in DISA STIGs, and OCIL designed for human interaction. We can generate both.
Jeffrey Blank (1): added interrogatory phrase to OCIL questions
RHEL6/transforms/xccdf-create-ocil.xslt | 10 +++++++--- 1 files changed, 7 insertions(+), 3 deletions(-)
scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
scap-security-guide@lists.fedorahosted.org