From maura at eclipse.ncsc.mil Thu Aug 20 11:34:42 2015 Content-Type: multipart/mixed; boundary="===============2792193620832269873==" MIME-Version: 1.0 From: Maura Dailey To: scap-security-guide at lists.fedorahosted.org Subject: New tested field for OVAL Checks Date: Wed, 31 Jul 2013 17:30:51 -0400 Message-ID: <51F9820B.1020401@eclipse.ncsc.mil> --===============2792193620832269873== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Going forward, we're going to use tags inside of OVAL checks = to track if they've been tested. An example is as follows: || Source should uniquely identify the tester (here, I used my initials); = ref_id should be in the format YYYYMMDD. We'll probably be adding empty = tags into all the checks to get everyone started. This is similar to the = tag in XCCDF, which is converted into an XCCDF tag = during our build process. Here is an example of the tag in an existing check. Note = that it comes just after the description tag, inside of . ||| || || || || || Verify permissions on 'group' file|| || || || Red Hat Enterprise Linux 6|| || || || File permissions for /etc/group should be set = correctly.|| || || || || || || || || || || || || || || || || || || || || || = || || true|| || true|| || false|| || true|| || false|| || false|| || true|| || false|| || false|| || || || || || /etc|| || group|| || || ||| - Maura Dailey --===============2792193620832269873== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CgogICAgPG1ldGEgaHR0cC1lcXVpdj0iY29udGVudC10eXBlIiBjb250 ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9SVNPLTg4NTktMSI+CiAgPC9oZWFkPgogIDxib2R5IGJn Y29sb3I9IiNGRkZGRkYiIHRleHQ9IiMwMDAwMDAiPgogICAgR29pbmcgZm9yd2FyZCwgd2UncmUg Z29pbmcgdG8gdXNlICZsdDtyZWZlcmVuY2UmZ3Q7IHRhZ3MgaW5zaWRlIG9mCiAgICBPVkFMIGNo ZWNrcyB0byB0cmFjayBpZiB0aGV5J3ZlIGJlZW4gdGVzdGVkLiBBbiBleGFtcGxlIGlzIGFzCiAg ICBmb2xsb3dzOjxicj4KICAgIDxicj4KICAgIDxjb2RlPiZsdDtyZWZlcmVuY2UgPC9jb2RlPjxj b2RlPnNvdXJjZT0iTUVEIiByZWZfaWQ9IjIwMTMwNzMxIgogICAgICByZWZfdXJsPSJ0ZXN0X2F0 dGVzdGF0aW9uIiAvJmd0OzwvY29kZT48YnI+CiAgICA8YnI+CiAgICBTb3VyY2Ugc2hvdWxkIHVu aXF1ZWx5IGlkZW50aWZ5IHRoZSB0ZXN0ZXIgKGhlcmUsIEkgdXNlZCBteQogICAgaW5pdGlhbHMp OyByZWZfaWQgc2hvdWxkIGJlIGluIHRoZSBmb3JtYXQgWVlZWU1NREQuIFdlJ2xsIHByb2JhYmx5 CiAgICBiZSBhZGRpbmcgZW1wdHkgdGFncyBpbnRvIGFsbCB0aGUgY2hlY2tzIHRvIGdldCBldmVy eW9uZSBzdGFydGVkLgogICAgVGhpcyBpcyBzaW1pbGFyIHRvIHRoZSAmbHQ7dGVzdGVkJmd0OyB0 YWcgaW4gWENDREYsIHdoaWNoIGlzCiAgICBjb252ZXJ0ZWQgaW50byBhbiBYQ0NERiAmbHQ7cmVm ZXJlbmNlJmd0OyB0YWcgZHVyaW5nIG91ciBidWlsZAogICAgcHJvY2Vzcy48YnI+CiAgICA8YnI+ CiAgICBIZXJlIGlzIGFuIGV4YW1wbGUgb2YgdGhlICZsdDtyZWZlcmVuY2UmZ3Q7IHRhZyBpbiBh biBleGlzdGluZwogICAgY2hlY2suIE5vdGUgdGhhdCBpdCBjb21lcyBqdXN0IGFmdGVyIHRoZSBk ZXNjcmlwdGlvbiB0YWcsIGluc2lkZSBvZgogICAgJmx0O21ldGFkYXRhJmd0Oy48YnI+CiAgICA8 YnI+CiAgICA8Y29kZT4mbHQ7ZGVmLWdyb3VwJmd0OzwvY29kZT48Y29kZT48YnI+CiAgICA8L2Nv ZGU+PGNvZGU+Jm5ic3A7ICZsdDtkZWZpbml0aW9uIGNsYXNzPSJjb21wbGlhbmNlIgogICAgICBp ZD0iZmlsZV9wZXJtaXNzaW9uc19ldGNfZ3JvdXAiIHZlcnNpb249IjEiJmd0OzwvY29kZT48Y29k ZT48YnI+CiAgICA8L2NvZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDttZXRhZGF0YSZn dDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmbHQ7dGl0bGUmZ3Q7VmVyaWZ5IHBlcm1pc3Npb25zIG9uICdncm91cCcKICAg ICAgZmlsZSZsdDsvdGl0bGUmZ3Q7PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29kZT4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0O2FmZmVjdGVkIGZhbWlseT0idW5peCIm Z3Q7PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29kZT4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0O3BsYXRmb3JtJmd0O1JlZCBIYXQgRW50ZXJwcmlz ZSBMaW51eAogICAgICA2Jmx0Oy9wbGF0Zm9ybSZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9j b2RlPjxjb2RlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7L2FmZmVjdGVkJmd0 OzwvY29kZT48Y29kZT48YnI+CiAgICA8L2NvZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICZsdDtkZXNjcmlwdGlvbiZndDtGaWxlIHBlcm1pc3Npb25zIGZvcgogICAgICAv ZXRjL2dyb3VwIHNob3VsZCBiZSBzZXQgY29ycmVjdGx5LiZsdDsvZGVzY3JpcHRpb24mZ3Q7PC9j b2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29kZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgJmx0O3JlZmVyZW5jZSBzb3VyY2U9Ik1FRCIgcmVmX2lkPSIyMDEzMDczMSIKICAgICAg cmVmX3VybD0idGVzdF9hdHRlc3RhdGlvbiIvJmd0OzwvY29kZT48Y29kZT48YnI+CiAgICA8L2Nv ZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDsvbWV0YWRhdGEmZ3Q7PC9jb2RlPjxjb2Rl Pjxicj4KICAgIDwvY29kZT48Y29kZT4mbmJzcDsmbmJzcDsmbmJzcDsgJmx0O2NyaXRlcmlhJmd0 OzwvY29kZT48Y29kZT48YnI+CiAgICA8L2NvZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICZsdDtjcml0ZXJpb24KICAgICAgdGVzdF9yZWY9ImZpbGVfcGVybWlzc2lvbnNf ZXRjX2dyb3VwX3Rlc3QiIC8mZ3Q7PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29kZT4m bmJzcDsmbmJzcDsmbmJzcDsgJmx0Oy9jcml0ZXJpYSZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAg PC9jb2RlPjxjb2RlPiZuYnNwOyAmbHQ7L2RlZmluaXRpb24mZ3Q7PC9jb2RlPjxjb2RlPjxicj4K ICAgIDwvY29kZT48Y29kZT4mbmJzcDsgJmx0O3VuaXg6ZmlsZV90ZXN0IGNoZWNrPSJhbGwiCiAg ICAgIGNoZWNrX2V4aXN0ZW5jZT0iYWxsX2V4aXN0IiBjb21tZW50PSJUZXN0aW5nIC9ldGMvZ3Jv dXAKICAgICAgcGVybWlzc2lvbnMiIGlkPSJmaWxlX3Blcm1pc3Npb25zX2V0Y19ncm91cF90ZXN0 IiB2ZXJzaW9uPSIxIiZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNw OyZuYnNwOyZuYnNwOyAmbHQ7dW5peDpvYmplY3QKICAgICAgb2JqZWN0X3JlZj0iZmlsZV9wZXJt aXNzaW9uc19ldGNfZ3JvdXBfb2JqZWN0IiAvJmd0OzwvY29kZT48Y29kZT48YnI+CiAgICA8L2Nv ZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDt1bml4OnN0YXRlCiAgICAgIHN0YXRlX3Jl Zj0iZmlsZV9wZXJtaXNzaW9uc19ldGNfZ3JvdXBfc3RhdGUiIC8mZ3Q7PC9jb2RlPjxjb2RlPjxi cj4KICAgIDwvY29kZT48Y29kZT4mbmJzcDsgJmx0Oy91bml4OmZpbGVfdGVzdCZndDs8L2NvZGU+ PGNvZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNwOyAmbHQ7dW5peDpmaWxlX3N0YXRlCiAg ICAgIGlkPSJmaWxlX3Blcm1pc3Npb25zX2V0Y19ncm91cF9zdGF0ZSIgdmVyc2lvbj0iMSImZ3Q7 PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29kZT4mbmJzcDsmbmJzcDsmbmJzcDsgJmx0 O3VuaXg6dXJlYWQKICAgICAgZGF0YXR5cGU9ImJvb2xlYW4iJmd0O3RydWUmbHQ7L3VuaXg6dXJl YWQmZ3Q7PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29kZT4mbmJzcDsmbmJzcDsmbmJz cDsgJmx0O3VuaXg6dXdyaXRlCiAgICAgIGRhdGF0eXBlPSJib29sZWFuIiZndDt0cnVlJmx0Oy91 bml4OnV3cml0ZSZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNwOyZu YnNwOyZuYnNwOyAmbHQ7dW5peDp1ZXhlYwogICAgICBkYXRhdHlwZT0iYm9vbGVhbiImZ3Q7ZmFs c2UmbHQ7L3VuaXg6dWV4ZWMmZ3Q7PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29kZT4m bmJzcDsmbmJzcDsmbmJzcDsgJmx0O3VuaXg6Z3JlYWQKICAgICAgZGF0YXR5cGU9ImJvb2xlYW4i Jmd0O3RydWUmbHQ7L3VuaXg6Z3JlYWQmZ3Q7PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48 Y29kZT4mbmJzcDsmbmJzcDsmbmJzcDsgJmx0O3VuaXg6Z3dyaXRlCiAgICAgIGRhdGF0eXBlPSJi b29sZWFuIiZndDtmYWxzZSZsdDsvdW5peDpnd3JpdGUmZ3Q7PC9jb2RlPjxjb2RlPjxicj4KICAg IDwvY29kZT48Y29kZT4mbmJzcDsmbmJzcDsmbmJzcDsgJmx0O3VuaXg6Z2V4ZWMKICAgICAgZGF0 YXR5cGU9ImJvb2xlYW4iJmd0O2ZhbHNlJmx0Oy91bml4OmdleGVjJmd0OzwvY29kZT48Y29kZT48 YnI+CiAgICA8L2NvZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDt1bml4Om9yZWFkCiAg ICAgIGRhdGF0eXBlPSJib29sZWFuIiZndDt0cnVlJmx0Oy91bml4Om9yZWFkJmd0OzwvY29kZT48 Y29kZT48YnI+CiAgICA8L2NvZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDt1bml4Om93 cml0ZQogICAgICBkYXRhdHlwZT0iYm9vbGVhbiImZ3Q7ZmFsc2UmbHQ7L3VuaXg6b3dyaXRlJmd0 OzwvY29kZT48Y29kZT48YnI+CiAgICA8L2NvZGU+PGNvZGU+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZs dDt1bml4Om9leGVjCiAgICAgIGRhdGF0eXBlPSJib29sZWFuIiZndDtmYWxzZSZsdDsvdW5peDpv ZXhlYyZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNwOyAmbHQ7L3Vu aXg6ZmlsZV9zdGF0ZSZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNw OyAmbHQ7dW5peDpmaWxlX29iamVjdCBjb21tZW50PSIvZXRjL2dyb3VwIgogICAgICBpZD0iZmls ZV9wZXJtaXNzaW9uc19ldGNfZ3JvdXBfb2JqZWN0IiB2ZXJzaW9uPSIxIiZndDs8L2NvZGU+PGNv ZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7dW5peDpwYXRo Jmd0Oy9ldGMmbHQ7L3VuaXg6cGF0aCZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9jb2RlPjxj b2RlPiZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7dW5peDpmaWxlbmFtZSZndDtncm91cCZsdDsvdW5p eDpmaWxlbmFtZSZndDs8L2NvZGU+PGNvZGU+PGJyPgogICAgPC9jb2RlPjxjb2RlPiZuYnNwOyAm bHQ7L3VuaXg6ZmlsZV9vYmplY3QmZ3Q7PC9jb2RlPjxjb2RlPjxicj4KICAgIDwvY29kZT48Y29k ZT4mbHQ7L2RlZi1ncm91cCZndDs8L2NvZGU+PGJyPgogICAgPGJyPgogICAgLSBNYXVyYSBEYWls ZXk8YnI+CiAgICA8YnI+CiAgPC9ib2R5Pgo8L2h0bWw+Cg== --===============2792193620832269873==--