GabeWhere the rules that you added inside the <Group> elements rather than just appended to the bottom of the file?Use <tt>yum install scap-security-guide</tt> or <pre>yum install scap-security-guide</pre> here.
> <description> The SSG can be installed by using `yum install scap-security-guide` as a root userOn Wed, Jun 21, 2017 at 11:05 AM, Bertilla Theodore <bertillatheodore1@gmail.com> wrote:Yes, I thought so too. But I am not able to figure out what's wrong.For one, the following is the exact content added to integrity.xml ( as per http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Cou )rsebook-v2.pdf <Rule id="package_scap-security-guid
e_installed" severity="high"> <title>Install SCAP security guide</title>
<description> The SSG can be installed by using `yum install scap-security-guide` as a root user
</description>
<ocil clause="SCAP Security guide is not installed">
<package-check-macro package="scap-security-guide" />
</ocil>
<rational> Bertilla was here to make this new rule
</rational>
<oval id="package_scap-security-guid
e_installed" /> </Rule>
On 21 June 2017 at 17:54, Shawn Wells <shawn@redhat.com> wrote:
On 6/21/17 12:44 PM, Bertilla Theodore wrote:
> I've attached the last part of the make process which has the errors.
> The new rules that I have added have not been parsed.
> xml:307: parser error : Extra content at the end of the document
> <Profile id="common">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/in put/profiles/ftp-server.xml:16 :
> parser error : Extra content at the end of the document
> <Profile id="ftp-server" extends="server">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/in put/xccdf/system/software/inte grity.xml:383:
> parser error : Extra content at the end of the document
> <Group id="integrity">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/in put/xccdf/services/smb.xml:229 :
> parser error : Extra content at the end of the document
> <Group id="smb">
I'm guessing there are missing brackets/syntax errors in the content
added to these files.
> ^
> [ 0%] Built target generate-internal-rhel6-shorthand.xml
> [ 0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R HEL/6/xccdf-unlinked-resolved. xml'
> line 429: Element '{http://checklists.nist.gov/xccdf/1.1}Profile ': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef '.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R HEL/6/xccdf-unlinked-resolved. xml'
> line 465: Element '{http://checklists.nist.gov/xccdf/1.1}Profile ': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef '.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R HEL/6/xccdf-unlinked-resolved. xml'
> line 526: Element '{http://checklists.nist.gov/xccdf/1.1}Profile ': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef '.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R HEL/6/xccdf-unlinked-resolved. xml'
> line 1908: Element '{http://checklists.nist.gov/xccdf/1.1}Profile ': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef '.
> OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/RH EL/6/xccdf-unlinked-resolved. xml.
> [oscap_so urce.c:319]
> make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
> make[2]: ***
> [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-re solved.xml.dir/all]
> Error 2
> make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
> make: *** [rhel6-content] Error 2
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org