$ ./verify-input-sanity.py WARNING: OVAL check src/input/checks/accounts_password_minclass_login_defs.xml has ID "accounts_password_pam_cracklib_minclass" the ID should match the file name without the .xml WARNING: OVAL check src/input/checks/accounts_passwords_pam_fail_interval.xml has ID "accounts_passwords_pam_faillock_fail_interval" the ID should match the file name without the .xml WARNING: XCCDF Rule "disable_logwatch_for_logserver" references OVAL check "logwatch_disabled_for_logserver" which does not exist problem occurs in file: src/input/system/logging.xml WARNING: XCCDF Rule "set_gdm_login_banner_text" references OVAL check "banner_gui_text_set" which does not exist problem occurs in file: src/input/system/accounts/banners.xml WARNING: XCCDF Rule "deny_password_attempts_fail_interval" references OVAL check "accounts_passwords_pam_faillock_fail_interval" which does not exist problem occurs in file: src/input/system/accounts/pam.xml Traceback (most recent call last): File "./verify-input-sanity.py", line 130, in tree = ET.fromstring(xccdf_xml_contents) File "lxml.etree.pyx", line 2993, in lxml.etree.fromstring (src/lxml/lxml.etree.c:62557) File "parser.pxi", line 1617, in lxml.etree._parseMemoryDocument (src/lxml/lxml.etree.c:92539) File "parser.pxi", line 1495, in lxml.etree._parseDoc (src/lxml/lxml.etree.c:91352) File "parser.pxi", line 1011, in lxml.etree._BaseParser._parseDoc (src/lxml/lxml.etree.c:88025) File "parser.pxi", line 577, in lxml.etree._ParserContext._handleParseResultDoc (src/lxml/lxml.etree.c:83766) File "parser.pxi", line 676, in lxml.etree._handleParseResult (src/lxml/lxml.etree.c:84869) File "parser.pxi", line 616, in lxml.etree._raiseParseError (src/lxml/lxml.etree.c:84192) lxml.etree.XMLSyntaxError: XML declaration allowed only at the start of the document, line 1, column 49