Where the rules that you added inside the <Group> elements rather than just appended to the bottom of the file?

> <description> The SSG can be installed by using `yum install scap-security-guide` as a root user
Use <tt>yum install scap-security-guide</tt> or <pre>yum install scap-security-guide</pre> here.

Gabe

On Wed, Jun 21, 2017 at 11:05 AM, Bertilla Theodore <bertillatheodore1@gmail.com> wrote:
Yes, I thought so too. But I am not able to figure out what's wrong.
For one, the following is the exact content added to integrity.xml ( as per http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf )

<Rule id="package_scap-security-guide_installed" severity="high">

 <title>Install SCAP security guide</title>

 <description> The SSG can be installed by using `yum install scap-security-guide` as a root user

 </description>

 <ocil clause="SCAP Security guide is not installed">

 <package-check-macro package="scap-security-guide" />

 </ocil>

 <rational> Bertilla was here to  make this new rule

 </rational>

 <oval id="package_scap-security-guide_installed" />

</Rule>


On 21 June 2017 at 17:54, Shawn Wells <shawn@redhat.com> wrote:


On 6/21/17 12:44 PM, Bertilla Theodore wrote:
> I've attached the last part of the make process which has the errors.
> The new rules that I have added have not been parsed.

> xml:307: parser error : Extra content at the end of the document
> <Profile id="common">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/input/profiles/ftp-server.xml:16:
> parser error : Extra content at the end of the document
> <Profile id="ftp-server" extends="server">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/input/xccdf/system/software/integrity.xml:383:
> parser error : Extra content at the end of the document
> <Group id="integrity">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/input/xccdf/services/smb.xml:229:
> parser error : Extra content at the end of the document
> <Group id="smb">

I'm guessing there are missing brackets/syntax errors in the content
added to these files.

> ^
> [  0%] Built target generate-internal-rhel6-shorthand.xml
> [  0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 429: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 465: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 526: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 1908: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
> OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml.
> [oscap_so     urce.c:319]
> make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
> make[2]: ***
> [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-resolved.xml.dir/all]
> Error 2
> make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
> make: *** [rhel6-content] Error 2
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org


_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org