> If there is a section in the SNAC guide that is instructive but
which
> cannot possibly have an OVAL check (such as for BIOS settings), just
> put the information into an XCCDF Group. Later, we can create OCIL
> content to handle things that will absolutely require manual
> inspection (or relate to policy/procedures).
There is a down side to this in that we can't attach ident/ref's to
groups. We could always just list the controls in the description for
these but it seems very kludgy. Putting rules in for these and making do
with the unknown in the results would probably serve us better in the
long run. Any and all unknown results should be reviewed manually anyway.
You're right. These should probably be things which are Rules, but
which are really awaiting OCIL checks. I'd forgotten to mention that
that's where we really want to go.