On Thu, 31 Jan 2013 21:44:32 -0500
Shawn Wells <shawn(a)redhat.com> wrote:
On 1/30/13 2:51 PM, Brian Millett wrote:
> When running make, I get the following error
>
> Duplicate ID, which will not be added: state_mode_0000
> Duplicate ID, which will not be added: state_uid_0
> Duplicate ID, which will not be added: state_gid_0
> xmllint --format --output output/unlinked-rhel6-oval.xml
> output/unlinked-rhel6-oval.xml transforms/cpe_generate.py
> output/unlinked-rhel6-oval.xml
> input/checks/platform/rhel6-cpe-dictionary.xml ssg
> transforms/relabelids.py unlinked-rhel6-xccdf.xml ssg
> transforms/relabelids.py unlinked-ocilrefs-rhel6-xccdf.xml ssg mkdir -p
> dist/guide dist/content dist/policytables cp output/rhel6-guide.html
> dist/guide cp output/ssg-rhel6-xccdf.xml dist/content cp
> output/ssg-rhel6-oval.xml dist/content cp: cannot stat
> ‘output/ssg-rhel6-oval.xml’: No such file or directory
>
> patch to get it to make correctly
>
> [bpm]$ diff -wruN Makefile.orig Makefile
> --- Makefile.orig 2013-01-30 13:47:55.554661112 -0600
> +++ Makefile 2013-01-30 13:48:07.914662435 -0600
> @@ -109,6 +109,7 @@
> $(TRANS)/cpe_generate.py $(OUT)/unlinked-rhel6-oval.xml
> $(IN)/checks/platform/rhel6-cpe-dictionary.xml $(ID)
> $(TRANS)/relabelids.py unlinked-rhel6-xccdf.xml $(ID)
> $(TRANS)/relabelids.py unlinked-ocilrefs-rhel6-xccdf.xml $(ID)
> + $(TRANS)/relabelids.py unlinked-rhel6-oval.xml $(ID)
>
> # not ready until oscap resolve behavior resolved
> content-stig: shorthand2xccdf guide checks
I wasn't able to duplicate the "cannot stat" error against the latest
HEAD. Could you do a git pull and see if you still receive the message?
Here's what I'm getting:
[shawn@rhel6 RHEL6]$ make clean; make content
......
oscap xccdf generate guide --profile allrules
output/unlinked-rhel6-xccdf-guide.xml > output/rhel6-guide.html
WARNING: Processing an unresolved XCCDF document. This may have
unexpected results.
xmlwf input/checks/*.xml
transforms/combinechecks.py input/checks > output/unlinked-rhel6-oval.xml
Duplicate ID, which will not be added: var_removable_partition
Duplicate ID, which will not be added: state_uid_0
Duplicate ID, which will not be added: state_gid_0
Duplicate ID, which will not be added: state_mode_0000
Duplicate ID, which will not be added: state_uid_0
Duplicate ID, which will not be added: state_gid_0
Duplicate ID, which will not be added: obj_package_gpg-pubkey
Duplicate ID, which will not be added: state_package_gpg-pubkey
Duplicate ID, which will not be added: obj_package_vlock
Duplicate ID, which will not be added: var_removable_partition
Duplicate ID, which will not be added: state_uid_root
Duplicate ID, which will not be added: state_uid_0
Duplicate ID, which will not be added: state_gid_0
Duplicate ID, which will not be added: obj_package_vsftpd
Duplicate ID, which will not be added: var_ssh_config_directory
Duplicate ID, which will not be added: obj_package_openldap-servers
Duplicate ID, which will not be added: object_etc_skel_files
Duplicate ID, which will not be added: var_samba_private_directory
xmllint --format --output output/unlinked-rhel6-oval.xml
output/unlinked-rhel6-oval.xml
transforms/cpe_generate.py output/unlinked-rhel6-oval.xml
input/checks/platform/rhel6-cpe-dictionary.xml ssg
transforms/relabelids.py unlinked-rhel6-xccdf.xml ssg
transforms/relabelids.py unlinked-ocilrefs-rhel6-xccdf.xml ssg
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
Here is a trace of those steps, there are two errors, the Makefile problem and
the xsl:attribute: The attribute name 'xmlns' is not allowed error.
Just did this at 2013-02-01 @ 7:30 CST
[bpm]$ git clone
http://git.fedorahosted.org/git/scap-security-guide.git
scap-security-guide-new
Cloning into 'scap-security-guide-new'...
remote: Counting objects: 14086, done.
remote: Compressing objects: 100% (5327/5327), done.
remote: Total 14086 (delta 10636), reused 10662 (delta 7718)
Receiving objects: 100% (14086/14086), 3.19 MiB | 1.15 MiB/s, done.
Resolving deltas: 100% (10636/10636), done.
[bpm]$ cd scap-security-guide-new/
[bpm]$ ls
JBossEAP5 LICENSE Makefile README RHEL6 scap-security-guide.spec
[bpm]$ make
cd RHEL6 && make
make[1]: Entering directory `/home/bpm/src/scap/scap-security-guide-new/RHEL6'
xsltproc -o output/rhel6-shorthand.xml input/guide.xslt input/guide.xml
xmllint --format --output output/rhel6-shorthand.xml output/rhel6-shorthand.xml
xsltproc -o output/unlinked-noprofiles-rhel6-xccdf.xml transforms/shorthand2xccdf.xslt
output/rhel6-shorthand.xml
compilation error: file transforms/shorthand2xccdf.xslt line 19 element attribute
xsl:attribute: The attribute name 'xmlns' is not allowed.
make[1]: *** [shorthand2xccdf] Error 5
make[1]: Leaving directory `/home/bpm/src/scap/scap-security-guide-new/RHEL6'
make: *** [rhel6] Error 2
[bpm]$ diff -wruN
RHEL6/transforms/shorthand2xccdf.xslt
../scap-security-guide/RHEL6/transforms/shorthand2xccdf.xslt
--- RHEL6/transforms/shorthand2xccdf.xslt 2013-02-01 07:37:29.783484940
-0600 +++ ../scap-security-guide/RHEL6/transforms/shorthand2xccdf.xslt
2013-01-30 12:47:03.971169578 -0600 @@ -15,12 +15,9 @@
<!-- Content:template -->
<xsl:template match="Benchmark">
- <xsl:copy>
- <xsl:attribute name="xmlns">
- <
xsl:text>http://checklists.nist.gov/xccdf/1.1</xsl:text>
- </xsl:attribute>
+ <xsl:element name="Benchmark"
namespace="http://checklists.nist.gov/xccdf/1.1"> <xsl:apply-templates
select="@*|node()" />
- </xsl:copy>
+ </xsl:element>
</xsl:template>
<!-- insert current date -->
[bpm]$ cp ../scap-security-guide/RHEL6/transforms/shorthand2xccdf.xslt
RHEL6/transforms/shorthand2xccdf.xslt
[bpm]$ make
cd RHEL6 && make
make[1]: Entering directory `/home/bpm/src/scap/scap-security-guide-new/RHEL6'
xsltproc -o output/rhel6-shorthand.xml input/guide.xslt input/guide.xml
xmllint --format --output output/rhel6-shorthand.xml output/rhel6-shorthand.xml
xsltproc -o output/unlinked-noprofiles-rhel6-xccdf.xml
transforms/shorthand2xccdf.xslt output/rhel6-shorthand.xml xsltproc
-stringparam profile "allprofiles" -o output/unlinked-rhel6-xccdf-prerefs.xml
\ transforms/xccdf-addprofiles.xslt output/unlinked-noprofiles-rhel6-xccdf.xml
xsltproc -stringparam profile "stig-rhel6-server" -o
output/unlinked-rhel6-xccdf.xml \ transforms/xccdf-addrefs.xslt
output/unlinked-rhel6-xccdf-prerefs.xml xsltproc -o
output/unlinked-rhel6-ocil.xml transforms/xccdf-create-ocil.xslt
output/unlinked-rhel6-xccdf.xml xmllint --format --output
output/unlinked-rhel6-ocil.xml output/unlinked-rhel6-ocil.xml xsltproc -o
output/unlinked-ocilrefs-rhel6-xccdf.xml transforms/xccdf-ocilcheck2ref.xslt
output/unlinked-rhel6-xccdf.xml xmllint --format --output
output/unlinked-rhel6-xccdf.xml output/unlinked-rhel6-xccdf.xml xsltproc
-stringparam ref "nist" -o output/table-rhel6-nistrefs.html
transforms/xccdf2table-byref.xslt output/unlinked-rhel6-xccdf.xml xsltproc
-stringparam ref "nist" -stringparam delim "," -o
output/table-rhel6-nistrefs-delim.html transforms/xccdf2table-byref.xslt
output/unlinked-rhel6-xccdf.xml xsltproc --html -o
output/table-rhel6-nistrefs-delim-sorted.html transforms/table-sortbyref.xslt
output/table-rhel6-nistrefs-delim.html xsltproc -o
output/table-rhel6-cces.html transforms/xccdf2table-cce.xslt
output/unlinked-rhel6-xccdf.xml xsltproc -stringparam ref
"../references/cce-rhel5.xml" -o output/table-rhel6-cces-rhel5.html
transforms/xccdf2table-cce.xslt output/unlinked-rhel6-xccdf.xml xsltproc
-stringparam profile "desktop" -o output/table-rhel6-nistrefs-desktop.html \
transforms/xccdf2table-profilenistrefs.xslt output/unlinked-rhel6-xccdf.xml
xsltproc -stringparam profile "server" -o
output/table-rhel6-nistrefs-server.html \
transforms/xccdf2table-profilenistrefs.xslt output/unlinked-rhel6-xccdf.xml
xsltproc -stringparam profile "common" -o
output/table-rhel6-nistrefs-common.html \
transforms/xccdf2table-profilenistrefs.xslt output/unlinked-rhel6-xccdf.xml
xsltproc -stringparam profile "ftp" -o output/table-rhel6-nistrefs-ftp.html \
transforms/xccdf2table-profilenistrefs.xslt output/unlinked-rhel6-xccdf.xml
xsltproc -stringparam map-to-items "../output/unlinked-rhel6-xccdf.xml" -o
output/table-rhel6-srgmap.html \ transforms/table-srgmap.xslt
references/disa-os-srg-v1r1.xml xsltproc -stringparam flat "y" -stringparam
map-to-items "../output/unlinked-rhel6-xccdf.xml" -o
output/table-rhel6-srgmap-flat.html \ transforms/table-srgmap.xslt
references/disa-os-srg-v1r1.xml xmllint --xmlout --html --output
output/table-rhel6-srgmap-flat.xhtml output/table-rhel6-srgmap-flat.html
xsltproc -o output/table-rhel5-stig.html transforms/xccdf2table-stig.xslt
references/disa-stig-rhel5-v1r0.6-xccdf.xml xsltproc -o
output/table-rhel5-stig-manual.html transforms/xccdf2table-stig.xslt
references/disa-stig-rhel5-v1r0.6-xccdf-manual.xml xsltproc --html -o
output/table-rhel5-stig-manual-ccisorted.html transforms/table-sortbyref.xslt
output/table-rhel5-stig-manual.html xsltproc -stringparam notes
"../input/auxiliary/transition_notes.xml" -o
output/table-rhel5-stig-manual-withnotes.html \
transforms/xccdf2table-stig.xslt \
references/disa-stig-rhel5-v1r0.6-xccdf-manual.xml xsltproc -stringparam
profile "stig-rhel6-server" -stringparam testinfo "y" -o
output/table-stig-rhel6-server-shorttitles.html \
transforms/xccdf2table-profileccirefs.xslt \ output/unlinked-rhel6-xccdf.xml
xsltproc -stringparam alttitles "../input/auxiliary/alt-titles-stig.xml" -o
output/unlinked-stig-rhel6-xccdf.xml \ transforms/xccdf-alt-titles.xslt \
output/unlinked-rhel6-xccdf.xml xsltproc -stringparam profile
"stig-rhel6-server" -o output/table-stig-rhel6-server.html \
transforms/xccdf2table-profileccirefs.xslt \
output/unlinked-stig-rhel6-xccdf.xml xsltproc --html -o
output/table-stig-rhel6-server.html transforms/table-add-vulnids.xslt
output/table-stig-rhel6-server.html xsltproc -stringparam profile
"stig-rhel6-server" -stringparam format "flat" -o
output/table-stig-rhel6-server-flat.html \
transforms/xccdf2table-profileccirefs.xslt \
output/unlinked-stig-rhel6-xccdf.xml xsltproc --novalid --html -o
output/table-stig-rhel6-server-flat-srgs.html
transforms/table-add-srgitems.xslt output/table-stig-rhel6-server-flat.html
xsltproc --novalid --html -o output/table-stig-rhel6-server-srgs.html
transforms/table-add-srgitems.xslt output/table-stig-rhel6-server.html
xsltproc --html -o output/table-stig-rhel6-server-flat.html
transforms/table-add-vulnids.xslt output/table-stig-rhel6-server-flat.html
xsltproc -o output/unlinked-rhel6-xccdf-guide.xml
transforms/xccdf-removeaux.xslt output/unlinked-rhel6-xccdf.xml oscap xccdf
generate guide --profile allrules output/unlinked-rhel6-xccdf-guide.xml >
output/rhel6-guide.html WARNING: Processing an unresolved XCCDF document. This
may have unexpected results. xmlwf input/checks/*.xml
transforms/combinechecks.py input/checks > output/unlinked-rhel6-oval.xml
Duplicate ID, which will not be added: var_removable_partition Duplicate ID,
which will not be added: obj_package_gpg-pubkey Duplicate ID, which will not
be added: state_package_gpg-pubkey Duplicate ID, which will not be added:
obj_package_vlock Duplicate ID, which will not be added: object_etc_skel_files
Duplicate ID, which will not be added: state_uid_0 Duplicate ID, which will
not be added: state_gid_0 Duplicate ID, which will not be added:
var_removable_partition Duplicate ID, which will not be added:
obj_package_vsftpd Duplicate ID, which will not be added: state_uid_root
Duplicate ID, which will not be added: var_ssh_config_directory Duplicate ID,
which will not be added: obj_package_openldap-servers Duplicate ID, which will
not be added: var_samba_private_directory Duplicate ID, which will not be
added: state_uid_0 Duplicate ID, which will not be added: state_gid_0
Duplicate ID, which will not be added: state_mode_0000 Duplicate ID, which
will not be added: state_uid_0 Duplicate ID, which will not be added:
state_gid_0 xmllint --format --output output/unlinked-rhel6-oval.xml
output/unlinked-rhel6-oval.xml transforms/cpe_generate.py
output/unlinked-rhel6-oval.xml input/checks/platform/rhel6-cpe-dictionary.xml
ssg transforms/relabelids.py unlinked-rhel6-xccdf.xml ssg
transforms/relabelids.py unlinked-ocilrefs-rhel6-xccdf.xml ssg mkdir -p
dist/guide dist/content dist/policytables cp output/rhel6-guide.html
dist/guide cp output/ssg-rhel6-xccdf.xml dist/content cp
output/ssg-rhel6-oval.xml dist/content cp: cannot stat
‘output/ssg-rhel6-oval.xml’: No such file or directory make[1]: *** [dist]
Error 1 make[1]: Leaving directory
`/home/bpm/src/scap/scap-security-guide-new/RHEL6' make: *** [rhel6] Error 2
--
Brian Millett
"On Narn, we heard the decision to surrender came from your holy men. A
secret group called the Gray Council. Weak, frightened old fools with
no vision or the will to fight."
-- [ G'Kar (to Delenn), "The Gathering"]