Sure, no prob. It is notable, however, that this is dependent upon the
quality of our mapping of the CCIs in the OS SRG to our content.
I have also been looking into how we can also view (side by side) the
800-53 text, to provide a little more context. Any feedback on mappings
is warmly welcomed.
NIST have provided the ability to view 800-53 online (from any browser),
and also to export it into XML -- if you're on a Windows system. :)
On 08/26/2012 09:30 PM, Shawn Wells wrote:
On 8/24/12 12:48 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank <blank(a)eclipse.ncsc.mil>
> ---
> RHEL6/transforms/xccdf2table-profileccirefs.xslt | 17
> +++++++++++++++--
> 1 files changed, 15 insertions(+), 2 deletions(-)
>
> diff --git a/RHEL6/transforms/xccdf2table-profileccirefs.xslt
> b/RHEL6/transforms/xccdf2table-profileccirefs.xslt
> index 94197b3..0c0eb1e 100644
> --- a/RHEL6/transforms/xccdf2table-profileccirefs.xslt
> +++ b/RHEL6/transforms/xccdf2table-profileccirefs.xslt
> @@ -1,8 +1,10 @@
> <?xml version="1.0" encoding="utf-8"
standalone="yes"?>
> -<xsl:stylesheet version="1.0"
>
xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
>
xmlns:dc="http://purl.org/dc/elements/1.1/"
>
xmlns:cdf="http://checklists.nist.gov/xccdf/1.1"
>
xmlns:xhtml="http://www.w3.org/1999/xhtml">
> +<xsl:stylesheet version="1.0"
>
xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
>
xmlns:dc="http://purl.org/dc/elements/1.1/"
>
xmlns:cdf="http://checklists.nist.gov/xccdf/1.1"
>
xmlns:cci="http://iase.disa.mil/cci"
>
xmlns:xhtml="http://www.w3.org/1999/xhtml">
> <!-- this style sheet expects parameter $profile, which is the id
> of the Profile to be shown -->
> +<xsl:variable name="cci_list"
> select="document('../references/disa-cci-list.xml')/cci:cci_list"
/>
> +
> <xsl:include href="constants.xslt"/>
> <xsl:template match="/">
> @@ -49,7 +51,7 @@
> <td>Discussion (Rationale)</td>
> <td>Fix Text (Description)</td>
> <!-- <td>Variable Setting</td> -->
> - <td>CCI Ref</td>
> + <td>CCI Ref<br/>(800-53 Origin)</td>
> </thead>
> <xsl:call-template name="profileplate">
> @@ -123,6 +125,17 @@
> <xsl:variable name="cci_formatted"
> select='format-number(self::node()[text()], "000000")' />
> <xsl:variable name="cci_expanded"
> select="concat('CCI-', $cci_formatted)" />
> <xsl:value-of select="$cci_expanded"/>
> + <xsl:text> (</xsl:text>
> + <xsl:for-each
> select="$cci_list/cci:cci_items/cci:cci_item">
> + <xsl:if test="@id=$cci_expanded">
> + <xsl:for-each
> select="cci:references/cci:reference">
> + <xsl:if test="@title='NIST SP
800-53'">
> + <xsl:value-of select="@index"/>
> + </xsl:if>
> + </xsl:for-each>
> + </xsl:if>
> + </xsl:for-each>
> + <xsl:text>)</xsl:text>
> <br/>
> </xsl:for-each>
> </td>
Awesome! Thanks for this one!
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
--
___________________________
Jeffrey Blank
410-854-8675
Technology and Systems Analysis / Network Components
NSA Information Assurance