Not exactly yet, but it shouldn't be hard to make a little lxml.etree
script to do this. Alternatively, an XSLT transform could probably do
it. I'll see what I can do.
I committed another transform (xccdf2table-byref.xslt) to the
repository, just to show how Rules can be printed based on their
reference. (Sorting the Rules by reference could likely also be added
without much trouble; right now it's just document order.)
"make table-refs" to see.
The only mostly-populated one is the NIST references, of course.
On 01/26/2012 03:09 PM, Joe Nall wrote:
Has any work been done to be able to say what checks are mapped to a
single NIST control?
IIUC, the current tools generate something more akin to
where AC-3 and CM-6 are in the same nist ref
scap-security-guide mailing list