Not exactly yet, but it shouldn't be hard to make a little lxml.etree
script to do this. Alternatively, an XSLT transform could probably do
it. I'll see what I can do.
I committed another transform (xccdf2table-byref.xslt) to the
repository, just to show how Rules can be printed based on their
reference. (Sorting the Rules by reference could likely also be added
without much trouble; right now it's just document order.)
"make table-refs" to see.
The only mostly-populated one is the NIST references, of course.
On 01/26/2012 03:09 PM, Joe Nall wrote:
Has any work been done to be able to say what checks are mapped to a
single NIST control?
For example:
AC-3:
userowner_shadow_file
groupowner_shadow_file
groupowner_group_file
...
IIUC, the current tools generate something more akin to
userowner_shadow_file:
AC-3, CM-6
where AC-3 and CM-6 are in the same nist ref
joe
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/scap-security-guide