Just in case anyone was curious, severity tags are now assigned to all
Rules. This should help ensure that the content meets the needs of
customers who require this.
Earlier, "high" and "medium" values were manually added to the
severity
attribute for each XCCDF Rule (in line with corresponding DIACAP
definitions and influenced by previous STIGs).
For other Rules (the majority), the shorthand2xccdf.xslt transform was
tweaked to automatically add severity="low" if no severity was
specified. So the default case should be easy for authoring.
This could easily be shown in the html tables ("spreadsheets" if you
wish) too..
Jeff
Show replies by date