Hello, Can someone explain the logic behind using the OR operator for runlevel test criteria? If runlevel 1 is set to true and runlevel 3 set to false, wouldn't the below criteria still return true?
<criteria operator="OR" comment="service iptables is configured to start"> <criterion comment="iptables runlevel 0" test_ref="oval:ssg:tst:427"/> <criterion comment="iptables runlevel 1" test_ref="oval:ssg:tst:428"/> <criterion comment="iptables runlevel 2" test_ref="oval:ssg:tst:429"/> <criterion comment="iptables runlevel 3" test_ref="oval:ssg:tst:430"/> <criterion comment="iptables runlevel 4" test_ref="oval:ssg:tst:431"/> <criterion comment="iptables runlevel 5" test_ref="oval:ssg:tst:432"/> <criterion comment="iptables runlevel 6" test_ref="oval:ssg:tst:433"/> </criteria>
Thanks, Wei Chen DS/SI/CS Chenw3@state.govmailto:Chenw3@state.gov 571-345-2567
scap-security-guide@lists.fedorahosted.org