This is fine as a very temporary measure, though you won't generate
valid XCCDF as output. (Per the XCCDF spec, an ident can only be part of
a Rule.)
That said, this is my fault, for originally suggesting we note CCI
satisfaction by using <ident> tags (instead of <reference> tags), which
was compatible with its intended usage.
When I (atomically) move each <ident> for CCIs into <references> and fix
up the transforms, (within 24 hours), this issue should be resolved,
since <Groups> can have <references>.
On 04/24/2012 02:32 PM, Shawn Wells wrote:
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/scap-security-guide