Content of Ident elements

Simon Lukasik isimluk at fedoraproject.org
Mon Apr 2 09:46:57 UTC 2012


On 03/30/2012 04:58 PM, Jeffrey Blank wrote:
> Sure, I'd be happy to take that and apply it (and the argument for
> continuity from RHEL 5 USGCB makes sense).

Great.

>                                            It should just be a tweak to
> shorthand2xccdf.xslt to add "CCE-" (and maybe then some tweaks to then
> remove "CCE-" for the transforms that create tables, where it doesn't
> need to be shown).
> 

I am attaching such patch.

The only problem I can see is that it produces also "CCE-TODO". We may
want to comment these TODO out. Assuming that 0 idents per Rule is valid
scenario.

> We're also working on the CCE issue, as new CCEs may be issued for RHEL6
> (vs RHEL 5).
> 
> Thanks,
> Jeff
> 
> 
> 
> On 03/30/2012 08:32 AM, Simon Lukasik wrote:
>> Hello list,
>>
>> In the current content there seems to be mixed two approaches how to
>> devise the ident:
>>
>> (1)<ident system="http://cce.mitre.org">4365-3</ident>
>> (2)<ident system="http://cce.mitre.org">CCE-4112-9</ident>
>>
>> I would like to not mix two. For instance usgsb-for-rhel5-desktop uses
>> exclusively the latter one. Even thought in the second approach there
>> seems to be kind of duplicity, I prefer it.
>>
>> Would be a patch converting (1) to (2) acceptable for you?
>>
>> -- 
>> Simon Lukasik


More information about the scap-security-guide mailing list