[patch] Ident element should represent a single identifier.

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Apr 2 14:52:12 UTC 2012


Thanks for the patch (it's applied).
(I had originally wanted the shorthand2xccdf transform to split 
substrings on ',' but forgot to add that code.)

I will also try to work on the preferred solution: breaking apart those 
Rules to be more granular.  Ideally we would arrive at a 1-1 mapping 
between CCEs and Rules.

(This may not always be the most natural for reading, but it makes 
results more precise for customers.)

Thanks,
Jeff


On 03/30/2012 08:31 AM, Simon Lukasik wrote:
>
> Attached please find a patch to split up multiple values within single
> ident element. It avoids things like the following
>
>      <ident system="http://cce.mitre.org">
>          4360-4,4378-6,4492-5,4263-0,3502-2,4449-5,
>          4361-2,4427-1,4321-6,4339-8,4105-3,3718-4
>      </ident>
>
> The separations will also help applications (Spacewalk for example) with
> data processing, storing to database, etc.
>
> Thank You.
>
> --
> Simon Lukasik
>
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list