[PATCH 01/21] Mapped CCI-000120 and CCI-000166 to auditing

Simon Lukasik isimluk at fedoraproject.org
Thu Apr 26 11:06:26 UTC 2012


On 04/24/2012 11:43 PM, Shawn Wells wrote:
> @@ -74,6 +75,7 @@ default):
>  <ident cce="4292-9" />
>  <oval id="service_auditd_enabled" />
>  <ref nist="CM-6, CM-7" />
> +<ident cci="CCI-000016, CCI-000166" />
>  </Rule>

Please don't use comma separated list in the cci attribute. In the
generated XCCDF it will end-up like:

  <ident system="http://iase.disa.mil/cci/index.html">
  CCI-000016, CCI-000166</ident>

I believe it makes a machine parsing a bit harder. Which was actually
the proble the XML was trying to solve.

Thanks for considering,

--
Simon Lukasik


More information about the scap-security-guide mailing list