[PATCH 01/21] Mapped CCI-000120 and CCI-000166 to auditing

Shawn Wells shawn at redhat.com
Fri Apr 27 03:20:15 UTC 2012


On 4/26/12 7:06 AM, Simon Lukasik wrote:
> On 04/24/2012 11:43 PM, Shawn Wells wrote:
>> @@ -74,6 +75,7 @@ default):
>>   <ident cce="4292-9" />
>>   <oval id="service_auditd_enabled" />
>>   <ref nist="CM-6, CM-7" />
>> +<ident cci="CCI-000016, CCI-000166" />
>>   </Rule>
> Please don't use comma separated list in the cci attribute. In the
> generated XCCDF it will end-up like:
>
>    <ident system="http://iase.disa.mil/cci/index.html">
>    CCI-000016, CCI-000166</ident>
>
> I believe it makes a machine parsing a bit harder. Which was actually
> the proble the XML was trying to solve.
>
> Thanks for considering,

You're spot on. I must have corrected this in a later patch, the comma 
separated rules do not show up in my master or working branch. Thanks 
much for the spot check... it's good (and scary ;) ) to know there are 
many eyes watching the patchsets!

-Shawn


More information about the scap-security-guide mailing list