[PATCH 01/21] Mapped CCI-000120 and CCI-000166 to auditing
Shawn Wells
shawn at redhat.com
Fri Apr 27 03:20:15 UTC 2012
On 4/26/12 7:06 AM, Simon Lukasik wrote:
> On 04/24/2012 11:43 PM, Shawn Wells wrote:
>> @@ -74,6 +75,7 @@ default):
>> <ident cce="4292-9" />
>> <oval id="service_auditd_enabled" />
>> <ref nist="CM-6, CM-7" />
>> +<ident cci="CCI-000016, CCI-000166" />
>> </Rule>
> Please don't use comma separated list in the cci attribute. In the
> generated XCCDF it will end-up like:
>
> <ident system="http://iase.disa.mil/cci/index.html">
> CCI-000016, CCI-000166</ident>
>
> I believe it makes a machine parsing a bit harder. Which was actually
> the proble the XML was trying to solve.
>
> Thanks for considering,
You're spot on. I must have corrected this in a later patch, the comma
separated rules do not show up in my master or working branch. Thanks
much for the spot check... it's good (and scary ;) ) to know there are
many eyes watching the patchsets!
-Shawn
More information about the scap-security-guide
mailing list