[PATCH 2/4] added NIST 800-53 ref origin to table with DISA CCI refs

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Aug 27 15:48:36 UTC 2012


Sure, no prob.  It is notable, however, that this is dependent upon the
quality of our mapping of the CCIs in the OS SRG to our content.

I have also been looking into how we can also view (side by side) the
800-53 text, to provide a little more context.  Any feedback on mappings
is warmly welcomed.

NIST have provided the ability to view 800-53 online (from any browser),
and also to export it into XML -- if you're on a Windows system.  :)



On 08/26/2012 09:30 PM, Shawn Wells wrote:
> On 8/24/12 12:48 PM, Jeffrey Blank wrote:
>> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
>> ---
>>   RHEL6/transforms/xccdf2table-profileccirefs.xslt |   17
>> +++++++++++++++--
>>   1 files changed, 15 insertions(+), 2 deletions(-)
>>
>> diff --git a/RHEL6/transforms/xccdf2table-profileccirefs.xslt
>> b/RHEL6/transforms/xccdf2table-profileccirefs.xslt
>> index 94197b3..0c0eb1e 100644
>> --- a/RHEL6/transforms/xccdf2table-profileccirefs.xslt
>> +++ b/RHEL6/transforms/xccdf2table-profileccirefs.xslt
>> @@ -1,8 +1,10 @@
>>   <?xml version="1.0" encoding="utf-8" standalone="yes"?>
>> -<xsl:stylesheet version="1.0"
>> xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
>> xmlns:dc="http://purl.org/dc/elements/1.1/"
>> xmlns:cdf="http://checklists.nist.gov/xccdf/1.1"
>> xmlns:xhtml="http://www.w3.org/1999/xhtml">
>> +<xsl:stylesheet version="1.0"
>> xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
>> xmlns:dc="http://purl.org/dc/elements/1.1/"
>> xmlns:cdf="http://checklists.nist.gov/xccdf/1.1"
>> xmlns:cci="http://iase.disa.mil/cci"
>> xmlns:xhtml="http://www.w3.org/1999/xhtml">
>>     <!-- this style sheet expects parameter $profile, which is the id
>> of the Profile to be shown -->
>>   +<xsl:variable name="cci_list"
>> select="document('../references/disa-cci-list.xml')/cci:cci_list" />
>> +
>>   <xsl:include href="constants.xslt"/>
>>         <xsl:template match="/">
>> @@ -49,7 +51,7 @@
>>                   <td>Discussion (Rationale)</td>
>>                   <td>Fix Text (Description)</td>
>>                   <!-- <td>Variable Setting</td> -->
>> -                <td>CCI Ref</td>
>> +                <td>CCI Ref<br/>(800-53 Origin)</td>
>>               </thead>
>>             <xsl:call-template name="profileplate">
>> @@ -123,6 +125,17 @@
>>                   <xsl:variable name="cci_formatted"
>> select='format-number(self::node()[text()], "000000")' />
>>                   <xsl:variable name="cci_expanded"
>> select="concat('CCI-', $cci_formatted)"  />
>>                   <xsl:value-of select="$cci_expanded"/>
>> +                <xsl:text> (</xsl:text>
>> +                <xsl:for-each
>> select="$cci_list/cci:cci_items/cci:cci_item">
>> +                    <xsl:if test="@id=$cci_expanded">
>> +                        <xsl:for-each
>> select="cci:references/cci:reference">
>> +                            <xsl:if test="@title='NIST SP 800-53'">
>> +                                <xsl:value-of select="@index"/>
>> +                            </xsl:if>
>> +                        </xsl:for-each>
>> +                    </xsl:if>
>> +                </xsl:for-each>
>> +                <xsl:text>)</xsl:text>
>>                   <br/>
>>               </xsl:for-each>
>>               </td>
> 
> 
> 
> Awesome! Thanks for this one!
> 
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

-- 
___________________________
Jeffrey Blank
410-854-8675
Technology and Systems Analysis / Network Components
NSA Information Assurance


More information about the scap-security-guide mailing list