removal of CCEs from OVAL definintions

Shawn Wells shawn at redhat.com
Tue Aug 28 02:02:04 UTC 2012


On 8/27/12 5:33 PM, Jeffrey Blank wrote:
> I plan to remove all CCE references from within the OVAL definitions (in
> favor of storing CCEs only as idents in the XCCDF Rules).
>
> This should simplify maintenance.
>
> If users wish to reference CCEs from associated OVAL defintions, then we
> can insert them during the transformation to final output -- if this
> even necessary.  If so, please let me know.
Makes sense to me. If we want to add them back we could always do so 
through some xslt by pulling out the OVAL check name, allowing us to 
maintain the CCEs only in the XCCDF.


More information about the scap-security-guide mailing list