oscap hangs on wireless_disable_drivers.xml

Willem Bos whbos at xs4all.nl
Tue Aug 28 13:58:53 UTC 2012


Sounds plausable. Should you or I create a patch?

On Tue, Aug 28, 2012 at 3:23 PM, Gary Gapinski <gapinski at nasa.gov> wrote:
> Hello, Willem:
>
> On 08/28/2012 08:59 AM, Willem Bos wrote:
>> Hi Gary,
>>
>> Ah, should have thought about adding '^' myself, thanks. It works
>> fine. Should the ^ be necessary?
>>
>
> I /think/ so, but I cannot quickly determine this.
>
> http://oval.mitre.org/language/version5.8/ovaldefinition/documentation/unix-definitions-schema.html
> does not provide much guidance. I'd have to look at the source.
>
> In general, OVAL assumes a potentially unlimited set of "objects" over
> which <object> child elements perform a reduction. Since the regex had
> no anchor, it could be (and likely is) assumed to apply to all possible
> paths. Only the use of a LHS anchor would allow the OVAL implementation
> to perform an implicit reduction in system characteristic (object)
> gathering prior to the next reduction step.
>
> If the intended behavior of OVAL differs from this, it is not well
> documented, and would actually unduly constrain the use of "pattern
> matching".
>
> Regards,
>
> Gary
>


More information about the scap-security-guide mailing list