[PATCH 0/3] Cleaned up some make validate errors and mapped some CCI's

Shawn Wells shawn at redhat.com
Wed Jul 25 23:51:54 UTC 2012


On 7/25/12 7:52 PM, Kevin Spargur wrote:
> Mapped CCI 382 which requires "The operating system must configure the
> information system to specifically prohibit or restrict the use of
> organization-defined functions, ports, protocols, and/or services" to all
> the disable service xyz rules in base.  Then make validate was making me sad
> with the following errors so I cleaned it up.
>
> oscap xccdf validate-xml output/rhel6-xccdf-scap-security-guide.xml
> 1 1877 In file 'output/rhel6-xccdf-scap-security-guide.xml' on line 237:
> Element '{http://checklists.nist.gov/xccdf/1.1}refine-value': Duplicate
> key-sequence ['var_umask_for_daemons'] in unique identity-constraint
> '{http://checklists.nist.gov/xccdf/1.1}refineValueKey'.
> 1 1877 In file 'output/rhel6-xccdf-scap-security-guide.xml' on line 261:
> Element '{http://checklists.nist.gov/xccdf/1.1}refine-value': Duplicate
> key-sequence ['password_history_retain_number'] in unique identity-constraint
> '{http://checklists.nist.gov/xccdf/1.1}refineValueKey'.
> 1 1871 In file 'output/rhel6-xccdf-scap-security-guide.xml' on line 3212:
> Element '{http://checklists.nist.gov/xccdf/1.1}Value': This element is not
> expected. Expected is ( {http://checklists.nist.gov/xccdf/1.1}signature ).
> oscap was unable to validate the XML document you provided.
>
> Kevin Spargur (3):
>    Removed duplicate entries causing make validate to fail
>    Added some spacing to remove a make validate error
>    Mapped CCI382 to several disable service xyz rules
>
>   RHEL6/input/profiles/common.xml     |    4 ---
>   RHEL6/input/services/base.xml       |   46 +++++++++++++++++-----------------
>   RHEL6/input/system/accounts/pam.xml |    4 +-
>   3 files changed, 25 insertions(+), 29 deletions(-)
>



Ack to the set


More information about the scap-security-guide mailing list