severity tags assigned to all Rules
Jeffrey Blank
blank at eclipse.ncsc.mil
Tue Mar 20 20:55:09 UTC 2012
Just in case anyone was curious, severity tags are now assigned to all
Rules. This should help ensure that the content meets the needs of
customers who require this.
Earlier, "high" and "medium" values were manually added to the severity
attribute for each XCCDF Rule (in line with corresponding DIACAP
definitions and influenced by previous STIGs).
For other Rules (the majority), the shorthand2xccdf.xslt transform was
tweaked to automatically add severity="low" if no severity was
specified. So the default case should be easy for authoring.
This could easily be shown in the html tables ("spreadsheets" if you
wish) too..
Jeff
More information about the scap-security-guide
mailing list