severity tags assigned to all Rules

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Mar 20 20:55:09 UTC 2012


Just in case anyone was curious, severity tags are now assigned to all 
Rules.  This should help ensure that the content meets the needs of 
customers who require this.

Earlier, "high" and "medium" values were manually added to the severity 
attribute for each XCCDF Rule (in line with corresponding DIACAP 
definitions and influenced by previous STIGs).

For other Rules (the majority), the shorthand2xccdf.xslt transform was 
tweaked to automatically add severity="low" if no severity was 
specified.  So the default case should be easy for authoring.

This could easily be shown in the html tables ("spreadsheets" if you 
wish) too..

Jeff







More information about the scap-security-guide mailing list