[PATCH] documenting SRG satisfaction (outside of Rule/Group references)

Jeffrey Blank blank at eclipse.ncsc.mil
Sun May 6 18:27:21 UTC 2012


Oh, git send-email... do what I mean, not what I say!

Here, "y" meant to accept my default email address, not invent a new
one.  Anyway, patch for consideration.  You know where it came from.


On 05/06/2012 02:23 PM, y at magellan.eclipse.ncsc.mil wrote:
> From: Jeffrey Blank <blank at eclipse.ncsc.mil>
> 
> The attached patch enables documentation of OS SRG satifaction (or
> dissatisfaction) outside of the XCCDF content that will be "shipped" in the
> guide or any baselines.  It does so by inserting files in the new
> input/auxiliary directory, and then removing their Groups (via a new transform,
> xccdf-removeaux) following the generation of tables.  This may not be the most
> elegant solution, but it meets our needs.  It does impose some ordering
> requirements on the generation of some outputs, but Make handles such things as
> long as we keep it in mind...
> 
> 
> Jeffrey Blank (1):
>   added support for Groups that exist only for some outputs      * this
>     is intended to allow documentation of SRG satisfaction,        for
>     that table (but not final XCCDF output)
> 
>  rhel6/src/Makefile                        |    2 +-
>  rhel6/src/input/auxiliary/srg_support.xml |   37 +++++++++++++++++++++++++++++
>  rhel6/src/input/guide.xslt                |    2 +
>  rhel6/src/transforms/xccdf-removeaux.xslt |   22 +++++++++++++++++
>  4 files changed, 62 insertions(+), 1 deletions(-)
>  create mode 100644 rhel6/src/input/auxiliary/srg_support.xml
>  create mode 100644 rhel6/src/transforms/xccdf-removeaux.xslt
> 
> 


More information about the scap-security-guide mailing list