[PATCH] documenting SRG satisfaction (outside of Rule/Group references)
Jeffrey Blank
blank at eclipse.ncsc.mil
Sun May 6 18:27:21 UTC 2012
Oh, git send-email... do what I mean, not what I say!
Here, "y" meant to accept my default email address, not invent a new
one. Anyway, patch for consideration. You know where it came from.
On 05/06/2012 02:23 PM, y at magellan.eclipse.ncsc.mil wrote:
> From: Jeffrey Blank <blank at eclipse.ncsc.mil>
>
> The attached patch enables documentation of OS SRG satifaction (or
> dissatisfaction) outside of the XCCDF content that will be "shipped" in the
> guide or any baselines. It does so by inserting files in the new
> input/auxiliary directory, and then removing their Groups (via a new transform,
> xccdf-removeaux) following the generation of tables. This may not be the most
> elegant solution, but it meets our needs. It does impose some ordering
> requirements on the generation of some outputs, but Make handles such things as
> long as we keep it in mind...
>
>
> Jeffrey Blank (1):
> added support for Groups that exist only for some outputs * this
> is intended to allow documentation of SRG satisfaction, for
> that table (but not final XCCDF output)
>
> rhel6/src/Makefile | 2 +-
> rhel6/src/input/auxiliary/srg_support.xml | 37 +++++++++++++++++++++++++++++
> rhel6/src/input/guide.xslt | 2 +
> rhel6/src/transforms/xccdf-removeaux.xslt | 22 +++++++++++++++++
> 4 files changed, 62 insertions(+), 1 deletions(-)
> create mode 100644 rhel6/src/input/auxiliary/srg_support.xml
> create mode 100644 rhel6/src/transforms/xccdf-removeaux.xslt
>
>
More information about the scap-security-guide
mailing list