[PATCH] documenting SRG satisfaction (outside of Rule/Group references)

Jeffrey Blank blank at eclipse.ncsc.mil
Sun May 6 18:33:04 UTC 2012


The attached patch enables documentation of OS SRG satifaction (or
dissatisfaction) outside of the XCCDF content that will be "shipped" in the
guide or any baselines.  It does so by inserting files in the new
input/auxiliary directory, and then removing their Groups (via a new transform,
xccdf-removeaux) following the generation of tables.  This may not be the most
elegant solution, but it meets our needs.  It does impose some ordering
requirements on the generation of some outputs, but Make handles such things as
long as we keep it in mind...


Jeffrey Blank (1):
  added support for Groups that exist only for some outputs      * this
    is intended to allow documentation of SRG satisfaction,        for
    that table (but not final XCCDF output)

 rhel6/src/Makefile                        |    2 +-
 rhel6/src/input/auxiliary/srg_support.xml |   37 +++++++++++++++++++++++++++++
 rhel6/src/input/guide.xslt                |    2 +
 rhel6/src/transforms/xccdf-removeaux.xslt |   22 +++++++++++++++++
 4 files changed, 62 insertions(+), 1 deletions(-)
 create mode 100644 rhel6/src/input/auxiliary/srg_support.xml
 create mode 100644 rhel6/src/transforms/xccdf-removeaux.xslt



More information about the scap-security-guide mailing list