[PATCH 0/7] ATTENTION: all output filenames changing

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Oct 2 14:02:18 UTC 2012


This patchset involves changing all output filenames so that their formatting 
agrees with NIST SP 800-126.  This is long overdue, but could cause 
disruption for anyone getting something based on its filename.

This patchset also involves the creation of a new Makerule called content-stig,
which is a first cut at assembling SCAP content for use as a specific baseline.
Note that it is all very pre-release and pre-draft (and clearly labelled as such).
But it demonstrates how easily (well, compared to other SCAP things anyway)
the content can be transformed into a specific structure or format, and demonstrates
how we can iterate forward.


Jeffrey Blank (7):
  new transform to add references to Rules (e.g. if a default ref
    needed)
  very rough first cut at producing XCCDF structured in the manner of a
    STIG
  minor typo fixups
  including dublin core namespace in input documents
  changed Makefile to create output filenames compliant with NIST
    800-126
  changed supporting transforms and scripts to support new filename
    format
  moving xccdf resolve operation to a Rule off the critical path (for
    now)

 RHEL6/Makefile                            |  122 ++++++++++++++++------------
 RHEL6/input/guide.xml                     |    2 +-
 RHEL6/input/guide.xslt                    |    2 +-
 RHEL6/transforms/cpe_generate.py          |    5 +-
 RHEL6/transforms/relabelids.py            |    9 +-
 RHEL6/transforms/shorthand2xccdf.xslt     |   15 ++--
 RHEL6/transforms/xccdf-addrefs.xslt       |   46 +++++++++++
 RHEL6/transforms/xccdf-ocilcheck2ref.xslt |    2 +-
 RHEL6/transforms/xccdf2stigformat.xslt    |   63 +++++++++++----
 9 files changed, 181 insertions(+), 85 deletions(-)
 create mode 100644 RHEL6/transforms/xccdf-addrefs.xslt



More information about the scap-security-guide mailing list