[PATCH 0/3] support for generating OCIL

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Sep 17 22:55:56 UTC 2012


These commits should permit creation of manual checking text that can appear as
the made-up checksystem "ocil-transitional" (inline with the XCCDF), and can
also be automatically generated into proper OCIL.  Well, valid OCIL. Addition
of a "clause" attribute is still needed in order to permit generation of a
question (or to make a statement about whether something is a "finding"). But
the support is now there to enable this to occur in earnest.




Jeffrey Blank (3):
  additions to Makefile to create OCIL output from inline manual check
    text
  new transforms to create OCIL from manual checks, change inline
    content to references
  support for generating OCIL, synchronizing/generating OCIL IDs
    automatically

 RHEL6/Makefile                            |    6 +-
 RHEL6/transforms/constants.xslt           |    4 +-
 RHEL6/transforms/cpe_generate.py          |    4 +-
 RHEL6/transforms/idtranslate.py           |  206 +++++++++++++++++-----------
 RHEL6/transforms/relabelids.py            |  151 ++++++++++++---------
 RHEL6/transforms/xccdf-create-ocil.xslt   |   67 ++++++++++
 RHEL6/transforms/xccdf-ocilcheck2ref.xslt |   35 +++++
 7 files changed, 324 insertions(+), 149 deletions(-)
 create mode 100644 RHEL6/transforms/xccdf-create-ocil.xslt
 create mode 100644 RHEL6/transforms/xccdf-ocilcheck2ref.xslt



More information about the scap-security-guide mailing list