coming soon: re-ordering of check types within Rules

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Sep 24 21:42:26 UTC 2012


... since evaluation of the XCCDF profiles is broken at the moment.

The XCCDF spec says that the first check type should be chosen, and this
will mean putting OVAL first.  This is also logical since automated
checks are preferable to manual ones that are defined in OCIL.

This should only be a few lines of XSLT in
transforms/shorthand2xccdf.xslt, but I thought I'd mention that I'm
aware of it.


More information about the scap-security-guide mailing list