[PATCH] added some new Makerules to validate content
Maura Dailey
maura at eclipse.ncsc.mil
Wed Apr 24 21:07:01 UTC 2013
On 04/24/2013 04:36 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
> ---
> RHEL6/Makefile | 6 +++++-
> 1 files changed, 5 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/Makefile b/RHEL6/Makefile
> index 5d8d3ac..3e0ba59 100644
> --- a/RHEL6/Makefile
> +++ b/RHEL6/Makefile
> @@ -97,11 +97,15 @@ submission-stig-check: table-stigs
>
> # content-usgcb: coming soon
>
> -validate:
> +validate-xml:
> oscap xccdf validate-xml $(OUT)/$(ID)-rhel6-xccdf.xml
> oscap oval validate-xml $(OUT)/$(ID)-rhel6-oval.xml
> oscap oval validate-xml $(OUT)/$(ID)-rhel6-cpe-oval.xml
>
> +validate: validate-xml
> + cd output; ../$(UTILS)/verify-references.py --rules-with-invalid-checks --ovaldefs-unused ssg-rhel6-xccdf.xml
> + oscap oval validate-xml --schematron $(OUT)/$(ID)-rhel6-oval.xml
> +
> eval-test:
> oscap xccdf eval --profile test $(OUT)/$(ID)-rhel6-xccdf.xml
>
I tested the patch. When running make validate, I got the following output:
...LOTS of Oval Check errors...
...Deprecated object/state/test errors...
And then finally:
Invalid OVAL Definition content(5.10) in output/ssg-rhel6-oval.xml.
make: *** [validate] Error 2
If this is actually the correct output and we expect this make command
to fail, then yes, it worked perfectly and I'll ACK it.
- Maura Dailey
More information about the scap-security-guide
mailing list