[PATCH] added some new Makerules to validate content

Maura Dailey maura at eclipse.ncsc.mil
Wed Apr 24 21:07:01 UTC 2013


On 04/24/2013 04:36 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
> ---
>   RHEL6/Makefile |    6 +++++-
>   1 files changed, 5 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/Makefile b/RHEL6/Makefile
> index 5d8d3ac..3e0ba59 100644
> --- a/RHEL6/Makefile
> +++ b/RHEL6/Makefile
> @@ -97,11 +97,15 @@ submission-stig-check: table-stigs
>   
>   # content-usgcb: coming soon
>   
> -validate:
> +validate-xml:
>   	oscap xccdf validate-xml $(OUT)/$(ID)-rhel6-xccdf.xml
>   	oscap oval validate-xml $(OUT)/$(ID)-rhel6-oval.xml
>   	oscap oval validate-xml $(OUT)/$(ID)-rhel6-cpe-oval.xml
>   
> +validate: validate-xml
> +	cd output; ../$(UTILS)/verify-references.py --rules-with-invalid-checks --ovaldefs-unused ssg-rhel6-xccdf.xml
> +	oscap oval validate-xml --schematron $(OUT)/$(ID)-rhel6-oval.xml
> +
>   eval-test:
>   	oscap xccdf eval --profile test $(OUT)/$(ID)-rhel6-xccdf.xml
>   

I tested the patch. When running make validate, I got the following output:

...LOTS of Oval Check errors...
...Deprecated object/state/test errors...

And then finally:

Invalid OVAL Definition content(5.10) in output/ssg-rhel6-oval.xml.
make: *** [validate] Error 2

If this is actually the correct output and we expect this make command 
to fail, then yes, it worked perfectly and I'll ACK it.

- Maura Dailey


More information about the scap-security-guide mailing list