[PATCH] added some new Makerules to validate content

Jeffrey Blank blank at eclipse.ncsc.mil
Wed Apr 24 21:08:05 UTC 2013


Uh-huh, that's right.



On 04/24/2013 05:07 PM, Maura Dailey wrote:
> On 04/24/2013 04:36 PM, Jeffrey Blank wrote:
>> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
>> ---
>>   RHEL6/Makefile |    6 +++++-
>>   1 files changed, 5 insertions(+), 1 deletions(-)
>>
>> diff --git a/RHEL6/Makefile b/RHEL6/Makefile
>> index 5d8d3ac..3e0ba59 100644
>> --- a/RHEL6/Makefile
>> +++ b/RHEL6/Makefile
>> @@ -97,11 +97,15 @@ submission-stig-check: table-stigs
>>     # content-usgcb: coming soon
>>   -validate:
>> +validate-xml:
>>       oscap xccdf validate-xml $(OUT)/$(ID)-rhel6-xccdf.xml
>>       oscap oval validate-xml $(OUT)/$(ID)-rhel6-oval.xml
>>       oscap oval validate-xml $(OUT)/$(ID)-rhel6-cpe-oval.xml
>>   +validate: validate-xml
>> +    cd output; ../$(UTILS)/verify-references.py
>> --rules-with-invalid-checks --ovaldefs-unused ssg-rhel6-xccdf.xml
>> +    oscap oval validate-xml --schematron $(OUT)/$(ID)-rhel6-oval.xml
>> +
>>   eval-test:
>>       oscap xccdf eval --profile test $(OUT)/$(ID)-rhel6-xccdf.xml
>>   
> 
> I tested the patch. When running make validate, I got the following output:
> 
> ...LOTS of Oval Check errors...
> ...Deprecated object/state/test errors...
> 
> And then finally:
> 
> Invalid OVAL Definition content(5.10) in output/ssg-rhel6-oval.xml.
> make: *** [validate] Error 2
> 
> If this is actually the correct output and we expect this make command
> to fail, then yes, it worked perfectly and I'll ACK it.
> 
> - Maura Dailey
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list