OVAL signoff: Show testing procedures?

Paul Whitney paul.whitney at mac.com
Fri Oct 11 18:39:59 UTC 2013


I think that is a great idea.  It also shows us why there is a finding as opposed to us accepting a statement at face value.
Paul M. Whitney
E-mail: paul.whitney at mac.com
Cell:     410.493.9448




On Oct 11, 2013, at 11:18 AM, Shawn Wells <shawn at redhat.com> wrote:

When OVAL testing, should we show *how* we tested the OVAL? For example:
https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-September/004023.html

IMO this helps by:
- Allowing the community to remind of us niche test cases, such as the 
"Match" in sshd pointed out by Rui Bernardino
- Documenting test cases, which someday should (will?) make their way 
into automated test cases

I found the overhead of copy/pasting what I was doing to be incredibly 
minimal.
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131011/d22873bf/attachment.html>


More information about the scap-security-guide mailing list