XCCDF: using value references in rule description

Rui Pedro Bernardino rui-p-bernardino at ptinovacao.pt
Fri Sep 27 10:45:00 UTC 2013


Forgive me for answering myself.

I edited the XCCDF to use the profile values and both the guide and evaluation reports look ok (and coeherent with the profile values). Should I submit a patch with these changes?

Best regards

--
Rui Pedro Bernardino
CTE2/Tecnologias e Desenvolvimento
PT Inovação

-----Original Message-----
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Rui Pedro Bernardino
Sent: quinta-feira, 26 de Setembro de 2013 11:36
To: scap-security-guide at lists.fedorahosted.org
Subject: XCCDF: using value references in rule description

Hi,

Is there any reason why SSG doesn't use the profile values on the description, eg:

(...)
<description>The SELinux state should be set to <tt><sub idref="var_selinux_state_name"/></tt> at
(...)

Instead of the current:
(...)
<description>The SELinux state should be set to <tt>enforcing</tt> at
(...)

With the current approach, the rule description (possibly) won't match the profile and will mention misleading remediations.


Regards

--
Rui Pedro Bernardino
CTE2/Tecnologias e Desenvolvimento
PT Inovação


_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list