<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Going forward, we're going to use <reference> tags inside of
OVAL checks to track if they've been tested. An example is as
follows:<br>
<br>
<code><reference </code><code>source="MED" ref_id="20130731"
ref_url="test_attestation" /></code><br>
<br>
Source should uniquely identify the tester (here, I used my
initials); ref_id should be in the format YYYYMMDD. We'll probably
be adding empty tags into all the checks to get everyone started.
This is similar to the <tested> tag in XCCDF, which is
converted into an XCCDF <reference> tag during our build
process.<br>
<br>
Here is an example of the <reference> tag in an existing
check. Note that it comes just after the description tag, inside of
<metadata>.<br>
<br>
<code><def-group></code><code><br>
</code><code> <definition class="compliance"
id="file_permissions_etc_group" version="1"></code><code><br>
</code><code> <metadata></code><code><br>
</code><code> <title>Verify permissions on 'group'
file</title></code><code><br>
</code><code> <affected family="unix"></code><code><br>
</code><code> <platform>Red Hat Enterprise Linux
6</platform></code><code><br>
</code><code> </affected></code><code><br>
</code><code> <description>File permissions for
/etc/group should be set correctly.</description></code><code><br>
</code><code> <reference source="MED" ref_id="20130731"
ref_url="test_attestation"/></code><code><br>
</code><code> </metadata></code><code><br>
</code><code> <criteria></code><code><br>
</code><code> <criterion
test_ref="file_permissions_etc_group_test" /></code><code><br>
</code><code> </criteria></code><code><br>
</code><code> </definition></code><code><br>
</code><code> <unix:file_test check="all"
check_existence="all_exist" comment="Testing /etc/group
permissions" id="file_permissions_etc_group_test" version="1"></code><code><br>
</code><code> <unix:object
object_ref="file_permissions_etc_group_object" /></code><code><br>
</code><code> <unix:state
state_ref="file_permissions_etc_group_state" /></code><code><br>
</code><code> </unix:file_test></code><code><br>
</code><code> <unix:file_state
id="file_permissions_etc_group_state" version="1"></code><code><br>
</code><code> <unix:uread
datatype="boolean">true</unix:uread></code><code><br>
</code><code> <unix:uwrite
datatype="boolean">true</unix:uwrite></code><code><br>
</code><code> <unix:uexec
datatype="boolean">false</unix:uexec></code><code><br>
</code><code> <unix:gread
datatype="boolean">true</unix:gread></code><code><br>
</code><code> <unix:gwrite
datatype="boolean">false</unix:gwrite></code><code><br>
</code><code> <unix:gexec
datatype="boolean">false</unix:gexec></code><code><br>
</code><code> <unix:oread
datatype="boolean">true</unix:oread></code><code><br>
</code><code> <unix:owrite
datatype="boolean">false</unix:owrite></code><code><br>
</code><code> <unix:oexec
datatype="boolean">false</unix:oexec></code><code><br>
</code><code> </unix:file_state></code><code><br>
</code><code> <unix:file_object comment="/etc/group"
id="file_permissions_etc_group_object" version="1"></code><code><br>
</code><code> <unix:path>/etc</unix:path></code><code><br>
</code><code> <unix:filename>group</unix:filename></code><code><br>
</code><code> </unix:file_object></code><code><br>
</code><code></def-group></code><br>
<br>
- Maura Dailey<br>
<br>
</body>
</html>