<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 11/6/13, 9:50 AM, Steinke, Leland J
      Sr CTR DISA FSO (US) wrote:<br>
    </div>
    <blockquote
cite="mid:294970648F72F5468D5C8718139CA88005AA440B@umechphi.easf.csd.disa.mil"
      type="cite">
      <pre wrap="">The NIST SCAP Content Validation Tool threw errors on the system_info_architecture_x86* definitions (requirement ID 208).  This patch corrects the errors.


Regards,
--
Leland Steinke, Security+
DISA FSO Technical Support Contractor
tapestry technologies, Inc
717-267-5797 (DSN 570)
<a class="moz-txt-link-abbreviated" href="mailto:leland.j.steinke.ctr@mail.mil">leland.j.steinke.ctr@mail.mil</a> (gov't)
<a class="moz-txt-link-abbreviated" href="mailto:lsteinke@tapestrytech.com">lsteinke@tapestrytech.com</a> (com'l)

---
  .../input/checks/system_info_architecture_x86.xml  |    2 +-
  .../checks/system_info_architecture_x86_64.xml     |    2 +-
  2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/checks/system_info_architecture_x86.xml  
b/RHEL6/input/checks/system_info_architecture_x86.xml
index f05260a..393c4d6 100644
--- a/RHEL6/input/checks/system_info_architecture_x86.xml
+++ b/RHEL6/input/checks/system_info_architecture_x86.xml
@@ -1,5 +1,5 @@
  &lt;def-group&gt;
-  &lt;definition class="miscellaneous" id="system_info_architecture_x86"
+  &lt;definition class="compliance" id="system_info_architecture_x86"
    version="1"&gt;
      &lt;!-- Note that this does not meet requirements for class=inventory as
           that only tests for patches per 5.10.1 Revision 1 --&gt;
diff --git a/RHEL6/input/checks/system_info_architecture_x86_64.xml  
b/RHEL6/input/checks/system_info_architecture_x86_64.xml
index d4e681f..08481b5 100644
--- a/RHEL6/input/checks/system_info_architecture_x86_64.xml
+++ b/RHEL6/input/checks/system_info_architecture_x86_64.xml
@@ -1,5 +1,5 @@
  &lt;def-group&gt;
-  &lt;definition class="miscellaneous" id="system_info_architecture_x86_64"
+  &lt;definition class="compliance" id="system_info_architecture_x86_64"
    version="1"&gt;
      &lt;!-- Note that this does not meet requirements for class=inventory as
           that only tests for patches per 5.10.1 Revision 1 --&gt;
</pre>
    </blockquote>
    <br>
    I'm not sure this is an error after reviewing the OVAL spec:<br>
<a class="moz-txt-link-freetext" href="http://oval.mitre.org/language/version5.10/ovaldefinition/documentation/oval-common-schema.html#ClassEnumeration">http://oval.mitre.org/language/version5.10/ovaldefinition/documentation/oval-common-schema.html#ClassEnumeration</a><br>
    <br>
    - Compliance definitions are meant to describe "the state of a
    machine when in compliance with a specific policy."<br>
    - Miscellaneous definitions are used "to categorize a definition
    that doesn't fit into one of the other four classes," with the other
    four being compliance, inventory, patch, and vulnerability.<br>
    <br>
    Since the system_info_architecture_x86* checks are called from other
    OVAL checks, such as audit_*, to test system architecture (versus
    testing for the <i>compliance</i> of being a specific architecture),
    the class definition of miscellaneous seems appropriate.<br>
    <br>
    Or am I interpreting the spec incorrectly (....which is totally
    possible)?<br>
  </body>
</html>