Requirement | Count | Level | Type | Description | Location | Test |
---|---|---|---|---|---|---|
A21 | 1 (of 1) |
INFO | SCHEMATRON | oval:gov.nist.validation.cpe.oval:tst:101 - The OVAL test type is not checked in the NIST SCAP Validation Program. | /*:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:tests[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:rpminfo_test[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5#linux'][1] | exists(document(concat('','/validation_program_oval_test_types.xml'))/test_types/test_type[@namespace eq namespace-uri(current()) and @name eq local-name(current())]) |
Requirement | Count | Level | Type | Description | Location | Test |
---|---|---|---|---|---|---|
66 | 5 (of 5) |
WARN | SCHEMATRON | All SCAP OVAL patch class definitions that are NOT associated with source specific identifiers that are not contained in the <reference> element of the definition shall generate a warning. | /*:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1] /*:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][2] /*:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][3] /*:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][4] /*:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][5] |
if( @class eq 'patch' ) then exists(current()//oval-def:reference) else true() |
Requirement | Count | Level | Type | Description | Location | Test |
---|---|---|---|---|---|---|
8-2 | 1 (of 1) |
WARN | SCHEMATRON | For all a)XCCDF documents that do not contain the <xccdf:metadata> element, flag as a warning; and b) XCCDF documents that do contain the <xccdf:metadata> element and whose contents are not consistent with the Dublin Core terms flag as a warning. | /*:Benchmark[namespace-uri()='http://checklists.nist.gov/xccdf/1.1'][1] | every $m in xccdf:metadata/* satisfies $m/namespace-uri() eq 'http://purl.org/dc/elements/1.1/' and ($m/local-name() eq 'creator' or $m/local-name() eq 'publisher' or $m/local-name() eq 'contributor') |
Statistic Type | Statistic ID | Test Name | Value |
---|---|---|---|
COUNT | RULE_OVAL_COUNT | ||
COUNT | RULE_OCIL_COUNT | ||
COUNT | RULE_OCIL_ONLY_COUNT | ||
COUNT | RULE_CCE_COUNT | ||
COUNT | RULE_TEST_COUNT | family_test | 3 |
COUNT | RULE_TEST_COUNT | rpminfo_test | 1 |
COUNT | RULE_TEST_COUNT | variable_test | 6 |