From wei.n.chen at census.gov Tue Jan 12 13:59:26 2016 Content-Type: multipart/mixed; boundary="===============4023661684860373626==" MIME-Version: 1.0 From: Wei N Chen (CENSUS/OIS FED) To: scap-security-guide at lists.fedorahosted.org Subject: Re: Adding Custom "ident" Sources in shorthand XCCDFs Date: Tue, 12 Jan 2016 13:50:51 +0000 Message-ID: In-Reply-To: 20160112070434.1839.39716@mailman01.phx2.fedoraproject.org --===============4023661684860373626== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Looks like the customization you made cannot be validated against the XCCDF= schema. You would have to look at the schema to see how the eleme= nt is defined. Keep in mind that any customization you make will have to b= e within the defined construct of . Thanks, Wei Chen | Security Engineer | Office of Information Security (OIS) | U.S. = Census Bureau wei.n.chen(a)census.gov census.gov Connect with us on Social Media ------------------------------ Date: Tue, 12 Jan 2016 07:04:29 -0000 From: oliver.skiebe(a)uniqpartners.com Subject: Adding Custom "ident" Sources in shorthand XCCDFs To: scap-security-guide(a)lists.fedorahosted.org Message-ID: <20160112070429.30053.38106(a)mailman01.phx2.fedoraproject.org> Content-Type: text/plain; charset=3D"utf-8" Hi all, as briefly mentioned already in yesterdays=E2=80=99 Contributor Workshop, our customer wants to enrich the SSG content by adding references to their = internal security requirements. I wonder how I could add my own Security Identifiers, because when trying t= o simply add e.g. a =E2=80=9Ecustomerident=E2=80=9C attribute into the shor= thand XCCDF as per below, my build fails with: [...] xmllint --format --output output/shorthand.xml output/shorthand.xml xsltproc --stringparam ssg_version "0.1.27" -o output/xccdf-unlinked-unreso= lved.xml transforms/shorthand2xccdf.xslt output/shorthand.xml oscap xccdf resolve -o output/xccdf-unlinked-empty-groups.xml output/xccdf-= unlinked-unresolved.xml File 'output/xccdf-unlinked-unresolved.xml' line 153: Element '{http://chec= klists.nist.gov/xccdf/1.1}ident': The attribute 'system' is required but mi= ssing. File 'output/xccdf-unlinked-unresolved.xml' line 167: Element '{http://chec= klists.nist.gov/xccdf/1.1}ident': The attribute 'system' is required but mi= ssing. File 'output/xccdf-unlinked-unresolved.xml' line 182: Element '{http://chec= klists.nist.gov/xccdf/1.1}ident': The attribute 'system' is required but mi= ssing. File 'output/xccdf-unlinked-unresolved.xml' line 190: Element '{http://chec= klists.nist.gov/xccdf/1.1}ident': The attribute 'system' is required but mi= ssing. Invalid XCCDF Checklist content(1.1) in output/xccdf-unlinked-unresolved.xm= l. ../../shared/product-make.include:60: recipe for target 'output/xccdf-unlin= ked-empty-groups.xml' failed make: *** [output/xccdf-unlinked-empty-groups.xml] Error 1 Do I have to =E2=80=9Eregister=E2=80=9C/=E2=80=9Edeclare=E2=80=9C the new i= dentifier type, and if so where and how? Example of what I'm trying to achieve: My Title My description My rationale Any pointers highly appreciated :-) ! Thanks & regards Oliver ------------------------------ Subject: Digest Footer -- SCAP Security Guide mailing list scap-security-guide(a)lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/scap-security-guide(a)lists.fedo= rahosted.org https://github.com/OpenSCAP/scap-security-guide/ ------------------------------ End of scap-security-guide Digest, Vol 53, Issue 2 ************************************************** --===============4023661684860373626==--