On 4/24/13 6:36 AM, Simon Lukasik wrote: Thank you! I'm about to hop on a plane and will try this out. $ oscap ds sds-compose output/ssg-rhel6-xccdf.xml ssg-rhel6-xccdf-ds.xml File '/var/www/html/scap-security-guide/RHEL6/ssg-rhel6-xccdf-ds.xml' line 15609: Element '{http://checklists.nist.gov/xccdf/1.1}Benchmark': This element is not expected. Expected is one of ( {http://checklists.nist.gov/xccdf/1.2}Benchmark, {http://oval.mitre.org/XMLSchema/oval-definitions-5}oval_definitions, {http://scap.nist.gov/schema/ocil/2.0}ocil, {http://cpe.mitre.org/dictionary/2.0}cpe-list, {http://checklists.nist.gov/xccdf/1.2}Tailoring ). Invalid SCAP Source Datastream content(1.2) in /var/www/html/scap-security-guide/RHEL6/ssg-rhel6-xccdf-ds.xml. Clearly we have some items to clean up.

On 4/24/13 1:28 PM, Simon Lukasik wrote: There's a bit of cleanup still needed within our XCCDF. I won't have time to look into this for a few days, if anyone else is feeling ambitious.... [shawn@rhel6 output]$ xsltproc --stringparam reverse_DNS com.madethisup \ [shawn@rhel6 output]$ oscap xccdf validate ssg-rhel6-xccdf-1.2.xml File 'ssg-rhel6-xccdf-1.2.xml' line 248: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': 'dangling reference to sysctl_net_ipv4_icmp_ignore_bogus_error_messages_value!' is not a valid value of the atomic type 'xs:NCName'. File 'ssg-rhel6-xccdf-1.2.xml' line 248: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': Warning: No precomputed value available, the value was either invalid or something strange happend. File 'ssg-rhel6-xccdf-1.2.xml' line 487: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': 'dangling reference to sysctl_net_ipv4_icmp_ignore_bogus_error_messages_value!' is not a valid value of the atomic type 'xs:NCName'. File 'ssg-rhel6-xccdf-1.2.xml' line 487: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': Warning: No precomputed value available, the value was either invalid or something strange happend. File 'ssg-rhel6-xccdf-1.2.xml' line 707: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': 'dangling reference to sysctl_net_ipv4_icmp_ignore_bogus_error_messages_value!' is not a valid value of the atomic type 'xs:NCName'. File 'ssg-rhel6-xccdf-1.2.xml' line 707: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': Warning: No precomputed value available, the value was either invalid or something strange happend. File 'ssg-rhel6-xccdf-1.2.xml' line 932: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': 'dangling reference to sysctl_net_ipv4_icmp_ignore_bogus_error_messages_value!' is not a valid value of the atomic type 'xs:NCName'. File 'ssg-rhel6-xccdf-1.2.xml' line 932: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': Warning: No precomputed value available, the value was either invalid or something strange happend. File 'ssg-rhel6-xccdf-1.2.xml' line 1191: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': 'dangling reference to sysctl_net_ipv4_icmp_ignore_bogus_error_messages_value!' is not a valid value of the atomic type 'xs:NCName'. File 'ssg-rhel6-xccdf-1.2.xml' line 1191: Element '{http://checklists.nist.gov/xccdf/1.2}refine-value', attribute 'idref': Warning: No precomputed value available, the value was either invalid or something strange happend. Invalid XCCDF Checklist content(1.2) in ssg-rhel6-xccdf-1.2.xml.