Hello,
The ARF reports produced by OpenSCAP version 1.2.9 do not include the @test-system attribute. According to the section 4.5 XCCDF Results\#2 of the SCAP 1.2 (SP800-126r2): “The @test-system attribute SHALL be provided, and it SHALL be a CPE name value indicating the product that was responsible for generating the results.” ARF Location: /*:asset-report-collection[namespace-uri()=' http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:reports[namespace-uri()='http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:report[namespace-uri()='http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:content[namespace-uri()='http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:TestResult[namespace-uri()='http://checklists.nist.gov/xccdf/1.2'][1 ] Thanks, _Dragos.
_______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
