----- Original Message ----- > From: "Dragos Prisaca" <[email protected]> > To: [email protected] > Sent: Wednesday, March 23, 2016 8:48:48 AM > Subject: [Open-scap] Missing @test-system attribute from ARF reports > > > > Hello, > > > > The ARF reports produced by OpenSCAP version 1.2.9 do not include the > @test-system attribute. > > According to the section 4.5 XCCDF Results\#2 of the SCAP 1.2 (SP800-126r2): > “The @test-system attribute SHALL be provided, and it SHALL be a CPE name > value indicating the product that was responsible for generating the > results.” > > > > ARF Location: > > /*:asset-report-collection[namespace-uri()=' > http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:reports[namespace-uri()='http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:report[namespace-uri()='http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:content[namespace-uri()='http://scap.nist.gov/schema/asset-reporting-format/1.1'][1]/*:TestResult[namespace-uri()='http://checklists.nist.gov/xccdf/1.2'][1 > ]
Thanks for your report Dragos, this has been reported upstream as: https://github.com/OpenSCAP/openscap/issues/372 -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. _______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
