Yes, great stuff. However, a nit to pick:
commit 2e6bbc53d8e399d0f65915ea3be11eb64979eeca Author: David Smith <[email protected]> Date: Fri Apr 12 13:33:45 2013 -0400 added blank line at the top to avoid a false positive with verify-cce.py This suggest the script should be changed instead. We generally want to avoid alterations to the items in the references folder. Requiring a blank line for correct behavior is not expected behavior for future maintainers, too. No hurry, but it would also be desirable to provide the files (the available CCE block and the XCCDF to be scanned) as command-line parameters. This will make the script more reusable/flexible. Indeed there are a few XSLT transforms which are guilty of hardcoded paths, but that's only because providing parameterized input to xsltproc is such a pain... On 04/12/2013 01:37 PM, David Smith wrote: > Added a script to the utils directory which 1) lists granted CCEs, 2) > checks assigned CCEs against the list of granted CCEs for validity, > 3) lists available CCEs, and 4) checks for any duplicate entries. > > David Smith (2): added script to verify validity of CCE assignments > added blank line at the top to avoid a false positive with > verify-cce.py > > RHEL6/references/cce-rhel6-avail.txt | 1 + > RHEL6/utils/verify-cce.py | 47 > ++++++++++++++++++++++++++++++++++ 2 files changed, 48 insertions(+), > 0 deletions(-) create mode 100755 RHEL6/utils/verify-cce.py > > _______________________________________________ scap-security-guide > mailing list [email protected] > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > _______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
