<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="WordSection1"> Hi,<o:p></o:p> <o:p> </o:p> The errors that you are seeing are validation errors indicating that the values specified for the particular entities (user_id and group_id) are not valid. This is because they are expecting a datatype of “int” and integer values. <o:p> </o:p> The reason for this discrepancy is that in OVAL 5.8, we changed the user_id and group_id entities (along with many others) to be of datatype “int” rather than datatype “string” to better align the datatype and operations (equals, greater than, less than, etc.) with the values found on the system which are just integer values. However, in doing so, we broke backward compatibility with previous versions of OVAL (<a href="http://oval.mitre.org/language/about/backwardcompatibility.html">http://oval.mitre.org/language/about/backwardcompatibility.html</a>). I suspect that the STIG content was written for a version before 5.8, but, OpenSCAP is validating the content against 5.10.<o:p></o:p> <o:p> </o:p> Actually, there was a similar oval-developer-list thread about this last year (<a href="http://making-security-measurable.1364806.n2.nabble.com/Error-validating-STIG-content-against-OVAL-schemas-tp7579295.html">http://making-security-measurable.1364806.n2.nabble.com/Error-validating-STIG-content-against-OVAL-schemas-tp7579295.html</a>). <o:p></o:p> <o:p> </o:p> To get the content to work, you will need to either use a tool that supports the OVAL 5.4 content or update the content to align with the new schemas. For the errors that say “attribute ‘datatype’: the value ‘string’ does not match the fixed value constraint ‘int’.”, if there is an integer value present in the content, you will just need to add datatype=”int” to the entity. For the errors that say “‘some_regex_pattern’ is not a valid value of the local union type.”, you would need to rewrite the entity to check for the same values, but, using integer values and operations. For example, you could rewrite:<o:p></o:p> <o:p> </o:p> <group_id datatype=”string” operation=”pattern match”>^(0|2|3)$</group_id> which checks to see if the value is set to 0, 2, or 3<o:p></o:p> <o:p> </o:p> as:<o:p></o:p> <o:p> </o:p> <group_id datatype=”int” operation=”equals” var_ref=”oval:sample:var:1” var_check=”only one”/><o:p></o:p> <o:p> </o:p> …<o:p></o:p> <constant_variable id=”oval:sample:var:1” datatype=”int” …><o:p></o:p> <value>0</value><o:p></o:p> <value>2</value><o:p></o:p> <value>3</value><o:p></o:p> </constant_variable><o:p></o:p> <o:p> </o:p> Hope this helps.<o:p></o:p> <o:p> </o:p> Thanks, Danny<o:p></o:p> <o:p> </o:p> <div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt"> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: open-scap-list-bounces@redhat.com [mailto:open-scap-list-bounces@redhat.com] On Behalf Of ??? Sent: Tuesday, August 06, 2013 12:30 AM To: open-scap-list@redhat.com Subject: [Open-scap] [OPEN-SCAP-LIST] I'm trying to execute open-scap on solaris<o:p></o:p> </div> </div> <o:p> </o:p> <div> <div> <div> <div> <div> <div> <div> Hi<o:p></o:p> </div> I'm trying to execute open-scap on solaris. <o:p></o:p> </div> So I installed openscap and inputed 'oscap oval eval --result SolaTest U_Solaris_10_X86-V1R4_STIG_Benchmark-oval.xml' on terminal<o:p></o:p> </div> But I got errors. you can see errors through a attached document.<o:p></o:p> </div> How to resolve that ?<o:p></o:p> </div> <div> <o:p> </o:p> </div> p.s I'm student in korea. I'm not good english. sorry<o:p></o:p> </div> Open-scap version is 0.8.1<o:p></o:p> Solaris version is 11.1 <o:p></o:p> </div> <table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0"> <tbody> <tr> <td style="padding:.75pt .75pt .75pt .75pt"> <img border="0" width="100" height="100" id="_x0000_i1025" src="cid:~WRD000.jpg" alt="Image removed by sender."><o:p></o:p> </td> </tr> </tbody> </table> <o:p> </o:p> </div> </div> </body> </html>