[Open-scap] OVAL rule evaluation order
Jan Cerny
jcerny at redhat.com
Tue Apr 5 11:30:47 UTC 2016
Hello Pravin,
OpenSCAP doesn't have any option to influence the order of evaluation.
OVAL is a declarative language. Rule evaluation order should not affect results.
OVAL definitions have to be written in a way that it doesn't matter in which order
are they evaluated.
Moreover, OVAL definitions can be extended by other definitions usig extend_def element,
so OpenSCAP can actually evaluate more other definitions to get a result of single definition.
Best Regards
Jan Černý
Security Technologies | Red Hat, Inc.
----- Original Message -----
> From: "Pravin Goyal" <pravin.goyal at outlook.com>
> To: open-scap-list at redhat.com
> Sent: Tuesday, April 5, 2016 6:37:54 AM
> Subject: [Open-scap] OVAL rule evaluation order
>
>
>
> Hi All,
>
> How does OpenSCAP determine rule evaluation order?
>
>
>
>
> I have an OVAL file that contains two rules def:1 and def:2. No matter which
> one I place first, def:2 is evaluated first. Is there a way we can make it
> evaluate rules in the particular order - basically starting from def:1.
>
>
>
>
> Scenario 1:
>
>
>
>
> ...
>
> Definitions
>
> def:2
>
>
> def:1
>
>
> Tests
>
> tst:2
>
>
> tst:1
>
>
> Objects
>
> obj:2
>
>
> obj:1
>
>
> States
>
> ste:2
>
>
> ste:1
>
>
>
>
>
>
>
> Scenario 2:
>
>
>
>
> ...
>
> Definitions
>
> def:1
>
>
> def:2
>
>
> Tests
>
> tst:1
>
>
> tst:2
>
>
> Objects
>
> obj:1
>
>
> obj:2
>
>
> States
>
> ste:1
>
>
> ste:2
>
>
>
>
>
>
> Please let me know.
>
>
>
>
> Thanks and regards,
>
> Pravin Goyal
>
> _______________________________________________
> Open-scap-list mailing list
> Open-scap-list at redhat.com
> https://www.redhat.com/mailman/listinfo/open-scap-list
More information about the Open-scap-list
mailing list