Updates to Unix schema in OVAL 5.11

The following entities of the unix-def:file_state should be changed to EntityStateAnySimpleType restrictions of string/int:

• group_id
• user_id
• a_time
• c_time
• m_time

The following entities of the unix-def:password_state should be changed to EntityStateAnySimpleType restrictions of string/int:

• user_id
• group_id

The following entities of the unix-def:shadow_state should be changed to EntityStateAnySimpleType restrictions of string/int:

• chg_lst
• chg_allow
• chg_req
• exp_warn
• exp_inact
• exp_date

[drothenberg]

Shouldn't this fix also include the Item to fix backwards compatibility with OVAL 5.7 content?

Compare:
-http://oval.mitre.org/language/version5.7/ovalsc/documentation/unix-system-characteristics-schema.html#file_item
-http://oval.mitre.org/language/version5.11/ovalsc/documentation/unix-system-characteristics-schema.html#file_item

I specifically made that exact change. Look at the 5.11.X branch of github.com/joval/jOVAL

Sent from my iPhone

On Apr 1, 2015, at 12:48 PM, David notifications@github.com wrote:

Shouldn't this fix also include the Item to fix backwards compatibility with OVAL 5.7 content?

Compare:
-http://oval.mitre.org/language/version5.7/ovalsc/documentation/unix-system-characteristics-schema.html#file_item
-http://oval.mitre.org/language/version5.11/ovalsc/documentation/unix-system-characteristics-schema.html#file_item

—
Reply to this email directly or view it on GitHub.

[drothenberg]

https://raw.githubusercontent.com/joval/jOVAL/5.11.X/scap/schemas/oval-5.11/unix-definitions-schema.xsd contains changes to the restriction while https://raw.githubusercontent.com/joval/jOVAL/5.11.X/scap/schemas/oval-5.11/unix-system-characteristics-schema.xsd leaves it alone. Are you saying that it was intentionally only the unix-def that was updated?

Yes, only the states need to be updated for backwards-compatibility of definitions files.

Sent from my iPhone

On Apr 1, 2015, at 1:29 PM, David notifications@github.com wrote:

https://raw.githubusercontent.com/joval/jOVAL/5.11.X/scap/schemas/oval-5.11/unix-definitions-schema.xsd contains changes to the restriction while https://raw.githubusercontent.com/joval/jOVAL/5.11.X/scap/schemas/oval-5.11/unix-system-characteristics-schema.xsd leaves it alone. Are you saying that it was intentionally only the unix-def that was updated?

—
Reply to this email directly or view it on GitHub.

Put another way, we (Joval) don't care if the s-c are backwards-compatible, only the definitions files.

Other people may care about being able to consume old s-c files, in which case yes, a corresponding change would be required.

Sent from my iPhone

On Apr 1, 2015, at 1:29 PM, David notifications@github.com wrote:

https://raw.githubusercontent.com/joval/jOVAL/5.11.X/scap/schemas/oval-5.11/unix-definitions-schema.xsd contains changes to the restriction while https://raw.githubusercontent.com/joval/jOVAL/5.11.X/scap/schemas/oval-5.11/unix-system-characteristics-schema.xsd leaves it alone. Are you saying that it was intentionally only the unix-def that was updated?

—
Reply to this email directly or view it on GitHub.