1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
<?xml version="1.0" encoding="UTF-8"?>
<Benchmark xmlns="http://checklists.nist.gov/xccdf/1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="xccdf_moc.elpmaxe.www_benchmark_test" resolved="1">
<status>accepted</status>
<version>1.0</version>
<model system="urn:xccdf:scoring:default"/>
<Rule id="xccdf_moc.elpmaxe.www_rule_1" selected="true">
<title>Ensure that file exists and it is not executable</title>
<fix system="urn:xccdf:fix:unknown">
<!-- This fix has unsupported platform thus it shall not be executed -->
touch wrong_test_file
</fix>
<fix system="urn:xccdf:fix:script:sh" platform="cpe:/o:example:not-applicable:5">
<!-- This fix is not applicable and thus it shall not be executed -->
touch wrong_test_file
</fix>
<fix system="urn:xccdf:fix:script:sh" platform="cpe:/o:example:applicable:5">
<!-- This could be executed, but the least disruptive one shall be preferred -->
touch test_file
</fix>
<fix system="urn:xccdf:fix:script:sh" reboot="true">
<!-- This could be executed when CPE are not available. It is the only one which matches.
On the other hand when CPE is available, this one shall be omitted as it requires reboot. -->
touch test_file_cpe_na
</fix>
<fix system="urn:xccdf:fix:script:sh" platform="cpe:/o:example:applicable:5" disruption="low">
<!-- This should be executed, this is the least disruptive onw -->
touch test_file
</fix>
<fix system="urn:xccdf:fix:script:sh" platform="cpe:/o:example:unknown:42">
<!-- This could be executed -->
touch wrong_test_file
</fix>
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
<check-content-ref name="oval:moc.elpmaxe.www:def:1" href="../unittests/test_remediation_simple.oval.xml"/>
</check>
</Rule>
<TestResult id="xccdf_org.open-scap_testresult_default-profile" start-time="2013-02-27T14:54:43" end-time="2013-02-27T14:54:44">
<title>OSCAP Scan Result</title>
<target>x.x.example.com</target>
<target-address>127.0.0.1</target-address>
<target-address>0:0:0:0:0:0:0:1</target-address>
<target-facts>
<fact name="urn:xccdf:fact:ethernet:MAC" type="string">00:00:00:00:00:00</fact>
</target-facts>
<rule-result idref="xccdf_moc.elpmaxe.www_rule_1" time="2013-02-27T14:54:44" weight="1.000000">
<result>fail</result>
<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
<check-content-ref name="oval:moc.elpmaxe.www:def:1" href="../unittests/test_remediation_simple.oval.xml"/>
</check>
</rule-result>
<score system="urn:xccdf:scoring:default" maximum="100.000000">0.000000</score>
</TestResult>
</Benchmark>
|
