1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
#!/bin/bash
set -e
set -o pipefail
name=$(basename $0 .sh)
result=$(mktemp -t ${name}.out.XXXXXX)
stderr=$(mktemp -t ${name}.out.XXXXXX)
$OSCAP xccdf eval --results $result $srcdir/${name}.xccdf.xml 2> $stderr
echo "Stderr file = $stderr"
echo "Result file = $result"
[ -f $stderr ]; [ ! -s $stderr ]; rm $stderr
$OSCAP xccdf validate-xml $result
assert_exists 0 '//refine-rule[@weight]'
assert_exists 1 '//refine-rule[not(@weight)]'
assert_exists 1 '//rule-result'
assert_exists 1 '//rule-result/result'
assert_exists 1 '//rule-result/result[text()="notchecked"]'
assert_exists 2 '//rule-result/check'
assert_exists 2 '//rule-result/check/@selector'
assert_exists 1 '//rule-result/check[@selector="failing-check"]'
assert_exists 1 '//rule-result/check[@selector="passing-check"]'
assert_exists 1 '//rule-result/message'
assert_exists 1 '//rule-result/message[@severity="info"]'
assert_exists 1 '//rule-result/message[text()="No candidate or applicable check found."]'
rm $result
|
