1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
<?xml version="1.0"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xccdf="http://checklists.nist.gov/xccdf/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dc="http://purl.org/dc/elements/1.1/">
<!-- This transform assembles all fragments into one "shorthand" XCCDF document
Accepts the following parameters:
* SHARED_RP (required) Holds the resolved ABSOLUTE path
to the SSG's "shared/" directory.
* BUILD_RP (required) Holds the resolved ABSOLUTE path
to the SSG's build directory - $CMAKE_BINARY_PATH
-->
<xsl:param name="SHARED_RP" select='undef' />
<xsl:param name="BUILD_RP" select='undef' />
<xsl:template match="Benchmark">
<xsl:copy>
<xsl:copy-of select="@*|node()" />
<!-- Adding profiles here -->
<xsl:apply-templates select="document('profiles/stig-openstack.xml')" />
<!-- Adding 'conditional_clause' placeholder <xccdf:Value> here -->
<Value id="conditional_clause" type="string" operator="equals">
<title>A conditional clause for check statements.</title>
<description>A conditional clause for check statements.</description>
<value>This is a placeholder.</value>
</Value>
<xsl:apply-templates select="document(concat($BUILD_RP, '/bash-remediation-functions.xml'))" />
<xsl:apply-templates select="document(concat($SHARED_RP, '/xccdf/intro/shared_intro_os.xml'))" />
<xsl:apply-templates select="document(concat($SHARED_RP, '/xccdf/services/services.xml'))" />
<!-- the overlays Groups here will be removed prior to some outputs -->
<xsl:apply-templates select="document('overlays/nist_support.xml')" />
</xsl:copy>
</xsl:template>
<xsl:include href="../shared/xccdf/shared_guide.xslt"/>
<!-- copy everything else through to final output -->
<xsl:template match="@*|node()">
<xsl:copy>
<xsl:apply-templates select="@*|node()" />
</xsl:copy>
</xsl:template>
</xsl:stylesheet>
|
