search

commoncriteria / transforms

Repository for various transforms that are common across CC projects.
The Unlicense
1 stars 2 forks source link

Define f-component without f-elements #52

Open jfisherbah opened 1 year ago

jfisherbah commented 1 year ago

In some cases we want to be able to put freeform text underneath a component header without any elements in the SFR. Most notably this is the case in PP-Modules where the Modified SFRs section has an SFR that is not changed from its literal definition, but its status has.

For example, a note may exist along the lines of "This SFR is selection-based in the Base-PP but it is mandatory when the TOE conforms to this PP-Module."

Right now we just put text like this under the .1 f-element but it could be misleading to readers who may think these notes are meant to be literal SFR text.

kgal commented 1 year ago

I actually had added this for some f-components. Hopefully now it works for all of them. Here's an example: https://github.com/commoncriteria/pp-template/blob/bc080682a7f4bb0e15f885ce9ff1528ae7953bb9/input/pp-template.xml#L518

jfisherbah commented 1 year ago

The issue is that when we use this in the Modified SFRs section of the Module, we want to be able to use the description to replace elements entirely. The tag is valid but it still looks like you need at least one f-element for the f-component to be valid. Additionally there needs to be a way to put an aactivity in an SFR in this situation, which means you wouldn't be able to just omit the f-element entirely.

kgal commented 1 year ago

Is it only the evaluation activities that are being modified?

jfisherbah commented 1 year ago

We want to be able to define text under the f-component so that there is a way to explain how the treatment of an SFR in a module is different from how the Base-PP treats it, and we want to be able to define an evaluation activity for it to state whether that treatment affects how it is evaluated.

See for example FAU_STG_EXT.4 in section 5.1.1.1 of https://www.niap-ccevs.org/MMO/PP/MOD_WLAN_AS_v1.0.pdf and section 2.1.1.1 of https://www.niap-ccevs.org/MMO/PP/MOD_WLAN_AS_v1.0-SD.pdf. The desired behavior is to have the same text that's currently in the Module be present, but without the "FAU_STG_EXT.4.1" label because the text under it is not the actual SFR; we just used the f-element to carry the desired text because there was no other way to do that.