commoncriteria / transforms

Repository for various transforms that are common across CC projects.
The Unlicense
1 stars 2 forks source link

alternate introductory text and subsections for Module SARs #54

Open jfisherbah opened 1 year ago

jfisherbah commented 1 year ago

The current schema for populating the SARs section of a module appears to be the tag. However, if that is the correct tag to use, it does not appear to be having any effect. i.e. it can be used in the input.xml without any schema errors but the freeform text inside is overridden by whatever goes in that section by default, and there doesn't appear to be any meaningful tags that work inside of it.

For a module, the expectation is that it can potentially define additional EAs for the SARs beyond what the Base-PP requires. If it doesn't do this, the default text that currently populates the SARs section is fine. But we want to have the option for adding something here.

For example, the STIP module defines specific guidance for AVA_VAN.1 because there are certain implementation flaws that are unique to STIP and need to be considered beyond what the NDcPP requires for that SAR. So we should be able to define a SARs section in a module that has its own intro text, one or more subsections for the SAR classes (ASE, ADV, AVA, etc.), freeform text underneath the subsection, and an . Guidance is needed as to whether this capability currently exists since it wasn't found in template materials. If it doesn't currently exist, it should be added as an optional capability for modules.

kgal commented 1 year ago

It should be working. Add a tag under mod-sars.

jfisherbah commented 1 year ago

mod-sars is present in STIP with a section tag underneath. It's showing up as valid schema but none of it is replacing the default text in the SARs section. Unclear what is needed to override the default.