search

usnistgov / scapval

Other
4 stars 2 forks source link

SCAPVal does not use the latest OVAL schema for Windows #11

Closed dragosprisaca closed 7 years ago

dragosprisaca commented 7 years ago

According to SP800-126r3 Annex, the latest OVAL schema for Windows is 5.11.2:1.4. See Table 2: Approved OVAL Platform Schema Versions:

Definitions Schema: https://raw.githubusercontent.com/OVALProject/Language/7fa7bba7b48f09decb732d00b2be032a487ff9fc/schemas/windows-definitions-schema.xsd
System Characteristics Schema: https://raw.githubusercontent.com/OVALProject/Language/7fa7bba7b48f09decb732d00b2be032a487ff9fc/schemas/windows-system-characteristics-schema.xsd

Thanks, _Dragos.

gscottwilson commented 7 years ago

It looks like the version included in those links is 5.11.1:1.4 Should we be trying to locate 5.11.2:1.4?

dragosprisaca commented 7 years ago

Hello Scott,

The 5.11.1:1.4 is the correct version since Windows schema is based on OVAL core 5.11.1 and there is no 5.11.2:1.4 schema.

Thanks, _Dragos.

gscottwilson commented 7 years ago

Ok, in the issue description you mentioned the According to SP800-126r3 Annex, the latest OVAL schema for Windows is 5.11.2:1.4. See Table 2: Approved OVAL Platform Schema Versions Should that be updated to 5.11.1:1.4 you've found as the correct version?

david-waltermire commented 7 years ago

I believe it should be. I’ll fix this in 800-126.

Dave

From: gscottwilson [mailto:notifications@github.com] Sent: Monday, October 02, 2017 2:18 PM To: usnistgov/scapval scapval@noreply.github.com Cc: Subscribed subscribed@noreply.github.com Subject: Re: [usnistgov/scapval] SCAPVal does not use the latest OVAL schema for Windows (#11)

Ok, in the issue description you mentioned the According to SP800-126r3 Annex, the latest OVAL schema for Windows is 5.11.2:1.4. See Table 2: Approved OVAL Platform Schema Versions Should that be updated to 5.11.1:1.4 you've found as the correct version?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fusnistgov%2Fscapval%2Fissues%2F11%23issuecomment-333619980&data=02%7C01%7Cdavid.waltermire%40nist.gov%7C33f7db4f643b4bc5af1208d509c1f8c9%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C0%7C636425651066685627&sdata=uuxFG4btYVPBBz8FtojjjnGqfDOMPp0fRtEXrVrXZEg%3D&reserved=0, or mute the threadhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAJaiaJQ8Dfin44CCpJdpmj6ye-ju9X8qks5soSjvgaJpZM4PfO-3&data=02%7C01%7Cdavid.waltermire%40nist.gov%7C33f7db4f643b4bc5af1208d509c1f8c9%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C0%7C636425651066685627&sdata=dRLEOcfPJdrldvTzcRaLCnP28KKVnb9UtaQIhQ5MzxQ%3D&reserved=0.