I believe the following finding is a false positive:
`
FAIL
<message>'oval:mil.disa.fso.windows:ste:393101 - the value of lockout_duration must be greater than or equal to zero - TEST: string-length(.) = 0 or number(.) < 0'</message>
<location line="14453" column="63" href="file:/c:/utilities/scapval-1.3.3-SNAPSHOT-scapval/r1200-na-datastream.xml" xpath="/*[local-name()='data-stream-collection' and namespace-uri()='http://scap.nist.gov/schema/scap/source/1.2'][1]/*[local-name()='component' and namespace-uri()='http://scap.nist.gov/schema/scap/source/1.2'][3]/*[local-name()='oval_definitions' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*[local-name()='states' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*[local-name()='lockoutpolicy_state' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5#windows'][2]/*[local-name()='lockout_duration' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5#windows'][1]" />
</test>
I believe the following finding is a false positive:
`
`
This should be fixed in https://github.com/OVALProject/Language/issues/302
Thanks, _Dragos.
r1200-na-datastream.zip