usnistgov / scapval

Other
4 stars 2 forks source link

scapval 1.3.3 does not include the latest schematron files #18

Closed dragosprisaca closed 5 years ago

dragosprisaca commented 6 years ago

I believe the following finding is a false positive:

`

FAIL
      <message>'oval:mil.disa.fso.windows:ste:393101 - the value of lockout_duration must be greater than or equal to zero - TEST: string-length(.) = 0 or number(.) &lt; 0'</message>
      <location line="14453" column="63" href="file:/c:/utilities/scapval-1.3.3-SNAPSHOT-scapval/r1200-na-datastream.xml" xpath="/*[local-name()='data-stream-collection' and namespace-uri()='http://scap.nist.gov/schema/scap/source/1.2'][1]/*[local-name()='component' and namespace-uri()='http://scap.nist.gov/schema/scap/source/1.2'][3]/*[local-name()='oval_definitions' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*[local-name()='states' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*[local-name()='lockoutpolicy_state' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5#windows'][2]/*[local-name()='lockout_duration' and namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5#windows'][1]" />
    </test>

`

This should be fixed in https://github.com/OVALProject/Language/issues/302

Thanks, _Dragos.

r1200-na-datastream.zip

gscottwilson commented 6 years ago

Dragos is this related to https://github.com/usnistgov/scapval/issues/16 I had referenced OVALProject/Language#302 and I believe I made all the changes.

dragosprisaca commented 5 years ago

Fixed in 1.3.4