SCAP Content Validation Results

Validation Result: PASS
Submitted Resource: r1100-scap10-macos-cpe-dictionary.xml (SHA-256 : 2DFCDB6F3F014503B069E14C4E1A436E6BC5AF4F454B727411AE8EA17427CCD2)
Submitted Resource: r1100-scap10-macos-cpe-oval.xml (SHA-256 : A076E91880E1020AB98762AF27B7952F2B7A0FE0022BE83BB512D6FCDEE1CDBE)
Submitted Resource: r1100-scap10-macos-oval.xml (SHA-256 : 2D89BFF542E4D4291709ED71E6ECBBC601F0CF75C215BB5A9652606F37EE49B0)
Submitted Resource: r1100-scap10-macos-patches.xml (SHA-256 : 73943EF4DACFDDDA285FE69FF8E4DEB9C4879C02392B05425ABE0AED06D88FB0)
Submitted Resource: r1100-scap10-macos-xccdf.xml (SHA-256 : CBC02A6318E9267B88F5B75AE3BCA97EB7E1E583CCC0435E785CDA103140FB8B)
Validation Time: 2017-05-18T13:53:00
Tool Version: scapval-1.2.1.16

c:\utilities\scapval-1.2.1.16-release\R1100-scap10-macos

Requirement	Count	Level	Type	Description	Location	Test
15-2	1 (of 1)	WARN	SCHEMATRON	For all a) XCCDF documents, verify the existence of a valid CPE, and if not found, the content shall be considered to be in error; b) XCCDF documents, if any CPEs other than the one located above are specified, and if not, the content shall be considered to be in error; and c)XCCDF documents if the CPE name referenced is deprecated, flag as an warning indicating that the more current CPE name should be used.	/:data-stream[namespace-uri()='http://scap.nist.gov/schema/data-stream/0.1'][1]/:cpe-dictionary-content[namespace-uri()='http://scap.nist.gov/schema/data-stream/0.1'][1]/:cpe-list[namespace-uri()='http://cpe.mitre.org/dictionary/2.0'][1]/:cpe-item[namespace-uri()='http://cpe.mitre.org/dictionary/2.0'][3]	exists(document(concat('','/official-cpe-dictionary_v2.2.xml'))/cpe-dict:cpe-list/cpe-dict:cpe-item[count(tokenize(@name,':')) ge count(tokenize(current()/@name,':')) and (tokenize(@name,':')[1] eq tokenize(current()/@name,':')[1] or tokenize(current()/@name,':')[1] eq '' or not(exists(tokenize(current()/@name,':')[1]))) and (tokenize(@name,':')[2] eq tokenize(current()/@name,':')[2] or tokenize(current()/@name,':')[2] eq '' or not(exists(tokenize(current()/@name,':')[2]))) and (tokenize(@name,':')[3] eq tokenize(current()/@name,':')[3] or tokenize(current()/@name,':')[3] eq '' or not(exists(tokenize(current()/@name,':')[3]))) and (tokenize(@name,':')[4] eq tokenize(current()/@name,':')[4] or tokenize(current()/@name,':')[4] eq '' or not(exists(tokenize(current()/@name,':')[4]))) and (tokenize(@name,':')[5] eq tokenize(current()/@name,':')[5] or tokenize(current()/@name,':')[5] eq '' or not(exists(tokenize(current()/@name,':')[5]))) and (tokenize(@name,':')[6] eq tokenize(current()/@name,':')[6] or tokenize(current()/@name,':')[6] eq '' or not(exists(tokenize(current()/@name,':')[6]))) and (tokenize(@name,':')[7] eq tokenize(current()/@name,':')[7] or tokenize(current()/@name,':')[7] eq '' or not(exists(tokenize(current()/@name,':')[7]))) and (tokenize(@name,':')[8] eq tokenize(current()/@name,':')[8] or tokenize(current()/@name,':')[8] eq '' or not(exists(tokenize(current()/@name,':')[8])))])

r1100-scap10-macos-cpe-oval.xml

Requirement	Count	Level	Type	Description	Location	Test
A21	1 (of 2)	INFO	SCHEMATRON	oval:gov.nist.validation.cpe.oval:tst:101 - The OVAL test type is not checked in the NIST SCAP Validation Program.	/:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:tests[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:rpminfo_test[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5#linux'][1]	exists(document(concat('','/validation_program_oval_test_types.xml'))/test_types/test_type[@namespace eq namespace-uri(current()) and @name eq local-name(current())])
A21	1 (of 2)	INFO	SCHEMATRON	oval:gov.nist.validation.cpe.oval:tst:1302 - The OVAL test type is not checked in the NIST SCAP Validation Program.	/:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:tests[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:xmlfilecontent_test[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5#independent'][1]	exists(document(concat('','/validation_program_oval_test_types.xml'))/test_types/test_type[@namespace eq namespace-uri(current()) and @name eq local-name(current())])

r1100-scap10-macos-patches.xml

Requirement	Count	Level	Type	Description	Location	Test
66	5 (of 5)	WARN	SCHEMATRON	All SCAP OVAL patch class definitions that are NOT associated with source specific identifiers that are not contained in the <reference> element of the definition shall generate a warning.	/:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1] /:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][2] /:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][3] /:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][4] /:oval_definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/:definitions[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][1]/*:definition[namespace-uri()='http://oval.mitre.org/XMLSchema/oval-definitions-5'][5]	if( @class eq 'patch' ) then exists(current()//oval-def:reference) else true()

r1100-scap10-macos-xccdf.xml

Requirement	Count	Level	Type	Description	Location	Test
8-2	1 (of 1)	WARN	SCHEMATRON	For all a)XCCDF documents that do not contain the <xccdf:metadata> element, flag as a warning; and b) XCCDF documents that do contain the <xccdf:metadata> element and whose contents are not consistent with the Dublin Core terms flag as a warning.	/*:Benchmark[namespace-uri()='http://checklists.nist.gov/xccdf/1.1'][1]	every $m in xccdf:metadata/* satisfies $m/namespace-uri() eq 'http://purl.org/dc/elements/1.1/' and ($m/local-name() eq 'creator' or $m/local-name() eq 'publisher' or $m/local-name() eq 'contributor')

Statistics

Statistic Type	Statistic ID	Test Name	Value
COUNT	RULE_OVAL_COUNT
COUNT	RULE_OCIL_COUNT
COUNT	RULE_OCIL_ONLY_COUNT
COUNT	RULE_CCE_COUNT
COUNT	RULE_TEST_COUNT	variable_test	6
COUNT	RULE_TEST_COUNT	family_test	4
COUNT	RULE_TEST_COUNT	rpminfo_test	1
COUNT	RULE_TEST_COUNT	xmlfilecontent_test	1