Changes in the 1-3.0.0.0 RC2 [since version 1-3.0.0.0 RC1] Release date: 10/21/2019 1. The oval:nist.validation.winSid:ste:36 does not count for the naming convention of computer name Fix: Updated the oval:nist.validation.winSid:ste:36 to allow three digits for the computername. Updated files: r1100-scap12-win-datastream.xml, and windows-datastream.xml 2. Possible issues with win-def:wuaupdatesearcher_test on Windows 7 Fix: Updated the following tests: oval:nist.validation.winWuaUpdateSearcher:tst:12, 15, 19, 31, 33, 37, and 39. 3. The following rules reference an incorrect OVAL ID: oval:nist.validation.winFile:def:41, 42, 43, 44, 45, and 46. Fix: Updated the affected rules and the catalog file. 4. Issue: File "win_file_config1.py", line 67, in performConfig f = open(file3, 'w') Fix: updated the "win_file_config1.py" to create the necessary folder if not exist. 5. Issue: the following tests don't comply with the schematron rules: oval:nist.validation.textFileContent54:tst:63, oval:nist.validation.textFileContent54:tst:72, oval:nist.validation.linux_textFileContent54:tst:63, and oval:nist.validation.linux_textFileContent54:tst:72. Fix: updated the affected tests to comply with the schematron rules. 6. Updated the R1100 data streams to use unique IDs 7. Updated the test oval:nist.validation.winUserSid:tst:15 to prevent a possible mismatch on Windows 10. 8. Updated the command_line pattern match for oval:nist.validation.winProcess58-w10:obj:3 to count for "/NOUACCHECH" argument on Windows 10. 9. Improved the cleanup scripts. 10.Updated the object oval:nist.validation.macosplist510test:obj:8100 to reduce the scanning time. 11.The following rules have been removed due to changes in RHEL (ftp_home_dir boolean was removed from RHEL 7.6): xccdf_gov.nist_rule_SELinux_rhel7-0356, xccdf_gov.nist_rule_SELinux_rhel7-0357, xccdf_gov.nist_rule_SELinux_rhel7-0358, xccdf_gov.nist_rule_SELinux_rhel7-0359, and xccdf_gov.nist_rule_SELinux_rhel7-0360. 12.Updated the OVAL state oval:nist.validation.linuxPartition:ste:16 to support xvda* storage devices. 13. Updated Unix uname tests 43 and 44 to match UTC time zones. 14. Updated win_regkeyeffectiverights53 tests to use the "Backup Operators" group instead "Power Users" to avoid a possible issues on Windows Server 2012 R2. 15. Updated the regex used by oval:nist.validation.winUser:obj:3 and oval:nist.validation.winUser:obj:4 to match the info provided in the documentation. 16. Fixed mismatches for the xccdf_gov.nist.validation.winLicense_rule_xx [5, 15, 21, 22, 23, 24, 25] on Windows Server 2012 R2 17. Fixed mismatch for xccdf_gov.nist.validation.winSidSid_rule_4 and winSidSid_rule_13 on Windows Server 2012 R2 and Windows 10 18. Corrected the expected result for xccdf_gov.nist.validation.winSidSid_rule_10 and winSidSid_rule_16 in the catalog. 19. Updated the tests "oval:nist.validation.winNtuser:tst:31" and "oval:nist.validation.winNtuser:tst:37" to avoid a possible mismatch on Windows 10. 20. Added new test requirements for Windows Server 2012 R2 Domain Controllers ############################################################################### ############################################################################### ############################################################################### SCAP Validation Test Content version 1-3.0.0.0 RC1 Release date: 04/05/2019 The tests included in this Release Candidate may change in the final release.