﻿<?xml version="1.0" encoding="utf-8"?>
<oval_definitions xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>python</oval:product_name>
    <oval:product_version>2.6.6</oval:product_version>
    <oval:schema_version>5.10.1</oval:schema_version>
    <oval:timestamp>2011-09-21T13:44:00</oval:timestamp>
  </generator>
  <definitions>
    <definition class="compliance" id="oval:ssg:def:423" version="1">
      <metadata>
        <title>Service ssh Disabled</title>
        <affected family="unix">
          <platform>Debian GNU/Linux 7.2</platform>
        </affected>
        <description>The ssh service should be disabled if possible.</description>
      <reference source="ssg" ref_id="service_ssh_disabled" /></metadata>
      <criteria comment="package openssh-server removed or service ssh is not configured to start" operator="OR">
        <extend_definition comment="openssh-server removed" definition_ref="oval:ssg:def:343" />
        <criteria operator="AND" comment="service ssh is not configured to start">
          <criterion comment="ssh runlevel 0" test_ref="oval:ssg:tst:1335" />
          <criterion comment="ssh runlevel 1" test_ref="oval:ssg:tst:1336" />
          <criterion comment="ssh runlevel 2" test_ref="oval:ssg:tst:1337" />
          <criterion comment="ssh runlevel 3" test_ref="oval:ssg:tst:1338" />
          <criterion comment="ssh runlevel 4" test_ref="oval:ssg:tst:1339" />
          <criterion comment="ssh runlevel 5" test_ref="oval:ssg:tst:1340" />
          <criterion comment="ssh runlevel 6" test_ref="oval:ssg:tst:1341" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:ssg:def:343" version="1">
      <metadata>
        <title>Package openssh-server Removed</title>
        <affected family="unix">
          <platform>Debian GNU/Linux 7.2</platform>
        </affected>
        <description>The RPM package openssh-server should be removed.</description>
      <reference source="ssg" ref_id="package_openssh-server_removed" /></metadata>
      <criteria>
        <criterion comment="package openssh-server is removed" test_ref="oval:ssg:tst:794" />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <rpminfo_test check="all" check_existence="none_exist" id="oval:ssg:tst:794" version="1" comment="package openssh-server is removed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:ssg:obj:2065" />
    </rpminfo_test>
    <runlevel_test check="all" check_existence="any_exist" comment="Runlevel test" id="oval:ssg:tst:1335" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:ssg:obj:2532" />
      <state state_ref="oval:ssg:ste:2533" />
    </runlevel_test>
    <runlevel_test check="all" check_existence="any_exist" comment="Runlevel test" id="oval:ssg:tst:1336" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:ssg:obj:2534" />
      <state state_ref="oval:ssg:ste:2533" />
    </runlevel_test>
    <runlevel_test check="all" check_existence="any_exist" comment="Runlevel test" id="oval:ssg:tst:1337" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:ssg:obj:2535" />
      <state state_ref="oval:ssg:ste:2533" />
    </runlevel_test>
    <runlevel_test check="all" check_existence="any_exist" comment="Runlevel test" id="oval:ssg:tst:1338" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:ssg:obj:2536" />
      <state state_ref="oval:ssg:ste:2533" />
    </runlevel_test>
    <runlevel_test check="all" check_existence="any_exist" comment="Runlevel test" id="oval:ssg:tst:1339" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:ssg:obj:2537" />
      <state state_ref="oval:ssg:ste:2533" />
    </runlevel_test>
    <runlevel_test check="all" check_existence="any_exist" comment="Runlevel test" id="oval:ssg:tst:1340" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:ssg:obj:2538" />
      <state state_ref="oval:ssg:ste:2533" />
    </runlevel_test>
    <runlevel_test check="all" check_existence="any_exist" comment="Runlevel test" id="oval:ssg:tst:1341" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:ssg:obj:2539" />
      <state state_ref="oval:ssg:ste:2533" />
    </runlevel_test>
  </tests>
  <objects>
    <rpminfo_object id="oval:ssg:obj:2065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh-server</name>
    </rpminfo_object>
    <runlevel_object id="oval:ssg:obj:2532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <service_name>ssh</service_name>
      <runlevel operation="equals">0</runlevel>
    </runlevel_object>
    <runlevel_object id="oval:ssg:obj:2534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <service_name>ssh</service_name>
      <runlevel operation="equals">1</runlevel>
    </runlevel_object>
    <runlevel_object id="oval:ssg:obj:2535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <service_name>ssh</service_name>
      <runlevel operation="equals">2</runlevel>
    </runlevel_object>
    <runlevel_object id="oval:ssg:obj:2536" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <service_name>ssh</service_name>
      <runlevel operation="equals">3</runlevel>
    </runlevel_object>
    <runlevel_object id="oval:ssg:obj:2537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <service_name>ssh</service_name>
      <runlevel operation="equals">4</runlevel>
    </runlevel_object>
    <runlevel_object id="oval:ssg:obj:2538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <service_name>ssh</service_name>
      <runlevel operation="equals">5</runlevel>
    </runlevel_object>
    <runlevel_object id="oval:ssg:obj:2539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <service_name>ssh</service_name>
      <runlevel operation="equals">6</runlevel>
    </runlevel_object>
  </objects>
  <states>
    <runlevel_state comment="not configured to start" id="oval:ssg:ste:2533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <start datatype="boolean">false</start>
      <kill datatype="boolean">true</kill>
    </runlevel_state>
  </states>
</oval_definitions>