Where the rules that you added inside the <Group> elements rather than just
appended to the bottom of the file?

> <description> The SSG can be installed by using `yum install
scap-security-guide` as a root user
Use <tt>yum install scap-security-guide</tt> or <pre>yum install
scap-security-guide</pre> here.

Gabe

On Wed, Jun 21, 2017 at 11:05 AM, Bertilla Theodore <
[email protected]> wrote:

> Yes, I thought so too. But I am not able to figure out what's wrong.
> For one, the following is the exact content added to integrity.xml ( as
> per http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf
> )
>
> <Rule id="package_scap-security-guide_installed" severity="high">
>
>  <title>Install SCAP security guide</title>
>
>  <description> The SSG can be installed by using `yum install
> scap-security-guide` as a root user
>
>  </description>
>
>  <ocil clause="SCAP Security guide is not installed">
>
>  <package-check-macro package="scap-security-guide" />
>
>  </ocil>
>
>  <rational> Bertilla was here to  make this new rule
>
>  </rational>
>
>  <oval id="package_scap-security-guide_installed" />
>
> </Rule>
>
> On 21 June 2017 at 17:54, Shawn Wells <[email protected]> wrote:
>
>>
>>
>> On 6/21/17 12:44 PM, Bertilla Theodore wrote:
>> > I've attached the last part of the make process which has the errors.
>> > The new rules that I have added have not been parsed.
>>
>> > xml:307: parser error : Extra content at the end of the document
>> > <Profile id="common">
>> > ^
>> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> input/profiles/ftp-server.xml:16:
>> > parser error : Extra content at the end of the document
>> > <Profile id="ftp-server" extends="server">
>> > ^
>> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> input/xccdf/system/software/integrity.xml:383:
>> > parser error : Extra content at the end of the document
>> > <Group id="integrity">
>> > ^
>> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> input/xccdf/services/smb.xml:229:
>> > parser error : Extra content at the end of the document
>> > <Group id="smb">
>>
>> I'm guessing there are missing brackets/syntax errors in the content
>> added to these files.
>>
>> > ^
>> > [  0%] Built target generate-internal-rhel6-shorthand.xml
>> > [  0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
>> > File
>> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> RHEL/6/xccdf-unlinked-resolved.xml'
>> > line 429: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
>> > match found for key-sequence ['common'] of keyref
>> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
>> > File
>> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> RHEL/6/xccdf-unlinked-resolved.xml'
>> > line 465: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
>> > match found for key-sequence ['common'] of keyref
>> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
>> > File
>> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> RHEL/6/xccdf-unlinked-resolved.xml'
>> > line 526: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
>> > match found for key-sequence ['common'] of keyref
>> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
>> > File
>> > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> RHEL/6/xccdf-unlinked-resolved.xml'
>> > line 1908: Element '{http://checklists.nist.gov/xccdf/1.1}Profile': No
>> > match found for key-sequence ['common'] of keyref
>> > '{http://checklists.nist.gov/xccdf/1.1}profileExtIdKeyRef'.
>> > OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
>> > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
>> RHEL/6/xccdf-unlinked-resolved.xml.
>> > [oscap_so     urce.c:319]
>> > make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
>> > make[2]: ***
>> > [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-re
>> solved.xml.dir/all]
>> > Error 2
>> > make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
>> > make: *** [rhel6-content] Error 2
>> _______________________________________________
>> scap-security-guide mailing list -- [email protected]
>> rahosted.org
>> To unsubscribe send an email to scap-security-guide-leave@list
>> s.fedorahosted.org
>>
>
>
> _______________________________________________
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org
>
>
_______________________________________________
scap-security-guide mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to