Re: What am I doing wrong - site gen?

2008-02-12 Thread Erik Abele 

On 24.01.2008, at 00:53, William A. Rowe, Jr. wrote:


security/vulnerabilities-oval.xml

I'm ending up with deltas such as these...

-httpd_state xmlns=http://oval.mitre.org/XMLSchema/oval- 
definitions-5#apache id=oval:org.apache.httpd:ste:131  
version=1 comment=the version of httpd is 1.3.1

-version operation=equals datatype=version1.3.1/version
+httpd_state xmlns=http://oval.mitre.org/XMLSchema/oval- 
definitions-5 id=oval:org.apache.httpd:ste:131 version=1  
comment=the version of httpd is 1.3.1
+version xmlns=http://oval.mitre.org/XMLSchema/oval- 
definitions-5#apache operation=equals datatype=version1.3.1/ 
version

 /httpd_state

What component are we missing in site/lib/ or should I have locally
updated?


I guess you were running Ant directly instead of via build.sh, right?

If so then it was probably overriding the jars in site/lib and was  
therefore using a different version of the xslt processor... To get  
consistent results we need to rely on the jars in site/lib and only  
running via build.sh ensures that those are picked up :-/


Can you please try and let me know? I'll then update README if that  
fixes the issue...


Oh, and if you can't run build.sh on Win* (e.g. no cygwin) then we'll  
need to add a .bat version for it... (for an example see docs-build/ 
trunk/build.bat).


Cheers,
Erik

Re: What am I doing wrong - site gen?

2008-01-24 Thread Joe Orton 
On Wed, Jan 23, 2008 at 03:53:38PM -0800, William Rowe wrote:
 security/vulnerabilities-oval.xml

 I'm ending up with deltas such as these...

 -httpd_state 
 xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; 
 id=oval:org.apache.httpd:ste:131 version=1 comment=the version of 
 httpd is 1.3.1
 -version operation=equals datatype=version1.3.1/version
 +httpd_state xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
 id=oval:org.apache.httpd:ste:131 version=1 comment=the version of 
 httpd is 1.3.1
 +version xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; 
 operation=equals datatype=version1.3.1/version
  /httpd_state

 What component are we missing in site/lib/ or should I have locally
 updated?

The fragment in the namespace URI is being dropped, odd.  It works fine 
for me.  Does the patch below make any difference?

Index: xdocs/stylesheets/httpd-oval.xsl
===
--- xdocs/stylesheets/httpd-oval.xsl(revision 612495)
+++ xdocs/stylesheets/httpd-oval.xsl(working copy)
@@ -357,14 +357,14 @@
 !--
 Print out the actual state element.
 --
-xsl:element name=httpd_state 
namespace=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache;
+httpd_state 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache;
 xsl:attribute name=idxsl:value-of 
select=$state_id//xsl:attribute
 xsl:attribute name=version1/xsl:attribute
 xsl:attribute name=commentxsl:value-of 
select=$state_comment//xsl:attribute
 version datatype=version operation=equals 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache;
 xsl:value-of select=@version/
 /version
-/xsl:element
+/httpd_state
 /xsl:template
 !-- 
 --
 !-- 
 --

Re: What am I doing wrong - site gen?

2008-01-24 Thread William A. Rowe, Jr. 

Joe Orton wrote:

On Wed, Jan 23, 2008 at 03:53:38PM -0800, William Rowe wrote:

security/vulnerabilities-oval.xml

I'm ending up with deltas such as these...

-httpd_state 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; 
id=oval:org.apache.httpd:ste:131 version=1 comment=the version of 
httpd is 1.3.1

-version operation=equals datatype=version1.3.1/version
+httpd_state xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
id=oval:org.apache.httpd:ste:131 version=1 comment=the version of 
httpd is 1.3.1
+version xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; 
operation=equals datatype=version1.3.1/version

 /httpd_state

What component are we missing in site/lib/ or should I have locally
updated?


The fragment in the namespace URI is being dropped, odd.  It works fine 
for me.  Does the patch below make any difference?


Index: xdocs/stylesheets/httpd-oval.xsl
===
--- xdocs/stylesheets/httpd-oval.xsl(revision 612495)
+++ xdocs/stylesheets/httpd-oval.xsl(working copy)
@@ -357,14 +357,14 @@
 !--
 Print out the actual state element.
 --
-xsl:element name=httpd_state 
namespace=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache;
+httpd_state 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache;
 xsl:attribute name=idxsl:value-of 
select=$state_id//xsl:attribute
 xsl:attribute name=version1/xsl:attribute
 xsl:attribute name=commentxsl:value-of 
select=$state_comment//xsl:attribute
 version datatype=version operation=equals 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache;
 xsl:value-of select=@version/
 /version
-/xsl:element
+/httpd_state
 /xsl:template
 !-- 
 --
 !-- 
 --


It creates a 100% delta to the file... the pattern on this box looks like


Index: docs/security/vulnerabilities-oval.xml
===
--- docs/security/vulnerabilities-oval.xml  (revision 614738)
+++ docs/security/vulnerabilities-oval.xml  (working copy)
@@ -719,7 +719,7 @@
 /description
 apache_httpd_repository
 public20060508/public
-reported/reported
+reported/
 released20060501/released
 severity level=3moderate/severity
 /apache_httpd_repository
@@ -2775,225 +2775,225 @@
 /definition
 /definitions
 tests
-httpd_test 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; i
d=oval:org.apache.httpd:tst:226 version=1 comment=the version of 
httpd is 2

.2.6 check=at least one
-object object_ref=oval:org.apache.httpd:obj:1/
-state state_ref=oval:org.apache.httpd:ste:226/
+httpd_test xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
id=oval
:org.apache.httpd:tst:226 version=1 comment=the version of httpd is 
2.2.6 c

heck=at least one
+object 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; objec

t_ref=oval:org.apache.httpd:obj:1/
+state xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
state_ref=ov

al:org.apache.httpd:ste:226/
 /httpd_test
-httpd_test 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; i
d=oval:org.apache.httpd:tst:225 version=1 comment=the version of 
httpd is 2

.2.5 check=at least one
-object object_ref=oval:org.apache.httpd:obj:1/
-state state_ref=oval:org.apache.httpd:ste:225/
+httpd_test xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
id=oval
:org.apache.httpd:tst:225 version=1 comment=the version of httpd is 
2.2.5 c

heck=at least one
+object 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; objec

t_ref=oval:org.apache.httpd:obj:1/
+state xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
state_ref=ov

al:org.apache.httpd:ste:225/
 /httpd_test
-httpd_test 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; i
d=oval:org.apache.httpd:tst:224 version=1 comment=the version of 
httpd is 2

.2.4 check=at least one
-object object_ref=oval:org.apache.httpd:obj:1/
-state state_ref=oval:org.apache.httpd:ste:224/
+httpd_test xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
id=oval
:org.apache.httpd:tst:224 version=1 comment=the version of httpd is 
2.2.4 c

heck=at least one
+object 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; objec

t_ref=oval:org.apache.httpd:obj:1/
+state xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
state_ref=ov

al:org.apache.httpd:ste:224/
 /httpd_test
-httpd_test 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; i
d=oval:org.apache.httpd:tst:223 version=1 comment=the version of 
httpd is 2

.2.3 check=at least one
-object object_ref=oval:org.apache.httpd:obj:1/
-state state_ref=oval:org.apache.httpd:ste:223/
+httpd_test

What am I doing wrong - site gen?

2008-01-23 Thread William A. Rowe, Jr. 

security/vulnerabilities-oval.xml

I'm ending up with deltas such as these...

-httpd_state 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; 
id=oval:org.apache.httpd:ste:131 version=1 comment=the version of 
httpd is 1.3.1

-version operation=equals datatype=version1.3.1/version
+httpd_state xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5; 
id=oval:org.apache.httpd:ste:131 version=1 comment=the version of 
httpd is 1.3.1
+version 
xmlns=http://oval.mitre.org/XMLSchema/oval-definitions-5#apache; 
operation=equals datatype=version1.3.1/version

 /httpd_state

What component are we missing in site/lib/ or should I have locally
updated?