IETF Logo Mail Archive

Re: [scap_interest] SCE XCCDF

David Solin <david@joval.org> Fri, 24 February 2012 15:54 UTC

Return-Path: <solin@farnamhallventures.com>
X-Original-To: scap_interest@ietfa.amsl.com
Delivered-To: scap_interest@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1193C21F86E0 for <scap_interest@ietfa.amsl.com>; Fri, 24 Feb 2012 07:54:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.298
X-Spam-Level:
X-Spam-Status: No, score=-3.298 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U5qeE8+0Upuq for <scap_interest@ietfa.amsl.com>; Fri, 24 Feb 2012 07:54:53 -0800 (PST)
Received: from mail-gx0-f172.google.com (mail-gx0-f172.google.com [209.85.161.172]) by ietfa.amsl.com (Postfix) with ESMTP id BB46F21F8607 for <scap_interest@ietf.org>; Fri, 24 Feb 2012 07:54:37 -0800 (PST)
Received: by ggnq2 with SMTP id q2so1333895ggn.31 for <scap_interest@ietf.org>; Fri, 24 Feb 2012 07:54:37 -0800 (PST)
Received-SPF: pass (google.com: domain of solin@farnamhallventures.com designates 10.236.186.1 as permitted sender) client-ip=10.236.186.1;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of solin@farnamhallventures.com designates 10.236.186.1 as permitted sender) smtp.mail=solin@farnamhallventures.com
Received: from mr.google.com ([10.236.186.1]) by 10.236.186.1 with SMTP id v1mr5748849yhm.4.1330098877258 (num_hops = 1); Fri, 24 Feb 2012 07:54:37 -0800 (PST)
Received: by 10.236.186.1 with SMTP id v1mr4413249yhm.4.1330098877171; Fri, 24 Feb 2012 07:54:37 -0800 (PST)
Received: from [192.168.0.113] (cpe-70-123-137-202.austin.res.rr.com. [70.123.137.202]) by mx.google.com with ESMTPS id b33sm8406849anb.4.2012.02.24.07.54.34 (version=SSLv3 cipher=OTHER); Fri, 24 Feb 2012 07:54:36 -0800 (PST)
Sender: David Solin <solin@farnamhallventures.com>
Message-ID: <4F47B2B9.4030706@joval.org>
Date: Fri, 24 Feb 2012 09:54:33 -0600
From: David Solin <david@joval.org>
Organization: jOVAL
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2
MIME-Version: 1.0
To: scap_interest@ietf.org
References: <4CDD66FA-4282-4DFC-8EB8-2E005E978368@c3isecurity.com>
In-Reply-To: <4CDD66FA-4282-4DFC-8EB8-2E005E978368@c3isecurity.com>
Content-Type: multipart/alternative; boundary="------------050409050609040008060300"
X-Gm-Message-State: ALoCoQlX3hHRASFOo5Xucx5neutK82PlohahtP23wqTA8WdskRK3IUFXy4EDgzmtvl4ntE+t6IQ/
Subject: Re: [scap_interest] SCE XCCDF
X-BeenThere: scap_interest@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Discussion List for IETFers interested in the Security Content Automation Protocol \(SCAP\)." <scap_interest.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scap_interest>
List-Post: <mailto:scap_interest@ietf.org>
List-Help: <mailto:scap_interest-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Feb 2012 15:54:54 -0000

Thanks for forwarding this Luis, it's very interesting!

We're planning on bundling an XCCDF interpreter with the next release of 
jOVAL, and this would be a great capability to add to that support.  To 
that end, I've reached out to Peter Vrabec to discuss the reporting 
format, and adding variable exports to the "specification" (which seems 
like it would be very easy to do).

Regards,
--David Solin

-- 

jOVAL.org: OVAL implemented in Java.
/Scan any machine from any machine. For free!/
Learn More <http://www.joval.org> | Features 
<http://www.joval.org/features/> | Download 
<http://www.joval.org/download/>



On 2/24/2012 8:57 AM, Luis Nunez wrote:
> Link is some interesting and innovated work coming out of the open-scap.org project.  New release includes Script Check Engine (SCE) for XCCDF.
>
> http://pvrabec.livejournal.com/887.html
>
> -ln
> _______________________________________________
> scap_interest mailing list
> scap_interest@ietf.org
> https://www.ietf.org/mailman/listinfo/scap_interest

v2.23.0 | Report a Bug | By Email