oval_developer@lists.cisecurity.org

A list for people interested in developing the OVAL language.

View all threads

FW: Userright Test Update Request - Full Proposal Dated 01-20-2016

WB
Wilson, Bryan L CIV USN SPAWARSYSCEN LANT SC (US)
Mon, Nov 28, 2016 9:12 PM

I didn't notice this requested update listed on the following link

https://github.com/OVALProject/Language/tree/5.11.2

-----Original Message-----
From: Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 59220 [mailto:bryan.l.wilson@navy.mil]
Sent: Monday, November 28, 2016 4:10 PM
To: Wilson, Bryan L CIV USN SPAWARSYSCEN LANT SC (US)
Subject: FW: Userright Test Update Request - Full Proposal Dated 01-20-2016

Bryan Wilson
Computer Engineer
SPAWAR Systems Center Atlantic


From: Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 58600
Sent: Thursday, January 21, 2016 9:48 AM
To: David Solin; OVAL_Developer@lists.cisecurity.org
Subject: Userright Test Update Request - Full Proposal Dated 01-20-2016

Please review attached PDF for this requested update.

This email contains 2 attachments.

  1. win-def_userright_updates_2016.pdf
  • Same document I sent yesterday.  No updates or modifications made, dated 01-20-2016
  1. win-def_userright_schema_content_and_results.change2zip
  • Save the file and change extension from "change2zip" to "zip"
  • The zip file contains the following:
    *  Example Content
    • userright_test-oval_Prototype_ForForum.xml
    • userright_test-oval_Prototype_ForForum_SQLUpdate.xml
      *  Schema Changes
    • userright_updates_windows-definitions-schema.xsd
    • userright_updates_windows-system-characteristics-schema.xsd
      *  Example Results
    • Example 1
      *  Host1_SCC-4.1_16-01-12_2016-01-13_093006_All-Settings_userright_test-oval_Prototype_ForForum.htm
      *  Host1_SCC-4.1_16-01-12_2016-01-13_093006_OVAL-Results_userright_test-oval_Prototype_ForForum.xml
      *  Host1_SCC-4.1_16-01-12_2016-01-13_093006_OVAL-Variables_userright_test-oval_Prototype_ForForum.xml
    • Example 2
      *  Host1_SCC-4.1_16-01-12_2016-01-13_095109_All-Settings_userright_test-oval_Prototype_ForForum.htm
      *  Host1_SCC-4.1_16-01-12_2016-01-13_095109_OVAL-Results_userright_test-oval_Prototype_ForForum.xml
      *  Host1_SCC-4.1_16-01-12_2016-01-13_095109_OVAL-Variables_userright_test-oval_Prototype_ForForum.xml
    • Example 3a
      *  IISSQLServer_SCC-4.1_DEV21_2016-01-13_150031_All-Settings_userright_test-oval_Prototype_ForForum.htm
      *  IISSQLServer_SCC-4.1_DEV21_2016-01-13_150031_OVAL-Results_userright_test-oval_Prototype_ForForum.xml
      *  IISSQLServer_SCC-4.1_DEV21_2016-01-13_150031_OVAL-Variables_userright_test-oval_Prototype_ForForum.xml
    • Example 3b
      *  IISSQLServer_SCC-4.1_16-01-12_2016-01-13_103709_All-Settings_userright_test-oval_Prototype_ForForum_SQLUpdate.htm
      *  IISSQLServer_SCC-4.1_16-01-12_2016-01-13_103709_OVAL-Results_userright_test-oval_Prototype_ForForum_SQLUpdate.xml
      *  IISSQLServer_SCC-4.1_16-01-12_2016-01-13_103709_OVAL-Variables_userright_test-oval_Prototype_ForForum_SQLUpdate.xml

Bryan Wilson
Computer Engineer
SPAWAR Systems Center Atlantic
Bryan.L.Wilson@Navy.milmailto:Bryan.L.Wilson@Navy.mil


From: David Solin [solin@jovalcm.com]
Sent: Wednesday, January 20, 2016 5:21 PM
To: Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 58600
Cc: OVAL_Developer@lists.cisecurity.org
Subject: [Non-DoD Source] Re: [OVAL DEVELOPER] Userright Test Update Request

Hi Bryan,

The Github site you referenced is owned by MITRE, who no longer moderate the development of the OVAL language.  The language is now curated directly by the community.  We have been working on a new process for proposing changes to the language, and it will likely involve a repository hosted on Github, but that process has not been finalized yet.

Until it is ready, I don't see any reason why your proposal shouldn't be discussed entirely on this list.

Best regards,
-David A. Solin
Co-Founder, Research & Technology
solin@jovalcm.com

On Jan 20, 2016, at 1:41 PM, Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 58600 bryan.l.wilson@navy.mil wrote:

Please review attached pdf file regarding userright update to OVAL 5.11.  Please note this document in itself is not complete.  I want to include a zip file as well.  The contents of this zip file are defined in the document.

From what I understand the new process is to utilize github.  I have created an account there and per instruction on:  https://github.com/OVALProject/Language/wiki .......

It appears I should:
2.Create a new issue to request a new feature or to report a bug in the OVAL Language Tracker

Please confirm that is the full process and that I can attach this PDF and Zip file for full review

Bryan Wilson
SPAWAR Systems Center Atlantic
8432184316

...<win-def_userright_updates_2016.pdf>_______________________________________________
OVAL_Developer mailing list
OVAL_Developer@lists.cisecurity.org
http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org

...

I didn't notice this requested update listed on the following link https://github.com/OVALProject/Language/tree/5.11.2 -----Original Message----- From: Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 59220 [mailto:bryan.l.wilson@navy.mil] Sent: Monday, November 28, 2016 4:10 PM To: Wilson, Bryan L CIV USN SPAWARSYSCEN LANT SC (US) Subject: FW: Userright Test Update Request - Full Proposal Dated 01-20-2016 Bryan Wilson Computer Engineer SPAWAR Systems Center Atlantic ________________________________ From: Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 58600 Sent: Thursday, January 21, 2016 9:48 AM To: David Solin; OVAL_Developer@lists.cisecurity.org Subject: Userright Test Update Request - Full Proposal Dated 01-20-2016 Please review attached PDF for this requested update. This email contains 2 attachments. 1) win-def_userright_updates_2016.pdf * Same document I sent yesterday. No updates or modifications made, dated 01-20-2016 2) win-def_userright_schema_content_and_results.change2zip * Save the file and change extension from "change2zip" to "zip" * The zip file contains the following: * Example Content * userright_test-oval_Prototype_ForForum.xml * userright_test-oval_Prototype_ForForum_SQLUpdate.xml * Schema Changes * userright_updates_windows-definitions-schema.xsd * userright_updates_windows-system-characteristics-schema.xsd * Example Results * Example 1 * Host1_SCC-4.1_16-01-12_2016-01-13_093006_All-Settings_userright_test-oval_Prototype_ForForum.htm * Host1_SCC-4.1_16-01-12_2016-01-13_093006_OVAL-Results_userright_test-oval_Prototype_ForForum.xml * Host1_SCC-4.1_16-01-12_2016-01-13_093006_OVAL-Variables_userright_test-oval_Prototype_ForForum.xml * Example 2 * Host1_SCC-4.1_16-01-12_2016-01-13_095109_All-Settings_userright_test-oval_Prototype_ForForum.htm * Host1_SCC-4.1_16-01-12_2016-01-13_095109_OVAL-Results_userright_test-oval_Prototype_ForForum.xml * Host1_SCC-4.1_16-01-12_2016-01-13_095109_OVAL-Variables_userright_test-oval_Prototype_ForForum.xml * Example 3a * IISSQLServer_SCC-4.1_DEV21_2016-01-13_150031_All-Settings_userright_test-oval_Prototype_ForForum.htm * IISSQLServer_SCC-4.1_DEV21_2016-01-13_150031_OVAL-Results_userright_test-oval_Prototype_ForForum.xml * IISSQLServer_SCC-4.1_DEV21_2016-01-13_150031_OVAL-Variables_userright_test-oval_Prototype_ForForum.xml * Example 3b * IISSQLServer_SCC-4.1_16-01-12_2016-01-13_103709_All-Settings_userright_test-oval_Prototype_ForForum_SQLUpdate.htm * IISSQLServer_SCC-4.1_16-01-12_2016-01-13_103709_OVAL-Results_userright_test-oval_Prototype_ForForum_SQLUpdate.xml * IISSQLServer_SCC-4.1_16-01-12_2016-01-13_103709_OVAL-Variables_userright_test-oval_Prototype_ForForum_SQLUpdate.xml Bryan Wilson Computer Engineer SPAWAR Systems Center Atlantic Bryan.L.Wilson@Navy.mil<mailto:Bryan.L.Wilson@Navy.mil> ________________________________ From: David Solin [solin@jovalcm.com] Sent: Wednesday, January 20, 2016 5:21 PM To: Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 58600 Cc: OVAL_Developer@lists.cisecurity.org Subject: [Non-DoD Source] Re: [OVAL DEVELOPER] Userright Test Update Request Hi Bryan, The Github site you referenced is owned by MITRE, who no longer moderate the development of the OVAL language. The language is now curated directly by the community. We have been working on a new process for proposing changes to the language, and it will likely involve a repository hosted on Github, but that process has not been finalized yet. Until it is ready, I don't see any reason why your proposal shouldn't be discussed entirely on this list. Best regards, -David A. Solin Co-Founder, Research & Technology solin@jovalcm.com > On Jan 20, 2016, at 1:41 PM, Wilson, Bryan L CIV SPAWARSYSCEN-ATLANTIC, 58600 <bryan.l.wilson@navy.mil> wrote: > > Please review attached pdf file regarding userright update to OVAL 5.11. Please note this document in itself is not complete. I want to include a zip file as well. The contents of this zip file are defined in the document. > > From what I understand the new process is to utilize github. I have created an account there and per instruction on: https://github.com/OVALProject/Language/wiki ....... > > It appears I should: > 2.Create a new issue to request a new feature or to report a bug in the OVAL Language Tracker > > Please confirm that is the full process and that I can attach this PDF and Zip file for full review > > > Bryan Wilson > SPAWAR Systems Center Atlantic > 8432184316 > > > > ...<win-def_userright_updates_2016.pdf>_______________________________________________ > OVAL_Developer mailing list > OVAL_Developer@lists.cisecurity.org > http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org ...