The following is a description of the elements, types, and attributes that compose the Linux specific system characteristic items found in Open Vulnerability and Assessment Language (OVAL). Each item is an extension of the standard item element defined in the Core System Characteristic Schema. Through extension, each item inherits a set of elements and attributes that are shared amongst all OVAL Items. Each item is described in detail and should provide the information necessary to understand what each element and attribute represents. This document is intended for developers and assumes some familiarity with XML. A high level description of the interaction between the different tests and their relationship to the Core System Characteristic Schema is not outlined here.
The OVAL Schema is maintained by The Mitre Corporation and developed by the public OVAL Community. For more information, including how to get involved in the project and how to submit change requests, please visit the OVAL website at http://oval.mitre.org.
This item stores DPKG package info.
Child Elements Type MinOccurs MaxOccurs name oval-sc:EntityItemStringType 0 1 arch oval-sc:EntityItemStringType 0 1 epoch oval-sc:EntityItemStringType 0 1 release oval-sc:EntityItemStringType 0 1 version oval-sc:EntityItemStringType 0 1 evr oval-sc:EntityItemStringType 0 1
An inet listening server item stores the results of checking for network servers currently active on a system. It holds information pertaining to a specific protocol-address-port combination.
Child Elements Type MinOccurs MaxOccurs protocol oval-sc:EntityItemStringType 0 1 local_address oval-sc:EntityItemStringType 0 1 local_port oval-sc:EntityItemStringType 0 1 local_full_address oval-sc:EntityItemStringType 0 1 program_name oval-sc:EntityItemStringType 0 1 foreign_address oval-sc:EntityItemStringType 0 1 foreign_port oval-sc:EntityItemStringType 0 1 foreign_full_address oval-sc:EntityItemStringType 0 1 pid oval-sc:EntityItemIntType 0 1 user_id oval-sc:EntityItemStringType 0 1
This item stores rpm info.
Child Elements Type MinOccurs MaxOccurs name oval-sc:EntityItemStringType 0 1 arch oval-sc:EntityItemStringType 0 1 epoch oval-sc:EntityItemStringType 0 1 release oval-sc:EntityItemStringType 0 1 version oval-sc:EntityItemStringType 0 1 evr oval-sc:EntityItemStringType 0 1 signature_keyid oval-sc:EntityItemStringType 0 1
This item discribes info related to Slackware packages. It extends the standard ItemType as defined in the oval-system-characteristics schema and one should refer to the ItemType description for more information.
Child Elements Type MinOccurs MaxOccurs name oval-sc:EntityItemStringType 0 1 version oval-sc:EntityItemStringType 0 1 architecture oval-sc:EntityItemStringType 0 1 revision oval-sc:EntityItemStringType 0 1