[Xccdf-dev] Cluster-id Inheritance

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

[Xccdf-dev] Cluster-id Inheritance

Avnish

Hi all,

Need to understand the inheritance of "cluster-id".
XCCDF 1.2 doc says cluster-id can't be inherited and must be explicitly mentioned.
Does it mean that Group/Rule will not have same cluster-id as it's parent Group. If so then , what will selecting a group in a profile using cluster-id mean when none of Groups children items have a cluster-id.
In other words to select a rule (from profile using cluster-id ), we wont be able to use it's parent item's cluster id.
Please clarify this for me.

Regards,

Avnish Chandra Suman 
Department of Computer Science & Information Systems
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
Birla Institute of Technology & Science, Pilani 
Vidya Vihar Campus
Pilani 333031, Rajasthan, India


Avnish Chandra Suman 
Department of Computer Science & Information Systems
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
Birla Institute of Technology & Science, Pilani 
Vidya Vihar Campus
Pilani 333031, Rajasthan, India

_______________________________________________
XCCDF-dev mailing list
[hidden email]
To unsubscribe, send an email message to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: [Xccdf-dev] Cluster-id Inheritance

Simon Lukasik
On 03/10/2014 03:11 PM, AVNISH CHANDRA SUMAN wrote:
>
> Hi all,
>
> Need to understand the inheritance of "cluster-id".
> XCCDF 1.2 doc says cluster-id can't be inherited and must be explicitly
> mentioned.
> Does it mean that Group/Rule will not have same cluster-id as it's
> parent Group.

This is correct. By default cluster-id attribute is not inherited from
parent. It needs to be specified for each item.

>               If so then , what will selecting a group in a profile
> using cluster-id mean when none of Groups children items have a cluster-id.

If you select parent group by cluster-id it has the very same semantics
as if you select this group by using regular id.

> In other words to select a rule (from profile using cluster-id ), we
> wont be able to use it's parent item's cluster id.

It depends.

If you select a parent group, any of the child items (rules and groups)
may or may not end-up selected. It is rather complex process. For
example Rule xccdf_moc.elpmaxe.www_rule_4 at

 
https://git.fedorahosted.org/cgit/openscap.git/tree/tests/API/XCCDF/unittests/test_xccdf_selectors_cluster3.xccdf.xml

can be selected by cluster-id. Even though it has no cluster-id assigned.

Cheers,

--
Simon Lukasik
Security Technologies, Red Hat, Inc.
_______________________________________________
XCCDF-dev mailing list
[hidden email]
To unsubscribe, send an email message to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: [Xccdf-dev] Cluster-id Inheritance

Simon Lukasik
On 03/11/2014 04:32 PM, Simon Lukasik wrote:
>
> If you select a parent group, any of the child items (rules and groups)
> may or may not end-up selected. It is rather complex process. For
> example Rule xccdf_moc.elpmaxe.www_rule_4 at
>
>
> https://git.fedorahosted.org/cgit/openscap.git/tree/tests/API/XCCDF/unittests/test_xccdf_selectors_cluster3.xccdf.xml
>

This should have read

https://git.fedorahosted.org/cgit/openscap.git/tree/tests/API/XCCDF/unittests/test_xccdf_selectors_cluster2.xccdf.xml 


Sorry,

--
Simon Lukasik
Security Technologies, Red Hat, Inc.
_______________________________________________
XCCDF-dev mailing list
[hidden email]
To unsubscribe, send an email message to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: [Xccdf-dev] Cluster-id Inheritance

Avnish
In reply to this post by Avnish
Thank you very much , understood the context.

Avnish Chandra Suman 
Department of Computer Science & Information Systems
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
Birla Institute of Technology & Science, Pilani 
Vidya Vihar Campus
Pilani 333031, Rajasthan, India


On Tue, Mar 11, 2014 at 2:29 PM, AVNISH CHANDRA SUMAN <[hidden email]> wrote:
Hi all,

Need to understand the inheritance of "cluster-id".
XCCDF 1.2 doc says cluster-id can't be inherited and must be explicitly mentioned.
Does it mean that Group/Rule will not have same cluster-id as it's parent Group. If so then , what will selecting a group in a profile using cluster-id mean when none of Groups children items have a cluster-id.
In other words to select a rule (from profile using cluster-id ), we wont be able to use it's parent item's cluster id.
Please clarify this for me.

Regards,

Avnish Chandra Suman 
Department of Computer Science & Information Systems
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
Birla Institute of Technology & Science, Pilani 
Vidya Vihar Campus
Pilani 333031, Rajasthan, India


_______________________________________________
XCCDF-dev mailing list
[hidden email]
To unsubscribe, send an email message to [hidden email].