Evaluate to unknown if the ind-def:unknown

├── README.md ├── docs ├── terms.txt └── README.txt ├── support └── xml │ └── classes │ ├── class1 │ ├── section1.xml │ └── section2.xml │ ├── class2 │ ├── section1.xml │ └── section2.xml │ ├── class3 │ ├── section1.xml │ └── section2.xml │ └── class4 │ ├── section1.xml │ └── section2.xml ├── linux ├── ind-def_unknown_test.xml ├── README.md ├── unix-def_uname_test.xml ├── ind-def_family_test.xml ├── ind-def_sql_test.xml ├── ind-def_variable_test.xml ├── oval-def_criterion.xml ├── oval-def_extend_definition.xml ├── oval-def_constant_variable.xml ├── oval-def_local_variable.xml ├── unix-def_shadow_test.xml └── oval-def_escape_regex_function.xml ├── macos ├── ind-def_unknown_test.xml ├── README.md ├── unix-def_uname_test.xml ├── ind-def_family_test.xml ├── ind-def_sql_test.xml ├── macos-def_pwpolicy_test.xml ├── ind-def_variable_test.xml ├── oval-def_criterion.xml ├── oval-def_extend_definition.xml ├── oval-def_constant_variable.xml ├── oval-def_local_variable.xml ├── unix-def_shadow_test.xml └── oval-def_escape_regex_function.xml ├── solaris ├── ind-def_unknown_test.xml ├── README.md ├── sol-def_isainfo_test.xml ├── unix-def_uname_test.xml ├── ind-def_family_test.xml ├── ind-def_sql_test.xml ├── ind-def_variable_test.xml ├── oval-def_criterion.xml ├── oval-def_extend_definition.xml ├── oval-def_constant_variable.xml ├── oval-def_local_variable.xml └── unix-def_shadow_test.xml └── windows ├── ind-def_unknown_test.xml ├── win-def_uac_test.xml ├── README.md ├── win-def_wmi_object_test.xml ├── ind-def_family_test.xml ├── win-def_passwordpolicy_test.xml ├── win-def_lockoutpolicy_test.xml ├── ind-def_sql_test.xml ├── win-def_wuaupdatesearcher_test.xml ├── ind-def_variable_test.xml ├── win-def_wmi57_object_test.xml ├── oval-def_criterion.xml ├── win-def_auditeventpolicy_test.xml ├── oval-def_extend_definition.xml ├── oval-def_constant_variable.xml ├── oval-def_local_variable.xml └── win-def_user_test.xml /README.md: -------------------------------------------------------------------------------- 1 | OVAL Test Content 2 | ============ 3 | 4 | The OVAL Test Content is a set of OVAL Definitions that provides a simple way to test the capability of OVAL Definition Evaluators. After running the OVAL Test Content through an OVAL Definition Evaluator, the OVAL Results will show the user which tests are properly supported by that tool. This allows users to perform unit testing of tools against the OVAL Language. Over time, the OVAL Test Content will cover the basic behavior of all tests and capabilities in the OVAL Language. 5 | 6 | Current: [GitHub OVAL Test Content] (https://github.com/OVALProject/Test-Content)
7 | Previous: [SourceForge OVAL Test Content] (http://sourceforge.net/p/ovaltestcontent)
8 | 9 | Please see the [OVAL Web Site](http://oval.mitre.org/repository/about/testcontent.html) for more information about the OVAL Language. 10 | 11 | The OVAL Test Content operates under the [OVAL Terms of Use](http://oval.mitre.org/about/termsofuse.html). 12 | -------------------------------------------------------------------------------- /docs/terms.txt: -------------------------------------------------------------------------------- 1 | Copyright (c) 2002-2013, The MITRE Corporation 2 | All rights reserved. 3 | 4 | Redistribution and use in source and binary forms, with or without modification, are 5 | permitted provided that the following conditions are met: 6 | 7 | * Redistributions of source code must retain the above copyright notice, this list 8 | of conditions and the following disclaimer. 9 | * Redistributions in binary form must reproduce the above copyright notice, this 10 | list of conditions and the following disclaimer in the documentation and/or other 11 | materials provided with the distribution. 12 | * Neither the name of The MITRE Corporation nor the names of its contributors may be 13 | used to endorse or promote products derived from this software without specific 14 | prior written permission. 15 | 16 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY 17 | EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 18 | OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT 19 | SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 20 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT 21 | OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22 | HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR 23 | TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, 24 | EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 25 | -------------------------------------------------------------------------------- /support/xml/classes/class1/section1.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /support/xml/classes/class1/section2.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /support/xml/classes/class2/section1.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /support/xml/classes/class2/section2.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /support/xml/classes/class3/section1.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /support/xml/classes/class3/section2.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /support/xml/classes/class4/section1.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /support/xml/classes/class4/section2.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Bill 6 | 21364127 7 | 8 | 83 9 | 90 10 | 100 11 | 87 12 | 13 | 14 | > 15 | Jen 16 | 76545123 17 | 18 | 19 | 93 20 | 70 21 | 85 22 | 86 23 | 24 | 25 | 26 | John 27 | 98090124 28 | 29 | 30 | 100 31 | 87 32 | 62 33 | 76 34 | 35 | 36 | 37 | Kate 38 | 43258933 39 | 40 | 53 41 | 90 42 | 92 43 | 97 44 | 45 | 46 | 47 | -------------------------------------------------------------------------------- /linux/ind-def_unknown_test.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5.10.1 5 | 2009-01-12T10:41:00-05:00 6 | Copyright (c) 2002-2013, The MITRE Corporation. All rights reserved. The contents of this file are subject to the license described in terms.txt. 7 | 8 | 9 | 10 | 11 | Evaluate to unknown if the ind-def:unknown_test is properly supported 12 | This definition is intended to evalutate to unknown if the interpreter properly supports the ind-def:unknown_test and all of its valid operations. 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /macos/ind-def_unknown_test.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5.10.1 5 | 2009-01-12T10:41:00-05:00 6 | Copyright (c) 2002-2013, The MITRE Corporation. All rights reserved. The contents of this file are subject to the license described in terms.txt. 7 | 8 | 9 | 10 | 11 | Evaluate to unknown if the ind-def:unknown_test is properly supported 12 | This definition is intended to evalutate to unknown if the interpreter properly supports the ind-def:unknown_test and all of its valid operations. 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /solaris/ind-def_unknown_test.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5.10.1 5 | 2009-01-12T10:41:00-05:00 6 | Copyright (c) 2002-2013, The MITRE Corporation. All rights reserved. The contents of this file are subject to the license described in terms.txt. 7 | 8 | 9 | 10 | 11 | Evaluate to unknown if the ind-def:unknown_test is properly supported 12 | This definition is intended to evalutate to unknown if the interpreter properly supports the ind-def:unknown_test and all of its valid operations. 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /windows/ind-def_unknown_test.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5.10.1 5 | 2009-01-12T10:41:00-05:00 6 | Copyright (c) 2002-2013, The MITRE Corporation. All rights reserved. The contents of this file are subject to the license described in terms.txt. 7 | 8 | 9 | 10 | 11 | Evaluate to unknown if the ind-def:unknown_test is properly supported 12 | This definition is intended to evalutate to unknown if the interpreter properly supports the ind-def:unknown_test and all of its valid operations. 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /solaris/README.md: -------------------------------------------------------------------------------- 1 | #Solaris Test Content# 2 | ##Sun Solaris## 3 | 4 | The OVAL Test Content is currently developed and tested on the 32-bit version of Sun Solaris 10. 5 | 6 | 1. Preparing the System 7 | First, extract the OVAL Test Content to a directory of your choice. Then unzip support.zip to /tmp/support. 8 | 9 | 2. Running the Content 10 | Run each of the OVAL Definition documents in the platform directory of the system being tested against your OVAL Definition Evaluator. 11 | 12 | 3. Expected Results 13 | Each OVAL Definition document is written to evaluate to true unless otherwise specified. 14 | 15 | ##Supported Constructs## 16 | * ind-def:environmentvariable_test 17 | * ind-def:family_test 18 | * ind-def:filehash_test 19 | * ind-def:filehash58_test 20 | * ind-def:ldap_test 21 | * ind-def:sql_test 22 | * ind-def:textfilecontent_test 23 | * ind-def:textfilecontent54_test 24 | * ind-def:unknown_test 25 | * ind-def:variable_test 26 | * ind-def:xmlfilecontent_test 27 | * oval:binary datatype 28 | * oval:boolean datatype 29 | * oval:check enumeration (entity_check) 30 | * oval:check enumeration (test) 31 | * oval:check enumeration (var_check) 32 | * oval:evr_string datatype 33 | * oval:existence enumeration 34 | * oval:float datatype 35 | * oval:int datatype 36 | * oval:ipv4address datatype 37 | * oval:ipv6address datatype 38 | * oval:string datatype 39 | * oval:version datatype 40 | * oval-def:arithmetic function 41 | * oval-def:begin function 42 | * oval-def:concat function 43 | * oval-def:constant_variable 44 | * oval-def:criteria 45 | * oval-def:criterion 46 | * oval-def:end function 47 | * oval-def:escape_regex function 48 | * oval-def:extend_definition 49 | * oval-def:external_variable 50 | * oval-def:literal_component 51 | * oval-def:local_variable 52 | * oval-def:object_component 53 | * oval-def:regex_capture function 54 | * oval-def:set 55 | * oval-def:split function 56 | * oval-def:substring function 57 | * oval-def:time_difference function 58 | * oval-def:variable_component 59 | * sol-def:isainfo_test 60 | * sol-def:package_test 61 | * sol-def:patch_test 62 | * sol-def:patch54_test 63 | * sol-def:smf_test 64 | * unix-def:file_test 65 | * unix-def:inetd_test 66 | * unix-def:interface_test 67 | * unix-def:password_test 68 | * unix-def:process_test 69 | * unix-def:process58_test 70 | * unix-def:runlevel_test 71 | * unix-def:shadow_test 72 | * unix-def:uname_test 73 | * unix-def:xinetd_test 74 | -------------------------------------------------------------------------------- /macos/README.md: -------------------------------------------------------------------------------- 1 | #Mac OS Test Content# 2 | ##Mac OS## 3 | 4 | The OVAL Test Content is currently developed and tested on the 32-bit version of Apple Mac OSX 10.6. 5 | 6 | 1. Preparing the System 7 | First, extract the OVAL Test Content to a directory of your choice. Then unzip support.zip to /tmp/support. 8 | 9 | 2. Running the Content 10 | Run each of the OVAL Definition documents in the platform directory of the system being tested against your OVAL Definition Evaluator. 11 | 12 | 3. Expected Results 13 | Each OVAL Definition document is written to evaluate to true unless otherwise specified. 14 | 15 | ##Supported Constructs## 16 | * ind-def:environmentvariable_test 17 | * ind-def:family_test 18 | * ind-def:filehash_test 19 | * ind-def:filehash58_test 20 | * ind-def:ldap_test 21 | * ind-def:sql_test 22 | * ind-def:textfilecontent_test 23 | * ind-def:textfilecontent54_test 24 | * ind-def:unknown_test 25 | * ind-def:variable_test 26 | * ind-def:xmlfilecontent_test 27 | * macos-def:accountinfo_test 28 | * macos-def:inetlisteningservers_test 29 | * macos-def:nvraminfo_test 30 | * macos-def:pwpolicy_test 31 | * oval:binary datatype 32 | * oval:boolean datatype 33 | * oval:check enumeration (entity_check) 34 | * oval:check enumeration (test) 35 | * oval:check enumeration (var_check) 36 | * oval:evr_string datatype 37 | * oval:existence enumeration 38 | * oval:float datatype 39 | * oval:int datatype 40 | * oval:ipv4address datatype 41 | * oval:ipv6address datatype 42 | * oval:string datatype 43 | * oval:version datatype 44 | * oval-def:arithmetic function 45 | * oval-def:begin function 46 | * oval-def:concat function 47 | * oval-def:constant_variable 48 | * oval-def:criteria 49 | * oval-def:criterion 50 | * oval-def:end function 51 | * oval-def:escape_regex function 52 | * oval-def:extend_definition 53 | * oval-def:external_variable 54 | * oval-def:literal_component 55 | * oval-def:local_variable 56 | * oval-def:object_component 57 | * oval-def:regex_capture function 58 | * oval-def:set 59 | * oval-def:split function 60 | * oval-def:substring function 61 | * oval-def:time_difference function 62 | * oval-def:variable_component 63 | * unix-def:file_test 64 | * unix-def:inetd_test 65 | * unix-def:interface_test 66 | * unix-def:password_test 67 | * unix-def:process_test 68 | * unix-def:process58_test 69 | * unix-def:runlevel_test 70 | * unix-def:shadow_test 71 | * unix-def:uname_test 72 | * unix-def:xinetd_test 73 | -------------------------------------------------------------------------------- /linux/README.md: -------------------------------------------------------------------------------- 1 | #Linux Test Content# 2 | ##Red Hat Linux## 3 | 4 | The OVAL Test Content is currently developed and tested on the 32-bit version of Red Hat Enterprise Linux 5. 5 | 6 | 1. Preparing the System 7 | First, extract the OVAL Test Content to a directory of your choice. Then unzip support.zip to /tmp/support. 8 | 9 | 2. Running the Content 10 | Run each of the OVAL Definition documents in the platform directory of the system being tested against your OVAL Definition Evaluator. 11 | 12 | 3. Expected Results 13 | Each OVAL Definition document is written to evaluate to true unless otherwise specified. 14 | 15 | ##Supported Constructs## 16 | * ind-def:environmentvariable_test 17 | * ind-def:environmentvariable58_test 18 | * ind-def:family_test 19 | * ind-def:filehash_test 20 | * ind-def:filehash58_test 21 | * ind-def:ldap_test 22 | * ind-def:sql_test 23 | * ind-def:textfilecontent_test 24 | * ind-def:textfilecontent54_test 25 | * ind-def:unknown_test 26 | * ind-def:variable_test 27 | * ind-def:xmlfilecontent_test 28 | * linux-def:dpkginfo_test 29 | * linux-def:inetlisteningservers_test 30 | * linux-def:partition_test 31 | * linux-def:rpminfo_test 32 | * linux-def:rpmverify_test 33 | * linux-def:selinuxboolean_test 34 | * linux-def:selinuxsecuritycontext_test 35 | * linux-def:slackwarepkginfo_test 36 | * oval:binary datatype 37 | * oval:boolean datatype 38 | * oval:check enumeration (entity_check) 39 | * oval:check enumeration (test) 40 | * oval:check enumeration (var_check) 41 | * oval:evr_string datatype 42 | * oval:existence enumeration 43 | * oval:float datatype 44 | * oval:int datatype 45 | * oval:ipv4address datatype 46 | * oval:ipv6address datatype 47 | * oval:string datatype 48 | * oval:version datatype 49 | * oval-def:arithmetic function 50 | * oval-def:begin function 51 | * oval-def:concat function 52 | * oval-def:constant_variable 53 | * oval-def:criteria 54 | * oval-def:criterion 55 | * oval-def:end function 56 | * oval-def:escape_regex function 57 | * oval-def:extend_definition 58 | * oval-def:external_variable 59 | * oval-def:literal_component 60 | * oval-def:local_variable 61 | * oval-def:object_component 62 | * oval-def:regex_capture function 63 | * oval-def:set 64 | * oval-def:split function 65 | * oval-def:substring function 66 | * oval-def:time_difference function 67 | * oval-def:variable_component 68 | * unix-def:file_test 69 | * unix-def:inetd_test 70 | * unix-def:interface_test 71 | * unix-def:password_test 72 | * unix-def:process_test 73 | * unix-def:process58_test 74 | * unix-def:runlevel_test 75 | * unix-def:shadow_test 76 | * unix-def:uname_test 77 | * unix-def:xinetd_test 78 | -------------------------------------------------------------------------------- /windows/win-def_uac_test.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5.10.1 5 | 2009-01-12T10:41:00-05:00 6 | Copyright (c) 2002-2013, The MITRE Corporation. All rights reserved. The contents of this file are subject to the license described in terms.txt. 7 | 8 | 9 | 10 | 11 | Evaluate to true if the win-def:uac_test is properly supported. 12 | This definition is intended to evalutate to true if the interpreter properly supports the win-def:uac_test. 13 | 14 | 15 | It is important to note that the values used in this test definition are specific to a particular machine, and may not necessarily apply to your system. As a result, in order to have the definition return a result of 'true', you must either change these values to the ones found on your particular system, or you must configure your system to use these values. 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 |