Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News — May 15, 2008 Search
link to OVAL home page
  OVAL Language > Downloads > Version 5.3 (Archived)

Version 5.3 (Archived)

This page provides information about the current official version of the OVAL Language. All information about the version is included in this centralized location.

Downloads

Includes downloads for the Version 5.3 Definition Schema, System Characteristics Schema, Results Schema, Variable Schema, and Documentation.

KEY
Complete Schema - has all documentation embedded and the Schematron mark-up.
Minimal Schema - includes the raw xml schema only.
Schematron - a schema that can provide additional validation of OVAL V5 documents.
Documentation pdf - includes element dictionaries, etc., which users can elect to view in a browser or save.
All files zip - all files zipped together to allow for one simple download.
xsd - a user can either right click to download the file or left click to open the file in their default viewer.

OVAL Definition Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd pdf -
Common xsd xsd pdf -
Independent xsd xsd pdf -
Cisco IOS xsd xsd pdf -
HP-UX xsd xsd pdf -
UNIX xsd xsd pdf -
Linux xsd xsd pdf -
Apple Macintosh xsd xsd pdf -
Sun Solaris xsd xsd pdf -
Microsoft Windows xsd xsd pdf -
Apache xsd xsd pdf -
FreeBSD xsd xsd pdf -
 
 

OVAL System Characteristics Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd pdf -
Common xsd xsd pdf -
Independent xsd xsd pdf -
Cisco IOS xsd xsd pdf -
HP-UX xsd xsd pdf -
UNIX xsd xsd pdf -
Linux xsd xsd pdf -
Apple Macintosh xsd xsd pdf -
Sun Solaris xsd xsd pdf -
Microsoft Windows xsd xsd pdf -
Apache xsd xsd pdf -
FreeBSD xsd xsd pdf -
 

OVAL Results Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd pdf -
Common xsd xsd pdf -
 

OVAL Variables Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd pdf -
Common xsd xsd pdf -
 

Example XML Stylesheets
File Name Description
results_to_html.xsl The results_to_html stylesheet converts an OVAL Results document into a more readable html format.
minimal_schema.xsl The minimal_schema stylesheet removes all annotation elements from the OVAL Schema leaving only the minimal schema.
element_dictionary.xsl The element_dictionary stylesheet creates documentation files from the OVAL Schema.
reference_mapping.xsl The reference_mapping stylesheet creates a map between each OVAL Definition in a document and a specified reference source.

New in Version 5.3

Version 5.3 of the Official OVAL Language is a direct result of feedback from the OVAL Community. This will be a minor version change and may require some new development by tools that support earlier versions of the Language. The changes pending to the different schemas are outlined below.

Version 5.3 of the OVAL Schema will include the following:

  • updated documentation
  • added sql test to the independent schema
  • changed the datatype of the comment attribute to not accept empty strings
  • added include_group and resolve_group behaviors to the windows accesstoken_object
  • modified the schematron of the rpminfo_state to allow 'version' as a valid datatype for the <release> and <version> entities
  • added new privileges to the windows accesstoken_test
  • added an optional mask attribute
  • fixed a schema error that had a_time, c_time, and m_time defined as strings, changed to ints
  • added the audit event policy subcategories test to the windows schema
  • added a schematron rule in certain places to validate that an int value was supplied when a datatype of int was declared
  • added a share permission test to the windows schema
  • added a printer effective rights test
  • changed the trustee_name entity to trustee_sid for existing effective rights and audit permission tests, deprecated the original tests
  • added a check_existence attribute to and OVAL Test
  • added the 'none satisfy' value to the existing check attribute of an OVAL Test
  • added a ONE operator to the criterion element
  • added a user access control test
  • modified the hp-ux patch test

Timeline for Version 5.3

PLANNING DRAFT RELEASE CANDIDATE OFFICIAL
16 March 2007
 30 March 2007
 14 May 2007
 27 June 2007

Status Reports on Version 5.3

Status updates are included below. You may also review the Developer List Archives for discussions about Version 5.3, or enter "Version 5.3" as a keyword search for a list of forum discussions about the new version.

[2007-06-27]

Version 5.3 of the OVAL Language has officially been released.

[2007-06-01]

The current OVAL Repository content converted to version 5.3 of OVAL is available here. This data is provided for testing only. The OVAL Repository will be officially converted after version 5.3 becomes official.

[2007-05-30]

Some recent discussion by the community and within the OVAL Board has caused us to rethink the changes being included in Version 5.3. We were hoping to include two significant fixes (change of check attribute, change of trustee_name) in the minor version but our implementation of these fixes were going to cause exsting content to become invalid. This would have presented a big challenge to tool vendors and so we have had to modify how these changes are made. We have posted a second release candidate and pushed the final release back to June 27th.

[2007-05-14]

The first release candidate is now available. This includes all the of the modifications that the community has worked on over the past few months. Included in this is the speration of the existance check and state check for OVAL Tests. With the availability of the release candidate, developers should begin the process of updating their code. No new features will be added. The only changes will be in fixing errors that are discovered.

[2007-04-18]

A second draft of version 5.3 is now available.

[2007-03-30]

First draft of version 5.3 is now available. This draft adds the sql_test to the independent schema, as well as adding behaviors to the windows accesstoken_test. A second draft that adds some additional tests will be available shortly.

[2007-03-16]

Version 5.3 is currently in the planning stage. It will be a small update that updates some of the documentation, adds new community requested tests, and fixes some errors found in the the windows component schemas. As a minor version change Version 5.3 will not invalidate existing content that currently validates against Version 5.2, thus it should not require any major reworking of existing tools already compatible with version 5.2.

 

Page Last Updated: March 26, 2008
Comments and questions on the proposed schemas are welcome on the OVAL Developer's List, or to oval@mitre.org.

 

OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

The OVAL Web site is hosted by The MITRE Corporation.

Copyright 2002-2008, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation.

Contact oval@mitre.org for more information.
Privacy policy
Terms of use