Schematron validation for an OVAL Directives file DEPRECATED ATTRIBUTE VALUE IN: ATTRIBUTE VALUE: The source OVAL Definition document must be included when the directives include_source_definitions attribute is set to true. The source OVAL Definition document must not be included when the directives include_source_definitions attribute is set to false. The tests element should not be included unless full results are to be provided (see directives) The tests element should be included when full results are specified (see directives) item - a value for the entity should only be supplied if the mask attribute is 'false'. - definitions with a result of TRUE should not be included (see directives) - definitions with a result of TRUE should contain THIN content (see directives) - definitions with a result of TRUE should not be included (see directives) - definitions with a result of TRUE should contain FULL content (see directives) - definitions with a result of FALSE should not be included (see directives) - definitions with a result of FALSE should contain THIN content (see directives) - definitions with a result of FALSE should not be included (see directives) - definitions with a result of FALSE should contain FULL content (see directives) - definitions with a result of UNKNOWN should not be included (see directives) - definitions with a result of UNKNOWN should contain THIN content (see directives) - definitions with a result of UNKNOWN should not be included (see directives) - definitions with a result of UNKNOWN should contain FULL content (see directives) - definitions with a result of ERROR should not be included (see directives) - definitions with a result of ERROR should contain THIN content (see directives) - definitions with a result of ERROR should not be included (see directives) - definitions with a result of ERROR should contain FULL content (see directives) - definitions with a result of NOT EVALUATED should not be included (see directives) - definitions with a result of NOT EVALUATED should contain THIN content (see directives) - definitions with a result of NOT EVALUATED should not be included (see directives) - definitions with a result of NOT EVALUATED should contain FULL content (see directives) - definitions with a result of NOT APPLICABLE should not be included (see directives) - definitions with a result of NOT APPLICABLE should contain THIN content (see directives) - definitions with a result of NOT APPLICABLE should not be included (see directives) - definitions with a result of NOT APPLICABLE should contain FULL content (see directives) - the specified test is not used in any definition's criteria A valid OVAL Definition document must contain at least one definitions, tests, objects, states, or variables element. The optional definitions, tests, objects, states, and variables sections define the specific characteristics that should be evaluated on a system to determine the truth values of the OVAL Definition Document. To be valid though, at least one definitions, tests, objects, states, or variables element must be present. A valid OVAL Definition must contain a criteria unless the definition is a deprecated definition. - No state should be referenced when check_existence has a value of 'none_exist'. - Each object referenced by the set must be of the same type as parent object - Each object referenced by the set must be of the same type as parent object - Each object referenced by the set must be of the same type as parent object - The 'record' datatype is prohibited on variables. A literal_component used by an arithmetic function must have a datatype of float or int. The variable referenced by the arithmetic function must have a datatype of float or int. A literal_component used by the begin function must have a datatype of string. The variable referenced by the begin function must have a datatype of string. A literal_component used by the concat function must have a datatype of string. The variable referenced by the concat function must have a datatype of string. A literal_component used by the end function must have a datatype of string. The variable referenced by the end function must have a datatype of string. A literal_component used by the escape_regex function must have a datatype of string. The variable referenced by the escape_regex function must have a datatype of string. A literal_component used by the split function must have a datatype of string. The variable referenced by the split function must have a datatype of string. A literal_component used by the substring function must have a datatype of string. The variable referenced by the substring function must have a datatype of string. A literal_component used by the time_difference function must have a datatype of string or int. The variable referenced by the time_difference function must have a datatype of string or int. A literal_component used by the regex_capture function must have a datatype of string. The variable referenced by the regex_capture function must have a datatype of string. - a var_ref has been supplied for the entity so no value should be provided - inconsistent datatype between the variable and an associated var_ref - a var_ref has been supplied for the entity so a var_check should also be provided - a var_check has been supplied for the entity so a var_ref must also be provided - a var_ref has been supplied for the entity so a var_check should also be provided - a var_check has been supplied for the entity so a var_ref must also be provided - The use of '' for the operation attribute of the entity is not valid given the lack of a declared datatype (hence a default datatype of string). - The use of '' for the operation attribute of the entity is not valid given a datatype of binary. - The use of '' for the operation attribute of the entity is not valid given a datatype of boolean. - The use of '' for the operation attribute of the entity is not valid given a datatype of evr_string. - The use of '' for the operation attribute of the entity is not valid given a datatype of fileset_revision. - The use of '' for the operation attribute of the entity is not valid given a datatype of float. - The use of '' for the operation attribute of the entity is not valid given a datatype of ios_version. - The use of '' for the operation attribute of the entity is not valid given a datatype of int. - The use of '' for the operation attribute of the entity is not valid given a datatype of ipv4_address. - The use of '' for the operation attribute of the entity is not valid given a datatype of ipv6_address. - The use of '' for the operation attribute of the entity is not valid given a datatype of string. - The use of '' for the operation attribute of the entity is not valid given a datatype of version. - The use of '' for the operation attribute of the entity is not valid given a datatype of record. - The use of var_ref is prohibited when the datatype is 'record'. - The datatype for the entity is 'int' but the value is not an integer. item - a value for the entity should only be supplied if the status attribute is 'exists' - The datatype for the entity is 'int' but the value is not an integer.