- Open Vulnerability and Assessment Language -
Deprecation Report
- Schema: Apache Definition
- Version: 5.11:5.11
- Release Date: 12/18/2014 09:00:00 AM
Deprecated As Of Version: 5.8
Reason: The httpd_test does not specify how to detect instances of httpd and cannot be reasonably specified to allow for products
to detect all instances of httpd across platforms, packaging systems, and typical user compiled and configured installations.
Without a proper definition of how to identify instances of httpd products will not reliably produce consistent assessment
results because they will naturally utilize different approaches to locating instances of httpd which will lead to differences
in the set of collected instances of https.
Comment: This test has been deprecated and may be removed in a future version of the language.
The httpd test is used to check the version of an installed httpd binary. It extends the standard TestType as defined in the
oval-definitions-schema and one should refer to the TestType description for more information. The required object element
references an httpd_test and the optional state element specifies the data to check.
Deprecated As Of Version: 5.8
Reason: The httpd_object does not specify how to detect instances of httpd and cannot be reasonably specified to allow for products
to detect all instances of httpd across platforms, packaging systems, and typical user compiled and configured installations.
Without a proper definition of how to identify instances of httpd products will not reliably produce consistent assessment
results because they will naturally utilize different approaches to locating instances of httpd which will lead to differences
in the set of collected instances of https.
Comment: This object has been deprecated and may be removed in a future version of the language.
The httpd_object element is used by a httpd test to define the different httpd binary installed on a system. There is actually
only one object relating to this and it is the collection of all httpd binaries. Therefore, there are no child entities defined.
Any OVAL Test written to check version will reference the same httpd_object which is basically an empty object element. A
tool that implements the httpd_test and collects the httpd_object must know how to find all the httpd binaries on the system
and verify that they are in fact httpd binaries.
Deprecated As Of Version: 5.8
Reason: The httpd_state does not specify how to detect instances of httpd and cannot be reasonably specified to allow for products
to detect all instances of httpd across platforms, packaging systems, and typical user compiled and configured installations.
Without a proper definition of how to identify instances of httpd products will not reliably produce consistent assessment
results because they will naturally utilize different approaches to locating instances of httpd which will lead to differences
in the set of collected instances of https.
Comment: This state has been deprecated and may be removed in a future version of the language.
The httpd_state element defines information associated with a specific httpd binary.