You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by "William A. Rowe, Jr." <wr...@rowe-clan.net> on 2008/01/24 00:53:38 UTC
What am I doing wrong - site gen?
security/vulnerabilities-oval.xml
I'm ending up with deltas such as these...
-<httpd_state
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"
id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
httpd is 1.3.1">
-<version operation="equals" datatype="version">1.3.1</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
httpd is 1.3.1">
+<version
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"
operation="equals" datatype="version">1.3.1</version>
</httpd_state>
What component are we missing in site/lib/ or should I have locally
updated?
Re: What am I doing wrong - site gen?
Posted by "William A. Rowe, Jr." <wr...@rowe-clan.net>.
Joe Orton wrote:
> On Wed, Jan 23, 2008 at 03:53:38PM -0800, William Rowe wrote:
>> security/vulnerabilities-oval.xml
>>
>> I'm ending up with deltas such as these...
>>
>> -<httpd_state
>> xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"
>> id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
>> httpd is 1.3.1">
>> -<version operation="equals" datatype="version">1.3.1</version>
>> +<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
>> id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
>> httpd is 1.3.1">
>> +<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"
>> operation="equals" datatype="version">1.3.1</version>
>> </httpd_state>
>>
>> What component are we missing in site/lib/ or should I have locally
>> updated?
>
> The fragment in the namespace URI is being dropped, odd. It works fine
> for me. Does the patch below make any difference?
>
> Index: xdocs/stylesheets/httpd-oval.xsl
> ===================================================================
> --- xdocs/stylesheets/httpd-oval.xsl (revision 612495)
> +++ xdocs/stylesheets/httpd-oval.xsl (working copy)
> @@ -357,14 +357,14 @@
> <!--
> Print out the actual state element.
> -->
> - <xsl:element name="httpd_state" namespace="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache">
> + <httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache">
> <xsl:attribute name="id"><xsl:value-of select="$state_id"/></xsl:attribute>
> <xsl:attribute name="version">1</xsl:attribute>
> <xsl:attribute name="comment"><xsl:value-of select="$state_comment"/></xsl:attribute>
> <version datatype="version" operation="equals" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache">
> <xsl:value-of select="@version"/>
> </version>
> - </xsl:element>
> + </httpd_state>
> </xsl:template>
> <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
> <!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
It creates a 100% delta to the file... the pattern on this box looks like
Index: docs/security/vulnerabilities-oval.xml
===================================================================
--- docs/security/vulnerabilities-oval.xml (revision 614738)
+++ docs/security/vulnerabilities-oval.xml (working copy)
@@ -719,7 +719,7 @@
</description>
<apache_httpd_repository>
<public>20060508</public>
-<reported></reported>
+<reported/>
<released>20060501</released>
<severity level="3">moderate</severity>
</apache_httpd_repository>
@@ -2775,225 +2775,225 @@
</definition>
</definitions>
<tests>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" i
d="oval:org.apache.httpd:tst:226" version="1" comment="the version of
httpd is 2
.2.6" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:226"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
id="oval
:org.apache.httpd:tst:226" version="1" comment="the version of httpd is
2.2.6" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
state_ref="ov
al:org.apache.httpd:ste:226"/>
</httpd_test>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" i
d="oval:org.apache.httpd:tst:225" version="1" comment="the version of
httpd is 2
.2.5" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:225"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
id="oval
:org.apache.httpd:tst:225" version="1" comment="the version of httpd is
2.2.5" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
state_ref="ov
al:org.apache.httpd:ste:225"/>
</httpd_test>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" i
d="oval:org.apache.httpd:tst:224" version="1" comment="the version of
httpd is 2
.2.4" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:224"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
id="oval
:org.apache.httpd:tst:224" version="1" comment="the version of httpd is
2.2.4" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
state_ref="ov
al:org.apache.httpd:ste:224"/>
</httpd_test>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" i
d="oval:org.apache.httpd:tst:223" version="1" comment="the version of
httpd is 2
.2.3" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:223"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
id="oval
:org.apache.httpd:tst:223" version="1" comment="the version of httpd is
2.2.3" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
state_ref="ov
al:org.apache.httpd:ste:223"/>
</httpd_test>
Re: What am I doing wrong - site gen?
Posted by Joe Orton <jo...@redhat.com>.
On Wed, Jan 23, 2008 at 03:53:38PM -0800, William Rowe wrote:
> security/vulnerabilities-oval.xml
>
> I'm ending up with deltas such as these...
>
> -<httpd_state
> xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"
> id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
> httpd is 1.3.1">
> -<version operation="equals" datatype="version">1.3.1</version>
> +<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
> id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
> httpd is 1.3.1">
> +<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"
> operation="equals" datatype="version">1.3.1</version>
> </httpd_state>
>
> What component are we missing in site/lib/ or should I have locally
> updated?
The fragment in the namespace URI is being dropped, odd. It works fine
for me. Does the patch below make any difference?
Index: xdocs/stylesheets/httpd-oval.xsl
===================================================================
--- xdocs/stylesheets/httpd-oval.xsl (revision 612495)
+++ xdocs/stylesheets/httpd-oval.xsl (working copy)
@@ -357,14 +357,14 @@
<!--
Print out the actual state element.
-->
- <xsl:element name="httpd_state" namespace="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache">
+ <httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache">
<xsl:attribute name="id"><xsl:value-of select="$state_id"/></xsl:attribute>
<xsl:attribute name="version">1</xsl:attribute>
<xsl:attribute name="comment"><xsl:value-of select="$state_comment"/></xsl:attribute>
<version datatype="version" operation="equals" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache">
<xsl:value-of select="@version"/>
</version>
- </xsl:element>
+ </httpd_state>
</xsl:template>
<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
<!-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
Re: What am I doing wrong - site gen?
Posted by Erik Abele <er...@codefaktor.de>.
On 24.01.2008, at 00:53, William A. Rowe, Jr. wrote:
> security/vulnerabilities-oval.xml
>
> I'm ending up with deltas such as these...
>
> -<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-
> definitions-5#apache" id="oval:org.apache.httpd:ste:131"
> version="1" comment="the version of httpd is 1.3.1">
> -<version operation="equals" datatype="version">1.3.1</version>
> +<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-
> definitions-5" id="oval:org.apache.httpd:ste:131" version="1"
> comment="the version of httpd is 1.3.1">
> +<version xmlns="http://oval.mitre.org/XMLSchema/oval-
> definitions-5#apache" operation="equals" datatype="version">1.3.1</
> version>
> </httpd_state>
>
> What component are we missing in site/lib/ or should I have locally
> updated?
I guess you were running Ant directly instead of via build.sh, right?
If so then it was probably overriding the jars in site/lib and was
therefore using a different version of the xslt processor... To get
consistent results we need to rely on the jars in site/lib and only
running via build.sh ensures that those are picked up :-/
Can you please try and let me know? I'll then update README if that
fixes the issue...
Oh, and if you can't run build.sh on Win* (e.g. no cygwin) then we'll
need to add a .bat version for it... (for an example see docs-build/
trunk/build.bat).
Cheers,
Erik