This file is indexed.

/usr/share/openscap/xsl/oval-to-xccdf.xsl is in libopenscap8 1.2.15-1build1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
<?xml version="1.0" encoding="UTF-8"?>
<!-- Copyright 2012 Red Hat Inc., Durham, North Carolina. All Rights Reserved.

This transformation is free software; you can redistribute it and/or modify
it under the terms of the GNU Lesser General Public License as published by
the Free Software Foundation; either version 2.1 of the License.

This transformation is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public License
for more details.

You should have received a copy of the GNU Lesser General Public License along
with this library; if not, write to the Free Software Foundation, Inc., 59
Temple Place, Suite 330, Boston, MA  02111-1307 USA

Authors:
     Šimon Lukašík <slukasik@redhat.com>
-->
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0"
    xmlns:xccdf="http://checklists.nist.gov/xccdf/1.2"
    xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
    xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
    <xsl:output method="xml" encoding="UTF-8"/>

    <xsl:template match="/">
        <xccdf:Benchmark id="xccdf_autogenerated.from.oval_benchmark_xccdf" resolved="1">
            <xccdf:status>incomplete</xccdf:status>
            <xccdf:title>
                <xsl:text>Automatically generated XCCDF from OVAL file: </xsl:text>
                <xsl:value-of select="$ovalfile"/>
            </xccdf:title>
            <xccdf:description>This file has been generated automatically from oval definitions file.</xccdf:description>
            <xccdf:version>
                <xsl:attribute name="time">
                    <xsl:value-of select="normalize-space(oval-def:oval_definitions/oval-def:generator/oval:timestamp[1]/text())"/>
                </xsl:attribute>
                <xsl:text>None, generated from OVAL file.</xsl:text>
            </xccdf:version>
            <xsl:apply-templates select="oval-def:oval_definitions/oval-def:definitions/oval-def:definition"/>
        </xccdf:Benchmark>
    </xsl:template>

    <xsl:template match="oval-def:definition">
        <xccdf:Rule selected="true">
            <xsl:attribute name="id">xccdf_autogenerated.from.oval_rule_<xsl:value-of select="translate(@id,':','-')"/></xsl:attribute>
            <xsl:attribute name="severity">
                <xsl:variable name="oval_severity" select="oval-def:metadata/oval-def:advisory/oval-def:severity/text()"/>
                <xsl:choose>
                    <xsl:when test="$oval_severity = 'Low'">
                        <xsl:text>low</xsl:text>
                    </xsl:when>
                    <xsl:when test="$oval_severity = 'Moderate'">
                        <xsl:text>medium</xsl:text>
                    </xsl:when>
                    <xsl:when test="$oval_severity = 'Important' or $oval_severity = 'Critical'">
                        <xsl:text>high</xsl:text>
                    </xsl:when>
                    <xsl:when test="$oval_severity = 'Critical'">
                        <xsl:text>high</xsl:text>
                    </xsl:when>
                    <xsl:otherwise>
                        <xsl:text>unknown</xsl:text>
                    </xsl:otherwise>
                </xsl:choose>
            </xsl:attribute>
            <xccdf:title>
                <xsl:copy-of select="oval-def:metadata/oval-def:title/text()"/>
            </xccdf:title>
            <xsl:apply-templates select="oval-def:metadata/oval-def:reference[@source='RHSA']"/>
            <xsl:apply-templates select="oval-def:metadata/oval-def:advisory/oval-def:cve"/>
            <xccdf:check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
                <xccdf:check-content-ref>
                    <xsl:attribute name="name">
                        <xsl:value-of select="@id"/>
                    </xsl:attribute>
                    <xsl:attribute name="href">
                        <xsl:value-of select="$ovalfile"/>
                    </xsl:attribute>
                </xccdf:check-content-ref>
            </xccdf:check>
        </xccdf:Rule>
    </xsl:template>

    <xsl:template match="oval-def:cve">
        <xccdf:ident system="http://cve.mitre.org">
            <xsl:copy-of select="text()"/>
        </xccdf:ident>
    </xsl:template>

    <xsl:template match="oval-def:reference[@source='RHSA']">
        <xsl:if test="starts-with(@ref_url, 'https://rhn.redhat.com/errata')">
            <xccdf:ident system="https://rhn.redhat.com/errata">
                <xsl:copy-of select="substring-before(substring-after(@ref_url, 'https://rhn.redhat.com/errata/'), '.html')"/>
            </xccdf:ident>
        </xsl:if>
    </xsl:template>
</xsl:stylesheet>