record Data of this type represents a collection of named fields and values. operations are: equals DatatypeEnumeration The DatatypeEnumeration defines the complete set of all valid datatypes. This set is created as the union of the SimpleDatatypeEnumeration and the ComplexDatatypeEnumeration. This type is provided for convenience when working with the OVAL Language. ExistenceEnumeration The ExistenceEnumeration defines the acceptable values that can be used to specify the expected number of components under consideration must exist. Enumeration Value Description all_exist The existence result is ‘true’ only if all of the components under consideration exist. any_exist The final existence result is ‘true’ only if zero or more of the components under consideration exist. at_least_one_exists The final existence result is ‘true’ only if one or more of the components under consideration exist. none_exist The final existence result is ‘true’ only if zero of the components under consideration exist. only_one_exists The final existence result is ‘true’ only if one of the components under consideration exist. FamilyEnumeration The FamilyEnumeration defines the family that an operating system belongs to. Enumeration Description This value describes Cisco CatOS operating systems. ios This value describes Cisco IOS operating systems. macos This value describes Apple Mac OS operating systems. pixos This value describes Cisco PIX operating systems. undefined This value is reserved for operating systems where the high-level family is not available in the current enumeration. unix This value describes UNIX operating systems. vmware_infrastructure This value describes the VMWare Infrastructure. windows This value describes Microsoft Windows operating systems. MessageLevelEnumeration The MessageLevelEnumeration defines the different levels that can be associated with a message.
document which should be used to calculate the entity’s value. var_check oval:CheckEnumeration 0..1 Directs how to either collect data or evaluate state for the entity. EntitySimpleBaseType The EntitySimpleBaseType is an abstract type that defines a base type for all simple entities. Entities represent the individual properties for OVAL Objects and OVAL States. Property Type Multiplicity Description attributes EntityAttributeGroup 1 The standard attributes available to all entities. String 0..1 The of the entity. An empty string value MUST be used when referencing an OVAL Variable. EntityComplexBaseType The EntityComplexBaseType is an abstract type that defines a base type for all complex entities. Entities represent the individual properties for OVAL Objects and OVAL States. Property Type Multiplicity Description attributes EntityAttributeGroup 1 The standard attributes available to all entities. EntityObjectIPAddressType The EntityObjectIPAddressBaseType extends the EntitySimpleBaseType and describes an IPv4 or IPv6 IP address. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 Possible values: ‘ipv4_address’ ‘ipv6_address’ Also allows an empty string value. EntityObjectIPAddressStringType The EntityObjectIPAddressStringBaseType extends the EntitySimpleBaseType and describes an IPv4 or IPv6 IP address or a string representation of the address. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 Possible values:
‘ipv4_address’ ‘ipv6_address’ ‘string’ Also allows an string value. EntityObjectAnySimpleType The EntityObjectAnySimpleType extends the EntitySimpleBaseType and describes any simple data. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 Any simple datatype. Also allows an empty string value. EntityObjectBinaryType The EntityObjectBinaryType extends the EntitySimpleBaseType and describes any simple binary data. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 This value is fixed as ‘binary’. Also allows an empty string value. EntityObjectBoolType The EntityObjectBoolType extends the EntitySimpleBaseType and describes any simple Boolean data. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 This value is fixed as ‘boolean’. Also allows an empty string value. EntityObjectFloatType The EntityObjectFloatType extends the EntitySimpleBaseType and describes any simple float data. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 This value is fixed as ‘float’. Also allows an empty string value. EntityObjectIntType The EntityObjectIntType extends the EntitySimpleBaseType and describes any simple integer data.
An empty string value MUST be used when referencing an OVAL Variable. EntityStateComplexBaseType The EntityStateComplexBaseType extends the EntityComplexBaseType defines a complex base type for OVAL States. Property Type Multiplicity Description check_existence oval:ExistenceEnumeration 0,,1 Defines the existence requirements for corresponding OVAL Item Entities. Default ‘at_least_one_exists’ entity_check oval:CheckEnumeration 0..1 Defines how to handle multiple item entities with the same name. Default Value: ‘all’ EntityStateIPAddressType The EntityStateIPAddressBaseType extends the EntityStateSimpleBaseType and describes an IPv4 or IPv6 IP address. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 Possible values: ‘ipv4_address’ ‘ipv6_address’ Also allows an empty string value. EntityStateIPAddressStringType The EntityStateIPAddressStringBaseType extends the EntityStateSimpleBaseType and describes an IPv4 or IPv6 IP address or a string representation of the address. Property Type Multiplicity Description datatype oval:SimpleDatatypeEnumeration 1 Possible values: ‘ipv4_address’ ‘ipv6_address’ ‘string’ Also allows an empty string value.
The TestedVariableType specifies the of an OVAL Variable used during the evaluation of an OVAL Test. Property Type Multiplicity Description variable_id oval:VariableIDPattern 1 The unique identifier of an OVAL Variable. value Any 1 A value of the OVAL Variable referenced by the variable_id property. ContentEnumeration The ContentEnumeration defines the acceptable levels of detail for the result information included in the OVAL Results. Enumeration Value Description thin This value indicates that only the minimal amount of information is represented in the OVAL Results. Specifically: The definition_id property of DefinitionType will be included. The result property of DefinitionType will be included. The criteria property of DefinitionType will not be included. The collected_objects and system_data properties, of the system_characteristics property in SystemType, will not be included. full This value indicates that a full detailed result of information is represented in the OVAL Results. Specifically: The definition_id property of DefinitionType will be included. The result property of DefinitionType will be included. The criteria property of DefinitionType will be included. The collected_objects and system_data properties, of the system_characteristics property in SystemType, will be included. The value ‘full’ is equivalent to ‘thin’ with the collected_objects and system_data properties, of the system_characteristics property in SystemType, included. ResultEnumeration The ResultEnumeration defines the acceptable evaluation result values in the OVAL Language. Enumeration Value Description true This value indicates that the conditions of the evaluation were satisfied. This value indicates that the conditions of the evaluation were not satisfied. unknown This value indicates that it could not be determined if the conditions of the evaluation were satisfied.
Version 5.10.1 Revision 1 – January 20, 2012 Added documentation to explicitly state that an empty string value is allowed for entity types where it was previously implied because the only restriction on the value is that it is a string. (Section 4.3.53-60, 4.3.65-76, 4.5.15-22, and 4.5.25-28) Added documentation explicitly stating that an empty string value MUST be used when referencing an OVAL Variable from an OVAL Object Entity, Object Field Entity, State Entity, or State Field Entity and that an empty string value SHOULD be used when a status other than 'exists' is specified on an OVAL Item Entity or Item Field Entity. (Section 4.3.51, 4.3.62, 4.3.63, 4.3.78, 4.5.13, and 4.5.23) Updated the text regarding the OVAL Language Versioning Policy to reflect the change to a version identifier. (Appendix B – OVAL Language Versioning Policy). Defined what an OVAL Item is. (Appendix G – Terms) Version 5.10 Revision 1 – September 14, 2011 Published initial revision of the version 5.10 specification. Appendix G - Terms and Acronyms Terms OVAL Behavior – An action that can further specify the set of OVAL that matches an OVAL Object. OVAL Test – An OVAL Test is the standardized representation of an assertion about the state of a system. OVAL Object – An OVAL Object is a collection of OVAL Object Entities that can uniquely identify a single OVAL Item on the system. OVAL Item – An OVAL Item is a single piece of collected system state information. OVAL Component – An OVAL Construct that is specified in the oval-def:ComponentGroup. OVAL Function – An OVAL Function is a capability used in OVAL Variables to manipulate a variable’s value. OVAL Variable – An OVAL Variable represents a collection of values that allow for dynamic substitutions and reuse of system state information. OVAL Object Entity – An OVAL Object Entity is a standardized representation for specifying a single piece of system state information. OVAL State Entity – An OVAL State Entity is a standardized representation for checking a single piece of system state information.