<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd      http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">

  <generator>
    <oval:schema_version>5.10</oval:schema_version>
    <oval:timestamp>2009-01-12T10:41:00-05:00</oval:timestamp>
    <ai:assets xmlns:ai="http://scap.nist.gov/schema/asset-identification/1.1">
      <ai:asset id="asset0">
        <ai:computing-device>
          <ai:connections>
	    <ai:connection>
	      <ai:ip-address>
	        <ai:ip-v4>127.0.0.1</ai:ip-v4>
	      </ai:ip-address>
	    </ai:connection>
	    <ai:connection>
	      <ai:ip-address>
	        <ai:ip-v4>10.34.28.1</ai:ip-v4>
	      </ai:ip-address>
            </ai:connection>
	    <ai:connection>
              <ai:ip-address>
	        <ai:ip-v4>192.168.122.1</ai:ip-v4>
	      </ai:ip-address>
	    </ai:connection>
	  </ai:connections>
          <ai:fqdn>wrabco</ai:fqdn>
        </ai:computing-device>
      </ai:asset>
    </ai:assets>
  </generator>

  <definitions>
    <definition id="oval:org.mitre.oval.test:def:282" version="3" class="miscellaneous">
      <metadata>
        <title>Evaluate to true if the empty value in filename entities is supported</title>
        <description>Evaluate to true if the empty value in filename entities is supported</description>
        <errata:advisory xmlns:errata="http://redhat.com/schema/cve" from="secalert@redhat.com">
          <errata:severity>Critical</errata:severity>
          <errata:rights>Copyright 2012 Red Hat, Inc.</errata:rights>
          <errata:issued date="2012-01-09" />
          <errata:updated date="2012-01-09" />
          <errata:cve href="https://www.redhat.com/security/data/cve/CVE-2011-3389.html">CVE-2011-3389</errata:cve>
          <errata:bugzilla href="http://bugzilla.redhat.com/737506" id="737506">CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)</errata:bugzilla>
          <errata:affected_cpe_list>
            <errata:cpe>cpe:/a:redhat:rhel_extras</errata:cpe>
          </errata:affected_cpe_list>
        </errata:advisory>
      </metadata>
      <criteria>
        <criterion comment="Test that /etc/passwd is collected if filename in object was empty." test_ref="oval:org.mitre.oval.test:tst:1288"/>
        <criterion comment="Test that all files are from /etc directory." test_ref="oval:org.mitre.oval.test:tst:1289"/>
      </criteria>
    </definition>
  </definitions>

  <tests>
    <file_test id="oval:org.mitre.oval.test:tst:1288" version="1" comment="Test that /etc/passwd is collected if filename in object was empty." check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval.test:obj:512"/>
      <state state_ref="oval:org.mitre.oval.test:ste:1761"/>
    </file_test>
    <file_test id="oval:org.mitre.oval.test:tst:1289" version="1" comment="Test that all files are from /etc directory." check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval.test:obj:512"/>
      <state state_ref="oval:org.mitre.oval.test:ste:1762"/>
    </file_test>
  </tests>

  <objects>
    <file_object id="oval:org.mitre.oval.test:obj:512" version="1" comment="Files in etc" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="pattern match">^/etc$</path>
      <filename operation="pattern match"></filename>
    </file_object>
  </objects>

  <states>
    <file_state id="oval:org.mitre.oval.test:ste:1761" version="1" comment="/etc/passwd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc</path>
      <filename>passwd</filename>
    </file_state>
    <file_state id="oval:org.mitre.oval.test:ste:1762" version="1" comment="any /etc file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc</path>
      <filename operation="pattern match"></filename>
    </file_state>
  </states>

</oval_definitions>
