I am pleased to announce that a new release of the OVAL Interpreter has been posted. Version 5.6 Build 3 is now available on the OVAL Interpreter sourceforge site here:
https://sourceforge.net/projects/ovaldi/This link should take you directly to the new release:
http://sourceforge.net/projects/ovaldi/files/In this release we have made for following changes:
* Added support for the win-def:group_sid_test.
* Added support for ind-def:textfilecontent54_test
* Added support for unix-def:shadow_test
* Added support for the win-def:fileauditedpermissions_test.
* Added support for the win-def:fileauditedpermissions53_test.
* Added support for the win-def:regkeyauditedpermissions_test.
* Added support for the win-def:regkeyauditedpermissions53_test.
* Added support for oval-def:regex_capture
* Fixed a bug in the ProcessProbe::GetAllProcesses() method that was causing the Process32First() API call to fail.
* Fixed a bug in the AbsEffectiveRightsProbe::GetTrusteesForWindowsObject() method that was causing the owner and primary group trustees to be added as trustee SIDs when they should have been added as trustee names.
* Fixed a bug in REGEX.cpp so that it supports the '|' regular expression meta-character.
A complete listing of supported tests can be found here:
https://sourceforge.net/apps/mediawiki/ovaldi/index.php?title=Supported_testsIf you have general questions about the OVAL Interpreter please direct them here:
https://sourceforge.net/projects/ovaldi/supportPlease report any issues you may have with the OVAL Interpreter to the Bug tracker here:
https://sourceforge.net/tracker/?group_id=215469&atid=1033794Thanks,
Jon
============================================
Jonathan O. Baker
G022 - IA Industry Collaboration
The MITRE Corporation
Email:
[hidden email]
To unsubscribe, send an email message to
[hidden email] with
SIGNOFF OVAL-DEVELOPER-LIST
in the BODY of the message. If you have difficulties, write to
[hidden email].
