Re: Doubt about result - true, false or others

[Danny Haynes]

Some javascript/style in this post has been disabled (why?)

                Hi Moreno,

 

There is actually an OVAL Definition that checks to see if Internet Explorer 7 is installed on a system and it can be found at the following link.

 

http://oval.mitre.org/repository/data/SearchItemAdv?id=&comment=explorer+7&itemType=&namespace=0&advsearch=Search

 

This definition will evaluate to true if Internet Explorer 7 is installed and evaluate to false if some other version of Internet Explorer is installed.  You could also modify this definition, by setting negate = “true” in its respective criterion element, such that if a version of Internet Explorer, other than version 7, was installed the definition would evaluate to true.  Does this help?  If not, please let me know.

  

Thanks,

 

Danny

 

From: moreno gontijo [mailto:[hidden email]]
Sent: Wednesday, September 16, 2009 5:33 PM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others

 

 

---

I want to do 3 tests in Internet explorer 7

First test - I have Internet Explorer 7 installed  in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "7.1". Then the results is true

Second test - I have Internet Explorer 7 installed in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "8.1". Then the results is false.

Third test - I don´t have Internet Explorer 7 installed in my operating system. What result I will be? ( I would like a result not equal false). How can i to do it?

---

---

Navegue com segurança com o Novo Internet Explorer 8. Baixe agora, é gratis!

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

[Timothy Harrison]

Some javascript/style in this post has been disabled (why?)

Moreno,

 

These other results are typically generated by an application based on the results of different operations and/or function calls.  So, while the OVAL test for IE7 technically only defines how to determine if IE7 is installed on the system you could programmatically produce additional result data.  How you do this would vary depending on the programming language, but generally speaking this pseudocode could be followed to produce the IE7 results listed in your last email.

 

If the file exists then:

     If the version = 7.1 then:

          return True

     Otherwise:

          return False

     //End If-Otherwise statement

Otherwise:

     return Not Applicable

//End If-Otherwise statement

 

To produce the other results for file access rights would require some error handling.

Hope this helps,

 

Tim Harrison
SCAP Content Development
National Institute of Standards and Technology
[phone]
[hidden email]

---

From: moreno gontijo [[hidden email]]
Sent: Thursday, September 17, 2009 2:15 PM
To: [hidden email]
Subject: Re: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others

Hi Danny,

   I understood your idea, but imagine the case where I cannot answer simply true or false, but need more states. In this example I gave:

- If Internet Explorer version 7.1 is installed in the system, I want to answer true
- If another version of Internet Explorer is installed (like IE 8), I want to answer false
- But if no Internet Explorer is installed, I do not want to answer true, neither false, but a third state, like "not applicable"

   Another example is when consulting the access rights of a specific file.

- If the file exists and its access rights are properly configured, I want to answer true
- If the file exists and its access rights are not properly configure, I want to answer false
- If the file does not exist, I want to answer something like "not applicable"
- And, if by chance, it was not possible to evaluate if the file really exists, I want to answer something like "unknown"
- And if there was an error collecting the file rights, I want to answer something like "error" or "not evaluated"

   What I mean is that, in some cases, just true or false may not be enough.
   I found this link:

http://oval.mitre.org/language/download/schema/version5.6/ovalresults/documentation/oval-results-schema.html#ResultEnumeration

   That I understood as a possibility to answer different values in tests, but I did not understand how to use them properly. I mean, is it possible to combine different results (like true, false, unknown, and so on) in order to generate a new result, defined by me?

Thanks for any help,
Moreno

---

Date: Thu, 17 Sep 2009 09:00:05 -0400
From: [hidden email]
Subject: Re: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others
To: [hidden email]

                Hi Moreno,

 

There is actually an OVAL Definition that checks to see if Internet Explorer 7 is installed on a system and it can be found at the following link.

 

http://oval.mitre.org/repository/data/SearchItemAdv?id=&comment=explorer+7&itemType=&namespace=0&advsearch=Search

 

This definition will evaluate to true if Internet Explorer 7 is installed and evaluate to false if some other version of Internet Explorer is installed.  You could also modify this definition, by setting negate = “true” in its respective criterion element, such that if a version of Internet Explorer, other than version 7, was installed the definition would evaluate to true.  Does this help?  If not, please let me know.

  

Thanks,

 

Danny

 

From: moreno gontijo [mailto:[hidden email]]
Sent: Wednesday, September 16, 2009 5:33 PM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others

 

 

---

I want to do 3 tests in Internet explorer 7

First test - I have Internet Explorer 7 installed  in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "7.1". Then the results is true

Second test - I have Internet Explorer 7 installed in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "8.1". Then the results is false.

Third test - I don´t have Internet Explorer 7 installed in my operating system. What result I will be? ( I would like a result not equal false). How can i to do it?

---

---

Navegue com segurança com o Novo Internet Explorer 8. Baixe agora, é gratis!

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

---

Novo Internet Explorer 8: traduza com apenas um clique. Baixe agora, é grátis! To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

[bakerj]

Some javascript/style in this post has been disabled (why?)

From your first example below, there is no capability in the oval language that will allow you to get your third result value when IE is not installed at all. This is a capability that has been requested in the past and should be considered for a future release. I will verify that there is a tracker item that records this feature request.

 

As I understand your request, you would like to specify a result value for a specific condition. For example, in condition a the result should be true, in condition b the result should be false, and in condition c the result should be not applicable. Is this correct?

 

Jon

 

============================================

Jonathan O. Baker

G022 - IA Industry Collaboration

The MITRE Corporation

Email: [hidden email]

 

From: moreno gontijo [mailto:[hidden email]]
Sent: Thursday, September 17, 2009 2:16 PM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: Re: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others

 

Hi Danny,

   I understood your idea, but imagine the case where I cannot answer simply true or false, but need more states. In this example I gave:

- If Internet Explorer version 7.1 is installed in the system, I want to answer true
- If another version of Internet Explorer is installed (like IE 8), I want to answer false
- But if no Internet Explorer is installed, I do not want to answer true, neither false, but a third state, like "not applicable"

   Another example is when consulting the access rights of a specific file.

- If the file exists and its access rights are properly configured, I want to answer true
- If the file exists and its access rights are not properly configure, I want to answer false
- If the file does not exist, I want to answer something like "not applicable"
- And, if by chance, it was not possible to evaluate if the file really exists, I want to answer something like "unknown"
- And if there was an error collecting the file rights, I want to answer something like "error" or "not evaluated"

   What I mean is that, in some cases, just true or false may not be enough.
   I found this link:

http://oval.mitre.org/language/download/schema/version5.6/ovalresults/documentation/oval-results-schema.html#ResultEnumeration

   That I understood as a possibility to answer different values in tests, but I did not understand how to use them properly. I mean, is it possible to combine different results (like true, false, unknown, and so on) in order to generate a new result, defined by me?

Thanks for any help,
Moreno

---

Date: Thu, 17 Sep 2009 09:00:05 -0400
From: [hidden email]
Subject: Re: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others
To: [hidden email]

                Hi Moreno,

 

There is actually an OVAL Definition that checks to see if Internet Explorer 7 is installed on a system and it can be found at the following link.

 

http://oval.mitre.org/repository/data/SearchItemAdv?id=&comment=explorer+7&itemType=&namespace=0&advsearch=Search

 

This definition will evaluate to true if Internet Explorer 7 is installed and evaluate to false if some other version of Internet Explorer is installed.  You could also modify this definition, by setting negate = “true” in its respective criterion element, such that if a version of Internet Explorer, other than version 7, was installed the definition would evaluate to true.  Does this help?  If not, please let me know.

  

Thanks,

 

Danny

 

From: moreno gontijo [mailto:[hidden email]]
Sent: Wednesday, September 16, 2009 5:33 PM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others

 

 

---

I want to do 3 tests in Internet explorer 7

First test - I have Internet Explorer 7 installed  in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "7.1". Then the results is true

Second test - I have Internet Explorer 7 installed in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "8.1". Then the results is false.

Third test - I don´t have Internet Explorer 7 installed in my operating system. What result I will be? ( I would like a result not equal false). How can i to do it?

---

---

Navegue com segurança com o Novo Internet Explorer 8. Baixe agora, é gratis!

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

---

Novo Internet Explorer 8: traduza com apenas um clique. Baixe agora, é grátis!

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

[Moreno Gontijo]

Dear Jon,

   Yes, you got it right. In condition a the result should be true, in condition b the result should be false, and in condition c the result should be not applicable.

Cheers

On Thu, Oct 29, 2009 at 6:55 PM, Baker, Jon <[hidden email]> wrote:

From your first example below, there is no capability in the oval language that will allow you to get your third result value when IE is not installed at all. This is a capability that has been requested in the past and should be considered for a future release. I will verify that there is a tracker item that records this feature request.

 

As I understand your request, you would like to specify a result value for a specific condition. For example, in condition a the result should be true, in condition b the result should be false, and in condition c the result should be not applicable. Is this correct?

 

Jon

 

============================================

Jonathan O. Baker

G022 - IA Industry Collaboration

The MITRE Corporation

Email: [hidden email]

 

From: moreno gontijo [mailto:[hidden email]]
Sent: Thursday, September 17, 2009 2:16 PM

To: oval-discussion-list OVAL Discussion List/Closed Public Discussi

Subject: Re: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others

 

Hi Danny,

   I understood your idea, but imagine the case where I cannot answer simply true or false, but need more states. In this example I gave:

- If Internet Explorer version 7.1 is installed in the system, I want to answer true
- If another version of Internet Explorer is installed (like IE 8), I want to answer false
- But if no Internet Explorer is installed, I do not want to answer true, neither false, but a third state, like "not applicable"

   Another example is when consulting the access rights of a specific file.

- If the file exists and its access rights are properly configured, I want to answer true
- If the file exists and its access rights are not properly configure, I want to answer false
- If the file does not exist, I want to answer something like "not applicable"
- And, if by chance, it was not possible to evaluate if the file really exists, I want to answer something like "unknown"
- And if there was an error collecting the file rights, I want to answer something like "error" or "not evaluated"

   What I mean is that, in some cases, just true or false may not be enough.
   I found this link:

http://oval.mitre.org/language/download/schema/version5.6/ovalresults/documentation/oval-results-schema.html#ResultEnumeration

   That I understood as a possibility to answer different values in tests, but I did not understand how to use them properly. I mean, is it possible to combine different results (like true, false, unknown, and so on) in order to generate a new result, defined by me?

Thanks for any help,
Moreno

---

Date: Thu, 17 Sep 2009 09:00:05 -0400
From: [hidden email]
Subject: Re: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others
To: [hidden email]

                Hi Moreno,

 

There is actually an OVAL Definition that checks to see if Internet Explorer 7 is installed on a system and it can be found at the following link.

 

http://oval.mitre.org/repository/data/SearchItemAdv?id=&comment=explorer+7&itemType=&namespace=0&advsearch=Search

 

This definition will evaluate to true if Internet Explorer 7 is installed and evaluate to false if some other version of Internet Explorer is installed.  You could also modify this definition, by setting negate = “true” in its respective criterion element, such that if a version of Internet Explorer, other than version 7, was installed the definition would evaluate to true.  Does this help?  If not, please let me know.

  

Thanks,

 

Danny

 

From: moreno gontijo [mailto:[hidden email]]
Sent: Wednesday, September 16, 2009 5:33 PM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: [OVAL-DISCUSSION-LIST] Doubt about result - true, false or others

 

 

---

I want to do 3 tests in Internet explorer 7

First test - I have Internet Explorer 7 installed  in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "7.1". Then the results is true

Second test - I have Internet Explorer 7 installed in my operating system. I have an object and a state. The object collect the version of IE7 that is equal "7.1" and The State there is a value equal "8.1". Then the results is false.

Third test - I don´t have Internet Explorer 7 installed in my operating system. What result I will be? ( I would like a result not equal false). How can i to do it?

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].