About the supported OVAL objects in CCS
CCS supports the following OVAL objects for SCAP 1.2 and SCAP 1.0/1.1 and stand-alone OVAL evaluation.
Note: |
While importing content if the content includes some OVAL objects that are not supported in CCS, then an error is displayed. The import is allowed to proceed however evaluation of the unsupported objects result in an error. |
Table: OVAL objects supported in SCAP 1.2 and SCAP 1.0/1.1
OVAL object |
SCAP 1.2 |
SCAP 1.0/1.1 |
accesstoken_object |
Yes |
Yes |
activedirectory_object |
Yes |
Yes |
auditeventpolicy_object |
Yes |
Yes |
auditeventpolicysubcategories_object |
Yes |
Yes |
environmentvariable_object |
Yes |
Yes |
environmentvariable58_object |
Yes |
No |
cmdlet_file_object |
Yes |
No |
family _object |
Yes |
No |
file_object |
No |
Yes |
filemd5_object |
Yes |
Yes |
filehash_object |
Yes |
Yes |
fileauditedpermissions53_object |
Yes |
Yes |
fileauditedpermissions_object |
Yes |
Yes |
fileeffectiverights53_object |
Yes |
Yes |
fileeffectiverights_object |
Yes |
Yes |
group_object |
Yes |
Yes |
interface_object |
Yes |
Yes |
lockoutpolicy_object |
Yes |
Yes |
metabase_object |
Yes |
Yes |
passwordpolicy_object |
Yes |
Yes |
printereffectiverights_object |
Yes |
Yes |
process_object |
Yes |
Yes |
process58_object |
Yes |
No |
registry_object |
Yes |
Yes |
regkeyauditedpermissions_object |
Yes |
Yes |
regkeyauditedpermissions53_object |
Yes |
Yes |
regkeyeffectiverights_object |
Yes |
Yes |
regkeyeffectiverights53_object |
Yes |
Yes |
sharedresource_object |
Yes |
Yes |
sid_object |
Yes |
Yes |
sid_sid_object |
Yes |
No |
textfilecontent_object |
Yes |
Yes |
textfilecontent54_object |
Yes |
No |
uac_object |
Yes |
Yes |
unknown_object |
Yes |
Yes |
user_object |
Yes |
Yes |
user_sid_object |
Yes |
No |
user_sid55_object |
Yes |
No |
variable_object |
Yes |
Yes |
volume_object |
Yes |
Yes |
wmi_object |
Yes |
Yes |
wmi57_object |
Yes |
No |
wuaupdatesearcher_object |
Yes |
No |
Winsysinfo_object |
Yes |
No |
xmlfilecontent_object |
Yes |
Yes |
The service_object that is used in the OVAL Inventory Definitions across versions 5.8, 5.10, and 5.10.1 is not supported in CCS. During import of OVAL content that includes service_object, a warning is displayed that contains a MOS Error. The content is imported successfully, however the evaluation of OVAL tests that refer to the service_object result in error.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)