Open SCAP Library
|
Data Structures | |
struct | xccdf_session |
A structure encapsulating the context of XCCDF operations. More... | |
Files | |
file | xccdf_session.h |
High Level API for OpenSCAP XCCDF operations. | |
Enumerations | |
enum | xccdf_session::xccdf_session_loading_flags_t |
Loading flags for XCCDF session. More... | |
Functions | |
int | xccdf_session_load_check_engine_plugin (struct xccdf_session *session, const char *plugin_name) |
int | xccdf_session_load_sce (struct xccdf_session *session) |
struct xccdf_session * | xccdf_session::xccdf_session_new (const char *filename) |
Costructor of xccdf_session. More... | |
struct xccdf_session * | xccdf_session::xccdf_session_new_from_source (struct oscap_source *source) |
Costructor of xccdf_session. More... | |
void | xccdf_session::xccdf_session_free (struct xccdf_session *session) |
Destructor of xccdf_session. More... | |
const char * | xccdf_session::xccdf_session_get_filename (const struct xccdf_session *session) |
Retrieves the filename the session was created with. | |
bool | xccdf_session::xccdf_session_is_sds (const struct xccdf_session *session) |
Query if the session is based on Source DataStream. More... | |
void | xccdf_session::xccdf_session_set_rule (struct xccdf_session *session, const char *rule) |
Set rule for session - if rule is not NULL, session will use only this one rule. More... | |
void | xccdf_session::xccdf_session_set_validation (struct xccdf_session *session, bool validate, bool full_validation) |
Set XSD validation level to one of three possibilities: More... | |
void | xccdf_session::xccdf_session_set_thin_results (struct xccdf_session *session, bool thin_result) |
Set whether the thin results override is enabled. More... | |
void | xccdf_session::xccdf_session_set_datastream_id (struct xccdf_session *session, const char *datastream_id) |
Set requested datastream_id for this session. More... | |
const char * | xccdf_session::xccdf_session_get_datastream_id (struct xccdf_session *session) |
Retrieves the datastream id. More... | |
void | xccdf_session::xccdf_session_set_component_id (struct xccdf_session *session, const char *component_id) |
Set requested component_id for this session. More... | |
const char * | xccdf_session::xccdf_session_get_component_id (struct xccdf_session *session) |
Retrieves the component id. More... | |
void | xccdf_session::xccdf_session_set_benchmark_id (struct xccdf_session *session, const char *benchmark_id) |
Sets requested benchmark_id for this session. More... | |
const char * | xccdf_session::xccdf_session_get_benchmark_id (struct xccdf_session *session) |
Retrieves the benchmark_id. More... | |
const char * | xccdf_session::xccdf_session_get_result_id (struct xccdf_session *session) |
Retrieves the result id. | |
void | xccdf_session::xccdf_session_set_user_cpe (struct xccdf_session *session, const char *user_cpe) |
Set path to custom CPE dictionary for the session. More... | |
void | xccdf_session::xccdf_session_set_user_tailoring_file (struct xccdf_session *session, const char *user_tailoring_file) |
Set path to custom Tailoring file for the session. More... | |
void | xccdf_session::xccdf_session_set_user_tailoring_cid (struct xccdf_session *session, const char *user_tailoring_cid) |
Set ID of Tailoring component for the session. More... | |
void | xccdf_session::xccdf_session_set_remote_resources (struct xccdf_session *session, bool allowed, download_progress_calllback_t callback) |
Set properties of remote content. More... | |
void | xccdf_session::xccdf_session_set_loading_flags (struct xccdf_session *session, xccdf_session_loading_flags_t flags) |
Disable or allow loading of depending content (OVAL, SCE, CPE) More... | |
void | xccdf_session::xccdf_session_set_custom_oval_files (struct xccdf_session *session, char **oval_filenames) |
Set custom oval files for this session. More... | |
void | xccdf_session::xccdf_session_set_custom_oval_eval_fn (struct xccdf_session *session, xccdf_policy_engine_eval_fn eval_fn) |
Set custom OVAL eval function to register with each OVAL session. More... | |
bool | xccdf_session::xccdf_session_set_product_cpe (struct xccdf_session *session, const char *product_cpe) |
Set custom product CPE name. More... | |
void | xccdf_session::xccdf_session_set_without_sys_chars_export (struct xccdf_session *session, bool without_sys_chars) |
Set whether the System Characteristics shall be exported in result files. More... | |
void | xccdf_session::xccdf_session_set_oval_results_export (struct xccdf_session *session, bool to_export_oval_results) |
Set whether the OVAL result files shall be exported. More... | |
void | xccdf_session::xccdf_session_set_check_engine_plugins_results_export (struct xccdf_session *session, bool to_export_results) |
Set that check engine plugin's result files shall be exported. More... | |
void | xccdf_session::xccdf_session_set_sce_results_export (struct xccdf_session *session, bool to_export_sce_results) |
Set that SCE reult files shall be exported. More... | |
void | xccdf_session::xccdf_session_set_oval_variables_export (struct xccdf_session *session, bool to_export_oval_variables) |
Set whether the OVAL variables files shall be exported. More... | |
bool | xccdf_session::xccdf_session_set_xccdf_export (struct xccdf_session *session, const char *xccdf_file) |
Set where to export XCCDF file. More... | |
bool | xccdf_session::xccdf_session_set_xccdf_stig_viewer_export (struct xccdf_session *session, const char *xccdf_stig_viewer_file) |
Set where to export STIG Viewer XCCDF file. More... | |
bool | xccdf_session::xccdf_session_set_arf_export (struct xccdf_session *session, const char *arf_file) |
Set where to export ARF file. More... | |
bool | xccdf_session::xccdf_session_set_report_export (struct xccdf_session *session, const char *report_file) |
Set where to export HTML Report file. More... | |
bool | xccdf_session::xccdf_session_set_profile_id (struct xccdf_session *session, const char *profile_id) |
Select XCCDF Profile for evaluation. More... | |
int | xccdf_session::xccdf_session_set_profile_id_by_suffix (struct xccdf_session *session, const char *profile_suffix) |
Select XCCDF Profile for evaluation with only profile suffix as input. More... | |
const char * | xccdf_session::xccdf_session_get_profile_id (struct xccdf_session *session) |
Retrieves ID of the profile that we will evaluate with, or NULL. More... | |
struct ds_sds_index * | xccdf_session::xccdf_session_get_sds_idx (struct xccdf_session *session) |
Get Source DataStream index of the session. More... | |
int | xccdf_session::xccdf_session_load (struct xccdf_session *session) |
Load and parse all XCCDF structures needed to evaluate this session. More... | |
int | xccdf_session::xccdf_session_load_xccdf (struct xccdf_session *session) |
Load and parse XCCDF file. More... | |
int | xccdf_session::xccdf_session_load_cpe (struct xccdf_session *session) |
Load and parse CPE dictionaries. More... | |
int | xccdf_session::xccdf_session_load_oval (struct xccdf_session *session) |
Load and parse OVAL definitions files for the XCCDF session. More... | |
int | xccdf_session::xccdf_session_load_check_engine_plugin2 (struct xccdf_session *session, const char *plugin_name, bool quiet) |
Load extra check engine from a plugin of given name to the XCCDF session. More... | |
int | xccdf_session::xccdf_session_load_check_engine_plugins (struct xccdf_session *session) |
Load extra check engines (if any are available) to the XCCDF session. More... | |
int | xccdf_session::xccdf_session_load_tailoring (struct xccdf_session *session) |
Load Tailoring file (if applicable) to the XCCDF session. More... | |
int | xccdf_session::xccdf_session_evaluate (struct xccdf_session *session) |
Evaluate XCCDF Policy. More... | |
int | xccdf_session::xccdf_session_export_xccdf (struct xccdf_session *session) |
Export XCCDF file. More... | |
int | xccdf_session::xccdf_session_export_oval (struct xccdf_session *session) |
Export OVAL (result and variables) files. More... | |
int | xccdf_session::xccdf_session_export_check_engine_plugins (struct xccdf_session *session) |
Export results (if any) from any check engine plugins that are loaded. More... | |
int | xccdf_session::xccdf_session_export_sce (struct xccdf_session *session) |
Export SCE files (if enabled by xccdf_session_set_sce_results_export). More... | |
int | xccdf_session::xccdf_session_export_arf (struct xccdf_session *session) |
Export ARF (if enabled by xccdf_session_set_arf_export). More... | |
struct xccdf_policy_model * | xccdf_session::xccdf_session_get_policy_model (const struct xccdf_session *session) |
Get policy_model of the session. More... | |
struct xccdf_policy * | xccdf_session::xccdf_session_get_xccdf_policy (const struct xccdf_session *session) |
Get xccdf_policy of the session. More... | |
float | xccdf_session::xccdf_session_get_base_score (const struct xccdf_session *session) |
Get the base score of the latest XCCDF evaluation in the session. More... | |
unsigned int | xccdf_session::xccdf_session_get_oval_agents_count (const struct xccdf_session *session) |
Get count of OVAL agent sessions not used for CPE in the xccdf_session. More... | |
unsigned int | xccdf_session::xccdf_session_get_cpe_oval_agents_count (const struct xccdf_session *session) |
Get count of OVAL agent sessions for CPE in the xccdf_session. More... | |
bool | xccdf_session::xccdf_session_contains_fail_result (const struct xccdf_session *session) |
Query if the result of evaluation contains FAIL, ERROR, or UNKNOWN rule-result elements. More... | |
int | xccdf_session::xccdf_session_remediate (struct xccdf_session *session) |
Run XCCDF Remediation. More... | |
int | xccdf_session::xccdf_session_build_policy_from_testresult (struct xccdf_session *session, const char *testresult_id) |
Load xccdf:TestResult to the session from file and prepare session for remediation. More... | |
int | xccdf_session::xccdf_session_add_report_from_source (struct xccdf_session *session, struct oscap_source *report_source) |
Load xccdf:TestResult to the session from oscap_source. More... | |
enum xccdf_session_loading_flags_t |
Loading flags for XCCDF session.
The flags set which components will be loaded in XCCDF session.
int xccdf_session_add_report_from_source | ( | struct xccdf_session * | session, |
struct oscap_source * | report_source | ||
) |
Load xccdf:TestResult to the session from oscap_source.
session | XCCDF Session |
report_source | Structure conataining oscap_source of the test results |
int xccdf_session_build_policy_from_testresult | ( | struct xccdf_session * | session, |
const char * | testresult_id | ||
) |
Load xccdf:TestResult to the session from file and prepare session for remediation.
This function assumes that the session internals has the policy_model prepared, it calculates all the other internals which might be needed for remediation.
session | XCCDF Session |
testresult_id | ID of the TestResult element in the file (the NULL value stands for the last TestResult). Suffix match is attempted if exact match is not found. |
bool xccdf_session_contains_fail_result | ( | const struct xccdf_session * | session | ) |
Query if the result of evaluation contains FAIL, ERROR, or UNKNOWN rule-result elements.
session | XCCDF Session |
int xccdf_session_evaluate | ( | struct xccdf_session * | session | ) |
Evaluate XCCDF Policy.
session | XCCDF Session |
int xccdf_session_export_arf | ( | struct xccdf_session * | session | ) |
Export ARF (if enabled by xccdf_session_set_arf_export).
session | XCCDF Session |
int xccdf_session_export_check_engine_plugins | ( | struct xccdf_session * | session | ) |
Export results (if any) from any check engine plugins that are loaded.
Only applicable if enabled by xccdf_session_set_check_engine_plugins_results_export).
session | XCCDF Session |
int xccdf_session_export_oval | ( | struct xccdf_session * | session | ) |
Export OVAL (result and variables) files.
session | XCCDF Session |
int xccdf_session_export_sce | ( | struct xccdf_session * | session | ) |
Export SCE files (if enabled by xccdf_session_set_sce_results_export).
session | XCCDF Session |
int xccdf_session_export_xccdf | ( | struct xccdf_session * | session | ) |
Export XCCDF file.
session | XCCDF Session |
void xccdf_session_free | ( | struct xccdf_session * | session | ) |
Destructor of xccdf_session.
session | to destroy. |
float xccdf_session_get_base_score | ( | const struct xccdf_session * | session | ) |
Get the base score of the latest XCCDF evaluation in the session.
session | XCCDF Session |
const char * xccdf_session_get_benchmark_id | ( | struct xccdf_session * | session | ) |
Retrieves the benchmark_id.
const char * xccdf_session_get_component_id | ( | struct xccdf_session * | session | ) |
Retrieves the component id.
unsigned int xccdf_session_get_cpe_oval_agents_count | ( | const struct xccdf_session * | session | ) |
Get count of OVAL agent sessions for CPE in the xccdf_session.
CPE uses OVAL on demand, we do not count OVAL agents that were referenced but weren't used.
session | XCCDF Session |
const char * xccdf_session_get_datastream_id | ( | struct xccdf_session * | session | ) |
Retrieves the datastream id.
unsigned int xccdf_session_get_oval_agents_count | ( | const struct xccdf_session * | session | ) |
Get count of OVAL agent sessions not used for CPE in the xccdf_session.
session | XCCDF Session |
struct xccdf_policy_model * xccdf_session_get_policy_model | ( | const struct xccdf_session * | session | ) |
Get policy_model of the session.
The xccdf_session_load_xccdf shall be run before this to parse XCCDF file to the policy_model.
session | XCCDF Session |
const char * xccdf_session_get_profile_id | ( | struct xccdf_session * | session | ) |
Retrieves ID of the profile that we will evaluate with, or NULL.
session | XCCDF Session |
struct ds_sds_index * xccdf_session_get_sds_idx | ( | struct xccdf_session * | session | ) |
Get Source DataStream index of the session.
struct xccdf_policy * xccdf_session_get_xccdf_policy | ( | const struct xccdf_session * | session | ) |
Get xccdf_policy of the session.
session | XCCDF Session |
bool xccdf_session_is_sds | ( | const struct xccdf_session * | session | ) |
Query if the session is based on Source DataStream.
session | XCCDF Session |
int xccdf_session_load | ( | struct xccdf_session * | session | ) |
Load and parse all XCCDF structures needed to evaluate this session.
This is only a placeholder for load_xccdf, load_cpe, load_oval and load_check_engine_plugins functions.
session | XCCDF Session |
int xccdf_session_load_check_engine_plugin2 | ( | struct xccdf_session * | session, |
const char * | plugin_name, | ||
bool | quiet | ||
) |
Load extra check engine from a plugin of given name to the XCCDF session.
Extra check engines are in loadable shared objects. This function is designed to be called !after! xccdf_session_load has been called. XCCDF has to have already been loaded for this to work because the callbacks are registered as part of this function!
session | XCCDF Session |
plugin_name | Name of the plugin to load |
quiet | If true we will not output errors if loading fails |
int xccdf_session_load_check_engine_plugins | ( | struct xccdf_session * | session | ) |
Load extra check engines (if any are available) to the XCCDF session.
Extra check engines are in loadable shared objects and this function searches if any such are available and loads them if they are.
session | XCCDF Session |
int xccdf_session_load_cpe | ( | struct xccdf_session * | session | ) |
Load and parse CPE dictionaries.
Function xccdf_session_set_user_cpe might be called before this to set custom CPE dictionary.
session | XCCDF Session |
int xccdf_session_load_oval | ( | struct xccdf_session * | session | ) |
Load and parse OVAL definitions files for the XCCDF session.
session | XCCDF Session |
int xccdf_session_load_sce | ( | struct xccdf_session * | session | ) |
int xccdf_session_load_tailoring | ( | struct xccdf_session * | session | ) |
Load Tailoring file (if applicable) to the XCCDF session.
session | XCCDF Session |
int xccdf_session_load_xccdf | ( | struct xccdf_session * | session | ) |
Load and parse XCCDF file.
If the file upon which is based this session is Source DataStream use functions xccdf_session_set_datastream_id and xccdf_session_set_component_id to select particular component within that DataStream to parse. This function is reentrant meaning that it allows user to change i.e. component_id and load_xccdf again in the very same session. However in such case, previous xccdf structures will be deallocated from session and pointers to it become invalid.
session | XCCDF Session |
struct xccdf_session * xccdf_session_new | ( | const char * | filename | ) |
Costructor of xccdf_session.
It attempts to recognize type of the filename.
filename | path to XCCDF or DS file. |
NULL | is returned in case of error. Details might be found through oscap_err_desc() |
struct xccdf_session * xccdf_session_new_from_source | ( | struct oscap_source * | source | ) |
Costructor of xccdf_session.
It creates a new xccdf_session from an oscap_source structure.
source | oscap_source which can represent a DS or XCCDF file. |
NULL | is returned in case of error. Details might be found through oscap_err_desc() |
int xccdf_session_remediate | ( | struct xccdf_session * | session | ) |
Run XCCDF Remediation.
It uses XCCDF Policy and XCCDF TestResult from the session and modifies the TestResult. This also drops and recreate OVAL Agent Session, thus users are advised to run xccdf_session_export_oval first.
session | XCCDF Session |
bool xccdf_session_set_arf_export | ( | struct xccdf_session * | session, |
const char * | arf_file | ||
) |
Set where to export ARF file.
NULL value means to not export at all.
session | XCCDF Session |
arf_file | path to ARF file |
void xccdf_session_set_benchmark_id | ( | struct xccdf_session * | session, |
const char * | benchmark_id | ||
) |
Sets requested benchmark_id for this session.
It is only used when no component_id and no datastream_id are requested. Benchmark ID selects the attribute of Benchmark element inside a component that is referenced with a checklist component-ref.
void xccdf_session_set_check_engine_plugins_results_export | ( | struct xccdf_session * | session, |
bool | to_export_results | ||
) |
Set that check engine plugin's result files shall be exported.
session | XCCDF Session |
to_export_results | whether to export results from check engine plugins or not. |
void xccdf_session_set_component_id | ( | struct xccdf_session * | session, |
const char * | component_id | ||
) |
Set requested component_id for this session.
This component_id is later pased down to ds_sds_index_select_checklist to determine target component. This function is applicable only for sessions based on a DataStream.
session | XCCDF Session |
component_id | requested component_id for this session. |
void xccdf_session_set_custom_oval_eval_fn | ( | struct xccdf_session * | session, |
xccdf_policy_engine_eval_fn | eval_fn | ||
) |
Set custom OVAL eval function to register with each OVAL session.
This function shall be called before OVAL files are parsed.
session | XCCDF Session. |
eval_fn | Callback - pointer to function called by XCCDF Policy for each evaluated rule. |
void xccdf_session_set_custom_oval_files | ( | struct xccdf_session * | session, |
char ** | oval_filenames | ||
) |
Set custom oval files for this session.
session | XCCDF Session |
oval_filenames | - Array of paths to custom OVAL files. If the array is empty no OVAL file will be used for the session. If this parameter is NULL then OVAL files will be find automatically, as defined in XCCDF (which is default). |
void xccdf_session_set_datastream_id | ( | struct xccdf_session * | session, |
const char * | datastream_id | ||
) |
Set requested datastream_id for this session.
This datastream_id is later passed down to ds_sds_index_select_checklist to determine target component. This function is applicable only for sessions based on a DataStream.
session | XCCDF Session |
datastream_id | requested datastream_id for this session. |
void xccdf_session_set_loading_flags | ( | struct xccdf_session * | session, |
xccdf_session_loading_flags_t | flags | ||
) |
Disable or allow loading of depending content (OVAL, SCE, CPE)
session | XCCDF Session |
flags | Bit mask that sets loading of other content in the session. |
void xccdf_session_set_oval_results_export | ( | struct xccdf_session * | session, |
bool | to_export_oval_results | ||
) |
Set whether the OVAL result files shall be exported.
session | XCCDF Session |
to_export_oval_results | whether to export results or not. |
void xccdf_session_set_oval_variables_export | ( | struct xccdf_session * | session, |
bool | to_export_oval_variables | ||
) |
Set whether the OVAL variables files shall be exported.
session | XCCDF Session |
to_export_oval_variables | whether to export results or not. |
bool xccdf_session_set_product_cpe | ( | struct xccdf_session * | session, |
const char * | product_cpe | ||
) |
Set custom product CPE name.
session | XCCDF Session. |
product_cpe | Name of the scanner product. |
bool xccdf_session_set_profile_id | ( | struct xccdf_session * | session, |
const char * | profile_id | ||
) |
Select XCCDF Profile for evaluation.
session | XCCDF Session |
profile_id | ID of profile to set |
int xccdf_session_set_profile_id_by_suffix | ( | struct xccdf_session * | session, |
const char * | profile_suffix | ||
) |
Select XCCDF Profile for evaluation with only profile suffix as input.
Reports error if multiple profiles match the suffix.
session | XCCDF Session |
profile_suffix | unique profile ID or suffix of the ID of the profile to set |
void xccdf_session_set_remote_resources | ( | struct xccdf_session * | session, |
bool | allowed, | ||
download_progress_calllback_t | callback | ||
) |
Set properties of remote content.
session | XCCDF Session |
allowed | Whether is download od remote resources allowed in this session (defaults to false) |
callback | used to notify user about download proceeds. This might be safely set to NULL – ignoring user notification. |
bool xccdf_session_set_report_export | ( | struct xccdf_session * | session, |
const char * | report_file | ||
) |
Set where to export HTML Report file.
NULL value means to not export at all.
session | XCCDF Session |
report_file |
void xccdf_session_set_rule | ( | struct xccdf_session * | session, |
const char * | rule | ||
) |
Set rule for session - if rule is not NULL, session will use only this one rule.
session | XCCDF Session |
rule | If not NULL, session will use only this rule |
void xccdf_session_set_sce_results_export | ( | struct xccdf_session * | session, |
bool | to_export_sce_results | ||
) |
Set that SCE reult files shall be exported.
session | XCCDF Session |
to_export_sce_results | whether to export SCE results or not. |
void xccdf_session_set_thin_results | ( | struct xccdf_session * | session, |
bool | thin_result | ||
) |
Set whether the thin results override is enabled.
If true the OVAL results put in ARF or separate files will have thin results. Thin results do not contain details about the evaluated criteria, only minimal OVAL results.
thin_results | true to enable thin_results, default is false |
void xccdf_session_set_user_cpe | ( | struct xccdf_session * | session, |
const char * | user_cpe | ||
) |
Set path to custom CPE dictionary for the session.
This function is applicable only before session loads. It has no effect if run afterwards.
session | XCCDF Session |
user_cpe | File path to user defined cpe dictionary. |
void xccdf_session_set_user_tailoring_cid | ( | struct xccdf_session * | session, |
const char * | user_tailoring_cid | ||
) |
Set ID of Tailoring component for the session.
This function is applicable only before session loads. It has no effect if run afterwards.
session | XCCDF Session |
user_tailoring_cid | ID of component with a tailoring file. |
void xccdf_session_set_user_tailoring_file | ( | struct xccdf_session * | session, |
const char * | user_tailoring_file | ||
) |
Set path to custom Tailoring file for the session.
This function is applicable only before session loads. It has no effect if run afterwards.
session | XCCDF Session |
user_tailoring_file | File path to user defined tailoring file. |
void xccdf_session_set_validation | ( | struct xccdf_session * | session, |
bool | validate, | ||
bool | full_validation | ||
) |
Set XSD validation level to one of three possibilities:
- None: All XSD validations will be skipped. - Default: Partial (input) XSD validations will be done. - Full Valid.: Every possible (input & output) XSD validation will be done.
session | XCCDF Session |
validate | False value indicates to skip any XSD validation. |
full_validation | True value indicates that every possible step will be validated by XSD. |
void xccdf_session_set_without_sys_chars_export | ( | struct xccdf_session * | session, |
bool | without_sys_chars | ||
) |
Set whether the System Characteristics shall be exported in result files.
session | XCCDF Session |
without_sys_chars | whether to export System Characteristics or not. |
bool xccdf_session_set_xccdf_export | ( | struct xccdf_session * | session, |
const char * | xccdf_file | ||
) |
Set where to export XCCDF file.
NULL value means to not export at all.
session | XCCDF Session |
xccdf_file | path to XCCDF file |
bool xccdf_session_set_xccdf_stig_viewer_export | ( | struct xccdf_session * | session, |
const char * | xccdf_stig_viewer_file | ||
) |
Set where to export STIG Viewer XCCDF file.
NULL value means to not export at all.
session | XCCDF Session |
xccdf_file | path to STIG Viewer file |