It appears that ovaldi requries a string type for the local_port element of the Linux InetListeningServers probe. The spec seems to say that this is required to be an integer type. Which is correct?
Thanks in advance,
This is a known bug.
Back in OVAL 5.8, we changed the port entity from "string" to "int", however, we haven't updated the OVAL Interpreter yet.
Actually, I forgot to say that you should follow the spec and it should be an "int".
Is this problem about Linux inetlisteningservers port type resolved in version 5.10.1 build 5 of ovaldi?
I have executed a test with local_port elem and it has not worked. My inetlisteningservers object is:
<linux-def:inetlisteningservers_object id="oval:suse:obj:3" version="1" comment="Get port 22 state of any service">
<linux-def:local_address datatype="string" operation="pattern match">^(0.0.0.0)$</linux-def:local_address>
Ovaldi generates an error in system-characteristics.xml:
<object comment="Get port 22 state of any service" flag="error" id="oval:suse:obj:3" version="1">
<oval-sc:message level="fatal">Error: invalid data type specified on local_port. Found: int</oval-sc:message>
Unfortunately, this bug hasn't been fixed yet. I just bumped up its priority so it will get addressed sooner.
Thank you very much Danny,