AUDIT_XML

The “AUDIT_XML” audit check allows you to examine and audit the contents of an XML file by first applying XSL transforms, extracting relevant data, and then determine compliance based on the regex, expect, and not_expect keywords. The check consists of four or more keywords, keywords type, description file, and xsl_stmt directives (mandatory), which are followed by regex, expect, or not_expect keywords to audit the content.

Tip: For information about the parameters commonly found in Unix custom items, see Unix Configuration Keywords.

Example

<custom_item>

type: AUDIT_XML

description: "1.14 - Ensure Oracle Database persistence plugin is set correctly - 'DatabasePersistencePlugin'"

file: "/opt/jboss-5.0.1.GA/server/all/deploy/ejb2-timer-service.xml"

xsl_stmt: "<xsl:template match=\"server\">"

xsl_stmt: "DatabasePersistencePlugin = <xsl:value-of select=\"/server/mbean[@code='org.jboss.ejb.txtimer.DatabasePersistencePolicy']/attribute[@name='DatabasePersistencePlugin']/text()\"/>"

xsl_stmt: "</xsl:template>"

regex: "DatabasePersistencePlugin = .+"

not_expect: "org.jboss.ejb.txtimer.GeneralPurposeDatabasePersistencePlugin"

</custom_item>

Note that the file keyword accepts wildcards. For example: