/usr/share/openscap/schemas/xccdf/1.1.4/cpe-1.0.xsd is in libopenscap1 0.8.0-4build1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 | <?xml version="1.0" encoding="UTF-8"?>
<!--
Document : cpe-1.0.xsd
Created on : 24 September 2006
Last Updated on : 7 January 2006
Author : Neal Ziring
Description : see annotations below
ChangeLog:
Changes in 0.1
- initial version, first cut
Changes in 0.2
- removed alias feature
Changes up to 0.5
- changes notes and references to minOccurs=1
- fixed some glitches left over from 0.2
- fixed some annotations
Changes for final 1.0
- fixed some comments
- changed version number
-->
<xsd:schema
targetNamespace="http://cpe.mitre.org/XMLSchema/cpe/1.0"
elementFormDefault="qualified" attributeFormDefault="unqualified"
xmlns:cpe="http://cpe.mitre.org/XMLSchema/cpe/1.0"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<xsd:annotation>
<xsd:documentation>
This is an XML Schema for defining names in the
Common Platform Enumeration, a naming system for
IT platforms. Each CPE name has the following URI format:
cpe:/ [ hardware-part ] [ / [ os-part ] [ / application-part ] ]
Each part consists of zero or more name elements separated
by semicolons. Generally, in a description listing like
this, at most one name element will comprise each part.
Each name element consists of one or more name components
separated by colons. The first name component of each
name element is a supplier or vendor name, expressed as
the organization-specific label from the supplier's DNS
name (e.g. from "microsoft.com" use "microsoft").
This specification was written by Neal Ziring, with assistance
from Andrew Buttner, and ideas from Todd Wittbold and other
attendees at the 2nd Annual NIST Security Automation Workshop.
For more information, consult the CPE specification document.
<version date="2007-01-07">1.0</version>
</xsd:documentation>
</xsd:annotation>
<!-- ************************************************************ -->
<!-- Top-level Object Elements * -->
<!-- ************************************************************ -->
<xsd:element name="cpe-list">
<xsd:annotation>
<xsd:documentation xml:lang="en">
This element acts as a top-level container for CPE
name items.
</xsd:documentation>
</xsd:annotation>
<xsd:complexType>
<xsd:sequence>
<xsd:element ref="cpe:cpe-item"
minOccurs="1" maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<!-- no duplicate names in a single CPE description file -->
<xsd:key name="itemURIKey">
<xsd:selector xpath="./cpe:cpe-item"/>
<xsd:field xpath="@name"/>
</xsd:key>
</xsd:element>
<xsd:element name="cpe-item">
<xsd:annotation>
<xsd:documentation xml:lang="en">
This element denotes a single name in the Common
Platform Enumeration. It has the following parts:
- name, a URI, which must be a unique key, and
should follow the URI structure outlined in
the CPE specification.
- title, arbitrary friendly name
- notes, optional descriptive material
- references, optional external info references
- check, optional reference to an OVAL test that
can confirm or reject an IT system as an
instance of the named platform.
</xsd:documentation>
</xsd:annotation>
<xsd:complexType>
<xsd:sequence>
<xsd:element name="title" type="xsd:string"
minOccurs="1" maxOccurs="1"/>
<xsd:element name="notes" minOccurs="0" maxOccurs="1">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="note" type="xsd:string"
minOccurs="1" maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
</xsd:element>
<xsd:element name="references" minOccurs="0" maxOccurs="1">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="reference" type="cpe:referenceType"
minOccurs="1" maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
</xsd:element>
<xsd:element name="check" type="cpe:checkType"
minOccurs="0" maxOccurs="unbounded"/>
</xsd:sequence>
<xsd:attribute name="name" type="xsd:anyURI"
use="required"/>
</xsd:complexType>
<xsd:unique name="checkSystemKey">
<xsd:selector xpath="./cpe:check"/>
<xsd:field xpath="@system"/>
</xsd:unique>
</xsd:element>
<!-- ************************************************************ -->
<!-- Supporting Element Types * -->
<!-- ************************************************************ -->
<xsd:complexType name="referenceType">
<xsd:annotation>
<xsd:documentation xml:lang="en">
Type for an reference in the description of a CPE
item. This would normally be used to point to extra
descriptive material, or the supplier's web site, or
the platform documentation. It consists of a piece
of text (intended to be human-readable) and a URI
(intended to be a URL, and point to a real resource).
</xsd:documentation>
</xsd:annotation>
<xsd:simpleContent>
<xsd:extension base="xsd:string">
<xsd:attribute name="href" type="xsd:anyURI"/>
</xsd:extension>
</xsd:simpleContent>
</xsd:complexType>
<xsd:complexType name="checkType">
<xsd:annotation>
<xsd:documentation xml:lang="en">
Data type for the check element, a checking system
specification URI, string content, and an optional
external file reference. The checking system
specification should be the URI for a particular
version of OVAL or a related system testing language,
and the content will be an identifier of a test written
in that language. The external file reference could
be used to point to the file in which the content test
identifier is defined.
</xsd:documentation>
</xsd:annotation>
<xsd:simpleContent>
<xsd:extension base="xsd:string">
<xsd:attribute name="system" type="xsd:anyURI"
use="required"/>
<xsd:attribute name="href" type="xsd:anyURI"
use="optional"/>
</xsd:extension>
</xsd:simpleContent>
</xsd:complexType>
</xsd:schema>
|