Definition Type: Element
Name: shadow_test
Namespace: http://oval.mitre.org/XMLSchema/oval_results#redhat
Type: oval_results:standardTestType
Containing Schema: redhat-oval-results-schema.xsd
Abstract
Documentation:
/etc/shadow. See shadow(4).
Collapse XSD Schema Diagram:
Drilldown into tested_object in schema redhat-oval-results-schema_xsd Drilldown into definition_data in schema redhat-oval-results-schema_xsd Drilldown into definition_object in schema redhat-oval-results-schema_xsd Drilldown into message in schema oval-results-schema_xsd Drilldown into version in schema oval-results-schema_xsd Drilldown into comment in schema oval-results-schema_xsd Drilldown into id in schema oval-results-schema_xsd Drilldown into testType in schema oval-results-schema_xsd Drilldown into result in schema oval-results-schema_xsd Drilldown into check in schema oval-results-schema_xsd Drilldown into standardTestType in schema oval-results-schema_xsdXSD Diagram of shadow_test in schema redhat-oval-results-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:element name="shadow_test" substitutionGroup="oval_results:test">
    <xsd:annotation>
        <xsd:documentation>/etc/shadow. See shadow(4).</xsd:documentation>
        <xsd:appinfo>
            <test_name>Shadow Test</test_name>
            <extends>standardTestType</extends>
            <valid_sections>message, definition_object, definition_data, tested_object</valid_sections>
            <example>
            </example>
        </xsd:appinfo>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="oval_results:standardTestType">
                <xsd:sequence>
                    <xsd:element name="definition_object" minOccurs="1" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="oval_results:definitionObjectType">
                                    <xsd:sequence>
                                        <xsd:element name="username" type="oval_results:subtestStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This is the name of the user being checked.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                    <xsd:element name="definition_data" minOccurs="0" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="oval_results:definitionDataType">
                                    <xsd:sequence>
                                        <xsd:element name="password" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This is the encrypted version of the user's password.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="chg_lst" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This is the date of the last password change in days since 1/1/1970.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="chg_allow" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This specifies how often in days a user may change their password.  It can also be thought of as the minimum age of a password.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="chg_req" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This describes how long a user can keep a password before the system forces her to change it.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="exp_warn" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This describes how long before password expiration the system begins warning the user.  The system will warn the user at each login.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="exp_inact" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This describes how many days of account inactivity the system will wait after a password expires before locking the account? This window, usually only set to a few days, gives users who are logging in very seldomly a bit of extra time to receive the password expiration warning and change their password.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="exp_date" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This speicifies when will the account's password expire, in days since 1/1/1970.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="flag" type="oval_results:subtestStringType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This is a reserved field that the shadow file may use in the future.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                    <valid_operators>equals, not equal, pattern match</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                    <xsd:element name="tested_object" minOccurs="0" maxOccurs="unbounded">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="oval_results:testedObjectType">
                                    <xsd:sequence>
                                        <xsd:element name="username" type="oval_results:testedStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This is the name of a matching user.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Shadow Test</parent_test>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
message oval_results:message 0 unbounded
definition_object redhat:definition_object 1 1
definition_data redhat:definition_data 0 1
tested_object redhat:tested_object 0 unbounded
Collapse Child Attributes:
Name Type Default Value Use
id oval_results:id Required
comment oval_results:comment Required
version oval_results:version 1 Optional
check oval_results:check all Optional
result oval_results:result Required
Collapse Derivation Tree:
Collapse References:
oval_results:test