Definition Type: Element
Name: fileeffectiverights_item
Namespace: http://oval.mitre.org/XMLSchema/system_characteristics#windows
Type: system_characteristics:itemType
Containing Schema: windows-system-characteristics-schema.xsd
Abstract
Documentation:
This item stores the effective rights of a file that a discretionary access control list (DACL) structure grants to a specified trustee. The trustee's effective rights are determined checking all access-allowed and access-denied access control entries (ACEs) in the DACL. For help with this test see the GetEffectiveRightsFromAcl() api.
Collapse XSD Schema Diagram:
Drilldown into data in schema windows-system-characteristics-schema_xsd Drilldown into object in schema windows-system-characteristics-schema_xsd Drilldown into message in schema system-characteristics-schema_xsd Drilldown into id in schema system-characteristics-schema_xsd Drilldown into itemType in schema system-characteristics-schema_xsdXSD Diagram of fileeffectiverights_item in schema windows-system-characteristics-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:element name="fileeffectiverights_item" substitutionGroup="system_characteristics:item">
    <xsd:annotation>
        <xsd:documentation>This item stores the effective rights of a file that a discretionary access control list (DACL) structure grants to a specified trustee.  The trustee's effective rights are determined checking all access-allowed and access-denied access control entries (ACEs) in the DACL.  For help with this test see the GetEffectiveRightsFromAcl() api.</xsd:documentation>
        <xsd:appinfo>
            <item_name>File Effective Rights Item</item_name>
            <extends>itemType</extends>
            <valid_sections>message, object, data</valid_sections>
            <example>
                <fileeffectiverights_item id="2">
                    <object>
                        <path>C:\WINDOWS\system32\mshtml.dll</path>
                        <trustee_name datatype="string" status="exists">SYSTEM</trustee_name>
                    </object>
                    <data>
                        <trustee_domain datatype="string" status="exists">NT AUTHORITY</trustee_domain>
                        <trustee_sid datatype="string" status="exists">S-1-5-18</trustee_sid>
                        <standard_delete datatype="boolean" status="exists">0</standard_delete>
                        <standard_read_control datatype="boolean" status="exists">0</standard_read_control>
                        <standard_write_dac datatype="boolean" status="exists">0</standard_write_dac>
                        <standard_write_owner datatype="boolean" status="exists">0</standard_write_owner>
                        <standard_synchronize datatype="boolean" status="exists">0</standard_synchronize>
                        <access_system_security datatype="boolean" status="exists">1</access_system_security>
                        <generic_read datatype="boolean" status="exists">1</generic_read>
                        <generic_write datatype="boolean" status="exists">1</generic_write>
                        <generic_execute datatype="boolean" status="exists">1</generic_execute>
                        <generic_all datatype="boolean" status="exists">1</generic_all>
                        <file_read_data datatype="boolean" status="exists">0</file_read_data>
                        <file_write_data datatype="boolean" status="exists">0</file_write_data>
                        <file_append_data datatype="boolean" status="exists">0</file_append_data>
                        <file_read_ea datatype="boolean" status="exists">0</file_read_ea>
                        <file_write_ea datatype="boolean" status="exists">0</file_write_ea>
                        <file_execute datatype="boolean" status="exists">0</file_execute>
                        <file_delete_child datatype="boolean" status="exists">0</file_delete_child>
                        <file_read_attributes datatype="boolean" status="exists">0</file_read_attributes>
                        <file_write_attributes datatype="boolean" status="exists">0</file_write_attributes>
                    </data>
                </fileeffectiverights_item>
            </example>
        </xsd:appinfo>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="system_characteristics:itemType">
                <xsd:sequence>
                    <xsd:element name="object" minOccurs="1" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="system_characteristics:objectType">
                                    <xsd:sequence>
                                        <xsd:element name="path" type="system_characteristics:objectStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This element specifies the absolute path to a file on the machine from which the DACL was retrieved.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>none</content>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="trustee_name" type="system_characteristics:objectStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>This element specifies the trustee name associated with this particular DACL.  A trustee can be a user, group, or program (such as a Windows service)</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                    <xsd:element name="data" minOccurs="0" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="system_characteristics:dataType">
                                    <xsd:sequence>
                                        <xsd:element name="trustee_domain" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>The domain of the specified trustee name.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="trustee_sid" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>The security identifier (SID) of the specified trustee name.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>string</content>
                                                    <valid_datatypes>string</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="standard_delete" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="standard_read_control" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="standard_write_dac" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="standard_write_owner" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="standard_synchronize" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="access_system_security" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="generic_read" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="generic_write" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="generic_execute" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="generic_all" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_read_data" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_write_data" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_append_data" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_read_ea" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_write_ea" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_execute" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_delete_child" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_read_attributes" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="file_write_attributes" type="system_characteristics:dataBoolType" minOccurs="1" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>
                                                </xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_item>File Effective Rights Item</parent_item>
                                                    <cardinality>1</cardinality>
                                                    <content>boolean</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
message system_characteristics:message 0 1
object windows:object 1 1
data windows:data 0 1
Collapse Child Attributes:
Name Type Default Value Use
id system_characteristics:id Required
Collapse Derivation Tree:
Collapse References:
system_characteristics:item