Definition Type: Element
Name: passwordpolicy_test
Namespace: http://oval.mitre.org/XMLSchema/oval_results#windows
Type: oval_results:standardTestType
Containing Schema: windows-oval-results-schema.xsd
Abstract
Documentation:
Test specific policy associated with passwords. Information is stored in the SAM or Active Directory but is encrypted or hidden so the registry_test and activedirectory_test are of no use. If this can be figured out, then the password_policy test is not needed.
Collapse XSD Schema Diagram:
Drilldown into tested_object in schema windows-oval-results-schema_xsd Drilldown into definition_data in schema windows-oval-results-schema_xsd Drilldown into message in schema oval-results-schema_xsd Drilldown into version in schema oval-results-schema_xsd Drilldown into comment in schema oval-results-schema_xsd Drilldown into id in schema oval-results-schema_xsd Drilldown into testType in schema oval-results-schema_xsd Drilldown into result in schema oval-results-schema_xsd Drilldown into check in schema oval-results-schema_xsd Drilldown into standardTestType in schema oval-results-schema_xsdXSD Diagram of passwordpolicy_test in schema windows-oval-results-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:element name="passwordpolicy_test" substitutionGroup="oval_results:test">
    <xsd:annotation>
        <xsd:documentation>Test specific policy associated with passwords.  Information is stored in the SAM or Active Directory but is encrypted or hidden so the registry_test and activedirectory_test are of no use.  If this can be figured out, then the password_policy test is not needed.</xsd:documentation>
        <xsd:appinfo>
            <test_name>Password Policy Test</test_name>
            <extends>standardTestType</extends>
            <valid_sections>message, definition_data, tested_object</valid_sections>
            <example>
            </example>
        </xsd:appinfo>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="oval_results:standardTestType">
                <xsd:sequence>
                    <xsd:element name="definition_data" minOccurs="1" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="oval_results:definitionDataType">
                                    <xsd:sequence>
                                        <xsd:element name="max_passwd_age" type="oval_results:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies, in seconds, the maximum allowable password age. A value of TIMEQ_FOREVER (-1) indicates that the password never expires. The minimum valid value for this element is ONE_DAY (86400).</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Password Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="min_passwd_age" type="oval_results:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies the minimum number of seconds that can elapse between the time a password changes and when it can be changed again. A value of zero indicates that no delay is required between password updates.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Password Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="min_passwd_len" type="oval_results:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies the minimum allowable password length. Valid values for this element are zero through PWLEN.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Password Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="password_hist_len" type="oval_results:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies the length of password history maintained. A new password cannot match any of the previous usrmod0_password_hist_len passwords. Valid values for this element are zero through DEF_MAX_PWHIST.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Password Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="password_complexity" type="oval_results:subtestBoolType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>A boolean value that signifies whether passwords must meet the complexity requirements put forth by the operating system.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Password Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                    <valid_operators>equals, not equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="reversible_encryption" type="oval_results:subtestBoolType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Determines whether Windows 2000 Server, Windows 2000 Professional, and Windows XP Professional store passwords using reversible encryption.</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Password Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>boolean</valid_datatypes>
                                                    <valid_operators>equals, not equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                    <xsd:element name="tested_object" type="oval_results:testedObjectType" minOccurs="0" maxOccurs="1" />
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
message oval_results:message 0 unbounded
definition_data windows:definition_data 1 1
tested_object windows:tested_object 0 1
Collapse Child Attributes:
Name Type Default Value Use
id oval_results:id Required
comment oval_results:comment Required
version oval_results:version 1 Optional
check oval_results:check all Optional
result oval_results:result Required
Collapse Derivation Tree:
Collapse References:
oval_results:test