Definition Type: Element
Name: fileauditedpermissions53_state
Namespace: http://oval.mitre.org/XMLSchema/oval-definitions-5#windows
Type: oval-def:StateType
Containing Schema: windows-definitions-schema.xsd
Abstract
Documentation:
The fileauditedpermissions53_state element defines the different audit permissions that can be associated with a given fileauditedpermissions53_object. Please refer to the individual elements in the schema for more details about what each represents.
Collapse XSD Schema Diagram:
Drilldown into file_write_attributes in schema windows-definitions-schema_xsd Drilldown into file_read_attributes in schema windows-definitions-schema_xsd Drilldown into file_delete_child in schema windows-definitions-schema_xsd Drilldown into file_execute in schema windows-definitions-schema_xsd Drilldown into file_write_ea in schema windows-definitions-schema_xsd Drilldown into file_read_ea in schema windows-definitions-schema_xsd Drilldown into file_append_data in schema windows-definitions-schema_xsd Drilldown into file_write_data in schema windows-definitions-schema_xsd Drilldown into file_read_data in schema windows-definitions-schema_xsd Drilldown into generic_all in schema windows-definitions-schema_xsd Drilldown into generic_execute in schema windows-definitions-schema_xsd Drilldown into generic_write in schema windows-definitions-schema_xsd Drilldown into generic_read in schema windows-definitions-schema_xsd Drilldown into access_system_security in schema windows-definitions-schema_xsd Drilldown into standard_synchronize in schema windows-definitions-schema_xsd Drilldown into standard_write_owner in schema windows-definitions-schema_xsd Drilldown into standard_write_dac in schema windows-definitions-schema_xsd Drilldown into standard_read_control in schema windows-definitions-schema_xsd Drilldown into standard_delete in schema windows-definitions-schema_xsd Drilldown into trustee_sid in schema windows-definitions-schema_xsd Drilldown into filename in schema windows-definitions-schema_xsd Drilldown into path in schema windows-definitions-schema_xsd Drilldown into notes in schema oval-definitions-schema_xsd Drilldown into Signature in schema xmldsig-core-schema_xsd Drilldown into deprecated in schema oval-definitions-schema_xsd Drilldown into comment in schema oval-definitions-schema_xsd Drilldown into operator in schema oval-definitions-schema_xsd Drilldown into version in schema oval-definitions-schema_xsd Drilldown into id in schema oval-definitions-schema_xsd Drilldown into StateType in schema oval-definitions-schema_xsdXSD Diagram of fileauditedpermissions53_state in schema windows-definitions-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:element name="fileauditedpermissions53_state" substitutionGroup="oval-def:state">
    <xsd:annotation>
        <xsd:documentation>The fileauditedpermissions53_state element defines the different audit permissions that can be associated with a given fileauditedpermissions53_object. Please refer to the individual elements in the schema for more details about what each represents.</xsd:documentation>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="oval-def:StateType">
                <xsd:sequence>
                    <xsd:element name="path" type="oval-def:EntityStateStringType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>The path element specifies the absolute path (for a file on the machine) to test for.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stepath" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:path">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the path entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="filename" type="oval-def:EntityStateStringType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>The filename element specifies the name of a file to test for.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefilename" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:filename">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the filename entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                        <sch:assert test="if (not(@operation) or @operation='equals' or @operation='not equal') then (not(contains(.,'\') or contains(.,'/') or contains(.,':') or contains(.,'*') or contains(.,'?') or contains(.,'&gt;') or contains(.,'|'))) else (1=1)">
                                            <sch:value-of select="../@id" /> - filename entity can not contain the characters / \ : * ? &gt; | </sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="trustee_sid" type="oval-def:EntityStateStringType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>The trustee_sid element is the unique sid that associated a user, group, system, or program (such as a Windows service).</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stetrustee_sid" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:trustee_sid">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the trustee_sid entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="standard_delete" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>The right to delete the object.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stestandard_delete" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:standard_delete">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the standard_delete entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="standard_read_control" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>The right to read the information in the object's security descriptor, not including the information in the SACL.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stestandard_read_control" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:standard_read_control">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the standard_read_control entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="standard_write_dac" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>The right to modify the DACL in the object's security descriptor.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stestandard_write_dac" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:standard_write_dac">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the standard_write_dac entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="standard_write_owner" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>The right to change the owner in the object's security descriptor.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stestandard_write_owner" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:standard_write_owner">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the standard_write_owner entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="standard_synchronize" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Windows NT/2000: The right to use the object for synchronization. This enables a thread to wait until the object is in the signaled state. Some object types do not support this access right.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stestandard_synchronize" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:standard_synchronize">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the standard_synchronize entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="access_system_security" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Indicates access to a system access control list (SACL).</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53steaccess_system_security" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:access_system_security">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the access_system_security entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="generic_read" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Read access.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stegeneric_read" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:generic_read">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the generic_read entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="generic_write" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Write access.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stegeneric_write" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:generic_write">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the generic_write entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="generic_execute" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Execute access.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stegeneric_execute" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:generic_execute">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the generic_execute entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="generic_all" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Read, write, and execute access.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stegeneric_all" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:generic_all">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the generic_all entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_read_data" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to read data from the file.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_read_data" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_read_data">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_read_data entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_write_data" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to write data to the file.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_write_data" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_write_data">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_write_data entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_append_data" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to append data to the file.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_append_data" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_append_data">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_append_data entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_read_ea" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to read extended attributes.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_read_ea" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_read_ea">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_read_ea entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_write_ea" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to write extended attributes.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_write_ea" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_write_ea">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_write_ea entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_execute" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to execute a file.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_execute" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_execute">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_execute entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_delete_child" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Right to delete a directory and all the files it contains (its children), even if the files are read-only.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_delete_child" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_delete_child">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_delete_child entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_read_attributes" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to read file attributes.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_read_attributes" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_read_attributes">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_read_attributes entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="file_write_attributes" type="win-def:EntityStateAuditType" minOccurs="0">
                        <xsd:annotation>
                            <xsd:documentation>Grants the right to change file attributes.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="fap53stefile_write_attributes" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="win-def:fileauditedpermissions53_state/win-def:file_write_attributes">
                                        <sch:assert test="not(@datatype) or @datatype='string'">
                                            <sch:value-of select="../@id" /> - datatype attribute for the file_write_attributes entity of a fileauditedpermissions53_state should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
Signature ds:Signature 0 1
notes oval-def:notes 0 1
path win-def:path 0 (1)
filename win-def:filename 0 (1)
trustee_sid win-def:trustee_sid 0 (1)
standard_delete win-def:standard_delete 0 (1)
standard_read_control win-def:standard_read_control 0 (1)
standard_write_dac win-def:standard_write_dac 0 (1)
standard_write_owner win-def:standard_write_owner 0 (1)
standard_synchronize win-def:standard_synchronize 0 (1)
access_system_security win-def:access_system_security 0 (1)
generic_read win-def:generic_read 0 (1)
generic_write win-def:generic_write 0 (1)
generic_execute win-def:generic_execute 0 (1)
generic_all win-def:generic_all 0 (1)
file_read_data win-def:file_read_data 0 (1)
file_write_data win-def:file_write_data 0 (1)
file_append_data win-def:file_append_data 0 (1)
file_read_ea win-def:file_read_ea 0 (1)
file_write_ea win-def:file_write_ea 0 (1)
file_execute win-def:file_execute 0 (1)
file_delete_child win-def:file_delete_child 0 (1)
file_read_attributes win-def:file_read_attributes 0 (1)
file_write_attributes win-def:file_write_attributes 0 (1)
Collapse Child Attributes:
Name Type Default Value Use
id oval-def:id Required
version oval-def:version Required
operator oval-def:operator AND Optional
comment oval-def:comment Optional
deprecated oval-def:deprecated false Optional
Collapse Derivation Tree:
Collapse References:
oval-def:state