Definition Type: Element
Name: passwordpolicy_test
Namespace: http://oval.mitre.org/XMLSchema/oval-definitions-5#windows
Type: oval-def:TestType
Containing Schema: windows-definitions-schema.xsd
Abstract
Documentation:
The password policy test is used to check specific policy associated with passwords. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a passwordpolicy_object and the optional state element specifies the metadata to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType. NOTE: This information is stored in the SAM or Active Directory but is encrypted or hidden so the registry_test and activedirectory_test are of no use. If this can be figured out, then the password_policy test is not needed.
Collapse XSD Schema Diagram:
Drilldown into state in schema windows-definitions-schema_xsd Drilldown into object in schema windows-definitions-schema_xsd Drilldown into notes in schema oval-definitions-schema_xsd Drilldown into Signature in schema xmldsig-core-schema_xsd Drilldown into deprecated in schema oval-definitions-schema_xsd Drilldown into comment in schema oval-definitions-schema_xsd Drilldown into check in schema oval-definitions-schema_xsd Drilldown into check_existence in schema oval-definitions-schema_xsd Drilldown into version in schema oval-definitions-schema_xsd Drilldown into id in schema oval-definitions-schema_xsd Drilldown into TestType in schema oval-definitions-schema_xsdXSD Diagram of passwordpolicy_test in schema windows-definitions-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:element name="passwordpolicy_test" substitutionGroup="oval-def:test">
    <xsd:annotation>
        <xsd:documentation>The password policy test is used to check specific policy associated with passwords. It extends the standard TestType as defined in the oval-definitions-schema and one should refer to the TestType description for more information. The required object element references a passwordpolicy_object and the optional state element specifies the metadata to check. The evaluation of the test is guided by the check attribute that is inherited from the TestType.</xsd:documentation>
        <xsd:documentation>NOTE: This information is stored in the SAM or Active Directory but is encrypted or hidden so the registry_test and activedirectory_test are of no use. If this can be figured out, then the password_policy test is not needed.</xsd:documentation>
        <xsd:appinfo>
            <sch:pattern id="pptst" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                <sch:rule context="win-def:passwordpolicy_test/win-def:object">
                    <sch:assert test="@object_ref=/oval-def:oval_definitions/oval-def:objects/win-def:passwordpolicy_object/@id">
                        <sch:value-of select="../@id" /> - the object child element of a passwordpolicy_test must reference a passwordpolicy_object</sch:assert>
                </sch:rule>
                <sch:rule context="win-def:passwordpolicy_test/win-def:state">
                    <sch:assert test="@state_ref=/oval-def:oval_definitions/oval-def:states/win-def:passwordpolicy_state/@id">
                        <sch:value-of select="../@id" /> - the state child element of a passwordpolicy_test must reference a passwordpolicy_state</sch:assert>
                </sch:rule>
            </sch:pattern>
        </xsd:appinfo>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="oval-def:TestType">
                <xsd:sequence>
                    <xsd:element name="object" type="oval-def:ObjectRefType" />
                    <xsd:element name="state" type="oval-def:StateRefType" minOccurs="0" />
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
Signature ds:Signature 0 1
notes oval-def:notes 0 1
object win-def:object (1) (1)
state win-def:state 0 (1)
Collapse Child Attributes:
Name Type Default Value Use
id oval-def:id Required
version oval-def:version Required
check_existence oval-def:check_existence at_least_one_exists Optional
check oval-def:check Required
comment oval-def:comment Required
deprecated oval-def:deprecated false Optional
Collapse Derivation Tree:
Collapse References:
oval-def:test