Documentation for Open Vulnerability and Assessment Language (OVAL®)
Definition Type: Element
Name: process_item
Namespace: http://oval.mitre.org/XMLSchema/oval-system-characteristics-5#unix
Type: oval-sc:ItemType
Containing Schema: unix-system-characteristics-schema.xsd
Abstract
Documentation:
Output of /usr/bin/ps. See ps(1).
Collapse XSD Schema Diagram:
Drilldown into user_id in schema unix-system-characteristics-schema_xsd Drilldown into tty in schema unix-system-characteristics-schema_xsd Drilldown into start_time in schema unix-system-characteristics-schema_xsd Drilldown into scheduling_class in schema unix-system-characteristics-schema_xsd Drilldown into priority in schema unix-system-characteristics-schema_xsd Drilldown into ppid in schema unix-system-characteristics-schema_xsd Drilldown into pid in schema unix-system-characteristics-schema_xsd Drilldown into exec_time in schema unix-system-characteristics-schema_xsd Drilldown into command in schema unix-system-characteristics-schema_xsd Drilldown into message in schema oval-system-characteristics-schema_xsd Drilldown into status in schema oval-system-characteristics-schema_xsd Drilldown into id in schema oval-system-characteristics-schema_xsd Drilldown into ItemType in schema oval-system-characteristics-schema_xsdXSD Diagram of process_item in schema unix-system-characteristics-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code: 
<xsd:element name="process_item" substitutionGroup="oval-sc:item">
    <xsd:annotation>
        <xsd:documentation>Output of /usr/bin/ps. See ps(1).</xsd:documentation>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="oval-sc:ItemType">
                <xsd:sequence>
                    <xsd:element name="command" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>This specifies the command/program name about which data has has been collected.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitemcommand" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:command">
                                        <sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the command entity of a process_item should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="exec_time" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>This is the cumulative CPU time, formatted in [DD-]HH:MM:SS where DD is the number of days when execution time is 24 hours or more.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitemexec_time" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:exec_time">
                                        <sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the exec_time entity of a process_item should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="pid" type="oval-sc:EntityItemIntType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>This is the process ID of the process.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitempid" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:pid">
                                        <sch:assert test="@datatype='int'">item <sch:value-of select="../@id" /> - datatype attribute for the pid entity of a process_item should be 'int'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="ppid" type="oval-sc:EntityItemIntType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>This is the process ID of the process's parent process.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitemppid" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:ppid">
                                        <sch:assert test="@datatype='int'">item <sch:value-of select="../@id" /> - datatype attribute for the ppid entity of a process_item should be 'int'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="priority" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>This is the scheduling priority with which the process runs. This can be adjusted with the nice command or nice() system call.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitempriority" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:priority">
                                        <sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the priority entity of a process_item should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="scheduling_class" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>A platform specific characteristic maintained by the scheduler: RT (real-time), TS (timeshare), FF (fifo), SYS (system), etc.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitemscheduling_class" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:scheduling_class">
                                        <sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the scheduling_class entity of a process_item should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="start_time" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>This is the time of day the process started formatted in HH:MM:SS if the same day the process started or formatted as MMM_DD (Ex.: Feb_5) if process started the previous day or further in the past.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitemstart_time" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:start_time">
                                        <sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the start_time entity of a process_item should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="tty" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>This is the TTY on which the process was started, if applicable.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitemtty" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:tty">
                                        <sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the tty entity of a process_item should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                    <xsd:element name="user_id" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
                        <xsd:annotation>
                            <xsd:documentation>The numeric user id, or uid, is the third column of each user's entry in /etc/passwd. It represents the owner, and thus privilege level, of the specified program.</xsd:documentation>
                            <xsd:appinfo>
                                <sch:pattern id="unixprocessitemuser_id" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                                    <sch:rule context="unix-sc:process_item/unix-sc:user_id">
                                        <sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the user_id entity of a process_item should be 'string'</sch:assert>
                                    </sch:rule>
                                </sch:pattern>
                            </xsd:appinfo>
                        </xsd:annotation>
                    </xsd:element>
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
message oval-sc:message 0 1
command unix-sc:command 0 1
exec_time unix-sc:exec_time 0 1
pid unix-sc:pid 0 1
ppid unix-sc:ppid 0 1
priority unix-sc:priority 0 1
scheduling_class unix-sc:scheduling_class 0 1
start_time unix-sc:start_time 0 1
tty unix-sc:tty 0 1
user_id unix-sc:user_id 0 1
Collapse Child Attributes:
Name Type Default Value Use
id oval-sc:id Required
status oval-sc:status exists Optional
Collapse Derivation Tree:
Collapse References:
oval-sc:item
Documentation for Open Vulnerability and Assessment Language (OVAL®)

Generated using Liquid Studio - Developer Bundle 21.0.0.0