Documentation for Open Vulnerability and Assessment Language (OVAL®)
Definition Type: Element
Name: sql
Namespace: http://oval.mitre.org/XMLSchema/oval-definitions-5#independent
Type: oval-def:EntityObjectStringType
Containing Schema: independent-definitions-schema.xsd
MinOccurs (1)
MaxOccurs (1)
Abstract
Documentation:
The sql entity defines a query used to identify the object(s) to test against. Any valid SQL query is usable with one exception, at most one field is allowed in the SELECT portion of the query. For example SELECT name FROM ... is valid, as is SELECT 'true' FROM ..., but SELECT name, number FROM ... is not valid. This is because the result element in the data section is only designed to work against a single field.
Collapse XSD Schema Diagram:
Drilldown into var_ref in schema oval-definitions-schema_xsd Drilldown into mask in schema oval-definitions-schema_xsd Drilldown into operation in schema oval-definitions-schema_xsd Drilldown into datatype in schema oval-definitions-schema_xsd Drilldown into var_check in schema oval-definitions-schema_xsd Drilldown into EntityObjectStringType in schema oval-definitions-schema_xsdXSD Diagram of sql in schema independent-definitions-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code: 
<xsd:element name="sql" type="oval-def:EntityObjectStringType">
    <xsd:annotation>
        <xsd:documentation>The sql entity defines a query used to identify the object(s) to test against. Any valid SQL query is usable with one exception, at most one field is allowed in the SELECT portion of the query. For example SELECT name FROM ... is valid, as is SELECT 'true' FROM ..., but SELECT name, number FROM ... is not valid. This is because the result element in the data section is only designed to work against a single field.</xsd:documentation>
        <xsd:appinfo>
            <sch:pattern id="sqlobjsql" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                <sch:rule context="ind-def:sql_object/ind-def:sql">
                    <sch:assert test="not(@datatype) or @datatype='string'">
                        <sch:value-of select="../@id" /> - datatype attribute for the sql entity of a sql_object should be 'string'</sch:assert>
                </sch:rule>
            </sch:pattern>
        </xsd:appinfo>
    </xsd:annotation>
</xsd:element>
Collapse Child Attributes:
Name Type Default Value Use
datatype oval-def:datatype string Optional
operation oval-def:operation equals Optional
mask oval-def:mask false Optional
var_ref oval-def:var_ref Optional
var_check oval-def:var_check all Optional
Collapse Derivation Tree:
Documentation for Open Vulnerability and Assessment Language (OVAL®)

Generated using Liquid Studio - Developer Bundle 21.0.0.0