<xsd:element name="trusted_item" substitutionGroup="oval-sc:item">
<xsd:annotation>
<xsd:documentation>These items contain account settings for trusted HP-UX installations.</xsd:documentation>
</xsd:annotation>
<xsd:complexType>
<xsd:complexContent>
<xsd:extension base="oval-sc:ItemType">
<xsd:sequence>
<xsd:element name="username" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>This is the name of the user being checked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemtrustitem" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:trustitem">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the trustitem entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="uid" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The user's ID</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemuid" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:uid">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the uid entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="password" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>This is the encrypted version of the user's password</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempassword" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:password">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the password entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="account_owner" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The Account owner for pseudo-users</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemaccount_owner" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:account_owner">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the account_owner entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="boot_auth" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Boot authorization</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemboot_auth" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:boot_auth">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the boot_auth entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="audit_id" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>getprpwaid uses the audit ID rather than the UID</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemaudit_id" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:audit_id">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the audit_id entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="audit_flag" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation />
<xsd:appinfo>
<sch:pattern id="trustitemaudit_flag" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:audit_flag">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the audit_flag entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_change_min" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Minimum time between password changes</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_change_min" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_change_min">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_change_min entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_max_size" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Maximum password length in characters</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_max_size" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_max_size">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_max_size entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_expiration" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Password expiration time in seconds</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_expiration" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_expiration">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_expiration entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_life" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Trusted lifetime, after which the account is locked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_life" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_life">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_life entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_change_s" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Time of last successful password change</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_change_s" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_change_s">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_change_s entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_change_u" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Time of last unsuccessful password change</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_change_u" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_change_u">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_change_u entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="acct_expire" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Absolute account lifetime in seconds</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemacct_expire" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:acct_expire">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the acct_expire entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="max_llogin" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Maximum time allowed between logins before the account is locked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemmax_llogin" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:max_llogin">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the max_llogin entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="exp_warning" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The time in seconds before expiration when a warning will appear</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemexp_warning" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:exp_warning">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the exp_warning entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="usr_chg_pw" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Who can change this user's password</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemusr_chg_pw" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:usr_chg_pw">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the usr_chg_pw entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="gen_pw" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Allows user to use system-generated passwords</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemgen_pw" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:gen_pw">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the gen_pw entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_restrict" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Whether a triviality check is performed on user-generated passwords</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_restrict" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_restrict">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_restrict entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_null" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Determines if null passwords are allowed for this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_null" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_null">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_null entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_gen_char" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Allows password generator to use random printable ASCII characters</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_gen_char" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_gen_char">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_gen_char entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_gen_let" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Allows password generator to use random letters</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_gen_let" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:swlistpw_gen_let">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_gen_let entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_time" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Specifies the times when the user may login to this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemlogin_time" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:login_time">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the login_time entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_changer" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The user ID of the user who last changed the password on the user's account, if it was not the account owner</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitempw_changer" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:pw_changer">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the pw_changer entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_time_s" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The time of the last successful login using this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemlogin_time_s" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:login_time_s">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the login_time_s entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_time_u" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The time of the last unsuccessful login using this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemlogin_time_u" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:login_time_u">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the login_time_u entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_tty_s" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The terminal or remote host associated with the last successful login to the account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemlogin_tty_s" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:login_tty_s">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the login_tty_s entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_tty_u" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The terminal or remote hosts associated with the last unsuccessful login to the account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemlogin_tty_u" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:login_tty_u">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the login_tty_u entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="num_u_logins" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The number of unsuccessful login attempts since that last successful login</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemnum_u_logins" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:num_u_logins">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the num_u_logins entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="max_u_logins" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The maximum number of unsuccessful login attempts before the account is locked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemmax_u_logins" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:max_u_logins">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the max_u_logins entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="lock_flag" type="oval-sc:EntityItemStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Indicates whether the administrative lock on the account is set</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="trustitemlock_flag" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-sc:trusted_item/hpux-sc:lock_flag">
<sch:assert test="not(@datatype) or @datatype='string'">item <sch:value-of select="../@id" /> - datatype attribute for the lock_flag entity of a trusted_item should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
</xsd:sequence>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
</xsd:element>
|
XSD Schema Diagram:
