<xsd:element name="trusted_state" substitutionGroup="oval-def:state">
<xsd:annotation>
<xsd:documentation />
</xsd:annotation>
<xsd:complexType>
<xsd:complexContent>
<xsd:extension base="oval-def:StateType">
<xsd:sequence>
<xsd:element name="username" type="oval-def:EntityStateStringType" minOccurs="1" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>This is the name of the user being checked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeusername" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:username">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the username entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="uid" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The user's ID</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeuid" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:uid">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the uid entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="password" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>This is the encrypted version of the user's password</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepassword" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:password">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the password entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="account_owner" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The Account owner for pseudo-users</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeaccount_owner" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:account_owner">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the account_owner entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="boot_auth" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Boot authorization</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeboot_auth" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:boot_auth">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the boot_auth entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="audit_id" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>getprpwaid uses the audit ID rather than the UID</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeaudit_id" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:audit_id">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the audit_id entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="audit_flag" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation />
<xsd:appinfo>
<sch:pattern id="truststeaudit_flag" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:audit_flag">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the audit_flag entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_change_min" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Minimum time between password changes</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_change_min" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_change_min">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_change_min entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_max_size" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Maximum password length in characters</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_max_size" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_max_size">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_max_size entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_expiration" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Password expiration time in seconds</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_expiration" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_expiration">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_expiration entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_life" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Trusted lifetime, after which the account is locked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_life" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_life">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_life entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_change_s" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Time of last successful password change</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_change_s" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_change_s">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_change_s entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_change_u" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Time of last unsuccessful password change</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_change_u" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_change_u">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_change_u entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="acct_expire" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Absolute account lifetime in seconds</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeacct_expire" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:acct_expire">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the acct_expire entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="max_llogin" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Maximum time allowed between logins before the account is locked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststemax_llogin" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:max_llogin">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the max_llogin entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="exp_warning" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The time in seconds before expiration when a warning will appear</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeexp_warning" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:exp_warning">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the exp_warning entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="usr_chg_pw" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Who can change this user's password</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststeusr_chg_pw" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:usr_chg_pw">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the usr_chg_pw entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="gen_pw" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Allows user to use system-generated passwords</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststegen_pw" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:gen_pw">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the gen_pw entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_restrict" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Whether a triviality check is performed on user-generated passwords</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_restrict" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_restrict">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_restrict entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_null" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Determines if null passwords are allowed for this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_null" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_null">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_null entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_gen_char" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Allows password generator to use random printable ASCII characters</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_gen_char" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_gen_char">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_gen_char entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_gen_let" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Allows password generator to use random letters</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_gen_let" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_gen_let">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_gen_let entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_time" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Specifies the times when the user may login to this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststelogin_time" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:login_time">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the login_time entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="pw_changer" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The user ID of the user who last changed the password on the user's account, if it was not the account owner</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststepw_changer" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:pw_changer">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the pw_changer entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_time_s" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The time of the last successful login using this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststelogin_time_s" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:login_time_s">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the login_time_s entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_time_u" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The time of the last unsuccessful login using this account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststelogin_time_u" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:login_time_u">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the login_time_u entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_tty_s" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The terminal or remote host associated with the last successful login to the account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststelogin_tty_s" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:login_tty_s">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the login_tty_s entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="login_tty_u" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The terminal or remote hosts associated with the last unsuccessful login to the account</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststelogin_tty_u" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:login_tty_u">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the login_tty_u entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="num_u_logins" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The number of unsuccessful login attempts since that last successful login</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststenum_u_logins" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:num_u_logins">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the num_u_logins entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="max_u_logins" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The maximum number of unsuccessful login attempts before the account is locked</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststemax_u_logins" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:max_u_logins">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the max_u_logins entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="lock_flag" type="oval-def:EntityStateStringType" minOccurs="0" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Indicates whether the administrative lock on the account is set</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="truststelock_flag" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="hpux-def:trusted_state/hpux-def:lock_flag">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the lock_flag entity of a trusted_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
</xsd:sequence>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
</xsd:element>
|