diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index 47ad47b35..042bfe04b 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -42,6 +42,7 @@ Examples: | component-has-used-by-link | | component-type | | connection-security | + | connection-security | | control-implementation-status | | data-center-alternate | | data-center-count | @@ -123,6 +124,9 @@ Examples: | interconnection-security | | inventory-item-allows-authenticated-scan | | inventory-item-and-component-has-public | + | inventory-item-has-software-name | + | inventory-item-has-software-version | + | inventory-item-has-valid-mac-address | | inventory-item-has-vendor-name | | inventory-item-or-component-has-asset-id | | inventory-item-public | @@ -356,8 +360,6 @@ Examples: | has-system-name-short-PASS.yaml | | has-user-guide-FAIL.yaml | | has-user-guide-PASS.yaml | - | high-impact-inventory-item-has-asset-owner-FAIL.yaml | - | high-impact-inventory-item-has-asset-owner-PASS.yaml | | image-has-checksum-FAIL.yaml | | image-has-checksum-PASS.yaml | | implementation-status-has-remarks-FAIL.yaml | @@ -392,10 +394,6 @@ Examples: | inventory-item-allows-authenticated-scan-PASS.yaml | | inventory-item-and-component-has-public-FAIL.yaml | | inventory-item-and-component-has-public-PASS.yaml | - | inventory-item-has-function-FAIL.yaml | - | inventory-item-has-function-PASS.yaml | - | inventory-item-has-scan-type-FAIL.yaml | - | inventory-item-has-scan-type-PASS.yaml | | inventory-item-has-software-name-FAIL.yaml | | inventory-item-has-software-name-PASS.yaml | | inventory-item-has-software-version-FAIL.yaml | diff --git a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml index 0cc5e6c20..3bd7e3861 100644 --- a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml +++ b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml @@ -1674,9 +1674,7 @@ property.

Describe the virtual appliance and what it is used for.

-

virtual function

- @@ -2445,7 +2443,7 @@ approved.

- + @@ -2484,7 +2482,7 @@ approved.

Asset wasn't running at time of scan.

- + @@ -2522,7 +2520,7 @@ approved.

Asset wasn't running at time of scan.

- + diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index 8932f0b50..9f2e6f05d 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -667,7 +667,7 @@ Container Image Has Checksum Property - + In a FedRAMP SSP, a component that describes a container or operating system image MUST define a checksum property. @@ -729,9 +729,20 @@ A FedRAMP SSP's component MUST reference the existing component(s) that use it via network communication. However, component "{../@uuid}" references a nonexistent component "{@href}". + + + + + + Inventory Item or Component Has Asset ID + + In a FedRAMP SSP, each inventory item and software image component MUST include the asset ID. + + + @@ -739,6 +750,20 @@ + + Inventory Item Has Software Name + + In a FedRAMP SSP, each inventory item MUST include the software name in the inventory item itself or within the linked component. + + Inventory Item Has Software Version + + In a FedRAMP SSP, each inventory item MUST include the software version in the inventory item itself or within the linked component. + + + Inventory Item Has Valid Mac Address + + In a FedRAMP SSP, each inventory item that has a MAC address MUST format the MAC address correctly. + Inventory Item Has Vendor Name