Discuss adding additional OVAL 5.11.2 Windows 'user' attributes to OVAL 6.0.1 Windows user_sid test

[vanderpol]

@OVAL-Community/oval-board-members

Back in 2013 there was a proposal for adding a few more attributes to the Windows 'user' test, including "full_name", "comment" and "password_age_days", OVALProject/Language#168 These were eventually added to 5.11.2 in 2016, but also in 5.11.2 the Windows 'user' test was deprecated, replaced by the 'user_sid' test. Unfortunately, these new attributes were not ported to the 'user_sid' test.

I should have ported these attributes in OVAL 5.12 when I ported the "user" and "group" attributes from the 'user' test to 'user_sid'.

I've been working implementing these attributes to correctly support the deprecated 'user' test, and the primary field we 'need' for some new content is the password_age_days.

I'm proposing that we add the 'full_name', 'comment', and 'password_age_days' attributes to the user_sid test for OVAL 6.0.1 and potentially back port this to OVAL 5.12.1.

I would add the rest of the attributes from the 'user' test to 'user_sid' but haven't had a lot of success getting valid data from the remainder of the fields from the API.

Thoughts?

[solind]

You're thinking of putting them into the item and state (and not in the object), correct?

[vanderpol]

Correct, just the item and state