RE: [xacml] DLP/NAC Profile WD 6

[Hal Lockhart <hal.lockhart@oracle.com>]

Bill drew my attention to the fact that line 193 has a typo.

It reads: ipAddress-pattern = ipAddressrangelist [ ":" ipAddressrangelist ]

It should read ipAddress-pattern = ipAddressrangelist [ ":" portrangelist ]

Hal

> -----Original Message-----
> From: Hal Lockhart
> Sent: Tuesday, June 10, 2014 6:31 PM
> To: XACML TC
> Subject: [xacml] DLP/NAC Profile WD 6
> 
> I have uploaded wd 6 of the DLP/NAC Profile.
> 
> Richard fixed some typos and added more examples.
> 
> I altered the IP stuff as previously discussed, including examples of
> valid and invalid syntax.
> Please look at sections 2.1.2-2.1.5 closely to see if I screwed up.
> 
> I ran into a formatting problem which Paul Knight solved for me (thank
> you Paul) by inserting the document into the latest template, which
> happens to be a .doc. It looks ok to me, but please look for weird
> format errors.
> 
> Unfortunately we are not quite done.
> 
> 1. Section 1.7 Disclaimer contains no text. If have no disclaimers it
> is time to delete the header.
> 
> 2. I changed ipAddress to ipAddress-value and ipAddress-pattern in
> various places outside of section 2, but the policy examples appear to
> have errors. It looks to me like we are doing a Match using a string
> function to test an ipAddress-value against "acme.com". This occurs at
> lines 592, 766, 923, 1059 and 1188. Elsewhere conversion to string is
> done, but not at these spots. I am not sure what is correct. Is the
> datatype wrong or the "acme.com"? Shouldn't we beusing the new ip
> Address or DNS Name functions if that is what we are checking?
> 
> We are close to finishing this, pleasegive it a close look.
> 
> Hal
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>