user account, group account, or logon session. If an operation other than equals is used to identify the matching trustees, then the resulting matches MUST be limited to the trustees explicitly referenced in the file or directory's security descriptor. filter oval-def:filter 0..* false Allows for the explicit inclusion or exclusion of from the set of collected by a Please see the OVAL Language Specification [2] for additional information. FileEffectiveRights53Behaviors The construct defines the behaviors that direct how the FileEffectiveRights53Behaviors collects from the fileeffectiverights53_object fileeffectiverights53_items system. Note that using these behaviors may result in some unique results. For example, a double negative type condition might be created where an object entity says include everything except a specific item, but a behavior is used that might then add that item back in. Also note that construct extends the construct so the FileEffectsRights53Behaviors FileBehaviors max_depth and recurse_direction behaviors are not listed here. Attribute Type Possible Values Description Defines whether or not include_group boolean 'true' the group SID should be collected when the 'false' trustee_sid property specifies a group SID.
user account, group account, or logon session. If an operation other than equals is used to identify the matching trustees, then the resulting matches MUST be limited to the trustees explicitly referenced in the file or directory's security descriptor. filter oval-def:filter 0..* false Allows for the explicit inclusion or exclusion of from the set of collected by a Please see the OVAL Language Specification [2] for additional information. FileEffectiveRights53Behaviors The FileEffectiveRights53Behaviors construct defines the behaviors that direct how the fileeffectiverights53_object collects fileeffectiverights53_items from the system. Note that using these behaviors may result in some unique results. For example, a double negative type condition might be created where an object entity says include everything except a specific item, but a behavior is used that might then add that item back in. Also note that FileEffectsRights53Behaviors construct extends the FileBehaviors construct so the max_depth and recurse_direction behaviors are not listed here. Attribute Type Possible Values Description include_group boolean 'true' 'false' Defines whether or not the group SID should be collected when the trustee_sid property specifies a group SID.
oval-windows-extension-specification_12-18-2014.docx