(1) Just curious as to why we wouldn't want to be able to show relationships between Bundles or between Bundles <> SDOs? Not arguing one way or the other, just want to understand the basis for the suggested constraints.
(2) Concur on adding the normative language to disallow relationships between SROs.
Patrick Maroney
Email:
Cell: (609)841-5104
_____________________________
From: John-Mark Gurney <>
Sent: Friday, August 19, 2016 5:41 PM
Subject: Re: [cti] STIX 2.0 RC1
To: Wunder, John A. <>
Cc: <>
Wunder, John A. wrote this message on Fri, Aug 19, 2016 at 18:55 +0000:
> Passing along one suggested change from the MITRE person writing a STIX 2 validator:
>
> Problem: Right now, there’s no normative statement that precludes a Relationship object from pointing to another Relationship object as either the source or target. We said it in the definition of the object, but when writing the validator it seemed like
it would be nice to have a normative statement to reference (that could then be listed in the conformance section).
>
> Suggestion: Add the following statement to the source_ref and target_ref property descriptions on the Relationship object: “The value MUST be an ID reference to a STIX Domain Object (i.e., cannot point to an SRO, Bundle, or Marking Definition)”.
I agree that this should be included, and Terry's comment that it
needs to be added too..
--
John-Mark
---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail. Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
