dmiller f1b911696f Fix embedded Linux osclasses ...

Instead of 'Class Vendor | Linux | 2.6.X | device', we will use two lines:
Class Linux | Linux | 2.6.X | device
Class Vendor | embedded || device

This allows us to better track separate CPEs for hardware and OS, as well as
guarantee that Linux kernels will get the cpe:/o:linux:linux_kernel CPE, which
is important for vulnerability analysis.

This change also improves some auto-CPEs by matching anywhere in the line,
instead of just the beginning of the fingerprint name.
[ci skip]

2015-10-09 02:03:24 +00:00

4.2 MiB

Raw Blame History

View Raw