Darren Moffat writes about the new security compliance framework added in Oracle Solaris 11.1, the emerging Security Content Automation Protol.
"One of the important parts is the OVAL (Open Vulnerability Assesment Language) standard [which] allows us to write a checkable security policy and verify it against running systems."