Present to modules only the rules they use¶
So that the om node compliance env –module <my module> action displays useful information. To do so,
make use of ruleset in moduleset encapsulation.
limit root-level public contextual rulesets to a minimum.
Minimize direct ruleset attachments¶
So that operators don”t have to handle ruleset attachments and only have to care about modulesets. To do so, make use of ruleset in moduleset encapsulation.
A reference information should not be duplicated. You can setup a ruleset to store this reference and encapsulate it in other rulesets. Changing the reference information will be simpler and you will avoid the risk of not changing all duplicates.