-
Tue Sep 20 2022 Edgar Aguilar <edgar.aguilar@oracle.com> - 0.1.63.1.0.1
- Update rules related to pam pwhistory remember module to allow both
requisite and required control values [Orabug: 34604895]
- Update accounts_password_pam_retry rule to align it with DISA requirements
OL08-00-020102, OL08-00-020103, and OL08-00-020104 [Orabug: 34604895]
- Create mount_option_home and use it in OL8 [Orabug: 34604895]
- Update rule no_empty_passwords to include the password-auth file in
OVAL check and rule wording [Orabug: 34604895]
- Introduce the rule accounts_passwords_pam_faillock_dir to cover
DISA requirements OL08-00-020016 and OL08-00-020017 [Orabug: 34604895]
- Introduce rule account_disable_inactivity_system_auth to cover
DISA requirement OL08-00-020260 [Orabug: 34604895]
- Add automation content to rule accounts_passwords_pam_faillock_audit and include
it in the OL8 stig profile [Orabug: 34604895]
- Add OVAL content to rule fapolicy_default_deny and include it on the
OL8 stig profile [Orabug: 34604895]
- Add automation content to rule rule account_password_selinux_faillock_dir
and include it on the OL8 stig profile [Orabug: 34604895]
- Create rule to cover DISA requirements OL08-00-020018 and OL08-00-020019 [Orabug: 34604895]
- Update sysctl template OVAL [Orabug: 34604895]
- Update accounts_password template OVAL [Orabug: 34604895]
-
Mon Aug 15 2022 Watson Sato <wsato@redhat.com> - 0.1.63-1
- Update to the latest upstream release (RHBZ#2116347)
- Update RHEL8 STIG profile to V1R7 (RHBZ#2116408)
- Select grub2_disable_recovery in OSPP Profile (RHBZ#2117308)
- Use authselect minimal profile in OSPP Profile (RHBZ#2117306)
- Improve rules for CIS level1 partition options (RHBZ#2117510)
-
Tue May 17 2022 Watson Sato <wsato@redhat.com> - 0.1.60-9
- Fix validation of OVAL 5.10 content (RHBZ#2082556)
- Fix Ansible sysctl remediation (RHBZ#2082556)
-
Tue May 03 2022 Watson Sato <wsato@redhat.com> - 0.1.60-8
- Update to ensure a sysctl option is not defined in multiple files (RHBZ#2082556)
- Update RHEL8 STIG profile to V1R6 (RHBZ#2082556)
-
Thu Feb 24 2022 Watson Sato <wsato@redhat.com> - 0.1.60-7
- Resize ANSSI kickstart partitions to accommodate GUI installs (RHBZ#2058033)
-
Wed Feb 23 2022 Matthew Burket <mburket@redhat.com> - 0.1.60-6
- Fix another issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014485)
-
Mon Feb 21 2022 Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
- Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2055860)
- Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014485)
- Update rule enable_fips_mode to check only for technical state (RHBZ#2014485)
-
Wed Feb 16 2022 Watson Sato <wsato@redhat.com> - 0.1.60-4
- Fix Ansible service disabled tasks (RHBZ#2014485)
- Set rule package_krb5-workstation_removed as not applicable on RHV (RHBZ#2055149)
-
Mon Feb 14 2022 Gabriel Becker <ggasparb@redhat.com> - 0.1.60-3
- Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2049555)
- Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2049555)
- Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2026301)
- Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2030966)
- Update GRUB2 rule descriptions (RHBZ#2014485)
- Make package_rear_installed not applicable on AARCH64 (RHBZ#2014485)
-
Fri Feb 11 2022 Watson Sato <wsato@redhat.com> - 0.1.60-2
- Update RHEL8 STIG profile to V1R5 (RHBZ#2049555)
- Align audit rules for OSPP profile (RHBZ#2000264)
- Fix rule selection in ANSSI Enhanced profile (RHBZ#2053587)