Changelog for
scap-security-guide-rule-playbooks-0.1.73-1.el9_4.alma.1.noarch.rpm :
* Fri Jun 07 2024 Andrew Lukoshko
- 0.1.73-1.alma.1- Add AlmaLinux 9 support
* Mon May 20 2024 Vojtech Polasek - 0.1.73-1- Rebase to a new upstream release 0.1.73 (RHEL-36663)- Correctly parse sudo options even if they are not quoted (RHEL-31976)- Ensure that web links within kickstart files are valid (RHEL-30735)- Align set of allowed SSH ciphers with STIG requirement (RHEL-29684)- Add audit rules on /etc/sysconfig/network-scripts (RHEL-29308)- Remove rule restricting user namespaces from stig_gui profile (RHEL-10416)- Add rule which enables auditing of files within /etc/sysconfig/network-scripts (RHEL-1093)
* Tue Feb 13 2024 Marcus Burghardt - 0.1.72-1- Rebase to a new upstream release 0.1.72 (RHEL-21425)- Check dropin files in /etc/systemd/journald.conf.d/ (RHEL-14484)- Fix remediation to not update comments (RHEL-1484)- Fix package check on SCAP tests for dnf settings (RHEL-17417)- Update description for audit_rules_kernel_module_loading (RHEL-1489)- Disable remediation for /dev/shm options in offline mode (RHEL-16801)- Include explanatory comment in the remediation of CCE-83871-4 (RHEL-17418)
* Tue Dec 05 2023 Jan Černý - 0.1.69-3- Align STIG profile with official DISA STIG for RHEL 9 (RHEL-1807)
* Thu Aug 17 2023 Jan Černý - 0.1.69-2- Remove OpenSSH crypto policy hardening rules from STIG profile (RHBZ#2221697)- Fix ANSSI High profile with secure boot (RHBZ#2221697)
* Wed Aug 09 2023 Jan Černý - 0.1.69-1- Rebase to a new upstream release 0.1.69 (RHBZ#2221697)- Improve CIS benchmark rules related to auditing of kernel module related events (RHBZ#2209657)- SSSD configuration files are now created with correct permissions whenever remediating SSSD related rules (RHBZ#2211511)- add warning about migration of network configuration files when upgrading from RHEL 8 to RHEL 9 (RHBZ#2172555)- Correct URL used to download CVE checks. (RHBZ#2223178)- update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155790)- Fixed excess quotes in journald configuration files (RHBZ#2193169)- Change rules checking home directories to apply only to local users (RHBZ#2203791)- Change rules checking password age to apply only to local users (RHBZ#2213958)- Updated man page (RHBZ#2060028)
* Mon Feb 13 2023 Watson Sato - 0.1.66-1- Rebase to a new upstream release 0.1.66 (RHBZ#2169443)- Fix remediation of audit watch rules (RHBZ#2169441)- Fix check firewalld_sshd_port_enabled (RHBZ#2169443)- Fix accepted control flags for pam_pwhistory (RHBZ#2169443)- Unselect rule logind_session_timeout (RHBZ#2169443)- Add support rainer scripts in rsyslog rules (RHBZ#2169445)
* Thu Aug 25 2022 Gabriel Becker - 0.1.63-5- OSPP: fix rule related to coredump (RHBZ#2081688)
* Tue Aug 23 2022 Vojtech Polasek - 0.1.63-4- use sysctl_kernel_core_pattern rule again in RHEL9 OSPP (RHBZ#2081688)
* Thu Aug 11 2022 Matej Tyc - 0.1.63-3- Readd rules to the benchmark to be compatible across all minor versions of RHEL9 (RHBZ#2117669)
* Wed Aug 10 2022 Vojtech Polasek - 0.1.63-2- OSPP: utilize different audit rule set for different hardware platforms (RHBZ#1998583)- OSPP: update rules related to coredumps (RHBZ#2081688)- OSPP: update rules related to BPF (RHBZ#2081728)- fix description of require_singleuser_mode (RHBZ#2092799)- fix remediation of OpenSSL cryptopolicy (RHBZ#2108569)- OSPP: use minimal Authselect profile(RHBZ#2114979)
* Mon Aug 01 2022 Vojtech Polasek - 0.1.63-1- Rebase to a new upstream release 0.1.63 (RHBZ#2070563)
* Mon Jul 18 2022 Vojtech Polasek - 0.1.62-2- Remove sysctl_fs_protected_
* rules from RHEL9 OSPP (RHBZ#2081719)- Make rule audit_access_success_ unenforcing in RHEL9 OSPP (RHBZ#2058154)- Drop zipl_vsyscall_argument rule from RHEL9 OSPP profile (RHBZ#2060049)- make sysctl_user_max_user_namespaces in RHEL9 OSPP (RHBZ#2083716)- Remove some sysctl rules related to network from RHEL9 OSPP (RHBZ#2081708)- Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809)- Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840)- Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040)- Remove rules related to remove logging from RHEL9 OSPP (RHBZ#2105016)- Remove sshd_enable_strictmodes from OSPP (RHBZ#2105278)- Remove rules related to NIS services (RHBZ#2096602)- Make rule stricter when checking for FIPS crypto-policies (RHBZ#2057082)