Changelog for
scap-security-guide-doc-0.1.69-2.el9_2.rocky.0.1.noarch.rpm :
* Wed Sep 13 2023 Release Engineering
- 0.1.69-2.rocky.0.1- Add Rocky Linux as derivative of RHEL
* Thu Aug 17 2023 Jan Černý - 0.1.69-2- Remove OpenSSH crypto policy hardening rules from STIG profile (RHBZ#2228447)- Fix ANSSI High profile with secure boot (RHBZ#2228447)
* Thu Aug 10 2023 Jan Černý - 0.1.69-1- Rebase to a new upstream release 0.1.69 (RHBZ#2228447)- Fixed excess quotes in journald configuration files (RHBZ#2228439)- Change rules checking password age to apply only to local users (RHBZ#2228467)- update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2228431)- Correct URL used to download CVE checks. (RHBZ#2228469)- Change rules checking home directories to apply only to local users (RHBZ#2228462)
* Mon Feb 13 2023 Watson Sato - 0.1.66-1- Rebase to a new upstream release 0.1.66 (RHBZ#2169443)- Fix remediation of audit watch rules (RHBZ#2169441)- Fix check firewalld_sshd_port_enabled (RHBZ#2169443)- Fix accepted control flags for pam_pwhistory (RHBZ#2169443)- Unselect rule logind_session_timeout (RHBZ#2169443)- Add support rainer scripts in rsyslog rules (RHBZ#2169445)
* Thu Aug 25 2022 Gabriel Becker - 0.1.63-5- OSPP: fix rule related to coredump (RHBZ#2081688)
* Tue Aug 23 2022 Vojtech Polasek - 0.1.63-4- use sysctl_kernel_core_pattern rule again in RHEL9 OSPP (RHBZ#2081688)
* Thu Aug 11 2022 Matej Tyc - 0.1.63-3- Readd rules to the benchmark to be compatible across all minor versions of RHEL9 (RHBZ#2117669)
* Wed Aug 10 2022 Vojtech Polasek - 0.1.63-2- OSPP: utilize different audit rule set for different hardware platforms (RHBZ#1998583)- OSPP: update rules related to coredumps (RHBZ#2081688)- OSPP: update rules related to BPF (RHBZ#2081728)- fix description of require_singleuser_mode (RHBZ#2092799)- fix remediation of OpenSSL cryptopolicy (RHBZ#2108569)- OSPP: use minimal Authselect profile(RHBZ#2114979)
* Mon Aug 01 2022 Vojtech Polasek - 0.1.63-1- Rebase to a new upstream release 0.1.63 (RHBZ#2070563)
* Mon Jul 18 2022 Vojtech Polasek - 0.1.62-2- Remove sysctl_fs_protected_
* rules from RHEL9 OSPP (RHBZ#2081719)- Make rule audit_access_success_ unenforcing in RHEL9 OSPP (RHBZ#2058154)- Drop zipl_vsyscall_argument rule from RHEL9 OSPP profile (RHBZ#2060049)- make sysctl_user_max_user_namespaces in RHEL9 OSPP (RHBZ#2083716)- Remove some sysctl rules related to network from RHEL9 OSPP (RHBZ#2081708)- Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809)- Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840)- Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040)- Remove rules related to remove logging from RHEL9 OSPP (RHBZ#2105016)- Remove sshd_enable_strictmodes from OSPP (RHBZ#2105278)- Remove rules related to NIS services (RHBZ#2096602)- Make rule stricter when checking for FIPS crypto-policies (RHBZ#2057082)
* Wed Jun 01 2022 Matej Tyc - 0.1.62-1- Rebase to a new upstream release (RHBZ#2070563)
* Mon Feb 21 2022 Gabriel Becker - 0.1.60-5- Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2056847)- Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014561)- Update rule enable_fips_mode to check only for technical state (RHBZ#2057457)
* Tue Feb 15 2022 Watson Sato - 0.1.60-4- Fix Ansible service disabled tasks (RHBZ#2014561)- Update description of OSPP profile (RHBZ#2045386)- Add page_aloc.shuffle rules for OSPP profile (RHBZ#2055118)
* Mon Feb 14 2022 Gabriel Becker - 0.1.60-3- Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2045403)- Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2045403)- Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2045403)- Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2014561)- Update GRUB2 rule descriptions (RHBZ#2020623)- Make package_rear_installed not applicable on AARCH64 (RHBZ#2014561)
* Fri Feb 11 2022 Watson Sato - 0.1.60-2- Update OSPP profile (RHBZ#2016038, RHBZ#2043036, RHBZ#2020670, RHBZ#2046289)
* Thu Jan 27 2022 Watson Sato - 0.1.60-1- Rebase to a new upstream release (RHBZ#2014561)
* Wed Dec 08 2021 Gabriel Becker - 0.1.59-1- Rebase to a new upstream release (RHBZ#2014561)- Enable Centos Stream 9 content (RHBZ#2021284)
* Fri Oct 15 2021 Matej Tyc - 0.1.58-1- Rebase to a new upstream release (RHBZ#2014561)- Disable profiles that we disable in RHEL8- Add a VM wait handling to fix issues with tests.