ELBA-2022-10103

ELBA-2022-10103 - scap-security-guide bug fix update

Type:	BUG
Severity:	NA
Release Date:	2022-12-22

Description

[0.1.63-4.0.2]
- Update rules that modify pwquality.conf to delete confs in pwquality.conf.d
so it ensures no wrong confs exist [Orabug: 34893225]
- Allow several non-conflicting entries of the timestamp_timeout config entry
in sudoers files [Orabug: 34893225]
- Update fapolicy_default_deny to look into compiled.rules [Orabug: 34893225]
- Align OL08-00-020352 better by ignoring .bash_history file, and OL08-00-010120
by better detect locked passwords [Orabug: 34893225]
- Update rules dealing with sshd_config to look into files added to the include
keyword [Orabug: 34893225]
- Update remediations in two rules which wasn't letting the system boot when
running anssi-high profile [Orabug: 34893225]
- Update STIG version to V1R4 [Orabug: 34893225]
- Update rules accounts_password_set_min_life_existing and
accounts_password_set_max_life_existing to ignore non-interactive users
[Orabug: 34905591]

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	scap-security-guide-0.1.63-4.0.2.el8.src.rpm	51d4d85f7a2cd557693aacdd281bf111	-
	scap-security-guide-0.1.63-4.0.2.el8.noarch.rpm	fd7a9853ece34519ed66f4e13067eb1f	-
	scap-security-guide-doc-0.1.63-4.0.2.el8.noarch.rpm	4c4c0e123cff56ac7312ec1b13d16b3c	-
Oracle Linux 8 (x86_64)	scap-security-guide-0.1.63-4.0.2.el8.src.rpm	51d4d85f7a2cd557693aacdd281bf111	-
	scap-security-guide-0.1.63-4.0.2.el8.noarch.rpm	fd7a9853ece34519ed66f4e13067eb1f	-
	scap-security-guide-doc-0.1.63-4.0.2.el8.noarch.rpm	4c4c0e123cff56ac7312ec1b13d16b3c	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team