ELBA-2022-4647

ELBA-2022-4647 - scap-security-guide bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2022-05-24

Description

[0.1.57-8.0.1]
- Update ol7 stig profile to align it with DISA's v2r6 update [Orabug: 33881982]
- Add ol7 as platform in bash files included in ol7 profiles [Orabug: 33881982]
- Add automated content for system accounts rules.This includes ansible,
bash, OVAL and tests. [Orabug: 33881982]
- Remove bash remediation for accounts_authorized_local_users [Orabug: 33793054]
- Update rhel7 project profiles to use oracle gpgkey [Orabug: 33612582]
- Update rhel7 profiles to generate Oracle Linux 7 content [Orabug: 33612582]
- Update source to generate Oracle Linux 7 content [Orabug: 33612582]
- Use separate rule for each audit syscall in pci-dss profile [Orabug: 33612582]
- Add ntpd and chronyd OL approved servers support [Orabug: 33612582]
- Add UEFI boot loader rules to Oracle Linux 7 profiles [Orabug: 33612582]
- Fix OL7 mapping in stable_profile_ids test [Orabug: 33612582]
- Update OL7 Essential Eight profile [Orabug: 33612582]
- Disable notapplicable ctrlaltdel remediation comment [Orabug: 33612582]
- Add ol7 stig v1r1 profile and mark draft one as deprecated [Orabug: 33612582]
- Disable cis profile [Orabug: 33612582]
- Update OL7 stig profile to be aligned with DISA STIG v2r4 update [Orabug: 33612582]
- Update config path for audisp plugin in OL8 [Orabug: 33612582]
- Update existing rules text, oval check, and bash remediations to be aligned
with DISA STIG v2r4 and v2r5 profile [Orabug: 33612582]
- Implement manual rules for OL7 DISA STIG v2r4 and v2r5 requirements
currently not covered [Orabug: 33612582]
- Implement stig_gui profile for OL7 [Orabug: 33612582]
- Disable new CIS and stig_gui profiles for RHEL7 product [Orabug: 34195638]

[0.1.57-8]
- Remove warning how to override audit buffer (RHBZ#1993822)

[0.1.57-7]
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	scap-security-guide-0.1.57-8.0.1.el7_9.src.rpm	8efa23acce7df9475b620b0e5b4c91f1	-
	scap-security-guide-0.1.57-8.0.1.el7_9.noarch.rpm	5f13c1e81a28fc20bbfbb00789582ed6	-
	scap-security-guide-doc-0.1.57-8.0.1.el7_9.noarch.rpm	bd9ba4a3fd3b022603eaede35a1d248c	-
Oracle Linux 7 (x86_64)	scap-security-guide-0.1.57-8.0.1.el7_9.src.rpm	8efa23acce7df9475b620b0e5b4c91f1	-
	scap-security-guide-0.1.57-8.0.1.el7_9.noarch.rpm	5f13c1e81a28fc20bbfbb00789582ed6	-
	scap-security-guide-doc-0.1.57-8.0.1.el7_9.noarch.rpm	bd9ba4a3fd3b022603eaede35a1d248c	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team