ELBA-2022-4647

ELBA-2022-4647 - scap-security-guide bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2022-05-24

Description

[0.1.57-8.0.1]
- Update ol7 stig profile to align it with DISA's v2r6 update [Orabug: 33881982]
- Add ol7 as platform in bash files included in ol7 profiles [Orabug: 33881982]
- Add automated content for system accounts rules.This includes ansible,
bash, OVAL and tests. [Orabug: 33881982]
- Remove bash remediation for accounts_authorized_local_users [Orabug: 33793054]
- Update rhel7 project profiles to use oracle gpgkey [Orabug: 33612582]
- Update rhel7 profiles to generate Oracle Linux 7 content [Orabug: 33612582]
- Update source to generate Oracle Linux 7 content [Orabug: 33612582]
- Use separate rule for each audit syscall in pci-dss profile [Orabug: 33612582]
- Add ntpd and chronyd OL approved servers support [Orabug: 33612582]
- Add UEFI boot loader rules to Oracle Linux 7 profiles [Orabug: 33612582]
- Fix OL7 mapping in stable_profile_ids test [Orabug: 33612582]
- Update OL7 Essential Eight profile [Orabug: 33612582]
- Disable notapplicable ctrlaltdel remediation comment [Orabug: 33612582]
- Add ol7 stig v1r1 profile and mark draft one as deprecated [Orabug: 33612582]
- Disable cis profile [Orabug: 33612582]
- Update OL7 stig profile to be aligned with DISA STIG v2r4 update [Orabug: 33612582]
- Update config path for audisp plugin in OL8 [Orabug: 33612582]
- Update existing rules text, oval check, and bash remediations to be aligned
with DISA STIG v2r4 and v2r5 profile [Orabug: 33612582]
- Implement manual rules for OL7 DISA STIG v2r4 and v2r5 requirements
currently not covered [Orabug: 33612582]
- Implement stig_gui profile for OL7 [Orabug: 33612582]
- Disable new CIS and stig_gui profiles for RHEL7 product [Orabug: 34195638]

[0.1.57-8]
- Remove warning how to override audit buffer (RHBZ#1993822)

[0.1.57-7]
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	scap-security-guide-0.1.57-8.0.1.el7_9.src.rpm	22f4fb0b5ea4dd1c50271de690064bfd0fce5ef5ad3c8b5eb9e7ceed2f9929cb	ELBA-2024-12577	ol7_aarch64_latest
	scap-security-guide-0.1.57-8.0.1.el7_9.src.rpm	22f4fb0b5ea4dd1c50271de690064bfd0fce5ef5ad3c8b5eb9e7ceed2f9929cb	ELBA-2024-12577	ol7_aarch64_u9_patch
	scap-security-guide-0.1.57-8.0.1.el7_9.noarch.rpm	bf89597679d1a5cc035b71a26e60f9caa370eef83ab48969457b4e0ff9c3ec33	ELBA-2024-12577	ol7_aarch64_latest
	scap-security-guide-0.1.57-8.0.1.el7_9.noarch.rpm	bf89597679d1a5cc035b71a26e60f9caa370eef83ab48969457b4e0ff9c3ec33	ELBA-2024-12577	ol7_aarch64_u9_patch
	scap-security-guide-doc-0.1.57-8.0.1.el7_9.noarch.rpm	ee90702ac137031e57c509df022e7dcbec20bbc828709a57741cce0aa862329d	ELBA-2024-12577	ol7_aarch64_latest
	scap-security-guide-doc-0.1.57-8.0.1.el7_9.noarch.rpm	ee90702ac137031e57c509df022e7dcbec20bbc828709a57741cce0aa862329d	ELBA-2024-12577	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	scap-security-guide-0.1.57-8.0.1.el7_9.src.rpm	22f4fb0b5ea4dd1c50271de690064bfd0fce5ef5ad3c8b5eb9e7ceed2f9929cb	ELBA-2024-12577	ol7_x86_64_latest
	scap-security-guide-0.1.57-8.0.1.el7_9.src.rpm	22f4fb0b5ea4dd1c50271de690064bfd0fce5ef5ad3c8b5eb9e7ceed2f9929cb	ELBA-2024-12577	ol7_x86_64_u9_patch
	scap-security-guide-0.1.57-8.0.1.el7_9.noarch.rpm	bf89597679d1a5cc035b71a26e60f9caa370eef83ab48969457b4e0ff9c3ec33	ELBA-2024-12577	ol7_x86_64_latest
	scap-security-guide-0.1.57-8.0.1.el7_9.noarch.rpm	bf89597679d1a5cc035b71a26e60f9caa370eef83ab48969457b4e0ff9c3ec33	ELBA-2024-12577	ol7_x86_64_u9_patch
	scap-security-guide-doc-0.1.57-8.0.1.el7_9.noarch.rpm	ee90702ac137031e57c509df022e7dcbec20bbc828709a57741cce0aa862329d	ELBA-2024-12577	ol7_x86_64_latest
	scap-security-guide-doc-0.1.57-8.0.1.el7_9.noarch.rpm	ee90702ac137031e57c509df022e7dcbec20bbc828709a57741cce0aa862329d	ELBA-2024-12577	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team