ELBA-2022-6452

ELBA-2022-6452 - scap-security-guide bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2022-09-29

Description

[0.1.63.1.0.1]
- Update rules related to pam pwhistory remember module to allow both
requisite and required control values [Orabug: 34604895]
- Update accounts_password_pam_retry rule to align it with DISA requirements
OL08-00-020102, OL08-00-020103, and OL08-00-020104 [Orabug: 34604895]
- Create mount_option_home and use it in OL8 [Orabug: 34604895]
- Update rule no_empty_passwords to include the password-auth file in
OVAL check and rule wording [Orabug: 34604895]
- Introduce the rule accounts_passwords_pam_faillock_dir to cover
DISA requirements OL08-00-020016 and OL08-00-020017 [Orabug: 34604895]
- Introduce rule account_disable_inactivity_system_auth to cover
DISA requirement OL08-00-020260 [Orabug: 34604895]
- Add automation content to rule accounts_passwords_pam_faillock_audit and include
it in the OL8 stig profile [Orabug: 34604895]
- Add OVAL content to rule fapolicy_default_deny and include it on the
OL8 stig profile [Orabug: 34604895]
- Add automation content to rule rule account_password_selinux_faillock_dir
and include it on the OL8 stig profile [Orabug: 34604895]
- Create rule to cover DISA requirements OL08-00-020018 and OL08-00-020019 [Orabug: 34604895]
- Update sysctl template OVAL [Orabug: 34604895]
- Update accounts_password template OVAL [Orabug: 34604895]

[0.1.63-1]
- Update to the latest upstream release (RHBZ#2116347)
- Update RHEL8 STIG profile to V1R7 (RHBZ#2116408)
- Select grub2_disable_recovery in OSPP Profile (RHBZ#2117308)
- Use authselect minimal profile in OSPP Profile (RHBZ#2117306)
- Improve rules for CIS level1 partition options (RHBZ#2117510)

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	scap-security-guide-0.1.63-1.0.1.el8_6.src.rpm	6ad15d888c5565a511f2ccddbdb14ad8	-
	scap-security-guide-0.1.63-1.0.1.el8_6.noarch.rpm	f042180beaf1592357c41727e9eec48d	-
	scap-security-guide-doc-0.1.63-1.0.1.el8_6.noarch.rpm	f7a3e8e359f1ddcfc946df402b534688	-
Oracle Linux 8 (x86_64)	scap-security-guide-0.1.63-1.0.1.el8_6.src.rpm	6ad15d888c5565a511f2ccddbdb14ad8	-
	scap-security-guide-0.1.63-1.0.1.el8_6.noarch.rpm	f042180beaf1592357c41727e9eec48d	-
	scap-security-guide-doc-0.1.63-1.0.1.el8_6.noarch.rpm	f7a3e8e359f1ddcfc946df402b534688	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team