ELBA-2022-6576

ELBA-2022-6576 - scap-security-guide bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2022-10-07

Description

[0.1.63-1.0.1]
- Update rhel7 project profiles to use oracle gpgkey [Orabug: 33612582]
- Update rhel7 profiles to generate Oracle Linux 7 content [Orabug: 33612582]
- Update source to generate Oracle Linux 7 content [Orabug: 33612582]
- Use separate rule for each audit syscall in pci-dss profile [Orabug: 33612582]
- Add ntpd and chronyd OL approved servers support [Orabug: 33612582]
- Add UEFI boot loader rules to Oracle Linux 7 profiles [Orabug: 33612582]
- Fix OL7 mapping in stable_profile_ids test [Orabug: 33612582]
- Update OL7 Essential Eight profile [Orabug: 33612582]
- Disable cis profile [Orabug: 33612582]
- Disable new CIS and stig_gui profiles for RHEL7 product [Orabug: 34195638]
- Bump OL7 STIG profile version to v2r8 [Orabug: 34492873]
- Allow configurations in sudo rules to appear in multiple files [Orabug: 34492873]
- Update OVAL content for auditd_name_format rule [Orabug: 34664858]
- Update regex for audit_rules_suid_privilege_function rule [Orabug: 34664858]
- Introduce mount_option_home template [Orabug: 34664858]
- Introduce support for 'at'-includes in sudoers files [Orabug: 34664858]

[0.1.63-1]
- Update to the latest upstream release (RHBZ#2116359)
- Fix SSH Key permissions (RHBZ#2021258)
- Remove PCI-DSS Benchmark(RHBZ2038165)
- Updated source of CVE data feed(RHBZ#2028432)
- Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
- Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
- Fix check of enable_fips_mode on s390x (RHBZ#2116359)
- Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	scap-security-guide-0.1.63-1.0.1.el7_9.src.rpm	b2a54a0d55038c329389f553e1c2fa42	-
	scap-security-guide-0.1.63-1.0.1.el7_9.noarch.rpm	349698a3ebee6fe2666b054f13f652eb	-
	scap-security-guide-doc-0.1.63-1.0.1.el7_9.noarch.rpm	c752b3f23d9cee91b05a6e755cce97b9	-
Oracle Linux 7 (x86_64)	scap-security-guide-0.1.63-1.0.1.el7_9.src.rpm	b2a54a0d55038c329389f553e1c2fa42	-
	scap-security-guide-0.1.63-1.0.1.el7_9.noarch.rpm	349698a3ebee6fe2666b054f13f652eb	-
	scap-security-guide-doc-0.1.63-1.0.1.el7_9.noarch.rpm	c752b3f23d9cee91b05a6e755cce97b9	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team