ELBA-2023-0829

ELBA-2023-0829 - scap-security-guide bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2023-03-01

Description

[0.1.66-2.0.1]
- Update rules dealing with sshd_config to look into files added to the include
keyword [Orabug: 34893225]
- Update remediation in sebool_secure_mode_insmod which wasn't letting the system boot when
running anssi-high profile [Orabug: 34893225]
- Update OL stig profile rule selection remove sshd_disable_compression [Orabug: 35017186]
- Introduce new rules, sshd_use_approved_kex_ordered_stig, configure_bashrc_tmux,
configure_tmux_lock_keybinding [Orabug: 35017186]
- Update rules modifying pam files to handle /etc/pam.d/system-auth precedence over
other configuration files [Orabug: 35017186]
- Update version of stig profiles to V1R5 [Orabug: 35017186]

[0.1.66-2]
- Unselect rule logind_session_timeout (RHBZ#2168079)

[0.1.66-1]
- Rebase to a new upstream release 0.1.66 (RHBZ#2168079)
- Update RHEL8 STIG profile to V1R9 (RHBZ#2168075)
- Fix levels of CIS rules (RHBZ#2168072)
- Remove unused RHEL8 STIG control file (RHBZ#2168069)
- Fix handling of space in sudo_require_reauthentication (RHBZ#2168066)
- Add rule for audit immutable login uids (RHBZ#2168063)
- Fix remediation of audit watch rules (RHBZ#2168060)
- Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2168057)
- Fix applicability of kerberos rules (RHBZ#2168054)
- Add support rainer scripts in rsyslog rules (RHBZ#2168050)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	scap-security-guide-0.1.66-2.0.1.el8_7.src.rpm	85f4e9e54c75683a1a49d279e45439dd645a2a2b93fd287c52481b79c90ae490	-	ol8_aarch64_appstream
	scap-security-guide-0.1.66-2.0.1.el8_7.noarch.rpm	48835d08011fb99fdf24af3836131b5a3dbca8b23936b4638e725c484ec39c7a	-	ol8_aarch64_appstream
	scap-security-guide-doc-0.1.66-2.0.1.el8_7.noarch.rpm	0f7165804d3dcfd6c903cbfd09bc706f462ef2816e4a9ba48b14bcd98fa6f845	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	scap-security-guide-0.1.66-2.0.1.el8_7.src.rpm	85f4e9e54c75683a1a49d279e45439dd645a2a2b93fd287c52481b79c90ae490	-	ol8_x86_64_appstream
	scap-security-guide-0.1.66-2.0.1.el8_7.noarch.rpm	48835d08011fb99fdf24af3836131b5a3dbca8b23936b4638e725c484ec39c7a	-	ol8_x86_64_appstream
	scap-security-guide-doc-0.1.66-2.0.1.el8_7.noarch.rpm	0f7165804d3dcfd6c903cbfd09bc706f462ef2816e4a9ba48b14bcd98fa6f845	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team