2021-02-11 13:01:05 +00:00
|
|
|
# SSG build system and tests count with build directory name `build`.
|
|
|
|
|
# For more details see:
|
|
|
|
|
# https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
|
|
|
|
|
%global _vpath_builddir build
|
|
|
|
|
|
2013-10-22 14:09:50 +00:00
|
|
|
Name: scap-security-guide
|
2024-02-09 15:30:53 +00:00
|
|
|
Version: 0.1.72
|
|
|
|
|
Release: 1%{?dist}
|
2013-10-22 14:09:50 +00:00
|
|
|
Summary: Security guidance and baselines in SCAP formats
|
2023-05-31 07:35:55 +00:00
|
|
|
License: BSD-3-Clause
|
2019-02-22 10:30:32 +00:00
|
|
|
URL: https://github.com/ComplianceAsCode/content/
|
|
|
|
|
Source0: https://github.com/ComplianceAsCode/content/releases/download/v%{version}/scap-security-guide-%{version}.tar.bz2
|
2013-10-22 14:09:50 +00:00
|
|
|
BuildArch: noarch
|
2017-03-31 02:39:41 +00:00
|
|
|
|
2020-06-25 12:14:14 +00:00
|
|
|
BuildRequires: libxslt
|
|
|
|
|
BuildRequires: expat
|
|
|
|
|
BuildRequires: openscap-scanner >= 1.2.5
|
|
|
|
|
BuildRequires: cmake >= 2.8
|
2021-02-10 15:29:40 +00:00
|
|
|
# To get python3 inside the buildroot require its path explicitly in BuildRequires
|
|
|
|
|
BuildRequires: /usr/bin/python3
|
2020-06-25 12:14:14 +00:00
|
|
|
BuildRequires: python%{python3_pkgversion}
|
|
|
|
|
BuildRequires: python%{python3_pkgversion}-jinja2
|
|
|
|
|
BuildRequires: python%{python3_pkgversion}-PyYAML
|
2022-05-04 20:36:40 +00:00
|
|
|
BuildRequires: python%{python3_pkgversion}-setuptools
|
2017-03-31 02:39:41 +00:00
|
|
|
Requires: xml-common, openscap-scanner >= 1.2.5
|
2013-10-22 14:09:50 +00:00
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
The scap-security-guide project provides a guide for configuration of the
|
|
|
|
|
system from the final system's security point of view. The guidance is specified
|
|
|
|
|
in the Security Content Automation Protocol (SCAP) format and constitutes
|
|
|
|
|
a catalog of practical hardening advice, linked to government requirements
|
|
|
|
|
where applicable. The project bridges the gap between generalized policy
|
2021-02-10 15:29:40 +00:00
|
|
|
requirements and specific implementation guidelines. The system
|
2014-07-14 14:55:45 +00:00
|
|
|
administrator can use the oscap CLI tool from openscap-scanner package, or the
|
2013-10-22 14:09:50 +00:00
|
|
|
scap-workbench GUI tool from scap-workbench package to verify that the system
|
|
|
|
|
conforms to provided guideline. Refer to scap-security-guide(8) manual page for
|
|
|
|
|
further information.
|
|
|
|
|
|
2015-06-24 08:14:23 +00:00
|
|
|
%package doc
|
2018-03-05 10:25:26 +00:00
|
|
|
Summary: HTML formatted security guides generated from XCCDF benchmarks
|
2015-06-24 08:14:23 +00:00
|
|
|
Requires: %{name} = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
%description doc
|
|
|
|
|
The %{name}-doc package contains HTML formatted documents containing
|
|
|
|
|
hardening guidances that have been generated from XCCDF benchmarks
|
|
|
|
|
present in %{name} package.
|
|
|
|
|
|
2022-11-24 17:52:04 +00:00
|
|
|
%if ( %{defined rhel} && (! %{defined centos}) && (! %{defined eln}) )
|
2021-07-29 15:31:37 +00:00
|
|
|
%package rule-playbooks
|
|
|
|
|
Summary: Ansible playbooks per each rule.
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
Requires: %{name} = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
%description rule-playbooks
|
|
|
|
|
The %{name}-rule-playbooks package contains individual ansible playbooks per rule.
|
|
|
|
|
%endif
|
|
|
|
|
|
2013-10-22 14:09:50 +00:00
|
|
|
%prep
|
2021-06-08 10:53:55 +00:00
|
|
|
%autosetup -p1
|
2013-10-22 14:09:50 +00:00
|
|
|
|
2021-06-08 10:53:55 +00:00
|
|
|
%define cmake_defines_common -DSSG_SEPARATE_SCAP_FILES_ENABLED=OFF -DSSG_BASH_SCRIPTS_ENABLED=OFF -DSSG_BUILD_SCAP_12_DS=OFF
|
|
|
|
|
%define cmake_defines_specific %{nil}
|
2022-11-24 17:52:04 +00:00
|
|
|
%if 0%{?rhel} && ! %{defined eln}
|
2021-07-29 15:31:37 +00:00
|
|
|
%define cmake_defines_specific -DSSG_PRODUCT_DEFAULT:BOOLEAN=FALSE -DSSG_PRODUCT_RHEL%{rhel}:BOOLEAN=TRUE -DSSG_SCIENTIFIC_LINUX_DERIVATIVES_ENABLED:BOOL=OFF -DSSG_CENTOS_DERIVATIVES_ENABLED:BOOL=OFF -DSSG_ANSIBLE_PLAYBOOKS_PER_RULE_ENABLED:BOOL=ON
|
|
|
|
|
%endif
|
|
|
|
|
%if 0%{?centos}
|
|
|
|
|
%define cmake_defines_specific -DSSG_PRODUCT_DEFAULT:BOOLEAN=FALSE -DSSG_PRODUCT_RHEL%{centos}:BOOLEAN=TRUE -DSSG_SCIENTIFIC_LINUX_DERIVATIVES_ENABLED:BOOL=OFF -DSSG_CENTOS_DERIVATIVES_ENABLED:BOOL=ON
|
2021-02-10 15:29:40 +00:00
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
mkdir -p build
|
2013-10-22 14:09:50 +00:00
|
|
|
%build
|
2021-06-08 10:53:55 +00:00
|
|
|
%cmake %{cmake_defines_common} %{cmake_defines_specific}
|
2020-09-23 11:32:36 +00:00
|
|
|
%cmake_build
|
2013-10-22 14:09:50 +00:00
|
|
|
|
|
|
|
|
%install
|
2020-09-23 11:32:36 +00:00
|
|
|
%cmake_install
|
2021-06-08 10:53:55 +00:00
|
|
|
rm %{buildroot}/%{_docdir}/%{name}/README.md
|
|
|
|
|
rm %{buildroot}/%{_docdir}/%{name}/Contributors.md
|
2015-06-24 08:14:23 +00:00
|
|
|
|
2013-10-22 14:09:50 +00:00
|
|
|
%files
|
2017-03-31 02:39:41 +00:00
|
|
|
%{_datadir}/xml/scap/ssg/content
|
2016-06-27 10:31:14 +00:00
|
|
|
%{_datadir}/%{name}/kickstart
|
2021-06-08 10:53:55 +00:00
|
|
|
%{_datadir}/%{name}/ansible/*.yml
|
2021-12-01 16:46:24 +00:00
|
|
|
%{_datadir}/%{name}/tailoring
|
2017-03-31 02:39:41 +00:00
|
|
|
%lang(en) %{_mandir}/man8/scap-security-guide.8.*
|
2015-06-24 08:14:23 +00:00
|
|
|
%doc %{_docdir}/%{name}/LICENSE
|
2022-11-24 17:52:04 +00:00
|
|
|
%if ( %{defined rhel} && (! %{defined centos}) && (! %{defined eln}) )
|
2021-07-29 15:31:37 +00:00
|
|
|
%exclude %{_datadir}/%{name}/ansible/rule_playbooks
|
|
|
|
|
%endif
|
2013-10-22 14:09:50 +00:00
|
|
|
|
2015-06-24 08:14:23 +00:00
|
|
|
%files doc
|
|
|
|
|
%doc %{_docdir}/%{name}/guides/*.html
|
2017-11-01 10:28:19 +00:00
|
|
|
%doc %{_docdir}/%{name}/tables/*.html
|
2013-12-20 18:01:21 +00:00
|
|
|
|
2022-11-24 17:52:04 +00:00
|
|
|
%if ( %{defined rhel} && (! %{defined centos}) && (! %{defined eln}) )
|
2021-07-29 15:31:37 +00:00
|
|
|
%files rule-playbooks
|
|
|
|
|
%defattr(-,root,root,-)
|
|
|
|
|
%{_datadir}/%{name}/ansible/rule_playbooks
|
|
|
|
|
%endif
|
|
|
|
|
|
2013-10-22 14:09:50 +00:00
|
|
|
%changelog
|
2024-02-09 15:30:53 +00:00
|
|
|
* Fri Feb 09 2024 Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.72 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72
|
|
|
|
|
|
2024-01-27 02:13:01 +00:00
|
|
|
* Sat Jan 27 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.71-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
2023-12-19 15:25:20 +00:00
|
|
|
* Tue Dec 19 2023 Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.71 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71
|
|
|
|
|
|
2023-10-12 19:28:53 +00:00
|
|
|
* Thu Oct 12 2023 Matthew Burket <mburket@redhat.com> - 0.1.70-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.70 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70
|
|
|
|
|
|
2023-08-03 11:31:39 +00:00
|
|
|
* Thu Aug 03 2023 Jan Černý <jcerny@redhat.com> - 0.1.69-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.69 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69
|
|
|
|
|
|
2023-07-22 01:08:42 +00:00
|
|
|
* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.68-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
|
|
|
|
|
2023-06-15 11:12:31 +00:00
|
|
|
* Thu Jun 15 2023 Jan Černý <jcerny@redhat.com> - 0.1.68-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.68 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.68
|
|
|
|
|
|
2023-04-12 21:31:10 +00:00
|
|
|
* Wed Apr 12 2023 Matthew Burket <mburket@redhat.com> - 0.1.67-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.67 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.67
|
|
|
|
|
|
|
|
|
|
|
2023-02-03 14:33:57 +00:00
|
|
|
* Fri Feb 03 2023 Vojtech Polasek <vpolasek@redhat.com> - 0.1.66-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.66 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.66
|
|
|
|
|
|
2023-01-21 02:45:23 +00:00
|
|
|
* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.65-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
2022-12-06 15:07:34 +00:00
|
|
|
* Tue Dec 06 2022 Marcus Burghardt <maburgha@redhat.com> - 0.1.65-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.65 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.65
|
|
|
|
|
|
2022-10-04 13:17:11 +00:00
|
|
|
* Tue Oct 04 2022 Watson Sato <wsato@redhat.com> - 0.1.64-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.64 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.64
|
|
|
|
|
|
2022-08-01 13:07:33 +00:00
|
|
|
* Mon Aug 01 2022 Watson Sato <wsato@redhat.com> - 0.1.63-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.63 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.63
|
|
|
|
|
|
2022-07-23 08:07:13 +00:00
|
|
|
* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.62-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
2022-06-09 14:06:25 +00:00
|
|
|
* Thu Jun 09 2022 Vojtech Polasek <vpolasek@redhat.com> - 0.1.62-2
|
|
|
|
|
- rebuild, the release did not get propagated into rawhide
|
|
|
|
|
|
2022-05-30 10:33:14 +00:00
|
|
|
* Mon May 30 2022 Vojtech Polasek <vpolasek@redhat.com> - 0.1.62-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.62 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.62
|
|
|
|
|
|
2022-05-04 20:36:40 +00:00
|
|
|
* Wed May 04 2022 Watson Sato <wsato@redhat.com> - 0.1.61-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.61 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.61
|
|
|
|
|
|
2022-01-28 10:44:16 +00:00
|
|
|
* Fri Jan 28 2022 Watson Sato <wsato@redhat.com> - 0.1.60-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.60 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.60
|
|
|
|
|
|
2022-01-22 00:26:34 +00:00
|
|
|
* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.59-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
|
2021-12-01 16:46:24 +00:00
|
|
|
* Wed Dec 01 2021 Watson Sato <wsato@redhat.com> - 0.1.59-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.59 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.59
|
2021-12-01 17:51:18 +00:00
|
|
|
- Fix loading of jinja files
|
2021-12-01 16:46:24 +00:00
|
|
|
|
2021-09-30 12:07:25 +00:00
|
|
|
* Thu Sep 30 2021 Watson Sato <wsato@redhat.com> - 0.1.58-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.58 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.58
|
|
|
|
|
- Fix license warning.
|
|
|
|
|
|
2021-07-29 15:31:37 +00:00
|
|
|
* Thu Jul 29 2021 Matej Tyc <matyc@redhat.com> - 0.1.57-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.57 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.57
|
|
|
|
|
|
2021-07-23 17:08:28 +00:00
|
|
|
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.56-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
|
|
2021-06-08 10:53:55 +00:00
|
|
|
* Tue Jun 08 2021 Matej Tyc <matyc@redhat.com> - 0.1.56-2
|
|
|
|
|
- Updated the packaging according to the RHEL development trends.
|
|
|
|
|
- Don't ship 1.2 datastreams and Bash remediations.
|
|
|
|
|
- Clean up dependencies and other package metadata.
|
|
|
|
|
- Change the RHEL target.
|
|
|
|
|
|
2021-05-26 13:17:03 +00:00
|
|
|
* Wed May 26 2021 Vojtech Polasek <vpolasek@redhat.com> - 0.1.56-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.56 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.56
|
|
|
|
|
|
2021-03-19 13:24:38 +00:00
|
|
|
* Fri Mar 19 2021 Vojtech Polasek <vpolasek@redhat.com> - 0.1.55-2
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2021-03-19 13:14:32 +00:00
|
|
|
* Fri Mar 19 2021 Vojtech Polasek <vpolasek@redhat.com> - 0.1.55-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.55 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.55
|
|
|
|
|
|
2021-02-10 15:29:40 +00:00
|
|
|
* Fri Feb 12 2021 Matej Tyc <matyc@redhat.com> - 0.1.54-3
|
|
|
|
|
- Moved the spec file closer to the RHEL one.
|
|
|
|
|
|
2021-02-12 08:58:13 +00:00
|
|
|
* Fri Feb 12 2021 Vojtech Polasek <vpolasek@redhat.com> - 0.1.54-2
|
|
|
|
|
- fix definition of build directory
|
|
|
|
|
|
2021-02-05 08:05:17 +00:00
|
|
|
* Fri Feb 05 2021 Vojtech Polasek <vpolasek@redhat.com> - 0.1.54-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.54 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.54
|
|
|
|
|
|
2021-01-27 20:01:35 +00:00
|
|
|
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.53-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
|
|
2020-11-16 14:36:17 +00:00
|
|
|
* Mon Nov 16 2020 Vojtech Polasek <vpolasek@redhat.com> - 0.1.53-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.53 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.53
|
|
|
|
|
|
2020-09-23 11:32:36 +00:00
|
|
|
* Wed Sep 23 2020 Vojtech Polasek <vpolasek@redhat.com> - 0.1.52-3
|
|
|
|
|
- revert previous rework, it did not solve the problem
|
|
|
|
|
|
2020-09-23 10:30:40 +00:00
|
|
|
* Wed Sep 23 2020 Vojtech Polasek <vpolasek@redhat.com> - 0.1.52-2
|
|
|
|
|
- rewrite solution for CMake out of source builds
|
|
|
|
|
|
2020-09-21 07:07:57 +00:00
|
|
|
* Mon Sep 21 2020 Vojtech Polasek <vpolasek@redhat.com> - 0.1.52-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.52 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.52
|
|
|
|
|
|
2020-08-04 07:23:31 +00:00
|
|
|
* Tue Aug 04 2020 Jan Černý <jcerny@redhat.com> - 0.1.51-4
|
|
|
|
|
- Update for new CMake out of source builds
|
|
|
|
|
https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
|
|
|
|
|
- Fix FTBS in Rawhide/F33 (RHBZ#1863741)
|
|
|
|
|
|
2020-08-01 08:56:32 +00:00
|
|
|
* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.51-3
|
|
|
|
|
- Second attempt - Rebuilt for
|
|
|
|
|
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
2020-07-29 10:20:14 +00:00
|
|
|
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.51-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
2020-07-17 10:21:29 +00:00
|
|
|
* Fri Jul 17 2020 Vojtech Polasek <vpolasek@redhat.com> - 0.1.51-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.51 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.51
|
|
|
|
|
|
2020-03-23 13:11:47 +00:00
|
|
|
* Mon Mar 23 2020 Watson Sato <wsato@redhat.com> - 0.1.49-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.49 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.49
|
|
|
|
|
|
2020-01-30 22:57:47 +00:00
|
|
|
* Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.48-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
|
|
|
2020-01-16 12:32:11 +00:00
|
|
|
* Thu Jan 16 2020 Watson Sato <wsato@redhat.com> - 0.1.48-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.48 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.48
|
|
|
|
|
|
2019-12-09 14:21:26 +00:00
|
|
|
* Mon Dec 09 2019 Matěj Týč <matyc@redhat.com> - 0.1.47-2
|
|
|
|
|
- Hotfix of the XML parsing fix.
|
2019-12-09 10:14:30 +00:00
|
|
|
|
|
|
|
|
* Mon Dec 09 2019 Matěj Týč <matyc@redhat.com> - 0.1.47-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.47 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.47
|
|
|
|
|
- Fixed XML parsing of remediation functions.
|
|
|
|
|
|
2019-07-29 10:27:29 +00:00
|
|
|
* Mon Jul 29 2019 Watson Sato <wsato@redhat.com> - 0.1.45-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.45 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.45
|
|
|
|
|
|
2019-07-26 22:50:49 +00:00
|
|
|
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.44-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
|
|
|
2019-05-06 09:09:40 +00:00
|
|
|
* Mon May 06 2019 Watson Yuuma Sato <wsato@redhat.com> - 0.1.44-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.44 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.44
|
|
|
|
|
|
2019-02-22 10:30:32 +00:00
|
|
|
* Fri Feb 22 2019 Watson Yuuma Sato <wsato@redhat.com> - 0.1.43-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.43 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.43
|
|
|
|
|
- Update URL and source URL
|
|
|
|
|
|
2019-02-02 14:54:06 +00:00
|
|
|
* Sat Feb 02 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.42-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
|
|
2018-12-12 12:32:00 +00:00
|
|
|
* Wed Dec 12 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.1.42-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.42 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
|
2018-12-13 16:08:36 +00:00
|
|
|
- Fix man page build dependency on derivative content
|
2018-12-12 12:32:00 +00:00
|
|
|
|
2018-10-01 14:00:58 +00:00
|
|
|
* Mon Oct 01 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.41 release:
|
|
|
|
|
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
|
2018-10-01 14:04:14 +00:00
|
|
|
- Fix Licence of this package
|
2018-10-01 14:00:58 +00:00
|
|
|
|
2018-07-25 15:37:39 +00:00
|
|
|
* Wed Jul 25 2018 Matěj Týč <matyc@redhat.com> - 0.1.40-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.40 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.40
|
|
|
|
|
- Update to use Python3 for build.
|
|
|
|
|
|
2018-07-14 05:48:00 +00:00
|
|
|
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.39-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
|
|
2018-05-04 11:46:25 +00:00
|
|
|
* Fri May 04 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.1.39-2
|
|
|
|
|
- Add python version to python2-jinja2 package
|
|
|
|
|
|
2018-05-04 09:18:59 +00:00
|
|
|
* Fri May 04 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.1.39-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.39 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39
|
|
|
|
|
|
2018-03-06 08:22:33 +00:00
|
|
|
* Mon Mar 05 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-2
|
|
|
|
|
- Add python version to python package prefixes
|
|
|
|
|
|
2018-03-05 09:38:01 +00:00
|
|
|
* Mon Mar 05 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.38 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38
|
|
|
|
|
|
2018-02-09 16:14:48 +00:00
|
|
|
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.37-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
|
|
2018-01-04 16:45:23 +00:00
|
|
|
* Thu Jan 04 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.37 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37
|
|
|
|
|
|
2017-11-01 10:28:19 +00:00
|
|
|
* Wed Nov 01 2017 Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.36 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.36
|
|
|
|
|
|
2017-08-29 16:56:31 +00:00
|
|
|
* Tue Aug 29 2017 Watson Sato <wsato@redhat.com> - 0.1.35-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.35 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.35
|
|
|
|
|
|
2017-07-27 18:14:42 +00:00
|
|
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.34-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
|
|
2017-07-03 13:46:00 +00:00
|
|
|
* Mon Jul 03 2017 Watson Sato <wsato@redhat.com> - 0.1.34-1
|
|
|
|
|
- updated to latest upstream release
|
|
|
|
|
|
2017-05-01 15:00:00 +00:00
|
|
|
* Mon May 01 2017 Martin Preisler <mpreisle@redhat.com> - 0.1.33-1
|
|
|
|
|
- updated to latest upstream release
|
|
|
|
|
|
2017-03-31 02:39:41 +00:00
|
|
|
* Thu Mar 30 2017 Martin Preisler <mpreisle@redhat.com> - 0.1.32-1
|
|
|
|
|
- updated to latest upstream release
|
|
|
|
|
|
2017-02-11 13:09:59 +00:00
|
|
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.31-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
|
|
2016-11-28 20:02:11 +00:00
|
|
|
* Mon Nov 28 2016 Martin Preisler <mpreisle@redhat.com> - 0.1.31-2
|
|
|
|
|
- use make_build and make_install RPM macros
|
|
|
|
|
|
2016-11-28 17:05:27 +00:00
|
|
|
* Mon Nov 28 2016 Martin Preisler <mpreisle@redhat.com> - 0.1.31-1
|
|
|
|
|
- update to the latest upstream release
|
|
|
|
|
- new default location for content /usr/share/scap/ssg
|
|
|
|
|
- install HTML tables in the doc subpackage
|
|
|
|
|
|
2016-06-27 15:08:22 +00:00
|
|
|
* Mon Jun 27 2016 Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-2
|
|
|
|
|
- Correct currently failing parallel SCAP Security Guide build
|
|
|
|
|
|
2016-06-27 10:31:14 +00:00
|
|
|
* Mon Jun 27 2016 Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.30 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
|
|
|
|
|
- Drop shell library for remediation functions since it is not required
|
|
|
|
|
starting from 0.1.30 release any more
|
|
|
|
|
|
2016-05-05 10:10:02 +00:00
|
|
|
* Thu May 05 2016 Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.29-1
|
|
|
|
|
- Update to latest upstream SCAP-Security-Guide-0.1.29 release:
|
|
|
|
|
https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.29
|
2016-05-05 12:04:25 +00:00
|
|
|
- Do not ship Firefox/DISCLAIMER documentation file since it has been removed
|
|
|
|
|
in 0.1.29 upstream release
|
2016-05-05 10:10:02 +00:00
|
|
|
|
2016-02-04 23:41:23 +00:00
|
|
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.28-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
|
|
2016-01-20 07:13:19 +00:00
|
|
|
* Wed Jan 20 2016 Šimon Lukašík <slukasik@redhat.com> - 0.1.28-1
|
|
|
|
|
- upgrade to the latest upstream release
|
|
|
|
|
|
2015-12-11 20:23:18 +00:00
|
|
|
* Fri Dec 11 2015 Šimon Lukašík <slukasik@redhat.com> - 0.1.27-1
|
|
|
|
|
- update to the latest upstream release
|
|
|
|
|
|
2015-10-20 06:49:45 +00:00
|
|
|
* Tue Oct 20 2015 Šimon Lukašík <slukasik@redhat.com> - 0.1.26-1
|
|
|
|
|
- update to the latest upstream release
|
|
|
|
|
|
2015-09-05 17:25:38 +00:00
|
|
|
* Sat Sep 05 2015 Šimon Lukašík <slukasik@redhat.com> - 0.1.25-1
|
|
|
|
|
- update to the latest upstream release
|
|
|
|
|
|
2015-06-24 08:14:23 +00:00
|
|
|
* Thu Jul 09 2015 Šimon Lukašík <slukasik@redhat.com> - 0.1.24-1
|
|
|
|
|
- update to the latest upstream release
|
|
|
|
|
- created doc sub-package to ship all the guides
|
|
|
|
|
- start distributing centos and scientific linux content
|
|
|
|
|
- rename java content to jre
|
|
|
|
|
|
2015-06-19 00:24:36 +00:00
|
|
|
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1.22-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
|
|
2015-05-05 13:33:30 +00:00
|
|
|
* Tue May 05 2015 Šimon Lukašík <slukasik@redhat.com> - 0.1.22-1
|
|
|
|
|
- update to the latest upstream release
|
2015-05-05 17:38:15 +00:00
|
|
|
- only DataStream file is now available for Fedora
|
2015-05-05 18:02:00 +00:00
|
|
|
- start distributing security baseline for Firefox
|
|
|
|
|
- start distributing security baseline for Java RunTime deployments
|
2015-05-05 13:33:30 +00:00
|
|
|
|
2015-03-04 14:32:08 +00:00
|
|
|
* Wed Mar 04 2015 Šimon Lukašík <slukasik@redhat.com> - 0.1.21-1
|
|
|
|
|
- update to the latest upstream release
|
2015-03-04 14:37:54 +00:00
|
|
|
- move content to /usr/share/scap/ssg/content
|
2015-03-04 14:32:08 +00:00
|
|
|
|
2014-10-02 08:56:50 +00:00
|
|
|
* Thu Oct 02 2014 Šimon Lukašík <slukasik@redhat.com> - 0.1.19-1
|
|
|
|
|
- update to the latest upstream release
|
|
|
|
|
|
2014-07-14 14:55:45 +00:00
|
|
|
* Mon Jul 14 2014 Šimon Lukašík <slukasik@redhat.com> - 0.1.5-4
|
|
|
|
|
- require only openscap-scanner, not whole openscap-utils package
|
|
|
|
|
|
2014-07-01 10:28:13 +00:00
|
|
|
* Tue Jul 01 2014 Šimon Lukašík <slukasik@redhat.com> - 0.1.5-3
|
|
|
|
|
- Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
|
2014-07-01 11:05:32 +00:00
|
|
|
- Add STIG DISCLAIMER to the shipped documentation
|
2014-07-01 10:28:13 +00:00
|
|
|
|
2014-06-08 05:53:21 +00:00
|
|
|
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1.5-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
|
|
2014-02-27 17:14:50 +00:00
|
|
|
* Thu Feb 27 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.5-1
|
|
|
|
|
- Fix fedora-srpm and fedora-rpm Make targets to work again
|
|
|
|
|
- Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
|
|
|
|
|
- EOL for Fedora 18 support
|
|
|
|
|
- Include Fedora datastream file for remote Fedora system scans
|
|
|
|
|
|
2014-01-06 14:03:56 +00:00
|
|
|
* Mon Jan 06 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-2
|
|
|
|
|
- Drop -compat package, provide openscap-content directly (RH BZ#1040335#c14)
|
|
|
|
|
|
2013-12-20 18:01:21 +00:00
|
|
|
* Fri Dec 20 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1
|
|
|
|
|
- Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
|
|
|
|
|
it to /shared
|
|
|
|
|
- Add shared remediations for sshd disable empty passwords and
|
|
|
|
|
sshd set idle timeout
|
|
|
|
|
- Shared remediation for sshd disable root login
|
|
|
|
|
- Add empty -compat subpackage to ensure backward-compatibility with
|
|
|
|
|
openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
|
|
|
|
|
- OVAL check for sshd disable root login
|
|
|
|
|
- Fix typo in OVAL check for sshd disable empty passwords
|
|
|
|
|
- OVAL check for sshd disable empty passwords
|
|
|
|
|
- Unselect no shelllogin for systemaccounts rule from being run by default
|
|
|
|
|
- Rename XCCDF rules
|
|
|
|
|
- Revert Set up Fedora release name and CPE based on build system properties
|
|
|
|
|
- Shared OVAL check for Verify that Shared Library Files Have Root Ownership
|
|
|
|
|
- Shared OVAL check for Verify that System Executables Have Restrictive Permissions
|
|
|
|
|
- Shared OVAL check for Verify that System Executables Have Root Ownership
|
|
|
|
|
- Shared OVAL check for Verify that Shared Library Files Have Restrictive
|
|
|
|
|
Permissions
|
|
|
|
|
- Fix remediation for Disable Prelinking rule
|
|
|
|
|
- OVAL check and remediation for sshd's ClientAliveCountMax rule
|
|
|
|
|
- OVAL check for sshd's ClientAliveInterval rule
|
|
|
|
|
- Include descriptions for permissions section, and rules for checking
|
|
|
|
|
permissions and ownership of shared library files and system executables
|
|
|
|
|
- Disable selected rules by default
|
|
|
|
|
- Add remediation for Disable Prelinking rule
|
|
|
|
|
- Adjust service-enable-macro, service-disable-macro XSLT transforms
|
|
|
|
|
definition to evaluate to proper systemd syntax
|
|
|
|
|
- Fix service_ntpd_enabled OVAL check make validate to pass again
|
|
|
|
|
- Include patch from Šimon Lukašík to obsolete openscap-content
|
|
|
|
|
package (RH BZ#1028706)
|
|
|
|
|
- Add OVAL check to test if there's is remote NTP server configured for
|
|
|
|
|
time data
|
|
|
|
|
- Add system settings section for the guide (to track system wide
|
|
|
|
|
hardening configurations)
|
|
|
|
|
- Include disable prelink rule and OVAL check for it
|
|
|
|
|
- Initial OVAL check if ntpd service is enabled. Add package_installed
|
|
|
|
|
OVAL templating directory structure and functionality.
|
|
|
|
|
- Include services section, and XCCDF description for selected ntpd's
|
|
|
|
|
sshd's service rules
|
|
|
|
|
- Include remediations for login.defs' based password minimum, maximum and
|
|
|
|
|
warning age rules
|
|
|
|
|
- Include directory structure to support remediations
|
|
|
|
|
- Add SCAP "replace or append pattern value in text file based on variable"
|
|
|
|
|
remediation script generator
|
|
|
|
|
- Add remediation for "Set Password Minimum Length in login.defs" rule
|
|
|
|
|
|
|
|
|
|
* Mon Nov 18 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1
|
|
|
|
|
- Update versioning scheme - move fedorassgrelease to be part of
|
|
|
|
|
upstream version. Rename it to fedorassgversion to avoid name collision
|
|
|
|
|
with Fedora package release.
|
2013-11-15 10:34:42 +00:00
|
|
|
|
2013-10-22 14:09:50 +00:00
|
|
|
* Tue Oct 22 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
|
|
|
|
|
- Add .gitignore for Fedora output directory
|
|
|
|
|
- Set up Fedora release name and CPE based on build system properties
|
|
|
|
|
- Use correct file paths in scap-security-guide(8) manual page
|
|
|
|
|
(RH BZ#1018905, c#10)
|
|
|
|
|
- Apply further changes motivated by scap-security-guide Fedora RPM review
|
|
|
|
|
request (RH BZ#1018905, c#8):
|
|
|
|
|
* update package description,
|
|
|
|
|
* make content files to be owned by the scap-security-guide package,
|
|
|
|
|
* remove Fedora release number from generated content files,
|
|
|
|
|
* move HTML form of the guide under the doc directory (together
|
|
|
|
|
with that drop fedora/content subdir and place the content
|
|
|
|
|
directly under fedora/ subdir).
|
|
|
|
|
- Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
|
|
|
|
|
* drop Fedora release from package provided files' final path (c#5),
|
|
|
|
|
* drop BuildRoot, selected Requires:, clean section, drop chcon for
|
|
|
|
|
manual page, don't gzip man page (c#4),
|
|
|
|
|
* change package's description (c#4),
|
|
|
|
|
* include PD license text (#c4).
|
|
|
|
|
|
|
|
|
|
* Mon Oct 14 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
|
|
|
|
|
- Provide manual page for scap-security-guide
|
|
|
|
|
- Remove percent sign from spec's changelog to silence rpmlint warning
|
|
|
|
|
- Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
|
|
|
|
|
- Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
|
|
|
|
|
- Introduce 'Account and Access Control' section
|
|
|
|
|
- Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
|
|
|
|
|
rules to Fedora
|
|
|
|
|
- Set proper name of the build directory in the spec's setup macro.
|
|
|
|
|
- Replace hard-coded paths with macros. Preserve attributes when copying files.
|
|
|
|
|
|
|
|
|
|
* Tue Sep 17 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-1
|
|
|
|
|
- Initial Fedora SSG RPM.
|
