From 19cfbb4d4f7c4f1ce3ada725d6f67a0221be4f46 Mon Sep 17 00:00:00 2001 From: Andrew Lukoshko Date: Tue, 31 Mar 2026 12:59:17 +0000 Subject: [PATCH] import CS scap-security-guide-0.1.80-1.el9 --- .gitignore | 2 +- .scap-security-guide.metadata | 2 +- SPECS/scap-security-guide.spec | 11 ++++++++++- 3 files changed, 12 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 749072e..b7909cd 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/scap-security-guide-0.1.79.tar.bz2 +SOURCES/scap-security-guide-0.1.80.tar.bz2 diff --git a/.scap-security-guide.metadata b/.scap-security-guide.metadata index 72c7492..cd8d9fd 100644 --- a/.scap-security-guide.metadata +++ b/.scap-security-guide.metadata @@ -1 +1 @@ -91163dda2ac5ca31984d3488bcea8eda7fce1de8 SOURCES/scap-security-guide-0.1.79.tar.bz2 +8edd4588f733ffbf56a11f925e26e46f0badfe61 SOURCES/scap-security-guide-0.1.80.tar.bz2 diff --git a/SPECS/scap-security-guide.spec b/SPECS/scap-security-guide.spec index 9e6dd6e..a7fa576 100644 --- a/SPECS/scap-security-guide.spec +++ b/SPECS/scap-security-guide.spec @@ -5,7 +5,7 @@ # global _default_patch_fuzz 2 # Normally shouldn't be needed as patches should apply cleanly Name: scap-security-guide -Version: 0.1.79 +Version: 0.1.80 Release: 1%{?dist} Summary: Security guidance and baselines in SCAP formats License: BSD-3-Clause @@ -97,6 +97,15 @@ rm %{buildroot}/%{_docdir}/%{name}/Contributors.md %endif %changelog +* Wed Mar 11 2026 Vojtech Polasek - 0.1.80-1 +- Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) +- Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) +- Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) +- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) +- Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) +- Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) +- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) + * Mon Dec 15 2025 Jan Černý - 0.1.79-1 - Update to the latest upstream release (RHEL-135773)