From c733f9d076b28b0beba0e18e4033c2934024ec6a Mon Sep 17 00:00:00 2001 From: Vojtech Polasek Date: Mon, 20 May 2024 16:50:45 +0200 Subject: [PATCH] Rebase to new upstream version 0.1.73 Resolves: RHEL-36663 Resolves: RHEL-31976 Resolves: RHEL-30735 Resolves: RHEL-29684 Resolves: RHEL-29308 Resolves: RHEL-10416 Resolves: RHEL-1093 --- .gitignore | 1 + gating.yaml | 1 - scap-security-guide.spec | 14 +++++++++++--- sources | 2 +- tests/tests.yml | 9 --------- 5 files changed, 13 insertions(+), 14 deletions(-) delete mode 100644 tests/tests.yml diff --git a/.gitignore b/.gitignore index 8904f76..0efbbcd 100644 --- a/.gitignore +++ b/.gitignore @@ -48,3 +48,4 @@ /scap-security-guide-0.1.66.tar.bz2 /scap-security-guide-0.1.69.tar.bz2 /scap-security-guide-0.1.72.tar.bz2 +/scap-security-guide-0.1.73.tar.bz2 diff --git a/gating.yaml b/gating.yaml index da188d9..7cd5018 100644 --- a/gating.yaml +++ b/gating.yaml @@ -4,5 +4,4 @@ product_versions: decision_context: osci_compose_gate rules: - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1.functional} - - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.ci-beaker.functional} - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tedude.validation} diff --git a/scap-security-guide.spec b/scap-security-guide.spec index fb9cacd..bd1bc4c 100644 --- a/scap-security-guide.spec +++ b/scap-security-guide.spec @@ -5,7 +5,7 @@ # global _default_patch_fuzz 2 # Normally shouldn't be needed as patches should apply cleanly Name: scap-security-guide -Version: 0.1.72 +Version: 0.1.73 Release: 1%{?dist} Summary: Security guidance and baselines in SCAP formats License: BSD-3-Clause @@ -17,8 +17,7 @@ BuildRequires: libxslt BuildRequires: expat BuildRequires: openscap-scanner >= 1.2.5 BuildRequires: cmake >= 2.8 -# To get python3 inside the buildroot require its path explicitly in BuildRequires -BuildRequires: /usr/bin/python3 +BuildRequires: python%{python3_pkgversion}-devel BuildRequires: python%{python3_pkgversion} BuildRequires: python%{python3_pkgversion}-jinja2 BuildRequires: python%{python3_pkgversion}-PyYAML @@ -98,6 +97,15 @@ rm %{buildroot}/%{_docdir}/%{name}/Contributors.md %endif %changelog +* Mon May 20 2024 Vojtech Polasek - 0.1.73-1 +- Rebase to a new upstream release 0.1.73 (RHEL-36663) +- Correctly parse sudo options even if they are not quoted (RHEL-31976) +- Ensure that web links within kickstart files are valid (RHEL-30735) +- Align set of allowed SSH ciphers with STIG requirement (RHEL-29684) +- Add audit rules on /etc/sysconfig/network-scripts (RHEL-29308) +- Remove rule restricting user namespaces from stig_gui profile (RHEL-10416) +- Add rule which enables auditing of files within /etc/sysconfig/network-scripts (RHEL-1093) + * Tue Feb 13 2024 Marcus Burghardt - 0.1.72-1 - Rebase to a new upstream release 0.1.72 (RHEL-21425) - Check dropin files in /etc/systemd/journald.conf.d/ (RHEL-14484) diff --git a/sources b/sources index 5ef0e99..ce6f37a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (scap-security-guide-0.1.72.tar.bz2) = 2b3fb7ff4d7f69796968afc61049753bce9f2cd5bc57ecc41f9ea17dbd2bb8c278a6e02ef98e34b1561dd38e55498ba2ba92079dbdc4ef5848186964cefbd92a +SHA512 (scap-security-guide-0.1.73.tar.bz2) = 8750aeb61378d7729e00e4bcfb17d1463d97192801ef6707593ec639dfef2abba6669b9d1b8f71958f7d24f6c66f308f1587d731dd4e63878f91266232883ad7 diff --git a/tests/tests.yml b/tests/tests.yml deleted file mode 100644 index 1546340..0000000 --- a/tests/tests.yml +++ /dev/null @@ -1,9 +0,0 @@ -- hosts: localhost - roles: - - role: standard-test-beakerlib - tags: - - classic - repositories: - - repo: "https://src.fedoraproject.org/tests/scap-security-guide.git" - dest: "scap-security-guide" - fmf_filter: "tier: 1, 2"