diff --git a/scap-security-guide-0.1.63-remove_rsyslog_rules_from_rhel9_ospp-PR_9116.patch b/scap-security-guide-0.1.63-remove_rsyslog_rules_from_rhel9_ospp-PR_9116.patch new file mode 100644 index 0000000..0dfeb67 --- /dev/null +++ b/scap-security-guide-0.1.63-remove_rsyslog_rules_from_rhel9_ospp-PR_9116.patch @@ -0,0 +1,34 @@ +From f5a025d27828e9685478fa54a7a6e510ead44bea Mon Sep 17 00:00:00 2001 +From: Vojtech Polasek +Date: Fri, 8 Jul 2022 10:49:25 +0200 +Subject: [PATCH] remove rules from rhel9 ospp profile + +--- + products/rhel9/profiles/ospp.profile | 7 ------- + 1 file changed, 7 deletions(-) + +diff --git a/products/rhel9/profiles/ospp.profile b/products/rhel9/profiles/ospp.profile +index f902dd5e7cd..c9c4c1a33c8 100644 +--- a/products/rhel9/profiles/ospp.profile ++++ b/products/rhel9/profiles/ospp.profile +@@ -146,9 +146,6 @@ selections: + - package_openssh-server_installed + - package_openssh-clients_installed + - package_policycoreutils-python-utils_installed +- - package_rsyslog_installed +- - package_rsyslog-gnutls_installed +- - package_audispd-plugins_installed + - package_chrony_installed + - package_gnutls-utils_installed + +@@ -364,10 +361,6 @@ selections: + # Enable dnf-automatic Timer + - timer_dnf-automatic_enabled + +- # Configure TLS for remote logging +- - rsyslog_remote_tls +- - rsyslog_remote_tls_cacert +- + # Prevent Kerberos use by system daemons + - kerberos_disable_no_keytab + diff --git a/scap-security-guide.spec b/scap-security-guide.spec index 0904bfc..4e26072 100644 --- a/scap-security-guide.spec +++ b/scap-security-guide.spec @@ -33,6 +33,7 @@ Patch5: scap-security-guide-0.1.63-separate_rule_for_grub_disable Patch6: scap-security-guide-0.1.63-update_grub2_macro-PR_8616.patch Patch7: scap-security-guide-0.1.63-add_grub2_systemd_debug-shell_argument_absent-PR_9100.patch Patch8: scap-security-guide-0.1.63-remove_rule_login_defs_min_size-PR_9113.patch +Patch9: scap-security-guide-0.1.63-remove_rsyslog_rules_from_rhel9_ospp-PR_9116.patch %description The scap-security-guide project provides a guide for configuration of the @@ -117,6 +118,7 @@ rm %{buildroot}/%{_docdir}/%{name}/Contributors.md - Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809) - Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840) - Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040) +- Remove rules related to remove logging from RHEL9 OSPP (RHBZ#2105016) * Wed Jun 01 2022 Matej Tyc - 0.1.62-1 - Rebase to a new upstream release (RHBZ#2070563)