rpms/scap-security-guide
5
0
Fork 0
Code Issues Pull Requests Releases Activity

remove rules related to remote logging from RHEL9 OSPP

Browse Source 
Resolves: rhbz#2105016
This commit is contained in:
Vojtech Polasek 2022-07-18 11:06:36 +02:00
parent 38ee77d936
commit e5303b05ff
2 changed files with 36 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
scap-security-guide-0.1.63-remove_rsyslog_rules_from_rhel9_ospp-PR_9116.patch Normal file
View File

@ -0,0 +1,34 @@
From f5a025d27828e9685478fa54a7a6e510ead44bea Mon Sep 17 00:00:00 2001
From: Vojtech Polasek <vpolasek@redhat.com>
Date: Fri, 8 Jul 2022 10:49:25 +0200
Subject: [PATCH] remove rules from rhel9 ospp profile
---
products/rhel9/profiles/ospp.profile | 7 -------
1 file changed, 7 deletions(-)
diff --git a/products/rhel9/profiles/ospp.profile b/products/rhel9/profiles/ospp.profile
index f902dd5e7cd..c9c4c1a33c8 100644
--- a/products/rhel9/profiles/ospp.profile
+++ b/products/rhel9/profiles/ospp.profile
@@ -146,9 +146,6 @@ selections:
- package_openssh-server_installed
- package_openssh-clients_installed
- package_policycoreutils-python-utils_installed
- - package_rsyslog_installed
- - package_rsyslog-gnutls_installed
- - package_audispd-plugins_installed
- package_chrony_installed
- package_gnutls-utils_installed
@@ -364,10 +361,6 @@ selections:
# Enable dnf-automatic Timer
- timer_dnf-automatic_enabled
- # Configure TLS for remote logging
- - rsyslog_remote_tls
- - rsyslog_remote_tls_cacert
-
# Prevent Kerberos use by system daemons
- kerberos_disable_no_keytab

2
scap-security-guide.spec
View File

@ -33,6 +33,7 @@ Patch5: scap-security-guide-0.1.63-separate_rule_for_grub_disable
Patch6: scap-security-guide-0.1.63-update_grub2_macro-PR_8616.patch Patch6: scap-security-guide-0.1.63-update_grub2_macro-PR_8616.patch
Patch7: scap-security-guide-0.1.63-add_grub2_systemd_debug-shell_argument_absent-PR_9100.patch Patch7: scap-security-guide-0.1.63-add_grub2_systemd_debug-shell_argument_absent-PR_9100.patch
Patch8: scap-security-guide-0.1.63-remove_rule_login_defs_min_size-PR_9113.patch Patch8: scap-security-guide-0.1.63-remove_rule_login_defs_min_size-PR_9113.patch
Patch9: scap-security-guide-0.1.63-remove_rsyslog_rules_from_rhel9_ospp-PR_9116.patch
%description %description
The scap-security-guide project provides a guide for configuration of the The scap-security-guide project provides a guide for configuration of the
@ -117,6 +118,7 @@ rm %{buildroot}/%{_docdir}/%{name}/Contributors.md
- Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809) - Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809)
- Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840) - Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840)
- Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040) - Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040)
- Remove rules related to remove logging from RHEL9 OSPP (RHBZ#2105016)
* Wed Jun 01 2022 Matej Tyc <matyc@redhat.com> - 0.1.62-1 * Wed Jun 01 2022 Matej Tyc <matyc@redhat.com> - 0.1.62-1
- Rebase to a new upstream release (RHBZ#2070563) - Rebase to a new upstream release (RHBZ#2070563)