Rebase to 0.1.4.
This commit is contained in:
		
							parent
							
								
									d36bf15274
								
							
						
					
					
						commit
						fda0ca86ef
					
				
							
								
								
									
										1
									
								
								.gitignore
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										1
									
								
								.gitignore
									
									
									
									
										vendored
									
									
								
							| @ -1 +1,2 @@ | |||||||
| /scap-security-guide-0.1-3.tar.gz | /scap-security-guide-0.1-3.tar.gz | ||||||
|  | /scap-security-guide-0.1.4.tar.gz | ||||||
|  | |||||||
| @ -5,16 +5,16 @@ | |||||||
| # file one level up - in the main scap-security-guide directory (instead of | # file one level up - in the main scap-security-guide directory (instead of | ||||||
| # this one). | # this one). | ||||||
| 
 | 
 | ||||||
| %global	fedorassgrelease	3 | %global	fedorassgversion	4 | ||||||
| 
 | 
 | ||||||
| Name:		scap-security-guide | Name:		scap-security-guide | ||||||
| Version:	0.1 | Version:	0.1.%{fedorassgversion} | ||||||
| Release:	%{fedorassgrelease}.1%{?dist} | Release:	1%{?dist} | ||||||
| Summary:	Security guidance and baselines in SCAP formats | Summary:	Security guidance and baselines in SCAP formats | ||||||
| Group:		Applications/System | Group:		Applications/System | ||||||
| License:	Public Domain | License:	Public Domain | ||||||
| URL:		https://fedorahosted.org/scap-security-guide/ | URL:		https://fedorahosted.org/scap-security-guide/ | ||||||
| Source0:	http://fedorapeople.org/~jlieskov/%{name}-%{version}-%{fedorassgrelease}.tar.gz | Source0:	http://fedorapeople.org/~jlieskov/%{name}-%{version}.tar.gz | ||||||
| BuildArch:	noarch | BuildArch:	noarch | ||||||
| BuildRequires:	libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml | BuildRequires:	libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml | ||||||
| Requires:	xml-common, openscap-utils >= 0.9.1 | Requires:	xml-common, openscap-utils >= 0.9.1 | ||||||
| @ -32,8 +32,20 @@ scap-workbench GUI tool from scap-workbench package to verify that the system | |||||||
| conforms to provided guideline. Refer to scap-security-guide(8) manual page for | conforms to provided guideline. Refer to scap-security-guide(8) manual page for | ||||||
| further information. | further information. | ||||||
| 
 | 
 | ||||||
|  | %package	compat | ||||||
|  | Summary:	Extra package to ensure compatibility with firstaidkit-plugin-openscap | ||||||
|  | License:	Public Domain | ||||||
|  | BuildArch:	noarch | ||||||
|  | Requires:	xml-common, openscap-utils >= 0.9.1 | ||||||
|  | Provides:	openscap-content, firstaidkit-plugin-openscap | ||||||
|  | 
 | ||||||
|  | %description	compat | ||||||
|  | This package corrects Provides requirements needed to maintain | ||||||
|  | backward-compatibility with openscap-content and firstaidkit-plugin-openscap | ||||||
|  | packages. | ||||||
|  | 
 | ||||||
| %prep | %prep | ||||||
| %setup -q -n %{name}-%{version}-%{fedorassgrelease} | %setup -q -n %{name}-%{version} | ||||||
| 
 | 
 | ||||||
| %build | %build | ||||||
| cd Fedora && make dist | cd Fedora && make dist | ||||||
| @ -53,9 +65,60 @@ cp -a Fedora/input/auxiliary/scap-security-guide.8 %{buildroot}%{_mandir}/en/man | |||||||
| %lang(en) %{_mandir}/en/man8/scap-security-guide.8.* | %lang(en) %{_mandir}/en/man8/scap-security-guide.8.* | ||||||
| %doc Fedora/LICENSE Fedora/output/ssg-fedora-guide.html | %doc Fedora/LICENSE Fedora/output/ssg-fedora-guide.html | ||||||
| 
 | 
 | ||||||
|  | %files compat | ||||||
|  | 
 | ||||||
| %changelog | %changelog | ||||||
| * Fri Nov 15 2013 Šimon Lukašík <slukasik@redhat.com> - 0.1-3.1 | * Fri Dec 20 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1 | ||||||
| - Rebuild to obsolete openscap-content package (#1028706) | - Fix remediation for sshd set keepalive (ClientAliveCountMax) and move | ||||||
|  |   it to /shared | ||||||
|  | - Add shared remediations for sshd disable empty passwords and | ||||||
|  |   sshd set idle timeout | ||||||
|  | - Shared remediation for sshd disable root login | ||||||
|  | - Add empty -compat subpackage to ensure backward-compatibility with | ||||||
|  |   openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335) | ||||||
|  | - OVAL check for sshd disable root login | ||||||
|  | - Fix typo in OVAL check for sshd disable empty passwords | ||||||
|  | - OVAL check for sshd disable empty passwords | ||||||
|  | - Unselect no shelllogin for systemaccounts rule from being run by default | ||||||
|  | - Rename XCCDF rules | ||||||
|  | - Revert Set up Fedora release name and CPE based on build system properties | ||||||
|  | - Shared OVAL check for Verify that Shared Library Files Have Root Ownership | ||||||
|  | - Shared OVAL check for Verify that System Executables Have Restrictive Permissions | ||||||
|  | - Shared OVAL check for Verify that System Executables Have Root Ownership | ||||||
|  | - Shared OVAL check for Verify that Shared Library Files Have Restrictive | ||||||
|  |   Permissions | ||||||
|  | - Fix remediation for Disable Prelinking rule | ||||||
|  | - OVAL check and remediation for sshd's ClientAliveCountMax rule | ||||||
|  | - OVAL check for sshd's ClientAliveInterval rule | ||||||
|  | - Include descriptions for permissions section, and rules for checking | ||||||
|  |   permissions and ownership of shared library files and system executables | ||||||
|  | - Disable selected rules by default | ||||||
|  | - Add remediation for Disable Prelinking rule | ||||||
|  | - Adjust service-enable-macro, service-disable-macro XSLT transforms | ||||||
|  |   definition to evaluate to proper systemd syntax | ||||||
|  | - Fix service_ntpd_enabled OVAL check make validate to pass again | ||||||
|  | - Include patch from Šimon Lukašík to obsolete openscap-content | ||||||
|  |   package (RH BZ#1028706) | ||||||
|  | - Add OVAL check to test if there's is remote NTP server configured for | ||||||
|  |   time data | ||||||
|  | - Add system settings section for the guide (to track system wide | ||||||
|  |   hardening configurations) | ||||||
|  | - Include disable prelink rule and OVAL check for it | ||||||
|  | - Initial OVAL check if ntpd service is enabled. Add package_installed | ||||||
|  |   OVAL templating directory structure and functionality. | ||||||
|  | - Include services section, and XCCDF description for selected ntpd's | ||||||
|  |   sshd's service rules | ||||||
|  | - Include remediations for login.defs' based password minimum, maximum and | ||||||
|  |   warning age rules | ||||||
|  | - Include directory structure to support remediations | ||||||
|  | - Add SCAP "replace or append pattern value in text file based on variable" | ||||||
|  |   remediation script generator | ||||||
|  | - Add remediation for "Set Password Minimum Length in login.defs" rule | ||||||
|  | 
 | ||||||
|  | * Mon Nov 18 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1 | ||||||
|  | - Update versioning scheme - move fedorassgrelease to be part of | ||||||
|  |   upstream version. Rename it to fedorassgversion to avoid name collision | ||||||
|  |   with Fedora package release. | ||||||
| 
 | 
 | ||||||
| * Tue Oct 22 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3 | * Tue Oct 22 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3 | ||||||
| - Add .gitignore for Fedora output directory | - Add .gitignore for Fedora output directory | ||||||
|  | |||||||
		Loading…
	
		Reference in New Issue
	
	Block a user