Commit Graph

29 Commits

Author SHA1 Message Date
Watson Sato fb47aa3e38 Update description of OSPP profile
Resolves: rhbz#2045386
2022-02-16 12:39:50 +01:00
Watson Sato 5145dcab43 Fix fatal errors on Anible service disabled tasks
Resolves: rhbz#2014561
2022-02-15 19:10:19 +01:00
Gabriel Becker cd3b90bce2 Updates to RHEL-9.0.0 content
Update sudoers rules in RHEL8 STIG V1R5
Add missing SRG references in RHEL8 STIG V1R5 rules
Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives
Fix GRUB2 rule template to configure the module correctly on RHEL8
Update GRUB2 rule descriptions
Make package_rear_installed not applicable on AARCH64

Resolves: rhbz#2045403
Resolves: rhbz#2014561
Resolves: rhbz#2020623
2022-02-14 19:24:32 +01:00
Watson Sato 9887c6a84e Update OSPP Profile
Resolves: rhbz#2016038
Resolves: rhbz#2043036
Resolves: rhbz#2020670
Resolves: rhbz#2046289
2022-02-11 22:37:28 +01:00
Watson Sato a44269807e Rebase to the 0.1.60 upstream version
Resolves: rhbz#2014561
2022-01-27 17:21:52 +01:00
Gabriel Becker 21b368fa76 Enable Centos Stream 9 content
Resolves: rhbz#2021284
2021-12-15 14:31:02 +01:00
Gabriel Becker 24b45263d8 Rebase to the 0.1.59 upstream version
Resolves: rhbz#2014561
2021-12-15 14:29:01 +01:00
Matej Tyc 8449267905 Rebase to the 0.1.58 upstream version
Resolves: rhbz#2014561
2021-11-08 11:14:49 +01:00
Matej Tyc 30760905b3 Fix remediations applicability of zipl rules
Resolves: rhbz#1996847
2021-08-25 14:24:09 +02:00
Matej Tyc bd64402d52 Fix a broken HTTP link, add CIS profile based on RHEL8 CIS, fix its Crypto Policy usage
Resolves: rhbz#1962564
2021-08-24 17:14:29 +02:00
Matej Tyc c9032c1d61 Deliver numerous RHEL9 fixes to rules
Deliver ISM kickstarts

Resolves: rhbz#1987227
Resolves: rhbz#1987226
Resolves: rhbz#1987231
Resolves: rhbz#1988289
Resolves: rhbz#1978290
2021-08-20 09:41:48 +02:00
Matej Tyc cae8e44f84 Use SSHD directory configuration
Resolves: rhbz#1962564
2021-08-19 16:40:55 +02:00
Mohan Boddu 1f83058625 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 00:47:35 +00:00
Matej Tyc dac4498bd5 Rebase to a new upstream release
Resolves: rhbz#1962564
2021-07-29 18:03:43 +02:00
Matus Marhefka dfed54b246 Remove gating.yml (proper file needs to be named gating.yaml)
Resolves: rhbz#1962564
2021-07-19 09:37:43 +02:00
Matus Marhefka d304e27197 Add kickstarts in %files section
Kickstarts are already available in the upstream
and we need them in `%files` section in order to
create a test build from upstream.

Resolves: rhbz#1962564
2021-07-19 09:30:39 +02:00
Matej Tyc ffdbed0b4e Fix earlier omissions
Fix cmake options listing - all options have to have trailing backslashes except the last one.
Port a PR that implements support for per-rule playbooks.

Resolves: rhbz#1962564
2021-07-09 12:19:13 +02:00
Matej Tyc a300600b35 >Port 8.5 changes to the package to RHEL9
Also deal with missing CCE issues.

Resolves: rhbz#1962564
2021-07-09 11:23:22 +02:00
Matej Tyc 5f5226d27a Ported more rules and profiles to RHEL9
Resolves: rhbz#1962564
2021-07-02 10:47:13 +02:00
Jan Černý 449d853fce First release of SSG for RHEL9
- rebase the package to the latest upstream release (0.1.56)
- remove README.md and Contributors.md
- remove SCAP component files
- remove SCAP 1.2 source data streams
- remove HTML guides for the virtual “(default)” profile
- remove profile Bash remediation scripts
- build only RHEL9 content
- remove other products
- use autosetup in %prep phase

Resolves: rhbz#1962564
2021-06-03 10:58:04 +02:00
Matus Marhefka 6ea5d216b0 gating.yaml: update for RHEL9 2021-05-17 10:33:37 +02:00
Mohan Boddu c48b2c6da0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 05:33:22 +00:00
DistroBaker d6d729cb9f Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/scap-security-guide.git#21f968f5122fa835fd6f720c7086eb99a350453c
2021-02-12 10:00:24 +00:00
Matus Marhefka 7eff8e155c Define _vpath_builddir macro as `build`
SSG build system and tests count with build directory name build.
For more details see:
https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
2021-02-11 15:57:54 +01:00
DistroBaker 1024ac71df Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/scap-security-guide.git#87cd1708755523e6873fb08ed6b27c21c4489f7f
2021-02-05 19:59:06 +00:00
DistroBaker 33b97685b8 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/scap-security-guide.git#439bd0b93151d9ae2886cb0af3f4371f132fa513
2021-02-05 07:15:22 +01:00
DistroBaker d19adeb7b8 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/scap-security-guide.git#2f106e4f74a0006ca381ca3e4830a4e6c56878a3
2020-12-01 10:31:58 +00:00
Troy Dawson 323bbce021 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/scap-security-guide#e4c35126662c8d5ae04a405e50827457c236ca3b
2020-10-15 09:21:43 -07:00
Release Configuration Management 4017a9e9fd New branch setup 2020-10-09 04:28:51 +00:00