|
|
@ -1,19 +1,32 @@
|
|
|
|
Name: openscap
|
|
|
|
Name: openscap
|
|
|
|
Version: 1.3.10
|
|
|
|
Version: 1.4.0
|
|
|
|
Release: 2%{?dist}
|
|
|
|
Release: 2%{?dist}
|
|
|
|
Epoch: 1
|
|
|
|
Epoch: 1
|
|
|
|
Summary: Set of open source libraries enabling integration of the SCAP line of standards
|
|
|
|
Summary: Set of open source libraries enabling integration of the SCAP line of standards
|
|
|
|
License: LGPLv2+
|
|
|
|
License: LGPL-2.1-or-later
|
|
|
|
URL: http://www.open-scap.org/
|
|
|
|
URL: http://www.open-scap.org/
|
|
|
|
|
|
|
|
VCS: https://github.com/OpenSCAP/openscap
|
|
|
|
Source0: https://github.com/OpenSCAP/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz
|
|
|
|
Source0: https://github.com/OpenSCAP/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz
|
|
|
|
|
|
|
|
Patch1: openscap-1.4.1-PR2154-filehash58.patch
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%global common_description %{expand:
|
|
|
|
|
|
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
|
|
|
|
|
|
for integration of the SCAP line of standards. SCAP is a line of standards
|
|
|
|
|
|
|
|
managed by NIST with the goal of providing a standard language
|
|
|
|
|
|
|
|
for the expression of Computer Network Defense related information.}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
BuildRequires: systemd-rpm-macros
|
|
|
|
BuildRequires: make
|
|
|
|
BuildRequires: make
|
|
|
|
BuildRequires: cmake >= 2.6
|
|
|
|
BuildRequires: cmake >= 2.6
|
|
|
|
|
|
|
|
BuildRequires: cmake-rpm-macros
|
|
|
|
BuildRequires: gcc
|
|
|
|
BuildRequires: gcc
|
|
|
|
BuildRequires: gcc-c++
|
|
|
|
BuildRequires: gcc-c++
|
|
|
|
BuildRequires: swig libxml2-devel libxslt-devel perl-generators perl-XML-Parser
|
|
|
|
BuildRequires: swig
|
|
|
|
|
|
|
|
BuildRequires: libxml2-devel
|
|
|
|
|
|
|
|
BuildRequires: libxslt-devel
|
|
|
|
BuildRequires: rpm-devel
|
|
|
|
BuildRequires: rpm-devel
|
|
|
|
BuildRequires: libgcrypt-devel
|
|
|
|
BuildRequires: nss-devel
|
|
|
|
BuildRequires: pcre-devel
|
|
|
|
BuildRequires: pcre2-devel
|
|
|
|
BuildRequires: libacl-devel
|
|
|
|
BuildRequires: libacl-devel
|
|
|
|
BuildRequires: libselinux-devel
|
|
|
|
BuildRequires: libselinux-devel
|
|
|
|
BuildRequires: libcap-devel
|
|
|
|
BuildRequires: libcap-devel
|
|
|
@ -24,15 +37,14 @@ BuildRequires: openldap-devel
|
|
|
|
BuildRequires: glib2-devel
|
|
|
|
BuildRequires: glib2-devel
|
|
|
|
BuildRequires: dbus-devel
|
|
|
|
BuildRequires: dbus-devel
|
|
|
|
BuildRequires: libyaml-devel
|
|
|
|
BuildRequires: libyaml-devel
|
|
|
|
BuildRequires: xmlsec1-devel xmlsec1-openssl-devel
|
|
|
|
BuildRequires: xmlsec1-devel
|
|
|
|
%if %{?_with_check:1}%{!?_with_check:0}
|
|
|
|
BuildRequires: xmlsec1-openssl-devel
|
|
|
|
BuildRequires: perl-XML-XPath
|
|
|
|
BuildRequires: procps-devel
|
|
|
|
BuildRequires: bzip2
|
|
|
|
BuildRequires: python3-devel
|
|
|
|
%endif
|
|
|
|
|
|
|
|
Requires: bash
|
|
|
|
Requires: bash
|
|
|
|
Requires: bzip2-libs
|
|
|
|
Requires: bzip2-libs
|
|
|
|
Requires: dbus
|
|
|
|
Requires: dbus
|
|
|
|
Requires: libyaml
|
|
|
|
|
|
|
|
Requires: glib2
|
|
|
|
Requires: glib2
|
|
|
|
Requires: libacl
|
|
|
|
Requires: libacl
|
|
|
|
Requires: libblkid
|
|
|
|
Requires: libblkid
|
|
|
@ -40,35 +52,11 @@ Requires: libcap
|
|
|
|
Requires: libselinux
|
|
|
|
Requires: libselinux
|
|
|
|
Requires: openldap
|
|
|
|
Requires: openldap
|
|
|
|
Requires: popt
|
|
|
|
Requires: popt
|
|
|
|
# We have procps-ng, which provides procps
|
|
|
|
|
|
|
|
Requires: procps
|
|
|
|
Requires: procps
|
|
|
|
Requires: xmlsec1 xmlsec1-openssl
|
|
|
|
Requires: xmlsec1
|
|
|
|
|
|
|
|
Requires: xmlsec1-openssl
|
|
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
%description %{common_description}
|
|
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
|
|
|
|
|
|
for integration of the SCAP line of standards. SCAP is a line of standards
|
|
|
|
|
|
|
|
managed by NIST with the goal of providing a standard language
|
|
|
|
|
|
|
|
for the expression of Computer Network Defense related information.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%package devel
|
|
|
|
|
|
|
|
Summary: Development files for %{name}
|
|
|
|
|
|
|
|
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
|
|
|
|
Requires: libxml2-devel
|
|
|
|
|
|
|
|
Requires: pkgconfig
|
|
|
|
|
|
|
|
BuildRequires: doxygen
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%description devel
|
|
|
|
|
|
|
|
The %{name}-devel package contains libraries and header files for
|
|
|
|
|
|
|
|
developing applications that use %{name}.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%package python3
|
|
|
|
|
|
|
|
Summary: Python 3 bindings for %{name}
|
|
|
|
|
|
|
|
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
|
|
|
|
BuildRequires: python3-devel
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%description python3
|
|
|
|
|
|
|
|
The %{name}-python3 package contains the bindings so that %{name}
|
|
|
|
|
|
|
|
libraries can be used by python3.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%package scanner
|
|
|
|
%package scanner
|
|
|
|
Summary: OpenSCAP Scanner Tool (oscap)
|
|
|
|
Summary: OpenSCAP Scanner Tool (oscap)
|
|
|
@ -80,18 +68,19 @@ BuildRequires: libcurl-devel >= 7.12.0
|
|
|
|
The %{name}-scanner package contains oscap command-line tool. The oscap
|
|
|
|
The %{name}-scanner package contains oscap command-line tool. The oscap
|
|
|
|
is configuration and vulnerability scanner, capable of performing
|
|
|
|
is configuration and vulnerability scanner, capable of performing
|
|
|
|
compliance checking using SCAP content.
|
|
|
|
compliance checking using SCAP content.
|
|
|
|
|
|
|
|
%{common_description}
|
|
|
|
|
|
|
|
|
|
|
|
%package utils
|
|
|
|
%package utils
|
|
|
|
Summary: OpenSCAP Utilities
|
|
|
|
Summary: OpenSCAP Utilities
|
|
|
|
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
Requires: rpmdevtools rpm-build
|
|
|
|
Requires: rpmdevtools rpm-build
|
|
|
|
Requires: %{name}-scanner%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
Requires: %{name}-scanner%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
Requires: bash
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%description utils
|
|
|
|
%description utils
|
|
|
|
The %{name}-utils package contains command-line tools build on top
|
|
|
|
The %{name}-utils package contains command-line tools build on top
|
|
|
|
of OpenSCAP library. Historically, openscap-utils included oscap
|
|
|
|
of OpenSCAP library. Historically, openscap-utils included oscap
|
|
|
|
tool which is now separated to %{name}-scanner sub-package.
|
|
|
|
tool which is now separated to %{name}-scanner sub-package.
|
|
|
|
|
|
|
|
%{common_description}
|
|
|
|
|
|
|
|
|
|
|
|
%package engine-sce
|
|
|
|
%package engine-sce
|
|
|
|
Summary: Script Check Engine plug-in for OpenSCAP
|
|
|
|
Summary: Script Check Engine plug-in for OpenSCAP
|
|
|
@ -101,48 +90,32 @@ Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
The Script Check Engine is non-standard extension to SCAP protocol. This
|
|
|
|
The Script Check Engine is non-standard extension to SCAP protocol. This
|
|
|
|
engine allows content authors to avoid OVAL language and write their assessment
|
|
|
|
engine allows content authors to avoid OVAL language and write their assessment
|
|
|
|
commands using a scripting language (Bash, Perl, Python, Ruby, ...).
|
|
|
|
commands using a scripting language (Bash, Perl, Python, Ruby, ...).
|
|
|
|
|
|
|
|
%{common_description}
|
|
|
|
%package engine-sce-devel
|
|
|
|
|
|
|
|
Summary: Development files for %{name}-engine-sce
|
|
|
|
|
|
|
|
Requires: %{name}-devel%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
|
|
|
|
Requires: %{name}-engine-sce%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
|
|
|
|
Requires: pkgconfig
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%description engine-sce-devel
|
|
|
|
|
|
|
|
The %{name}-engine-sce-devel package contains libraries and header files
|
|
|
|
|
|
|
|
for developing applications that use %{name}-engine-sce.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
%prep
|
|
|
|
%autosetup -p1
|
|
|
|
%autosetup -p1
|
|
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
%build
|
|
|
|
# gconf is a legacy system not used any more, and it blocks testing of oscap-anaconda-addon
|
|
|
|
|
|
|
|
# as gconf is no longer part of the installation medium
|
|
|
|
|
|
|
|
%cmake \
|
|
|
|
%cmake \
|
|
|
|
|
|
|
|
-DWITH_CRYPTO=nss \
|
|
|
|
-DENABLE_DOCS=ON \
|
|
|
|
-DENABLE_DOCS=ON \
|
|
|
|
-DENABLE_PERL=OFF \
|
|
|
|
-DENABLE_PERL=OFF \
|
|
|
|
|
|
|
|
-DENABLE_PYTHON3=OFF \
|
|
|
|
-DENABLE_OSCAP_UTIL_DOCKER=OFF \
|
|
|
|
-DENABLE_OSCAP_UTIL_DOCKER=OFF \
|
|
|
|
-DENABLE_OSCAP_REMEDIATE_SERVICE=OFF \
|
|
|
|
-DENABLE_OSCAP_REMEDIATE_SERVICE=OFF \
|
|
|
|
-DOPENSCAP_PROBE_LINUX_DPKGINFO=OFF \
|
|
|
|
-DOPENSCAP_PROBE_LINUX_DPKGINFO=OFF \
|
|
|
|
-DOPENSCAP_PROBE_UNIX_GCONF=OFF \
|
|
|
|
|
|
|
|
-DOPENSCAP_ENABLE_SHA1=OFF \
|
|
|
|
-DOPENSCAP_ENABLE_SHA1=OFF \
|
|
|
|
-DOPENSCAP_ENABLE_MD5=OFF \
|
|
|
|
-DOPENSCAP_ENABLE_MD5=OFF
|
|
|
|
-DGCONF_LIBRARY=
|
|
|
|
|
|
|
|
%cmake_build
|
|
|
|
%cmake_build
|
|
|
|
make docs
|
|
|
|
make docs
|
|
|
|
|
|
|
|
|
|
|
|
%check
|
|
|
|
|
|
|
|
%if %{?_with_check:1}%{!?_with_check:0}
|
|
|
|
|
|
|
|
ctest -V %{?_smp_mflags}
|
|
|
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
%install
|
|
|
|
%cmake_install
|
|
|
|
%cmake_install
|
|
|
|
|
|
|
|
|
|
|
|
find $RPM_BUILD_ROOT -name '*.la' -exec rm -f {} ';'
|
|
|
|
find %{buildroot} -name '*.la' -exec rm -f {} ';'
|
|
|
|
|
|
|
|
|
|
|
|
# fix python shebangs
|
|
|
|
# fix python shebangs
|
|
|
|
pathfix.py -i %{__python3} -p -n $RPM_BUILD_ROOT%{_bindir}/scap-as-rpm
|
|
|
|
%{__python3} %{_rpmconfigdir}/redhat/pathfix.py -i %{__python3} -p -n %{buildroot}%{_bindir}/scap-as-rpm
|
|
|
|
|
|
|
|
|
|
|
|
%ldconfig_scriptlets
|
|
|
|
%ldconfig_scriptlets
|
|
|
|
|
|
|
|
|
|
|
@ -158,130 +131,165 @@ pathfix.py -i %{__python3} -p -n $RPM_BUILD_ROOT%{_bindir}/scap-as-rpm
|
|
|
|
%{_datadir}/openscap/schemas/*
|
|
|
|
%{_datadir}/openscap/schemas/*
|
|
|
|
%{_datadir}/openscap/xsl/*
|
|
|
|
%{_datadir}/openscap/xsl/*
|
|
|
|
%{_datadir}/openscap/cpe/*
|
|
|
|
%{_datadir}/openscap/cpe/*
|
|
|
|
|
|
|
|
%exclude %{_libdir}/libopenscap.so
|
|
|
|
|
|
|
|
%exclude %{_libdir}/pkgconfig/*.pc
|
|
|
|
|
|
|
|
%exclude %{_includedir}/openscap
|
|
|
|
|
|
|
|
%exclude %{_pkgdocdir}/html/
|
|
|
|
|
|
|
|
|
|
|
|
%files python3
|
|
|
|
%files engine-sce
|
|
|
|
%{python3_sitearch}/*
|
|
|
|
%{_libdir}/libopenscap_sce.so.*
|
|
|
|
|
|
|
|
%exclude %{_libdir}/libopenscap_sce.so
|
|
|
|
%files devel
|
|
|
|
|
|
|
|
%doc %{_pkgdocdir}/html/
|
|
|
|
|
|
|
|
%{_libdir}/libopenscap.so
|
|
|
|
|
|
|
|
%{_libdir}/pkgconfig/*.pc
|
|
|
|
|
|
|
|
%{_includedir}/openscap
|
|
|
|
|
|
|
|
%exclude %{_includedir}/openscap/sce_engine_api.h
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%files engine-sce-devel
|
|
|
|
|
|
|
|
%{_libdir}/libopenscap_sce.so
|
|
|
|
|
|
|
|
%{_includedir}/openscap/sce_engine_api.h
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%files scanner
|
|
|
|
%files scanner
|
|
|
|
%{_mandir}/man8/oscap.8.gz
|
|
|
|
%{_mandir}/man8/oscap.8*
|
|
|
|
%{_bindir}/oscap
|
|
|
|
%{_bindir}/oscap
|
|
|
|
%{_mandir}/man8/oscap-chroot.8.gz
|
|
|
|
%{_mandir}/man8/oscap-chroot.8*
|
|
|
|
%{_bindir}/oscap-chroot
|
|
|
|
%{_bindir}/oscap-chroot
|
|
|
|
%{_sysconfdir}/bash_completion.d
|
|
|
|
%{_sysconfdir}/bash_completion.d
|
|
|
|
|
|
|
|
|
|
|
|
%files utils
|
|
|
|
%files utils
|
|
|
|
%doc docs/oscap-scan.cron
|
|
|
|
%doc docs/oscap-scan.cron
|
|
|
|
%{_mandir}/man8/oscap-ssh.8.gz
|
|
|
|
%{_mandir}/man8/*
|
|
|
|
%{_bindir}/oscap-ssh
|
|
|
|
%exclude %{_mandir}/man8/oscap.8*
|
|
|
|
%{_mandir}/man8/oscap-podman.8.gz
|
|
|
|
%exclude %{_mandir}/man8/oscap-chroot.8*
|
|
|
|
%{_bindir}/oscap-podman
|
|
|
|
%{_bindir}/*
|
|
|
|
%{_mandir}/man8/oscap-vm.8.gz
|
|
|
|
%exclude %{_bindir}/oscap
|
|
|
|
%{_bindir}/oscap-vm
|
|
|
|
%exclude %{_bindir}/oscap-chroot
|
|
|
|
%{_mandir}/man8/scap-as-rpm.8.gz
|
|
|
|
|
|
|
|
%{_bindir}/scap-as-rpm
|
|
|
|
|
|
|
|
%{_mandir}/man8/autotailor.8.gz
|
|
|
|
|
|
|
|
%{_bindir}/autotailor
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%files engine-sce
|
|
|
|
|
|
|
|
%{_libdir}/libopenscap_sce.so.*
|
|
|
|
|
|
|
|
%{_bindir}/oscap-run-sce-script
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
%changelog
|
|
|
|
* Mon Apr 08 2024 Jan Černý <jcerny@redhat.com> - 1:1.3.10-2
|
|
|
|
* Tue Aug 20 2024 Jan Černý <jcerny@redhat.com> - 1:1.4.0-2
|
|
|
|
- Explicitely disable dpkginfo probe
|
|
|
|
- Fix filehash58 probe on s390x architecture
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Aug 01 2024 Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
|
|
|
|
|
|
|
|
- Update to the latest upstream release (RHEL-53981)
|
|
|
|
|
|
|
|
- Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1:1.3.10-3
|
|
|
|
|
|
|
|
- Bump release for June 2024 mass rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 06 2024 Jan Černý <jcerny@redhat.com> - 1:1.3.10-2
|
|
|
|
|
|
|
|
- Update gating tests
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Apr 02 2024 Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
|
|
|
|
* Tue Apr 02 2024 Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
|
|
|
|
- Rebase to the latest upstream version (RHEL-29172)
|
|
|
|
- Rebase to the latest upstream version
|
|
|
|
- Fix OVAL results file name (RHEL-7050)
|
|
|
|
- Use NSS as cryptography library (RHEL-22013)
|
|
|
|
- Add ability to define a limit of collected items (RHEL-4141)
|
|
|
|
|
|
|
|
- Add ability to refine rules in autotailor (RHEL-1477)
|
|
|
|
|
|
|
|
- Improve the formatting of Blueprint remediations (RHEL-1476)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jul 14 2023 Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
|
|
|
|
* Sun Jan 21 2024 Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
|
|
|
|
- Upgrade to the latest upstream release (rhbz#2217442)
|
|
|
|
- add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
|
|
|
|
- Fix systemd* probes unit enumeration (rhbz#2219532)
|
|
|
|
- cosmetics: rename patches, add comments, use buildroot macro instead of env
|
|
|
|
|
|
|
|
- add explicit build requirement to python3-setuptools, needed for 3.13+
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jan 27 2023 Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
|
|
|
|
* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.3.9-6
|
|
|
|
- Upgrade to the latest upstream release (rhbz#2159286)
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
- Fix error when processing OVAL filters (rhbz#2126883)
|
|
|
|
|
|
|
|
- Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jul 21 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
|
|
|
|
* Thu Jan 04 2024 Yaakov Selkowitz <yselkowi@redhat.com> - 1:1.3.9-5
|
|
|
|
- Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
|
|
|
|
- Enable opendbx for SQL probes only in Fedora
|
|
|
|
- Remove oscap-remediate service (rhbz#2111358)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Feb 07 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-3
|
|
|
|
* Wed Jan 03 2024 Florian Weimer <fweimer@redhat.com> - 1:1.3.9-4
|
|
|
|
- Prevent file permission errors (rhbz#2048571)
|
|
|
|
- Fix C compatibility issues
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 31 2022 Jan Černý <jcerny@redhat.com> - 1.3.6-2
|
|
|
|
* Wed Dec 20 2023 Jan Černý <jcerny@redhat.com> - 1:1.3.9-3
|
|
|
|
- Fix coverity issues
|
|
|
|
- Fix test test_sysctl_probe_all.sh
|
|
|
|
- Prevent fails of test_ds_misc.sh
|
|
|
|
- Clean up the repository
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Nov 23 2023 Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-2
|
|
|
|
|
|
|
|
- adding conditional for apt-devel apt-libs as proposed upstream
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Nov 23 2023 Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-1
|
|
|
|
|
|
|
|
- bump to 1.3.9
|
|
|
|
|
|
|
|
- provide perl binding
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jan 20 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
|
|
|
|
* Tue Sep 05 2023 Yaakov Selkowitz <yselkowi@redhat.com> - 1:1.3.8-6
|
|
|
|
- Upgrade to the latest upstream release (rhbz#2041782)
|
|
|
|
- Use pcre2 (#2128342)
|
|
|
|
- Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
|
|
|
|
|
|
|
|
- The boot-time remediation service for systemd's Offline Update mode
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Nov 19 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-13
|
|
|
|
* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.3.8-5
|
|
|
|
- Print warning for local files
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Nov 09 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
|
|
|
|
* Tue Jun 27 2023 Python Maint <python-maint@redhat.com> - 1:1.3.8-4
|
|
|
|
- Allow using local files instead of remote resources (rhbz#2015518)
|
|
|
|
- Rebuilt for Python 3.12
|
|
|
|
- Add an alternative source of hostname (rhbz#2021509)
|
|
|
|
|
|
|
|
- Lower memory limits and improve their checking (rhbz#2022362)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Nov 04 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
|
|
|
|
* Tue Jun 27 2023 Evgeny Kolesnikov <ekolesni@redhat.com> - 1:1.3.8-3
|
|
|
|
- Initialize crypto API only once (rhbz#2020044)
|
|
|
|
- Rebuilt because of xmlsec1 downgrade
|
|
|
|
- Add support for Blueprint remediations (rhbz#2020052)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Nov 01 2021 Evgenii Kolesnikov <ekolesni@redhat.com> - 1:1.3.5-10
|
|
|
|
* Mon Jun 26 2023 Python Maint <python-maint@redhat.com> - 1:1.3.8-2
|
|
|
|
- Fix process58 probe errors when scanning minimalist filesystem in offline mode (rhbz#2019054)
|
|
|
|
- Rebuilt for Python 3.12
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jun 20 2023 Evgeny Kolesnikov <ekolesni@redhat.com> - 1:1.3.8-1
|
|
|
|
|
|
|
|
- Upgrade to the latest upstream release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 15 2023 Python Maint <python-maint@redhat.com> - 1:1.3.7-4
|
|
|
|
|
|
|
|
- Rebuilt for Python 3.12
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri May 19 2023 Petr Pisar <ppisar@redhat.com> - 1:1.3.7-3
|
|
|
|
|
|
|
|
- Rebuild against rpm-4.19 (https://fedoraproject.org/wiki/Changes/RPM-4.19)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Feb 01 2023 Tom Stellard <tstellar@redhat.com> - 1:1.3.7-2
|
|
|
|
|
|
|
|
- Fix implicit function definition warning
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jan 26 2023 Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
|
|
|
|
|
|
|
|
- Upgrade to the latest upstream release
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Nov 01 2021 Matej Tyc <matyc@redhat.com> - 1:1.3.5-9
|
|
|
|
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.3.6-12
|
|
|
|
- Fix bad handling of HTTP error code (rhbz#2002733)
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Aug 27 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-8
|
|
|
|
* Mon Oct 17 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-11
|
|
|
|
- Revert Epoch removal
|
|
|
|
- Add systemd-rpm-macros to BuildRequires (rhbz#2126078)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jul 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.3.6-10
|
|
|
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 13 2022 Python Maint <python-maint@redhat.com> - 1:1.3.6-9
|
|
|
|
|
|
|
|
- Rebuilt for Python 3.11
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jun 03 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-8
|
|
|
|
|
|
|
|
- Rebuild due to changes in tests
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 31 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-7
|
|
|
|
|
|
|
|
- Rebuild due to changes in tests
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 31 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-6
|
|
|
|
|
|
|
|
- Update tests due to relocation of RPM database
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon May 30 2022 Jan Černý <jcerny@redhat.com> - 1:1.3.6-5
|
|
|
|
|
|
|
|
- Use correct includes (rhbz#2080210)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Feb 4 2022 Evgenii Kolesnikov <ekolesni@redhat.com> - 1:1.3.6-4
|
|
|
|
|
|
|
|
- Prevent file permissions errors
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Feb 1 2022 Evgenii Kolesnikov <ekolesni@redhat.com> - 1:1.3.6-3
|
|
|
|
|
|
|
|
- Prevent fails of test_ds_misc.sh (bis)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 31 2022 Evgenii Kolesnikov <ekolesni@redhat.com> - 1:1.3.6-2
|
|
|
|
|
|
|
|
- Fix coverity issues
|
|
|
|
|
|
|
|
- Prevent fails of test_ds_misc.sh
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jan 20 2022 Evgenii Kolesnikov <ekolesni@redhat.com> - 1:1.3.6-1
|
|
|
|
|
|
|
|
- Update to the latest upstream release
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Aug 24 2021 Evgenii Kolesnikov <ekolesni@redhat.com> - 1:1.3.5-7
|
|
|
|
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.3.5-7
|
|
|
|
- Update package spec file
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.3.5-6
|
|
|
|
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.3.5-6
|
|
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
Related: rhbz#1991688
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jul 22 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-5
|
|
|
|
* Fri Jun 25 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-5
|
|
|
|
- Remove support for SHA-1 and MD5 (rhbz#1936619)
|
|
|
|
- Do not set RPATH (rhbz#1967200)
|
|
|
|
- Fix coverity findings (rhbz#1938830)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jun 29 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-4
|
|
|
|
* Wed Jun 16 2021 Stephen Gallagher <sgallagh@redhat.com> - 1:1.3.5-4
|
|
|
|
- Fix failing test tests/API/XCCDF/unittests/test_profile_selection_by_suffix.sh
|
|
|
|
- Skip RPATH check temporarily
|
|
|
|
- Add 'null' yamlfilecontent values handling
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 28 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-3
|
|
|
|
* Fri Jun 04 2021 Python Maint <python-maint@redhat.com> - 1:1.3.5-3
|
|
|
|
- Do not set RPATH on built binaries
|
|
|
|
- Rebuilt for Python 3.10
|
|
|
|
- Fix UBI9 scan (rhbz#1953610)
|
|
|
|
|
|
|
|
- Fix failing rpminspect xml test
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Thu May 20 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-2
|
|
|
|
* Mon Apr 26 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-2
|
|
|
|
- Remove containers subpackage
|
|
|
|
- Waive the known issue with hugepages on ppc64/ppc64le
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Apr 23 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-1
|
|
|
|
* Fri Apr 23 2021 Jan Černý <jcerny@redhat.com> - 1:1.3.5-1
|
|
|
|
- Update to the latest upstream release
|
|
|
|
- Update to the latest upstream release
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.3.4-4
|
|
|
|
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.3.4-4
|
|
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Dec 09 2020 Jan Černý <jcerny@redhat.com> - 1:1.3.4-3
|
|
|
|
* Wed Dec 09 2020 Jan Černý <jcerny@redhat.com> - 1:1.3.4-3
|
|
|
|
- Remove dependency on GConf2
|
|
|
|
- Remove dependency on GConf2
|
|
|
@ -343,10 +351,10 @@ pathfix.py -i %{__python3} -p -n $RPM_BUILD_ROOT%{_bindir}/scap-as-rpm
|
|
|
|
* Thu Jun 13 2019 Jan Černý <jcerny@redhat.com> - 1:1.3.1-1
|
|
|
|
* Thu Jun 13 2019 Jan Černý <jcerny@redhat.com> - 1:1.3.1-1
|
|
|
|
- upgrade to the latest upstream release
|
|
|
|
- upgrade to the latest upstream release
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 10 22:13:21 CET 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1:1.3.0-7
|
|
|
|
* Mon Jun 10 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1:1.3.0-7
|
|
|
|
- Rebuild for RPM 4.15
|
|
|
|
- Rebuild for RPM 4.15
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 10 15:42:04 CET 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1:1.3.0-6
|
|
|
|
* Mon Jun 10 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1:1.3.0-6
|
|
|
|
- Rebuild for RPM 4.15
|
|
|
|
- Rebuild for RPM 4.15
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Jun 01 2019 Jitka Plesnikova <jplesnik@redhat.com> - 1:1.3.0-5
|
|
|
|
* Sat Jun 01 2019 Jitka Plesnikova <jplesnik@redhat.com> - 1:1.3.0-5
|
|
|
|