From b4e2e1e3e7403e04eaf4eab80e7565176ac97e8f Mon Sep 17 00:00:00 2001 From: Sergey Cherevko Date: Tue, 17 Sep 2024 18:04:52 +0300 Subject: [PATCH] fixup! Added rule for tracking user sessions and locking screen when status changes --- SOURCES/0001-Add-session-monitor-rule.patch | 20 ++++++++++++-------- SPECS/scap-security-guide.spec | 5 ++++- 2 files changed, 16 insertions(+), 9 deletions(-) diff --git a/SOURCES/0001-Add-session-monitor-rule.patch b/SOURCES/0001-Add-session-monitor-rule.patch index 6065713..85f43bd 100644 --- a/SOURCES/0001-Add-session-monitor-rule.patch +++ b/SOURCES/0001-Add-session-monitor-rule.patch @@ -1,6 +1,6 @@ -From 76c7cb36ce7552702001d11aad0f53aca069b8a6 Mon Sep 17 00:00:00 2001 +From 8b98419853a53dc399b4cf9415c22b3303793d95 Mon Sep 17 00:00:00 2001 From: Sergey Cherevko -Date: Mon, 16 Sep 2024 18:15:46 +0300 +Date: Tue, 17 Sep 2024 17:45:27 +0300 Subject: [PATCH] Add session-monitor rule --- @@ -11,9 +11,9 @@ Subject: [PATCH] Add session-monitor rule .../service_session-monitor_enabled/rule.yml | 40 +++++++ products/msvsphere9/CMakeLists.txt | 8 ++ .../cpe/msvsphere9-cpe-dictionary.xml | 10 ++ - .../ssg-msvsphere9-session-monitor-ks.cfg | 108 ++++++++++++++++++ - products/msvsphere9/product.yml | 26 +++++ - .../profiles/session-monitor.profile | 13 +++ + .../ssg-msvsphere9-session-monitor-ks.cfg | 112 ++++++++++++++++++ + products/msvsphere9/product.yml | 26 ++++ + .../profiles/session-monitor.profile | 13 ++ products/msvsphere9/transforms/constants.xslt | 16 +++ .../msvsphere9/transforms/table-style.xslt | 5 + .../transforms/xccdf-apply-overlay-stig.xslt | 8 ++ @@ -21,7 +21,7 @@ Subject: [PATCH] Add session-monitor rule .../xccdf2table-profileccirefs.xslt | 9 ++ .../oval/installed_OS_is_msvsphere9.xml | 34 ++++++ ssg/constants.py | 6 +- - 17 files changed, 339 insertions(+), 1 deletion(-) + 17 files changed, 343 insertions(+), 1 deletion(-) create mode 100644 components/session-monitor.yml create mode 100644 linux_os/guide/services/base/package_session-monitor_installed/rule.yml create mode 100644 linux_os/guide/services/base/service_session-monitor_enabled/rule.yml @@ -211,10 +211,10 @@ index 00000000..78a20f6a + diff --git a/products/msvsphere9/kickstart/ssg-msvsphere9-session-monitor-ks.cfg b/products/msvsphere9/kickstart/ssg-msvsphere9-session-monitor-ks.cfg new file mode 100644 -index 00000000..d6916013 +index 00000000..840f33b5 --- /dev/null +++ b/products/msvsphere9/kickstart/ssg-msvsphere9-session-monitor-ks.cfg -@@ -0,0 +1,108 @@ +@@ -0,0 +1,112 @@ +# SCAP Security Guide ANSSI BP-028 (minimal) profile kickstart for Red Hat Enterprise Linux 8 +# Version: 0.0.1 +# Date: 2021-01-28 @@ -318,6 +318,10 @@ index 00000000..d6916013 + +# Packages selection (%packages section is required) +%packages ++ ++# Require 'Server with GUI' package environment to be installed ++@^Server with GUI ++ +%end + +# Reboot after the installation is complete (optional) diff --git a/SPECS/scap-security-guide.spec b/SPECS/scap-security-guide.spec index 0c36bd1..a62fa18 100644 --- a/SPECS/scap-security-guide.spec +++ b/SPECS/scap-security-guide.spec @@ -6,7 +6,7 @@ Name: scap-security-guide Version: 0.1.73 -Release: 1%{?dist}.inferit.2 +Release: 1%{?dist}.inferit.3 Summary: Security guidance and baselines in SCAP formats License: BSD-3-Clause URL: https://github.com/ComplianceAsCode/content/ @@ -105,6 +105,9 @@ rm %{buildroot}/%{_docdir}/%{name}/Contributors.md %endif %changelog +* Tue Sep 17 2024 Sergey Cherevko - 0.1.73-1.inferit.3 +- bump version + * Fri Sep 13 2024 Sergey Cherevko - 0.1.73-1.inferit.2 - Added rule for tracking user sessions and locking screen when status changes