|
|
|
|
@ -5,14 +5,18 @@
|
|
|
|
|
# global _default_patch_fuzz 2 # Normally shouldn't be needed as patches should apply cleanly
|
|
|
|
|
|
|
|
|
|
Name: scap-security-guide
|
|
|
|
|
Version: 0.1.74
|
|
|
|
|
Release: 1%{?dist}
|
|
|
|
|
Version: 0.1.73
|
|
|
|
|
Release: 1%{?dist}.inferit.5
|
|
|
|
|
Summary: Security guidance and baselines in SCAP formats
|
|
|
|
|
License: BSD-3-Clause
|
|
|
|
|
URL: https://github.com/ComplianceAsCode/content/
|
|
|
|
|
Source0: https://github.com/ComplianceAsCode/content/releases/download/v%{version}/scap-security-guide-%{version}.tar.bz2
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
|
|
|
|
|
# MSVSphere
|
|
|
|
|
#Patch1000: scap-security-guide-0.1.73-add-msvsphere9-product.patch
|
|
|
|
|
Patch1000: 0001-Add-session-monitor-rule.patch
|
|
|
|
|
|
|
|
|
|
BuildRequires: libxslt
|
|
|
|
|
BuildRequires: expat
|
|
|
|
|
BuildRequires: openscap-scanner >= 1.2.5
|
|
|
|
|
@ -44,7 +48,7 @@ The %{name}-doc package contains HTML formatted documents containing
|
|
|
|
|
hardening guidances that have been generated from XCCDF benchmarks
|
|
|
|
|
present in %{name} package.
|
|
|
|
|
|
|
|
|
|
%if ( %{defined rhel} && (! %{defined centos}) )
|
|
|
|
|
%if %{defined rhel}
|
|
|
|
|
%package rule-playbooks
|
|
|
|
|
Summary: Ansible playbooks per each rule.
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
@ -65,6 +69,10 @@ The %{name}-rule-playbooks package contains individual ansible playbooks per rul
|
|
|
|
|
%if 0%{?centos}
|
|
|
|
|
%define cmake_defines_specific -DSSG_PRODUCT_DEFAULT:BOOLEAN=FALSE -DSSG_PRODUCT_RHEL%{centos}:BOOLEAN=TRUE -DSSG_SCIENTIFIC_LINUX_DERIVATIVES_ENABLED:BOOL=OFF -DSSG_CENTOS_DERIVATIVES_ENABLED:BOOL=ON
|
|
|
|
|
%endif
|
|
|
|
|
%if 0%{?msvsphere}
|
|
|
|
|
%define cmake_defines_specific -DSSG_PRODUCT_DEFAULT:BOOLEAN=FALSE -DSSG_PRODUCT_MSVSPHERE%{msvsphere}:BOOLEAN=TRUE -DSSG_SCIENTIFIC_LINUX_DERIVATIVES_ENABLED:BOOL=OFF -DSSG_CENTOS_DERIVATIVES_ENABLED:BOOL=OFF -DSSG_ANSIBLE_PLAYBOOKS_PER_RULE_ENABLED:BOOL=ON
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
mkdir -p build
|
|
|
|
|
%build
|
|
|
|
|
@ -90,23 +98,31 @@ rm %{buildroot}/%{_docdir}/%{name}/Contributors.md
|
|
|
|
|
%doc %{_docdir}/%{name}/guides/*.html
|
|
|
|
|
%doc %{_docdir}/%{name}/tables/*.html
|
|
|
|
|
|
|
|
|
|
%if ( %{defined rhel} && (! %{defined centos}) )
|
|
|
|
|
%if %{defined rhel}
|
|
|
|
|
%files rule-playbooks
|
|
|
|
|
%defattr(-,root,root,-)
|
|
|
|
|
%{_datadir}/%{name}/ansible/rule_playbooks
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
* Fri Aug 09 2024 Matthew Burket <mburket@redhat.com> - 0.1.74-1
|
|
|
|
|
- Rebase to a new upstream release 0.1.74 (RHEL-53865)
|
|
|
|
|
- Ensure authselect features are preserved by enable_authselect rule (RHEL-39383)
|
|
|
|
|
- Fix check for passwords last changed date (RHEL-47129)
|
|
|
|
|
- Remediations of Journald configuration files now include a correct section (RHEL-38531)
|
|
|
|
|
- Adjust service requirements for CIS profiles (RHEL-23852)
|
|
|
|
|
- Update password hashing settings for ANSSI-BP-028 (RHEL-44983)
|
|
|
|
|
* Thu Sep 26 2024 Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 0.1.73-1.inferit.5
|
|
|
|
|
- Next bump
|
|
|
|
|
|
|
|
|
|
* Wed Aug 07 2024 Milan Lysonek <mlysonek@redhat.com> - 0.1.73-2
|
|
|
|
|
- Switch gating to tmt plan (RHEL-43243)
|
|
|
|
|
* Mon Sep 23 2024 Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 0.1.73-1.inferit.4
|
|
|
|
|
- Try and bump version
|
|
|
|
|
|
|
|
|
|
* Tue Sep 17 2024 Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 0.1.73-1.inferit.3
|
|
|
|
|
- bump version
|
|
|
|
|
|
|
|
|
|
* Fri Sep 13 2024 Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 0.1.73-1.inferit.2
|
|
|
|
|
- Added rule for tracking user sessions and locking screen when status changes
|
|
|
|
|
|
|
|
|
|
* Thu Aug 29 2024 Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 0.1.73-1.inferit.1
|
|
|
|
|
- Fixup: try to add MSVSphere security profiles
|
|
|
|
|
|
|
|
|
|
* Tue Aug 20 2024 Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 0.1.73-1.inferit
|
|
|
|
|
- Try to add MSVSphere security profiles
|
|
|
|
|
- Rebuilt for MSVSphere 9.4
|
|
|
|
|
|
|
|
|
|
* Mon May 20 2024 Vojtech Polasek <vpolasek@redhat.com> - 0.1.73-1
|
|
|
|
|
- Rebase to a new upstream release 0.1.73 (RHEL-36663)
|
|
|
|
|
@ -145,6 +161,9 @@ rm %{buildroot}/%{_docdir}/%{name}/Contributors.md
|
|
|
|
|
- Change rules checking password age to apply only to local users (RHBZ#2213958)
|
|
|
|
|
- Updated man page (RHBZ#2060028)
|
|
|
|
|
|
|
|
|
|
* Wed Mar 15 2023 MSVSphere Packaging Team <packager@msvsphere.ru> - 0.1.66-1
|
|
|
|
|
- Rebuilt for MSVSphere 9.1.
|
|
|
|
|
|
|
|
|
|
* Mon Feb 13 2023 Watson Sato <wsato@redhat.com> - 0.1.66-1
|
|
|
|
|
- Rebase to a new upstream release 0.1.66 (RHBZ#2169443)
|
|
|
|
|
- Fix remediation of audit watch rules (RHBZ#2169441)
|
|
|
|
|
|
