[ol6_latest_archive] scap-security-guide-0.1.28-3.0.3.el6.noarch

Name:	scap-security-guide
Version:	0.1.28
Release:	3.0.3.el6
Architecture:	noarch
Group:	System Environment/Base
Size:	14150064
License:	Public Domain
RPM:	scap-security-guide-0.1.28-3.0.3.el6.noarch.rpm
Source RPM:	scap-security-guide-0.1.28-3.0.3.el6.src.rpm
Build Date:	Wed Feb 22 2017
Build Host:	x86-ol6-builder-04.us.oracle.com
Vendor:	Oracle America
URL:	https://github.com/OpenSCAP/scap-security-guide
Summary:	Security guidance and baselines in SCAP formats
Description:	The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol (SCAP) format and constitutes a catalog of practical hardening advice, linked to government requirements where applicable. The project bridges the gap between generalized policy requirements and specific implementation guidelines. The Oracle Linux 6 system administrator can use the oscap command-line tool from the openscap-scanner package to verify that the system conforms to provided guideline. Refer to scap-security-guide(8) manual page for further information.

Changelog (Show File list) (Show related packages)

Wed Feb 22 2017 Ilya Okomin <ilya.okomin@oracle.com> 0.1.28-3.0.3
```
- Removed linux-audit@redhat.com reference [Orabug 25506066]
```

Tue Feb 14 2017 Ilya Okomin <ilya.okomin@oracle.com> 0.1.28-3.0.2

- Updated profiles and rules content to use Oracle titles [Orabug 25506066]

Mon Jan 09 2017 Kevin Lyons <kevin.x.lyons@oracle.com> 0.1.28-3.0.1

- Fixed OL CPE dictionary generation [Orabug 23182151]
- Replaced RedHat trademarked images in docs/RedHat/en-US/images with
  generic versions from docs/common/en-US.iamges.
- Replace JBoss logos with blank images.
- Fixed OL CPE names approved by NIST (ilya.okomin@oracle.com)
- Update description for Oracle Linux
- Added Oracle Linux 6 CPE support (Ilya Okomin)

Mon Nov 07 2016 Watson Sato <wsato@redhat.com> 0.1.28-3
```
- Add ComputeNode CPE for RHEL 6 and 7 (RH BZ#1311054)
```

Thu Feb 04 2016 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-2

- Update URL to PCI DSS standard (latest version is v3.1 from April 2015)
- Enhance title of CNSS No.1253 profile for Red Hat Enterprise Linux 6
  (RH BZ#1284045#c8)
- Drop 'install_hids' rule from PCI DSS profile for both Red Hat Enterprise
  Linux 6 and 7 (since we don't have an OVAL check for this requirement)

Tue Jan 19 2016 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.28-1

- Rebase to upstream 0.1.28 version
- Start using consistent IDs for OVAL definitions (RH BZ#1250808)

Tue Dec 15 2015 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-2

- Modify the upstream provided kickstart files for Red Hat Enterprise Linux 6
  to use internal scap-security-guide RPM package rather than upstream git
  repository copies (RH BZ#1251929)

Tue Dec 15 2015 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.27-1

- Rebase to upstream 0.1.27 version (RH BZ#1267509, RH BZ#1284045,
  RH BZ#1270329, RH BZ#1250895, RH BZ#1270710, RH BZ#1223865)
- Perform the spec changes necessary for the rebase:
  * Update path to remediation functions library, list of provided
  kickstart files, path to scap-security-guide(8) manual page, path
  to LICENSE file
  * Drop:
  - scap-security-guide-0.1.21-dev-shm-removable.patch
  - scap-security-guide-0.1.21-dont-include-the-test-profile.patch
  patches since they have been merged upstream
  * Replace:
  - scap-security-guide-0.1.21-document-kickstart-in-manual-page.patch
  with its updated:
  - scap-security-guide-0.1.27-document-kickstarts-in-manual-page.patch
  version to also document inclusion of new kickstart files for Red Hat
  Enterprise Linux 6 that are available in upstream's 0.1.27 release
  * Introduce the new scap-security-guide-doc subpackage (to contain the
  HTML formatted documents containing security guides that have been
  generated from XCCDF benchmarks present in the scap-security-guide package)
  * Include the datastream versions of Firefox and Java Runtime Environment
  (JRE) benchmarks

Tue Dec 15 2015 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-4

- Update R / BR to lightweight openscap-scanner >= 1.0.10-2 package
  (RH BZ#1243396)
- Update URL to point to official SCAP Security Guide GitHub repository

Tue May 12 2015 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-3

- Rebuild scap-security-guide RPM against openscap >= 1.0.9 in order the
  upstream SCAP Security Guide logo to be rendered properly in the generated
  HTML guide

Mon Mar 09 2015 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-2

- Re-implement nodev, noexec, and nosuid removable media OVAL checks
  (RH BZ#1185426)
- Don't include the 'test' profile into the SCAP content (RH BZ#1199946)
- Document USGCB profile kickstart availability for Red Hat Enterprise Linux 6
  in the scap-security-guide manual page (RH BZ#1133963)

Fri Feb 20 2015 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.21-1

- Upgrade to upstream 0.1.21 version
- Drop C2S profile patch since it has been adopted upstream
- Include datastream forms of benchmarks for Red Hat Enterprise Linux 6
  and Red Hat Enterprise Linux 7
- Include the kickstart file for United States Government Configuration
  Baseline (USGCB) profile for Red Hat Enterprise Linux 6

Thu Aug 28 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.18-3
```
- Update C2S profile <description> per request from CIS
```

Thu Jun 26 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.18-2

- Include the upstream STIG for RHEL 6 Server profile disclaimer file too

Sun Jun 22 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.18-1
```
- Make new 0.1.18 release
```

Wed May 14 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.17-2

- Drop vendor line from the spec file. Let the build system to provide it.

Fri May 09 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.17-1
```
- Upgrade to upstream 0.1.17 version
```
Mon May 05 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.16-2
```
- Initial RPM for RHEL base channels
```
Mon May 05 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.16-1
```
- Change naming scheme (0.1-16 => 0.1.16-1)
```

Fri Feb 21 2014 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-16

- Include datastream file into RHEL6 RPM package too
- Bump version

Tue Dec 24 2013 Shawn Wells <shawn@redhat.com> 0.1-16.rc2

+ RHEL6 stig-rhel6-server XCCDF profile renamed to stig-rhel6-server-upstream

Mon Dec 23 2013 Shawn Wells <shawn@redhat.com> 0.1-16.rc1

- [bugfix] RHEL6 no_empty_passwords remediation script overwrote
  system-auth symlink. Added --follow-symlink to sed command.

Fri Nov 01 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-15
```
- Version bump
```

Sat Oct 26 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-15.rc5

- Point the spec's source to proper remote tarball location
- Modify the main Makefile to use remote tarball when building RHEL/6's SRPM

Sat Oct 26 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-15.rc4
```
- Don't include the table html files two times
- Remove makewhatis
```

Fri Oct 25 2013 Shawn Wells <shawn@redhat.com> 0.1-15.rc3

- [bugfix] Updated rsyslog_remote_loghost to scan /etc/rsyslog.conf and /etc/rsyslog.d/*
- Numberous XCCDF->OVAL naming schema updates
- All rules now have CCE

Fri Oct 25 2013 Shawn Wells <shawn@redhat.com> 0.1-15.rc2

- RHEL/6 HTML table naming bugfixes (table-rhel6-*, not table-*-rhel6)

Fri Oct 25 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-15.rc1
```
- Apply spec file changes required by review request (RH BZ#1018905)
```

Thu Oct 24 2013 Shawn Wells <shawn@redhat.com> 0.1-14

- Formal RPM release
- Inclusion of rht-ccp profile
- OVAL unit testing patches
- Bash remediation patches
- Bugfixes

Mon Oct 07 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-14.rc1
```
- Change RPM versioning scheme to include release into tarball
```
Sat Sep 28 2013 Shawn Wells <shawn@redhat.com> 0.1-13
```
- Updated RPM spec file to fix rpmlint warnings
```
Wed Jun 26 2013 Shawn Wells <shawn@redhat.com> 0.1-12
```
- Updated RPM version to 0.1-12
```

Fri Apr 26 2013 Shawn Wells <shawn@redhat.com> 0.1-11

- Significant amount of OVAL bugfixes
- Incorporation of Draft RHEL/6 STIG feedback

Sat Feb 16 2013 Shawn Wells <shawn@redhat.com> 0.1-10

- `man scap-security-guide`
- OVAL bug fixes
- NIST 800-53 mappings update

Wed Nov 28 2012 Shawn Wells <shawn@redhat.com> 0.1-9

- Updated BuildRequires to reflect python-lxml (thank you, Ray S.!)
- Reverting to noarch RPM

Tue Nov 27 2012 Shawn Wells <shawn@redhat.com> 0.1-8

- Significant copy editing to XCCDF rules per community
  feedback on the DISA RHEL/6 STIG Initial Draft

Thu Nov 01 2012 Shawn Wells <shawn@redhat.com> 0.1-7

- Corrected XCCDF content errors
- OpenSCAP now supports CPE dictionaries, important to
  utilize --cpe-dict when scanning machines with OpenSCAP,
  e.g.:
  $ oscap xccdf eval --profile stig-server \
   --cpe-dict ssg-rhel6-cpe-dictionary.xml ssg-rhel6-xccdf.xml

Mon Oct 22 2012 Shawn Wells <shawn@redhat.com> 0.1-6

- Corrected RPM versioning, we're on 0.1 release 6 (not version 1 release 6)
- Updated RPM includes feedback received from DoD Consensus meetings

Fri Oct 05 2012 Jeffrey Blank <blank@eclipse.ncsc.mil> 1.0-5
```
- Adjusted installation directory to /usr/share/xml/scap.
```
Tue Aug 28 2012 Spencer Shimko <sshimko@tresys.com> 1.0-4
```
- Fix BuildRequires and Requires.
```
Tue Jul 03 2012 Jeffrey Blank <blank@eclipse.ncsc.mil> 1.0-3
```
- Modified install section, made description more concise.
```

Thu Apr 19 2012 Spencer Shimko <sshimko@tresys.com> 1.0-2

- Minor updates to pass some variables in from build system.

Mon Apr 02 2012 Shawn Wells <shawn@redhat.com> 1.0-1
```
- First attempt at SSG RPM. May ${deity} help us...
```