17
0

153 Commits

Author SHA256 Message Date
090ec82d6f Accepting request 1323117 from security
- updated to 0.1.79 (jsc#ECO-3319)
    - Add rhcos4 Profile for BSI Grundschutz
    - Create SLE15 general profile
    - Fix crypto policy settings in RHEL CIS profiles
    - Remove deprecated CIS OpenShift 1.4.0 and 1.5.0 profiles
    - Remove OCP STIG V1R1
    - Remove OCP STIG V2R1
    - Various updates for SLE 12/15 (forwarded request 1323114 from boychev)

OBS-URL: https://build.opensuse.org/request/show/1323117
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=46
2025-12-16 16:22:43 +00:00
6e18502485 - updated to 0.1.79 (jsc#ECO-3319)
- Add rhcos4 Profile for BSI Grundschutz
    - Create SLE15 general profile
    - Fix crypto policy settings in RHEL CIS profiles
    - Remove deprecated CIS OpenShift 1.4.0 and 1.5.0 profiles
    - Remove OCP STIG V1R1
    - Remove OCP STIG V2R1
    - Various updates for SLE 12/15

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=146
2025-12-16 13:12:41 +00:00
3e5300eb2b Accepting request 1308157 from security
- updated to 0.1.78 (jsc#ECO-3319)
    - Enable SCE content for problematic rules that can traverse the whole filesystem
    - Remove unnecessary Jinja2 macros in control files
    - Update RHEL 8 STIG to V2R4 and RHEL 9 STIG to V2R5
    - Add Debian 13 profile for ANSSI BP 28 (enhanced)
    - Create SLEM5 General profile
    - Create SL Micro 6 product and general profile
    - Update SLE15 STIG version to V2R5
    - Update SLE12 STIG version to V3R3
    - Update SLEM5 STIG version to V1R2
- Remove the cis profiles from all products

OBS-URL: https://build.opensuse.org/request/show/1308157
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=45
2025-09-30 15:43:04 +00:00
784fe717a1 - updated to 0.1.78 (jsc#ECO-3319)
- Enable SCE content for problematic rules that can traverse the whole filesystem
    - Remove unnecessary Jinja2 macros in control files
    - Update RHEL 8 STIG to V2R4 and RHEL 9 STIG to V2R5
    - Add Debian 13 profile for ANSSI BP 28 (enhanced)
    - Create SLEM5 General profile
    - Create SL Micro 6 product and general profile
    - Update SLE15 STIG version to V2R5
    - Update SLE12 STIG version to V3R3
    - Update SLEM5 STIG version to V1R2
- Remove the cis profiles from all products

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=144
2025-09-30 07:06:21 +00:00
4339011892 Accepting request 1300811 from security
- Remove the cis profiles from the tarball 

- Remove ssg-remove-cis.patch: tarball
- Add check if cis profiles exists in the tarball

OBS-URL: https://build.opensuse.org/request/show/1300811
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=44
2025-08-21 18:32:37 +00:00
b26b572e72 - Remove the cis profiles from the tarball
- Remove ssg-remove-cis.patch: tarball
- Add check if cis profiles exists in the tarball

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=142
2025-08-21 13:36:28 +00:00
2ceabb0dee Accepting request 1296600 from security
- ssg-remove-cis.patch: remove cis profiles 
- Update description: remove cis profiles

OBS-URL: https://build.opensuse.org/request/show/1296600
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=43
2025-07-31 15:46:03 +00:00
88328a3008 - Update description: remove cis profiles
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=140
2025-07-30 15:51:39 +00:00
63295ed42a OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=139 2025-07-30 08:36:33 +00:00
5d26e8ecce - Updare description: remove cis profiles
- ssg-remove-cis.patch: remove cis profiles

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=138
2025-07-30 08:36:04 +00:00
0e326638a9 Accepting request 1288195 from security
- buildrequire cmake3 on older SLES versions for build (forwarded request 1288194 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1288195
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=42
2025-06-24 18:50:01 +00:00
8966dead33 - buildrequire cmake3 on older SLES versions for build
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=136
2025-06-24 08:54:07 +00:00
d3d3d7b5a8 Accepting request 1285187 from security
- updated to 0.1.77 (jsc#ECO-3319)
    - Introduce Architecture Decisions Records 
    - Move stablization to the third Monday of the second month 
    - Remove CCI References 
    - Remove macOS content 
- removed ssg-fix-python.patch: upstream
- Added support for tencentos4

OBS-URL: https://build.opensuse.org/request/show/1285187
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=41
2025-06-13 16:43:50 +00:00
ea933a15d8 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=134 2025-06-12 14:45:45 +00:00
e197488cb1 - removed ssg-fix-python.patch: upstream
- Added support for tencentos4

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=133
2025-06-12 14:45:24 +00:00
d44abf462b Accepting request 1285184 from home:rchikov
- Added support for tencentos4 

- removed a line with patch keyword from spec file 

- the patch was removed, because it exists in upstream 

- fix a typo error in tarball name 

- make a new request because the tarball was missing 

- updated to 0.1.77 (jsc#ECO-3319)
    - Introduce Architecture Decisions Records 
    - Move stablization to the third Monday of the second month 
    - Remove CCI References 
    - Remove macOS content

OBS-URL: https://build.opensuse.org/request/show/1285184
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=132
2025-06-12 14:44:10 +00:00
5ce6210c14 Accepting request 1255397 from security
- ssg-fix-python.patch: fix build with older python3.

- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Remove Group: declarations, no longer used

- creation of a new request
- removed tables reference related to almalinux9 builds
- fix a bug in redhad package description for almalinux9 builds
- updates redhat package to include almalinux9 builds
- added build support for almalinux9
- removed ssg-reproducable.patch: upstream
  -  Add new product for Ubuntu 24.04 and draft CIS profiles
  -  Add pyproject.toml for the ssg package
  -  AlmaLinux OS 9 as a new product
  -  Documentation for ssg library
  -  Extend SSG library to more easily collect profile selections
  -  Extend SSG with functions to manage variables
  -  Add new product kylinserver10
  -  Create OL10 product
  -  Update PCI-DSS control file for version 4.0.1
  -  Release SLMicro5 product
  -  Various updates for SLE 12/15

OBS-URL: https://build.opensuse.org/request/show/1255397
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=40
2025-03-25 21:09:27 +00:00
827d40dab8 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=130 2025-03-23 12:23:49 +00:00
c98d06b0b1 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=129 2025-03-23 10:13:25 +00:00
6fce486858 - ssg-fix-python.patch: fix build with older python3.
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=128
2025-03-23 10:12:23 +00:00
8831a0077a Accepting request 1255312 from home:sfalken:branches:security
- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Remove Group: declarations, no longer used

- creation of a new request
- removed tables reference related to almalinux9 builds
- fix a bug in redhad package description for almalinux9 builds
- updates redhat package to include almalinux9 builds
- added build support for almalinux9
- removed ssg-reproducable.patch: upstream
  -  Add new product for Ubuntu 24.04 and draft CIS profiles
  -  Add pyproject.toml for the ssg package
  -  AlmaLinux OS 9 as a new product
  -  Documentation for ssg library
  -  Extend SSG library to more easily collect profile selections
  -  Extend SSG with functions to manage variables
  -  Add new product kylinserver10
  -  Create OL10 product
  -  Update PCI-DSS control file for version 4.0.1
  -  Release SLMicro5 product
  -  Various updates for SLE 12/15

OBS-URL: https://build.opensuse.org/request/show/1255312
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=127
2025-03-23 10:11:22 +00:00
d213ee2cc6 Accepting request 1252096 from security
- creation of a new request  

- removed tables reference related to almalinux9 builds 

- fix a bug in redhad package description for almalinux9 builds 

- updates redhat package to include almalinux9 builds  

- added build support for almalinux9  

- removed ssg-reproducable.patch: upstream 

- updated to 0.1.76 (jsc#ECO-3319)
  -  Add new product for Ubuntu 24.04 and draft CIS profiles 
  -  Add pyproject.toml for the ssg package 
  -  AlmaLinux OS 9 as a new product 
  -  Documentation for ssg library 
  -  Extend SSG library to more easily collect profile selections 
  -  Extend SSG with functions to manage variables

OBS-URL: https://build.opensuse.org/request/show/1252096
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=39
2025-03-11 19:46:59 +00:00
997c77bc1c OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=125 2025-03-11 14:51:54 +00:00
b4da010fda - creation of a new request
- removed tables reference related to almalinux9 builds 

- fix a bug in redhad package description for almalinux9 builds 

- updates redhat package to include almalinux9 builds  

- added build support for almalinux9  

- removed ssg-reproducable.patch: upstream 

- updated to 0.1.76 (jsc#ECO-3319)
  -  Add new product for Ubuntu 24.04 and draft CIS profiles 
  -  Add pyproject.toml for the ssg package 
  -  AlmaLinux OS 9 as a new product 
  -  Documentation for ssg library 
  -  Extend SSG library to more easily collect profile selections 
  -  Extend SSG with functions to manage variables

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=124
2025-03-11 14:51:26 +00:00
0c0430d0e0 Accepting request 1229844 from security
- ssg-reproducable.patch: replace two date injections by SOURCE_DATE_EPOCH
  to make reproducible. bsc#1230361 (forwarded request 1229843 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1229844
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=38
2024-12-10 22:49:38 +00:00
10c9c4e0d0 - ssg-reproducable.patch: replace two date injections by SOURCE_DATE_EPOCH
to make reproducible. bsc#1230361

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=122
2024-12-10 14:55:45 +00:00
582547057c Accepting request 1228301 from security
- updated to 0.1.75 (jsc#ECO-3319)
  -  Add new product kylinserver10 
  -  Create OL10 product 
  -  Update PCI-DSS control file for version 4.0.1 
  -  Add Ism profile for ol8, ol9
  -  Release SLMicro5 product 
  -  Various updates for SLE 12/15

OBS-URL: https://build.opensuse.org/request/show/1228301
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=37
2024-12-05 16:08:46 +00:00
e6d0020773 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=120 2024-12-04 11:26:24 +00:00
882b6b8b92 - updated to 0.1.75 (jsc#ECO-3319)
-  Add new product kylinserver10 
  -  Create OL10 product 
  -  Update PCI-DSS control file for version 4.0.1 
  -  Add Ism profile for ol8, ol9
  -  Release SLMicro5 product 
  -  Various updates for SLE 12/15

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=119
2024-12-04 09:55:46 +00:00
57a435bb5e Accepting request 1198901 from security
- updated to 0.1.74 (jsc#ECO-3319)
  - Add Amazon Linux 2023 product (#12006)
  - Introduce new remediation type Kickstart (#12144)
  - Make PAM macros more flexible to variables (#12133)
  - Remove Debian 10 Product (#12205)
  - Remove Red Hat Enterprise Linux 7 product (#12093)
  - Update CIS RHEL9 control file to v2.0.0 (#12067)

OBS-URL: https://build.opensuse.org/request/show/1198901
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=36
2024-09-05 13:47:27 +00:00
02ce1f4c8f OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=117 2024-09-05 07:31:47 +00:00
6f03042088 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=116 2024-09-04 16:27:10 +00:00
21c22859a7 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=115 2024-09-04 13:13:45 +00:00
39b38338e7 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=114 2024-09-04 12:09:03 +00:00
7444a1e3cb OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=113 2024-09-04 08:59:26 +00:00
af74b29b13 Accepting request 1198315 from home:rchikov
- updated to 0.1.74 (jsc#ECO-3319)
  - Add Amazon Linux 2023 product (#12006)
  - Introduce new remediation type Kickstart (#12144)
  - Make PAM macros more flexible to variables (#12133)
  - Remove Debian 10 Product (#12205)
  - Remove Red Hat Enterprise Linux 7 product (#12093)
  - Update CIS RHEL9 control file to v2.0.0 (#12067)

OBS-URL: https://build.opensuse.org/request/show/1198315
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=112
2024-09-02 14:26:03 +00:00
14348c30db Accepting request 1178138 from security
- updated to 0.1.73 (jsc#ECO-3319)
  - CMP 2417: Implement PCI-DSS v4.0 outline for OpenShift (#11651)
  - Update all RHEL ANSSI BP028 profiles to be aligned with configuration recommendations version 2.0
  - Generate rule references from control files (#11540)
  - Initial implementation of STIG V1R1 profile for Ubuntu 22.04 LTS (#11820)

OBS-URL: https://build.opensuse.org/request/show/1178138
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=35
2024-06-03 15:43:27 +00:00
a93fba771c OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=110 2024-06-02 10:03:19 +00:00
30b35efdf7 Accepting request 1177884 from home:rchikov
- updated to 0.1.73 (jsc#ECO-3319)
  - CMP 2417: Implement PCI-DSS v4.0 outline for OpenShift (#11651)
  - Update all RHEL ANSSI BP028 profiles to be aligned with configuration recommendations version 2.0
  - Generate rule references from control files (#11540)
  - Initial implementation of STIG V1R1 profile for Ubuntu 22.04 LTS (#11820)

OBS-URL: https://build.opensuse.org/request/show/1177884
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=109
2024-06-02 10:02:34 +00:00
96d81ca268 Accepting request 1146536 from security
- updated to 0.1.72 (jsc#ECO-3319)
  - ANSSI BP 028 profile for debian12 (#11368)
  - Building on Windows (#11406)
  - Control for BSI APP.4.4 (#11342)
  - update to CIS RHEL 7 and RHEL 8 profiles aligning them with the latest benchmarks
  - various fixes to SLE profiles
- add openeuler to -redhat package
- removed ssg-fix-journald.patch: fixed upstream

OBS-URL: https://build.opensuse.org/request/show/1146536
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=34
2024-02-14 22:19:01 +00:00
3ac2c23c44 - add openeuler to -redhat package
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=107
2024-02-14 09:47:53 +00:00
6e0ee3582a - add openeuler to -redhat package
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=106
2024-02-14 08:05:30 +00:00
731e806bbf Accepting request 1146455 from home:msmeissn:branches:security
- updated to 0.1.72 (jsc#ECO-3319)
  - ANSSI BP 028 profile for debian12 (#11368)
  - Building on Windows (#11406)
  - Control for BSI APP.4.4 (#11342)
  - update to CIS RHEL 7 and RHEL 8 profiles aligning them with the latest benchmarks
  - various fixes to SLE profiles
- removed ssg-fix-journald.patch: fixed upstream

OBS-URL: https://build.opensuse.org/request/show/1146455
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=105
2024-02-13 16:29:31 +00:00
f268fcef31 Accepting request 1137951 from security
- removed left over file
  0001-Revert-fix-aide-remediations-add-crontabs.patch upstreamed in 0.1.69

OBS-URL: https://build.opensuse.org/request/show/1137951
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=33
2024-01-10 20:53:20 +00:00
d5a14ad98e OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=103 2024-01-10 14:20:40 +00:00
b89892b2dc - removed left over file
0001-Revert-fix-aide-remediations-add-crontabs.patch upstreamed in 0.1.69

OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=102
2024-01-10 14:20:21 +00:00
5afc6518e1 OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=101 2024-01-10 14:19:45 +00:00
841be0f343 - dropped 0001-Revert-fix-aide-remediations-add-crontabs.patch (upstreamed)
OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=100
2024-01-10 14:18:37 +00:00
7653dd5e26 Accepting request 1134450 from security
- ssg-fix-journald.patch: switch buggy journald plugindir remediation
  to write into journald.conf. (bsc#1217832)

OBS-URL: https://build.opensuse.org/request/show/1134450
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scap-security-guide?expand=0&rev=32
2023-12-21 22:39:19 +00:00
b48927e9fb OBS-URL: https://build.opensuse.org/package/show/security/scap-security-guide?expand=0&rev=98 2023-12-21 10:11:21 +00:00