forked from pool/openscap
Accepting request 614943 from security
- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible
to match both opensuse and sles or official suse_linux_enterprise_server
names at once. (bsc#1091040)
- openscap-1.2.17
- New features
- HTML Guide user experience improvements
- New options in HTML report "Group By" menu
- oscap-ssh supports --oval-results (issue #863)
- Maintenance
- Support comparing state record elements with item
- Updated Bash completion
- Make Bash role headers consistent with --help output
- Fixed problems reported by Coverity (issue #909)
- Fixed CVE schema to support 4 to 7 digits CVEs
- Fix output of generated bash role missing fix message
- Fix oscap-docker to clean up temporary image (RHBZ #1454637)
- Fix Ansible remediations generation
- Add a newline between ids in xccdf info (issue #968)
- Fix unknown subtype handling in oval_subtype_parse (issue #986)
- Outsourced the pthreads feature check and setup
- Speed up in debug mode
- Refactored the Python handling in build scripts
- Prevent reading from host in offline mode (issue #1001)
- Many probes use OWN offline mode
- Improve offline mode logic in OVAL probes
- Do not use chroot in system_info probe
- Prevent a segfault in oscap_seterr on Solaris
- Out of tree build is possible
- Use chroot for RPM probes in offline mode
OBS-URL: https://build.opensuse.org/request/show/614943
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openscap?expand=0&rev=57
This commit is contained in:
Dominique Leuenberger
Git OBS Bridge
commit
1ef6929acc
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:7cc7853faddaa54fea69f642ace6ba561920ca3fd9199ae8f5c322e1281b18fb
|
||||
size 12489871
|
||||
3
1.2.17.tar.gz
Normal file
3
1.2.17.tar.gz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:877eeb69cf19f8cef9d161fabaa389b0a85477ddaf3be21e9ee3b84d4ca1841b
|
||||
size 12517674
|
||||
149
openscap.changes
149
openscap.changes
@ -1,3 +1,50 @@
|
||||
-------------------------------------------------------------------
|
||||
Thu Jun 7 08:46:23 UTC 2018 - meissner@suse.com
|
||||
|
||||
- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible
|
||||
to match both opensuse and sles or official suse_linux_enterprise_server
|
||||
names at once. (bsc#1091040)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 29 09:47:16 UTC 2018 - meissner@suse.com
|
||||
|
||||
- openscap-1.2.17
|
||||
- New features
|
||||
- HTML Guide user experience improvements
|
||||
- New options in HTML report "Group By" menu
|
||||
- oscap-ssh supports --oval-results (issue #863)
|
||||
- Maintenance
|
||||
- Support comparing state record elements with item
|
||||
- Updated Bash completion
|
||||
- Make Bash role headers consistent with --help output
|
||||
- Fixed problems reported by Coverity (issue #909)
|
||||
- Fixed CVE schema to support 4 to 7 digits CVEs
|
||||
- Fix output of generated bash role missing fix message
|
||||
- Fix oscap-docker to clean up temporary image (RHBZ #1454637)
|
||||
- Fix Ansible remediations generation
|
||||
- Add a newline between ids in xccdf info (issue #968)
|
||||
- Fix unknown subtype handling in oval_subtype_parse (issue #986)
|
||||
- Outsourced the pthreads feature check and setup
|
||||
- Speed up in debug mode
|
||||
- Refactored the Python handling in build scripts
|
||||
- Prevent reading from host in offline mode (issue #1001)
|
||||
- Many probes use OWN offline mode
|
||||
- Improve offline mode logic in OVAL probes
|
||||
- Do not use chroot in system_info probe
|
||||
- Prevent a segfault in oscap_seterr on Solaris
|
||||
- Out of tree build is possible
|
||||
- Use chroot for RPM probes in offline mode
|
||||
- PEP8 accepts lines up to 99 characters
|
||||
- New configure parameter --with-oscap-temp-dir (issue #1016)
|
||||
- Fixed OVAL record elements namespace and SEXP conversion
|
||||
- Removed '\r' characters from help output (issue #1023)
|
||||
- Full Python 3 compatibility
|
||||
- Removed basic Python implementation of oval_probes.c
|
||||
- Added support for Travis CI and Sonar Cloud
|
||||
- Minor fixes inspired by Sonar Cloud
|
||||
- Added Fedora 29 CPE
|
||||
- New tests in upstream test suite (offline mode, Ansible, etc.)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Apr 26 12:56:42 UTC 2018 - meissner@suse.com
|
||||
|
||||
@ -23,7 +70,7 @@ Thu Feb 22 13:41:36 UTC 2018 - meissner@suse.com
|
||||
-------------------------------------------------------------------
|
||||
Thu Nov 23 13:44:24 UTC 2017 - rbrown@suse.com
|
||||
|
||||
- Replace references to /var/adm/fillup-templates with new
|
||||
- Replace references to /var/adm/fillup-templates with new
|
||||
%_fillupdir macro (boo#1069468)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
@ -56,38 +103,38 @@ Tue Nov 14 12:14:41 UTC 2017 - meissner@suse.com
|
||||
Fri Aug 25 13:41:48 UTC 2017 - meissner@suse.com
|
||||
|
||||
- openscap-1.2.15 / 25-08-2017
|
||||
- New features
|
||||
- short profile names can be used instead of long IDs
|
||||
- new option --rule allows to evaluate only a single rule
|
||||
- new option --fix-type in "oscap xccdf generate fix" allows choosing
|
||||
remediation script type without typing long URL
|
||||
- "oscap info" shows profile titles
|
||||
- OVAL details in HTML report are easier to read
|
||||
- HTML report is smaller because unselected rules are removed
|
||||
- HTML report supports NIST 800-171 and CJIS
|
||||
- remediation scripts contain headers with useful information
|
||||
- remediation scripts report progress when they run
|
||||
- basic support for Oracle Linux (CPEs, runlevels)
|
||||
- remediation scripts can be generated from datastreams that contain
|
||||
multiple XCCDF benchmarks (issue #772)
|
||||
- basic support for OVAL 5.11.2 (only schemas, no features)
|
||||
- enabled offline RPM database in rpminfo probe (issue #778)
|
||||
- added Fedora 28 CPE
|
||||
- Maintenance
|
||||
- fixed oscap-docker with Docker >= 2.0 (issue #794)
|
||||
- fixed behavior of sysctl probe to be consistent with sysctl tool
|
||||
- fixed generating remediation scripts (issue #723, #773)
|
||||
- severity of tailored rules is not discarded (issue #739)
|
||||
- fixed errors in RPM probes initialization
|
||||
- oscap-docker shows all warnings reported by oscap (issue #713)
|
||||
- small improvements in verbose mode
|
||||
- standard C operations are used instead of custom OpenSCAP operations
|
||||
- fixed compiler warnings
|
||||
- fixed missing header files
|
||||
- fixed resource leaks (issue #715)
|
||||
- fixed pkgconfig file (RHBZ #1414777)
|
||||
- refactoring
|
||||
- documentation fixes and improvements
|
||||
- New features
|
||||
- short profile names can be used instead of long IDs
|
||||
- new option --rule allows to evaluate only a single rule
|
||||
- new option --fix-type in "oscap xccdf generate fix" allows choosing
|
||||
remediation script type without typing long URL
|
||||
- "oscap info" shows profile titles
|
||||
- OVAL details in HTML report are easier to read
|
||||
- HTML report is smaller because unselected rules are removed
|
||||
- HTML report supports NIST 800-171 and CJIS
|
||||
- remediation scripts contain headers with useful information
|
||||
- remediation scripts report progress when they run
|
||||
- basic support for Oracle Linux (CPEs, runlevels)
|
||||
- remediation scripts can be generated from datastreams that contain
|
||||
multiple XCCDF benchmarks (issue #772)
|
||||
- basic support for OVAL 5.11.2 (only schemas, no features)
|
||||
- enabled offline RPM database in rpminfo probe (issue #778)
|
||||
- added Fedora 28 CPE
|
||||
- Maintenance
|
||||
- fixed oscap-docker with Docker >= 2.0 (issue #794)
|
||||
- fixed behavior of sysctl probe to be consistent with sysctl tool
|
||||
- fixed generating remediation scripts (issue #723, #773)
|
||||
- severity of tailored rules is not discarded (issue #739)
|
||||
- fixed errors in RPM probes initialization
|
||||
- oscap-docker shows all warnings reported by oscap (issue #713)
|
||||
- small improvements in verbose mode
|
||||
- standard C operations are used instead of custom OpenSCAP operations
|
||||
- fixed compiler warnings
|
||||
- fixed missing header files
|
||||
- fixed resource leaks (issue #715)
|
||||
- fixed pkgconfig file (RHBZ #1414777)
|
||||
- refactoring
|
||||
- documentation fixes and improvements
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Apr 7 09:35:00 UTC 2017 - jengelh@inai.de
|
||||
@ -277,24 +324,24 @@ Tue Jan 19 10:22:08 UTC 2016 - meissner@suse.com
|
||||
Thu Dec 3 13:06:14 UTC 2015 - meissner@suse.com
|
||||
|
||||
- openscap 1.2.7 release
|
||||
- New features
|
||||
- OVAL 5.11.1 fully supported
|
||||
- oscap-vm - tool for offline scanning of virtual machines
|
||||
- verbose mode
|
||||
- added SLED, SLES and OpenSUSE CPE names
|
||||
- show profile description in HTML report and guide
|
||||
- group rules by PCI DSS identifier in HTML report
|
||||
- preliminary support for Ansible Playbooks within xccdf:fix
|
||||
- added "How to contribute" and "Versioning" documents
|
||||
- Maintenance
|
||||
- using bziped RHSA documents in oscap-docker
|
||||
- fixed errors of sysctl probe
|
||||
- fixed skip-valid option (issue #203)
|
||||
- fixed segmentation faults in SCE content reporting (issue #231)
|
||||
- fixed tracebacks of scap-as-rpm
|
||||
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
|
||||
- updated README and user manual
|
||||
- many small bugfixes and new tests
|
||||
- New features
|
||||
- OVAL 5.11.1 fully supported
|
||||
- oscap-vm - tool for offline scanning of virtual machines
|
||||
- verbose mode
|
||||
- added SLED, SLES and OpenSUSE CPE names
|
||||
- show profile description in HTML report and guide
|
||||
- group rules by PCI DSS identifier in HTML report
|
||||
- preliminary support for Ansible Playbooks within xccdf:fix
|
||||
- added "How to contribute" and "Versioning" documents
|
||||
- Maintenance
|
||||
- using bziped RHSA documents in oscap-docker
|
||||
- fixed errors of sysctl probe
|
||||
- fixed skip-valid option (issue #203)
|
||||
- fixed segmentation faults in SCE content reporting (issue #231)
|
||||
- fixed tracebacks of scap-as-rpm
|
||||
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
|
||||
- updated README and user manual
|
||||
- many small bugfixes and new tests
|
||||
- openscap-new-inventory.patch: upstreamed
|
||||
- fix-missing-include.dif: refreshed, 1 hunk upstream
|
||||
|
||||
|
||||
@ -25,7 +25,7 @@
|
||||
%define with_bindings 0
|
||||
|
||||
Name: openscap
|
||||
Version: 1.2.16
|
||||
Version: 1.2.17
|
||||
Release: 1.0
|
||||
Source: https://github.com/OpenSCAP/openscap/archive/%{version}.tar.gz
|
||||
Source2: sysconfig.oscap-scan
|
||||
@ -293,7 +293,11 @@ ln -s %{_datadir}/openscap/scap-yast2sec-xccdf.xml %{buildroot}/%{_datadir}/ope
|
||||
|
||||
%files docker
|
||||
%defattr(-, root, root)
|
||||
%if 0%{?suse_version} >= 1500
|
||||
%{python3_sitelib}/oscap_docker_python
|
||||
%else
|
||||
%{python_sitelib}/oscap_docker_python
|
||||
%endif
|
||||
%{_bindir}/oscap-docker
|
||||
|
||||
%if 0%{?with_bindings}
|
||||
|
||||
@ -12,7 +12,6 @@
|
||||
hardening of your system, as well as the configuration through the <h:em>syctl</h:em>
|
||||
settings.
|
||||
</description>
|
||||
<platform idref="cpe:/o:suse:linux"/>
|
||||
<version>1</version>
|
||||
<model system="urn:xccdf:scoring:default"/>
|
||||
<model system="urn:xccdf:scoring:flat"/>
|
||||
|
||||
Loading…
Reference in New Issue
Block a user