Jan Černý

harden_sshd_ciphers_opensshserver_conf_crypto_policy is misaligned with DISA

2

#### Description of problem: harden_sshd_ciphers_opensshserver_conf_crypto_policy is misaligned with DISA #### Details: The SSG's rule checks for a specific list of ciphers. It fails because it finds this: ``` Ciphers [email protected],aes256-ctr,[email protected],aes128-ctr...

#### Description of problem: file_permissions_library_dirs is misaligned with DISA #### Details: SSG's rule passes but DISA's rule flags 2 items that are violating the rule: - /lib/polkit-1/polkit-agent-helper-1 - /usr/lib/polkit-1/polkit-agent-helper-1 It...

#### Description of problem: service_pcscd_enabled is misaligned with DISA #### Details: The SSG's rule passes even if the service is inactive, it's enough if the corresponding socket is active, but...

#### Description of problem: accounts_password_pam_retry is misaligned with DISA #### Details: The SSG's rule checks multiple locations and finds `retry = 3` in `/etc/security/pwquality.conf`. The DISA's rule checks only `/etc/pam.d/system-auth`....

#### Description of problem: accounts_password_pam_pwhistory_remember_system_auth is misaligned with DISA #### Details: The SSG's rule allows to set the remember option also in /etc/security/pwhistory.conf and it prefers this file path. The...

Stop building -ds-1.2.xml data streams

4

#### Description: This change will stop building the -ds-1.2.xml data streams. These data streams are marked as SCAP 1.2 data streams, but they aren't SCAP 1.2 compatible, because they contain...

Improve Rsyslog rules to support Rainer script syntax

4

#### Description: Improve OVAL checks so that the rule will pass if the modern Rainer script syntax is used. Up until now these rules passed only when the legacy configuration...

This request is to add ability to generate HTML guides using `oscap-report`. It will replace the `oscap xccdf generate guide` feature of OpenSCAP. **Is your feature request related to a...

**Is your feature request related to a problem? Please describe.** Recently, OVAL test details subwindow has been improved (eg. in #235 and #239). It now contains better structured data. However,...

Stop creating HTML content programatically

1

**Is your feature request related to a problem? Please describe.** Some parts of the HTML content are created by the JavaScript code. Namely, the tables and other HTML content in...