wazuh-ruleset Update oscap contents

Update oscap contents

Open Lopuiz opened this issue 5 years ago • 1 comments

I update oscap's contents to solve this issue. I modified all files and added two new files:

	scap_content/cve-ubuntu-cosmic-oval.xml
	scap_content/ssg-ubuntu-1804-ds.xml

I download the security policies in:

This changes should also do in wazuh and there is an issue about it.

Mar 28 '19 11:03 Lopuiz

Hi @Lopuiz and @albertomn86,

I think this PR should include new versions of SCAP policies available here:

https://github.com/ComplianceAsCode/content/releases/tag/v0.1.44

v0.1.44 is the last version of those policies, and everyone is updated in comparison to v0.1.35 (the last added to the Wazuh project).

As we can see here for the next policy, they have grown considerably between mentioned versions:

v0.1.35

root@ubuntu:~/scap-security-guide-0.1.35# ls -lah ssg-centos7-ds.xml
-rw-rw-r-- 1 root root 13M Aug 29  2017 ssg-centos7-ds.xml

v0.1.44

root@ubuntu:~/scap-security-guide-0.1.44# ls -lah ssg-centos7-ds.xml
-rw-rw-r-- 1 root root 26M May  3 07:48 ssg-centos7-ds.xml

Probably including new checks.

May 22 '19 09:05 chemamartinez