Watson Yuuma Sato

Improve handling of rsyslog files permissions fix wildcard path

5

#### Description: - Resubmitting #8726 with: - 2 more test scenarios for hidden and missing config files. - A small change in OVAL to ignore hidden config files. #### Rationale:...

Rule postfix_prevent_unrestricted_relay fails on STIG profile

1

#### Description of problem: During first remediation of STIG profile, rule `postfix_prevent_unrestricted_relay` is not applicable because `postfix` is not installed. During remediation package `postfix` is installed and the rule starts...

Adapt compare_ds.py to compare text elements (also includes a STIG Benchmark mode)

6

#### Description: - Improve the script so that it can compare text elements in the Rule. Elements like title, description, fixtext and warning. - Includes a new option o compare...

Rule file_permissions_sshd_private_key is not aligned with DISA's check for RHEL-08-010490

7

#### Description of problem: STIG [RHEL-08-010490](https://stigs.mab879.com/products/rhel8/v1r7/RHEL-08-010490/) states that private SSH host keys should have mode 0600 or less. After #9094 the rule `file_permissions_sshd_private_key` started to allow the private keys to...

Test scenario `missing_blacklist.fail.sh` fails for kernel_module_dccp_disabled

1

#### Description of problem: On RHEL-7, the test scenario `missing_blacklist.fail.sh` results in `pass` where `fail` was expected. On RHEL-9, the test scenario also fails for rule `kernel_module_can_disabled`. #### SCAP Security...

Profiles and Controls with invalid rule IDs build successfuly when they shouldn't

1

#### Description of problem: The build system silently ignores invalid rule IDs in profiles and controls. #### SCAP Security Guide Version: Latest master (ab510556f587bf0140da78593c46b86450778ab5) #### Operating System Version: Any ####...

[WIP] Compose SCAP 1.3 DataStreams

1

This is a very early and rough patch to update openscap to compose SCAP 1.3 compliant Data Streams. What this PR does for now: - When a `check-content-ref`'s `href` attribute...

Windows installer does not install newly added data streams from SSG. We need to add the new content in `scap-workbench.wxs.in` for them to be installed and used by SCAP Workbench.

Improve the "selected item properties" panel within the Customization window to show `warnings` properties of a selected Rule.  Related to https://github.com/OpenSCAP/scap-security-guide/pull/3113.

Check NM profiles use interace's altnames

4

#### Description: - Improve remediation so that it checks the NM profiles by `altname`s. #### Rationale: - The NM profiles can be named after an interface's `altname` rather than its...