Hello folks,
though it has not been that far in the past I on this place
announced the availability of the scap-security-guide-0.1.23 release,
the count of SSG project contributions in the past two weeks has been
pretty high, and therefore with following the "release early, release
often" principle we are proud to announce the general availability
of the scap-security-guide-0.1.24 release, containing (between others):
* initial draft of "Standard Security Profile" for Red Hat Enterprise Linux 7,
* dozen of new remediation scripts for selected audit rules for Red Hat Enterprise Linux
7
system,
* HTML formatted security guides logic enhancements (create HTML guide for
every profile in every benchmark, optimize the size of the guides to include
only xccdf:Groups containing at least one selected rules).
Many thanks to Martin Preisler for contributing these changes!,
and
* many, many more.
For further information about 0.1.24 release notes please proceed to
(hopefully already expected) location:
[1]
https://github.com/OpenSCAP/scap-security-guide/releases/latest
For information how to build the content from source tarball proceed to:
[2]
https://github.com/OpenSCAP/scap-security-guide/wiki/Building-from-Source
Also, Martin Preisler was kind enough to provide zipped tarball of the pre-built
SSG produced benchmarks in the datastream format. Feel free to check them out:
[3]
https://github.com/OpenSCAP/scap-security-guide/releases/download/v0.1.24...
At this point it is necessary to mention that while we didn't solve the
"store remediation functions location in the XCCDF directly, rather than
relying on expected system paths" issue yet:
[4]
https://github.com/OpenSCAP/scap-security-guide/issues/590
(therefore performing remediations from content installed from the aforementioned
zip archive [3], might not be working properly yet), the zip archive should
provide a way how to obtain pre-built version of the most recent SSG content
(as already mentioned earlier, we will do our best to solve the issue [4] ASAP).
Happy hardening!
Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
P.S.: Of course should you encounter any issue(s) with this SSG version (or any earlier),
please report it at:
*
https://github.com/OpenSCAP/scap-security-guide/issues/new or by dropping an email
to
* SCAP Security Guide mailing list --
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide