RHEL7 STIG Versions Save

Ansible role for Red Hat 7 STIG Baseline

1.8.2

2 months ago

STIG Version3 Release 12 release - July 23

Remediate

Issues closed and PRs merged - What's changed Pre-commit updates Many improvements to different controls ansible version to 2.10.1 Update to allow Galaxy Releases for new galaxy_ng

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/RHEL7-STIG/compare/1.7.0...1.8.2

1.8.1

8 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/RHEL7-STIG/compare/1.7.0...1.8.0

What's Changed

Full Changelog: https://github.com/ansible-lockdown/RHEL7-STIG/compare/1.8.0...1.8.1

1.8.0

8 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/RHEL7-STIG/compare/1.7.0...1.8.0

1.7.0

11 months ago

Stig V3r11 27th April 2023

Consistent on ansible version Improvement in checking ansible user has password 010340 tidy of boootloader discovery and paths

  • New controls

    • RHEL-07-010019
    • RHEL-07-010063
    • RHEL-07-020028

  • rule id updates and changes

    • RHEL-07-010119
    • RHEL-07-010199
    • RHEL-07-010271
    • RHEL-07-020028
    • RHEL-07-020030

1.6.0

1 year ago

Lint updates workflow updates goss url and version FQCN added alignment to audit benchmark version

  • Thanks to @Joseph Hoffman

  • Thanks to @Bordenit

  • Update to V3R10 - Jan 2023 All controls have rules updated

    • cat_1

      • 010010
      • 010290

    • cat 2

      • 010060
      • 010062
      • 010070
      • 010081
      • 010082
      • 010090 Added back in for screen pkgs to be installed
      • 010100
      • 010101
      • 010110
      • 010199 - new control
      • 010200
      • 010270
      • 010320
      • 010330
      • 010342 - updated grep command to grep -E
      • 020029 - added notify and updated rule
      • 020030 - updated mail path in cron job
      • 020040
      • 020650
      • 021620
      • 040201
      • 040420
      • 040470 - conditional added only pre 7.4
      • 040610
      • 040611
      • 040612
      • 040620
      • 040630
      • 040640
      • 040641
      • 040650
      • 040660
      • 040712 - new control ssh KEX
      • 040740
      • 040830

  • cat 3

    • 010375 - new control
    • 021600
    • 021610

  • RHEL-07-010271 - New Control Added

  • Update to STIG V3R9 Oct 27th 2022 - Changes Listed Below

    • RHEL-07-010342, RHEL-07-010343, RHEL- 07-020023, RHEL-07-030201 - Updated fix text.
    • RHEL-07-021040, RHEL-07-021700 - Updated check text command to eliminate false positives.
    • RHEL-07-030840 - Updated check and fix text.
    • RHEL-07-040160 - Updated check text.
    • RHEL-07-040310 - Corrected typo in the Vulnerability Discussion.
    • RHEL-07-040360, RHEL-07-040530 - Updated CCI.

  • Update to README and requirements

  • RHEL-07-010010, RHEL-07-010020, RHEL-07-010291, RHEL-07-021030,RHEL-07-021040 - Updated Tag Information

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/RHEL7-STIG/compare/1.5.0...v1.6.0

1.5.0

2 years ago

STIG Benchmark Version: 3.6 STIG Benchmark Release Date: Jan 27, 2022

Issue Fixes:

  • #397 - SCAP scan fails for RHEL-07-040160 (TMOUT)
  • #398 - RHEL-07-010119 is potentially not idempotent
  • #400 - RHEL-07-010110 setting incorrect lock-delay value

Enhancements:

  • STIG Benchmark 3.6 updates
  • New automated testing pipeline for PR's
  • New GitHub Action for first time contributors
  • General tidy up of README layout
  • Mention of Discord server in READE, along with the creation of the Discord server

1.4.0

2 years ago

STIG Benchmark Version: 3.5 STIG Benchmark Release Date: Oct 27, 2021

Issue Fixes:

  • #391
  • #392

Enhancements:

  • Updates for benchmarks 3.5
  • Updates for using audit tool's wrapper script
  • Added attributes file

1.0.0

2 years ago
  • STIG Version: Ver 3 Rel 2
  • Capabilities to use Goss audit tool
  • General updates to entire role for better performance

1.0.1

2 years ago
  • STIG Version: Ver 3 Rel 2
  • Addressed goss name error
  • Updated ansible.cfg

1.3.2

2 years ago

STIG Version: Version 3 Rel 4

Issues Fixes:

  • #385 - thanks to danbarr
  • #386 - thanks to yeroc

Enhancements:

  • N/A