RHEL8 STIG Versions Save

Ansible role for Red Hat 8 STIG Baseline

3.2.0

2 weeks ago

STIG Version1 Release 12 release - October 23

Main Release for v1r12 RHEL8 STIG

Remediate

  • Issues closed and PRs merged - What's changed
  • Pre-commit updates
  • Many improvements to different controls

Audit

  • Audit_only ability now added to run standalone audit
    • audit_only: true
  • Related Audit repo updated to improve tests audit binary(goss updated to latest version)

What's Changed

Full Changelog: https://github.com/ansible-lockdown/RHEL8-STIG/compare/3.1.0...3.2.0

3.1.0

1 month ago

STIG Version1 Release 11 release - July 23

Remediate

Issues closed and PRs merged - What's changed Pre-commit updates Many improvements to different controls Update to allow Galaxy Releases for new galaxy_ng

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/RHEL8-STIG/compare/3.0.0...3.1.0

3.0.0

8 months ago

What's Changed

New Contributors

#Issues:

Controls updated

  • CAT2:
    • 010030 - ruleid
    • 010200 - ruleid
    • 010201 - ruleid
    • 010290 - ruleid and SSH MACS updated
    • 010291 - ruleid and SSH Ciphers updated
    • 010770 - ruleid
    • 020035 - new control idlesession timeout new var rhel_08_020035_idlesessiontimeout
    • 020041 - ruleid and tmux script update
    • 030690 - ruleid and protocol options added
    • 040159 - ruleid
    • 040160 - ruleid
    • 040342 - ruleid and SSH KEX algorithms updated

Full Changelog: https://github.com/ansible-lockdown/RHEL8-STIG/compare/2.9.1...3.0.0

2.9.1

9 months ago

What's Changed

Full Changelog: https://github.com/ansible-lockdown/RHEL8-STIG/compare/2.9.0...2.9.1

2.9.0

11 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/RHEL8-STIG/compare/2.8.1...2.9.0

2.8.1

1 year ago

Overall Review of Changes: Release of stig v1r9 to main along with many improvements

Issue Fixes: https://github.com/ansible-lockdown/RHEL8-STIG/issues/157 https://github.com/ansible-lockdown/RHEL8-STIG/issues/158 https://github.com/ansible-lockdown/RHEL8-STIG/pull/159 https://github.com/ansible-lockdown/RHEL8-STIG/pull/168 https://github.com/ansible-lockdown/RHEL8-STIG/pull/169 https://github.com/ansible-lockdown/RHEL8-STIG/pull/170 https://github.com/ansible-lockdown/RHEL8-STIG/pull/171 https://github.com/ansible-lockdown/RHEL8-STIG/pull/172 https://github.com/ansible-lockdown/RHEL8-STIG/issues/173 https://github.com/ansible-lockdown/RHEL8-STIG/pull/178 https://github.com/ansible-lockdown/RHEL8-STIG/pull/179 https://github.com/ansible-lockdown/RHEL8-STIG/pull/180 https://github.com/ansible-lockdown/RHEL8-STIG/pull/181 https://github.com/ansible-lockdown/RHEL8-STIG/pull/183 https://github.com/ansible-lockdown/RHEL8-STIG/pull/185 https://github.com/ansible-lockdown/RHEL8-STIG/pull/185

Enhancements: Workflow updates linting audit alignment with correct stig benchmark release Warning layout and updates

2.8.0

1 year ago

Overall Review of Changes: Release of stig v1r9 to main along with many improvements

Issue Fixes: https://github.com/ansible-lockdown/RHEL8-STIG/issues/157 https://github.com/ansible-lockdown/RHEL8-STIG/issues/158 https://github.com/ansible-lockdown/RHEL8-STIG/pull/159 https://github.com/ansible-lockdown/RHEL8-STIG/pull/168 https://github.com/ansible-lockdown/RHEL8-STIG/pull/169 https://github.com/ansible-lockdown/RHEL8-STIG/pull/170 https://github.com/ansible-lockdown/RHEL8-STIG/pull/171 https://github.com/ansible-lockdown/RHEL8-STIG/pull/172 https://github.com/ansible-lockdown/RHEL8-STIG/issues/173 https://github.com/ansible-lockdown/RHEL8-STIG/pull/178 https://github.com/ansible-lockdown/RHEL8-STIG/pull/179 https://github.com/ansible-lockdown/RHEL8-STIG/pull/180 https://github.com/ansible-lockdown/RHEL8-STIG/pull/181 https://github.com/ansible-lockdown/RHEL8-STIG/pull/183 https://github.com/ansible-lockdown/RHEL8-STIG/pull/185 https://github.com/ansible-lockdown/RHEL8-STIG/pull/185

Enhancements: Workflow updates linting audit alignment with correct stig benchmark release Warning layout and updates

2.7.0

1 year ago

STIG Benchmark Release: Version 1 Release 8 STIG Benchmark Release Date: Oct 27, 2022

Issues Fixed:

  • #139 - RHEL-08-010330 & RHEL-08-010350 | SETroubleshootD Breaks
  • #140 - RHEL-08-020027/020028 | SELinux Permission Discrepancies / Faillock SELinux Denials
  • #142 - RHEL-08-010141 /etc/grub.d/01_users need 755 permission
  • #147 - Install git
  • #148 - RHEL-08-020025 and RHEL-08-020026 - The "preauth" line is NOT listed before pam_unix.so
  • #151 - fstype in fix-cat2.yml set to static value "xfs" on mount tasks (Thanks to @whitehat237 for the PR with the fix idea)

Enhancements:

  • Updates for new benchmark 1.8
  • Updates for banner usage
  • Linting updates

2.6.0

1 year ago

STIG Benchmark Release: Version 1 Release 7 STIG Benchmark Release Date: Jul 27, 2022

Issues Fixed:

  • #93 - Error with RHEL-08-040137 - Failed
  • #104 - README update - cloudint bug when /var noexec
  • #107 - RHEL-08-020040/41 needs additional configuration.
  • #109 - Broken link for the wiki for Main Variables
  • #115 - List dependencies in requirements.txt
  • #116 - Inconsistent YAML
  • #118 - ansible-lint: 648 failure(s), 0 warning(s) on 18 files
  • #124 - RHEL-08-040090 : Firewall must employ deny-all | Missing Configuration
  • #125 - RHEL-08-040259: Shall not enable IPv4 Forwarding | Update configuration to latest baseline
  • #126 - RHEL-08-010141: Unique Superuser Name for Maintenance | Non-Standard Configuration Method
  • #127 - RHEL-08-010690 / RHEL-08-010770 | Failure in Multiple Steps
  • #128 - RHEL-08-010050 Banner on Login Screen | Missing Configuration
  • #130 - Question regarding RHEL-08-010290 / RHEL-08-010291: Enabling FIPS mode even if not required by STIG?
  • #131 - RHEL-08-020040: TMUX Lock-Command Config | Incomplete Regex
  • #133 - RHEL-08-010295: GnuTLS Encryption | Line Bug
  • #134 - RHEL-08-010740: Group Ownership by Home Dir Owner | Incorrect Ownership by "Nobody" in RHEL 8.6

Enhancements:

  • Benchmarks 1.7 updates
  • Updates for new linting checks

2.5.0

1 year ago

STIG Benchmark Version: Version 1 Release 6 STIG Benchmark Release Date: Apr 27, 2022

Issues Fixed:

  • #104 - README Update - Cloudint bug when/var noexec

Enhancements:

  • Benchmark 1.6 updates