21 Pull requests merged by 10 people

• Bump docker/build-push-action from 6.13.0 to 6.14.0

  #13087 merged Feb 24, 2025

• Release Ubuntu 24.04 CIS v1.0.0 profiles

  #13072 merged Feb 21, 2025

• Extend and improve rules for Ubuntu 24.04 6.1.4.1

  #13081 merged Feb 21, 2025

• Fix permissions for shadow files on Ubuntu 24.04

  #13092 merged Feb 21, 2025

• Bump JamesIves/github-pages-deploy-action from 4.7.2 to 4.7.3

  #13085 merged Feb 20, 2025

• OPENSCAP-5302: Remove workaround for nfs-utils

  #13083 merged Feb 20, 2025

• Fix Kubernetes Test Content Parsing Workflow

  #13084 merged Feb 20, 2025

• Bump mikepenz/release-changelog-builder-action from 5.1.0 to 5.2.0

  #13086 merged Feb 20, 2025

• Ubuntu 24.04 6.1.4.1 Ensure access to all logfiles has been configured

  #13062 merged Feb 20, 2025

• Bump nick-fields/retry from 3.0.0 to 3.0.1

  #13071 merged Feb 20, 2025

• Remove firewalld from required platforms on ubuntu

  #13082 merged Feb 19, 2025

• A typo fix

  #13064 merged Feb 19, 2025

• Sys 1 6 a17new

  #12663 merged Feb 18, 2025

• MULTIARCH-4655: add rhcos4/ocp4 for disa-stig to build

  #12945 merged Feb 18, 2025

• Fix jinja conditionals in sysctl test

  #13074 merged Feb 18, 2025

• Update SLE12 stig version to V3R2

  #13066 merged Feb 18, 2025

• Add applicability checks to rsyslog and journal rules on Ubuntu 2404

  #13052 merged Feb 18, 2025

• Remove newlines from dpkg-query showformat

  #13067 merged Feb 17, 2025

• Add new profile for CIS OpenShift 1.7.0

  #13010 merged Feb 17, 2025

• Typo fixes

  #13060 merged Feb 17, 2025

• Add missing newline at end of chrony.conf

  #13065 merged Feb 17, 2025

7 Pull requests opened by 7 people

• Correct the CIS reference for rule ocp4-api-server-api-priority-flowschema-catch-all

  #13068 opened Feb 17, 2025

• Bump OCP/RHCOS DISA STIG version number

  #13069 opened Feb 17, 2025

• [template]: fixes in file_owner template

  #13070 opened Feb 17, 2025

• SLE Add dependency to crypto-policies-scripts package

  #13088 opened Feb 20, 2025

• Stop using deprecated CMake code

  #13089 opened Feb 20, 2025

• Add rhel10 stability test data

  #13091 opened Feb 20, 2025

• add a check for secure boot enabled

  #13094 opened Feb 21, 2025

7 Issues closed by 2 people

• Support for Ubuntu 24.04 Noble

  #12489 closed Feb 21, 2025

• Checking /etc/gshadow- fails if group is shadow

  #12986 closed Feb 21, 2025

• CIS 4.1.3.14 Ensure events that modify the system's Mandatory Access Controls are collected

  #11930 closed Feb 20, 2025

• "Ensure that System Accounts Do Not Run a Shell Upon Login" all fails if one item fails

  #12633 closed Feb 20, 2025

• "User Initialization Files Must Be Owned By the Primary User" failing on some Ubuntu 22.04 LTS

  #12322 closed Feb 20, 2025

• Issue on check on firewall rules (Ubuntu 22-04 + UFW)

  #11907 closed Feb 20, 2025

• package_nfs-utils_removed: remove workaround for RHEL 10 bootable containers

  #12872 closed Feb 20, 2025

7 Issues opened by 3 people

• Please explain how to write a newline in a banner such as /etc/issue

  #13080 opened Feb 19, 2025

• Disable kernel modules under STIG

  #13079 opened Feb 18, 2025

• sshd_disable_compression only seems to check for no

  #13078 opened Feb 18, 2025

• Description and check are misaligned for commands_kmod

  #13077 opened Feb 18, 2025

• DISA STIG different than content for rule checks --eg privileged perm_mod

  #13076 opened Feb 18, 2025

• Almalinux not included in product for audit rule perm_x

  #13075 opened Feb 18, 2025

• CMake shows deprecation warnings, will break in the future

  #13073 opened Feb 18, 2025

21 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [Debian12] Add support debian and change logic platform for host based firewall

  #13059 commented on Feb 17, 2025 • 6 new comments

• Introduce Architecture Decisions Records

  #13019 commented on Feb 20, 2025 • 4 new comments

• Fix bash_instantiate_variables jinja macro

  #13049 commented on Feb 20, 2025 • 2 new comments

• Add dconf rules dependencies sle

  #13063 commented on Feb 19, 2025 • 0 new comments

• Add new product tencentos4 supporting

  #13061 commented on Feb 24, 2025 • 0 new comments

• Update dependency compliance-trestle to v3.8.0

  #13058 commented on Feb 20, 2025 • 0 new comments

• CI adjustments for OCP 4.18

  #12863 commented on Feb 18, 2025 • 0 new comments

• Specify platform specific packages for xwindows_remove_packages rule

  #12853 commented on Feb 20, 2025 • 0 new comments

• Update Konflux references

  #12811 commented on Feb 22, 2025 • 0 new comments

• Defined notes and rules for BSI APP.4.4.A19

  #12155 commented on Feb 18, 2025 • 0 new comments

• content_rule_verify_use_mappers regular expression needs improvement

  #11871 commented on Feb 21, 2025 • 0 new comments

• /etc/sudoers.d regex is incomplete

  #12588 commented on Feb 20, 2025 • 0 new comments

• Automatus tests fail when rules marked with 'platform: machine' are run in a container environment

  #12511 commented on Feb 20, 2025 • 0 new comments

• RHEL10 ISM O - Rules missing `ism` reference

  #12430 commented on Feb 20, 2025 • 0 new comments

• RHEL9 ISM O - Rules missing `ism` reference

  #12427 commented on Feb 20, 2025 • 0 new comments

• RHEL9 OSPP - Rules missing `ospp` reference

  #12425 commented on Feb 20, 2025 • 0 new comments

• RHEL8 ISM O - Rules missing `ism` reference

  #12423 commented on Feb 20, 2025 • 0 new comments

• RHEL8 OSPP - Rules missing `ospp` reference

  #12422 commented on Feb 20, 2025 • 0 new comments

• Ensure consistency among SSH related rules

  #12420 commented on Feb 20, 2025 • 0 new comments

• Review packages in xwindows_remove_packages rule

  #12394 commented on Feb 20, 2025 • 0 new comments

• DISA misalignment test is confused when a rule maps to multiple DISA rules

  #13020 commented on Feb 19, 2025 • 0 new comments