A scap-security-guide bug fix and enhancement update has been released for Oracle Linux 8.

El-errata: ELBA-2022-6452 Oracle Linux 8 scap-security-guide bug fix and enhancement update

Oracle Linux Bug Fix Advisory ELBA-2022-6452

  http://linux.oracle.com/errata/ELBA-2022-6452.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
scap-security-guide-0.1.63-1.0.1.el8_6.noarch.rpm
scap-security-guide-doc-0.1.63-1.0.1.el8_6.noarch.rpm

aarch64:
scap-security-guide-0.1.63-1.0.1.el8_6.noarch.rpm
scap-security-guide-doc-0.1.63-1.0.1.el8_6.noarch.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/scap-security-guide-0.1.63-1.0.1.el8_6.src.rpm


Description of changes:

[0.1.63.1.0.1]
- Update rules related to pam pwhistory remember module to allow both
requisite and required control values [Orabug: 34604895]
- Update accounts_password_pam_retry rule to align it with DISA requirements
OL08-00-020102, OL08-00-020103, and OL08-00-020104 [Orabug: 34604895]
- Create mount_option_home and use it in OL8 [Orabug: 34604895]
- Update rule no_empty_passwords to include the password-auth file in
OVAL check and rule wording [Orabug: 34604895]
- Introduce the rule accounts_passwords_pam_faillock_dir to cover
DISA requirements OL08-00-020016 and OL08-00-020017 [Orabug: 34604895]
- Introduce rule account_disable_inactivity_system_auth to cover
DISA requirement OL08-00-020260 [Orabug: 34604895]
- Add automation content to rule accounts_passwords_pam_faillock_audit and include
it in the OL8 stig profile [Orabug: 34604895]
- Add OVAL content to rule fapolicy_default_deny and include it on the
OL8 stig profile [Orabug: 34604895]
- Add automation content to rule rule account_password_selinux_faillock_dir
and include it on the OL8 stig profile [Orabug: 34604895]
- Create rule to cover DISA requirements OL08-00-020018 and OL08-00-020019 [Orabug: 34604895]
- Update sysctl template OVAL [Orabug: 34604895]
- Update accounts_password template OVAL [Orabug: 34604895]

[0.1.63-1]
- Update to the latest upstream release (RHBZ#2116347)
- Update RHEL8 STIG profile to V1R7 (RHBZ#2116408)
- Select grub2_disable_recovery in OSPP Profile (RHBZ#2117308)
- Use authselect minimal profile in OSPP Profile (RHBZ#2117306)
- Improve rules for CIS level1 partition options (RHBZ#2117510)

_______________________________________________