Warning: Permanently added '2620:52:3:1:dead:beef:cafe:c148' (ED25519) to the list of known hosts. You can reproduce this build on your computer by running: sudo dnf install copr-rpmbuild /usr/bin/copr-rpmbuild --verbose --drop-resultdir --srpm --task-url https://copr.fedorainfracloud.org/backend/get-srpm-build-task/8319979 Version: 1.2 PID: 9075 Logging PID: 9076 Task: {'appstream': False, 'background': False, 'build_id': 8319979, 'chroot': 'fedora-41-x86_64', 'package_name': None, 'project_dirname': 'ComplianceAsCode-content-12636', 'project_name': 'ComplianceAsCode-content-12636', 'project_owner': 'packit', 'repos': [{'baseurl': 'https://download.copr.fedorainfracloud.org/results/packit/packit-stable/fedora-41-x86_64/', 'id': 'copr_packit_packit_stable', 'name': 'Additional repo copr_packit_packit_stable'}], 'sandbox': 'packit/ComplianceAsCode-content-12636--packit', 'source_json': {'builddeps': 'packit bash', 'chroot': 'fedora-41-x86_64', 'repos': 'copr://packit/packit-stable', 'resultdir': None, 'script': '\n' '#!/bin/sh\n' '\n' 'git config --global user.email "hello@packit.dev"\n' 'git config --global user.name "Packit"\n' 'resultdir=$PWD\n' 'packit -d prepare-sources --result-dir "$resultdir" --pr-id 12636 --merge-pr ' "--target-branch master --job-config-index 0 --merged-ref 'master' --no-create-symlinks " 'https://github.com/ComplianceAsCode/content\n' '\n'}, 'source_type': 9, 'submitter': 'packit', 'task_id': '8319979'} Running (timeout=5400): unbuffer copr-sources-custom --workdir /workdir --mock-config /var/lib/copr-rpmbuild/results/mock-config.cfg --script /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/script --builddeps 'packit bash' --env COPR_OWNER=packit --env COPR_PROJECT=ComplianceAsCode-content-12636 --env 'COPR_PACKAGE='"'"''"'"'' INFO:__main__:Working in '/workdir' INFO:__main__:Results should be created in '/workdir' INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --init INFO: mock.py version 5.9 starting (python version = 3.13.0, NVR = mock-5.9-1.fc41), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --init Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Start: clean chroot Finish: clean chroot Mock Version: 5.9 INFO: Mock Version: 5.9 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Guessed host environment type: unknown INFO: Using bootstrap image: registry.fedoraproject.org/fedora:41 INFO: Pulling image: registry.fedoraproject.org/fedora:41 INFO: Copy content of container registry.fedoraproject.org/fedora:41 to /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root INFO: Checking that registry.fedoraproject.org/fedora:41 image matches host's architecture INFO: mounting registry.fedoraproject.org/fedora:41 with podman image mount INFO: image registry.fedoraproject.org/fedora:41 as /var/lib/containers/storage/overlay/c149a1216f262aa32ecd78f519fcc290d6538bf0bba28b8d2bb17621b2b8de69/merged INFO: umounting image registry.fedoraproject.org/fedora:41 (/var/lib/containers/storage/overlay/c149a1216f262aa32ecd78f519fcc290d6538bf0bba28b8d2bb17621b2b8de69/merged) with podman image umount INFO: Package manager dnf5 detected and used (fallback) INFO: Not updating bootstrap chroot, bootstrap_image_ready=True Start(bootstrap): creating root cache Finish(bootstrap): creating root cache Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Start: installing minimal buildroot with dnf5 Updating and loading repositories: updates 100% | 10.4 MiB/s | 5.5 MiB | 00m01s fedora 100% | 35.3 MiB/s | 35.4 MiB | 00m01s Additional repo copr_packit_packit_sta 100% | 51.0 KiB/s | 4.7 KiB | 00m00s Repositories loaded. Package Arch Version Repository Size Installing group/module packages: bash x86_64 5.2.32-1.fc41 fedora 8.2 MiB bzip2 x86_64 1.0.8-19.fc41 fedora 95.7 KiB coreutils x86_64 9.5-11.fc41 updates 5.7 MiB cpio x86_64 2.15-2.fc41 fedora 1.1 MiB diffutils x86_64 3.10-8.fc41 fedora 1.6 MiB fedora-release-common noarch 41-28 updates 19.7 KiB findutils x86_64 1:4.10.0-4.fc41 fedora 1.8 MiB gawk x86_64 5.3.0-4.fc41 fedora 1.7 MiB glibc-minimal-langpack x86_64 2.40-12.fc41 updates 0.0 B grep x86_64 3.11-9.fc41 fedora 1.0 MiB gzip x86_64 1.13-2.fc41 fedora 389.0 KiB info x86_64 7.1-3.fc41 fedora 361.8 KiB patch x86_64 2.7.6-25.fc41 fedora 266.7 KiB redhat-rpm-config noarch 293-1.fc41 fedora 183.5 KiB rpm-build x86_64 4.20.0-1.fc41 fedora 194.3 KiB sed x86_64 4.9-3.fc41 fedora 861.5 KiB shadow-utils x86_64 2:4.15.1-12.fc41 fedora 4.1 MiB tar x86_64 2:1.35-4.fc41 fedora 2.9 MiB unzip x86_64 6.0-64.fc41 fedora 386.8 KiB util-linux x86_64 2.40.2-4.fc41 fedora 3.7 MiB which x86_64 2.21-42.fc41 fedora 80.2 KiB xz x86_64 1:5.6.2-2.fc41 fedora 1.2 MiB Installing dependencies: add-determinism x86_64 0.3.6-3.fc41 updates 2.4 MiB alternatives x86_64 1.30-1.fc41 fedora 66.3 KiB ansible-srpm-macros noarch 1-16.fc41 fedora 35.7 KiB audit-libs x86_64 4.0.2-1.fc41 fedora 331.3 KiB authselect x86_64 1.5.0-8.fc41 fedora 157.6 KiB authselect-libs x86_64 1.5.0-8.fc41 fedora 822.2 KiB basesystem noarch 11-21.fc41 fedora 0.0 B binutils x86_64 2.43.1-2.fc41 fedora 27.5 MiB build-reproducibility-srpm-macros noarch 0.3.6-3.fc41 updates 735.0 B bzip2-libs x86_64 1.0.8-19.fc41 fedora 80.7 KiB ca-certificates noarch 2024.2.69_v8.0.401-1.0.fc41 fedora 2.4 MiB coreutils-common x86_64 9.5-11.fc41 updates 11.2 MiB cracklib x86_64 2.9.11-6.fc41 fedora 238.9 KiB crypto-policies noarch 20241029-1.git8baf557.fc41 updates 136.9 KiB curl x86_64 8.9.1-2.fc41 fedora 796.2 KiB cyrus-sasl-lib x86_64 2.1.28-27.fc41 fedora 2.3 MiB debugedit x86_64 5.1-1.fc41 updates 199.8 KiB dwz x86_64 0.15-8.fc41 fedora 298.9 KiB ed x86_64 1.20.2-2.fc41 fedora 146.9 KiB efi-srpm-macros noarch 5-13.fc41 updates 40.2 KiB elfutils x86_64 0.192-6.fc41 updates 2.7 MiB elfutils-debuginfod-client x86_64 0.192-6.fc41 updates 84.1 KiB elfutils-default-yama-scope noarch 0.192-6.fc41 updates 1.8 KiB elfutils-libelf x86_64 0.192-6.fc41 updates 1.2 MiB elfutils-libs x86_64 0.192-6.fc41 updates 666.3 KiB fedora-gpg-keys noarch 41-1 fedora 126.4 KiB fedora-release noarch 41-28 updates 0.0 B fedora-release-identity-basic noarch 41-28 updates 682.0 B fedora-repos noarch 41-1 fedora 4.9 KiB file x86_64 5.45-7.fc41 fedora 103.5 KiB file-libs x86_64 5.45-7.fc41 fedora 9.9 MiB filesystem x86_64 3.18-23.fc41 fedora 106.0 B fonts-srpm-macros noarch 1:2.0.5-17.fc41 fedora 55.8 KiB forge-srpm-macros noarch 0.3.2-1.fc41 fedora 39.0 KiB fpc-srpm-macros noarch 1.3-13.fc41 fedora 144.0 B gdb-minimal x86_64 15.2-3.fc41 updates 13.0 MiB gdbm x86_64 1:1.23-7.fc41 fedora 460.9 KiB gdbm-libs x86_64 1:1.23-7.fc41 fedora 121.9 KiB ghc-srpm-macros noarch 1.9.1-2.fc41 fedora 747.0 B glibc x86_64 2.40-12.fc41 updates 6.7 MiB glibc-common x86_64 2.40-12.fc41 updates 1.0 MiB glibc-gconv-extra x86_64 2.40-12.fc41 updates 8.0 MiB gmp x86_64 1:6.3.0-2.fc41 fedora 811.4 KiB gnat-srpm-macros noarch 6-6.fc41 fedora 1.0 KiB go-srpm-macros noarch 3.6.0-3.fc41 fedora 60.8 KiB jansson x86_64 2.13.1-10.fc41 fedora 88.3 KiB json-c x86_64 0.17-4.fc41 fedora 82.4 KiB kernel-srpm-macros noarch 1.0-24.fc41 fedora 1.9 KiB keyutils-libs x86_64 1.6.3-4.fc41 fedora 54.4 KiB krb5-libs x86_64 1.21.3-3.fc41 updates 2.3 MiB libacl x86_64 2.3.2-2.fc41 fedora 40.0 KiB libarchive x86_64 3.7.4-4.fc41 updates 926.6 KiB libattr x86_64 2.5.2-4.fc41 fedora 28.5 KiB libblkid x86_64 2.40.2-4.fc41 fedora 258.5 KiB libbrotli x86_64 1.1.0-5.fc41 fedora 837.6 KiB libcap x86_64 2.70-4.fc41 fedora 220.2 KiB libcap-ng x86_64 0.8.5-3.fc41 fedora 69.2 KiB libcom_err x86_64 1.47.1-6.fc41 fedora 67.2 KiB libcurl x86_64 8.9.1-2.fc41 fedora 818.1 KiB libeconf x86_64 0.6.2-3.fc41 fedora 58.0 KiB libevent x86_64 2.1.12-14.fc41 fedora 895.7 KiB libfdisk x86_64 2.40.2-4.fc41 fedora 362.9 KiB libffi x86_64 3.4.6-3.fc41 fedora 86.4 KiB libgcc x86_64 14.2.1-3.fc41 fedora 274.6 KiB libgomp x86_64 14.2.1-3.fc41 fedora 523.5 KiB libidn2 x86_64 2.3.7-2.fc41 fedora 329.1 KiB libmount x86_64 2.40.2-4.fc41 fedora 351.8 KiB libnghttp2 x86_64 1.62.1-2.fc41 fedora 166.1 KiB libnsl2 x86_64 2.0.1-2.fc41 fedora 57.9 KiB libpkgconf x86_64 2.3.0-1.fc41 fedora 78.2 KiB libpsl x86_64 0.21.5-4.fc41 fedora 80.5 KiB libpwquality x86_64 1.4.5-11.fc41 fedora 417.8 KiB libselinux x86_64 3.7-5.fc41 fedora 181.0 KiB libsemanage x86_64 3.7-2.fc41 fedora 293.5 KiB libsepol x86_64 3.7-2.fc41 fedora 817.8 KiB libsmartcols x86_64 2.40.2-4.fc41 fedora 180.4 KiB libssh x86_64 0.10.6-8.fc41 fedora 513.3 KiB libssh-config noarch 0.10.6-8.fc41 fedora 277.0 B libstdc++ x86_64 14.2.1-3.fc41 fedora 2.8 MiB libtasn1 x86_64 4.19.0-9.fc41 fedora 175.7 KiB libtirpc x86_64 1.3.6-1.fc41 updates 202.7 KiB libtool-ltdl x86_64 2.4.7-12.fc41 fedora 66.2 KiB libunistring x86_64 1.1-8.fc41 fedora 1.7 MiB libutempter x86_64 1.2.1-15.fc41 fedora 57.7 KiB libuuid x86_64 2.40.2-4.fc41 fedora 37.5 KiB libverto x86_64 0.3.2-9.fc41 fedora 29.5 KiB libxcrypt x86_64 4.4.36-10.fc41 updates 271.4 KiB libxml2 x86_64 2.12.8-2.fc41 fedora 1.7 MiB libzstd x86_64 1.5.6-2.fc41 fedora 795.9 KiB lua-libs x86_64 5.4.6-6.fc41 fedora 285.0 KiB lua-srpm-macros noarch 1-14.fc41 fedora 1.3 KiB lz4-libs x86_64 1.10.0-1.fc41 fedora 145.5 KiB mpfr x86_64 4.2.1-5.fc41 fedora 832.1 KiB ncurses-base noarch 6.5-2.20240629.fc41 fedora 326.3 KiB ncurses-libs x86_64 6.5-2.20240629.fc41 fedora 975.2 KiB ocaml-srpm-macros noarch 10-3.fc41 fedora 1.9 KiB openblas-srpm-macros noarch 2-18.fc41 fedora 112.0 B openldap x86_64 2.6.8-5.fc41 fedora 644.2 KiB openssl-libs x86_64 1:3.2.2-9.fc41 fedora 7.8 MiB p11-kit x86_64 0.25.5-3.fc41 fedora 2.2 MiB p11-kit-trust x86_64 0.25.5-3.fc41 fedora 391.4 KiB package-notes-srpm-macros noarch 0.5-12.fc41 fedora 1.6 KiB pam x86_64 1.6.1-6.fc41 updates 1.8 MiB pam-libs x86_64 1.6.1-6.fc41 updates 139.0 KiB pcre2 x86_64 10.44-1.fc41.1 fedora 653.5 KiB pcre2-syntax noarch 10.44-1.fc41.1 fedora 251.6 KiB perl-srpm-macros noarch 1-56.fc41 fedora 861.0 B pkgconf x86_64 2.3.0-1.fc41 fedora 88.6 KiB pkgconf-m4 noarch 2.3.0-1.fc41 fedora 14.4 KiB pkgconf-pkg-config x86_64 2.3.0-1.fc41 fedora 989.0 B popt x86_64 1.19-7.fc41 fedora 136.9 KiB publicsuffix-list-dafsa noarch 20240107-4.fc41 fedora 67.5 KiB pyproject-srpm-macros noarch 1.16.0-1.fc41 updates 1.9 KiB python-srpm-macros noarch 3.13-3.fc41 fedora 51.0 KiB qt5-srpm-macros noarch 5.15.15-1.fc41 fedora 500.0 B qt6-srpm-macros noarch 6.8.0-1.fc41 updates 456.0 B readline x86_64 8.2-10.fc41 fedora 493.2 KiB rpm x86_64 4.20.0-1.fc41 fedora 3.1 MiB rpm-build-libs x86_64 4.20.0-1.fc41 fedora 206.7 KiB rpm-libs x86_64 4.20.0-1.fc41 fedora 725.9 KiB rpm-sequoia x86_64 1.7.0-2.fc41 fedora 2.4 MiB rust-srpm-macros noarch 26.3-3.fc41 fedora 4.8 KiB setup noarch 2.15.0-5.fc41 fedora 720.7 KiB sqlite-libs x86_64 3.46.1-1.fc41 fedora 1.4 MiB systemd-libs x86_64 256.8-1.fc41 updates 2.0 MiB util-linux-core x86_64 2.40.2-4.fc41 fedora 1.5 MiB xxhash-libs x86_64 0.8.2-4.fc41 fedora 88.4 KiB xz-libs x86_64 1:5.6.2-2.fc41 fedora 214.4 KiB zig-srpm-macros noarch 1-3.fc41 fedora 1.1 KiB zip x86_64 3.0-41.fc41 fedora 703.2 KiB zlib-ng-compat x86_64 2.1.7-3.fc41 fedora 134.0 KiB zstd x86_64 1.5.6-2.fc41 fedora 1.7 MiB Installing groups: Buildsystem building group Transaction Summary: Installing: 154 packages Total size of inbound packages is 53 MiB. Need to download 53 MiB. After this operation, 181 MiB extra will be used (install 181 MiB, remove 0 B). [ 1/154] bzip2-0:1.0.8-19.fc41.x86_64 100% | 392.0 KiB/s | 52.5 KiB | 00m00s [ 2/154] diffutils-0:3.10-8.fc41.x86_6 100% | 4.1 MiB/s | 405.4 KiB | 00m00s [ 3/154] cpio-0:2.15-2.fc41.x86_64 100% | 1.2 MiB/s | 291.8 KiB | 00m00s [ 4/154] findutils-1:4.10.0-4.fc41.x86 100% | 5.8 MiB/s | 548.5 KiB | 00m00s [ 5/154] grep-0:3.11-9.fc41.x86_64 100% | 3.0 MiB/s | 299.7 KiB | 00m00s [ 6/154] gzip-0:1.13-2.fc41.x86_64 100% | 2.2 MiB/s | 170.2 KiB | 00m00s [ 7/154] info-0:7.1-3.fc41.x86_64 100% | 1.8 MiB/s | 182.5 KiB | 00m00s [ 8/154] patch-0:2.7.6-25.fc41.x86_64 100% | 2.5 MiB/s | 131.0 KiB | 00m00s [ 9/154] bash-0:5.2.32-1.fc41.x86_64 100% | 3.4 MiB/s | 1.8 MiB | 00m01s [ 10/154] redhat-rpm-config-0:293-1.fc4 100% | 882.2 KiB/s | 82.0 KiB | 00m00s [ 11/154] rpm-build-0:4.20.0-1.fc41.x86 100% | 739.6 KiB/s | 82.8 KiB | 00m00s [ 12/154] tar-2:1.35-4.fc41.x86_64 100% | 8.3 MiB/s | 860.7 KiB | 00m00s [ 13/154] sed-0:4.9-3.fc41.x86_64 100% | 2.0 MiB/s | 317.7 KiB | 00m00s [ 14/154] unzip-0:6.0-64.fc41.x86_64 100% | 2.6 MiB/s | 184.9 KiB | 00m00s [ 15/154] which-0:2.21-42.fc41.x86_64 100% | 472.3 KiB/s | 41.6 KiB | 00m00s [ 16/154] shadow-utils-2:4.15.1-12.fc41 100% | 4.9 MiB/s | 1.3 MiB | 00m00s [ 17/154] xz-1:5.6.2-2.fc41.x86_64 100% | 6.0 MiB/s | 471.5 KiB | 00m00s [ 18/154] fedora-release-common-0:41-28 100% | 160.7 KiB/s | 23.5 KiB | 00m00s [ 19/154] glibc-minimal-langpack-0:2.40 100% | 1.2 MiB/s | 106.7 KiB | 00m00s [ 20/154] gawk-0:5.3.0-4.fc41.x86_64 100% | 3.7 MiB/s | 1.1 MiB | 00m00s [ 21/154] util-linux-0:2.40.2-4.fc41.x8 100% | 16.5 MiB/s | 1.2 MiB | 00m00s [ 22/154] ncurses-libs-0:6.5-2.20240629 100% | 4.0 MiB/s | 334.0 KiB | 00m00s [ 23/154] filesystem-0:3.18-23.fc41.x86 100% | 6.5 MiB/s | 1.1 MiB | 00m00s [ 24/154] bzip2-libs-0:1.0.8-19.fc41.x8 100% | 407.1 KiB/s | 41.1 KiB | 00m00s [ 25/154] libselinux-0:3.7-5.fc41.x86_6 100% | 836.2 KiB/s | 87.8 KiB | 00m00s [ 26/154] pcre2-0:10.44-1.fc41.1.x86_64 100% | 2.6 MiB/s | 243.1 KiB | 00m00s [ 27/154] coreutils-0:9.5-11.fc41.x86_6 100% | 1.7 MiB/s | 1.1 MiB | 00m01s [ 28/154] ed-0:1.20.2-2.fc41.x86_64 100% | 1.3 MiB/s | 81.8 KiB | 00m00s [ 29/154] libattr-0:2.5.2-4.fc41.x86_64 100% | 302.9 KiB/s | 18.2 KiB | 00m00s [ 30/154] ansible-srpm-macros-0:1-16.fc 100% | 371.0 KiB/s | 20.8 KiB | 00m00s [ 31/154] file-0:5.45-7.fc41.x86_64 100% | 1.5 MiB/s | 49.1 KiB | 00m00s [ 32/154] forge-srpm-macros-0:0.3.2-1.f 100% | 635.6 KiB/s | 19.7 KiB | 00m00s [ 33/154] dwz-0:0.15-8.fc41.x86_64 100% | 1.8 MiB/s | 138.9 KiB | 00m00s [ 34/154] fonts-srpm-macros-1:2.0.5-17. 100% | 561.8 KiB/s | 27.0 KiB | 00m00s [ 35/154] fpc-srpm-macros-0:1.3-13.fc41 100% | 162.5 KiB/s | 8.0 KiB | 00m00s [ 36/154] ghc-srpm-macros-0:1.9.1-2.fc4 100% | 153.5 KiB/s | 9.1 KiB | 00m00s [ 37/154] gnat-srpm-macros-0:6-6.fc41.n 100% | 182.7 KiB/s | 9.0 KiB | 00m00s [ 38/154] go-srpm-macros-0:3.6.0-3.fc41 100% | 901.7 KiB/s | 28.0 KiB | 00m00s [ 39/154] ocaml-srpm-macros-0:10-3.fc41 100% | 306.6 KiB/s | 9.2 KiB | 00m00s [ 40/154] kernel-srpm-macros-0:1.0-24.f 100% | 170.1 KiB/s | 9.9 KiB | 00m00s [ 41/154] lua-srpm-macros-0:1-14.fc41.n 100% | 167.5 KiB/s | 8.9 KiB | 00m00s [ 42/154] openblas-srpm-macros-0:2-18.f 100% | 116.9 KiB/s | 7.7 KiB | 00m00s [ 43/154] perl-srpm-macros-0:1-56.fc41. 100% | 133.0 KiB/s | 8.5 KiB | 00m00s [ 44/154] python-srpm-macros-0:3.13-3.f 100% | 765.2 KiB/s | 23.7 KiB | 00m00s [ 45/154] package-notes-srpm-macros-0:0 100% | 110.4 KiB/s | 9.8 KiB | 00m00s [ 46/154] qt5-srpm-macros-0:5.15.15-1.f 100% | 132.8 KiB/s | 8.9 KiB | 00m00s [ 47/154] rust-srpm-macros-0:26.3-3.fc4 100% | 228.4 KiB/s | 12.1 KiB | 00m00s [ 48/154] rpm-0:4.20.0-1.fc41.x86_64 100% | 6.1 MiB/s | 547.4 KiB | 00m00s [ 49/154] zig-srpm-macros-0:1-3.fc41.no 100% | 97.9 KiB/s | 8.1 KiB | 00m00s [ 50/154] zip-0:3.0-41.fc41.x86_64 100% | 3.4 MiB/s | 264.8 KiB | 00m00s [ 51/154] popt-0:1.19-7.fc41.x86_64 100% | 834.4 KiB/s | 65.9 KiB | 00m00s [ 52/154] rpm-build-libs-0:4.20.0-1.fc4 100% | 1.1 MiB/s | 98.6 KiB | 00m00s [ 53/154] readline-0:8.2-10.fc41.x86_64 100% | 1.5 MiB/s | 213.2 KiB | 00m00s [ 54/154] rpm-libs-0:4.20.0-1.fc41.x86_ 100% | 3.0 MiB/s | 309.4 KiB | 00m00s [ 55/154] zstd-0:1.5.6-2.fc41.x86_64 100% | 6.4 MiB/s | 481.5 KiB | 00m00s [ 56/154] libacl-0:2.3.2-2.fc41.x86_64 100% | 401.6 KiB/s | 24.5 KiB | 00m00s [ 57/154] audit-libs-0:4.0.2-1.fc41.x86 100% | 1.6 MiB/s | 126.2 KiB | 00m00s [ 58/154] libeconf-0:0.6.2-3.fc41.x86_6 100% | 315.5 KiB/s | 32.2 KiB | 00m00s [ 59/154] setup-0:2.15.0-5.fc41.noarch 100% | 2.0 MiB/s | 154.4 KiB | 00m00s [ 60/154] libsemanage-0:3.7-2.fc41.x86_ 100% | 937.9 KiB/s | 116.3 KiB | 00m00s [ 61/154] xz-libs-1:5.6.2-2.fc41.x86_64 100% | 1.4 MiB/s | 111.8 KiB | 00m00s [ 62/154] libcap-0:2.70-4.fc41.x86_64 100% | 1.0 MiB/s | 86.7 KiB | 00m00s [ 63/154] gmp-1:6.3.0-2.fc41.x86_64 100% | 3.0 MiB/s | 318.0 KiB | 00m00s [ 64/154] fedora-repos-0:41-1.noarch 100% | 271.5 KiB/s | 9.2 KiB | 00m00s [ 65/154] mpfr-0:4.2.1-5.fc41.x86_64 100% | 2.1 MiB/s | 346.3 KiB | 00m00s [ 66/154] openssl-libs-1:3.2.2-9.fc41.x 100% | 9.3 MiB/s | 2.3 MiB | 00m00s [ 67/154] libblkid-0:2.40.2-4.fc41.x86_ 100% | 1.6 MiB/s | 124.7 KiB | 00m00s [ 68/154] libcap-ng-0:0.8.5-3.fc41.x86_ 100% | 342.8 KiB/s | 32.6 KiB | 00m00s [ 69/154] glibc-common-0:2.40-12.fc41.x 100% | 1.7 MiB/s | 395.1 KiB | 00m00s [ 70/154] libfdisk-0:2.40.2-4.fc41.x86_ 100% | 2.3 MiB/s | 159.8 KiB | 00m00s [ 71/154] libmount-0:2.40.2-4.fc41.x86_ 100% | 1.7 MiB/s | 155.5 KiB | 00m00s [ 72/154] libutempter-0:1.2.1-15.fc41.x 100% | 782.8 KiB/s | 26.6 KiB | 00m00s [ 73/154] libsmartcols-0:2.40.2-4.fc41. 100% | 863.3 KiB/s | 83.7 KiB | 00m00s [ 74/154] libuuid-0:2.40.2-4.fc41.x86_6 100% | 229.3 KiB/s | 29.1 KiB | 00m00s [ 75/154] util-linux-core-0:2.40.2-4.fc 100% | 4.6 MiB/s | 537.2 KiB | 00m00s [ 76/154] ncurses-base-0:6.5-2.20240629 100% | 1.1 MiB/s | 88.3 KiB | 00m00s [ 77/154] zlib-ng-compat-0:2.1.7-3.fc41 100% | 754.7 KiB/s | 77.7 KiB | 00m00s [ 78/154] coreutils-common-0:9.5-11.fc4 100% | 2.3 MiB/s | 2.1 MiB | 00m01s [ 79/154] pcre2-syntax-0:10.44-1.fc41.1 100% | 3.8 MiB/s | 149.9 KiB | 00m00s [ 80/154] curl-0:8.9.1-2.fc41.x86_64 100% | 7.0 MiB/s | 315.1 KiB | 00m00s [ 81/154] libsepol-0:3.7-2.fc41.x86_64 100% | 2.2 MiB/s | 342.2 KiB | 00m00s [ 82/154] libgcc-0:14.2.1-3.fc41.x86_64 100% | 1.2 MiB/s | 133.3 KiB | 00m00s [ 83/154] libgomp-0:14.2.1-3.fc41.x86_6 100% | 3.1 MiB/s | 354.1 KiB | 00m00s [ 84/154] file-libs-0:5.45-7.fc41.x86_6 100% | 2.9 MiB/s | 762.0 KiB | 00m00s [ 85/154] lua-libs-0:5.4.6-6.fc41.x86_6 100% | 1.2 MiB/s | 132.0 KiB | 00m00s [ 86/154] libzstd-0:1.5.6-2.fc41.x86_64 100% | 4.0 MiB/s | 310.3 KiB | 00m00s [ 87/154] sqlite-libs-0:3.46.1-1.fc41.x 100% | 5.9 MiB/s | 712.7 KiB | 00m00s [ 88/154] libstdc++-0:14.2.1-3.fc41.x86 100% | 6.6 MiB/s | 887.8 KiB | 00m00s [ 89/154] rpm-sequoia-0:1.7.0-2.fc41.x8 100% | 3.6 MiB/s | 892.5 KiB | 00m00s [ 90/154] lz4-libs-0:1.10.0-1.fc41.x86_ 100% | 812.5 KiB/s | 70.7 KiB | 00m00s [ 91/154] fedora-gpg-keys-0:41-1.noarch 100% | 1.8 MiB/s | 133.7 KiB | 00m00s [ 92/154] ca-certificates-0:2024.2.69_v 100% | 7.7 MiB/s | 871.2 KiB | 00m00s [ 93/154] basesystem-0:11-21.fc41.noarc 100% | 103.8 KiB/s | 7.4 KiB | 00m00s [ 94/154] libxcrypt-0:4.4.36-10.fc41.x8 100% | 577.0 KiB/s | 118.9 KiB | 00m00s [ 95/154] systemd-libs-0:256.8-1.fc41.x 100% | 2.3 MiB/s | 732.1 KiB | 00m00s [ 96/154] glibc-gconv-extra-0:2.40-12.f 100% | 2.2 MiB/s | 1.7 MiB | 00m01s [ 97/154] pam-libs-0:1.6.1-6.fc41.x86_6 100% | 1.9 MiB/s | 57.3 KiB | 00m00s [ 98/154] pam-0:1.6.1-6.fc41.x86_64 100% | 2.3 MiB/s | 554.4 KiB | 00m00s [ 99/154] glibc-0:2.40-12.fc41.x86_64 100% | 2.4 MiB/s | 2.2 MiB | 00m01s [100/154] authselect-0:1.5.0-8.fc41.x86 100% | 1.4 MiB/s | 145.8 KiB | 00m00s [101/154] gdbm-libs-1:1.23-7.fc41.x86_6 100% | 827.9 KiB/s | 56.3 KiB | 00m00s [102/154] authselect-libs-0:1.5.0-8.fc4 100% | 3.5 MiB/s | 218.0 KiB | 00m00s [103/154] libnsl2-0:2.0.1-2.fc41.x86_64 100% | 244.7 KiB/s | 29.6 KiB | 00m00s [104/154] libpwquality-0:1.4.5-11.fc41. 100% | 1.1 MiB/s | 119.0 KiB | 00m00s [105/154] cracklib-0:2.9.11-6.fc41.x86_ 100% | 2.5 MiB/s | 92.1 KiB | 00m00s [106/154] elfutils-libelf-0:0.192-6.fc4 100% | 1.8 MiB/s | 207.4 KiB | 00m00s [107/154] elfutils-libs-0:0.192-6.fc41. 100% | 2.2 MiB/s | 261.9 KiB | 00m00s [108/154] elfutils-debuginfod-client-0: 100% | 1.6 MiB/s | 46.2 KiB | 00m00s [109/154] debugedit-0:5.1-1.fc41.x86_64 100% | 1.3 MiB/s | 78.1 KiB | 00m00s [110/154] json-c-0:0.17-4.fc41.x86_64 100% | 472.9 KiB/s | 44.0 KiB | 00m00s [111/154] elfutils-0:0.192-6.fc41.x86_6 100% | 2.3 MiB/s | 547.2 KiB | 00m00s [112/154] libarchive-0:3.7.4-4.fc41.x86 100% | 2.3 MiB/s | 409.1 KiB | 00m00s [113/154] libxml2-0:2.12.8-2.fc41.x86_6 100% | 4.2 MiB/s | 687.3 KiB | 00m00s [114/154] jansson-0:2.13.1-10.fc41.x86_ 100% | 535.3 KiB/s | 44.4 KiB | 00m00s [115/154] alternatives-0:1.30-1.fc41.x8 100% | 369.3 KiB/s | 42.5 KiB | 00m00s [116/154] pkgconf-pkg-config-0:2.3.0-1. 100% | 125.1 KiB/s | 10.0 KiB | 00m00s [117/154] pkgconf-0:2.3.0-1.fc41.x86_64 100% | 717.5 KiB/s | 45.2 KiB | 00m00s [118/154] binutils-0:2.43.1-2.fc41.x86_ 100% | 19.5 MiB/s | 6.5 MiB | 00m00s [119/154] build-reproducibility-srpm-ma 100% | 373.2 KiB/s | 10.8 KiB | 00m00s [120/154] pkgconf-m4-0:2.3.0-1.fc41.noa 100% | 234.8 KiB/s | 14.3 KiB | 00m00s [121/154] libpkgconf-0:2.3.0-1.fc41.x86 100% | 549.8 KiB/s | 38.5 KiB | 00m00s [122/154] efi-srpm-macros-0:5-13.fc41.n 100% | 774.5 KiB/s | 22.5 KiB | 00m00s [123/154] pyproject-srpm-macros-0:1.16. 100% | 468.6 KiB/s | 13.6 KiB | 00m00s [124/154] qt6-srpm-macros-0:6.8.0-1.fc4 100% | 312.0 KiB/s | 9.0 KiB | 00m00s [125/154] crypto-policies-0:20241029-1. 100% | 1.6 MiB/s | 97.5 KiB | 00m00s [126/154] libtirpc-0:1.3.6-1.fc41.x86_6 100% | 1.6 MiB/s | 94.4 KiB | 00m00s [127/154] libcom_err-0:1.47.1-6.fc41.x8 100% | 340.6 KiB/s | 26.6 KiB | 00m00s [128/154] libffi-0:3.4.6-3.fc41.x86_64 100% | 298.1 KiB/s | 39.9 KiB | 00m00s [129/154] libtasn1-0:4.19.0-9.fc41.x86_ 100% | 1.1 MiB/s | 74.2 KiB | 00m00s [130/154] add-determinism-0:0.3.6-3.fc4 100% | 2.3 MiB/s | 875.9 KiB | 00m00s [131/154] p11-kit-0:0.25.5-3.fc41.x86_6 100% | 2.2 MiB/s | 490.9 KiB | 00m00s [132/154] p11-kit-trust-0:0.25.5-3.fc41 100% | 1.2 MiB/s | 132.1 KiB | 00m00s [133/154] keyutils-libs-0:1.6.3-4.fc41. 100% | 445.8 KiB/s | 31.6 KiB | 00m00s [134/154] gdbm-1:1.23-7.fc41.x86_64 100% | 1.0 MiB/s | 151.8 KiB | 00m00s [135/154] elfutils-default-yama-scope-0 100% | 425.1 KiB/s | 12.3 KiB | 00m00s [136/154] libverto-0:0.3.2-9.fc41.x86_6 100% | 252.3 KiB/s | 20.7 KiB | 00m00s [137/154] fedora-release-0:41-28.noarch 100% | 436.1 KiB/s | 12.6 KiB | 00m00s [138/154] xxhash-libs-0:0.8.2-4.fc41.x8 100% | 602.9 KiB/s | 36.8 KiB | 00m00s [139/154] krb5-libs-0:1.21.3-3.fc41.x86 100% | 2.3 MiB/s | 757.9 KiB | 00m00s [140/154] libcurl-0:8.9.1-2.fc41.x86_64 100% | 2.9 MiB/s | 361.9 KiB | 00m00s [141/154] libbrotli-0:1.1.0-5.fc41.x86_ 100% | 3.0 MiB/s | 340.5 KiB | 00m00s [142/154] libidn2-0:2.3.7-2.fc41.x86_64 100% | 954.9 KiB/s | 118.4 KiB | 00m00s [143/154] libnghttp2-0:1.62.1-2.fc41.x8 100% | 982.7 KiB/s | 76.6 KiB | 00m00s [144/154] libpsl-0:0.21.5-4.fc41.x86_64 100% | 1.0 MiB/s | 64.1 KiB | 00m00s [145/154] libssh-0:0.10.6-8.fc41.x86_64 100% | 1.7 MiB/s | 211.8 KiB | 00m00s [146/154] openldap-0:2.6.8-5.fc41.x86_6 100% | 2.8 MiB/s | 255.6 KiB | 00m00s [147/154] libunistring-0:1.1-8.fc41.x86 100% | 5.7 MiB/s | 544.8 KiB | 00m00s [148/154] publicsuffix-list-dafsa-0:202 100% | 582.7 KiB/s | 58.3 KiB | 00m00s [149/154] libssh-config-0:0.10.6-8.fc41 100% | 177.7 KiB/s | 9.2 KiB | 00m00s [150/154] cyrus-sasl-lib-0:2.1.28-27.fc 100% | 6.0 MiB/s | 794.9 KiB | 00m00s [151/154] libevent-0:2.1.12-14.fc41.x86 100% | 2.7 MiB/s | 257.5 KiB | 00m00s [152/154] fedora-release-identity-basic 100% | 448.2 KiB/s | 13.4 KiB | 00m00s [153/154] libtool-ltdl-0:2.4.7-12.fc41. 100% | 342.2 KiB/s | 35.6 KiB | 00m00s [154/154] gdb-minimal-0:15.2-3.fc41.x86 100% | 2.3 MiB/s | 4.3 MiB | 00m02s -------------------------------------------------------------------------------- [154/154] Total 100% | 6.9 MiB/s | 53.3 MiB | 00m08s Running transaction Importing PGP key 0xE99D6AD1: UserID : "Fedora (41) " Fingerprint: 466CF2D8B60BC3057AA9453ED0622462E99D6AD1 From : file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-41-primary The key was successfully imported. [ 1/156] Verify package files 100% | 743.0 B/s | 154.0 B | 00m00s [ 2/156] Prepare transaction 100% | 1.9 KiB/s | 154.0 B | 00m00s [ 3/156] Installing libgcc-0:14.2.1-3. 100% | 134.9 MiB/s | 276.3 KiB | 00m00s [ 4/156] Installing fedora-release-ide 100% | 918.0 KiB/s | 940.0 B | 00m00s [ 5/156] Installing fedora-gpg-keys-0: 100% | 18.7 MiB/s | 172.2 KiB | 00m00s [ 6/156] Installing fedora-repos-0:41- 100% | 0.0 B/s | 5.7 KiB | 00m00s [ 7/156] Installing fedora-release-com 100% | 11.7 MiB/s | 24.0 KiB | 00m00s [ 8/156] Installing fedora-release-0:4 100% | 0.0 B/s | 124.0 B | 00m00s [ 9/156] Installing setup-0:2.15.0-5.f 100% | 47.3 MiB/s | 726.1 KiB | 00m00s [ 10/156] Installing filesystem-0:3.18- 100% | 1.6 MiB/s | 212.5 KiB | 00m00s [ 11/156] Installing basesystem-0:11-21 100% | 0.0 B/s | 124.0 B | 00m00s [ 12/156] Installing libssh-config-0:0. 100% | 0.0 B/s | 816.0 B | 00m00s [ 13/156] Installing publicsuffix-list- 100% | 66.7 MiB/s | 68.3 KiB | 00m00s [ 14/156] Installing qt6-srpm-macros-0: 100% | 0.0 B/s | 732.0 B | 00m00s [ 15/156] Installing pkgconf-m4-0:2.3.0 100% | 0.0 B/s | 14.8 KiB | 00m00s [ 16/156] Installing pcre2-syntax-0:10. 100% | 124.1 MiB/s | 254.1 KiB | 00m00s [ 17/156] Installing ncurses-base-0:6.5 100% | 34.3 MiB/s | 351.7 KiB | 00m00s [ 18/156] Installing glibc-minimal-lang 100% | 0.0 B/s | 124.0 B | 00m00s [ 19/156] Installing ncurses-libs-0:6.5 100% | 137.0 MiB/s | 981.8 KiB | 00m00s [ 20/156] Installing glibc-0:2.40-12.fc 100% | 196.7 MiB/s | 6.7 MiB | 00m00s [ 21/156] Installing bash-0:5.2.32-1.fc 100% | 272.3 MiB/s | 8.2 MiB | 00m00s [ 22/156] Installing glibc-common-0:2.4 100% | 130.9 MiB/s | 1.0 MiB | 00m00s [ 23/156] Installing glibc-gconv-extra- 100% | 150.0 MiB/s | 8.1 MiB | 00m00s [ 24/156] Installing zlib-ng-compat-0:2 100% | 131.6 MiB/s | 134.8 KiB | 00m00s [ 25/156] Installing bzip2-libs-0:1.0.8 100% | 79.9 MiB/s | 81.8 KiB | 00m00s [ 26/156] Installing xz-libs-1:5.6.2-2. 100% | 105.2 MiB/s | 215.5 KiB | 00m00s [ 27/156] Installing popt-0:1.19-7.fc41 100% | 35.0 MiB/s | 143.5 KiB | 00m00s [ 28/156] Installing readline-0:8.2-10. 100% | 161.2 MiB/s | 495.3 KiB | 00m00s [ 29/156] Installing libuuid-0:2.40.2-4 100% | 37.7 MiB/s | 38.6 KiB | 00m00s [ 30/156] Installing libblkid-0:2.40.2- 100% | 126.7 MiB/s | 259.5 KiB | 00m00s [ 31/156] Installing libattr-0:2.5.2-4. 100% | 28.8 MiB/s | 29.5 KiB | 00m00s [ 32/156] Installing libacl-0:2.3.2-2.f 100% | 39.8 MiB/s | 40.7 KiB | 00m00s [ 33/156] Installing gmp-1:6.3.0-2.fc41 100% | 264.9 MiB/s | 813.7 KiB | 00m00s [ 34/156] Installing libzstd-0:1.5.6-2. 100% | 259.5 MiB/s | 797.2 KiB | 00m00s [ 35/156] Installing elfutils-libelf-0: 100% | 292.5 MiB/s | 1.2 MiB | 00m00s [ 36/156] Installing libstdc++-0:14.2.1 100% | 251.5 MiB/s | 2.8 MiB | 00m00s [ 37/156] Installing libxcrypt-0:4.4.36 100% | 133.9 MiB/s | 274.1 KiB | 00m00s [ 38/156] Installing libeconf-0:0.6.2-3 100% | 58.3 MiB/s | 59.7 KiB | 00m00s [ 39/156] Installing gdbm-libs-1:1.23-7 100% | 120.7 MiB/s | 123.6 KiB | 00m00s [ 40/156] Installing dwz-0:0.15-8.fc41. 100% | 146.6 MiB/s | 300.3 KiB | 00m00s [ 41/156] Installing mpfr-0:4.2.1-5.fc4 100% | 203.5 MiB/s | 833.7 KiB | 00m00s [ 42/156] Installing gawk-0:5.3.0-4.fc4 100% | 173.2 MiB/s | 1.7 MiB | 00m00s [ 43/156] Installing unzip-0:6.0-64.fc4 100% | 127.0 MiB/s | 390.3 KiB | 00m00s [ 44/156] Installing file-libs-0:5.45-7 100% | 473.0 MiB/s | 9.9 MiB | 00m00s [ 45/156] Installing file-0:5.45-7.fc41 100% | 6.4 MiB/s | 105.0 KiB | 00m00s >>> Running pre-install scriptlet: crypto-policies-0:20241029-1.git8baf557.fc41. >>> Finished pre-install scriptlet: crypto-policies-0:20241029-1.git8baf557.fc41 >>> Scriptlet output: >>> /var/tmp/rpm-tmp.nW1Ovs: line 2: rm: command not found >>> [ 46/156] Installing crypto-policies-0: 100% | 14.5 MiB/s | 163.3 KiB | 00m00s [ 47/156] Installing pcre2-0:10.44-1.fc 100% | 213.2 MiB/s | 654.9 KiB | 00m00s [ 48/156] Installing grep-0:3.11-9.fc41 100% | 111.5 MiB/s | 1.0 MiB | 00m00s [ 49/156] Installing xz-1:5.6.2-2.fc41. 100% | 120.5 MiB/s | 1.2 MiB | 00m00s [ 50/156] Installing libcap-ng-0:0.8.5- 100% | 69.4 MiB/s | 71.0 KiB | 00m00s [ 51/156] Installing audit-libs-0:4.0.2 100% | 162.8 MiB/s | 333.4 KiB | 00m00s [ 52/156] Installing pam-libs-0:1.6.1-6 100% | 69.0 MiB/s | 141.2 KiB | 00m00s [ 53/156] Installing libcap-0:2.70-4.fc 100% | 55.0 MiB/s | 225.2 KiB | 00m00s [ 54/156] Installing systemd-libs-0:256 100% | 226.0 MiB/s | 2.0 MiB | 00m00s [ 55/156] Installing libsmartcols-0:2.4 100% | 177.1 MiB/s | 181.4 KiB | 00m00s [ 56/156] Installing libsepol-0:3.7-2.f 100% | 266.5 MiB/s | 818.8 KiB | 00m00s [ 57/156] Installing libselinux-0:3.7-5 100% | 89.0 MiB/s | 182.3 KiB | 00m00s [ 58/156] Installing sed-0:4.9-3.fc41.x 100% | 121.3 MiB/s | 869.7 KiB | 00m00s [ 59/156] Installing findutils-1:4.10.0 100% | 185.8 MiB/s | 1.9 MiB | 00m00s [ 60/156] Installing libmount-0:2.40.2- 100% | 172.3 MiB/s | 352.9 KiB | 00m00s [ 61/156] Installing lua-libs-0:5.4.6-6 100% | 139.8 MiB/s | 286.2 KiB | 00m00s [ 62/156] Installing lz4-libs-0:1.10.0- 100% | 143.1 MiB/s | 146.6 KiB | 00m00s [ 63/156] Installing alternatives-0:1.3 100% | 66.3 MiB/s | 67.9 KiB | 00m00s [ 64/156] Installing libcom_err-0:1.47. 100% | 66.7 MiB/s | 68.3 KiB | 00m00s [ 65/156] Installing libffi-0:3.4.6-3.f 100% | 85.7 MiB/s | 87.8 KiB | 00m00s [ 66/156] Installing libtasn1-0:4.19.0- 100% | 86.7 MiB/s | 177.5 KiB | 00m00s [ 67/156] Installing p11-kit-0:0.25.5-3 100% | 147.2 MiB/s | 2.2 MiB | 00m00s [ 68/156] Installing libunistring-0:1.1 100% | 247.2 MiB/s | 1.7 MiB | 00m00s [ 69/156] Installing libidn2-0:2.3.7-2. 100% | 65.4 MiB/s | 335.1 KiB | 00m00s [ 70/156] Installing libpsl-0:0.21.5-4. 100% | 79.7 MiB/s | 81.7 KiB | 00m00s [ 71/156] Installing p11-kit-trust-0:0. 100% | 22.6 MiB/s | 393.1 KiB | 00m00s [ 72/156] Installing zstd-0:1.5.6-2.fc4 100% | 211.4 MiB/s | 1.7 MiB | 00m00s [ 73/156] Installing util-linux-core-0: 100% | 123.8 MiB/s | 1.5 MiB | 00m00s [ 74/156] Installing tar-2:1.35-4.fc41. 100% | 197.2 MiB/s | 3.0 MiB | 00m00s [ 75/156] Installing libsemanage-0:3.7- 100% | 96.1 MiB/s | 295.2 KiB | 00m00s [ 76/156] Installing shadow-utils-2:4.1 100% | 77.1 MiB/s | 4.2 MiB | 00m00s [ 77/156] Installing libutempter-0:1.2. 100% | 19.4 MiB/s | 59.7 KiB | 00m00s [ 78/156] Installing zip-0:3.0-41.fc41. 100% | 138.1 MiB/s | 707.1 KiB | 00m00s [ 79/156] Installing gdbm-1:1.23-7.fc41 100% | 113.7 MiB/s | 465.8 KiB | 00m00s [ 80/156] Installing cyrus-sasl-lib-0:2 100% | 230.6 MiB/s | 2.3 MiB | 00m00s [ 81/156] Installing libfdisk-0:2.40.2- 100% | 177.8 MiB/s | 364.1 KiB | 00m00s [ 82/156] Installing libxml2-0:2.12.8-2 100% | 214.0 MiB/s | 1.7 MiB | 00m00s [ 83/156] Installing bzip2-0:1.0.8-19.f 100% | 48.9 MiB/s | 100.2 KiB | 00m00s [ 84/156] Installing sqlite-libs-0:3.46 100% | 238.2 MiB/s | 1.4 MiB | 00m00s [ 85/156] Installing add-determinism-0: 100% | 294.5 MiB/s | 2.4 MiB | 00m00s [ 86/156] Installing build-reproducibil 100% | 0.0 B/s | 1.0 KiB | 00m00s [ 87/156] Installing ed-0:1.20.2-2.fc41 100% | 72.8 MiB/s | 149.2 KiB | 00m00s [ 88/156] Installing patch-0:2.7.6-25.f 100% | 131.0 MiB/s | 268.2 KiB | 00m00s [ 89/156] Installing elfutils-default-y 100% | 157.2 KiB/s | 2.0 KiB | 00m00s [ 90/156] Installing elfutils-libs-0:0. 100% | 163.1 MiB/s | 668.1 KiB | 00m00s [ 91/156] Installing cpio-0:2.15-2.fc41 100% | 137.5 MiB/s | 1.1 MiB | 00m00s [ 92/156] Installing diffutils-0:3.10-8 100% | 159.0 MiB/s | 1.6 MiB | 00m00s [ 93/156] Installing libgomp-0:14.2.1-3 100% | 256.2 MiB/s | 524.8 KiB | 00m00s [ 94/156] Installing json-c-0:0.17-4.fc 100% | 81.7 MiB/s | 83.6 KiB | 00m00s [ 95/156] Installing jansson-0:2.13.1-1 100% | 87.6 MiB/s | 89.7 KiB | 00m00s [ 96/156] Installing libpkgconf-0:2.3.0 100% | 77.5 MiB/s | 79.3 KiB | 00m00s [ 97/156] Installing pkgconf-0:2.3.0-1. 100% | 44.5 MiB/s | 91.1 KiB | 00m00s [ 98/156] Installing pkgconf-pkg-config 100% | 1.7 MiB/s | 1.8 KiB | 00m00s [ 99/156] Installing keyutils-libs-0:1. 100% | 54.5 MiB/s | 55.8 KiB | 00m00s [100/156] Installing libverto-0:0.3.2-9 100% | 30.5 MiB/s | 31.3 KiB | 00m00s [101/156] Installing xxhash-libs-0:0.8. 100% | 87.7 MiB/s | 89.8 KiB | 00m00s [102/156] Installing libbrotli-0:1.1.0- 100% | 164.0 MiB/s | 839.9 KiB | 00m00s [103/156] Installing libnghttp2-0:1.62. 100% | 163.2 MiB/s | 167.1 KiB | 00m00s [104/156] Installing libtool-ltdl-0:2.4 100% | 32.9 MiB/s | 67.3 KiB | 00m00s [105/156] Installing coreutils-common-0 100% | 233.1 MiB/s | 11.2 MiB | 00m00s [106/156] Installing openssl-libs-1:3.2 100% | 301.1 MiB/s | 7.8 MiB | 00m00s [107/156] Installing coreutils-0:9.5-11 100% | 139.2 MiB/s | 5.7 MiB | 00m00s [108/156] Installing ca-certificates-0: 100% | 2.5 MiB/s | 2.4 MiB | 00m01s [109/156] Installing krb5-libs-0:1.21.3 100% | 165.6 MiB/s | 2.3 MiB | 00m00s [110/156] Installing libarchive-0:3.7.4 100% | 226.7 MiB/s | 928.6 KiB | 00m00s [111/156] Installing libtirpc-0:1.3.6-1 100% | 99.8 MiB/s | 204.5 KiB | 00m00s [112/156] Installing gzip-0:1.13-2.fc41 100% | 96.3 MiB/s | 394.6 KiB | 00m00s [113/156] Installing authselect-libs-0: 100% | 90.8 MiB/s | 837.2 KiB | 00m00s [114/156] Installing cracklib-0:2.9.11- 100% | 34.9 MiB/s | 250.3 KiB | 00m00s [115/156] Installing libpwquality-0:1.4 100% | 52.5 MiB/s | 430.1 KiB | 00m00s [116/156] Installing libnsl2-0:2.0.1-2. 100% | 28.8 MiB/s | 59.1 KiB | 00m00s [117/156] Installing pam-0:1.6.1-6.fc41 100% | 75.1 MiB/s | 1.9 MiB | 00m00s [118/156] Installing libssh-0:0.10.6-8. 100% | 167.8 MiB/s | 515.4 KiB | 00m00s [119/156] Installing rpm-sequoia-0:1.7. 100% | 263.0 MiB/s | 2.4 MiB | 00m00s [120/156] Installing rpm-libs-0:4.20.0- 100% | 177.6 MiB/s | 727.4 KiB | 00m00s [121/156] Installing rpm-build-libs-0:4 100% | 101.3 MiB/s | 207.5 KiB | 00m00s [122/156] Installing libevent-0:2.1.12- 100% | 175.7 MiB/s | 899.5 KiB | 00m00s [123/156] Installing openldap-0:2.6.8-5 100% | 158.2 MiB/s | 648.0 KiB | 00m00s [124/156] Installing libcurl-0:8.9.1-2. 100% | 200.0 MiB/s | 819.2 KiB | 00m00s [125/156] Installing elfutils-debuginfo 100% | 42.2 MiB/s | 86.3 KiB | 00m00s [126/156] Installing elfutils-0:0.192-6 100% | 222.9 MiB/s | 2.7 MiB | 00m00s [127/156] Installing binutils-0:2.43.1- 100% | 245.8 MiB/s | 27.5 MiB | 00m00s [128/156] Installing gdb-minimal-0:15.2 100% | 288.7 MiB/s | 13.0 MiB | 00m00s [129/156] Installing debugedit-0:5.1-1. 100% | 98.9 MiB/s | 202.5 KiB | 00m00s [130/156] Installing curl-0:8.9.1-2.fc4 100% | 32.5 MiB/s | 798.6 KiB | 00m00s [131/156] Installing rpm-0:4.20.0-1.fc4 100% | 86.4 MiB/s | 2.5 MiB | 00m00s [132/156] Installing lua-srpm-macros-0: 100% | 0.0 B/s | 1.9 KiB | 00m00s [133/156] Installing zig-srpm-macros-0: 100% | 0.0 B/s | 1.7 KiB | 00m00s [134/156] Installing efi-srpm-macros-0: 100% | 40.2 MiB/s | 41.2 KiB | 00m00s [135/156] Installing rust-srpm-macros-0 100% | 5.4 MiB/s | 5.6 KiB | 00m00s [136/156] Installing qt5-srpm-macros-0: 100% | 0.0 B/s | 776.0 B | 00m00s [137/156] Installing perl-srpm-macros-0 100% | 0.0 B/s | 1.1 KiB | 00m00s [138/156] Installing package-notes-srpm 100% | 0.0 B/s | 2.0 KiB | 00m00s [139/156] Installing openblas-srpm-macr 100% | 0.0 B/s | 392.0 B | 00m00s [140/156] Installing ocaml-srpm-macros- 100% | 0.0 B/s | 2.2 KiB | 00m00s [141/156] Installing kernel-srpm-macros 100% | 0.0 B/s | 2.3 KiB | 00m00s [142/156] Installing gnat-srpm-macros-0 100% | 0.0 B/s | 1.3 KiB | 00m00s [143/156] Installing ghc-srpm-macros-0: 100% | 0.0 B/s | 1.0 KiB | 00m00s [144/156] Installing fpc-srpm-macros-0: 100% | 0.0 B/s | 420.0 B | 00m00s [145/156] Installing ansible-srpm-macro 100% | 35.4 MiB/s | 36.2 KiB | 00m00s [146/156] Installing fonts-srpm-macros- 100% | 55.7 MiB/s | 57.0 KiB | 00m00s [147/156] Installing forge-srpm-macros- 100% | 39.4 MiB/s | 40.4 KiB | 00m00s [148/156] Installing go-srpm-macros-0:3 100% | 60.5 MiB/s | 62.0 KiB | 00m00s [149/156] Installing python-srpm-macros 100% | 50.9 MiB/s | 52.2 KiB | 00m00s [150/156] Installing redhat-rpm-config- 100% | 61.9 MiB/s | 190.1 KiB | 00m00s [151/156] Installing rpm-build-0:4.20.0 100% | 49.5 MiB/s | 202.8 KiB | 00m00s [152/156] Installing pyproject-srpm-mac 100% | 1.2 MiB/s | 2.5 KiB | 00m00s [153/156] Installing util-linux-0:2.40. 100% | 79.7 MiB/s | 3.7 MiB | 00m00s [154/156] Installing authselect-0:1.5.0 100% | 39.5 MiB/s | 161.9 KiB | 00m00s [155/156] Installing which-0:2.21-42.fc 100% | 40.2 MiB/s | 82.4 KiB | 00m00s [156/156] Installing info-0:7.1-3.fc41. 100% | 274.4 KiB/s | 362.2 KiB | 00m01s Complete! Finish: installing minimal buildroot with dnf5 Start: creating root cache Finish: creating root cache Finish: chroot init INFO: Installed packages: INFO: add-determinism-0.3.6-3.fc41.x86_64 alternatives-1.30-1.fc41.x86_64 ansible-srpm-macros-1-16.fc41.noarch audit-libs-4.0.2-1.fc41.x86_64 authselect-1.5.0-8.fc41.x86_64 authselect-libs-1.5.0-8.fc41.x86_64 basesystem-11-21.fc41.noarch bash-5.2.32-1.fc41.x86_64 binutils-2.43.1-2.fc41.x86_64 build-reproducibility-srpm-macros-0.3.6-3.fc41.noarch bzip2-1.0.8-19.fc41.x86_64 bzip2-libs-1.0.8-19.fc41.x86_64 ca-certificates-2024.2.69_v8.0.401-1.0.fc41.noarch coreutils-9.5-11.fc41.x86_64 coreutils-common-9.5-11.fc41.x86_64 cpio-2.15-2.fc41.x86_64 cracklib-2.9.11-6.fc41.x86_64 crypto-policies-20241029-1.git8baf557.fc41.noarch curl-8.9.1-2.fc41.x86_64 cyrus-sasl-lib-2.1.28-27.fc41.x86_64 debugedit-5.1-1.fc41.x86_64 diffutils-3.10-8.fc41.x86_64 dwz-0.15-8.fc41.x86_64 ed-1.20.2-2.fc41.x86_64 efi-srpm-macros-5-13.fc41.noarch elfutils-0.192-6.fc41.x86_64 elfutils-debuginfod-client-0.192-6.fc41.x86_64 elfutils-default-yama-scope-0.192-6.fc41.noarch elfutils-libelf-0.192-6.fc41.x86_64 elfutils-libs-0.192-6.fc41.x86_64 fedora-gpg-keys-41-1.noarch fedora-release-41-28.noarch fedora-release-common-41-28.noarch fedora-release-identity-basic-41-28.noarch fedora-repos-41-1.noarch file-5.45-7.fc41.x86_64 file-libs-5.45-7.fc41.x86_64 filesystem-3.18-23.fc41.x86_64 findutils-4.10.0-4.fc41.x86_64 fonts-srpm-macros-2.0.5-17.fc41.noarch forge-srpm-macros-0.3.2-1.fc41.noarch fpc-srpm-macros-1.3-13.fc41.noarch gawk-5.3.0-4.fc41.x86_64 gdb-minimal-15.2-3.fc41.x86_64 gdbm-1.23-7.fc41.x86_64 gdbm-libs-1.23-7.fc41.x86_64 ghc-srpm-macros-1.9.1-2.fc41.noarch glibc-2.40-12.fc41.x86_64 glibc-common-2.40-12.fc41.x86_64 glibc-gconv-extra-2.40-12.fc41.x86_64 glibc-minimal-langpack-2.40-12.fc41.x86_64 gmp-6.3.0-2.fc41.x86_64 gnat-srpm-macros-6-6.fc41.noarch go-srpm-macros-3.6.0-3.fc41.noarch gpg-pubkey-e99d6ad1-64d2612c grep-3.11-9.fc41.x86_64 gzip-1.13-2.fc41.x86_64 info-7.1-3.fc41.x86_64 jansson-2.13.1-10.fc41.x86_64 json-c-0.17-4.fc41.x86_64 kernel-srpm-macros-1.0-24.fc41.noarch keyutils-libs-1.6.3-4.fc41.x86_64 krb5-libs-1.21.3-3.fc41.x86_64 libacl-2.3.2-2.fc41.x86_64 libarchive-3.7.4-4.fc41.x86_64 libattr-2.5.2-4.fc41.x86_64 libblkid-2.40.2-4.fc41.x86_64 libbrotli-1.1.0-5.fc41.x86_64 libcap-2.70-4.fc41.x86_64 libcap-ng-0.8.5-3.fc41.x86_64 libcom_err-1.47.1-6.fc41.x86_64 libcurl-8.9.1-2.fc41.x86_64 libeconf-0.6.2-3.fc41.x86_64 libevent-2.1.12-14.fc41.x86_64 libfdisk-2.40.2-4.fc41.x86_64 libffi-3.4.6-3.fc41.x86_64 libgcc-14.2.1-3.fc41.x86_64 libgomp-14.2.1-3.fc41.x86_64 libidn2-2.3.7-2.fc41.x86_64 libmount-2.40.2-4.fc41.x86_64 libnghttp2-1.62.1-2.fc41.x86_64 libnsl2-2.0.1-2.fc41.x86_64 libpkgconf-2.3.0-1.fc41.x86_64 libpsl-0.21.5-4.fc41.x86_64 libpwquality-1.4.5-11.fc41.x86_64 libselinux-3.7-5.fc41.x86_64 libsemanage-3.7-2.fc41.x86_64 libsepol-3.7-2.fc41.x86_64 libsmartcols-2.40.2-4.fc41.x86_64 libssh-0.10.6-8.fc41.x86_64 libssh-config-0.10.6-8.fc41.noarch libstdc++-14.2.1-3.fc41.x86_64 libtasn1-4.19.0-9.fc41.x86_64 libtirpc-1.3.6-1.fc41.x86_64 libtool-ltdl-2.4.7-12.fc41.x86_64 libunistring-1.1-8.fc41.x86_64 libutempter-1.2.1-15.fc41.x86_64 libuuid-2.40.2-4.fc41.x86_64 libverto-0.3.2-9.fc41.x86_64 libxcrypt-4.4.36-10.fc41.x86_64 libxml2-2.12.8-2.fc41.x86_64 libzstd-1.5.6-2.fc41.x86_64 lua-libs-5.4.6-6.fc41.x86_64 lua-srpm-macros-1-14.fc41.noarch lz4-libs-1.10.0-1.fc41.x86_64 mpfr-4.2.1-5.fc41.x86_64 ncurses-base-6.5-2.20240629.fc41.noarch ncurses-libs-6.5-2.20240629.fc41.x86_64 ocaml-srpm-macros-10-3.fc41.noarch openblas-srpm-macros-2-18.fc41.noarch openldap-2.6.8-5.fc41.x86_64 openssl-libs-3.2.2-9.fc41.x86_64 p11-kit-0.25.5-3.fc41.x86_64 p11-kit-trust-0.25.5-3.fc41.x86_64 package-notes-srpm-macros-0.5-12.fc41.noarch pam-1.6.1-6.fc41.x86_64 pam-libs-1.6.1-6.fc41.x86_64 patch-2.7.6-25.fc41.x86_64 pcre2-10.44-1.fc41.1.x86_64 pcre2-syntax-10.44-1.fc41.1.noarch perl-srpm-macros-1-56.fc41.noarch pkgconf-2.3.0-1.fc41.x86_64 pkgconf-m4-2.3.0-1.fc41.noarch pkgconf-pkg-config-2.3.0-1.fc41.x86_64 popt-1.19-7.fc41.x86_64 publicsuffix-list-dafsa-20240107-4.fc41.noarch pyproject-srpm-macros-1.16.0-1.fc41.noarch python-srpm-macros-3.13-3.fc41.noarch qt5-srpm-macros-5.15.15-1.fc41.noarch qt6-srpm-macros-6.8.0-1.fc41.noarch readline-8.2-10.fc41.x86_64 redhat-rpm-config-293-1.fc41.noarch rpm-4.20.0-1.fc41.x86_64 rpm-build-4.20.0-1.fc41.x86_64 rpm-build-libs-4.20.0-1.fc41.x86_64 rpm-libs-4.20.0-1.fc41.x86_64 rpm-sequoia-1.7.0-2.fc41.x86_64 rust-srpm-macros-26.3-3.fc41.noarch sed-4.9-3.fc41.x86_64 setup-2.15.0-5.fc41.noarch shadow-utils-4.15.1-12.fc41.x86_64 sqlite-libs-3.46.1-1.fc41.x86_64 systemd-libs-256.8-1.fc41.x86_64 tar-1.35-4.fc41.x86_64 unzip-6.0-64.fc41.x86_64 util-linux-2.40.2-4.fc41.x86_64 util-linux-core-2.40.2-4.fc41.x86_64 which-2.21-42.fc41.x86_64 xxhash-libs-0.8.2-4.fc41.x86_64 xz-5.6.2-2.fc41.x86_64 xz-libs-5.6.2-2.fc41.x86_64 zig-srpm-macros-1-3.fc41.noarch zip-3.0-41.fc41.x86_64 zlib-ng-compat-2.1.7-3.fc41.x86_64 zstd-1.5.6-2.fc41.x86_64 Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --install packit bash INFO: mock.py version 5.9 starting (python version = 3.13.0, NVR = mock-5.9-1.fc41), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --install packit bash Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 5.9 INFO: Mock Version: 5.9 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: installing package(s): packit bash Updating and loading repositories: fedora 100% | 1.1 MiB/s | 31.0 KiB | 00m00s updates 100% | 1.0 MiB/s | 28.1 KiB | 00m00s Additional repo copr_packit_packit_sta 100% | 46.0 KiB/s | 1.5 KiB | 00m00s Repositories loaded. Package "bash-5.2.32-1.fc41.x86_64" is already installed. Package Arch Version Repository Size Installing: packit noarch 0.104.1-1.20241125161306705222.stable.0.g23aec6b3.fc41 copr_packit_packit_stable 19.7 KiB Installing dependencies: bodhi-client noarch 8.3.0-1.fc41 updates 259.0 KiB createrepo_c x86_64 1.1.4-1.fc41 fedora 203.1 KiB createrepo_c-libs x86_64 1.1.4-1.fc41 fedora 277.8 KiB dash x86_64 0.5.12-4.fc41 fedora 167.2 KiB dbus x86_64 1:1.14.10-4.fc41 fedora 0.0 B dbus-broker x86_64 36-4.fc41 fedora 382.8 KiB dbus-common noarch 1:1.14.10-4.fc41 fedora 11.2 KiB desktop-file-utils x86_64 0.27-2.fc41 fedora 230.4 KiB devscripts-checkbashisms noarch 2.23.7-5.fc41 fedora 52.5 KiB distribution-gpg-keys noarch 1.105-1.fc41 fedora 886.0 KiB dnf-data noarch 4.22.0-1.fc41 updates 38.6 KiB drpm x86_64 0.5.2-6.fc41 fedora 131.6 KiB emacs-filesystem noarch 1:30.0-3.fc41 fedora 0.0 B enchant2 x86_64 2.8.1-2.fc41 fedora 196.9 KiB expat x86_64 2.6.4-1.fc41 updates 292.9 KiB fakeroot x86_64 1.36-1.fc41 fedora 155.0 KiB fakeroot-libs x86_64 1.36-1.fc41 fedora 132.8 KiB fedpkg noarch 1.45-5.fc41 fedora 318.0 KiB fmt x86_64 11.0.2-2.fc41 fedora 264.1 KiB gdk-pixbuf2 x86_64 2.42.12-6.fc41 fedora 2.5 MiB git-core x86_64 2.47.0-1.fc41 fedora 22.5 MiB glib2 x86_64 2.82.2-1.fc41 updates 14.7 MiB gnupg2 x86_64 2.4.5-3.fc41 fedora 9.5 MiB gnutls x86_64 3.8.6-7.fc41 fedora 3.2 MiB gobject-introspection x86_64 1.82.0-1.fc41 fedora 396.2 KiB groff-base x86_64 1.23.0-7.fc41 fedora 3.8 MiB hunspell x86_64 1.7.2-8.fc41 fedora 1.3 MiB hunspell-en-US noarch 0.20201207-10.fc41 fedora 557.4 KiB hunspell-filesystem x86_64 1.7.2-8.fc41 fedora 0.0 B ima-evm-utils-libs x86_64 1.6.2-2.fc41 fedora 60.8 KiB json-glib x86_64 1.10.0-1.fc41 fedora 558.2 KiB koji noarch 1.35.1-4.fc41 updates 888.5 KiB krb5-pkinit x86_64 1.21.3-3.fc41 updates 121.2 KiB krb5-workstation x86_64 1.21.3-3.fc41 updates 2.6 MiB less x86_64 661-2.fc41 fedora 405.3 KiB libappstream-glib x86_64 0.8.3-2.fc41 fedora 1.4 MiB libassuan x86_64 2.5.7-2.fc41 fedora 163.8 KiB libb2 x86_64 0.98.1-12.fc41 fedora 42.2 KiB libcbor x86_64 0.11.0-2.fc41 fedora 73.9 KiB libcomps x86_64 0.1.21-3.fc41 fedora 205.4 KiB libdnf x86_64 0.73.4-1.fc41 updates 2.1 MiB libdnf5 x86_64 5.2.7.0-1.fc41 updates 3.5 MiB libedit x86_64 3.1-53.20240808cvs.fc41 fedora 244.1 KiB libfido2 x86_64 1.15.0-2.fc41 fedora 238.2 KiB libfsverity x86_64 1.6-1.fc41 fedora 32.6 KiB libgcrypt x86_64 1.11.0-3.fc41 fedora 1.5 MiB libgit2 x86_64 1.8.4-1.fc41 updates 1.3 MiB libgpg-error x86_64 1.50-2.fc41 fedora 889.5 KiB libjpeg-turbo x86_64 3.0.2-3.fc41 fedora 776.9 KiB libkadm5 x86_64 1.21.3-3.fc41 updates 214.1 KiB libksba x86_64 1.6.7-2.fc41 fedora 398.4 KiB libmodulemd x86_64 2.15.0-14.fc41 fedora 717.2 KiB libpng x86_64 2:1.6.40-4.fc41 fedora 245.8 KiB librepo x86_64 1.19.0-1.fc41 updates 244.5 KiB libseccomp x86_64 2.5.5-2.fc41 fedora 173.3 KiB libsodium x86_64 1.0.20-2.fc41 fedora 393.0 KiB libsolv x86_64 0.7.31-1.fc41 updates 944.3 KiB libss x86_64 1.47.1-6.fc41 fedora 75.3 KiB libssh2 x86_64 1.11.0-8.fc41 fedora 293.6 KiB libuser x86_64 0.64-11.fc41 fedora 1.9 MiB libyaml x86_64 0.2.5-15.fc41 fedora 134.4 KiB llhttp x86_64 9.2.1-2.fc41 fedora 72.6 KiB mock noarch 5.9-1.fc41 fedora 1.0 MiB mock-core-configs noarch 41.4-1.fc41 fedora 340.6 KiB mock-filesystem noarch 5.9-1.fc41 fedora 17.7 KiB mpdecimal x86_64 2.5.1-16.fc41 fedora 204.9 KiB ncurses x86_64 6.5-2.20240629.fc41 fedora 627.3 KiB nettle x86_64 3.10-3.fc41 fedora 793.0 KiB npth x86_64 1.7-2.fc41 fedora 49.6 KiB openssh x86_64 9.8p1-3.fc41.2 updates 1.8 MiB openssh-clients x86_64 9.8p1-3.fc41.2 updates 2.6 MiB perl-AutoLoader noarch 5.74-512.fc41 updates 20.5 KiB perl-B x86_64 1.89-512.fc41 updates 498.0 KiB perl-Carp noarch 1.54-511.fc41 fedora 46.6 KiB perl-Class-Struct noarch 0.68-512.fc41 updates 25.4 KiB perl-Data-Dumper x86_64 2.189-512.fc41 fedora 111.7 KiB perl-Digest noarch 1.20-511.fc41 fedora 35.3 KiB perl-Digest-MD5 x86_64 2.59-5.fc41 fedora 59.8 KiB perl-DynaLoader x86_64 1.56-512.fc41 updates 32.1 KiB perl-Encode x86_64 4:3.21-511.fc41 fedora 4.7 MiB perl-Errno x86_64 1.38-512.fc41 updates 8.4 KiB perl-Exporter noarch 5.78-511.fc41 fedora 54.3 KiB perl-Fcntl x86_64 1.18-512.fc41 updates 49.0 KiB perl-File-Basename noarch 2.86-512.fc41 updates 14.0 KiB perl-File-Path noarch 2.18-511.fc41 fedora 63.5 KiB perl-File-Temp noarch 1:0.231.100-511.fc41 fedora 162.3 KiB perl-File-stat noarch 1.14-512.fc41 updates 12.5 KiB perl-FileHandle noarch 2.05-512.fc41 updates 9.3 KiB perl-Getopt-Long noarch 1:2.58-2.fc41 fedora 144.5 KiB perl-Getopt-Std noarch 1.14-512.fc41 updates 11.2 KiB perl-HTTP-Tiny noarch 0.090-1.fc41 updates 154.4 KiB perl-IO x86_64 1.55-512.fc41 updates 151.1 KiB perl-IO-Socket-IP noarch 0.42-512.fc41 fedora 98.7 KiB perl-IO-Socket-SSL noarch 2.089-1.fc41 fedora 703.3 KiB perl-IPC-Open3 noarch 1.22-512.fc41 updates 22.5 KiB perl-MIME-Base32 noarch 1.303-21.fc41 fedora 30.7 KiB perl-MIME-Base64 x86_64 3.16-511.fc41 fedora 46.1 KiB perl-Net-SSLeay x86_64 1.94-7.fc41 fedora 1.3 MiB perl-POSIX x86_64 2.20-512.fc41 updates 235.1 KiB perl-PathTools x86_64 3.91-511.fc41 fedora 180.0 KiB perl-Pod-Escapes noarch 1:1.07-511.fc41 fedora 24.9 KiB perl-Pod-Perldoc noarch 3.28.01-512.fc41 fedora 163.7 KiB perl-Pod-Simple noarch 1:3.45-511.fc41 fedora 560.9 KiB perl-Pod-Usage noarch 4:2.03-511.fc41 fedora 84.8 KiB perl-Scalar-List-Utils x86_64 5:1.68-1.fc41 updates 148.9 KiB perl-SelectSaver noarch 1.02-512.fc41 updates 2.2 KiB perl-Socket x86_64 4:2.038-511.fc41 fedora 124.0 KiB perl-Storable x86_64 1:3.32-511.fc41 fedora 232.4 KiB perl-Symbol noarch 1.09-512.fc41 updates 6.8 KiB perl-Term-ANSIColor noarch 5.01-512.fc41 fedora 97.5 KiB perl-Term-Cap noarch 1.18-511.fc41 fedora 29.3 KiB perl-Text-ParseWords noarch 3.31-511.fc41 fedora 13.6 KiB perl-Text-Tabs+Wrap noarch 2024.001-511.fc41 fedora 22.6 KiB perl-Time-Local noarch 2:1.350-511.fc41 fedora 69.0 KiB perl-URI noarch 5.30-1.fc41 fedora 256.9 KiB perl-base noarch 2.27-512.fc41 updates 12.5 KiB perl-constant noarch 1.33-512.fc41 fedora 26.2 KiB perl-if noarch 0.61.000-512.fc41 updates 5.8 KiB perl-interpreter x86_64 4:5.40.0-512.fc41 updates 122.3 KiB perl-libnet noarch 3.15-512.fc41 fedora 289.4 KiB perl-libs x86_64 4:5.40.0-512.fc41 updates 9.9 MiB perl-locale noarch 1.12-512.fc41 updates 6.5 KiB perl-mro x86_64 1.29-512.fc41 updates 45.6 KiB perl-overload noarch 1.37-512.fc41 updates 71.5 KiB perl-overloading noarch 0.02-512.fc41 updates 4.8 KiB perl-parent noarch 1:0.242-1.fc41 fedora 10.0 KiB perl-podlators noarch 1:6.0.2-2.fc41 fedora 317.5 KiB perl-vars noarch 1.05-512.fc41 updates 3.9 KiB pigz x86_64 2.8-5.fc41 fedora 162.9 KiB procps-ng x86_64 4.0.4-4.fc41 fedora 1.0 MiB python-pip-wheel noarch 24.2-1.fc41 fedora 1.2 MiB python3 x86_64 3.13.0-1.fc41 fedora 31.8 KiB python3-GitPython noarch 3.1.40-6.fc41 fedora 1.7 MiB python3-argcomplete noarch 3.5.1-1.fc41 updates 312.6 KiB python3-authlib noarch 1.3.2-5.fc41 updates 1.4 MiB python3-babel noarch 2.16.0-1.fc41 fedora 28.3 MiB python3-backoff noarch 2.2.1-8.fc41 fedora 104.3 KiB python3-bugzilla noarch 3.3.0-1.fc41 fedora 443.0 KiB python3-cachetools noarch 5.4.0-2.fc41 fedora 144.4 KiB python3-cccolutils x86_64 1.5-29.fc41 fedora 33.8 KiB python3-cffi x86_64 1.17.0-1.fc41 fedora 1.3 MiB python3-charset-normalizer noarch 3.3.2-5.fc41 fedora 314.8 KiB python3-click noarch 8.1.7-6.fc41 fedora 1.1 MiB python3-click-plugins noarch 1.1.1-22.fc41 fedora 24.0 KiB python3-construct noarch 2.10.70-5.fc41 fedora 1.0 MiB python3-copr noarch 2.0-1.fc41 fedora 241.8 KiB python3-cryptography x86_64 43.0.0-2.fc41 fedora 4.7 MiB python3-dateutil noarch 1:2.8.2-16.fc41 fedora 879.2 KiB python3-decorator noarch 5.1.1-11.fc41 fedora 77.6 KiB python3-defusedxml noarch 0.7.1-15.fc41 fedora 198.2 KiB python3-deprecated noarch 1.2.14-7.fc41 fedora 51.6 KiB python3-distro noarch 1.9.0-5.fc41 fedora 198.7 KiB python3-dnf noarch 4.22.0-1.fc41 updates 2.6 MiB python3-enchant noarch 3.2.2-14.fc41 fedora 371.5 KiB python3-fedora-distro-aliases noarch 1.5-1.fc41 fedora 40.0 KiB python3-file-magic noarch 5.45-7.fc41 fedora 28.7 KiB python3-filelock noarch 3.15.4-2.fc41 fedora 90.2 KiB python3-gitdb noarch 4.0.10-7.fc41 fedora 503.9 KiB python3-gitlab noarch 4.10.0-1.fc41 fedora 1.6 MiB python3-gnupg noarch 0.5.0-8.fc41 fedora 164.2 KiB python3-gobject-base x86_64 3.48.2-3.fc41 fedora 1.4 MiB python3-gssapi x86_64 1.7.3-10.fc41 fedora 2.7 MiB python3-hawkey x86_64 0.73.4-1.fc41 updates 306.3 KiB python3-idna noarch 3.7-4.fc41 fedora 595.8 KiB python3-jinja2 noarch 3.1.4-5.fc41 fedora 2.9 MiB python3-jwt noarch 2.8.0-2.fc41 fedora 164.6 KiB python3-jwt+crypto noarch 2.8.0-2.fc41 fedora 5.4 KiB python3-koji noarch 1.35.1-4.fc41 updates 2.2 MiB python3-krb5 x86_64 0.5.1-6.fc41 fedora 2.4 MiB python3-lazy-object-proxy x86_64 1.10.0-5.fc41 fedora 117.1 KiB python3-libcomps x86_64 0.1.21-3.fc41 fedora 143.4 KiB python3-libdnf x86_64 0.73.4-1.fc41 updates 3.8 MiB python3-libmodulemd x86_64 2.15.0-14.fc41 fedora 15.6 KiB python3-libs x86_64 3.13.0-1.fc41 fedora 40.3 MiB python3-markupsafe x86_64 2.1.5-3.fc41 fedora 57.5 KiB python3-marshmallow noarch 3.21.3-3.fc41 fedora 565.5 KiB python3-marshmallow-enum noarch 1.5.1-17.fc41 fedora 14.9 KiB python3-munch noarch 2.5.0-17.fc41 fedora 59.8 KiB python3-ogr noarch 0.50.2-1.20241028130803069912.stable.0.ge7b838e.fc41 copr_packit_packit_stable 693.8 KiB python3-openidc-client noarch 0.6.0-24.20220119git0e2ed81.fc41 fedora 74.3 KiB python3-ordered-set noarch 4.1.0-15.fc41 fedora 48.5 KiB python3-packaging noarch 24.1-2.fc41 fedora 422.3 KiB python3-packit noarch 0.104.1-1.20241125161306705222.stable.0.g23aec6b3.fc41 copr_packit_packit_stable 1.5 MiB python3-ply noarch 3.11-25.fc41 fedora 568.2 KiB python3-progressbar2 noarch 3.53.2-13.fc41 fedora 258.5 KiB python3-pybeam noarch 0.8-2.fc41 fedora 44.5 KiB python3-pycparser noarch 2.20-18.fc41 fedora 821.0 KiB python3-pycurl x86_64 7.45.3-4.fc41 fedora 432.1 KiB python3-pygit2 x86_64 1.16.0-1.fc41 updates 1.2 MiB python3-pygithub noarch 2.3.0-1.fc41 fedora 3.7 MiB python3-pynacl x86_64 1.5.0-9.fc41 fedora 595.2 KiB python3-pyroute2 noarch 0.7.12-4.fc41 fedora 3.5 MiB python3-pyxdg noarch 0.27-13.fc41 fedora 438.4 KiB python3-pyyaml x86_64 6.0.1-18.fc41 fedora 791.1 KiB python3-requests noarch 2.32.3-3.fc41 fedora 485.9 KiB python3-requests-gssapi noarch 1.2.3-13.fc41 fedora 61.6 KiB python3-requests-kerberos noarch 0.14.0-5.fc41 fedora 61.4 KiB python3-requests-toolbelt noarch 1.0.0-7.fc41 fedora 299.1 KiB python3-rpkg noarch 1.67-4.fc41 fedora 1.0 MiB python3-rpm x86_64 4.20.0-1.fc41 fedora 175.3 KiB python3-rpmautospec noarch 0.7.3-1.fc41 updates 151.1 KiB python3-rpmautospec-core noarch 0.1.5-2.fc41 fedora 10.7 KiB python3-setuptools noarch 69.2.0-8.fc41 fedora 7.2 MiB python3-six noarch 1.16.0-23.fc41 fedora 118.3 KiB python3-smmap noarch 5.0.0-10.fc41 fedora 200.0 KiB python3-specfile noarch 0.32.6.post1.dev2+ge3b10a3-1.20241118132211681427.stable.2.ge3b10a3.fc41 copr_packit_packit_stable 559.8 KiB python3-spnego noarch 0.11.1-1.fc41 fedora 1.0 MiB python3-spnego+kerberos noarch 0.11.1-1.fc41 fedora 6.5 KiB python3-tabulate noarch 0.9.0-10.fc41 fedora 342.0 KiB python3-templated-dictionary noarch 1.5-1.fc41 fedora 28.2 KiB python3-tomli-w noarch 1.0.0-14.fc41 fedora 28.3 KiB python3-typing-extensions noarch 4.12.2-3.fc41 fedora 464.5 KiB python3-urllib3 noarch 1.26.20-1.fc41 fedora 1.0 MiB python3-utils noarch 3.7.0-6.fc41 fedora 172.3 KiB python3-wrapt x86_64 1.16.0-6.fc41 fedora 197.4 KiB python3-zstandard x86_64 0.23.0-1.fc41 fedora 2.0 MiB rpkg-common noarch 1.67-4.fc41 fedora 11.8 KiB rpm-sign-libs x86_64 4.20.0-1.fc41 fedora 39.4 KiB rpmdevtools noarch 9.6-8.fc41 fedora 213.8 KiB rpmlint noarch 2.5.0-7.fc41 fedora 1.1 MiB rpmlint-fedora-license-data noarch 1.62-1.fc41 updates 22.8 KiB rsync x86_64 3.3.0-3.fc41 fedora 776.4 KiB shared-mime-info x86_64 2.3-6.fc41 fedora 5.2 MiB systemd x86_64 256.8-1.fc41 updates 17.0 MiB systemd-container x86_64 256.8-1.fc41 updates 1.5 MiB systemd-pam x86_64 256.8-1.fc41 updates 1.1 MiB systemd-rpm-macros noarch 256.8-1.fc41 updates 10.7 KiB tpm2-tss x86_64 4.1.3-3.fc41 fedora 1.6 MiB tzdata noarch 2024a-9.fc41 fedora 1.7 MiB usermode x86_64 1.114-10.fc41 fedora 839.5 KiB zchunk-libs x86_64 1.5.1-1.fc41 fedora 101.2 KiB Transaction Summary: Installing: 232 packages Total size of inbound packages is 76 MiB. Need to download 76 MiB. After this operation, 284 MiB extra will be used (install 284 MiB, remove 0 B). [ 1/232] packit-0:0.104.1-1.2024112516 100% | 1.0 MiB/s | 36.1 KiB | 00m00s [ 2/232] python3-packit-0:0.104.1-1.20 100% | 5.5 MiB/s | 400.2 KiB | 00m00s [ 3/232] fedpkg-0:1.45-5.fc41.noarch 100% | 673.2 KiB/s | 116.5 KiB | 00m00s [ 4/232] python3-backoff-0:2.2.1-8.fc4 100% | 1.0 MiB/s | 42.2 KiB | 00m00s [ 5/232] python3-GitPython-0:3.1.40-6. 100% | 2.3 MiB/s | 389.8 KiB | 00m00s [ 6/232] python3-cachetools-0:5.4.0-2. 100% | 853.9 KiB/s | 37.6 KiB | 00m00s [ 7/232] python3-bugzilla-0:3.3.0-1.fc 100% | 2.2 MiB/s | 137.7 KiB | 00m00s [ 8/232] git-core-0:2.47.0-1.fc41.x86_ 100% | 18.0 MiB/s | 4.8 MiB | 00m00s [ 9/232] python3-cccolutils-0:1.5-29.f 100% | 483.4 KiB/s | 20.8 KiB | 00m00s [ 10/232] python3-click-0:8.1.7-6.fc41. 100% | 5.4 MiB/s | 241.8 KiB | 00m00s [ 11/232] python3-copr-0:2.0-1.fc41.noa 100% | 2.3 MiB/s | 100.4 KiB | 00m00s [ 12/232] python3-fedora-distro-aliases 100% | 637.8 KiB/s | 26.8 KiB | 00m00s [ 13/232] python3-gnupg-0:0.5.0-8.fc41. 100% | 907.8 KiB/s | 56.3 KiB | 00m00s [ 14/232] python3-lazy-object-proxy-0:1 100% | 1.1 MiB/s | 46.5 KiB | 00m00s [ 15/232] python3-marshmallow-0:3.21.3- 100% | 3.3 MiB/s | 141.4 KiB | 00m00s [ 16/232] python3-marshmallow-enum-0:1. 100% | 386.0 KiB/s | 15.8 KiB | 00m00s [ 17/232] python3-munch-0:2.5.0-17.fc41 100% | 640.8 KiB/s | 26.3 KiB | 00m00s [ 18/232] python3-packaging-0:24.1-2.fc 100% | 2.8 MiB/s | 125.5 KiB | 00m00s [ 19/232] python3-requests-0:2.32.3-3.f 100% | 3.5 MiB/s | 159.4 KiB | 00m00s [ 20/232] python3-pyyaml-0:6.0.1-18.fc4 100% | 4.9 MiB/s | 231.6 KiB | 00m00s [ 21/232] python3-requests-kerberos-0:0 100% | 674.1 KiB/s | 27.6 KiB | 00m00s [ 22/232] python3-tabulate-0:0.9.0-10.f 100% | 1.6 MiB/s | 71.8 KiB | 00m00s [ 23/232] python3-rpkg-0:1.67-4.fc41.no 100% | 5.3 MiB/s | 241.0 KiB | 00m00s [ 24/232] rpmdevtools-0:9.6-8.fc41.noar 100% | 2.4 MiB/s | 94.2 KiB | 00m00s [ 25/232] rsync-0:3.3.0-3.fc41.x86_64 100% | 9.6 MiB/s | 422.7 KiB | 00m00s [ 26/232] python3-distro-0:1.9.0-5.fc41 100% | 1.1 MiB/s | 46.6 KiB | 00m00s [ 27/232] python3-openidc-client-0:0.6. 100% | 655.2 KiB/s | 27.5 KiB | 00m00s [ 28/232] less-0:661-2.fc41.x86_64 100% | 4.6 MiB/s | 188.5 KiB | 00m00s [ 29/232] python3-gitdb-0:4.0.10-7.fc41 100% | 3.2 MiB/s | 143.8 KiB | 00m00s [ 30/232] python3-filelock-0:3.15.4-2.f 100% | 1.0 MiB/s | 43.3 KiB | 00m00s [ 31/232] python3-requests-gssapi-0:1.2 100% | 669.2 KiB/s | 28.1 KiB | 00m00s [ 32/232] python3-requests-toolbelt-0:1 100% | 2.7 MiB/s | 117.7 KiB | 00m00s [ 33/232] python3-six-0:1.16.0-23.fc41. 100% | 981.8 KiB/s | 41.2 KiB | 00m00s [ 34/232] python3-ordered-set-0:4.1.0-1 100% | 499.2 KiB/s | 23.5 KiB | 00m00s [ 35/232] gnupg2-0:2.4.5-3.fc41.x86_64 100% | 31.2 MiB/s | 2.7 MiB | 00m00s [ 36/232] libyaml-0:0.2.5-15.fc41.x86_6 100% | 1.5 MiB/s | 59.4 KiB | 00m00s [ 37/232] python3-charset-normalizer-0: 100% | 2.4 MiB/s | 107.1 KiB | 00m00s [ 38/232] python3-idna-0:3.7-4.fc41.noa 100% | 2.6 MiB/s | 115.8 KiB | 00m00s [ 39/232] python3-urllib3-0:1.26.20-1.f 100% | 6.1 MiB/s | 279.4 KiB | 00m00s [ 40/232] python3-cryptography-0:43.0.0 100% | 23.6 MiB/s | 1.3 MiB | 00m00s [ 41/232] python3-setuptools-0:69.2.0-8 100% | 4.6 MiB/s | 1.6 MiB | 00m00s [ 42/232] python3-spnego+kerberos-0:0.1 100% | 188.6 KiB/s | 9.1 KiB | 00m00s [ 43/232] python3-spnego-0:0.11.1-1.fc4 100% | 6.3 MiB/s | 282.9 KiB | 00m00s [ 44/232] mock-0:5.9-1.fc41.noarch 100% | 7.1 MiB/s | 307.3 KiB | 00m00s [ 45/232] python3-libmodulemd-0:2.15.0- 100% | 339.9 KiB/s | 14.3 KiB | 00m00s [ 46/232] python3-pycurl-0:7.45.3-4.fc4 100% | 3.3 MiB/s | 150.7 KiB | 00m00s [ 47/232] python3-rpm-0:4.20.0-1.fc41.x 100% | 1.6 MiB/s | 69.1 KiB | 00m00s [ 48/232] rpkg-common-0:1.67-4.fc41.noa 100% | 496.2 KiB/s | 19.4 KiB | 00m00s [ 49/232] emacs-filesystem-1:30.0-3.fc4 100% | 162.3 KiB/s | 7.1 KiB | 00m00s [ 50/232] rpmlint-0:2.5.0-7.fc41.noarch 100% | 7.3 MiB/s | 344.3 KiB | 00m00s [ 51/232] fakeroot-0:1.36-1.fc41.x86_64 100% | 2.4 MiB/s | 100.0 KiB | 00m00s [ 52/232] python3-progressbar2-0:3.53.2 100% | 1.7 MiB/s | 72.2 KiB | 00m00s [ 53/232] python3-smmap-0:5.0.0-10.fc41 100% | 1.4 MiB/s | 62.6 KiB | 00m00s [ 54/232] python3-gssapi-0:1.7.3-10.fc4 100% | 9.9 MiB/s | 646.6 KiB | 00m00s [ 55/232] libassuan-0:2.5.7-2.fc41.x86_ 100% | 1.5 MiB/s | 67.1 KiB | 00m00s [ 56/232] gnutls-0:3.8.6-7.fc41.x86_64 100% | 21.3 MiB/s | 1.1 MiB | 00m00s [ 57/232] libgcrypt-0:1.11.0-3.fc41.x86 100% | 11.3 MiB/s | 578.5 KiB | 00m00s [ 58/232] libgpg-error-0:1.50-2.fc41.x8 100% | 5.7 MiB/s | 237.5 KiB | 00m00s [ 59/232] libksba-0:1.6.7-2.fc41.x86_64 100% | 3.6 MiB/s | 159.7 KiB | 00m00s [ 60/232] npth-0:1.7-2.fc41.x86_64 100% | 629.1 KiB/s | 25.2 KiB | 00m00s [ 61/232] tpm2-tss-0:4.1.3-3.fc41.x86_6 100% | 9.3 MiB/s | 411.5 KiB | 00m00s [ 62/232] python3-cffi-0:1.17.0-1.fc41. 100% | 6.7 MiB/s | 307.0 KiB | 00m00s [ 63/232] python3-krb5-0:0.5.1-6.fc41.x 100% | 10.0 MiB/s | 491.7 KiB | 00m00s [ 64/232] createrepo_c-0:1.1.4-1.fc41.x 100% | 1.8 MiB/s | 74.3 KiB | 00m00s [ 65/232] mock-core-configs-0:41.4-1.fc 100% | 3.7 MiB/s | 154.3 KiB | 00m00s [ 66/232] mock-filesystem-0:5.9-1.fc41. 100% | 520.1 KiB/s | 20.3 KiB | 00m00s [ 67/232] pigz-0:2.8-5.fc41.x86_64 100% | 2.3 MiB/s | 95.6 KiB | 00m00s [ 68/232] python3-jinja2-0:3.1.4-5.fc41 100% | 10.2 MiB/s | 492.8 KiB | 00m00s [ 69/232] python3-pyroute2-0:0.7.12-4.f 100% | 19.5 MiB/s | 1.0 MiB | 00m00s [ 70/232] python3-templated-dictionary- 100% | 482.7 KiB/s | 20.3 KiB | 00m00s [ 71/232] usermode-0:1.114-10.fc41.x86_ 100% | 4.1 MiB/s | 187.0 KiB | 00m00s [ 72/232] rpm-sign-libs-0:4.20.0-1.fc41 100% | 667.7 KiB/s | 26.7 KiB | 00m00s [ 73/232] libmodulemd-0:2.15.0-14.fc41. 100% | 3.9 MiB/s | 232.5 KiB | 00m00s [ 74/232] dash-0:0.5.12-4.fc41.x86_64 100% | 2.4 MiB/s | 97.7 KiB | 00m00s [ 75/232] desktop-file-utils-0:0.27-2.f 100% | 1.7 MiB/s | 68.9 KiB | 00m00s [ 76/232] devscripts-checkbashisms-0:2. 100% | 714.5 KiB/s | 27.9 KiB | 00m00s [ 77/232] python3-enchant-0:3.2.2-14.fc 100% | 2.4 MiB/s | 102.1 KiB | 00m00s [ 78/232] python3-file-magic-0:5.45-7.f 100% | 470.7 KiB/s | 19.8 KiB | 00m00s [ 79/232] python3-pybeam-0:0.8-2.fc41.n 100% | 733.0 KiB/s | 30.8 KiB | 00m00s [ 80/232] python3-pyxdg-0:0.27-13.fc41. 100% | 3.0 MiB/s | 130.8 KiB | 00m00s [ 81/232] python3-tomli-w-0:1.0.0-14.fc 100% | 514.0 KiB/s | 21.1 KiB | 00m00s [ 82/232] python3-zstandard-0:0.23.0-1. 100% | 10.5 MiB/s | 496.9 KiB | 00m00s [ 83/232] python3-utils-0:3.7.0-6.fc41. 100% | 1.6 MiB/s | 70.6 KiB | 00m00s [ 84/232] python3-decorator-0:5.1.1-11. 100% | 751.6 KiB/s | 30.8 KiB | 00m00s [ 85/232] python3-pycparser-0:2.20-18.f 100% | 3.6 MiB/s | 159.5 KiB | 00m00s [ 86/232] createrepo_c-libs-0:1.1.4-1.f 100% | 2.6 MiB/s | 107.6 KiB | 00m00s [ 87/232] python3-markupsafe-0:2.1.5-3. 100% | 654.9 KiB/s | 30.8 KiB | 00m00s [ 88/232] distribution-gpg-keys-0:1.105 100% | 6.9 MiB/s | 695.5 KiB | 00m00s [ 89/232] nettle-0:3.10-3.fc41.x86_64 100% | 2.8 MiB/s | 428.5 KiB | 00m00s [ 90/232] libuser-0:0.64-11.fc41.x86_64 100% | 5.5 MiB/s | 401.7 KiB | 00m00s [ 91/232] ima-evm-utils-libs-0:1.6.2-2. 100% | 756.5 KiB/s | 29.5 KiB | 00m00s [ 92/232] libfsverity-0:1.6-1.fc41.x86_ 100% | 482.3 KiB/s | 18.8 KiB | 00m00s [ 93/232] perl-File-Temp-1:0.231.100-51 100% | 1.5 MiB/s | 59.1 KiB | 00m00s [ 94/232] perl-Getopt-Long-1:2.58-2.fc4 100% | 1.6 MiB/s | 63.9 KiB | 00m00s [ 95/232] python3-construct-0:2.10.70-5 100% | 3.5 MiB/s | 157.3 KiB | 00m00s [ 96/232] python3-typing-extensions-0:4 100% | 2.1 MiB/s | 93.8 KiB | 00m00s [ 97/232] python3-ply-0:3.11-25.fc41.no 100% | 3.1 MiB/s | 136.2 KiB | 00m00s [ 98/232] drpm-0:0.5.2-6.fc41.x86_64 100% | 1.6 MiB/s | 63.9 KiB | 00m00s [ 99/232] zchunk-libs-0:1.5.1-1.fc41.x8 100% | 1.3 MiB/s | 52.1 KiB | 00m00s [100/232] perl-Carp-0:1.54-511.fc41.noa 100% | 740.8 KiB/s | 28.9 KiB | 00m00s [101/232] perl-Exporter-0:5.78-511.fc41 100% | 813.5 KiB/s | 30.9 KiB | 00m00s [102/232] perl-File-Path-0:2.18-511.fc4 100% | 904.1 KiB/s | 35.3 KiB | 00m00s [103/232] perl-PathTools-0:3.91-511.fc4 100% | 2.2 MiB/s | 87.4 KiB | 00m00s [104/232] perl-constant-0:1.33-512.fc41 100% | 590.5 KiB/s | 23.0 KiB | 00m00s [105/232] perl-parent-1:0.242-1.fc41.no 100% | 384.6 KiB/s | 15.0 KiB | 00m00s [106/232] perl-Text-ParseWords-0:3.31-5 100% | 436.2 KiB/s | 16.6 KiB | 00m00s [107/232] perl-Pod-Usage-4:2.03-511.fc4 100% | 1.0 MiB/s | 40.0 KiB | 00m00s [108/232] perl-Pod-Perldoc-0:3.28.01-51 100% | 2.2 MiB/s | 86.1 KiB | 00m00s [109/232] perl-podlators-1:6.0.2-2.fc41 100% | 3.1 MiB/s | 128.9 KiB | 00m00s [110/232] groff-base-0:1.23.0-7.fc41.x8 100% | 17.7 MiB/s | 1.1 MiB | 00m00s [111/232] perl-Pod-Simple-1:3.45-511.fc 100% | 5.2 MiB/s | 219.0 KiB | 00m00s [112/232] perl-Term-ANSIColor-0:5.01-51 100% | 1.2 MiB/s | 47.7 KiB | 00m00s [113/232] perl-Term-Cap-0:1.18-511.fc41 100% | 580.8 KiB/s | 22.1 KiB | 00m00s [114/232] perl-Pod-Escapes-1:1.07-511.f 100% | 521.4 KiB/s | 19.8 KiB | 00m00s [115/232] perl-Text-Tabs+Wrap-0:2024.00 100% | 560.3 KiB/s | 21.9 KiB | 00m00s [116/232] ncurses-0:6.5-2.20240629.fc41 100% | 9.6 MiB/s | 423.8 KiB | 00m00s [117/232] libss-0:1.47.1-6.fc41.x86_64 100% | 799.0 KiB/s | 32.0 KiB | 00m00s [118/232] bodhi-client-0:8.3.0-1.fc41.n 100% | 408.9 KiB/s | 91.6 KiB | 00m00s [119/232] krb5-pkinit-0:1.21.3-3.fc41.x 100% | 306.1 KiB/s | 59.4 KiB | 00m00s [120/232] libkadm5-0:1.21.3-3.fc41.x86_ 100% | 1.1 MiB/s | 77.1 KiB | 00m00s [121/232] python3-0:3.13.0-1.fc41.x86_6 100% | 661.1 KiB/s | 27.8 KiB | 00m00s [122/232] krb5-workstation-0:1.21.3-3.f 100% | 1.3 MiB/s | 423.4 KiB | 00m00s [123/232] libb2-0:0.98.1-12.fc41.x86_64 100% | 658.4 KiB/s | 25.7 KiB | 00m00s [124/232] mpdecimal-0:2.5.1-16.fc41.x86 100% | 2.0 MiB/s | 89.0 KiB | 00m00s [125/232] python-pip-wheel-0:24.2-1.fc4 100% | 15.8 MiB/s | 1.2 MiB | 00m00s [126/232] tzdata-0:2024a-9.fc41.noarch 100% | 11.8 MiB/s | 714.7 KiB | 00m00s [127/232] python3-libs-0:3.13.0-1.fc41. 100% | 48.9 MiB/s | 9.1 MiB | 00m00s [128/232] python3-dateutil-1:2.8.2-16.f 100% | 7.5 MiB/s | 359.7 KiB | 00m00s [129/232] python3-defusedxml-0:0.7.1-15 100% | 1.3 MiB/s | 58.9 KiB | 00m00s [130/232] koji-0:1.35.1-4.fc41.noarch 100% | 4.3 MiB/s | 263.7 KiB | 00m00s [131/232] python3-libcomps-0:0.1.21-3.f 100% | 1.1 MiB/s | 47.9 KiB | 00m00s [132/232] python3-koji-0:1.35.1-4.fc41. 100% | 2.9 MiB/s | 429.4 KiB | 00m00s [133/232] libcomps-0:0.1.21-3.fc41.x86_ 100% | 1.9 MiB/s | 77.0 KiB | 00m00s [134/232] python3-ogr-0:0.50.2-1.202410 100% | 7.1 MiB/s | 182.9 KiB | 00m00s [135/232] python3-deprecated-0:1.2.14-7 100% | 625.4 KiB/s | 26.3 KiB | 00m00s [136/232] python3-gitlab-0:4.10.0-1.fc4 100% | 7.1 MiB/s | 326.3 KiB | 00m00s [137/232] python3-pygithub-0:2.3.0-1.fc 100% | 10.9 MiB/s | 523.4 KiB | 00m00s [138/232] python3-wrapt-0:1.16.0-6.fc41 100% | 1.6 MiB/s | 72.2 KiB | 00m00s [139/232] python3-jwt+crypto-0:2.8.0-2. 100% | 214.9 KiB/s | 8.8 KiB | 00m00s [140/232] python3-jwt-0:2.8.0-2.fc41.no 100% | 1.6 MiB/s | 67.0 KiB | 00m00s [141/232] python3-specfile-0:0.32.6.pos 100% | 10.1 MiB/s | 154.8 KiB | 00m00s [142/232] python3-pynacl-0:1.5.0-9.fc41 100% | 3.2 MiB/s | 141.8 KiB | 00m00s [143/232] libsodium-0:1.0.20-2.fc41.x86 100% | 4.3 MiB/s | 175.7 KiB | 00m00s [144/232] python3-authlib-0:1.3.2-5.fc4 100% | 6.5 MiB/s | 489.3 KiB | 00m00s [145/232] gdk-pixbuf2-0:2.42.12-6.fc41. 100% | 10.6 MiB/s | 489.0 KiB | 00m00s [146/232] libappstream-glib-0:0.8.3-2.f 100% | 3.4 MiB/s | 406.2 KiB | 00m00s [147/232] glib2-0:2.82.2-1.fc41.x86_64 100% | 20.7 MiB/s | 3.0 MiB | 00m00s [148/232] json-glib-0:1.10.0-1.fc41.x86 100% | 3.9 MiB/s | 161.5 KiB | 00m00s [149/232] libjpeg-turbo-0:3.0.2-3.fc41. 100% | 5.4 MiB/s | 227.3 KiB | 00m00s [150/232] libpng-2:1.6.40-4.fc41.x86_64 100% | 3.0 MiB/s | 120.3 KiB | 00m00s [151/232] shared-mime-info-0:2.3-6.fc41 100% | 8.9 MiB/s | 390.6 KiB | 00m00s [152/232] rpmlint-fedora-license-data-0 100% | 853.7 KiB/s | 39.3 KiB | 00m00s [153/232] python3-argcomplete-0:3.5.1-1 100% | 2.6 MiB/s | 97.0 KiB | 00m00s [154/232] python3-rpmautospec-0:0.7.3-1 100% | 1.2 MiB/s | 74.9 KiB | 00m00s [155/232] python3-click-plugins-0:1.1.1 100% | 406.6 KiB/s | 17.1 KiB | 00m00s [156/232] python3-rpmautospec-core-0:0. 100% | 348.8 KiB/s | 15.0 KiB | 00m00s [157/232] expat-0:2.6.4-1.fc41.x86_64 100% | 2.8 MiB/s | 114.5 KiB | 00m00s [158/232] gobject-introspection-0:1.82. 100% | 2.8 MiB/s | 119.6 KiB | 00m00s [159/232] python3-gobject-base-0:3.48.2 100% | 8.0 MiB/s | 378.3 KiB | 00m00s [160/232] enchant2-0:2.8.1-2.fc41.x86_6 100% | 1.9 MiB/s | 75.5 KiB | 00m00s [161/232] hunspell-en-US-0:0.20201207-1 100% | 3.1 MiB/s | 180.9 KiB | 00m00s [162/232] hunspell-0:1.7.2-8.fc41.x86_6 100% | 3.9 MiB/s | 477.3 KiB | 00m00s [163/232] hunspell-filesystem-0:1.7.2-8 100% | 208.4 KiB/s | 8.1 KiB | 00m00s [164/232] perl-Encode-4:3.21-511.fc41.x 100% | 20.3 MiB/s | 1.1 MiB | 00m00s [165/232] perl-MIME-Base64-0:3.16-511.f 100% | 748.6 KiB/s | 29.9 KiB | 00m00s [166/232] python3-babel-0:2.16.0-1.fc41 100% | 19.3 MiB/s | 6.5 MiB | 00m00s [167/232] perl-File-Basename-0:2.86-512 100% | 503.7 KiB/s | 17.1 KiB | 00m00s [168/232] perl-Storable-1:3.32-511.fc41 100% | 2.4 MiB/s | 98.4 KiB | 00m00s [169/232] perl-POSIX-0:2.20-512.fc41.x8 100% | 2.7 MiB/s | 97.0 KiB | 00m00s [170/232] perl-interpreter-4:5.40.0-512 100% | 2.0 MiB/s | 72.3 KiB | 00m00s [171/232] perl-Errno-0:1.38-512.fc41.x8 100% | 438.5 KiB/s | 14.9 KiB | 00m00s [172/232] perl-vars-0:1.05-512.fc41.noa 100% | 381.1 KiB/s | 13.0 KiB | 00m00s [173/232] perl-Fcntl-0:1.18-512.fc41.x8 100% | 875.7 KiB/s | 29.8 KiB | 00m00s [174/232] perl-IO-0:1.55-512.fc41.x86_6 100% | 2.2 MiB/s | 81.8 KiB | 00m00s [175/232] perl-Socket-4:2.038-511.fc41. 100% | 1.3 MiB/s | 54.8 KiB | 00m00s [176/232] perl-Symbol-0:1.09-512.fc41.n 100% | 416.6 KiB/s | 14.2 KiB | 00m00s [177/232] perl-if-0:0.61.000-512.fc41.n 100% | 398.9 KiB/s | 14.0 KiB | 00m00s [178/232] perl-overload-0:1.37-512.fc41 100% | 1.2 MiB/s | 45.5 KiB | 00m00s [179/232] perl-HTTP-Tiny-0:0.090-1.fc41 100% | 1.6 MiB/s | 56.5 KiB | 00m00s [180/232] perl-libs-4:5.40.0-512.fc41.x 100% | 11.1 MiB/s | 2.3 MiB | 00m00s [181/232] perl-IO-Socket-SSL-0:2.089-1. 100% | 3.6 MiB/s | 231.2 KiB | 00m00s [182/232] perl-Net-SSLeay-0:1.94-7.fc41 100% | 8.7 MiB/s | 375.7 KiB | 00m00s [183/232] perl-Time-Local-2:1.350-511.f 100% | 822.0 KiB/s | 34.5 KiB | 00m00s [184/232] perl-IO-Socket-IP-0:0.42-512. 100% | 1.0 MiB/s | 41.8 KiB | 00m00s [185/232] perl-URI-0:5.30-1.fc41.noarch 100% | 3.4 MiB/s | 140.8 KiB | 00m00s [186/232] perl-Data-Dumper-0:2.189-512. 100% | 1.4 MiB/s | 56.3 KiB | 00m00s [187/232] perl-MIME-Base32-0:1.303-21.f 100% | 524.9 KiB/s | 20.5 KiB | 00m00s [188/232] perl-libnet-0:3.15-512.fc41.n 100% | 3.1 MiB/s | 128.5 KiB | 00m00s [189/232] perl-Digest-MD5-0:2.59-5.fc41 100% | 923.4 KiB/s | 36.0 KiB | 00m00s [190/232] perl-Digest-0:1.20-511.fc41.n 100% | 638.5 KiB/s | 24.9 KiB | 00m00s [191/232] perl-IPC-Open3-0:1.22-512.fc4 100% | 605.8 KiB/s | 21.8 KiB | 00m00s [192/232] perl-Scalar-List-Utils-5:1.68 100% | 2.0 MiB/s | 74.2 KiB | 00m00s [193/232] perl-AutoLoader-0:5.74-512.fc 100% | 588.4 KiB/s | 21.2 KiB | 00m00s [194/232] perl-base-0:2.27-512.fc41.noa 100% | 448.8 KiB/s | 16.2 KiB | 00m00s [195/232] perl-Getopt-Std-0:1.14-512.fc 100% | 434.7 KiB/s | 15.6 KiB | 00m00s [196/232] perl-B-0:1.89-512.fc41.x86_64 100% | 4.5 MiB/s | 176.2 KiB | 00m00s [197/232] dnf-data-0:4.22.0-1.fc41.noar 100% | 1.1 MiB/s | 40.0 KiB | 00m00s [198/232] python3-dnf-0:4.22.0-1.fc41.n 100% | 9.9 MiB/s | 627.4 KiB | 00m00s [199/232] python3-hawkey-0:0.73.4-1.fc4 100% | 2.8 MiB/s | 104.8 KiB | 00m00s [200/232] libdnf-0:0.73.4-1.fc41.x86_64 100% | 15.9 MiB/s | 699.7 KiB | 00m00s [201/232] python3-libdnf-0:0.73.4-1.fc4 100% | 12.3 MiB/s | 847.2 KiB | 00m00s [202/232] procps-ng-0:4.0.4-4.fc41.x86_ 100% | 4.1 MiB/s | 366.7 KiB | 00m00s [203/232] systemd-0:256.8-1.fc41.x86_64 100% | 56.4 MiB/s | 5.7 MiB | 00m00s [204/232] dbus-1:1.14.10-4.fc41.x86_64 100% | 136.4 KiB/s | 7.9 KiB | 00m00s [205/232] libseccomp-0:2.5.5-2.fc41.x86 100% | 1.5 MiB/s | 70.2 KiB | 00m00s [206/232] dbus-broker-0:36-4.fc41.x86_6 100% | 4.1 MiB/s | 171.7 KiB | 00m00s [207/232] systemd-pam-0:256.8-1.fc41.x8 100% | 8.0 MiB/s | 399.7 KiB | 00m00s [208/232] dbus-common-1:1.14.10-4.fc41. 100% | 375.9 KiB/s | 14.7 KiB | 00m00s [209/232] systemd-container-0:256.8-1.f 100% | 13.7 MiB/s | 630.7 KiB | 00m00s [210/232] libedit-0:3.1-53.20240808cvs. 100% | 2.6 MiB/s | 105.6 KiB | 00m00s [211/232] openssh-clients-0:9.8p1-3.fc4 100% | 12.5 MiB/s | 740.9 KiB | 00m00s [212/232] libfido2-0:1.15.0-2.fc41.x86_ 100% | 2.3 MiB/s | 98.1 KiB | 00m00s [213/232] openssh-0:9.8p1-3.fc41.2.x86_ 100% | 9.6 MiB/s | 414.0 KiB | 00m00s [214/232] libcbor-0:0.11.0-2.fc41.x86_6 100% | 789.0 KiB/s | 33.1 KiB | 00m00s [215/232] fakeroot-libs-0:1.36-1.fc41.x 100% | 973.2 KiB/s | 38.9 KiB | 00m00s [216/232] python3-pygit2-0:1.16.0-1.fc4 100% | 6.2 MiB/s | 290.5 KiB | 00m00s [217/232] libgit2-0:1.8.4-1.fc41.x86_64 100% | 12.2 MiB/s | 561.5 KiB | 00m00s [218/232] libssh2-0:1.11.0-8.fc41.x86_6 100% | 2.9 MiB/s | 130.4 KiB | 00m00s [219/232] llhttp-0:9.2.1-2.fc41.x86_64 100% | 823.7 KiB/s | 32.9 KiB | 00m00s [220/232] libsolv-0:0.7.31-1.fc41.x86_6 100% | 8.2 MiB/s | 430.7 KiB | 00m00s [221/232] perl-mro-0:1.29-512.fc41.x86_ 100% | 747.2 KiB/s | 29.9 KiB | 00m00s [222/232] perl-overloading-0:0.02-512.f 100% | 321.4 KiB/s | 12.9 KiB | 00m00s [223/232] perl-DynaLoader-0:1.56-512.fc 100% | 666.7 KiB/s | 26.0 KiB | 00m00s [224/232] perl-locale-0:1.12-512.fc41.n 100% | 339.3 KiB/s | 13.6 KiB | 00m00s [225/232] perl-File-stat-0:1.14-512.fc4 100% | 425.1 KiB/s | 17.0 KiB | 00m00s [226/232] perl-SelectSaver-0:1.02-512.f 100% | 299.4 KiB/s | 11.7 KiB | 00m00s [227/232] perl-Class-Struct-0:0.68-512. 100% | 550.3 KiB/s | 22.0 KiB | 00m00s [228/232] librepo-0:1.19.0-1.fc41.x86_6 100% | 2.4 MiB/s | 99.6 KiB | 00m00s [229/232] fmt-0:11.0.2-2.fc41.x86_64 100% | 2.4 MiB/s | 100.2 KiB | 00m00s [230/232] perl-FileHandle-0:2.05-512.fc 100% | 386.3 KiB/s | 15.5 KiB | 00m00s [231/232] libdnf5-0:5.2.7.0-1.fc41.x86_ 100% | 16.2 MiB/s | 1.2 MiB | 00m00s [232/232] systemd-rpm-macros-0:256.8-1. 100% | 841.3 KiB/s | 33.7 KiB | 00m00s -------------------------------------------------------------------------------- [232/232] Total 100% | 17.3 MiB/s | 75.6 MiB | 00m04s Running transaction [ 1/234] Verify package files 100% | 846.0 B/s | 232.0 B | 00m00s [ 2/234] Prepare transaction 100% | 1.3 KiB/s | 232.0 B | 00m00s [ 3/234] Installing expat-0:2.6.4-1.fc 100% | 96.0 MiB/s | 295.0 KiB | 00m00s [ 4/234] Installing libgpg-error-0:1.5 100% | 145.7 MiB/s | 895.4 KiB | 00m00s [ 5/234] Installing zchunk-libs-0:1.5. 100% | 100.1 MiB/s | 102.6 KiB | 00m00s [ 6/234] Installing libsolv-0:0.7.31-1 100% | 184.8 MiB/s | 946.0 KiB | 00m00s [ 7/234] Installing libseccomp-0:2.5.5 100% | 85.5 MiB/s | 175.2 KiB | 00m00s [ 8/234] Installing hunspell-filesyste 100% | 94.7 KiB/s | 388.0 B | 00m00s [ 9/234] Installing tzdata-0:2024a-9.f 100% | 21.6 MiB/s | 1.9 MiB | 00m00s [ 10/234] Installing mock-filesystem-0: 100% | 629.3 KiB/s | 18.9 KiB | 00m00s [ 11/234] Installing tpm2-tss-0:4.1.3-3 100% | 143.7 MiB/s | 1.6 MiB | 00m00s [ 12/234] Installing emacs-filesystem-1 100% | 0.0 B/s | 544.0 B | 00m00s [ 13/234] Installing libyaml-0:0.2.5-15 100% | 66.3 MiB/s | 135.8 KiB | 00m00s [ 14/234] Installing ima-evm-utils-libs 100% | 60.6 MiB/s | 62.1 KiB | 00m00s [ 15/234] Installing hunspell-en-US-0:0 100% | 181.7 MiB/s | 558.1 KiB | 00m00s [ 16/234] Installing hunspell-0:1.7.2-8 100% | 112.9 MiB/s | 1.4 MiB | 00m00s [ 17/234] Installing libassuan-0:2.5.7- 100% | 80.9 MiB/s | 165.6 KiB | 00m00s [ 18/234] Installing libgcrypt-0:1.11.0 100% | 257.0 MiB/s | 1.5 MiB | 00m00s [ 19/234] Installing libksba-0:1.6.7-2. 100% | 130.5 MiB/s | 401.0 KiB | 00m00s [ 20/234] Installing libcomps-0:0.1.21- 100% | 100.9 MiB/s | 206.7 KiB | 00m00s [ 21/234] Installing fmt-0:11.0.2-2.fc4 100% | 129.7 MiB/s | 265.6 KiB | 00m00s [ 22/234] Installing llhttp-0:9.2.1-2.f 100% | 72.0 MiB/s | 73.8 KiB | 00m00s [ 23/234] Installing libssh2-0:1.11.0-8 100% | 144.2 MiB/s | 295.3 KiB | 00m00s [ 24/234] Installing libgit2-0:1.8.4-1. 100% | 212.7 MiB/s | 1.3 MiB | 00m00s [ 25/234] Installing fakeroot-libs-0:1. 100% | 131.0 MiB/s | 134.1 KiB | 00m00s [ 26/234] Installing fakeroot-0:1.36-1. 100% | 7.1 MiB/s | 159.5 KiB | 00m00s [ 27/234] Installing libcbor-0:0.11.0-2 100% | 36.8 MiB/s | 75.3 KiB | 00m00s [ 28/234] Installing libfido2-0:1.15.0- 100% | 78.0 MiB/s | 239.7 KiB | 00m00s [ 29/234] Installing openssh-0:9.8p1-3. 100% | 222.8 MiB/s | 1.8 MiB | 00m00s [ 30/234] Installing libedit-0:3.1-53.2 100% | 120.0 MiB/s | 245.8 KiB | 00m00s [ 31/234] Installing openssh-clients-0: 100% | 109.1 MiB/s | 2.6 MiB | 00m00s [ 32/234] Installing dbus-common-1:1.14 100% | 322.6 KiB/s | 13.6 KiB | 00m00s [ 33/234] Installing dbus-broker-0:36-4 100% | 26.9 MiB/s | 385.3 KiB | 00m00s [ 34/234] Installing dbus-1:1.14.10-4.f 100% | 0.0 B/s | 124.0 B | 00m00s [ 35/234] Installing systemd-pam-0:256. 100% | 135.6 MiB/s | 1.1 MiB | 00m00s [ 36/234] Installing systemd-0:256.8-1. 100% | 58.7 MiB/s | 17.1 MiB | 00m00s >>> Running post-install scriptlet: systemd-0:256.8-1.fc41.x86_64 >>> Finished post-install scriptlet: systemd-0:256.8-1.fc41.x86_64 >>> Scriptlet output: >>> Creating group 'systemd-journal' with GID 190. >>> Creating group 'systemd-oom' with GID 999. >>> Creating user 'systemd-oom' (systemd Userspace OOM Killer) with UID 999 and >>> [ 37/234] Installing systemd-container- 100% | 140.5 MiB/s | 1.5 MiB | 00m00s [ 38/234] Installing procps-ng-0:4.0.4- 100% | 115.7 MiB/s | 1.0 MiB | 00m00s [ 39/234] Installing libpng-2:1.6.40-4. 100% | 120.6 MiB/s | 247.1 KiB | 00m00s [ 40/234] Installing libjpeg-turbo-0:3. 100% | 253.5 MiB/s | 778.7 KiB | 00m00s [ 41/234] Installing libsodium-0:1.0.20 100% | 192.5 MiB/s | 394.2 KiB | 00m00s [ 42/234] Installing python-pip-wheel-0 100% | 310.4 MiB/s | 1.2 MiB | 00m00s [ 43/234] Installing mpdecimal-0:2.5.1- 100% | 100.6 MiB/s | 206.0 KiB | 00m00s [ 44/234] Installing libb2-0:0.98.1-12. 100% | 7.0 MiB/s | 43.3 KiB | 00m00s [ 45/234] Installing python3-libs-0:3.1 100% | 197.6 MiB/s | 40.7 MiB | 00m00s [ 46/234] Installing python3-0:3.13.0-1 100% | 32.8 MiB/s | 33.6 KiB | 00m00s [ 47/234] Installing python3-six-0:1.16 100% | 58.9 MiB/s | 120.7 KiB | 00m00s [ 48/234] Installing python3-click-0:8. 100% | 177.9 MiB/s | 1.1 MiB | 00m00s [ 49/234] Installing python3-packaging- 100% | 105.8 MiB/s | 433.2 KiB | 00m00s [ 50/234] Installing python3-pyyaml-0:6 100% | 98.3 MiB/s | 804.9 KiB | 00m00s [ 51/234] Installing python3-setuptools 100% | 138.3 MiB/s | 7.3 MiB | 00m00s [ 52/234] Installing python3-munch-0:2. 100% | 30.8 MiB/s | 63.1 KiB | 00m00s [ 53/234] Installing python3-argcomplet 100% | 63.7 MiB/s | 326.3 KiB | 00m00s [ 54/234] Installing python3-backoff-0: 100% | 36.3 MiB/s | 111.4 KiB | 00m00s [ 55/234] Installing python3-cccolutils 100% | 34.9 MiB/s | 35.8 KiB | 00m00s [ 56/234] Installing python3-distro-0:1 100% | 66.1 MiB/s | 203.1 KiB | 00m00s [ 57/234] Installing python3-idna-0:3.7 100% | 147.0 MiB/s | 602.1 KiB | 00m00s [ 58/234] Installing python3-urllib3-0: 100% | 100.5 MiB/s | 1.0 MiB | 00m00s [ 59/234] Installing python3-typing-ext 100% | 228.0 MiB/s | 466.9 KiB | 00m00s [ 60/234] Installing python3-libcomps-0 100% | 71.3 MiB/s | 145.9 KiB | 00m00s [ 61/234] Installing python3-jwt-0:2.8. 100% | 56.3 MiB/s | 173.1 KiB | 00m00s [ 62/234] Installing python3-utils-0:3. 100% | 59.6 MiB/s | 183.2 KiB | 00m00s [ 63/234] Installing python3-progressba 100% | 86.3 MiB/s | 265.1 KiB | 00m00s [ 64/234] Installing python3-click-plug 100% | 26.6 MiB/s | 27.3 KiB | 00m00s [ 65/234] Installing python3-construct- 100% | 204.8 MiB/s | 1.0 MiB | 00m00s [ 66/234] Installing python3-pybeam-0:0 100% | 16.5 MiB/s | 50.8 KiB | 00m00s [ 67/234] Installing python3-dateutil-1 100% | 124.6 MiB/s | 892.9 KiB | 00m00s [ 68/234] Installing python3-cachetools 100% | 72.4 MiB/s | 148.3 KiB | 00m00s [ 69/234] Installing python3-lazy-objec 100% | 40.2 MiB/s | 123.6 KiB | 00m00s [ 70/234] Installing python3-tabulate-0 100% | 168.7 MiB/s | 345.5 KiB | 00m00s [ 71/234] Installing python3-filelock-0 100% | 47.4 MiB/s | 97.1 KiB | 00m00s [ 72/234] Installing python3-ordered-se 100% | 50.2 MiB/s | 51.4 KiB | 00m00s [ 73/234] Installing python3-marshmallo 100% | 140.4 MiB/s | 575.0 KiB | 00m00s [ 74/234] Installing python3-marshmallo 100% | 8.7 MiB/s | 17.9 KiB | 00m00s [ 75/234] Installing python3-charset-no 100% | 79.3 MiB/s | 324.7 KiB | 00m00s [ 76/234] Installing python3-requests-0 100% | 97.3 MiB/s | 498.0 KiB | 00m00s [ 77/234] Installing python3-bugzilla-0 100% | 110.7 MiB/s | 453.4 KiB | 00m00s [ 78/234] Installing python3-requests-t 100% | 39.5 MiB/s | 323.7 KiB | 00m00s [ 79/234] Installing python3-gitlab-0:4 100% | 96.2 MiB/s | 1.6 MiB | 00m00s [ 80/234] Installing python3-fedora-dis 100% | 21.5 MiB/s | 44.1 KiB | 00m00s [ 81/234] Installing python3-openidc-cl 100% | 38.2 MiB/s | 78.2 KiB | 00m00s [ 82/234] Installing python3-pycurl-0:7 100% | 55.0 MiB/s | 450.7 KiB | 00m00s [ 83/234] Installing python3-smmap-0:5. 100% | 50.7 MiB/s | 207.7 KiB | 00m00s [ 84/234] Installing python3-gitdb-0:4. 100% | 84.7 MiB/s | 520.4 KiB | 00m00s [ 85/234] Installing python3-krb5-0:0.5 100% | 173.2 MiB/s | 2.4 MiB | 00m00s [ 86/234] Installing python3-pyroute2-0 100% | 85.6 MiB/s | 3.7 MiB | 00m00s [ 87/234] Installing python3-file-magic 100% | 30.3 MiB/s | 31.0 KiB | 00m00s [ 88/234] Installing python3-pyxdg-0:0. 100% | 109.3 MiB/s | 447.7 KiB | 00m00s [ 89/234] Installing python3-tomli-w-0: 100% | 15.4 MiB/s | 31.6 KiB | 00m00s [ 90/234] Installing python3-zstandard- 100% | 256.6 MiB/s | 2.1 MiB | 00m00s [ 91/234] Installing python3-decorator- 100% | 39.2 MiB/s | 80.3 KiB | 00m00s [ 92/234] Installing python3-gssapi-0:1 100% | 170.4 MiB/s | 2.7 MiB | 00m00s [ 93/234] Installing python3-requests-g 100% | 32.4 MiB/s | 66.4 KiB | 00m00s [ 94/234] Installing python3-copr-0:2.0 100% | 36.9 MiB/s | 264.8 KiB | 00m00s [ 95/234] Installing python3-markupsafe 100% | 30.1 MiB/s | 61.5 KiB | 00m00s [ 96/234] Installing python3-jinja2-0:3 100% | 207.5 MiB/s | 2.9 MiB | 00m00s [ 97/234] Installing python3-templated- 100% | 30.2 MiB/s | 30.9 KiB | 00m00s [ 98/234] Installing python3-ply-0:3.11 100% | 140.0 MiB/s | 573.4 KiB | 00m00s [ 99/234] Installing python3-pycparser- 100% | 135.5 MiB/s | 832.5 KiB | 00m00s [100/234] Installing python3-cffi-0:1.1 100% | 167.0 MiB/s | 1.3 MiB | 00m00s [101/234] Installing python3-cryptograp 100% | 129.0 MiB/s | 4.8 MiB | 00m00s [102/234] Installing python3-spnego-0:0 100% | 133.1 MiB/s | 1.1 MiB | 00m00s [103/234] Installing python3-spnego+ker 100% | 0.0 B/s | 124.0 B | 00m00s [104/234] Installing python3-requests-k 100% | 32.0 MiB/s | 65.6 KiB | 00m00s [105/234] Installing python3-jwt+crypto 100% | 60.5 KiB/s | 124.0 B | 00m00s [106/234] Installing python3-authlib-0: 100% | 43.2 MiB/s | 1.6 MiB | 00m00s [107/234] Installing python3-pynacl-0:1 100% | 85.8 MiB/s | 615.3 KiB | 00m00s [108/234] Installing python3-pygit2-0:1 100% | 130.7 MiB/s | 1.2 MiB | 00m00s [109/234] Installing python3-defusedxml 100% | 67.2 MiB/s | 206.5 KiB | 00m00s [110/234] Installing python3-wrapt-0:1. 100% | 66.5 MiB/s | 204.2 KiB | 00m00s [111/234] Installing python3-deprecated 100% | 18.1 MiB/s | 55.6 KiB | 00m00s [112/234] Installing python3-pygithub-0 100% | 139.7 MiB/s | 3.8 MiB | 00m00s [113/234] Installing python3-babel-0:2. 100% | 211.1 MiB/s | 28.5 MiB | 00m00s [114/234] Installing python3-rpmautospe 100% | 13.1 MiB/s | 13.5 KiB | 00m00s [115/234] Installing libkadm5-0:1.21.3- 100% | 105.5 MiB/s | 216.1 KiB | 00m00s [116/234] Installing krb5-pkinit-0:1.21 100% | 59.7 MiB/s | 122.3 KiB | 00m00s [117/234] Installing libss-0:1.47.1-6.f 100% | 37.3 MiB/s | 76.4 KiB | 00m00s [118/234] Installing krb5-workstation-0 100% | 161.7 MiB/s | 2.6 MiB | 00m00s [119/234] Installing ncurses-0:6.5-2.20 100% | 29.5 MiB/s | 633.9 KiB | 00m00s [120/234] Installing groff-base-0:1.23. 100% | 96.8 MiB/s | 3.9 MiB | 00m00s [121/234] Installing perl-Digest-0:1.20 100% | 36.2 MiB/s | 37.1 KiB | 00m00s [122/234] Installing perl-Digest-MD5-0: 100% | 30.1 MiB/s | 61.7 KiB | 00m00s [123/234] Installing perl-B-0:1.89-512. 100% | 122.4 MiB/s | 501.4 KiB | 00m00s [124/234] Installing perl-FileHandle-0: 100% | 9.5 MiB/s | 9.8 KiB | 00m00s [125/234] Installing perl-MIME-Base32-0 100% | 31.4 MiB/s | 32.2 KiB | 00m00s [126/234] Installing perl-Data-Dumper-0 100% | 55.5 MiB/s | 113.6 KiB | 00m00s [127/234] Installing perl-libnet-0:3.15 100% | 95.9 MiB/s | 294.7 KiB | 00m00s [128/234] Installing perl-AutoLoader-0: 100% | 0.0 B/s | 20.9 KiB | 00m00s [129/234] Installing perl-IO-Socket-IP- 100% | 49.1 MiB/s | 100.5 KiB | 00m00s [130/234] Installing perl-URI-0:5.30-1. 100% | 43.9 MiB/s | 269.5 KiB | 00m00s [131/234] Installing perl-Text-Tabs+Wra 100% | 23.3 MiB/s | 23.9 KiB | 00m00s [132/234] Installing perl-Pod-Escapes-1 100% | 25.3 MiB/s | 25.9 KiB | 00m00s [133/234] Installing perl-if-0:0.61.000 100% | 0.0 B/s | 6.2 KiB | 00m00s [134/234] Installing perl-Time-Local-2: 100% | 6.9 MiB/s | 70.6 KiB | 00m00s [135/234] Installing perl-File-Path-0:2 100% | 63.0 MiB/s | 64.5 KiB | 00m00s [136/234] Installing perl-Net-SSLeay-0: 100% | 136.3 MiB/s | 1.4 MiB | 00m00s [137/234] Installing perl-locale-0:1.12 100% | 0.0 B/s | 6.9 KiB | 00m00s [138/234] Installing perl-IO-Socket-SSL 100% | 172.7 MiB/s | 707.4 KiB | 00m00s [139/234] Installing perl-Term-ANSIColo 100% | 96.9 MiB/s | 99.2 KiB | 00m00s [140/234] Installing perl-Term-Cap-0:1. 100% | 29.9 MiB/s | 30.6 KiB | 00m00s [141/234] Installing perl-Pod-Simple-1: 100% | 111.4 MiB/s | 570.5 KiB | 00m00s [142/234] Installing perl-POSIX-0:2.20- 100% | 115.4 MiB/s | 236.4 KiB | 00m00s [143/234] Installing perl-IPC-Open3-0:1 100% | 22.7 MiB/s | 23.3 KiB | 00m00s [144/234] Installing perl-Class-Struct- 100% | 25.3 MiB/s | 25.9 KiB | 00m00s [145/234] Installing perl-HTTP-Tiny-0:0 100% | 76.4 MiB/s | 156.4 KiB | 00m00s [146/234] Installing perl-File-Temp-1:0 100% | 80.1 MiB/s | 164.1 KiB | 00m00s [147/234] Installing perl-Socket-4:2.03 100% | 61.6 MiB/s | 126.1 KiB | 00m00s [148/234] Installing perl-Symbol-0:1.09 100% | 0.0 B/s | 7.2 KiB | 00m00s [149/234] Installing perl-SelectSaver-0 100% | 0.0 B/s | 2.6 KiB | 00m00s [150/234] Installing perl-File-stat-0:1 100% | 12.7 MiB/s | 13.1 KiB | 00m00s [151/234] Installing perl-podlators-1:6 100% | 104.6 MiB/s | 321.4 KiB | 00m00s [152/234] Installing perl-Pod-Perldoc-0 100% | 82.6 MiB/s | 169.3 KiB | 00m00s [153/234] Installing perl-Text-ParseWor 100% | 14.2 MiB/s | 14.6 KiB | 00m00s [154/234] Installing perl-Fcntl-0:1.18- 100% | 48.9 MiB/s | 50.1 KiB | 00m00s [155/234] Installing perl-base-0:2.27-5 100% | 0.0 B/s | 12.9 KiB | 00m00s [156/234] Installing perl-mro-0:1.29-51 100% | 45.6 MiB/s | 46.7 KiB | 00m00s [157/234] Installing perl-overloading-0 100% | 5.4 MiB/s | 5.5 KiB | 00m00s [158/234] Installing perl-IO-0:1.55-512 100% | 50.6 MiB/s | 155.3 KiB | 00m00s [159/234] Installing perl-Pod-Usage-4:2 100% | 84.3 MiB/s | 86.3 KiB | 00m00s [160/234] Installing perl-constant-0:1. 100% | 26.7 MiB/s | 27.4 KiB | 00m00s [161/234] Installing perl-parent-1:0.24 100% | 10.5 MiB/s | 10.7 KiB | 00m00s [162/234] Installing perl-MIME-Base64-0 100% | 47.2 MiB/s | 48.4 KiB | 00m00s [163/234] Installing perl-File-Basename 100% | 0.0 B/s | 14.6 KiB | 00m00s [164/234] Installing perl-Errno-0:1.38- 100% | 0.0 B/s | 8.8 KiB | 00m00s [165/234] Installing perl-vars-0:1.05-5 100% | 0.0 B/s | 4.3 KiB | 00m00s [166/234] Installing perl-Scalar-List-U 100% | 49.7 MiB/s | 152.6 KiB | 00m00s [167/234] Installing perl-Getopt-Std-0: 100% | 0.0 B/s | 11.7 KiB | 00m00s [168/234] Installing perl-overload-0:1. 100% | 70.3 MiB/s | 71.9 KiB | 00m00s [169/234] Installing perl-Storable-1:3. 100% | 114.3 MiB/s | 234.0 KiB | 00m00s [170/234] Installing perl-Getopt-Long-1 100% | 71.9 MiB/s | 147.2 KiB | 00m00s [171/234] Installing perl-Carp-0:1.54-5 100% | 46.6 MiB/s | 47.7 KiB | 00m00s [172/234] Installing perl-Exporter-0:5. 100% | 54.3 MiB/s | 55.6 KiB | 00m00s [173/234] Installing perl-PathTools-0:3 100% | 60.1 MiB/s | 184.6 KiB | 00m00s [174/234] Installing perl-DynaLoader-0: 100% | 31.7 MiB/s | 32.5 KiB | 00m00s [175/234] Installing perl-Encode-4:3.21 100% | 214.5 MiB/s | 4.7 MiB | 00m00s [176/234] Installing perl-libs-4:5.40.0 100% | 146.5 MiB/s | 10.0 MiB | 00m00s [177/234] Installing perl-interpreter-4 100% | 121.1 MiB/s | 124.0 KiB | 00m00s [178/234] Installing devscripts-checkba 100% | 52.6 MiB/s | 53.8 KiB | 00m00s [179/234] Installing drpm-0:0.5.2-6.fc4 100% | 129.7 MiB/s | 132.8 KiB | 00m00s [180/234] Installing libfsverity-0:1.6- 100% | 16.4 MiB/s | 33.6 KiB | 00m00s [181/234] Installing distribution-gpg-k 100% | 39.4 MiB/s | 969.2 KiB | 00m00s [182/234] Installing nettle-0:3.10-3.fc 100% | 194.4 MiB/s | 796.1 KiB | 00m00s [183/234] Installing gnutls-0:3.8.6-7.f 100% | 230.3 MiB/s | 3.2 MiB | 00m00s [184/234] Installing glib2-0:2.82.2-1.f 100% | 249.0 MiB/s | 14.7 MiB | 00m00s [185/234] Installing libmodulemd-0:2.15 100% | 175.7 MiB/s | 719.7 KiB | 00m00s [186/234] Installing librepo-0:1.19.0-1 100% | 120.0 MiB/s | 245.7 KiB | 00m00s [187/234] Installing libdnf-0:0.73.4-1. 100% | 163.9 MiB/s | 2.1 MiB | 00m00s [188/234] Installing python3-libdnf-0:0 100% | 274.6 MiB/s | 3.8 MiB | 00m00s [189/234] Installing python3-hawkey-0:0 100% | 100.7 MiB/s | 309.2 KiB | 00m00s [190/234] Installing libdnf5-0:5.2.7.0- 100% | 249.1 MiB/s | 3.5 MiB | 00m00s >>> [RPM] /etc/dnf/dnf.conf created as /etc/dnf/dnf.conf.rpmnew [191/234] Installing dnf-data-0:4.22.0- 100% | 39.6 MiB/s | 40.6 KiB | 00m00s [192/234] Installing createrepo_c-libs- 100% | 136.2 MiB/s | 278.9 KiB | 00m00s [193/234] Installing createrepo_c-0:1.1 100% | 67.4 MiB/s | 207.0 KiB | 00m00s [194/234] Installing desktop-file-utils 100% | 76.2 MiB/s | 234.2 KiB | 00m00s [195/234] Installing libuser-0:0.64-11. 100% | 130.4 MiB/s | 2.0 MiB | 00m00s [196/234] Installing usermode-0:1.114-1 100% | 83.2 MiB/s | 851.8 KiB | 00m00s [197/234] Installing json-glib-0:1.10.0 100% | 55.7 MiB/s | 570.1 KiB | 00m00s [198/234] Installing shared-mime-info-0 100% | 102.2 MiB/s | 2.6 MiB | 00m00s [199/234] Installing gdk-pixbuf2-0:2.42 100% | 126.3 MiB/s | 2.5 MiB | 00m00s [200/234] Installing libappstream-glib- 100% | 141.6 MiB/s | 1.4 MiB | 00m00s [201/234] Installing gobject-introspect 100% | 97.8 MiB/s | 400.4 KiB | 00m00s [202/234] Installing python3-gobject-ba 100% | 144.0 MiB/s | 1.4 MiB | 00m00s [203/234] Installing python3-libmodulem 100% | 16.3 MiB/s | 16.6 KiB | 00m00s [204/234] Installing enchant2-0:2.8.1-2 100% | 65.3 MiB/s | 200.6 KiB | 00m00s [205/234] Installing python3-enchant-0: 100% | 92.9 MiB/s | 380.3 KiB | 00m00s [206/234] Installing dash-0:0.5.12-4.fc 100% | 10.3 MiB/s | 168.5 KiB | 00m00s [207/234] Installing pigz-0:2.8-5.fc41. 100% | 80.3 MiB/s | 164.4 KiB | 00m00s [208/234] Installing npth-0:1.7-2.fc41. 100% | 49.5 MiB/s | 50.7 KiB | 00m00s [209/234] Installing gnupg2-0:2.4.5-3.f 100% | 221.9 MiB/s | 9.5 MiB | 00m00s [210/234] Installing python3-gnupg-0:0. 100% | 81.3 MiB/s | 166.5 KiB | 00m00s [211/234] Installing rpm-sign-libs-0:4. 100% | 39.3 MiB/s | 40.2 KiB | 00m00s [212/234] Installing python3-rpm-0:4.20 100% | 87.3 MiB/s | 178.9 KiB | 00m00s [213/234] Installing python3-koji-0:1.3 100% | 241.5 MiB/s | 2.2 MiB | 00m00s [214/234] Installing koji-0:1.35.1-4.fc 100% | 89.6 MiB/s | 917.1 KiB | 00m00s [215/234] Installing bodhi-client-0:8.3 100% | 85.9 MiB/s | 263.9 KiB | 00m00s [216/234] Installing rpmdevtools-0:9.6- 100% | 54.6 MiB/s | 223.8 KiB | 00m00s [217/234] Installing rpmlint-fedora-lic 100% | 23.3 MiB/s | 23.8 KiB | 00m00s [218/234] Installing rpmlint-0:2.5.0-7. 100% | 93.9 MiB/s | 1.1 MiB | 00m00s [219/234] Installing python3-specfile-0 100% | 111.9 MiB/s | 572.9 KiB | 00m00s [220/234] Installing python3-rpmautospe 100% | 39.5 MiB/s | 161.8 KiB | 00m00s [221/234] Installing python3-dnf-0:4.22 100% | 133.8 MiB/s | 2.7 MiB | 00m00s [222/234] Installing mock-core-configs- 100% | 2.3 MiB/s | 399.2 KiB | 00m00s [223/234] Installing mock-0:5.9-1.fc41. 100% | 93.7 MiB/s | 1.0 MiB | 00m00s [224/234] Installing rpkg-common-0:1.67 100% | 13.3 MiB/s | 13.6 KiB | 00m00s [225/234] Installing less-0:661-2.fc41. 100% | 99.8 MiB/s | 408.6 KiB | 00m00s [226/234] Installing git-core-0:2.47.0- 100% | 292.9 MiB/s | 22.6 MiB | 00m00s [227/234] Installing python3-GitPython- 100% | 144.2 MiB/s | 1.7 MiB | 00m00s [228/234] Installing python3-rpkg-0:1.6 100% | 174.1 MiB/s | 1.0 MiB | 00m00s [229/234] Installing fedpkg-0:1.45-5.fc 100% | 63.7 MiB/s | 325.9 KiB | 00m00s [230/234] Installing python3-ogr-0:0.50 100% | 78.7 MiB/s | 724.9 KiB | 00m00s [231/234] Installing rsync-0:3.3.0-3.fc 100% | 152.7 MiB/s | 781.9 KiB | 00m00s [232/234] Installing python3-packit-0:0 100% | 107.4 MiB/s | 1.5 MiB | 00m00s [233/234] Installing packit-0:0.104.1-1 100% | 11.9 MiB/s | 24.3 KiB | 00m00s [234/234] Installing systemd-rpm-macros 100% | 17.4 KiB/s | 11.2 KiB | 00m01s Warning: skipped PGP checks for 4 packages from repository: copr_packit_packit_stable Complete! INFO: Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyin /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/script /script INFO: mock.py version 5.9 starting (python version = 3.13.0, NVR = mock-5.9-1.fc41), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyin /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/script /script Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 5.9 INFO: Mock Version: 5.9 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: copying /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/script to /var/lib/mock/copr-custom-fedora-41-x86_64/root/script Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --chroot 'set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;' INFO: mock.py version 5.9 starting (python version = 3.13.0, NVR = mock-5.9-1.fc41), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --chroot 'set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;' Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 5.9 INFO: Mock Version: 5.9 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: Running in chroot: ['set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;'] Start: chroot ['set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;'] + chmod a+x /script + rm -rf /workdir + mkdir -p /workdir + chown mockbuild /workdir Finish: chroot ['set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;'] Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --chroot 'su - mockbuild -c '"'"'set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-12636 COPR_PACKAGE='"'"'"'"'"'"'"'"''"'"'"'"'"'"'"'"' COPR_RESULTDIR=/workdir /script'"'"'' INFO: mock.py version 5.9 starting (python version = 3.13.0, NVR = mock-5.9-1.fc41), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --chroot 'su - mockbuild -c '"'"'set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-12636 COPR_PACKAGE='"'"'"'"'"'"'"'"''"'"'"'"'"'"'"'"' COPR_RESULTDIR=/workdir /script'"'"'' Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 5.9 INFO: Mock Version: 5.9 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: Running in chroot: ['su - mockbuild -c \'set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-12636 COPR_PACKAGE=\'"\'"\'\'"\'"\' COPR_RESULTDIR=/workdir /script\''] Start: chroot ['su - mockbuild -c \'set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-12636 COPR_PACKAGE=\'"\'"\'\'"\'"\' COPR_RESULTDIR=/workdir /script\''] + cd /workdir + COPR_OWNER=packit + COPR_PROJECT=ComplianceAsCode-content-12636 + COPR_PACKAGE= + COPR_RESULTDIR=/workdir + /script 2024-11-27 21:46:08.762 config.py DEBUG Loading user config from directory: /builddir/.config 2024-11-27 21:46:08.762 config.py DEBUG Trying to load user config from: /builddir/.config/.packit.yml 2024-11-27 21:46:08.762 config.py DEBUG Trying to load user config from: /builddir/.config/packit.yaml 2024-11-27 21:46:08.762 config.py DEBUG Trying to load user config from: /builddir/.config/packit.yml 2024-11-27 21:46:08.763 config.py DEBUG Trying to load user config from: /builddir/.config/.packit.yaml 2024-11-27 21:46:08.763 config.py DEBUG Loaded config: Config(debug='False', fas_user='None', keytab_path='None', kerberos_realm='FEDORAPROJECT.ORG', koji_build_command='koji build', pkg_tool='fedpkg', upstream_git_remote='None', command_handler='RunCommandType.local', command_handler_work_dir='/sandcastle', command_handler_pvc_env_var='SANDCASTLE_PVC', command_handler_image_reference='docker.io/usercont/sandcastle', command_handler_k8s_namespace='myproject', command_handler_pvc_volume_specs='[]', command_handler_storage_class='', appcode='', repository_cache='None', default_parse_time_macros='{}') 2024-11-27 21:46:08.763 logging.py DEBUG Logging set to DEBUG 2024-11-27 21:46:08.764 packit_base.py DEBUG Packit 0.104.1 is being used. 2024-11-27 21:46:08.764 repo.py DEBUG Parsing git remote URL 'https://github.com/ComplianceAsCode/content' and converting it to https-like URL. 2024-11-27 21:46:08.764 repo.py DEBUG Provided input 'https://github.com/ComplianceAsCode/content' is an url. 2024-11-27 21:46:08.764 types.py DEBUG Input is a URL to a git repo: https://github.com/ComplianceAsCode/content 2024-11-27 21:46:08.764 local_project.py DEBUG Attributes requested: git_service, git_project, working_dir, git_repo, repo_name, namespace, full_name 2024-11-27 21:46:08.764 local_project.py DEBUG Attributes requested not to be calculated: 2024-11-27 21:46:08.764 local_project.py DEBUG Transitive dependencies: git_repo => git_url 2024-11-27 21:46:08.764 local_project.py DEBUG To-calculate set: {'git_service', 'git_project', 'working_dir', 'git_repo', 'repo_name', 'namespace', 'full_name'} 2024-11-27 21:46:08.765 repo.py INFO Cloning repo https://github.com/ComplianceAsCode/content -> /tmp/tmp4cnlb36_ 2024-11-27 21:46:08.766 cmd.py INFO git clone -v --tags -- https://github.com/ComplianceAsCode/content /tmp/tmp4cnlb36_ 2024-11-27 21:46:08.766 cmd.py DEBUG Popen(['git', 'clone', '-v', '--tags', '--', 'https://github.com/ComplianceAsCode/content', '/tmp/tmp4cnlb36_'], cwd=/workdir, stdin=None, shell=False, universal_newlines=True) 2024-11-27 21:46:18.520 base.py DEBUG Cmd(['git', 'clone', '-v', '--tags', '--', 'https://github.com/ComplianceAsCode/content', '/tmp/tmp4cnlb36_'])'s unused stdout: 2024-11-27 21:46:18.522 local_project.py DEBUG Parsed repo from url 'https://github.com/ComplianceAsCode/content'. 2024-11-27 21:46:18.522 local_project.py DEBUG Parsed working directory /tmp/tmp4cnlb36_ from the repo . 2024-11-27 21:46:18.522 local_project.py DEBUG Parsed namespace and repo name (ComplianceAsCode, content) from url 'https://github.com/ComplianceAsCode/content'. 2024-11-27 21:46:18.522 local_project.py DEBUG Parsed full repo name 'ComplianceAsCode/content'. 2024-11-27 21:46:18.522 local_project.py DEBUG Arguments received in the init method of the LocalProject class: git_repo: working_dir: /tmp/tmp4cnlb36_ ref: git_project: None git_service: None git_url: https://github.com/ComplianceAsCode/content full_name: ComplianceAsCode/content namespace: ComplianceAsCode repo_name: content offline: False refresh False remote: pr_id: 12636 cache: None merge_pr: True target_branch: master 2024-11-27 21:46:18.522 local_project.py INFO Checking out PR 12636. 2024-11-27 21:46:18.522 cmd.py INFO git fetch -v -- origin +refs/pull/12636/head:refs/remotes/origin/pr-changes/12636 2024-11-27 21:46:18.522 cmd.py DEBUG Popen(['git', 'fetch', '-v', '--', 'origin', '+refs/pull/12636/head:refs/remotes/origin/pr-changes/12636'], cwd=/tmp/tmp4cnlb36_, stdin=None, shell=False, universal_newlines=True) 2024-11-27 21:46:18.696 cmd.py INFO git cat-file --batch-check 2024-11-27 21:46:18.696 cmd.py DEBUG Popen(['git', 'cat-file', '--batch-check'], cwd=/tmp/tmp4cnlb36_, stdin=, shell=False, universal_newlines=False) 2024-11-27 21:46:18.699 cmd.py DEBUG Popen(['git', 'checkout', 'pr-changes/12636'], cwd=/tmp/tmp4cnlb36_, stdin=None, shell=False, universal_newlines=False) 2024-11-27 21:46:19.129 cmd.py INFO git checkout pr-changes/12636 -> 0; stdout: ''; stderr: 'Switched to branch 'pr-changes/12636'' 2024-11-27 21:46:19.130 cmd.py INFO git cat-file --batch 2024-11-27 21:46:19.130 cmd.py DEBUG Popen(['git', 'cat-file', '--batch'], cwd=/tmp/tmp4cnlb36_, stdin=, shell=False, universal_newlines=False) 2024-11-27 21:46:19.132 local_project.py INFO Checked out commit (fa1349ea) Update 5.4.1.4 set_password_hashing_algorithm_logindefs for Ubuntu 24.04 2024-11-27 21:46:19.133 local_project.py DEBUG Target branch: master 2024-11-27 21:46:19.133 cmd.py INFO git fetch -v -- origin +refs/heads/master:refs/remotes/origin/pr/12636 2024-11-27 21:46:19.133 cmd.py DEBUG Popen(['git', 'fetch', '-v', '--', 'origin', '+refs/heads/master:refs/remotes/origin/pr/12636'], cwd=/tmp/tmp4cnlb36_, stdin=None, shell=False, universal_newlines=True) 2024-11-27 21:46:19.230 remote.py DEBUG Fetch head lines do not match lines provided via progress information length of progress lines 2 should be equal to lines in FETCH_HEAD file 1 Will ignore extra progress lines or fetch head lines. 2024-11-27 21:46:19.230 remote.py DEBUG b"info lines: [' * [new branch] master -> origin/pr/12636', ' = [up to date] master -> origin/master']" 2024-11-27 21:46:19.230 remote.py DEBUG b'head info: ["8812908c51e7c71a9903d3a5ec256eae62cba8fe\\t\\tbranch \'master\' of https://github.com/ComplianceAsCode/content\\n"]' 2024-11-27 21:46:19.232 cmd.py DEBUG Popen(['git', 'checkout', 'master'], cwd=/tmp/tmp4cnlb36_, stdin=None, shell=False, universal_newlines=False) 2024-11-27 21:46:19.312 cmd.py INFO git checkout master -> 0; stdout: 'Your branch is up to date with 'origin/master'.'; stderr: 'Switched to branch 'master'' 2024-11-27 21:46:19.312 local_project.py INFO Merging (master) with commit: (8812908c) Merge pull request #12584 from jan-cerny/file_permissions_ungroupowned 2024-11-27 21:46:19.312 cmd.py DEBUG Popen(['git', 'merge', 'pr-changes/12636'], cwd=/tmp/tmp4cnlb36_, stdin=None, shell=False, universal_newlines=False) 2024-11-27 21:46:19.487 cmd.py INFO git merge pr-changes/12636 -> 0; stdout: 'Auto-merging controls/cis_ubuntu2404.yml Merge made by the 'ort' strategy. controls/cis_ubuntu2404.yml | 7 ++++--- .../set_password_hashing_algorithm_logindefs/ansible/shared.yml | 2 +- .../set_password_hashing_algorithm_logindefs/bash/shared.sh | 5 +++++ .../tests/default_yescrypt.pass.sh | 9 +++++++++ .../accounts/accounts-pam/var_password_hashing_algorithm.var | 1 + 5 files changed, 20 insertions(+), 4 deletions(-) create mode 100644 linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_algorithm_logindefs/tests/default_yescrypt.pass.sh' 2024-11-27 21:46:19.488 cmd.py DEBUG Popen(['git', 'checkout', 'pr/12636'], cwd=/tmp/tmp4cnlb36_, stdin=None, shell=False, universal_newlines=False) 2024-11-27 21:46:19.560 cmd.py INFO git checkout pr/12636 -> 0; stdout: ''; stderr: 'Switched to branch 'pr/12636'' 2024-11-27 21:46:19.561 package_config.py DEBUG Local package config found: /tmp/tmp4cnlb36_/.packit.yaml 2024-11-27 21:46:19.570 package_config.py DEBUG Package config before loading: { "downstream_package_name": "scap-security-guide", "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "jobs": [ { "job": "copr_build", "trigger": "pull_request", "targets": [ "fedora-all-x86_64", "centos-stream-8-x86_64", "centos-stream-9-x86_64" ] }, { "job": "copr_build", "trigger": "commit", "targets": [ "fedora-all-x86_64", "centos-stream-8-x86_64", "centos-stream-9-x86_64" ], "branch": "gh-readonly-queue/.*" }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/static-checks", "tmt_plan": "/static-checks$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/rpmbuild-ctest-fedora", "tmt_plan": "/rpmbuild-ctest-fedora$", "targets": { "fedora-all": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/anssi_bp28_high", "tmt_plan": "/hardening/host-os/ansible/anssi_bp28_high$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/ccn_advanced", "tmt_plan": "/hardening/host-os/ansible/ccn_advanced$", "targets": { "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis", "tmt_plan": "/hardening/host-os/ansible/cis$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis_server_l1", "tmt_plan": "/hardening/host-os/ansible/cis_server_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis_workstation_l1", "tmt_plan": "/hardening/host-os/ansible/cis_workstation_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis_workstation_l2", "tmt_plan": "/hardening/host-os/ansible/cis_workstation_l2$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cui", "tmt_plan": "/hardening/host-os/ansible/cui$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/e8", "tmt_plan": "/hardening/host-os/ansible/e8$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/hipaa", "tmt_plan": "/hardening/host-os/ansible/hipaa$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/ism_o", "tmt_plan": "/hardening/host-os/ansible/ism_o$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/ospp", "tmt_plan": "/hardening/host-os/ansible/ospp$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/pci-dss", "tmt_plan": "/hardening/host-os/ansible/pci-dss$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/stig", "tmt_plan": "/hardening/host-os/ansible/stig$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/anssi_bp28_high", "tmt_plan": "/hardening/host-os/oscap/anssi_bp28_high$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/ccn_advanced", "tmt_plan": "/hardening/host-os/oscap/ccn_advanced$", "targets": { "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis", "tmt_plan": "/hardening/host-os/oscap/cis$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis_server_l1", "tmt_plan": "/hardening/host-os/oscap/cis_server_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis_workstation_l1", "tmt_plan": "/hardening/host-os/oscap/cis_workstation_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis_workstation_l2", "tmt_plan": "/hardening/host-os/oscap/cis_workstation_l2$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cui", "tmt_plan": "/hardening/host-os/oscap/cui$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/e8", "tmt_plan": "/hardening/host-os/oscap/e8$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/hipaa", "tmt_plan": "/hardening/host-os/oscap/hipaa$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/ism_o", "tmt_plan": "/hardening/host-os/oscap/ism_o$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/ospp", "tmt_plan": "/hardening/host-os/oscap/ospp$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/pci-dss", "tmt_plan": "/hardening/host-os/oscap/pci-dss$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/stig", "tmt_plan": "/hardening/host-os/oscap/stig$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } ] } 2024-11-27 21:46:19.575 schema.py DEBUG Repo config after pre-loading: { "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml" } }, "jobs": [ { "job": "copr_build", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "targets": [ "fedora-all-x86_64", "centos-stream-8-x86_64", "centos-stream-9-x86_64" ] } } }, { "job": "copr_build", "trigger": "commit", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "targets": [ "fedora-all-x86_64", "centos-stream-8-x86_64", "centos-stream-9-x86_64" ], "branch": "gh-readonly-queue/.*" } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/static-checks", "tmt_plan": "/static-checks$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/rpmbuild-ctest-fedora", "tmt_plan": "/rpmbuild-ctest-fedora$", "targets": { "fedora-all": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/anssi_bp28_high", "tmt_plan": "/hardening/host-os/ansible/anssi_bp28_high$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/ccn_advanced", "tmt_plan": "/hardening/host-os/ansible/ccn_advanced$", "targets": { "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis", "tmt_plan": "/hardening/host-os/ansible/cis$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis_server_l1", "tmt_plan": "/hardening/host-os/ansible/cis_server_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis_workstation_l1", "tmt_plan": "/hardening/host-os/ansible/cis_workstation_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cis_workstation_l2", "tmt_plan": "/hardening/host-os/ansible/cis_workstation_l2$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/cui", "tmt_plan": "/hardening/host-os/ansible/cui$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/e8", "tmt_plan": "/hardening/host-os/ansible/e8$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/hipaa", "tmt_plan": "/hardening/host-os/ansible/hipaa$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/ism_o", "tmt_plan": "/hardening/host-os/ansible/ism_o$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/ospp", "tmt_plan": "/hardening/host-os/ansible/ospp$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/pci-dss", "tmt_plan": "/hardening/host-os/ansible/pci-dss$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/ansible/stig", "tmt_plan": "/hardening/host-os/ansible/stig$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/anssi_bp28_high", "tmt_plan": "/hardening/host-os/oscap/anssi_bp28_high$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/ccn_advanced", "tmt_plan": "/hardening/host-os/oscap/ccn_advanced$", "targets": { "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis", "tmt_plan": "/hardening/host-os/oscap/cis$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis_server_l1", "tmt_plan": "/hardening/host-os/oscap/cis_server_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis_workstation_l1", "tmt_plan": "/hardening/host-os/oscap/cis_workstation_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cis_workstation_l2", "tmt_plan": "/hardening/host-os/oscap/cis_workstation_l2$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/cui", "tmt_plan": "/hardening/host-os/oscap/cui$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/e8", "tmt_plan": "/hardening/host-os/oscap/e8$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/hipaa", "tmt_plan": "/hardening/host-os/oscap/hipaa$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/ism_o", "tmt_plan": "/hardening/host-os/oscap/ism_o$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/ospp", "tmt_plan": "/hardening/host-os/oscap/ospp$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/pci-dss", "tmt_plan": "/hardening/host-os/oscap/pci-dss$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } }, { "job": "tests", "trigger": "pull_request", "packages": { "scap-security-guide": { "downstream_package_name": "scap-security-guide", "paths": [ "./" ], "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "config_file_path": ".packit.yaml", "fmf_path": "tests/tmt-plans", "identifier": "/hardening/host-os/oscap/stig", "tmt_plan": "/hardening/host-os/oscap/stig$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } } } } ] } 2024-11-27 21:46:19.583 utils.py DEBUG job_config_index: 0 2024-11-27 21:46:19.585 utils.py DEBUG Final package (job) config: JobConfig: {"job": "copr_build", "trigger": "pull_request", "skip_build": false, "manual_trigger": false, "labels": null, "packages": {"scap-security-guide": {"config_file_path": ".packit.yaml", "specfile_path": "scap-security-guide.spec", "downstream_package_name": "scap-security-guide", "upstream_project_url": null, "upstream_package_name": "scap-security-guide", "paths": ["./"], "upstream_ref": null, "upstream_tag_template": "{version}", "archive_root_dir_template": "{upstream_pkg_name}-{version}", "dist_git_base_url": "https://src.fedoraproject.org/", "dist_git_namespace": "rpms", "allowed_gpg_keys": null, "spec_source_id": "Source0", "synced_files": [], "actions": {"get-current-version": ["bash utils/version.sh"]}, "create_pr": true, "sync_changelog": false, "create_sync_note": true, "patch_generation_ignore_paths": [], "patch_generation_patch_id_digits": 4, "notifications": {"pull_request": {"successful_build": false}, "failure_comment": {"message": null}, "failure_issue": {"create": true}}, "copy_upstream_release_description": false, "sources": [], "merge_pr_in_ci": true, "srpm_build_deps": ["bash"], "identifier": null, "packit_instances": ["prod"], "issue_repository": null, "release_suffix": null, "update_release": true, "upstream_tag_include": "", "upstream_tag_exclude": "", "prerelease_suffix_pattern": "([.\\-_~^]?)(alpha|beta|rc|pre(view)?)([.\\-_]?\\d+)?", "prerelease_suffix_macro": null, "upload_sources": true, "test_command": {"default_labels": null, "default_identifier": null}, "require": {"label": {"present": [], "absent": []}}, "status_name_template": null, "sync_test_job_statuses_with_builds": true, "targets": {"fedora-all-x86_64": {}, "centos-stream-8-x86_64": {}, "centos-stream-9-x86_64": {}}, "timeout": 7200, "owner": null, "project": null, "dist_git_branches": [], "branch": null, "scratch": false, "list_on_homepage": false, "preserve_project": false, "use_internal_tf": false, "additional_packages": [], "additional_repos": [], "bootstrap": "default", "fmf_url": null, "fmf_ref": null, "fmf_path": null, "env": {}, "enable_net": false, "allowed_pr_authors": ["packit"], "allowed_committers": [], "allowed_builders": ["packit"], "tmt_plan": null, "tf_post_install_script": null, "tf_extra_params": {}, "module_hotfixes": false, "image_distribution": null, "image_request": null, "image_customizations": null, "copr_chroot": null, "pkg_tool": null, "sig": null, "version_update_mask": null, "parse_time_macros": {}, "osh_diff_scan_after_copr_build": true, "csmock_args": null}}, "package": null, "sidetag_group": null, "dependents": null, "dependencies": null} 2024-11-27 21:46:19.585 cmd.py DEBUG Popen(['git', 'remote', 'get-url', '--all', 'origin'], cwd=/tmp/tmp4cnlb36_, stdin=None, shell=False, universal_newlines=False) 2024-11-27 21:46:19.587 cmd.py INFO git remote get-url --all origin -> 0; stdout: 'https://github.com/ComplianceAsCode/content' 2024-11-27 21:46:19.587 utils.py DEBUG Input directory is an upstream repository. No suitable remote found. 2024-11-27 21:46:19.587 base_git.py DEBUG Command handler: RunCommandType.local 2024-11-27 21:46:19.588 api.py DEBUG Won't be doing kinit, no credentials provided. 2024-11-27 21:46:19.588 repo.py DEBUG Parsing git remote URL 'https://github.com/ComplianceAsCode/content' and converting it to https-like URL. 2024-11-27 21:46:19.588 repo.py DEBUG Provided input 'https://github.com/ComplianceAsCode/content' is an url. 2024-11-27 21:46:19.588 actions_handler.py DEBUG Running ActionName.post_upstream_clone hook. 2024-11-27 21:46:19.588 actions_handler.py DEBUG Running ActionName.post_upstream_clone. 2024-11-27 21:46:19.588 actions_handler.py DEBUG Running default implementation for ActionName.post_upstream_clone. 2024-11-27 21:46:19.588 upstream.py DEBUG No ref given or is not glob pattern 2024-11-27 21:46:19.588 actions_handler.py INFO Using user-defined script for ActionName.get_current_version: [['bash', 'utils/version.sh']] 2024-11-27 21:46:19.588 commands.py DEBUG Command: bash utils/version.sh 2024-11-27 21:46:19.603 logging.py INFO 0.1.76 2024-11-27 21:46:19.603 upstream.py DEBUG Version: 0.1.76 2024-11-27 21:46:19.603 upstream.py DEBUG Sanitized version: 0.1.76 2024-11-27 21:46:19.603 upstream.py DEBUG Name + version = scap-security-guide-0.1.76 2024-11-27 21:46:19.603 commands.py DEBUG Command: git archive --output scap-security-guide-0.1.76.tar.gz --prefix scap-security-guide-0.1.76/ HEAD 2024-11-27 21:46:20.691 cmd.py INFO git cat-file --batch-check 2024-11-27 21:46:20.691 cmd.py DEBUG Popen(['git', 'cat-file', '--batch-check'], cwd=/tmp/tmp4cnlb36_, stdin=, shell=False, universal_newlines=False) 2024-11-27 21:46:20.764 commands.py DEBUG Command: git describe --tags --long --match * 2024-11-27 21:46:20.941 logging.py DEBUG v0.1.61-14455-gd926f03b17 2024-11-27 21:46:21.001 commands.py DEBUG Command: git describe --tags --long --match * 2024-11-27 21:46:21.176 logging.py DEBUG v0.1.61-14455-gd926f03b17 2024-11-27 21:46:21.178 actions_handler.py DEBUG Running ActionName.fix_spec. 2024-11-27 21:46:21.178 actions_handler.py DEBUG Running default implementation for ActionName.fix_spec. 2024-11-27 21:46:21.207 actions_handler.py INFO Using user-defined script for ActionName.get_current_version: [['bash', 'utils/version.sh']] 2024-11-27 21:46:21.207 commands.py DEBUG Command: bash utils/version.sh 2024-11-27 21:46:21.220 logging.py INFO 0.1.76 2024-11-27 21:46:21.221 upstream.py DEBUG Trying to extract archive_root_dir from known archives 2024-11-27 21:46:21.221 upstream.py DEBUG Archive scap-security-guide-0.1.76.tar.gz is tar. 2024-11-27 21:46:21.856 upstream.py DEBUG Directory scap-security-guide-0.1.76 found in archive scap-security-guide-0.1.76.tar.gz 2024-11-27 21:46:21.888 upstream.py DEBUG We're about to get latest matching tag in the upstream repository /tmp/tmp4cnlb36_. 2024-11-27 21:46:21.888 commands.py DEBUG Command: git tag --list --sort=-creatordate --merged=master 2024-11-27 21:46:22.148 logging.py DEBUG v0.1.61 2024-11-27 21:46:22.148 logging.py DEBUG v0.1.60 2024-11-27 21:46:22.148 logging.py DEBUG v0.1.59 2024-11-27 21:46:22.148 logging.py DEBUG v0.1.58 2024-11-27 21:46:22.148 logging.py DEBUG v0.1.48 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.47 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.46 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.45 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.44 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.43 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.42 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.41 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.40 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.39 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.38 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.37 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.36 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.35 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.34 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.33 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.32 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.31 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.30 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.29 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.28 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.27 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.26 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.25 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.24 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.23 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.22 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.21 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.20 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.19 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-6 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-7 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-8 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-9 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-10 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-11 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-12 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-13 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-14 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-15 2024-11-27 21:46:22.149 logging.py DEBUG v0.1-16 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.17 2024-11-27 21:46:22.149 logging.py DEBUG v0.1.18 2024-11-27 21:46:22.149 logging.py DEBUG v0.5.0-InitialDraft 2024-11-27 21:46:22.152 commands.py DEBUG Command: git log --no-merges --pretty=format:- %s (%an) v0.1.61..HEAD -- 2024-11-27 21:46:22.269 logging.py DEBUG - Update 5.4.1.4 set_password_hashing_algorithm_logindefs for Ubuntu 24.04 (Eric Berry) 2024-11-27 21:46:22.269 logging.py DEBUG - Introduce a condition on /etc/nsswitch.conf (Jan Černý) 2024-11-27 21:46:22.269 logging.py DEBUG - Update 5.4.1.4 set_password_hashing_algorithm_logindefs for Ubuntu 24.04 (Eric Berry) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.3 and fix var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Add new rule service_dhcpd6_disabled (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Add service_dnsmasq_disabled to bind component (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update firewalld_loopback_traffic_trusted for bootable containers (Matus Marhefka) 2024-11-27 21:46:22.269 logging.py DEBUG - Update firewalld_loopback_traffic_restricted for bootable containers (Matus Marhefka) 2024-11-27 21:46:22.269 logging.py DEBUG - Adjust OVAL for directory_permissions_var_log_audit (Matthew Burket) 2024-11-27 21:46:22.269 logging.py DEBUG - Add Ubuntu Maintainers as CODEOWNERS for 24.04 CIS (Matthew Burket) 2024-11-27 21:46:22.269 logging.py DEBUG - Fix ubuntu test variables in dconf rule (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Minor updates after review (Marcus Burghardt) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.9 and add var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.8 and add var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.7 and add var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.6 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.4 and add var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.20 and add var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.19 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.17 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.16 and add var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.15 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.14 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.13 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.12 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.11 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.10 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.2 and add var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.18 and fix var overrides (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Add new rule service_nginx_disabled (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.5 (Miha Purg) 2024-11-27 21:46:22.269 logging.py DEBUG - Add new rule service_dnsmasq_disabled (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Bump docker/metadata-action from 5.5.1 to 5.6.1 (dependabot[bot]) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix typo in profile name (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix ubuntu tests (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix dconf rules for Ubuntu 24.04 CIS (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove rule disable_ctrlaltdel_burstaction from Ubuntu STIG profiles (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Switch to CIS-specific banner rules for Ubuntu 24.04 CIS (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Add rule sysctl_kernel_yama_ptrace_scope to Ubuntu 24.04 CIS (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix hardcoded value for testing oval references (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Update oval_feed_url for Ubuntu (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Added dockerfile for Ubuntu 24.04 (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove methods information from classes docstrings (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove methods information from classes docstrings (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove docstrings in some __init__ functions (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Added draft version of Ubuntu 24.04 CIS profiles (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Added Ubuntu 24.04 product (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Include Docstrings for missing function (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Add ubuntu2404 product to conditional statements (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Include docstrings for ssg/build_yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix only_zones_configured test (Matus Marhefka) 2024-11-27 21:46:22.270 logging.py DEBUG - Update firewalld_sshd_port_enabled for bootable containers (Matus Marhefka) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix file_permissions_unauthorized_suid (Jan Černý) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and create docstrings for ssg/yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and create docstrings for ssg/xml.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix display_login_attempts (Jan Černý) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and create docstrings for ssg/xccdf.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review comments and create docstrings for ssg/utils.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and create docstrings for ssg/templates.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review docstrings for ssg/shims.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and update docstrings for ssg/rules.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and update docstrings for ssg/rule_yaml.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and update docstrings for ssg/rule_dir_stats.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Create docstrings for ssg/requirement_specs.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Create docstrings for ssg/products.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix sssd_enable_smartcards (Jan Černý) 2024-11-27 21:46:22.270 logging.py DEBUG - Create docstrings for ssg/parse_oval.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and update docstrings for ssg/oval.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and create docstrings for ssg/jinja.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix file_permissions_unauthorized_sgid (Jan Černý) 2024-11-27 21:46:22.270 logging.py DEBUG - Review comments and create docstrings for ssg/id_translate.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review comments and create docstrings for ssg/fixes.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Create docstrings for ssg/environment.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Create docstrings for ssg/controls.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Create docstrings for ssg/contributors.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Include docstrings for ssg/components.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.9 to 2.1.0 (dependabot[bot]) 2024-11-27 21:46:22.270 logging.py DEBUG - Adjust remediated result as well (Watson Sato) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix RHEL 9 Version (Matthew Burket) 2024-11-27 21:46:22.270 logging.py DEBUG - Adjust resource-requests-quota 4.17 assertion (Watson Sato) 2024-11-27 21:46:22.270 logging.py DEBUG - Adjust rule assertions after group platform change (Watson Sato) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix SC2156 (warning) from shellcheck (Alan Moore) 2024-11-27 21:46:22.270 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.8 to 4.6.9 (dependabot[bot]) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix RH references for OL (Armando Acosta) 2024-11-27 21:46:22.270 logging.py DEBUG - Review docstrings for ssg/checks.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove the aa-teardown tests (Alan Moore) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix apparmor tests (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix apparmor_complain rule to not load disabled profiles (Miha Purg) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove sle too (Alan Moore) 2024-11-27 21:46:22.270 logging.py DEBUG - Add package[apparmor] back (wqian) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove platform: Ubuntu (wqian) 2024-11-27 21:46:22.270 logging.py DEBUG - Change platform into machine to avoid container test (wqian) 2024-11-27 21:46:22.270 logging.py DEBUG - Remove unnecessary platforms (wqian) 2024-11-27 21:46:22.270 logging.py DEBUG - Add platform and packages (wqian) 2024-11-27 21:46:22.270 logging.py DEBUG - Load all the profile if not loaded for Ubuntu without change the mode of loaded profiles (wqian) 2024-11-27 21:46:22.270 logging.py DEBUG - Review and create docstrings for ssg/cce.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Review docstrings for ssg/boolean_expression.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - Include docstrings for ssg/ansible.py (Marcus Burghardt) 2024-11-27 21:46:22.270 logging.py DEBUG - remove sshd_use_priv_separation from hipaa control file (Vojtech Polasek) 2024-11-27 21:46:22.270 logging.py DEBUG - Recover default profiles in OL8 & 9 (Edgar Aguilar) 2024-11-27 21:46:22.270 logging.py DEBUG - Fix Ansible check one Automatus Sanity (Matthew Burket) 2024-11-27 21:46:22.271 logging.py DEBUG - Adjust test for incorrect_owner.fail.sh in file_owner template (Matthew Burket) 2024-11-27 21:46:22.271 logging.py DEBUG - Remove package_quagga_removed no longer in RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.271 logging.py DEBUG - fix accounts_users_home_files_permissions to handle symlinks properly (Alexandre Skrzyniarz) 2024-11-27 21:46:22.271 logging.py DEBUG - update audit_ospp_general_ppc64le with the latest content from upstream (Vojtech Polasek) 2024-11-27 21:46:22.271 logging.py DEBUG - update audit_ospp_general_aarch64 with the latest content from upstream (Vojtech Polasek) 2024-11-27 21:46:22.271 logging.py DEBUG - update audit_ospp_general rule audit content to match latest content (Vojtech Polasek) 2024-11-27 21:46:22.271 logging.py DEBUG - Change platform in dnf-automatic rules (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - fix accounts_users_home_files_ownership bash remediation to handle symlinks properly (Alexandre Skrzyniarz) 2024-11-27 21:46:22.271 logging.py DEBUG - fix accounts_users_home_files_groupownership bash remediation to handle symlinks properly (Alexandre Skrzyniarz) 2024-11-27 21:46:22.271 logging.py DEBUG - Update rule description (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - fix system_with_kernel applicability for debian derived operating systems (Alexandre Skrzyniarz) 2024-11-27 21:46:22.271 logging.py DEBUG - Update chronyd rules for bootable containers (Matus Marhefka) 2024-11-27 21:46:22.271 logging.py DEBUG - Add new test scenarios (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Add support for /usr/lib/group (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Exclude the /sysroot directory (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Fix comparing timezone and non-timezone timestamps (Matthew Burket) 2024-11-27 21:46:22.271 logging.py DEBUG - Check for multiple occurrences (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Add support for multiple values in sysctlval parameter (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Refactor to prevent code duplication (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Simplify flags (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Simplify template (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Adapt sysctl template for bootable containers (Jan Černý) 2024-11-27 21:46:22.271 logging.py DEBUG - Update tasks names & fix conditional (Armando Acosta) 2024-11-27 21:46:22.271 logging.py DEBUG - Bump to 0.1.76 (Matthew Burket) 2024-11-27 21:46:22.271 logging.py DEBUG - Update file_permissions_etc_chrony_keys to 640 (Matthew Burket) 2024-11-27 21:46:22.271 logging.py DEBUG - Update contributors for 0.1.75 (Matthew Burket) 2024-11-27 21:46:22.271 logging.py DEBUG - Update rsyslog_cron_logging for bootable containers (Matus Marhefka) 2024-11-27 21:46:22.271 logging.py DEBUG - Update networkmanager_dns_mode for bootable containers (Matus Marhefka) 2024-11-27 21:46:22.274 logging.py DEBUG - Add rules removed from RHEL8 profiles back to datastream (Milan Lysonek) 2024-11-27 21:46:22.274 logging.py DEBUG - Add rules removed from RHEL8 profiles back to datastream (Milan Lysonek) 2024-11-27 21:46:22.274 logging.py DEBUG - Fix test_ds_sce.py (Jan Černý) 2024-11-27 21:46:22.274 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:22.274 logging.py DEBUG - Move data stream component references (Jan Černý) 2024-11-27 21:46:22.274 logging.py DEBUG - Update RHEL 8 STIG due to rule removal (Matthew Burket) 2024-11-27 21:46:22.274 logging.py DEBUG - Update sshd_include_crypto_policy ansible comments (Matthew Burket) 2024-11-27 21:46:22.274 logging.py DEBUG - Remove rules no longer in the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.274 logging.py DEBUG - Update sshd_include_crypto_policy and sshd_include_crypto_policy (Matthew Burket) 2024-11-27 21:46:22.274 logging.py DEBUG - Adjust RHEL 9 STIG for RHEL-09-255055 (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add new rule sshd_include_crypto_policy (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Adjust time to 10 minutes for RHEL-09-412035 (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add new rule file_sshd_50_redhat_exists (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Adjust RHEL-09-255055 rule selection to better follow the STIG (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update RHEL 9 STIG SCAP Content (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add platform for postfix_server_relay (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update RHEL 9 STIG Manual File (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_defined/ansible/shared.yml (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Skip dynamic uids in account accounts_user_interactive_home_directory_defined (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add dynamic_uid_min and dynamic_uid_max to product properties (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Move platform to group.yml (Jan Černý) 2024-11-27 21:46:22.275 logging.py DEBUG - Move platform to group.yml (Jan Černý) 2024-11-27 21:46:22.275 logging.py DEBUG - Fix tests (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Update test_xccdf_values_in_ds.sh to account for Bash variables (Matus Marhefka) 2024-11-27 21:46:22.275 logging.py DEBUG - Update SLES-15-030680 check and fix (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Adjust tmout to 10 minutes for SLES-15-010130 (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Update SLE15 DISA STIG manual to V2R2 (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Update SLE15 STIG to V2R2 (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Fix ShellCheck problem (Jan Černý) 2024-11-27 21:46:22.275 logging.py DEBUG - Change platform for rules related to partitions (Jan Černý) 2024-11-27 21:46:22.275 logging.py DEBUG - Change platform in xwindows_runlevel_target (Jan Černý) 2024-11-27 21:46:22.275 logging.py DEBUG - Bump thollander/actions-comment-pull-request from 3.0.0 to 3.0.1 (dependabot[bot]) 2024-11-27 21:46:22.275 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.0.0.pre.rc02 to 5 (dependabot[bot]) 2024-11-27 21:46:22.275 logging.py DEBUG - Update sebool template for bootable containers (Matus Marhefka) 2024-11-27 21:46:22.275 logging.py DEBUG - Update Fedora in install_vm to F41 (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.8 to 2.0.9 (dependabot[bot]) 2024-11-27 21:46:22.275 logging.py DEBUG - Add python3-setuptools to install guide in docs (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add setuptools to Automatus sanity (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add setuptools to ocp4 build (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add setuptools python package to Fedora (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Remove not applicable rules for OL9 (Edgar Aguilar) 2024-11-27 21:46:22.275 logging.py DEBUG - Remove not applicable rules for OL8 (Edgar Aguilar) 2024-11-27 21:46:22.275 logging.py DEBUG - Improve Benchmark detection in Automatus (Jan Černý) 2024-11-27 21:46:22.275 logging.py DEBUG - Directly source test config for testable profiles (Watson Sato) 2024-11-27 21:46:22.275 logging.py DEBUG - Just test on latest OCP for now (Watson Sato) 2024-11-27 21:46:22.275 logging.py DEBUG - Update RHEL 8 versions in test stability (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update STIG version for RHEL 8 (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update RHEL 8 SCAP XCCDF file for V2R1 (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update RHEL 8 STIG to V2R1 (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update audit_rules_suid_privilege_function to use ExecStart instead of ExecStartPost. (Gabriel Becker) 2024-11-27 21:46:22.275 logging.py DEBUG - Adjust timeout for RHEL-08-020035 (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Add `and not runtime_kernel_fips_enabled` to package_rng-tools_installed (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Update XCCDF Manual for RHEL 8 STIG (Matthew Burket) 2024-11-27 21:46:22.275 logging.py DEBUG - Filter out profiles that are not tested by Prow (Watson Sato) 2024-11-27 21:46:22.275 logging.py DEBUG - Remediate AIDE check in SLE via settings in crontab file (teacup-on-rockingchair) 2024-11-27 21:46:22.275 logging.py DEBUG - Fix bug with register ansible variable causing exception (teacup-on-rockingchair) 2024-11-27 21:46:22.275 logging.py DEBUG - Fix maxpoll remediatian also for cases when maxpoll is negative (teacup-on-rockingchair) 2024-11-27 21:46:22.275 logging.py DEBUG - Fix system_with_kernel.yml ending (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Update status of SLEM-05-653060 to manual (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Update status of SLEM-05-211015 to manual (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Fix check_id: system_with_kernel to support SLE (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Add rule accounts_tmout to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.275 logging.py DEBUG - Update docs to reflect correct usage of the product field (teacup-on-rockingchair) 2024-11-27 21:46:22.275 logging.py DEBUG - Add workflow to start Prow tests when relevant (Watson Sato) 2024-11-27 21:46:22.275 logging.py DEBUG - Add new test to cover multiple users (Armando Acosta) 2024-11-27 21:46:22.275 logging.py DEBUG - Add ansible remediation to mount_option_home template (Armando Acosta) 2024-11-27 21:46:22.275 logging.py DEBUG - Update OL7 STIG profile version (Edgar Aguilar) 2024-11-27 21:46:22.275 logging.py DEBUG - Update OL7 STIG xccdf manual (Edgar Aguilar) 2024-11-27 21:46:22.275 logging.py DEBUG - Align OL7 STIG with V3R1 from DISA (Edgar Aguilar) 2024-11-27 21:46:22.275 logging.py DEBUG - Update OL8 STIG profile version (Edgar Aguilar) 2024-11-27 21:46:22.275 logging.py DEBUG - Update OL8 STIG xccdf manual (Edgar Aguilar) 2024-11-27 21:46:22.275 logging.py DEBUG - Prefix bootc macro names with bash (Jan Černý) 2024-11-27 21:46:22.275 logging.py DEBUG - Bump actions/setup-python from 5.2.0 to 5.3.0 (dependabot[bot]) 2024-11-27 21:46:22.275 logging.py DEBUG - Bump actions/setup-go from 5.0.2 to 5.1.0 (dependabot[bot]) 2024-11-27 21:46:22.275 logging.py DEBUG - Explicitly state FindOpenSCAP cmake so it loads before it's used. (Gabriel Becker) 2024-11-27 21:46:22.275 logging.py DEBUG - add python3 package in test_suite-ubuntu2204 container (Alexandre Skrzyniarz) 2024-11-27 21:46:22.275 logging.py DEBUG - add python3-apt package in test_suite-debian12 container (Alexandre Skrzyniarz) 2024-11-27 21:46:22.275 logging.py DEBUG - Fix "unknown predicate `-L'" (Alan Moore) 2024-11-27 21:46:22.275 logging.py DEBUG - Update shared/applicability/bootc.yml (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Set conflict between two rules. (Gabriel Becker) 2024-11-27 21:46:22.276 logging.py DEBUG - Remove sshd_enable_warning_banner_net from HIPAA control file. (Gabriel Becker) 2024-11-27 21:46:22.276 logging.py DEBUG - Fix file path inconsistencies in accounts_umask_etc_bashrc (Alexandre Skrzyniarz) 2024-11-27 21:46:22.276 logging.py DEBUG - remove no longer used macro (Vojtech Polasek) 2024-11-27 21:46:22.276 logging.py DEBUG - switch to sshd_oval_check macro (Vojtech Polasek) 2024-11-27 21:46:22.276 logging.py DEBUG - Update require_singleuser_auth OVAL checks (Matthew Burket) 2024-11-27 21:46:22.276 logging.py DEBUG - Change meeting IDs to prevent ID collisions (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Prevent matching other immutable platforms (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Introduce new CPE platform for bootable containers (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Add special conditions for bootable containers (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Build SCE on RHEL (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Unify location of the SCE option (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Build SCE by default for RHEL 9 and 10 (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Update require_emergency_target_auth and require_singleuser_auth (Matthew Burket) 2024-11-27 21:46:22.276 logging.py DEBUG - Add tests for drop ins to require_singleuser_auth and require_emergency_target_auth (Matthew Burket) 2024-11-27 21:46:22.276 logging.py DEBUG - Update require_singleuser_auth for RHEL (Matthew Burket) 2024-11-27 21:46:22.276 logging.py DEBUG - Update require_emergency_target_auth for RHEL (Matthew Burket) 2024-11-27 21:46:22.276 logging.py DEBUG - Update to file_permissions_etc_chrony_keys (Matthew Burket) 2024-11-27 21:46:22.276 logging.py DEBUG - Remove unnecessary apparmor-utils pkg (Alan Moore) 2024-11-27 21:46:22.276 logging.py DEBUG - Stop SCAP content validation if not necessary (Jan Černý) 2024-11-27 21:46:22.276 logging.py DEBUG - Mark in the control the remediation should be run manual for this one as it depends on specific external variables (teacup-on-rockingchair) 2024-11-27 21:46:22.276 logging.py DEBUG - Update shared/templates/service_enabled/bash.template (teacup-on-rockingchair) 2024-11-27 21:46:22.276 logging.py DEBUG - Update linux_os/guide/system/logging/journald/systemd_journal_upload_server_tls/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.276 logging.py DEBUG - Update linux_os/guide/system/logging/journald/systemd_journal_upload_url/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.276 logging.py DEBUG - Update linux_os/guide/system/logging/journald/service_systemd-journal-upload_enabled/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.276 logging.py DEBUG - Update linux_os/guide/system/logging/journald/service_systemd-journal-upload_enabled/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.276 logging.py DEBUG - Assign rules to relevant components (teacup-on-rockingchair) 2024-11-27 21:46:22.278 logging.py DEBUG - Add journal remote upload rules and drop trailing whitespaces (teacup-on-rockingchair) 2024-11-27 21:46:22.278 logging.py DEBUG - Assign CCE ids for journal rules in slmicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.278 logging.py DEBUG - Add rules to support remote offload of journal logs (teacup-on-rockingchair) 2024-11-27 21:46:22.278 logging.py DEBUG - Add service enable bash remediation support for slmicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.278 logging.py DEBUG - Move the additional packages into Dockerfile (wqian) 2024-11-27 21:46:22.278 logging.py DEBUG - Update remedation for firewalld_sshd_port_enabled (Matthew Burket) 2024-11-27 21:46:22.278 logging.py DEBUG - Update OSCAL content in shared/references/oscal (Mab879) 2024-11-27 21:46:22.278 logging.py DEBUG - Change platforms of accounts group rules (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Remove shebang from bash remediations (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change CPE platform in rule package_rng-tools_installed (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change CPE platform in package_sudo_installed (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change platforms in rules in endpoint_security_software group (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change platforms in rules in restrictions group (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change platforms of mounting permissions rules (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change platforms of files permissions group rules (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change platforms of network group rules (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Add SCE check to timer_enabled template (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Add SCE check to socket_disabled template (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Fix inventory_test_kernel_installed for SLE (svet-se) 2024-11-27 21:46:22.278 logging.py DEBUG - Disable sysctl_kernel_modules_disabled Ansible remediation. (Milan Lysonek) 2024-11-27 21:46:22.278 logging.py DEBUG - Fix the check condition of container (wqian) 2024-11-27 21:46:22.278 logging.py DEBUG - MULTIARCH-4655: add support for DISA-STIG on Power (Paul Bastide) 2024-11-27 21:46:22.278 logging.py DEBUG - Adjust rule file for firewalld_sshd_port_enabled (Matthew Burket) 2024-11-27 21:46:22.278 logging.py DEBUG - Remove CPE platform from some SSSD rules (Jan Černý) 2024-11-27 21:46:22.278 logging.py DEBUG - Change platform of sssd-ldap rules (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Change platform of service enabled or disabled rules (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Rename package to dnf (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Add rule security_patches_up_to_date to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.279 logging.py DEBUG - Fix PEP8 issues in tests/validate_automatus_metadata.py (Matthew Burket) 2024-11-27 21:46:22.279 logging.py DEBUG - Fix invalid platforms in tests (Matthew Burket) 2024-11-27 21:46:22.279 logging.py DEBUG - Update tests/validate_automatus_metadata.py to check platforms (Matthew Burket) 2024-11-27 21:46:22.279 logging.py DEBUG - Add RHEL 10 to Jinja if statements in firewalld_sshd_port_enabled (Matthew Burket) 2024-11-27 21:46:22.279 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Fix thin data streams with SCE (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "aide" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "fips" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "mcafee_endpoint_security_software" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "selinux" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "network-uncommon" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "network_host_parameters" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "network_host_and_router_parameters" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "network-firewalld" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "logging" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Update Ubuntu STIG 20.04 version to V1R12 (Miha Purg) 2024-11-27 21:46:22.279 logging.py DEBUG - Remove duplicate rules in Ubuntu 20.04 STIG (Miha Purg) 2024-11-27 21:46:22.279 logging.py DEBUG - Align text in smartcard_pam_enabled with STIG 20.04 V1R12 (Miha Purg) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "kernel_build_config" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "accounts-physical" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Add rule chronyd_or_ntpd_set_maxpoll to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.279 logging.py DEBUG - Add rule chronyd_or_ntpd_specify_remote_server to components (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "usbguard" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "ssh" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "rng" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "inetd_and_xinetd" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "ntp" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "nfs_and_rpc" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "kerberos" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "fapolicyd" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "cron_and_at" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Add bootc templates for package templates (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Introduce new remediation type bootc (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Set "auditing" group platform to system_with_kernel (Jan Černý) 2024-11-27 21:46:22.279 logging.py DEBUG - Update reference for compliance-trestle (Marcus Burghardt) 2024-11-27 21:46:22.279 logging.py DEBUG - Fix rule description typo (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Update URLs to point to loggin.openshift.io docs (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Update URL to point to latest CLO 6.0 docs (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Remove from e8 not applicable rules (Edgar Aguilar) 2024-11-27 21:46:22.279 logging.py DEBUG - Add ism profile to OL8 (Edgar Aguilar) 2024-11-27 21:46:22.279 logging.py DEBUG - Fix uses_tls filter for logging.openshift.io api (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Update various rule assertion (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Ensure ocp_version variable has no wrapping quotes (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Update OSCAL content in shared/references/oscal (Mab879) 2024-11-27 21:46:22.279 logging.py DEBUG - Bump thollander/actions-comment-pull-request from 2.5.0 to 3.0.0 (dependabot[bot]) 2024-11-27 21:46:22.279 logging.py DEBUG - Add tests to accounts_users_home_files_*ownership (Matthew Burket) 2024-11-27 21:46:22.279 logging.py DEBUG - This rule can occasionally result inconsistent (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Update test data (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - cluster_logging_operator_exists now handles two APIs (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - audit_log_forwarding_webhook now handles two APIs (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - audit_log_forwarding_uses_tls now handles two APIs (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - audit_log_forwarding_enabled now handles two APIs (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Update channel from which CLO is intalled (Watson Sato) 2024-11-27 21:46:22.279 logging.py DEBUG - Fix result after remediation for cni-conf permissions (Watson Sato) 2024-11-27 21:46:22.280 logging.py DEBUG - Fix typo in assertion rule id (Watson Sato) 2024-11-27 21:46:22.280 logging.py DEBUG - Fix bug in bash_restrict_permissions_home_directories (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Update accounts_users_home_files_ownership Remedations (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Update accounts_users_home_files_groupownership Remedations (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Update restrict_permissions_home_directories macros (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Add RHEL platform to teestts in aide_verify_ext_attributes (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Add RHEL platform to teestts in aide_verify_acls (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Add newline at end of file (Jan Černý) 2024-11-27 21:46:22.280 logging.py DEBUG - Add a simple test for the SCEBuilder class (Jan Černý) 2024-11-27 21:46:22.280 logging.py DEBUG - Replace type() with isinstance() (teacup-on-rockingchair) 2024-11-27 21:46:22.280 logging.py DEBUG - Add oscal-update-* branch to required GitHub Actions (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Update Jinja for package_rsync_removed for RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Rename option (Jan Černý) 2024-11-27 21:46:22.280 logging.py DEBUG - Extend `--remove-machine-only` Automatus option (Jan Černý) 2024-11-27 21:46:22.280 logging.py DEBUG - Change platform of no_empty_passwords (Jan Černý) 2024-11-27 21:46:22.280 logging.py DEBUG - Add the system_with_kernel CPE platform (Jan Černý) 2024-11-27 21:46:22.280 logging.py DEBUG - [ubuntu] Set the default behaviour of AppArmor to enforce (wqian) 2024-11-27 21:46:22.280 logging.py DEBUG - Set proper package name for service_cron_enabled (Milan Lysonek) 2024-11-27 21:46:22.280 logging.py DEBUG - Move rpm verify rules to use --restore (Matthew Burket) 2024-11-27 21:46:22.280 logging.py DEBUG - Fix cron service name for RHEL distros (Milan Lysonek) 2024-11-27 21:46:22.280 logging.py DEBUG - Bump docker/setup-buildx-action from 3.7.0 to 3.7.1 (dependabot[bot]) 2024-11-27 21:46:22.280 logging.py DEBUG - Move package_rear_installed to related rules in e8 (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove package_dhcp_removed from all RHEL 10 profiles (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Create CIS rules for login banners (Jan Černý) 2024-11-27 21:46:22.282 logging.py DEBUG - Defined notes for BSI SYS.1.6.A10,11 and APP.4.4.A12 (Benjamin Ruland) 2024-11-27 21:46:22.282 logging.py DEBUG - Rename cron package to cronie for RHEL10 product (Milan Lysonek) 2024-11-27 21:46:22.282 logging.py DEBUG - Refined controls for BSI APP.4.4.A17 according to review (Benjamin Ruland) 2024-11-27 21:46:22.282 logging.py DEBUG - Added note changes from review for BSI APP.4.4.A17 (Benjamin Ruland) 2024-11-27 21:46:22.282 logging.py DEBUG - Defined notes and rules for BSI APP.4.4.A17 (Benjamin Ruland) 2024-11-27 21:46:22.282 logging.py DEBUG - Bump docker/setup-buildx-action from 3.6.1 to 3.7.0 (dependabot[bot]) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove enable_dracut_fips_module from RHEL 10 profiles (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Update e8 crypto policy to default_policy (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - In RHEL 10 CIS move to default_policy for crypto policy (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Add package_kea_removed to ANSSI and CIS profiles for RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Add new rule package_kea_removed (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Consider the option policy product to remain None (teacup-on-rockingchair) 2024-11-27 21:46:22.282 logging.py DEBUG - Add OL into jinja conditionals (Armando Acosta) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove gnome_gdm_disable_xdmcp from RHEL 10 CIS (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove dconf_gnome_remote_access_* from RHEL 10 HIPAA (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Update install_smartcard_packages for RHEL10 (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove package_talk-server_removed from RHEL 10 ANSSI (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove rng-tools packages as they are no longer needed (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove ypserv from RHEL 10 profiles (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Remove ypbind rules from RHEL10 (Matthew Burket) 2024-11-27 21:46:22.282 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A21 (sluetze) 2024-11-27 21:46:22.282 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A20 (sluetze) 2024-11-27 21:46:22.282 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A19 (sluetze) 2024-11-27 21:46:22.283 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A18 (sluetze) 2024-11-27 21:46:22.283 logging.py DEBUG - Fix issue with ambiguity of control product and partial match of product names vs product specific controls (teacup-on-rockingchair) 2024-11-27 21:46:22.283 logging.py DEBUG - modify profile stability data (Vojtech Polasek) 2024-11-27 21:46:22.283 logging.py DEBUG - add one rule and a note to cis control file (Vojtech Polasek) 2024-11-27 21:46:22.283 logging.py DEBUG - Remove sendmail from RHEL 10 profiles (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - RHEL 9 STIG: change var_networkmanager_dns_mode to "default" (Vojtech Polasek) 2024-11-27 21:46:22.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - RHEL 10 ISM_O: add back enable_fips_mode rule (Vojtech Polasek) 2024-11-27 21:46:22.283 logging.py DEBUG - Bump docker/build-push-action from 6.7.0 to 6.9.0 (dependabot[bot]) 2024-11-27 21:46:22.283 logging.py DEBUG - Add CCI to package_postfix_installed (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - Update tftp_uses_secure_mode_systemd based on feedback #12436 (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - New rule tftp_uses_secure_mode_systemd (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - Adjust tests based on feedback in #12433 (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - Add SCE check to service_disabled template (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Document SCE in service_enabled template docs (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Add agent_mfetpd_running and package_mcafeetp_installed back to RHEL9 benchmark (Milan Lysonek) 2024-11-27 21:46:22.283 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.4 to 4.6.8 (dependabot[bot]) 2024-11-27 21:46:22.283 logging.py DEBUG - Add hipaa reference to sshd_use_directory_configuration (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - Extract method _find_content_dirs (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Move variable local_env_yaml (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Extract method _build_rule (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Extract method dump_metadata (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Update PCI-DSS profiles for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update title and description in requirement 12.9.1 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update title of requirement 12.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Increment title in requirement 11.3.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Minor update in title of requirement 9.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update title in requirement 8.4.3 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update title of requirement 8.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Replace account by ID in requirement 8.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update description of requirement 6.4.3 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update description in requrement 6.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Simplify description of requirement 5.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update description of requirement 3.5.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Simplify code (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Move build_templated_sce_check (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Remove missing references ctest (Milan Lysonek) 2024-11-27 21:46:22.283 logging.py DEBUG - Extract method _build_static_sce_check (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Update requirement 3.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Convert function to a class (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Replace retained by stored in 3.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Update PCI-DSS version in control file (Marcus Burghardt) 2024-11-27 21:46:22.283 logging.py DEBUG - Remove unused code (Jan Černý) 2024-11-27 21:46:22.283 logging.py DEBUG - Move daemon.* to /var/log/messages (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - add aide_conf_path in debian12 product (Alexandre Skrzyniarz) 2024-11-27 21:46:22.283 logging.py DEBUG - update documentation for Debian case in service_chronyd_or_ntpd_enabled rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.283 logging.py DEBUG - add Debian support for service_chronyd_enabled (Alexandre Skrzyniarz) 2024-11-27 21:46:22.283 logging.py DEBUG - add Debian support for aide_verify_ext_attributes (Alexandre Skrzyniarz) 2024-11-27 21:46:22.283 logging.py DEBUG - add Debian support for aide_verify_acls (Alexandre Skrzyniarz) 2024-11-27 21:46:22.283 logging.py DEBUG - update password length requirements for ism_o secret and top secret levels (Vojtech Polasek) 2024-11-27 21:46:22.283 logging.py DEBUG - add value 17 to xccdf variables configuring minimum password length (Vojtech Polasek) 2024-11-27 21:46:22.283 logging.py DEBUG - Update CCI for configure_crypto_policy (Matthew Burket) 2024-11-27 21:46:22.283 logging.py DEBUG - Update CCIs for dconf_gnome_disable_autorun (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Remove RHEL-09-211025 from the STIG (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Rename Fedora TF job to make it more accurate (Milan Lysonek) 2024-11-27 21:46:22.284 logging.py DEBUG - Prevent matching multiple test plans via tmt_plan regex EOL check (Milan Lysonek) 2024-11-27 21:46:22.284 logging.py DEBUG - Introduce /static-checks CI also for all Fedora versions (Milan Lysonek) 2024-11-27 21:46:22.284 logging.py DEBUG - Minor wording fixes in comments (Marcus Burghardt) 2024-11-27 21:46:22.284 logging.py DEBUG - Remove unused variable included_checks_count (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Extract build_templated_sce_check (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Extract method _add_ocil_check_element (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Extract method _add_oval_check_element (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Extract method _add_sce_check_element (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Allow rules to have both SCE and OVAL (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Fix broken code (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Add SCE check to service_enabled template (Jan Černý) 2024-11-27 21:46:22.284 logging.py DEBUG - Rework jinja condition in bash script (teacup-on-rockingchair) 2024-11-27 21:46:22.284 logging.py DEBUG - Add new rule chrony_set_nts (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Move /etc/chrony.keys to root:chrony (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Use /proc/sys/crypto/fips_enabled everywhere in enable_fips_modes (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - modify test scenarios of grub2_argument template so that cases when XCCDF variable is used is are handled properly (Vojtech Polasek) 2024-11-27 21:46:22.284 logging.py DEBUG - Revert "Add tools used for updating CCIs" (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Add tools used for updating CCIs (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Update rule CCI from RHEL 9 STIG V2R1 (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Update DISA CCI numbers for RHEL V2R1 (Matthew Burket) 2024-11-27 21:46:22.284 logging.py DEBUG - Remove duplicated tests (Marcus Burghardt) 2024-11-27 21:46:22.284 logging.py DEBUG - Fix the assumption of OVAL check (Marcus Burghardt) 2024-11-27 21:46:22.284 logging.py DEBUG - Use template for sshd_set_maxstartups (Marcus Burghardt) 2024-11-27 21:46:22.284 logging.py DEBUG - Make test scenarios more robust (Marcus Burghardt) 2024-11-27 21:46:22.284 logging.py DEBUG - Remove hard-coded values (Marcus Burghardt) 2024-11-27 21:46:22.284 logging.py DEBUG - Also consider SSH drop-in files (Marcus Burghardt) 2024-11-27 21:46:22.285 logging.py DEBUG - Minor improvements for readability (Marcus Burghardt) 2024-11-27 21:46:22.285 logging.py DEBUG - exclude some problematic rules from ism_o rhel10 profiles (Vojtech Polasek) 2024-11-27 21:46:22.285 logging.py DEBUG - enable Ansible remediation for rhel10 product (Vojtech Polasek) 2024-11-27 21:46:22.285 logging.py DEBUG - Update rule description (Marcus Burghardt) 2024-11-27 21:46:22.285 logging.py DEBUG - OCP4 fix CI assertion (Vincent Shen) 2024-11-27 21:46:22.285 logging.py DEBUG - Disable enable_dracut_fips_module check for FIPS (Matthew Burket) 2024-11-27 21:46:22.285 logging.py DEBUG - Added a file to support SLE Micro (rchikov) 2024-11-27 21:46:22.285 logging.py DEBUG - Updated 6 rules to support SLE Micro (rchikov) 2024-11-27 21:46:22.285 logging.py DEBUG - Ensure that audit rules are ready for RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.285 logging.py DEBUG - Minor update to default CIS banner (Marcus Burghardt) 2024-11-27 21:46:22.285 logging.py DEBUG - The /etc/system-fips file was depcreated in RHEL 9. (Matthew Burket) 2024-11-27 21:46:22.285 logging.py DEBUG - Update conflicts for sysctl_kernel_core_pattern on RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.285 logging.py DEBUG - Add CPE platforms to auditing rules (Matthew Burket) 2024-11-27 21:46:22.285 logging.py DEBUG - modify test scenarios to use the new common.sh script efficiently (Vojtech Polasek) 2024-11-27 21:46:22.285 logging.py DEBUG - Adjust zipl_bls_entries_option template remedation to allow RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.285 logging.py DEBUG - rewrite the common.sh helper script (Vojtech Polasek) 2024-11-27 21:46:22.285 logging.py DEBUG - grub2_vsyscall_argument should only be applicable to x86_64 (Matus Marhefka) 2024-11-27 21:46:22.285 logging.py DEBUG - modify the RHEL 10 profile so that it is greenafter remediation (Vojtech Polasek) 2024-11-27 21:46:22.285 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.3 to 7.0.5 (dependabot[bot]) 2024-11-27 21:46:22.285 logging.py DEBUG - OCP4: Fix resource quota (Vincent Shen) 2024-11-27 21:46:22.285 logging.py DEBUG - Bring bash version in-sync with Ansible (Dmitry Makovey) 2024-11-27 21:46:22.285 logging.py DEBUG - Update rationale for chronyd_server_directive (Matthew Burket) 2024-11-27 21:46:22.285 logging.py DEBUG - Remove ineffective flag "-L" for chown (wqian) 2024-11-27 21:46:22.285 logging.py DEBUG - Remove ineffective flag "-L" for chgrp (wqian) 2024-11-27 21:46:22.285 logging.py DEBUG - rename or remove test scenarios of grub2_audit_argument rule (Vojtech Polasek) 2024-11-27 21:46:22.285 logging.py DEBUG - Update rule dir_ownership_library_dirs in sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule dir_group_ownership_library_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule root_permissions_syslibrary_files to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule file_ownership_library_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule file_permissions_library_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule dir_permissions_library_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule accounts_passwords_pam_tally2 to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule banner_etc_issue to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule dir_permissions_binary_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule sshd_enable_warning_banner to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - add new product kylinserver10 supporting (zhaoyun) 2024-11-27 21:46:22.286 logging.py DEBUG - Move snmpd_no_rwusers to use systemctl for restart (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - dnf erase -> dnf remove (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Move snmpd_use_newer_protocol to use systemctl for restart (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Update snmpd_not_default_password to use systemctl (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove sshd_allow_only_protocol2 from RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Don't autoremove packages on dnf package uninstall (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove zipl_vsyscall_argument from OSPP control file. (Gabriel Becker) 2024-11-27 21:46:22.286 logging.py DEBUG - Add new version of conntrols file for SYS.1.6.A14 (lichtblaugue) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove excess quotes (Jan Černý) 2024-11-27 21:46:22.286 logging.py DEBUG - exclude more sssd related rules as they are being modified right now (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.2 to 7.0.3 (dependabot[bot]) 2024-11-27 21:46:22.286 logging.py DEBUG - Change directory_permissions_etc_iptables to 700 (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Add package install instructions to package_tmux_installed (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove configure_bashrc_exec_tmux from RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Fix jq filters for resource request limits (Watson Sato) 2024-11-27 21:46:22.286 logging.py DEBUG - Fix typo in rule id (Watson Sato) 2024-11-27 21:46:22.286 logging.py DEBUG - product_stability: Add avahi and dconf to platform_package_overrides (wqian) 2024-11-27 21:46:22.286 logging.py DEBUG - product.yml: Add avahi and dconf to platform_package_overrides (wqian) 2024-11-27 21:46:22.286 logging.py DEBUG - Update assertions for kubelet-client-cert|key rules (Lance Bragstad) 2024-11-27 21:46:22.286 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.1 to 7.0.2 (dependabot[bot]) 2024-11-27 21:46:22.286 logging.py DEBUG - Add missing CCEs for RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Update RHEL 9 STIG Stable Profiles (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove rules longer in the RHEL 9 STIG as V2R1 (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove package_MFEhiplsm_installed from RHEL 10 STIG (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - Update selections for RHEL 10 STIG (Matthew Burket) 2024-11-27 21:46:22.286 logging.py DEBUG - remove rule accounts_password_pam_retry from rhel10 profiles (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - revise other test scenarios of grub2_argument template (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - add test scenarios testing newly introduced OVAL tests (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - modify the oval of grub2_argument template so that it is aligned with argument parsing in RHEL 8 (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove test.profile from OCP4 profiles (Lance Bragstad) 2024-11-27 21:46:22.286 logging.py DEBUG - merge JInja booleans for checking of referenced options in /boot/loader/entries and options in grubenv (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - ad missing cces to rules (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - remove override of password hashing algorithm (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - rhel10: remove special dedicated group owning ssh keys (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - perform modifications specific to rhel10 product (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - modify Aide config directive for RHEL 10 (Vojtech Polasek) 2024-11-27 21:46:22.286 logging.py DEBUG - Update assertions for 4.14 cni conf permissions (Watson Sato) 2024-11-27 21:46:22.286 logging.py DEBUG - Update assertions for 4.15 cni conf permissions (Watson Sato) 2024-11-27 21:46:22.286 logging.py DEBUG - PCI-DSS-4-0: update cipher suite ingress controller assertion (Watson Sato) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule aide_scan_notification to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Update the cce-slmicro5-avail for rule aide_periodic_checking_systemd_timer (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule aide_periodic_checking_systemd_timer to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Remove rule aide_periodic_cron_checking from sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.286 logging.py DEBUG - Add rule smartcard_pam_enabled to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule package_audit-audispd-plugins_installed to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Final adjustments to the OSPP control file based on RHEL9. (Gabriel Becker) 2024-11-27 21:46:22.287 logging.py DEBUG - Update OSPP reference for audit according to version 4.3. (Gabriel Becker) 2024-11-27 21:46:22.287 logging.py DEBUG - Add missing OSPP RHEL10 rules. (Gabriel Becker) 2024-11-27 21:46:22.287 logging.py DEBUG - Remove ospp references from rules that are not present in RHEL9 OSPP. (Gabriel Becker) 2024-11-27 21:46:22.287 logging.py DEBUG - Remove rules from RHEL10 OSPP profile that are not present in RHEL9. (Gabriel Becker) 2024-11-27 21:46:22.287 logging.py DEBUG - Fix e2e manual remediation for resource quota (Vincent Shen) 2024-11-27 21:46:22.287 logging.py DEBUG - CMP-2400: exclusion of the namespace for rule ocp4-resource-requests-quota-per-project (Vincent Shen) 2024-11-27 21:46:22.287 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.0 to 7.0.1 (dependabot[bot]) 2024-11-27 21:46:22.287 logging.py DEBUG - Update RHEL 9 STIG to V2R1 (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - Improve Import DISA STIG (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - Update STIG Policy files based on RHEL 9 STIG V2R1 (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - CMP-2196: Update instructions for ingresscontroller TLS ciphers (Lance Bragstad) 2024-11-27 21:46:22.287 logging.py DEBUG - Update RHEL 9 STIG reference file to V2R1 (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - Fix utils/import_disa_stig.py (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - Move vuln_discussion to vuldiscussion (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - Remove script utils/clean_up_psc.py (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - Add script to move vuln_discussion to vuldiscussion (Matthew Burket) 2024-11-27 21:46:22.287 logging.py DEBUG - Update assertions for api-server-kubelet-client-cert|key rule (Lance Bragstad) 2024-11-27 21:46:22.287 logging.py DEBUG - OCPBUGS-304: exclude rhacs-operator namespace from resource limit rules (Vincent Shen) 2024-11-27 21:46:22.287 logging.py DEBUG - align mentions of auditd.service within the auditing group description (Vojtech Polasek) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule file_permissions_ungroupowned to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule no_files_unowned_by_user to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule partition_for_var to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule partition_for_home to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule dir_perms_world_writable_system_owned_group to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule mount_option_noexec_remote_filesystems to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule mount_option_nosuid_remote_filesystems to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.287 logging.py DEBUG - Add rule mount_option_nosuid_removable_partitions to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.288 logging.py DEBUG - Add rule mount_option_home_nosuid to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.288 logging.py DEBUG - Add rule accounts_user_dot_no_world_writable_programs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.288 logging.py DEBUG - Add rule accounts_user_home_paths_only to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.288 logging.py DEBUG - remove setup of augenrules-like environment in audit_rules_privileged_commands template (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios for audit_rules_usergroup_modification (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios of audit_rules_session_events (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios of audit_rules_networkconfig_modification (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios of audit_rules_mac_modification_usr_share (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios for rule audit_rules_mac_modification (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios of audit_rules_immutable (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios for rule audit_rules_privileged_commands_modprobe (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align rule audit_rules_privileged_commands (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align rule audit_rules_kernel_module_loading (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios for audit_rules_unsuccessful_file_modification (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align test scenarios for directory_access_var_log_audit (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align template audit_rules_watch (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align template audit_rules_usergroup_modification (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align rule audit_rules_login_events_faillock (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - modify template of audit_login_events (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - align tests for audit_rules_privileged_commands template (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - add new macro file for test scenarios (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - modify the check which checks if augenrules is used (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - modify the OVAL check which checks if auditctl is used to load rules (Vojtech Polasek) 2024-11-27 21:46:22.288 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.1.0 to 7.0.0 (dependabot[bot]) 2024-11-27 21:46:22.288 logging.py DEBUG - Update assertions for ingress controller TLS check (Lance Bragstad) 2024-11-27 21:46:22.290 logging.py DEBUG - Update assertions for PCI-DSS profile (Lance Bragstad) 2024-11-27 21:46:22.290 logging.py DEBUG - Update ssg/build_derivatives to avoid duplication (Armando Acosta) 2024-11-27 21:46:22.290 logging.py DEBUG - Fix issues found in review of #12348 (Matthew Burket) 2024-11-27 21:46:22.290 logging.py DEBUG - Added remediation and tests for the rule permissions_local_var_log_audit (rchikov) 2024-11-27 21:46:22.290 logging.py DEBUG - Updated rules to support SLE Micro (rchikov) 2024-11-27 21:46:22.290 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.3 to 4.6.4 (dependabot[bot]) 2024-11-27 21:46:22.290 logging.py DEBUG - Update rule.yml (Rumen) 2024-11-27 21:46:22.290 logging.py DEBUG - Updates related to the rule permissions_local_var_log_audit (rchikov) 2024-11-27 21:46:22.290 logging.py DEBUG - Hide CJIS profile for OL8 (Edgar Aguilar) 2024-11-27 21:46:22.290 logging.py DEBUG - fix typo (sluetze) 2024-11-27 21:46:22.290 logging.py DEBUG - add rule sysctl_kernel_modules_disabled to unselect_rules_list (Vojtech Polasek) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule partition_for_var_log_audit to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule sudo_restrict_privilege_elevation_to_authorized to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule is_fips_mode_enabled to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule kernel_module_usb-storage_disabled to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule account_temp_expire_date to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule account_emergency_admin to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule account_unique_id to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule grub2_uefi_password to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule grub2_password to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule accounts_passwords_pam_tally2 to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rule accounts_password_all_shadowed_sha512 to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.290 logging.py DEBUG - Updated packages related to openssh to support slem (rchikov) 2024-11-27 21:46:22.290 logging.py DEBUG - Bump actions/setup-python from 5.1.1 to 5.2.0 (dependabot[bot]) 2024-11-27 21:46:22.290 logging.py DEBUG - Fix CI for XLSX RHEL9 build (Matthew Burket) 2024-11-27 21:46:22.290 logging.py DEBUG - Should fix #12349 (Nicolas SAID) 2024-11-27 21:46:22.290 logging.py DEBUG - Clean up titles in new SRG control files from V3R1 (Matthew Burket) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rules to SRG-OS-000730-GPOS-00190 (Matthew Burket) 2024-11-27 21:46:22.290 logging.py DEBUG - Add rules to SRG-OS-000755-GPOS-00220 (Matthew Burket) 2024-11-27 21:46:22.290 logging.py DEBUG - Fix up package_install_sudo PSC content (Matthew Burket) 2024-11-27 21:46:22.290 logging.py DEBUG - Add package_dnf-automatic_installed to SRG-OS-000805-GPOS-00260.yml (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Add dnf-automatic_apply_updates to SRG-OS-000805-GPOS-00260 (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Update SRG GPOS to V3R1 (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Remove in the project that SRG GPSO V3R1 removed (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Add new controls from SRG GPOS V3R1 (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Update titles for upgrade to SRG GPOS to V3R1 (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Fix double sshd_disable_empty_passwords in controls/hipaa.yml (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Update profile stability references for pci-dss (Marcus Burghardt) 2024-11-27 21:46:22.291 logging.py DEBUG - Remove exclusion for rules already compatible with RHEL 10 (Marcus Burghardt) 2024-11-27 21:46:22.291 logging.py DEBUG - Remove ip6tables rule from pcidss RHEL 10 (Marcus Burghardt) 2024-11-27 21:46:22.291 logging.py DEBUG - Confirm rules not applicable to RHEL 10 (Marcus Burghardt) 2024-11-27 21:46:22.291 logging.py DEBUG - Clean comments based on RHEL 9 (Marcus Burghardt) 2024-11-27 21:46:22.291 logging.py DEBUG - Inform correct hashing algorithm for pcidss rhel10 (Marcus Burghardt) 2024-11-27 21:46:22.291 logging.py DEBUG - Include authselect variable in pcidss control file (Marcus Burghardt) 2024-11-27 21:46:22.291 logging.py DEBUG - Update OL9 ism_o profile comment (Edgar Aguilar) 2024-11-27 21:46:22.291 logging.py DEBUG - Update comments in OL9 ISM profile (Edgar Aguilar) 2024-11-27 21:46:22.291 logging.py DEBUG - Update ism control (Edgar Aguilar) 2024-11-27 21:46:22.291 logging.py DEBUG - Create ism profile for OL9 (Edgar Aguilar) 2024-11-27 21:46:22.291 logging.py DEBUG - Remove sshd_set_keepalive_0 from RHEL 10 control file (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Add variables to HIPAA control (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Allow kerb5 Auth for RHEL 10 HIPAA (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Remove SSH 2 Config From RHEL 10 HIPAA (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Exclude auditd_audispd_syslog_plugin_activated from RHEL 10 HIPAA (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Exclude more package rules for RHEL 10 HIPAA (Matthew Burket) 2024-11-27 21:46:22.291 logging.py DEBUG - Add test for imports of 'all' controls (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Import OCP4 CIS rather than extending it (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Add the references to the selected rules (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Expand control processing to 'all' key (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Update PCI-DSS platform profile filters (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Update version-less PCI-DSS profile to v4.0 (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Add pcidss4 reference to OCP4 control (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Remove ocp4 rule from rhel control (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Update of the rule encrypt_partitions to support SLEM (rchikov) 2024-11-27 21:46:22.291 logging.py DEBUG - etcd_unique_ca: update assertion file (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - security-profile-operator-exists: update assertion (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Add PCI-DSS v4.0 assertion files (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Enable these rules on OCP 4.17 (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Align CCE availability (teacup-on-rockingchair) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_usergroup_modification_opasswd to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_usergroup_modification_shadow to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_usergroup_modification_group to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Fix SLEM-05-654175 (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_dac_modification_umount2 to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_dac_modification to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_dac_modification_fchmod to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_dac_modification_lchown to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - add rule audit_rules_dac_modification_fremovexattr to slmicro5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Update installed_OS_is_rhel8 (Armando Acosta) 2024-11-27 21:46:22.291 logging.py DEBUG - Update installed_OS_is_rhel9 (Armando Acosta) 2024-11-27 21:46:22.291 logging.py DEBUG - Add test to ensure_oracle_gpgkey_installed (Armando Acosta) 2024-11-27 21:46:22.291 logging.py DEBUG - Align with PR#12331 (teacup-on-rockingchair) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule package_telnet-server_removed to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule package_audit_installed to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule vlock_installed to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule gnome_gdm_disable_unattended_automatic_login to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule accounts_umask_etc_login_defs to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule network_sniffer_disabled to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule file_permissions_sshd_private_key to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule pam_disable_automatic_configuration to SLE Micro 5 stig profile (svet-se) 2024-11-27 21:46:22.291 logging.py DEBUG - chronyd_or_ntpd_specify_remote_server: update assertion results (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Remove template option (Jan Černý) 2024-11-27 21:46:22.291 logging.py DEBUG - etcd_unique_ca: updated assertion results (Watson Sato) 2024-11-27 21:46:22.291 logging.py DEBUG - Update cce-slmicro5-avail.txt (Rumen) 2024-11-27 21:46:22.291 logging.py DEBUG - Updated rules based on template service_disabled to support slem (rchikov) 2024-11-27 21:46:22.291 logging.py DEBUG - Updated rules based on template service_enabled to support SLEM (rchikov) 2024-11-27 21:46:22.291 logging.py DEBUG - Update oval file to include OL9 (Armando Acosta) 2024-11-27 21:46:22.291 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.291 logging.py DEBUG - Updated 10 rules to support SLE Micro (rchikov) 2024-11-27 21:46:22.291 logging.py DEBUG - Add rule sudoers_validate_passwd 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule accounts_no_uid_except_zero to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule sudoers_default_includedir to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule no_shelllogin_for_systemaccounts to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule accounts_authorized_local_users to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule display_login_attempts to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule cracklib_accounts_password_pam_retry to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Bump paambaati/codeclimate-action from 8.0.0 to 9.0.0 (dependabot[bot]) 2024-11-27 21:46:22.292 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.292 logging.py DEBUG - Update oval condition to include OL7 & OL9 (Armando Acosta) 2024-11-27 21:46:22.292 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.292 logging.py DEBUG - Update tests (Armando Acosta) 2024-11-27 21:46:22.292 logging.py DEBUG - Update ansible remediation to include OL9 (Armando Acosta) 2024-11-27 21:46:22.292 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule audit_rules_session_events_btmp to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule audit_rules_session_events_wtmp to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Add rule audit_rules_session_events_utmp to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.292 logging.py DEBUG - Fix remediation subscription name (Watson Sato) 2024-11-27 21:46:22.292 logging.py DEBUG - etcd_unique-ca: Adapt CA bundle cert path for 4.17 (Watson Sato) 2024-11-27 21:46:22.292 logging.py DEBUG - Add OCP4 STIG V2R1 profile (Watson Sato) 2024-11-27 21:46:22.292 logging.py DEBUG - use sshd_keep_alive in debian standard profile (Alexandre Skrzyniarz) 2024-11-27 21:46:22.292 logging.py DEBUG - Fix spo-install metadata indentation (Watson Sato) 2024-11-27 21:46:22.292 logging.py DEBUG - Fix manual remediation for SPO rule (Lance Bragstad) 2024-11-27 21:46:22.292 logging.py DEBUG - add firewalld rule (sluetze) 2024-11-27 21:46:22.292 logging.py DEBUG - add manual policy to check for podLifetime (sluetze) 2024-11-27 21:46:22.292 logging.py DEBUG - add check for the mode (sluetze) 2024-11-27 21:46:22.292 logging.py DEBUG - Add reference file for OCP4 STIG V2R1 (Watson Sato) 2024-11-27 21:46:22.292 logging.py DEBUG - Add forgotten e2e manual remediation (Watson Sato) 2024-11-27 21:46:22.292 logging.py DEBUG - fix filter and entity_check as suggested (sluetze) 2024-11-27 21:46:22.292 logging.py DEBUG - Assign SLmicro 5 CCE ids for the added rules (teacup-on-rockingchair) 2024-11-27 21:46:22.294 logging.py DEBUG - Add some missing stig related rules to slmicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule wireless_disable_interfaces to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule aide_build_database to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule package_aide_installed to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule aide_check_audit_tools to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule dir_system_commands_group_root_owned to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule file_groupownership_system_commands_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule dir_system_commands_root_owned to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule file_ownership_binary_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule file_permissions_binary_dirs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule permissions_local_audit_binaries to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule accounts_password_set_max_life_existing to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule accounts_maximum_age_login_defs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule accounts_password_set_min_life_existing to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule accounts_minimum_age_login_defs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule set_password_hashing_min_rounds_logindefs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Fix rule install_smartcard_packages (svet-se) 2024-11-27 21:46:22.294 logging.py DEBUG - Add rule install_smartcard_packages to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule set_password_hashing_algorithm_systemauth to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule smartcard_configure_ca to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule auditd_data_disk_full_action to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule postfix_client_configure_mail_alias to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule auditd_data_retention_action_mail_acct to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Added manual and updated version in the stig profile. (Eric Berry) 2024-11-27 21:46:22.295 logging.py DEBUG - Add insensitive option to ansible_lineinfile macro (yunimoo) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule clean_components_post_updating to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sssd_offline_cred_expiration to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sssd_memcache_timeout to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule smartcard_configure_cert_checking to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sudo_require_reauthentication to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sudo_remove_no_authenticate to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sudo_remove_nopasswd to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sudo_require_authentication to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add ansible remediation for audispd plugin UBTU-20-010216 (yunimoo) 2024-11-27 21:46:22.295 logging.py DEBUG - Fix chronyd remote server filepath dir regex (Watson Sato) 2024-11-27 21:46:22.295 logging.py DEBUG - update ssg_test_suite to add debian case (Alexandre Skrzyniarz) 2024-11-27 21:46:22.295 logging.py DEBUG - add debian12 automatus workflow (Alexandre Skrzyniarz) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sshd_use_approved_kex_ordered_stig to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule file_permissions_local_var_log_messages to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sshd_set_keepalive to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule dir_perms_world_writable_sticky_bits to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Update 10-oval.jinja macro to support SLE Micro 5 (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sshd_set_idle_timeout to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sshd_use_approved_macs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule sshd_use_approved_macs_ordered_stig to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule set_password_hashing_algorithm_logindefs to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule account_disable_post_pw_expiration to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule file_etc_security_opasswd to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Update ensure_gpgcheck_globally_activated sle micro5 cce number (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule ensure_gpgcheck_globally_activated to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule aide_periodic_cron_checking to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule auditd_data_retention_space_left_action to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule auditd_data_retention_space_left_percentage to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule auditd_audispd_configure_remote_server to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule auditd_audispd_encrypt_sent_records to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rule audit_rules_suid_privilege_function to sle micro 5 stig profile (svet-se) 2024-11-27 21:46:22.295 logging.py DEBUG - Update grub2_slub_debug_argument for OL8 (Edgar Aguilar) 2024-11-27 21:46:22.295 logging.py DEBUG - Add test to grub2_bootloader_argument (Edgar Aguilar) 2024-11-27 21:46:22.295 logging.py DEBUG - Add is_substring to grub2_bootloader_argument (Edgar Aguilar) 2024-11-27 21:46:22.295 logging.py DEBUG - Fix "unknown predicate `-L'" Avoid potential conflict flag of -H and -L (wqian) 2024-11-27 21:46:22.295 logging.py DEBUG - Add FIO notification enabled to Req 11.5.2 (Watson Sato) 2024-11-27 21:46:22.295 logging.py DEBUG - Add rooutes_protected_by_tls to Req 4.2.1 (Watson Sato) 2024-11-27 21:46:22.295 logging.py DEBUG - Add kubelet tls ingresscontroller rule to CIS benchmarks (Lance Bragstad) 2024-11-27 21:46:22.295 logging.py DEBUG - Update ciphers in ingress controller remediation (Lance Bragstad) 2024-11-27 21:46:22.295 logging.py DEBUG - Update TLS ciphers for ingress controller rule (Lance Bragstad) 2024-11-27 21:46:22.295 logging.py DEBUG - OCP4: deprecating api_server_api_priority_gate_enabled and api_server_insecure_port (Vincent Shen) 2024-11-27 21:46:22.295 logging.py DEBUG - Fix Windows for OpenSCAP 1.4.0 release (Matthew Burket) 2024-11-27 21:46:22.295 logging.py DEBUG - Fix validation with OpenSCAP 1.4 (Matthew Burket) 2024-11-27 21:46:22.295 logging.py DEBUG - Fix build error in non Ubuntu builds (Eric Berry) 2024-11-27 21:46:22.295 logging.py DEBUG - Update rule assertion for CNI config permissions (Lance Bragstad) 2024-11-27 21:46:22.295 logging.py DEBUG - convert sshd_set_idle_timeout partially to templated rule (Vojtech Polasek) 2024-11-27 21:46:22.295 logging.py DEBUG - Bump docker/build-push-action from 6.6.1 to 6.7.0 (dependabot[bot]) 2024-11-27 21:46:22.295 logging.py DEBUG - Ubuntu 22.04 STIG V2R1 changes (Eric Berry) 2024-11-27 21:46:22.295 logging.py DEBUG - convert sshd_use_priv_separation to templated rule (Vojtech Polasek) 2024-11-27 21:46:22.295 logging.py DEBUG - OCP4 STIG: Drop duplicate audit rules file deletion (Watson Sato) 2024-11-27 21:46:22.295 logging.py DEBUG - OCP4 STIG: Drop duplicate audit rules (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - OCP4 STIG: Remove duplicate usergroup audit rule (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - partially convert sshd_set_max_sessions to templated rule (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - partially convert sshd_set_max_auth_tries to templated rule (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - Fix typo (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - partially convert sshd_set_login_grace_timeout to templated rule (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - modify correct and incorrect value in test scenarios (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - Fix typo in oval of rule installed_OS_is_FIPS_certified (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - OCPBUGS-38314: Update OCIL permissions to be consistent with check (Lance Bragstad) 2024-11-27 21:46:22.296 logging.py DEBUG - Remove the example test file (wqian) 2024-11-27 21:46:22.296 logging.py DEBUG - Create OL10 product (Edgar Aguilar) 2024-11-27 21:46:22.296 logging.py DEBUG - convert sshd_disable_rhosts_rsa to templated rule (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - convert sshd_disable_compression to templated rule (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - convert rule sshd_allow_only_protocol2 to template (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - Add slmicro5 OS as FIPS certified (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule audit_rules_kernel_module_loading_finit to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule audit_rules_kernel_module_loading_delete to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule audit_rules_sysadmin_actions to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule sshd_use_approved_ciphers to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule sshd_use_approved_ciphers_ordered_stig to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule accounts_max_concurrent_login_sessions to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule audit_rules_unsuccessful_file_modification_rename to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule audit_rules_unsuccessful_file_modification_open to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule audit_rules_login_events_lastlog to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule audit_rules_login_events_tallylog to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule file_permissions_sshd_pub_key to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Fix rule dir_permissions_library_dirs title format (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - Add rule permissions_local_var_log to sle micro5 stig profile (svet-se) 2024-11-27 21:46:22.296 logging.py DEBUG - remove rule_id template parameter from rremaining rules (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - apply suggestions provided by Codeclimate (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - modify oval_line_in_file_macros so that the variable is declared independently of the OVAL state. (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - do not specify rule_id as a template parameter. (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - template.py: prevent specification of value and xccdf_variable at the same time (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - document new parameters for the sshd_oval_check macro (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - update the documentation of sshd_lineinfile template. (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - add the datatype parameter to all rules templated with sshd_lineinfile template (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - convert an example rule to templated one; sshd_set_keepalive (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - update test scenarios so that they consider XCCDF variable (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - modify the sshd_lineinfile ansible template to handle variables (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - bash macro set_config_file: essentially allow the value to be an integer as well (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - update sshd_lineinfile bash template (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - modify sshd_lineinfile OVAL template so that it uses XCCDF variable if supplied (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - create new oval macro for lineinfile state which uses XCCDF variable (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - extend template.py of sshd_lineinfile (Vojtech Polasek) 2024-11-27 21:46:22.296 logging.py DEBUG - Extend mount_option_nodev_nonroot_local_partitions (Jan Černý) 2024-11-27 21:46:22.296 logging.py DEBUG - Remove old and broken tldp.org link (Matthew Burket) 2024-11-27 21:46:22.296 logging.py DEBUG - CMP-2463: Requirement 11.6 is not applicable (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - CMP-2463: Requirment 11.5 is partial (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - CMP-2463: Requirement 11.4 is not applicable (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - CMP-2463: Requirement 11.3 is not applicable (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - CMP-2463: Requirement 11.2 is not applicable (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - CMP-2463: Requirement 11.1 is not applicable (Watson Sato) 2024-11-27 21:46:22.296 logging.py DEBUG - Bump docker/build-push-action from 6.5.0 to 6.6.1 (dependabot[bot]) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.10 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.9 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.8 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.7 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.6 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.5 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.4 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.3 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.2 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.1 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - 10.2.2: Collect request bodies for audit (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - Add RHCOS rule to ensure chronyd is running (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rules to watch kube audit log directories (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - Fix issues and typos (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:22.297 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.0.0.pre.rc01 to 5 (dependabot[bot]) 2024-11-27 21:46:22.297 logging.py DEBUG - OCP4: Optimize trusted ca remediation (Vincent Shen) 2024-11-27 21:46:22.297 logging.py DEBUG - Manually build openscap (wqian) 2024-11-27 21:46:22.297 logging.py DEBUG - CMP-2462: Requirement 10.7 is partial (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - CMP-2462: Requirement 10.6 is supported (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - CMP-2462: Requirement 10.5 is supported (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - CMP-2462: Requirement 10.4 manual or not applicable (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - CMP-2462: Requirement 10.3 is partially met (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - CMP-2462: Requirement 10.2 is inherently met (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - CMP-2462: Requirement 10.1 is not applicable (Watson Sato) 2024-11-27 21:46:22.297 logging.py DEBUG - update rule to select all namespaces (sluetze) 2024-11-27 21:46:22.297 logging.py DEBUG - Fix accounts_password_pam_unix_remember tests (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Remove SLES-15-020250 (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Remove SLES-15-020240 (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Remove SLES-15-010001 (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Update DISA STIG manual for SLE15 V2R1 (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Update SLE15 STIG to V2R1 (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Switch to Ubuntu rule (wqian) 2024-11-27 21:46:22.297 logging.py DEBUG - Rule change trigger for workflow (wqian) 2024-11-27 21:46:22.297 logging.py DEBUG - Append CPE_name (wqian) 2024-11-27 21:46:22.297 logging.py DEBUG - Fix podman build (wqian) 2024-11-27 21:46:22.297 logging.py DEBUG - Update usb guard rules for RHCOS4 moderate CI (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - Add OCP and RHCOS assertion files for 4.17 (Lance Bragstad) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_default_forwarding to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_all_forwarding to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv4_ip_forward to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_all_send_redirects to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_default_send_redirects to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_default_accept_redirects to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_all_accept_redirects to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_default_accept_redirects to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_all_accept_redirects to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.297 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_default_accept_source_route to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_default_accept_source_route to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_all_accept_source_route to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_all_accept_source_route to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Add rule sysctl_kernel_randomize_va_space to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Add rule sysctl_kernel_kptr_restrict to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Add rule sysctl_net_ipv4_tcp_syncookies to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Update sysctl template to support slmicro5 product (svet-se) 2024-11-27 21:46:22.298 logging.py DEBUG - Add rule sysctl_kernel_dmesg_restrict to slmicro 5 stig profile (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - updated rule to select all namespaces and look for at least one (sluetze) 2024-11-27 21:46:22.299 logging.py DEBUG - Build empty OVAL (Jan Černý) 2024-11-27 21:46:22.299 logging.py DEBUG - Fix references section in the workshop artificial rule data. (Gabriel Becker) 2024-11-27 21:46:22.299 logging.py DEBUG - firewalld_sshd_port_enabled add zone to all connections (Milan Lysonek) 2024-11-27 21:46:22.299 logging.py DEBUG - Fix quote in bash remediation (Armando Acosta) 2024-11-27 21:46:22.299 logging.py DEBUG - Fix title of var_networkmanager_dns_mode. (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - update debian12 product stability data (Alexandre Skrzyniarz) 2024-11-27 21:46:22.299 logging.py DEBUG - fix regex in sysctl template (Alexandre Skrzyniarz) 2024-11-27 21:46:22.299 logging.py DEBUG - update debian anssi profiles (Alexandre Skrzyniarz) 2024-11-27 21:46:22.299 logging.py DEBUG - update chronyd_specify_remote_server for debian (Alexandre Skrzyniarz) 2024-11-27 21:46:22.299 logging.py DEBUG - Add UOS removal to docs (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Change namespace of cluster-kube-descheduler-operator to default value (lichtblaugue) 2024-11-27 21:46:22.299 logging.py DEBUG - Align available CCEs for slmicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.299 logging.py DEBUG - Add to slmicro5 STIG pam pwhistory remember rule (teacup-on-rockingchair) 2024-11-27 21:46:22.299 logging.py DEBUG - Review kickstart file for test_suite (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Simplify strings formats (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Simplify error function (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Optimize script output (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Simplify handle of ssh pub_key (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Simplify handle of urls (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Remove centos7 and include rhel10 (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Include osinfo option in install_vm.py script (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Password encryption with yescrypt in RHEL 10 (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Review CIS requirements and rules for RHEL 10 (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Fix CCE ids availability (teacup-on-rockingchair) 2024-11-27 21:46:22.299 logging.py DEBUG - Remove more UOS references from the project (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Add STIG rules for slmicro5 covering lib dirs root ownership (teacup-on-rockingchair) 2024-11-27 21:46:22.299 logging.py DEBUG - Update platform value to include OL (Armando Acosta) 2024-11-27 21:46:22.299 logging.py DEBUG - Add platforms back to Automatus Sanity Template Test (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Consolidate ASCS RHEL profiles lastlog via sshd (Marek Haicman) 2024-11-27 21:46:22.299 logging.py DEBUG - Remove uos20 (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Generate a temp certificate for OCP4 Trusted CA remediation (Lance Bragstad) 2024-11-27 21:46:22.299 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A9 (sluetze) 2024-11-27 21:46:22.299 logging.py DEBUG - Minor update to output milestone information (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Update status for CIS 1.2.31 (Lance Bragstad) 2024-11-27 21:46:22.299 logging.py DEBUG - Add package_rng-tools_installed to Fedora OSPP profile (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Add the RHEL9 platform and warnings to RHEL10 for service_rngd_enabled (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Remove installed_OS_is_FIPS_certified from sshd_use_approved_ciphers (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Align release date calculation with documentation (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Review and update the duration section (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Include a section for fixed bugs in changelog (Marcus Burghardt) 2024-11-27 21:46:22.299 logging.py DEBUG - Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 (dependabot[bot]) 2024-11-27 21:46:22.299 logging.py DEBUG - Bump to 0.1.75 (Matthew Burket) 2024-11-27 21:46:22.299 logging.py DEBUG - Order platform applicability directive alphabetically (teacup-on-rockingchair) 2024-11-27 21:46:22.299 logging.py DEBUG - Fix stigid@slmicro5 references (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_privileged_commands_sudo to support slmicro5 (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_privileged_commands_su to support slmicro5 (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_privileged_commands_pam_timestamp_check to support slmicro5 (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_privileged_commands_usermod to support slmicro5 (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_execution_rm to support slmicro5 (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_execution_chcon to support slmicro5 (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_execution_chacl to support slmicro5 (svet-se) 2024-11-27 21:46:22.299 logging.py DEBUG - Update rule audit_rules_execution_setfacl to support slmicro5 (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update rule audit_rules_execution_chmod to support slmicro5 (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update rule audit_rules_privileged_commands_kmod to support slmicro5 (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update rule audit_rules_privileged_commands_modprobe to support slmicro5 (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update rule audit_rules_privileged_commands_rmmod to support slmicro5 (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update rule audit_rules_privileged_commands_insmod to support slmicro5 (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update rule audit_rules_privileged_commands_ssh_agent to support slmicro5 (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update stig_slmicro5.yml format (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Update docs/manual/developer/10_stabilization_phase.md (Marcus Burghardt) 2024-11-27 21:46:22.300 logging.py DEBUG - Update SUSE Linux Enterprise Micro 5 product name (svet-se) 2024-11-27 21:46:22.300 logging.py DEBUG - Clarify stabilization dates process for more predictability (Marcus Burghardt) 2024-11-27 21:46:22.300 logging.py DEBUG - Update products/rhel10/profiles/ospp.profile (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Move bash_coredump_config_set to ini file macro (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Update default profile to not break tailoring files (Marcus Burghardt) 2024-11-27 21:46:22.300 logging.py DEBUG - Update RHEL 8 STIG SCAP Content to V1R13 (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Fix OSPP RHEL 10 description (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.300 logging.py DEBUG - Include CCE for RHEL 10 in service_cups_disabled (Marcus Burghardt) 2024-11-27 21:46:22.300 logging.py DEBUG - Fix description of rule (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Add OCP4 4.21 PCI-DSS assertion files (Watson Sato) 2024-11-27 21:46:22.300 logging.py DEBUG - Make CIS requirements for services more flexible (Marcus Burghardt) 2024-11-27 21:46:22.300 logging.py DEBUG - Disable Kickstart remediation in partition_for_boot (Jan Černý) 2024-11-27 21:46:22.300 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 4.2.2 to 5 (dependabot[bot]) 2024-11-27 21:46:22.300 logging.py DEBUG - fix spacing (sluetze) 2024-11-27 21:46:22.300 logging.py DEBUG - Avoid duplicated fix (wqian) 2024-11-27 21:46:22.300 logging.py DEBUG - Directly modify the configuration Align with STIG Avoid override the whole configuration (wqian) 2024-11-27 21:46:22.300 logging.py DEBUG - Fix insert_before on bash_coredump_config_set (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Add accounts_passwords_pam_tally2_file rule for default pam_tally2 tally directory STIG requirement (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Assign accounts_passwords_pam_tally2_file_selinux to pam component (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Fix description of rule (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Drop allocated CCEs from availabiility list (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Add to STIG for slmicro5 rules for audit of selinux commands (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Add package_audit-audispd-plugins_installed rule for slmicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Add selinux basic support rules for slmicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Add slmicro5 rule package_policycoreutils_installed (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Add some user account related DISA STIG rules for SLE Micro 5.x platform (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Update Contributors for v0.1.74 (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Update Mail Map for 0.1.74 (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Add draft status to all RHEL 10 profiles (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Disable OSPP Profile for RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 (dependabot[bot]) 2024-11-27 21:46:22.300 logging.py DEBUG - Bump docker/login-action from 3.2.0 to 3.3.0 (dependabot[bot]) 2024-11-27 21:46:22.300 logging.py DEBUG - Bump docker/setup-qemu-action from 3.1.0 to 3.2.0 (dependabot[bot]) 2024-11-27 21:46:22.300 logging.py DEBUG - Ensure that Coredump remediations use the ini file format (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Add new test for Coredump (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Remove DEBIAN12 ./build_product (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Bump docker/build-push-action from 6.4.1 to 6.5.0 (dependabot[bot]) 2024-11-27 21:46:22.300 logging.py DEBUG - fix xccdf_variable substitution with dotnotation (sluetze) 2024-11-27 21:46:22.300 logging.py DEBUG - OSPP profile, use Logind session timeout feature instead of tmux. (Gabriel Becker) 2024-11-27 21:46:22.300 logging.py DEBUG - Remove the excluded_files in file_groupowner (wqian) 2024-11-27 21:46:22.300 logging.py DEBUG - Add profile assertion files on OCP 4.12 (Watson Sato) 2024-11-27 21:46:22.300 logging.py DEBUG - Fix audit_rules_privileged_commands_ssh_keysign slmicro5 CCE id (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Drop trailing whitespaces (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated 10 rules to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Add ssh rules to relevent requirements of the STIG spec (teacup-on-rockingchair) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Set SSH Daemon LogLevel to VERBOSE' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Enable SSH Print Last Log' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Enable SSH Warning Banner' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Enable Use of Strict Mode Checking' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Do Not Allow SSH Environment Options' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Disable X11 Forwarding' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Disable SSH Support for User Known Hosts' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Disable SSH Root Login' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Disable SSH Access via Empty Passwords' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Updated rule 'Record Events that Modify User/Group Information - /etc/passwd' to support SLE Micro 5 (rchikov) 2024-11-27 21:46:22.300 logging.py DEBUG - Adjust bash template groupfile_owner to follow symlinks (Matthew Burket) 2024-11-27 21:46:22.300 logging.py DEBUG - Update references disa stig ol8 (Armando Acosta) 2024-11-27 21:46:22.301 logging.py DEBUG - Update stig profile version to v2r1 for ol8 (Armando Acosta) 2024-11-27 21:46:22.301 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.301 logging.py DEBUG - Disable service_enabled templated test for service_bluetooth_disabled (Milan Lysonek) 2024-11-27 21:46:22.301 logging.py DEBUG - Fix Debian 12 CI (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Fix Fedora 43 in Fedora product (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Debian 10 Removal to content notes (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Update rules since Debian 10 was removed (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Update Gating for Debian 10 Removal (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Update build and tests system for Debian 10 removal (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Update docs and Gitpod for Debian 10 removal (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Clean up Debian 10 in shared (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Remove Debian 10 Product (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Update product stability for Fedora (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Add rule into components (wqian) 2024-11-27 21:46:22.301 logging.py DEBUG - Remove the excluded_files (wqian) 2024-11-27 21:46:22.301 logging.py DEBUG - Correct the platform detect As the cis rule indicates: remove iptables-persistent if ufw is installed (wqian) 2024-11-27 21:46:22.301 logging.py DEBUG - bsi_app_4.4 update references and rebase (ermeratos) 2024-11-27 21:46:22.301 logging.py DEBUG - bsi_app_4_4_a21 update (ermeratos) 2024-11-27 21:46:22.301 logging.py DEBUG - bsi_app_4_4_a21 final edit (ermeratos) 2024-11-27 21:46:22.301 logging.py DEBUG - bsi_app_4_4_a21 update (ermeratos) 2024-11-27 21:46:22.301 logging.py DEBUG - bsi_app_4_4_A21 (ermeratos) 2024-11-27 21:46:22.301 logging.py DEBUG - Added SLEM CCE numbers (rchikov) 2024-11-27 21:46:22.301 logging.py DEBUG - Add through Fedora 45 for Fedora CPEs (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Fix components for libdnf-plugin-subscription-manager (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - In RHEL 10 package_{,lib}dnf-plugin-subscription-manager_installe (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - New rule package_libdnf-plugin-subscription-manager_installed (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - CMP-2460: Restrict IdP configurations (Watson Sato) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A8 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A7 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Default the module line to /bin/false in describe_module_disable (wqian) 2024-11-27 21:46:22.301 logging.py DEBUG - Default the module line to /bin/false in ocil_module_disable (wqian) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A6 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Resolve Code Climate problems (Jan Černý) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Kickstart remediation to 'grub2_bootloader_argument' template (Jan Černý) 2024-11-27 21:46:22.301 logging.py DEBUG - Simplify the mount kickstart template (Jan Černý) 2024-11-27 21:46:22.301 logging.py DEBUG - Add newline (Jan Černý) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Kickstart remediation to 'mount' template (Jan Černý) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Kickstart remediation for templated rules (Jan Černý) 2024-11-27 21:46:22.301 logging.py DEBUG - Introduce new remediation type: Kickstart (Jan Černý) 2024-11-27 21:46:22.301 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A5 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.7 to 2.0.8 (dependabot[bot]) 2024-11-27 21:46:22.301 logging.py DEBUG - Move to Default crypto policy for RHEL10 (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Add a minimum cluster stability timeout for OpenShift e2e remediation (Lance Bragstad) 2024-11-27 21:46:22.301 logging.py DEBUG - switch to automatic reference system (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A4 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A3 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A2 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A1 (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - add automatic referencing (sluetze) 2024-11-27 21:46:22.301 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.301 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.6 to 2.0.7 (dependabot[bot]) 2024-11-27 21:46:22.301 logging.py DEBUG - Bump docker/build-push-action from 6.4.0 to 6.4.1 (dependabot[bot]) 2024-11-27 21:46:22.301 logging.py DEBUG - Create file if it doesn't exist for coredump rules (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Exclude package_screen_installed from RHEL 10 OSPP (Matthew Burket) 2024-11-27 21:46:22.301 logging.py DEBUG - Include new variable in individual profiles (Marcus Burghardt) 2024-11-27 21:46:22.301 logging.py DEBUG - Include new variable in control files (Marcus Burghardt) 2024-11-27 21:46:22.301 logging.py DEBUG - Create test scenario for passwords not recently changed (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Improve the OVAL logic in accounts_password_last_change_is_in_past (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Changed_when to false (namoyer10) 2024-11-27 21:46:22.302 logging.py DEBUG - Improve regex in Bash and Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Improve test scenarios for hashing algorithm in PAM files (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Add necessary dependency (wqian) 2024-11-27 21:46:22.302 logging.py DEBUG - Minor updates in Jinja2 conditions (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Add rule sshd_use_approved_ciphers back to RHEL 9 data stream (Jan Černý) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix typos and Title Case for Ansible tasks names (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Honour the no_quotes paramter of oval_check_dropin_file macro (teacup-on-rockingchair) 2024-11-27 21:46:22.302 logging.py DEBUG - Allow multiple control files to add same ref type (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - utils-build_control_from_reference_sanity now only runs on 3.7+ (Matthew Burket) 2024-11-27 21:46:22.302 logging.py DEBUG - CMP-2461: Requirement 9 is not applicable (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - Review and update set_password_hashing_algorithm_libuserconf (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Review of set_password_hashing_algorithm_logindefs (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Update set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Update description in set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Include general warning regarding multiple options (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Update Ansible remedition in alignment to Bash (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Update Bash remediation to use variable (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Include test scenario script for multiple options (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Update existing test scenario scripts with variable (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Update OVAL check to use variable value (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Improve OVAL readability in set_password_hashing_algorithm_systemauth (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Review and update rule description (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Introduce a new variable for pam_unix.so hashing option (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Simplify use of ansible_ensure_pam_module_option macro (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - grub2_bootloader_argument template: make more test scenarios applicable to RHEL 10 (Vojtech Polasek) 2024-11-27 21:46:22.302 logging.py DEBUG - disable anssi R45 in RHEL profiles (Alexandre Skrzyniarz) 2024-11-27 21:46:22.302 logging.py DEBUG - update debian12 anssi profiles (Alexandre Skrzyniarz) 2024-11-27 21:46:22.302 logging.py DEBUG - add rules in anssi-BP-28 R45 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.302 logging.py DEBUG - Bump docker/build-push-action from 6.3.0 to 6.4.0 (dependabot[bot]) 2024-11-27 21:46:22.302 logging.py DEBUG - templates: add rhel10 to conditional macros where rhel9 is mentioned (Vojtech Polasek) 2024-11-27 21:46:22.302 logging.py DEBUG - Update docs/templates/template_reference.md (vojtapolasek) 2024-11-27 21:46:22.302 logging.py DEBUG - Add pre requisite rules for Req 8.2 and 8.3 (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix typos and review comments (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - update test scenarios to not preserve previous file content (Vojtech Polasek) 2024-11-27 21:46:22.302 logging.py DEBUG - Ansible: update regex which checks for the section (Vojtech Polasek) 2024-11-27 21:46:22.302 logging.py DEBUG - Add changed_when line for awk command to allow for idempotency when no results are found. (Nathan Moyer) 2024-11-27 21:46:22.302 logging.py DEBUG - change the file name used in remediations (Vojtech Polasek) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix broken OVAL metadata (Jan Černý) 2024-11-27 21:46:22.302 logging.py DEBUG - Minimal profile will be removed in future authselect versions (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Align authselect profile in test scenarios (Marcus Burghardt) 2024-11-27 21:46:22.302 logging.py DEBUG - Bump actions/setup-python from 5.1.0 to 5.1.1 (dependabot[bot]) 2024-11-27 21:46:22.302 logging.py DEBUG - Remove sshd_use_approved_ciphers from RHEL 9 & 10 Profiles (Matthew Burket) 2024-11-27 21:46:22.302 logging.py DEBUG - Move CS8 file to new name (Matthew Burket) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix file name for UBI testing (Matthew Burket) 2024-11-27 21:46:22.302 logging.py DEBUG - CMP-2460: Requirement 8.6 is supported (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - CMP-2460: Reqs 8.4 and 8.5 are not applicable (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - CMP-2460: Requirement 8.3 is not applicable (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - CMP-2460: Requirement 8.2 is automated (Watson Sato) 2024-11-27 21:46:22.302 logging.py DEBUG - Bump actions/setup-go from 5.0.1 to 5.0.2 (dependabot[bot]) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix installed_OS_is_slmicro5.xml ending (svet-se) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix installed_OS_is_slmicro5.xml ending (svet-se) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix Kernel Runtime Parameter IPv6 Check for SLE Micro 5 (svet-se) 2024-11-27 21:46:22.302 logging.py DEBUG - Update SLE Micro 5 stig.profile SMEs (svet-se) 2024-11-27 21:46:22.302 logging.py DEBUG - Fix installed_OS_is_slmicro5 check (svet-se) 2024-11-27 21:46:22.302 logging.py DEBUG - Update SLE Micro 5 product cpes (svet-se) 2024-11-27 21:46:22.302 logging.py DEBUG - Update SLE Micro 5 product name (svet-se) 2024-11-27 21:46:22.302 logging.py DEBUG - Move OL7 to its own file and set ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - CMP-2460: Requirement 8.1 is not applicable (Watson Sato) 2024-11-27 21:46:22.303 logging.py DEBUG - Ansible macro for PAM more robust for variables (Marcus Burghardt) 2024-11-27 21:46:22.303 logging.py DEBUG - modify the Ansible remediation so that Jinja is not evaluated in the when conditional (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - add documentation for systemd_dropin_configuration template (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - remove the component field from the template instantiation because it is actually not used by the template (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - honor the no_quotes parameter also when remediating (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - update Ansible remediation of the template to be aligned with Bash (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - macro bash_ensure_ini_config: do not put space around equals sign (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - honor the section of the systemd file also in tests and rules (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - systemd_dropin_configuration bash: rewrite using already existing macro (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - systemd_dropin_congiruation template OVAL: honor the section of the systemd config file (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - Minor fix in arguments for macro (Marcus Burghardt) 2024-11-27 21:46:22.303 logging.py DEBUG - Update register names to be more robust (Marcus Burghardt) 2024-11-27 21:46:22.303 logging.py DEBUG - Bash macros for PAM more flexible to variables (Marcus Burghardt) 2024-11-27 21:46:22.303 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.303 logging.py DEBUG - Update STIG profile assertion files (Watson Sato) 2024-11-27 21:46:22.303 logging.py DEBUG - Address code review comments from #12110 (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Fix bash_package_installed macro dkpg-query will return "not-installed" for uninstalled pkg which also passes the grep pattern match (wqian) 2024-11-27 21:46:22.303 logging.py DEBUG - Ensure firewalld is installed for CCN profiles (Milan Lysonek) 2024-11-27 21:46:22.303 logging.py DEBUG - Enable CCN Advanced profile test in CI (Milan Lysonek) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove security_patches_up_to_date from RHEL 10 profiles (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Clean up Red Hat CCE file (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove security_patches_up_to_date from RHEL 10 ANSSI (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Add RHEL 10 cce to packge_screen_installed (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Ensure that RHEL 10 has CCEs (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove the CCEs that OCP4 is using (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Expand the cce_avail_check to ocp4 (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.1 to 4.6.3 (dependabot[bot]) 2024-11-27 21:46:22.303 logging.py DEBUG - Update bash remediation to fix bug (Armando Acosta) 2024-11-27 21:46:22.303 logging.py DEBUG - Add DISA STIG to the title of the profile (teacup-on-rockingchair) 2024-11-27 21:46:22.303 logging.py DEBUG - Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (dependabot[bot]) 2024-11-27 21:46:22.303 logging.py DEBUG - Change default hashing algorithm in ANSSI profiles for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.303 logging.py DEBUG - Bump docker/setup-qemu-action from 3.0.0 to 3.1.0 (dependabot[bot]) 2024-11-27 21:46:22.303 logging.py DEBUG - Bump docker/build-push-action from 6.2.0 to 6.3.0 (dependabot[bot]) 2024-11-27 21:46:22.303 logging.py DEBUG - Add rhcos4 to k8scontent #12123 (Paul Bastide) 2024-11-27 21:46:22.303 logging.py DEBUG - Product name changed from susemicro5 to slmicro5 in cmake products also (teacup-on-rockingchair) 2024-11-27 21:46:22.303 logging.py DEBUG - Improve style not going beyond 100 chars (teacup-on-rockingchair) 2024-11-27 21:46:22.303 logging.py DEBUG - Improve identity provider timeout polling (Lance Bragstad) 2024-11-27 21:46:22.303 logging.py DEBUG - Product name changed from susemicro5 to slmicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.303 logging.py DEBUG - remove logind_session_timeout from RHEL 10 stig_gui profile (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - remove logind_session_timeout from RHEL 9 stig_gui profile (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - remove logind_session_timeout from RHEL 8 stig_gui profile (Vojtech Polasek) 2024-11-27 21:46:22.303 logging.py DEBUG - Bump docker/build-push-action from 6.0.1 to 6.2.0 (dependabot[bot]) 2024-11-27 21:46:22.303 logging.py DEBUG - Bump actions/github-script (dependabot[bot]) 2024-11-27 21:46:22.303 logging.py DEBUG - Fix Dockerfile location for ubi8 test (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Fix CCE conflict for package_nginx_removed (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Sorting subkeys fixing also needs to use humnan sorting (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove security_patches_up_to_date from the SRG GPOS (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Add CCEs to RHEL 10 rules (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Clean up components from removed rules (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove service_irqbalance_enabled (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove no_hesiod_in_nsswitch (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove service_cgconfig_disabled (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove service_messagebus_disabled (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove service_cgred_disabled (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Remove rule service_smartd_disabled (Matthew Burket) 2024-11-27 21:46:22.303 logging.py DEBUG - Fix code climate issues in utils/find_unused_rules.py (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Add docs for utils/find_unused_rules.py (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Add script to list rules taht are not used in any data stream (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Add manual DISA STIG for susemicro5 as reference (teacup-on-rockingchair) 2024-11-27 21:46:22.304 logging.py DEBUG - Rename slemicro to susemicro5 (teacup-on-rockingchair) 2024-11-27 21:46:22.304 logging.py DEBUG - Add rule installed_OS_is_vendor_supported (teacup-on-rockingchair) 2024-11-27 21:46:22.304 logging.py DEBUG - Add skeleton for product support SLE Micro OS (teacup-on-rockingchair) 2024-11-27 21:46:22.304 logging.py DEBUG - Fix test_oval.py due to RHEL 7 removal (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Clean up testing OVAL since RHEL7 is gone (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Update kickstarts for Automatus since RHEL 7 is gone (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove RHEL7 OVAL files (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - RHEL7 -> RHEL9 in testing bash fix (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Clean up testing rules metadata (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Move product unit tests to RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Automatus docs to use RHEL9 (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Clean up tests/stable_profile_ids.py due to RHEL 7 removal (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Clean up missed RHEL 7 conditionals (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove RHEL7 profile stability tests (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Fix ocil text of rule ensure_rtc_utc_configuration (wqian) 2024-11-27 21:46:22.304 logging.py DEBUG - Re-enable runtime check on network related sysctls (Watson Sato) 2024-11-27 21:46:22.304 logging.py DEBUG - Do not run package_audit-libs_installed removal test scenarios (Milan Lysonek) 2024-11-27 21:46:22.304 logging.py DEBUG - Add option to build per rule playbook via build_product script (Milan Lysonek) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove id test from test_platform_from_text_complex_expression (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Convert test_platform_from_text_complex_expression to use features of the expression (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Convert test_platform_from_text_complex_expression to use features of the expression (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove compliance-trestle (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - In F41+ it appears that lxml needs libxml2 and libxslt devel packages (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Use registry.fedoraproject.org/fedora:rawhide for rawhide test (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Add UBI8 Dockerfile and use in place of CS8 in Automatus testing (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove CentOS Stream 8 Test Suite Dockerfile (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Use correct crypto policy in CIS test scenario (Milan Lysonek) 2024-11-27 21:46:22.304 logging.py DEBUG - Fixing rule tile for CMP-2485 (Rutvik) 2024-11-27 21:46:22.304 logging.py DEBUG - Add set_nftables_table to default RHEL 9 profile (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Update profile assertion files (Watson Sato) 2024-11-27 21:46:22.304 logging.py DEBUG - OCPBUGS-33945: select required SSHD timeout rule (Watson Sato) 2024-11-27 21:46:22.304 logging.py DEBUG - Fix PEP8 issue in build-scripts/enable_derivatives.py (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove installed_OS_is_rhel7 (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Update shared conditionals for RHEL 7 removal (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove RHEL 7 from install_vm (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Clean up more vars for RHEL 7 removal (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove RHEL7 from more jinja conditionals (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - RHEL 7 is no longer valid or playbook to role (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove SL7 (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Fix OL7 Workflow (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove unused RHEL 7 constants (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Update platforms in docs and workshops (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Adjust platforms in shared tests for RHEL 7 removal (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove more RHEL 7 platforms in linux_os (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove RHEL 7 only tests (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove RHEL 7 from platforms key in linux_os (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Convert RHEL 7 to -> RHEL 10 in test_matches_platform.py (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove test_simple_multiple_benchmark_cpes (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Fix test_rule.py for ssg_test_suite (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove RHEL7 install command from Automatus (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Remove empty identifiers (Matthew Burket) 2024-11-27 21:46:22.304 logging.py DEBUG - Assert the rhel7 is no longer in the project (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL7 from controleval_metrics (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL7 from cce_avail_check test (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL7 from Jinja expressions in linux_os (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Clean up ANSSI control (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Update templates for removal of RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Clean up workshops (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - rhel7 -> rhel9 in help text in build-scripts (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Clean up Gitpod for RHEL 7 Removal (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - CODEOWNERS Clean Up for RHEL7 Removal (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL7 from ssg/constants.py (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Document RHEL 7 Removal in the Content Notes (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Documentation clean up for RHEL 7 Removal (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL 7 Product Stability (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL 7 control file (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL 7 from shared files (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove rhel 7 identifiers and references (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL 7 From CI (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Remove RHEL 7 product (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - Ensure rules in rhel9 datastream (Marcus Burghardt) 2024-11-27 21:46:22.305 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.305 logging.py DEBUG - OCPBUGS-33948: Clairfy encryption ciphers available for use in OpenShift (Lance Bragstad) 2024-11-27 21:46:22.305 logging.py DEBUG - Add package header with usbguard value (Armando Acosta) 2024-11-27 21:46:22.305 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2024-11-27 21:46:22.305 logging.py DEBUG - CMP-2458: Fix typos (Watson Sato) 2024-11-27 21:46:22.305 logging.py DEBUG - CMP-2459: Requiremtn 7.3 is inherently met (Watson Sato) 2024-11-27 21:46:22.305 logging.py DEBUG - CMP-2459: Requirement 7.2 is inherently met (Watson Sato) 2024-11-27 21:46:22.305 logging.py DEBUG - fix cis_al2023.yml and its manual settings (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Fix typos (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - address additional syntax settings (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - fix syntaxt and CIS content errors (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Replace cis_al2023.yml with a previous version - Rename CIS 2 profile file - Add build/.gitkeep back - Remove AL2023 from building derivates (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - fix and test on al2023 / add minor changes (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - bring cis_al2023.yml back (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Fix indentation/sorting issues (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Revert "remove not needed controls from cis profiles - fix chronyd conf by pointing to aws servers" (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - fix conflicts (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Fix os version check/name on AL2023 (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Add AL2023 product (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - remove not needed controls from cis profiles - fix chronyd conf by pointing to aws servers (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - fix a typo in cis_server_l1.profile (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - fix a typo in cis.profile (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - Add aws fingerprint and fix ensure_amazon_gpgkey_installed (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Complete al2023 setup (add components, controls, linux_os) (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Fix os version check/name on AL2023 (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Build al2023 sle and fedora (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Build al2023 on centos, sle and fedora (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Fix al2023 faling test on CPE validation (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - Add al2023 to gate_fedora.yml - fix a merge conflict (Mirco Santori) 2024-11-27 21:46:22.305 logging.py DEBUG - fix merge conflicts (hipponix) 2024-11-27 21:46:22.305 logging.py DEBUG - fixing e2e assertions (Rutvik) 2024-11-27 21:46:22.305 logging.py DEBUG - CMP-2459: Requirement 7.1 is not applicable (Watson Sato) 2024-11-27 21:46:22.305 logging.py DEBUG - OCPBUGS-32551: swap token inactivity timeout rule (Watson Sato) 2024-11-27 21:46:22.305 logging.py DEBUG - updating platform check and tests (Rutvik) 2024-11-27 21:46:22.305 logging.py DEBUG - OCPBUGS-17828 Improve ocp4-cis-scc-limit-container-allowed-capabilities instructions (Vincent Shen) 2024-11-27 21:46:22.305 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_crl/tests/missing_crl.fail.sh (Matthew Burket) 2024-11-27 21:46:22.305 logging.py DEBUG - fix cces (Vojtech Polasek) 2024-11-27 21:46:22.305 logging.py DEBUG - add file_permission_user_init_files_root and associated variable to RHEL 8 STIG profile (Vojtech Polasek) 2024-11-27 21:46:22.305 logging.py DEBUG - Improve OVAL readability (Marcus Burghardt) 2024-11-27 21:46:22.305 logging.py DEBUG - Pin GitHub actions using frizbee (Jakub Hrozek) 2024-11-27 21:46:22.305 logging.py DEBUG - Adding OCP4 multi-arch support (Vincent Shen) 2024-11-27 21:46:22.305 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.5 to 2.0.6 (dependabot[bot]) 2024-11-27 21:46:22.305 logging.py DEBUG - Install dependency "xmllint" package (wqian) 2024-11-27 21:46:22.305 logging.py DEBUG - CMP-2458: Requirement 6.5 is not applicable (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - CMP-2458: Requiremnt 6.4 is partially supported (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - CMP-2458: Requirement 6.3 is inherently met (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - CMP-2458: Requirement 3.1 (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - CPM-2458: Requirement 6.2 is not applicable (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - CPM-2458: Requirement 6.1 is not applicable (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - Create dconf db directory for local profile (wqian) 2024-11-27 21:46:22.306 logging.py DEBUG - Adjust conflicting requirements (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - Adjust conflicting requirements (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - Minor changes in wording (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - Add tls_cipher_suite, drop etcd cihper rule (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - Adjust PCI-DSS 4.2.1 (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - CMP-2456: Requirement 4.2 is partial (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - CMP-2456: Requirement 4.1 is not applicable (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (dependabot[bot]) 2024-11-27 21:46:22.306 logging.py DEBUG - OCPBUGS-35765: bios-enable-execution-restrictions should be excluded for ppc64le (Paul Bastide) 2024-11-27 21:46:22.306 logging.py DEBUG - Introduce CIS draft profiles for RHEL10 (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - Introduce CIS draft control file for RHEL10 (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - Remove unnecessary flags/options (wqian) 2024-11-27 21:46:22.306 logging.py DEBUG - Update CIS profiles descriptions for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - Bump docker/build-push-action from 5 to 6 (dependabot[bot]) 2024-11-27 21:46:22.306 logging.py DEBUG - Update comment to reference the correct Jira (Lance Bragstad) 2024-11-27 21:46:22.306 logging.py DEBUG - fixing whitespaces in warning section (Rutvik) 2024-11-27 21:46:22.306 logging.py DEBUG - adding warning section (Rutvik) 2024-11-27 21:46:22.306 logging.py DEBUG - coreos_kernel_options: update entries file path (Watson Sato) 2024-11-27 21:46:22.306 logging.py DEBUG - Add tests/validate_automatus_metadata.py to mypy testing (Matthew Burket) 2024-11-27 21:46:22.306 logging.py DEBUG - Clean up Code Climate Issues (Matthew Burket) 2024-11-27 21:46:22.306 logging.py DEBUG - Open the full path for tests/validate_automatus_metadata.py (Matthew Burket) 2024-11-27 21:46:22.306 logging.py DEBUG - Only run validate_automatus_metadata on Python 3.9+ (Matthew Burket) 2024-11-27 21:46:22.306 logging.py DEBUG - Fix findings from validate_automatus_metadata (Matthew Burket) 2024-11-27 21:46:22.306 logging.py DEBUG - Add validate_automatus_metadata to ctest (Matthew Burket) 2024-11-27 21:46:22.306 logging.py DEBUG - Added validate_automatus_metadata (Matthew Burket) 2024-11-27 21:46:22.306 logging.py DEBUG - modifying rule content and selection criteria (Rutvik) 2024-11-27 21:46:22.306 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - Include CCEs in rules selected by CIS RHEL9 v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - Update version in control file (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 7.2 Local User and Group Settings (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 7.1 System File Permissions (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.4 Configure auditd File Access (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.3 Configure auditd Rules (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.2 Configure Data Retention (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.1 Configure auditd Service (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.4 Configure Logfiles (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.3 Configure rsyslog (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.2 Configure journald (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.2.1 Configure systemd-journal-remote (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.1 Configure systemd-journald service (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.1 Configure Integrity Checking (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.4.3 Configure user default environment (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.4.2 Configure root and system accounts and environment (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.4.1 Configure shadow password suite parameters (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.4 Configure pam_unix module (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.3 Configure pam_pwhistory module (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.2 Configure pam_pwquality module (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.1 Configure pam_faillock module (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.2 Configure authselect (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.1 Configure PAM software packages (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.2 Configure privilege escalation (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.1 Configure SSH Server (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4 Host Based Firewall - Cleanup (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4.3 Configure NFTables (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4.2 Configure FirewallD (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4.1 Configure a firewall utility (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 3.3 Configure Network Kernel Parameters (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 3.2 Configure Network Kernel Modules (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 3.1 Configure Network Devices (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2 - Services - Cleanup (Marcus Burghardt) 2024-11-27 21:46:22.306 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.4.2 Configure at (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.4.1 Configure cron (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.3 Configure Time Synchronization (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.2 Configure Client Services (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.1 Configure Server Services (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1 - Initial Setup - Cleanup (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.8 Configure GNOME Display Manager (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.7 Configure Command Line Warning Banners (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.6 Configure system wide crypto policy (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.5 Configure Additional Process Hardening (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.4 Configure Bootloader (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.3.1 Configure SELinux (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.2.2 Configure Package Updates (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.2.1 Configure Package Repositories (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1 Cleanup (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.7 Configure /var/log/audit (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.6 Configure /var/log (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.5 Configure /var/tmp (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.4 Configure /var (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.3 Configure /home (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.2 Configure /dev/shm (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.1 Configure /tmp (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.1 Configure Filesystem Kernel Modules (Marcus Burghardt) 2024-11-27 21:46:22.307 logging.py DEBUG - Ensure code consistency by using aide_conf_path var (wqian) 2024-11-27 21:46:22.307 logging.py DEBUG - Revert "OCP4: Support multi-arch content image" (Matthew Burket) 2024-11-27 21:46:22.307 logging.py DEBUG - Remove CentOS 7 from Packit building and testing (Milan Lysonek) 2024-11-27 21:46:22.307 logging.py DEBUG - CPM-2457: Requirement 5.4 is not applicable (Watson Sato) 2024-11-27 21:46:22.307 logging.py DEBUG - CPM-2457: Requirement 5.2 and 5.3 are not automated (Watson Sato) 2024-11-27 21:46:22.307 logging.py DEBUG - CMP-2457: Requirement 5.1 is not applicable (Watson Sato) 2024-11-27 21:46:22.307 logging.py DEBUG - Bump paambaati/codeclimate-action from 6.0.0 to 8.0.0 (dependabot[bot]) 2024-11-27 21:46:22.307 logging.py DEBUG - Fix permissions for dconf db on Ubuntu (Miha Purg) 2024-11-27 21:46:22.307 logging.py DEBUG - Rename ubuntu workflow Build directly without container (wqian) 2024-11-27 21:46:22.307 logging.py DEBUG - Add ubuntu workflow (wqian) 2024-11-27 21:46:22.307 logging.py DEBUG - platforms -> platform in test metadata (Matthew Burket) 2024-11-27 21:46:22.307 logging.py DEBUG - add default to helptext (sluetze) 2024-11-27 21:46:22.307 logging.py DEBUG - OCP4: Support multi-arch content image (Vincent Shen) 2024-11-27 21:46:22.307 logging.py DEBUG - Update shared/macros/10-kubernetes.jinja (Vincent Shen) 2024-11-27 21:46:22.307 logging.py DEBUG - fix the if statement (svet-se) 2024-11-27 21:46:22.308 logging.py DEBUG - Test if SCE is supported by OpenSCAP (Jan Černý) 2024-11-27 21:46:22.308 logging.py DEBUG - Mark some scenarios as specific to SCE (Jan Černý) 2024-11-27 21:46:22.308 logging.py DEBUG - Set correct permissions in macro bash_enable_dconf_user_profile (Miha Purg) 2024-11-27 21:46:22.308 logging.py DEBUG - Modify ubuntu remediation for dconf_gnome_banner_enabled (Miha Purg) 2024-11-27 21:46:22.308 logging.py DEBUG - Include product property in profile class (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Remove duplicate product (wqian) 2024-11-27 21:46:22.308 logging.py DEBUG - Rename PCI DSS profile to match other rhel versions (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Fix tagret permissions on /etc/shadow- for SLE15/SLE12 (svet-se) 2024-11-27 21:46:22.308 logging.py DEBUG - Update product stability for openembedded (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - add identifiers to rules. (sluetze) 2024-11-27 21:46:22.308 logging.py DEBUG - Ensure that products are build during CI (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Remove ubuntu2004 from ubuntu 22.04 testing (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Add ubuntu 16.04 and 18.04 to Ubuntu 20.04 testing (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Add debian12 to Debian testing (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Reduce the products build on OpenSUSE (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Reduce the products build on SLE15 (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Enable RHEL 10 on RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - add general_network_separation manual rule (sluetze) 2024-11-27 21:46:22.308 logging.py DEBUG - Make the behavior of chronyd_sync_clock rule more consistent Previous template lineinfile usage will append the configuration even when there is an existing line. Use key_value_pair_in_file to make sure its behavior. (wqian) 2024-11-27 21:46:22.308 logging.py DEBUG - Fix banner_etc_issue_net (wqian) 2024-11-27 21:46:22.308 logging.py DEBUG - Remove enable_dconf_user_profile from ubuntu 22.04 stig profile (Miha Purg) 2024-11-27 21:46:22.308 logging.py DEBUG - Fix dconf_gdm_dir on OL9 (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Aling find regextype in file templates (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Fix regex also for groupownership and permissions (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Update Profile names for RHEL 10 ISM O (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Align Bash remediation to Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Specify change condition to commands (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Title Case in Ansible Tasks names (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Improve Ansible remediation for enable_authselect (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Enable dconf profiles in bash remediations of dconf rules (Miha Purg) 2024-11-27 21:46:22.308 logging.py DEBUG - Move remediation logic for enabling dconf profiles to macro (Miha Purg) 2024-11-27 21:46:22.308 logging.py DEBUG - Specify regextype for find command (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Bump docker/login-action from 3.1.0 to 3.2.0 (dependabot[bot]) 2024-11-27 21:46:22.308 logging.py DEBUG - Fix regex in file_ownership_audit_configuration (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Fix issue with python executable (Marcus Burghardt) 2024-11-27 21:46:22.308 logging.py DEBUG - Add missing variables to ISM O control file (Matthew Burket) 2024-11-27 21:46:22.308 logging.py DEBUG - Remove 0586 from ISM O control file as it no longer exists (Matthew Burket) 2024-11-27 21:46:22.320 logging.py DEBUG - Create three profiles for ISM O on RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.320 logging.py DEBUG - Add OL9 to OS FIPS certified (Armando Acosta) 2024-11-27 21:46:22.320 logging.py DEBUG - Adjust variables in product OL9 (Armando Acosta) 2024-11-27 21:46:22.320 logging.py DEBUG - Adjust jinja conditional in sssd_offline_cred_expiration (Armando Acosta) 2024-11-27 21:46:22.320 logging.py DEBUG - Remove unnecesary rules in the control stig_ol9.yml (Armando Acosta) 2024-11-27 21:46:22.320 logging.py DEBUG - Update is_remote_feed check for Debian 12 (Matthew Burket) 2024-11-27 21:46:22.320 logging.py DEBUG - Update Debian 12 product stability (Matthew Burket) 2024-11-27 21:46:22.320 logging.py DEBUG - Add documentation for --all (Jan Rodak) 2024-11-27 21:46:22.320 logging.py DEBUG - Rename flag --used-rules to --rules (Jan Rodak) 2024-11-27 21:46:22.320 logging.py DEBUG - Improve help text and flag name (Jan Rodak) 2024-11-27 21:46:22.320 logging.py DEBUG - Remove zero counts if flag --not-used is not provided (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Include to count not used rules and components (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Add flag --not-used (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Fix banner_etc_issue_net Initialize the banner variable (wqian) 2024-11-27 21:46:22.321 logging.py DEBUG - Add packages header to the test scenarios (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Ensure the directories are set up (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Move find_python_modules calls after find_program (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Fix ordering issues (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Review and improve readability of output messages (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Group calls to find dependencies (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Move includes to the beginning (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Move some CMake tests to the beginning (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Group similar variables (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Minor updates in comments (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Use correct name of RainerScript (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Improve test scenario (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - openembedded product: add the missing table transforms (Steve Arnold) 2024-11-27 21:46:22.321 logging.py DEBUG - add support for OE product variant "harden" distro from meta-hardening (Steve Arnold) 2024-11-27 21:46:22.321 logging.py DEBUG - scap-security-guide: add Petalinux support (Steve Arnold) 2024-11-27 21:46:22.321 logging.py DEBUG - Update rule description with Rainer script syntax (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Extract regexes to variables (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Extract regexes to variables (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Update rule description with Rainer script syntax (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Bump version after release (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Update rule description with the Rainer script syntax (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Extract regexes to a variable (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Extract legaxy regex (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Add .conf extension to the configuration files (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Extract regex to a Jinja variable (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Add GH Action to check if there is a change in Ansible shell module usage (Milan Lysonek) 2024-11-27 21:46:22.321 logging.py DEBUG - Create the control file stig_ol9.yml (Armando Acosta) 2024-11-27 21:46:22.321 logging.py DEBUG - Ensure a default option for var_accounts_authorized_local_users_regex.var (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Ensure default value in var_removable_partition.var (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Convert list to dict (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Simplify the dictionary for variables (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Extend the Profile class in profile_tool (Marcus Burghardt) 2024-11-27 21:46:22.321 logging.py DEBUG - Mark platform specific test scenarios (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - OCPBUGS-1316: Add missing variable reference to rules (Vincent Shen) 2024-11-27 21:46:22.321 logging.py DEBUG - set variable to interactive (sluetze) 2024-11-27 21:46:22.321 logging.py DEBUG - add identifiers to rules (sluetze) 2024-11-27 21:46:22.321 logging.py DEBUG - Add Description for APP.4.4.A16 (sluetze) 2024-11-27 21:46:22.321 logging.py DEBUG - Skip default profiles (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Update flag help message (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Fix missing parents levels (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Add new flag to documentation (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Add used rules of component (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Add flag --used-rules (Jan Rodak) 2024-11-27 21:46:22.321 logging.py DEBUG - Exclude talk-server install test scenario as the package is not available (Milan Lysonek) 2024-11-27 21:46:22.321 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - OCP4: Increase retry wait time for OCP parsing action (Vincent Shen) 2024-11-27 21:46:22.321 logging.py DEBUG - --- updated-dependencies: - dependency-name: JamesIves/github-pages-deploy-action dependency-type: direct:production update-type: version-update:semver-patch ... (dependabot[bot]) 2024-11-27 21:46:22.321 logging.py DEBUG - Add Rainer script support to rsyslog_encrypt_offload_defaultnetstreamdriver (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Add Rainer script support to rsyslog_encrypt_offload_actionsendstreamdrivermode (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Add Rainer script support to rsyslog_encrypt_offload_actionsendstreamdriverauthmode (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - Add Rainer script support to rule rsyslog_cron_logging (Jan Černý) 2024-11-27 21:46:22.321 logging.py DEBUG - To fix CMP-2548 (Rutvik) 2024-11-27 21:46:22.321 logging.py DEBUG - Update titles on Ubuntu STIG profiles and remove comments (Miha Purg) 2024-11-27 21:46:22.321 logging.py DEBUG - Remove outdated STIG ID references (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - factorise code in pam_account_password_unix_remember (Alexandre Skrzyniarz) 2024-11-27 21:46:22.322 logging.py DEBUG - rewrite accounts_passwords_pam_faillock_deny rule to use pam_account_password_faillock template (Alexandre Skrzyniarz) 2024-11-27 21:46:22.322 logging.py DEBUG - add an account_password_pam_faillock template (Alexandre Skrzyniarz) 2024-11-27 21:46:22.322 logging.py DEBUG - Add subscription file for ROSA installs (Lance Bragstad) 2024-11-27 21:46:22.322 logging.py DEBUG - Fixed e2e assertions for network policy rule (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - Add whitelist var reference in Rule instruction (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - Update applications/openshift/networking/var_network_policies_namespaces_whitelist_regex.var (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - Update applications/openshift/networking/var_network_policies_namespaces_whitelist_regex.var (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - CMP-2543: Implement whitelist for configure-network-policies-namespaces (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - OCP4: Fix content datastream workflow (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - Add SCE check for ufw_rate_limit (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Ensure that security_patches_up_to_date is not built with remediations wrt Red Hat products (Vojtech Polasek) 2024-11-27 21:46:22.322 logging.py DEBUG - Add RHEL 10 ISM O Profile (Matthew Burket) 2024-11-27 21:46:22.322 logging.py DEBUG - Add ISM O Control File (Matthew Burket) 2024-11-27 21:46:22.322 logging.py DEBUG - Align Ansible remediation with Bash equivalent (Marcus Burghardt) 2024-11-27 21:46:22.322 logging.py DEBUG - Remove test scenario for incorrect table (Marcus Burghardt) 2024-11-27 21:46:22.322 logging.py DEBUG - Insert the rule into ubuntu 2004 stig profile (alanmcanonical) 2024-11-27 21:46:22.322 logging.py DEBUG - Update test scenarios headers (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Include test scenario scripts for set_nftables_table (Marcus Burghardt) 2024-11-27 21:46:22.322 logging.py DEBUG - Make Bash remediation more precise (Marcus Burghardt) 2024-11-27 21:46:22.322 logging.py DEBUG - Update rule description with additional information (Marcus Burghardt) 2024-11-27 21:46:22.322 logging.py DEBUG - Add RHEL 10 excludes for e8 (Matthew Burket) 2024-11-27 21:46:22.322 logging.py DEBUG - Dissolve function upgrade_to_scap_13 (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Move function call (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Remove option to build SCAP 1.2 from compose_ds.py (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Remove option to build SCAP 1.2 data streams (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix ShellCheck problems (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Update chronyd_or_ntpd_set_maxpoll (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Disable remediation for smartcard_pam_enabled on Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Add a new line (alanmcanonical) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix Ubuntu tests for sshd_use_approved_kex_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu OVAL for sshd_use_approved_kex_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu bash remediation for sshd_use_approved_kex_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix approved key exchange algorithms for Ubuntu 22.04 STIG (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Address reviewer comments in #11915 (Matthew Burket) 2024-11-27 21:46:22.322 logging.py DEBUG - Check ufw is active Only check whether the ufw is active after ufw service is enable instead of configuring the ufw. (alanmcanonical) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu ansible remediation for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu OVAL for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu ansible remediation for sshd_use_approved_macs_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu bash remediation for sshd_use_approved_macs_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu OVAL for sshd_use_approved_macs_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu bash remediation for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix Ubuntu tests for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu text for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Define sshd_approved_ciphers variable in Ubuntu STIG profiles (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - add when conditional to remediation of sssd_enable_pam_service (Vojtech Polasek) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix Ubuntu tests for sshd_use_approved_macs_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - Modify Ubuntu text for sshd_use_approved_macs_ordered_stig (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - add accounts_password_set_max_life_root to unselect_rules_list (Vojtech Polasek) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix zipl_bootmap_is_up_to_date (Jan Černý) 2024-11-27 21:46:22.322 logging.py DEBUG - Define sshd_approved_macs variable in Ubuntu STIG profiles (Miha Purg) 2024-11-27 21:46:22.322 logging.py DEBUG - add rule configure_firewalld_ports to the rhel9 default profile (Vojtech Polasek) 2024-11-27 21:46:22.322 logging.py DEBUG - Add RHEL 10 e8 Profile (Matthew Burket) 2024-11-27 21:46:22.322 logging.py DEBUG - Add e8 control file (Matthew Burket) 2024-11-27 21:46:22.322 logging.py DEBUG - Deselect incompatible rules for the RHEL 10 HIPAA profile (Matthew Burket) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix file-permissions-var-log-kube-audit assertion (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - OCP4: Fix e2e ci assertions (Vincent Shen) 2024-11-27 21:46:22.322 logging.py DEBUG - Fix missing package in tests (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Align audit_xattr rules with Ubuntu 22.04 STIG (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix missing variable for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Achieve consistent file and directory permissions for /var/log/journal and /run/log/journal Set the appropriate permissions to the files and directories (alanmcanonical) 2024-11-27 21:46:22.323 logging.py DEBUG - OCPBUGS-31510: change the analysis to not include ImageStreamTag (Paul Bastide) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix rule name in Ubuntu 22.04 STIG profile (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix issue with regex (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix rule name in Ubuntu 22.04 STIG profile (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Add new rule 'install_endpoint_security_software' (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Improve error handling when loading yaml stream (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Disable check for 'auditd_audispd_configure_sufficiently_large_partition' on Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Add missing rule package_pam_pwquality to Ubuntu 22.04 CIS profile (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.4 to 2.0.5 (dependabot[bot]) 2024-11-27 21:46:22.323 logging.py DEBUG - Update shared/templates/service_disabled/ansible.template (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Remove STIG ID from unused rule (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Add new rule file_permissions_var_log_audit_stig (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Minor updates regarding extra spaces (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Include test scenarios for boolean values (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Support all boolean values in dnf.conf (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Similar style fixes also for service_enabled (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Minor fixes only related to style (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix typos in notes for ocp4 controls (Donald Hunter) 2024-11-27 21:46:22.323 logging.py DEBUG - Add rule file_permissions_etc_audit_rules to Ubuntu 22.04 STIG profile (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Add rule file_permissions_etc_audit_rules (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Update products stability data (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix HTML tags in rule description (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Add new test scenarios (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix Ansible in chronyd_or_ntpd_set_maxpoll (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Define path for chrony.d configuration directory (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Prioritize chronyd_specify_remote_server (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix rule dconf_gnome_banner_enabled on Ubuntu (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix ubuntu tests for dconf_gnome_banner_enabled (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Modify rule file_owner_system_journal (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - make Ansible remediation of zipl_bootmap_is_up_to_date available in all products (Vojtech Polasek) 2024-11-27 21:46:22.323 logging.py DEBUG - Modify rule file_groupowner_system_journal (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Adjust text and typos (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix tests for sssd_offline_cred_expiration for Ubuntu (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Add rule file_permissions_journalctl (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Include test scenario for multiple partitions (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Requirement 3.7 is not applicable (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Requirement 3.6 is inherently met (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Requirement 3.5 is partially applicable (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Requirement 3.4 is not applicable (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - Add new rules package_ntp_removed, package_timesyncd_removed (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Add rule file_groupowner_journalctl (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Requirement 3.3 is not applicable (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - Enable dconf gdm/user profiles in Ubuntu profiles (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Remove unused data definitions (Marcus Burghardt) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Requirement 3.2 is not applicable (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - CMP-2455: Requirement 3.1 isnot applicable (Watson Sato) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix accounts_umask_etc_bashrc (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix package name for libpam-pkcs11 on Ubuntu (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Fix 11910: re-allow '/bin/false' as valid login shell on Ubuntu and SLES (Marco Fortina) 2024-11-27 21:46:22.323 logging.py DEBUG - Populate _rule_id virtual template parameter in Automatus (Jan Černý) 2024-11-27 21:46:22.323 logging.py DEBUG - Add new rule audit_rules_var_log_journal (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Add rule dir_groupowner_system_journal (Miha Purg) 2024-11-27 21:46:22.323 logging.py DEBUG - Update shared/templates/audit_rules_usergroup_modification/bash.template (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.323 logging.py DEBUG - Update shared/templates/audit_rules_privileged_commands/bash.template (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.323 logging.py DEBUG - Update shared/templates/accounts_password/bash.template (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.323 logging.py DEBUG - Update shared/templates/accounts_password/ansible.template (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.323 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_algorithm_logindefs/bash/shared.sh (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.324 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/bash/shared.sh (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.324 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/bash/shared.sh (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.324 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/bash/shared.sh (Alexandre SKRZYNIARZ) 2024-11-27 21:46:22.324 logging.py DEBUG - update debian12 anssi high profile (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update debian12 anssi enhanced profile (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - enable bash remediation for debian12 in audit_rules_usergroup_modification (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - activate bash remediation for debian12 in audit_rules_privileged_commands_rmmod (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - activate bash remediation for debian12 in audit_rules_privileged_commands_modprobe (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - activate bash remediation for debian12 in audit_rules_privileged_commands_insmod (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update debian12 anssi intermediary profile (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - add audit_rules_privileged_commands_sudo for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update anssi bp28 minimal profile for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update package_pam_pwquality_installed for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update set_password_hashing_algorithm_logindefs for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_password templates for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update bash_enable_pam_faillock_directly_in_pam_files macro for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - add oval_feed_url in debian 12 product and update security_patches_up_to_date rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_password_pam_unix_rounds_password_auth for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_password_set_max_life_root for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_password_pam_retry rule for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_passwords_pam_faillock_unlock_time rule for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_passwords_pam_faillock_interval rule for Debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_passwords_pam_faillock_deny for debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update accounts_password_pam_unix_remember for Debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - update package_ypbind_removed rule for debian12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.324 logging.py DEBUG - Add reference_type and product to control schema (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - JSON files should be 4 spaces (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - Recollect facts in mount_option_nodev_nonroot_local_partitions (Jan Černý) 2024-11-27 21:46:22.324 logging.py DEBUG - Add titles for OSPP control file (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - Improve macros readability and description (Marcus Burghardt) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix text in rule file_groupowner_ovs_conf_db_lock (Watson Sato) 2024-11-27 21:46:22.324 logging.py DEBUG - OCP Update variable filter to consider go_template (Vincent Shen) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix pam files used in macro bash_pam_faillock_parameter_value Remove unusued file /etc/pam.d/password-auth Fix tests (alanmcanonical) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix failing test on Ubuntu (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Redefine ssh service name for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Redefine gdm package name for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Redefine /var/log group owner for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Redefine apparmor package name for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Redefine opensc package name for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Redefine pam_pkcs11 package name for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Redefine vlock package name for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix EOF (alanmcanonical) 2024-11-27 21:46:22.324 logging.py DEBUG - Add RHEL 10 HIPAA profile (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - Initial HIPAA Control File (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix errors in utils/build_control_from_reference.py (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix Component Mapping Issue for Audit Rule (alanmcanonical) 2024-11-27 21:46:22.324 logging.py DEBUG - Add rule file_group_ownership_var_log_audit_stig (alanmcanonical) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix utils/build_control_from_reference.py mypy in CI (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - Update DISA STIG manual for SLE15 V1R13 (svet-se) 2024-11-27 21:46:22.324 logging.py DEBUG - Update SLE15 STIG to V1R13 (svet-se) 2024-11-27 21:46:22.324 logging.py DEBUG - Apply suggestions from review in #11916. (Matthew Burket) 2024-11-27 21:46:22.324 logging.py DEBUG - Add Ubuntu tests for auditd_audispd_configure_remote_server (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix case-sensitive regex in auditd_audispd_configure_remote_server (Miha Purg) 2024-11-27 21:46:22.324 logging.py DEBUG - Fix audisp config path and package name on Ubuntu (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add rule file_owner_journalctl (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Revert changes to no_empty_passwords for Ubuntu (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix pwquality package name for Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Revert PR 11816 (Marcus Burghardt) 2024-11-27 21:46:22.325 logging.py DEBUG - Add RHEL 10 OSPP Draft Profile (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Initial OSPP Control File (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Add docs for build_control_from_reference.py (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Add tests for build_control_from_reference.py (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Add script to create a control from a given reference (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Add rule dir_owner_system_journal (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix kdump service name on Ubuntu 22.04 (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add rule set_password_hashing_algorithm_systemauth to Ubuntu STIG profile (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix rule set_password_hashing_algorithm_systemauth on Ubuntu (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix value syntax for rule dconf_gnome_disable_ctrlaltdel_reboot (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix rule enable_dconf_user_profile on Ubuntu (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add tests for enable_dconf_user_profiles (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Allow using custom key in audit_rules_watch template (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add additional criteria to audit_rules_watch template (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add Ubuntu tests for set_password_hashing_algorithm_systemauth (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix OVAL for rule apt_conf_disallow_unauthenticated (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add tests for rule apt_conf_disallow_unauthenticated (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix dirs in sysctl template for Ubuntu 20.04/22.04 (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add and modify rules file/dir_permissions_system_journal (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Bump paambaati/codeclimate-action from 5.0.0 to 6.0.0 (dependabot[bot]) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix ansible lint for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:22.325 logging.py DEBUG - Add rhcos4-high-4.16 assertion file (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix #11902 (Marco Fortina) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix test for template file_groupowner (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix test for template file_owner (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix test for template file_permissions (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix CI result (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix #11898 issue (Marco Fortina) 2024-11-27 21:46:22.325 logging.py DEBUG - Add ol8 to FIPS certified oVAL list (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Update ol8 pci-dss profile (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Add tests to network_nmcli_permissions (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Add ansible to ol9 in network_nmcli_permissions (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Update platform for ol in timer_logrotate_enabled (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Add tests to ol in chronyd_run_as_chrony_user (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Add ansible to ol in chronyd_run_as_chrony_user (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Update ol9 pci-dss profile (Edgar Aguilar) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix #11895 issue (Marco Fortina) 2024-11-27 21:46:22.325 logging.py DEBUG - RHCOS add assertion files (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - OCP remove redudent result_after_remediation (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - Add ocp4 assertion files for ocp4.15, ocp4.15 and ocp4.16 (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - Add 4.14 assertion files (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - Add more 4.13 assertion files (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - Cleanup newlines and rhcos assertion file name (Lance Bragstad) 2024-11-27 21:46:22.325 logging.py DEBUG - OCP4: use new assertion formate for OCP CI (Vincent Shen) 2024-11-27 21:46:22.325 logging.py DEBUG - Align wireless_disable_interfaces with Ubuntu 22.04 STIG (Miha Purg) 2024-11-27 21:46:22.325 logging.py DEBUG - Add docs how to build thin ds (Jan Rodak) 2024-11-27 21:46:22.325 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Update R38 notes (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Restrict the list of accepted shells to avoid user login (Marcus Burghardt) 2024-11-27 21:46:22.325 logging.py DEBUG - Add back rules once shipped in RHCOS4 Benchmark (Watson Sato) 2024-11-27 21:46:22.325 logging.py DEBUG - Return condition to test firewalld service state (Marcus Burghardt) 2024-11-27 21:46:22.325 logging.py DEBUG - Include test scenarios for service state (Marcus Burghardt) 2024-11-27 21:46:22.325 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (dependabot[bot]) 2024-11-27 21:46:22.325 logging.py DEBUG - Add RHEL 10 to SRG Mapping Table Action (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Fix stricter permissions test for file_permission (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Add RHEL9 CCE for sudo_dedicated_group (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Move R38 to automated status (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Allow sudo_dedicated_group in RHEL9 and RHEL10 ANSSI profiles (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Don't allow stricter permissions on file_permissions_sudo (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - Try 4110 for file_permissions_sudo (Matthew Burket) 2024-11-27 21:46:22.325 logging.py DEBUG - OCP4: Add container_security_operator_exists to PCIDSS profile (Vincent Shen) 2024-11-27 21:46:22.326 logging.py DEBUG - update profile stability test data (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - set the var_user_initialization_files_regex to all_dotfiles (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - update list of contributors before releasing 0.1.73 (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - Fix content_diff when a rule is removed (Matthew Burket) 2024-11-27 21:46:22.326 logging.py DEBUG - Align rule encrypt_partitions with Ubuntu 22.04 STIG (Miha Purg) 2024-11-27 21:46:22.326 logging.py DEBUG - Add variables from profiles (Jan Rodak) 2024-11-27 21:46:22.326 logging.py DEBUG - Update stig version in ol8 profiles (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Update OL8 STIG reference (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Align chronyd_sync_clock to Ubuntu 22.04 STIG (Miha Purg) 2024-11-27 21:46:22.326 logging.py DEBUG - exclude /static-checks/diff TMT tests (Jiri Jaburek) 2024-11-27 21:46:22.326 logging.py DEBUG - Update RHEL 9 STIG to V1R3 (Matthew Burket) 2024-11-27 21:46:22.326 logging.py DEBUG - Remove RHEL-09-255070 from RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.326 logging.py DEBUG - Add initial RHEL 10 PCI DSS profile (Matthew Burket) 2024-11-27 21:46:22.326 logging.py DEBUG - Add unit test for get_not_included_components() (Jan Rodak) 2024-11-27 21:46:22.326 logging.py DEBUG - Adding variable filtering (Jan Rodak) 2024-11-27 21:46:22.326 logging.py DEBUG - Add XML validation test (Jan Rodak) 2024-11-27 21:46:22.326 logging.py DEBUG - Update RHEL 8 STIG to V1R14 (Matthew Burket) 2024-11-27 21:46:22.326 logging.py DEBUG - Fix Bash remediation of firewalld-based rules in offline mode (Evgeny Kolesnikov) 2024-11-27 21:46:22.326 logging.py DEBUG - Add assertion file for RHCOS4 E8 profile tests on 4.13 (Lance Bragstad) 2024-11-27 21:46:22.326 logging.py DEBUG - remove adjusts from tmt-plans (Jiri Jaburek) 2024-11-27 21:46:22.326 logging.py DEBUG - disable CentOS Stream Testing Farm tests for ccn_advanced (Jiri Jaburek) 2024-11-27 21:46:22.326 logging.py DEBUG - CMP-2454: Mark Requirement 2.3 as not applicable (Watson Sato) 2024-11-27 21:46:22.326 logging.py DEBUG - CMP-2454: Implement and justify Requirement 2.2 (Watson Sato) 2024-11-27 21:46:22.326 logging.py DEBUG - CMP-2454: Mark Requirement 2.1 as not applicable (Watson Sato) 2024-11-27 21:46:22.326 logging.py DEBUG - add TMT plans for all RHEL / CentOS Stream profiles (Jiri Jaburek) 2024-11-27 21:46:22.326 logging.py DEBUG - remove TMT plan summaries (Jiri Jaburek) 2024-11-27 21:46:22.326 logging.py DEBUG - split out TMT plans to separate Packit jobs (Jiri Jaburek) 2024-11-27 21:46:22.326 logging.py DEBUG - Align OVN e2e results with fixed platform check (Watson Sato) 2024-11-27 21:46:22.326 logging.py DEBUG - Adjust OCP OVN platform check (Watson Sato) 2024-11-27 21:46:22.326 logging.py DEBUG - update profile stability tests (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - add rules for APP.4.4.A15 (sluetze) 2024-11-27 21:46:22.326 logging.py DEBUG - Improve title of CCN profiles for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.326 logging.py DEBUG - set instances of var_sshd_set_keepalive to 1 in RHEL 8 and 9 profiles (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - Fix SCE check for iptables_open_ports (Miha Purg) 2024-11-27 21:46:22.326 logging.py DEBUG - Fix SCE checks for iptables_loopback_traffic (Miha Purg) 2024-11-27 21:46:22.326 logging.py DEBUG - Move auditing group (Jan Černý) 2024-11-27 21:46:22.326 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.3 to 6.0.4 (dependabot[bot]) 2024-11-27 21:46:22.326 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.5.0 to 4.6.0 (dependabot[bot]) 2024-11-27 21:46:22.326 logging.py DEBUG - ol9 remove xinetd rules (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - ol9 anssi add kernel_config rules (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Update ol9 ospp profile (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - add autoapplyremediation rule for APP.4.4.A13 (sluetze) 2024-11-27 21:46:22.326 logging.py DEBUG - fix regex (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - Align var_accounts_tmout to Ubuntu 22.04 STIG V1R1 (Miha Purg) 2024-11-27 21:46:22.326 logging.py DEBUG - add test scenario (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - Fix broken exception message (Jan Černý) 2024-11-27 21:46:22.326 logging.py DEBUG - accounts_umask_etc_bashrc: modify regex to capture also instances of umask which are not at the begining of line (Vojtech Polasek) 2024-11-27 21:46:22.326 logging.py DEBUG - ol8 hipaa remove sshd_use_priv_separation (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - ol8 e8 add authselect rule (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - ol8 cjis delete password_minlen_login_defs var (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - ol8 anssi add kernel_config rules (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Update tests in auditd_name_format (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - ol8 stig update var_auditd_name_format (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Add enable_authselect to ol8 stig (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Update rule to cover OL08-00-010100 (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Update rule for OL08-00-010200 (Edgar Aguilar) 2024-11-27 21:46:22.326 logging.py DEBUG - Update rule to cover OL08-00-030122 (Edgar Aguilar) 2024-11-27 21:46:22.327 logging.py DEBUG - ol8 stig remove rule (Edgar Aguilar) 2024-11-27 21:46:22.327 logging.py DEBUG - Initial draft version of STIG V1R1 profile for Ubuntu 22.04 LTS (Miha Purg) 2024-11-27 21:46:22.327 logging.py DEBUG - Fix rule mount_option_nodev_nonroot_local_partitions Bash remediation (Evgeny Kolesnikov) 2024-11-27 21:46:22.327 logging.py DEBUG - Fix a case where the motd check would consider an empty file valid. (Gabriel Becker) 2024-11-27 21:46:22.327 logging.py DEBUG - Remove OVAL version restrictions from auditd_audispd_configure_sufficiently_large_partition (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Set SRG-OS-000480-GPOS-00230 to does not meet (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add rmmod and modprobe auditing to SRG-OS-000477-GPOS-00222 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add audit_rules_privileged_commands_rmmod to SRG-OS-000471-GPOS-00216 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add AIDE to SRG-OS-000445-GPOS-00199 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Ensure that ensure_oracle_gpgkey_installed is only for OL products in srg_gpos (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Move all variables for SRG-OS-GPOS-000343-00134 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add accounts_tmout to SRG-OS-000279-GPOS-00109 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Clean up title for SRG-OS-000276-GPOS-00106 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Update title for wireless_disable_interfaces (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Remove extraous text from SRG-OS-000228-GPOS-00088 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Update SRG-OS-000191-GPOS-00080 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Clean up SRG-OS-000163-GPOS-00072 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Fix SRG-OS-000095-GPOS-00049 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add group_unique to SRG-OS-000-121-GPOS-00062 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Clean up the ocil in group_unique_id (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Move configure_opensc_card_drivers around in SRG GPOS (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add firewalld_sshd_port_enabled to SRG-OS-000096-GPOS-00050 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Update SRG-OS-000095-GPOS-00049 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Move SRG-OS-000080-GPOS-00048 to use account_temp_expire_date (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add tftp and telnet-server removed to SRG-OS-000074-GPOS-00042 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Remove atm and cramfs from SRG-OS-000095-GPOS-00049 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Update SSH version to 9.6 in SRG GPOS (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Pull account_emergency_expire_date from SRG GPOS (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add status to does not meet from SRG-OS-000191-GPOS-00080 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add sudo and su auditing to SRG-OS-000064-GPOS-00033 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Remove account_unique_id from SRG-OS-000042-GPOS-00020 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Update SRG-OS-000037-GPOS-00015 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add configure_tmux_lock_keybinding to SRG-OS-000030-GPOS-00011 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Remove account_emergency_expire_date from SRG-OS-000002-GPOS-00002 (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Add Inital RHEL 10 STIG Profile (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - add rules for app.4.4.a13 section1 (sluetze) 2024-11-27 21:46:22.327 logging.py DEBUG - add namespace parameter for cluster-test (sluetze) 2024-11-27 21:46:22.327 logging.py DEBUG - Rule had incorrect CRD reference rule.yml (Paul Bastide) 2024-11-27 21:46:22.327 logging.py DEBUG - Fix super overcomplicated regex (Marcus Burghardt) 2024-11-27 21:46:22.327 logging.py DEBUG - Include test scenario for quoted path (Marcus Burghardt) 2024-11-27 21:46:22.327 logging.py DEBUG - Update OCP test assertions (Lance Bragstad) 2024-11-27 21:46:22.327 logging.py DEBUG - Fix dconf package name for Ubuntu (Miha Purg) 2024-11-27 21:46:22.327 logging.py DEBUG - Removed the RHEL <8.5 restriction from sshd_set_idle_timeout (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Update task to check if line is already present (Marcus Burghardt) 2024-11-27 21:46:22.327 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 (dependabot[bot]) 2024-11-27 21:46:22.327 logging.py DEBUG - Add forgotten definition used in service disabled (teacup-on-rockingchair) 2024-11-27 21:46:22.327 logging.py DEBUG - Replace package based platform limitation from platform service (teacup-on-rockingchair) 2024-11-27 21:46:22.327 logging.py DEBUG - Make package installation for iptables and nftables mutually exclusive (teacup-on-rockingchair) 2024-11-27 21:46:22.327 logging.py DEBUG - Set the requires to sshd_set_keepalive on sshd_set_idle_timeout (Matthew Burket) 2024-11-27 21:46:22.327 logging.py DEBUG - Prevent removing existing entries (Jan Černý) 2024-11-27 21:46:22.327 logging.py DEBUG - exclude the html-links test from /static-checks (Jiri Jaburek) 2024-11-27 21:46:22.327 logging.py DEBUG - sort lists of components after removing of excluded ones (Vojtech Polasek) 2024-11-27 21:46:22.327 logging.py DEBUG - ensure that before profile is output as XCCDF, it does not include any unwanted components (Vojtech Polasek) 2024-11-27 21:46:22.327 logging.py DEBUG - add function profile.remove_components_not_included (Vojtech Polasek) 2024-11-27 21:46:22.327 logging.py DEBUG - generate TMT HTML reports when running under Testing Farm (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - Improve regex to ignore files not used for logs (Marcus Burghardt) 2024-11-27 21:46:22.328 logging.py DEBUG - Include test scenario for exceptions (Marcus Burghardt) 2024-11-27 21:46:22.328 logging.py DEBUG - remove fedora-latest-stable from Packit tests (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - put .fmf under tests/tmt-plans to avoid a long prefix (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - rename tests/fmf-plans/ to tests/tmt-plans/ (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - consolidate all fmf-plans under main.fmf (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - Stop using FQMN for ini_file (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - replace fmf-plans/base with Contest's /static-checks (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - Prevent matching entries in other sections than [sssd] (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Add test scenario for conf.d directory (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Fix unused variables (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Improve regex (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Add rule title to Ansible Tasks (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - replace dead links for the chronyd project (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - Use a filtered benchmark for multiple profiles (Jan Rodak) 2024-11-27 21:46:22.328 logging.py DEBUG - Get a filtered benchmark for multiple profiles (Jan Rodak) 2024-11-27 21:46:22.328 logging.py DEBUG - Update references for product stability (teacup-on-rockingchair) 2024-11-27 21:46:22.328 logging.py DEBUG - Drop retired PCI-DSS 3.2.1 for sle15 (teacup-on-rockingchair) 2024-11-27 21:46:22.328 logging.py DEBUG - Platform package override for passwd in SUSE platforms (teacup-on-rockingchair) 2024-11-27 21:46:22.328 logging.py DEBUG - Add RHEL 10 install commands to Automatus (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - Add Ansible remediation to sssd_enable_pam_services (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Add PyGitHub to test-requirements.txt (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - Defined notes and rules for APP.4.4.A7 (sluetze) 2024-11-27 21:46:22.328 logging.py DEBUG - Defined notes and rules for control BSI APP.4.4.A6 (sluetze) 2024-11-27 21:46:22.328 logging.py DEBUG - RHEL 8: unify documentation within kickstart files (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - RHEL9: unify documentation within kickstart files (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - Update ANSSI R38 Status (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - Update SMEs for RHEL 10 ANSSI (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - update cryptopolicy used in CUI profile to fips (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - Fix for OVAL in grub2_bootloader_argument on Ubuntu (Miha Purg) 2024-11-27 21:46:22.328 logging.py DEBUG - Add Ubuntu tests for grub2_bootloader_argument template (Miha Purg) 2024-11-27 21:46:22.328 logging.py DEBUG - Fix ANSSI Ansible fmf test plan (Milan Lysonek) 2024-11-27 21:46:22.328 logging.py DEBUG - OCPBUGS-31510: change the analysis to not include ImageStreamTag (Paul Bastide) 2024-11-27 21:46:22.328 logging.py DEBUG - Update SSHD Line in File Template for RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - Add RHEL 10 ANSSI Profiles (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - Update requirement status (Marcus Burghardt) 2024-11-27 21:46:22.328 logging.py DEBUG - use failed_when:false for Ansible register: checks (Jiri Jaburek) 2024-11-27 21:46:22.328 logging.py DEBUG - remove Bash and Ansible conditionals from the nfs_mount_defined CPE (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - Fix ansible_ini_file_set (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - OCP4: Add rule to check ACS sensor deployed (Vincent Shen) 2024-11-27 21:46:22.328 logging.py DEBUG - OCP4: Drop not-arch from file_permissions_cni_conf (Vincent Shen) 2024-11-27 21:46:22.328 logging.py DEBUG - Add Ansible Remediations (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Do not require existence of /var/tmp/tmp-inst (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Add ignore_spaces to Ansible remediation for networkmanager_dns_mode (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - Add workflow for thin ds test (Jan Rodak) 2024-11-27 21:46:22.328 logging.py DEBUG - Add test for thin ds (Jan Rodak) 2024-11-27 21:46:22.328 logging.py DEBUG - OCP4: Fix rules with both platform and platforms (Vincent Shen) 2024-11-27 21:46:22.328 logging.py DEBUG - drop no longer applicable test scenarios (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - add platforms to relevant rules (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - stop checking for nonexistence of nfs mount within the template oval for mount_option_remote_filesystems (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - add new applicability platform nfs_mount_defined (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - Refined tests for new OpenShift rules based on review: accounts_no_(cluster)rolebindings_default_service_account (Benjamin Ruland) 2024-11-27 21:46:22.328 logging.py DEBUG - Clean up check_eof (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - Add root user to interactive users (Jan Černý) 2024-11-27 21:46:22.328 logging.py DEBUG - Add tests for utils/ansible_playbook_to_role.py (Matthew Burket) 2024-11-27 21:46:22.328 logging.py DEBUG - remove incorrect closing bracket from the Grubby argument (Vojtech Polasek) 2024-11-27 21:46:22.328 logging.py DEBUG - Make sure to gather package facts in context of aide_check_audit_tools rule (teacup-on-rockingchair) 2024-11-27 21:46:22.329 logging.py DEBUG - Add var_accounts_tmout variable definition for PCI profile (teacup-on-rockingchair) 2024-11-27 21:46:22.329 logging.py DEBUG - Fix ansible remediations run in check mode (teacup-on-rockingchair) 2024-11-27 21:46:22.329 logging.py DEBUG - Add docs for ./utils/ansible_playbook_to_role.py (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Clean up utils/ansible_playbook_to_role.py (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Improve args for utils/ansible_playbook_to_role.py (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Improve import error messages in utils/ansible_playbook_to_role.py (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Update profile stability for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Add RHEL 9 CCE to configure_tmux_lock_keybinding (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Add all RHELs to the tests for configure_tmux_lock_keybinding (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Add configure_tmux_lock_keybinding back to RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Align networkmanager_dns_mode to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - configure correct package name for service_sssd_enabled rule (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - CMP-2471: Disable rules on s390x (Vincent Shen) 2024-11-27 21:46:22.329 logging.py DEBUG - Enforce explicit setting in password-auth (Jan Černý) 2024-11-27 21:46:22.329 logging.py DEBUG - Enforce explicit setting in system-auth (Jan Černý) 2024-11-27 21:46:22.329 logging.py DEBUG - Update links for Ansible role (Marcus Burghardt) 2024-11-27 21:46:22.329 logging.py DEBUG - Chnage metric to count of profile insted count of rules (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - update profile stability test (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - use the new variable in RHEL 9 STIG profiles (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - add new xccdf variable to sshd_approved_ciphers relevant to RHEL 9 STIG (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - OCPBUGS-13589: Remove sysctl file check rule from STIG profile (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - Move to use main branch and 1.4.0 for building on Windows (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Add documentation (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Implement product filter (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Add parameter products to most used components sub command (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Add parameter products to most used rules sub command (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Use defaultdict for results (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Reduce duplication of output generation code (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Process products that support components (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - trivial: Update link to audit profile documentation link (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - CMP-2375: Implement a new rule for checking audit logging is enabled (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - Add documentation (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Revert "Fix grep for fedora and sle15" (Ross Murphy) 2024-11-27 21:46:22.329 logging.py DEBUG - Implement most used components command (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Rename sort function (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Create command line entry point (Jan Rodak) 2024-11-27 21:46:22.329 logging.py DEBUG - Disallow spaces in SSSD certificate_verification option (Jan Černý) 2024-11-27 21:46:22.329 logging.py DEBUG - Fix grep for fedora and sle15 (Ross Murphy) 2024-11-27 21:46:22.329 logging.py DEBUG - Stabilize resolved profiles (Jan Černý) 2024-11-27 21:46:22.329 logging.py DEBUG - Fix handling of grub.d configs in grub2_bootloader_argument (Miha Purg) 2024-11-27 21:46:22.329 logging.py DEBUG - CMP-2453: Update Requirement 1.5 (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - CMP-2453: Update Requirement 1.4 (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - Add aide_build_database to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - Add aide_build_database to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.329 logging.py DEBUG - CMP-2453: Update Requirement 1.3 (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - CMP-2453: Update Requirement 1.2 (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - CMP-2453: Mark Requirement 1.1 as not applicable (Lance Bragstad) 2024-11-27 21:46:22.329 logging.py DEBUG - Add rule audit_rules_networkconfig_modification_network_scripts (Jan Černý) 2024-11-27 21:46:22.329 logging.py DEBUG - Add new template audit_rules_watch (Jan Černý) 2024-11-27 21:46:22.329 logging.py DEBUG - OCP4: Add workflow to test ocp content (Vincent Shen) 2024-11-27 21:46:22.329 logging.py DEBUG - Update references for stig_gui profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.329 logging.py DEBUG - Unselect sysctl_user_max_user_namespaces for stig_gui (Marcus Burghardt) 2024-11-27 21:46:22.329 logging.py DEBUG - add warning to service_sssd_enabled (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - fix assignment to components (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - consider nss-pam-ldapd in requirement r67 (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - add platform to ldap_client_tls_cacertpath (Vojtech Polasek) 2024-11-27 21:46:22.329 logging.py DEBUG - add rhel9 cces to newly added rules (Vojtech Polasek) 2024-11-27 21:46:22.330 logging.py DEBUG - change the OVAL for sssd-ldap platform (Vojtech Polasek) 2024-11-27 21:46:22.330 logging.py DEBUG - extend notes and add rules for ANSSI R67 requirement related to RHEL systems (Vojtech Polasek) 2024-11-27 21:46:22.330 logging.py DEBUG - Update 01-general.jinja (CoreyCook8) 2024-11-27 21:46:22.330 logging.py DEBUG - Delete linux_os/guide/system/permissions/mounting/service_autofs_disabled/kubernetes directory (CoreyCook8) 2024-11-27 21:46:22.330 logging.py DEBUG - Delete linux_os/guide/system/accounts/accounts-physical/service_debug-shell_disabled/kubernetes directory (CoreyCook8) 2024-11-27 21:46:22.330 logging.py DEBUG - Add configure_bind_crypto_policy to bind component (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - Update profile stability for RHEL-09-653050 (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - Add bind page applicability to configure_bind_crypto_policy (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - Add bind package applicability (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - tests/fmf-plans: Match end of string in test selection (Milan Lysonek) 2024-11-27 21:46:22.330 logging.py DEBUG - Move common discover and execute plan parts to main.fmf plan (Milan Lysonek) 2024-11-27 21:46:22.330 logging.py DEBUG - Add base fmf test plan with configurations (Milan Lysonek) 2024-11-27 21:46:22.330 logging.py DEBUG - Run Contest test instead of Fedora project beakerlib tests (Milan Lysonek) 2024-11-27 21:46:22.330 logging.py DEBUG - Adjust action for auditd_data_retention_admin_space_left_action on RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - Defined notes and rules for control BSI APP.4.4.A5 (sluetze) 2024-11-27 21:46:22.330 logging.py DEBUG - add manual etcd backup rule (sluetze) 2024-11-27 21:46:22.330 logging.py DEBUG - Addes some new tests (rchikov) 2024-11-27 21:46:22.330 logging.py DEBUG - Align securetty_root_login_console_only remediations with OVAL/rule description (Milan Lysonek) 2024-11-27 21:46:22.330 logging.py DEBUG - Fix OVAL check and remediations to work also with the deny=NUMBER setting (teacup-on-rockingchair) 2024-11-27 21:46:22.330 logging.py DEBUG - ubuntu2204: cis_level1_workstation: Add missing !package_cups_removed (Eduardo Barretto) 2024-11-27 21:46:22.330 logging.py DEBUG - Remove cnss from product stability (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - Remove CNSS reference from SSG_REF_URIS (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - Fix AIDE PATH Product Stability of OpenSUSE (Matthew Burket) 2024-11-27 21:46:22.330 logging.py DEBUG - Generate formatted derivates (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Add CPE OVAL for new CPE platforms (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Create functions to insert new CPE OVAL definitions (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Create getter for linked CPE OVAL (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Use namesapces from constants (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Turn off the reference element in CPE OVAL (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Reduce duplication (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Fix CPE OVAL references (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Add CPE dict and CPE OVAL to final thin DS (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Add generation of CPE dict and CPE OVAL for thin DS (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Fix bug when parameter is not present (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Add filtration of CPE to generation of CPE dict XML (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Add filtration of OVAL document (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Get used IDs of CPE OVAL definitions (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Disable generation of not used cpe platform (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - Get used and not used cpe platforms (Jan Rodak) 2024-11-27 21:46:22.330 logging.py DEBUG - use grep in if statement for crypto policy remediations (Ross Murphy) 2024-11-27 21:46:22.330 logging.py DEBUG - use grep in if statement for crypto policy remediations (Ross Murphy) 2024-11-27 21:46:22.330 logging.py DEBUG - Update shared.xml (Rumen) 2024-11-27 21:46:22.330 logging.py DEBUG - Fix of bugs from tests (rchikov) 2024-11-27 21:46:22.330 logging.py DEBUG - Bugs fixes (rchikov) 2024-11-27 21:46:22.330 logging.py DEBUG - trivial: fix linting issue (Lance Bragstad) 2024-11-27 21:46:22.330 logging.py DEBUG - Bump docker/login-action from 3.0.0 to 3.1.0 (dependabot[bot]) 2024-11-27 21:46:22.330 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: tests: Make tests work (Eduardo Barretto) 2024-11-27 21:46:22.330 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Fix OVAL logic (Eduardo Barretto) 2024-11-27 21:46:22.330 logging.py DEBUG - Correction in oval part ensure_gpgcheck_globally_activated (rchikov) 2024-11-27 21:46:22.330 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.1 to 6.0.2 (dependabot[bot]) 2024-11-27 21:46:22.330 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.3 to 2.0.4 (dependabot[bot]) 2024-11-27 21:46:22.330 logging.py DEBUG - Fix SCE finding XPath to allow nesting with OCILs (Alexander Scheel) 2024-11-27 21:46:22.330 logging.py DEBUG - Modified definition of path to aide in opensuse (rchikov) 2024-11-27 21:46:22.330 logging.py DEBUG - Fix Ansible systemd module name (Jan Černý) 2024-11-27 21:46:22.330 logging.py DEBUG - Update notes in ANSSI R3 (Jan Černý) 2024-11-27 21:46:22.330 logging.py DEBUG - Make Blueprint for service_disabled template to mask services (Evgeny Kolesnikov) 2024-11-27 21:46:22.330 logging.py DEBUG - mention the relevant log file in the message (Vojtech Polasek) 2024-11-27 21:46:22.330 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2024-11-27 21:46:22.330 logging.py DEBUG - Apply suggestions from code review (Jan Černý) 2024-11-27 21:46:22.331 logging.py DEBUG - pam_options ansible template dry-run fix (teacup-on-rockingchair) 2024-11-27 21:46:22.331 logging.py DEBUG - accounts_passwords_pam_tally2_deny_root fix (teacup-on-rockingchair) 2024-11-27 21:46:22.331 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.2 to 2.0.3 (dependabot[bot]) 2024-11-27 21:46:22.331 logging.py DEBUG - Update RHEL 9 SCAP references to V1R1 (Matthew Burket) 2024-11-27 21:46:22.331 logging.py DEBUG - Fix bash remediation for sysctl template (Miha Purg) 2024-11-27 21:46:22.331 logging.py DEBUG - extend automatus error message (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - update requirement R69 in ANSSI control file (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - add test scenarios to rule no_hesiod_in_nsswitch (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - add oval to rule no_hesiod_in_nsswitch (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - add new rule no_hesiod_in_nsswitch (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - add tests for rule no_nis_in_nsswitch (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - add oval check for no_nis_in_nsswitch (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - add rule no_nis_in_nsswitch (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - Add ocil prefix to the macro name (Jan Černý) 2024-11-27 21:46:22.331 logging.py DEBUG - Correction in SLE15 stig profile file (rchikov) 2024-11-27 21:46:22.331 logging.py DEBUG - Bump softprops/action-gh-release from 0.1.15 to 2.0.2 (dependabot[bot]) 2024-11-27 21:46:22.331 logging.py DEBUG - add the components test to quick tests (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - gen_rendered_policiy_index.py: read compiled control files, not the original ones (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - store the "policy" key in complied control files (Vojtech Polasek) 2024-11-27 21:46:22.331 logging.py DEBUG - Fix deperation warning in ssg/build_derivatives.py (Matthew Burket) 2024-11-27 21:46:22.331 logging.py DEBUG - Corrections in aide_periodic_cron_checking and aide_scan_notification - SUSE products (rchikov) 2024-11-27 21:46:22.331 logging.py DEBUG - Update bootlaoder STIG content (Matthew Burket) 2024-11-27 21:46:22.432 logging.py DEBUG - Update sysctl_user_max_user_namespaces (Matthew Burket) 2024-11-27 21:46:22.432 logging.py DEBUG - Update SELinux Section STIG Content (Matthew Burket) 2024-11-27 21:46:22.432 logging.py DEBUG - Update Logging Section STIG Content (Matthew Burket) 2024-11-27 21:46:22.432 logging.py DEBUG - Update Network Section STIG Content (Matthew Burket) 2024-11-27 21:46:22.432 logging.py DEBUG - Update permissions group STIG content (Matthew Burket) 2024-11-27 21:46:22.432 logging.py DEBUG - Update Audit STIG Content (Matthew Burket) 2024-11-27 21:46:22.432 logging.py DEBUG - Update product stability data: remaining products (Watson Sato) 2024-11-27 21:46:22.432 logging.py DEBUG - Update product_stability data: ocp4 and rhcos4 (Watson Sato) 2024-11-27 21:46:22.432 logging.py DEBUG - Add container-platform SRG URI (Watson Sato) 2024-11-27 21:46:22.432 logging.py DEBUG - OCP4 and RHCOS4 have their own STIGID URI (Watson Sato) 2024-11-27 21:46:22.432 logging.py DEBUG - Remove outdated comments (Jan Rodak) 2024-11-27 21:46:22.432 logging.py DEBUG - Rename function load_oval to process_cpe_oval (Jan Rodak) 2024-11-27 21:46:22.432 logging.py DEBUG - Pass to functions specific arguments instead args (Jan Rodak) 2024-11-27 21:46:22.432 logging.py DEBUG - Remove identifier prefix argument (Jan Rodak) 2024-11-27 21:46:22.432 logging.py DEBUG - Rename shorthandfile to xccdfFile (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Use base name of file (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Use format string (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Remove unused ID checks and translations (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Translation of IDs to valid OVAL IDs (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Decompose CPE OVAL and CPE dictionary generation (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Use OVAL object model to generate linked CPE OVAL (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Format argument parsing (Jan Rodak) 2024-11-27 21:46:22.433 logging.py DEBUG - Stop requiring the directory (Jan Černý) 2024-11-27 21:46:22.433 logging.py DEBUG - Add docs for the systemd_mount_enabled template (Jan Černý) 2024-11-27 21:46:22.433 logging.py DEBUG - Create new rule systemd_tmp_mount_enabled (Jan Černý) 2024-11-27 21:46:22.433 logging.py DEBUG - Add SLE cce-ids to newly added mcaffee rules (teacup-on-rockingchair) 2024-11-27 21:46:22.433 logging.py DEBUG - Update profile stability for pci-dss (Matthew Burket) 2024-11-27 21:46:22.433 logging.py DEBUG - Add package_firewalld_installed to PCI-DSS profile (Matthew Burket) 2024-11-27 21:46:22.433 logging.py DEBUG - OCPBUGS-28797: Clarify banner instructions for RHCOS nodes (Lance Bragstad) 2024-11-27 21:46:22.433 logging.py DEBUG - Update Services STIG Content (Matthew Burket) 2024-11-27 21:46:22.433 logging.py DEBUG - Update Software STIG Content (Matthew Burket) 2024-11-27 21:46:22.433 logging.py DEBUG - Update Accounts STIG Content (Matthew Burket) 2024-11-27 21:46:22.433 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A1 (sluetze) 2024-11-27 21:46:22.433 logging.py DEBUG - add manual rule to check application to namespace assignment (sluetze) 2024-11-27 21:46:22.433 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A3 (sluetze) 2024-11-27 21:46:22.433 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A2 (sluetze) 2024-11-27 21:46:22.433 logging.py DEBUG - Small changes in the ansible part of the template service_disabled (rchikov) 2024-11-27 21:46:22.433 logging.py DEBUG - Create new template systemd_mount_enabled (Jan Černý) 2024-11-27 21:46:22.433 logging.py DEBUG - Updates in ansible part from service_dsabled template (rchikov) 2024-11-27 21:46:22.433 logging.py DEBUG - Be more strict on the captured exception (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-000820 status is manual (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-000770 status is manual (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-000690 is still pending (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-000500 status is manual (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-000440 status is automated (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-00430 and CNTR-OS-00460 are not applicable (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-000390 status is manual (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - CNTR-OS-000380 status is manual (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - OCP4 STIG: Add spacing between the controls (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Move SRG rules from control to the ocp4 profile (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Do not use raise from (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Refactor functions too complex for code climate (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Manually add rules to keep rule selection stable (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Avoid adding duplicate rules to a control (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Identify and avoid duplicate references (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Switch to the stig_ocp4 control file (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Add a second product in the STIG OCP4 (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Add generated stig control file for OCP4 (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Leverage reference assingment from control file (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Grab the STIG version from the Benchmark (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Parse an SRG control file for matching rules (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Move creation of env_yaml to main func (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - SRG-APP-000516-CTR-001325 is not applicable (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Add refence file for OCP4 STIG V1R1 (Watson Sato) 2024-11-27 21:46:22.433 logging.py DEBUG - Simplify output of ip link show command (Marcus Burghardt) 2024-11-27 21:46:22.433 logging.py DEBUG - Merge Rule References for BSI profile (Benjamin Ruland) 2024-11-27 21:46:22.433 logging.py DEBUG - New Rules for BSI APP.4.4.A9 and APP.4.4.A11 added (Benjamin Ruland) 2024-11-27 21:46:22.433 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A8 to A11 (Benjamin Ruland) 2024-11-27 21:46:22.433 logging.py DEBUG - Update SLES Stig IDs (teacup-on-rockingchair) 2024-11-27 21:46:22.433 logging.py DEBUG - Enable ansible remediation in SLE for dconf_gnome_session_idle_user_locks (teacup-on-rockingchair) 2024-11-27 21:46:22.433 logging.py DEBUG - Fix tests packages header (teacup-on-rockingchair) 2024-11-27 21:46:22.433 logging.py DEBUG - fix rule not applicable for rules checking login-defs (Stephen L Arnold) 2024-11-27 21:46:22.433 logging.py DEBUG - swap bash umask rules from default to align with minimal image installs (Steve Arnold) 2024-11-27 21:46:22.433 logging.py DEBUG - openembedded profile cleanup, add expanded profile (Steve Arnold) 2024-11-27 21:46:22.433 logging.py DEBUG - CMP-2417: Add new profiles for OpenShift PCI-DSS version 4.0.0 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for appendix (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 12 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 11 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 10 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 9 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 8 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 7 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 6 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 5 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 4 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 3 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 2 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 1 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - Remove Kubernetes remediation for service_debug-shell_disabled (Vincent Shen) 2024-11-27 21:46:22.435 logging.py DEBUG - OCPBUGS-28242: Fix remediation for service_debug-shell_disabled (Vincent Shen) 2024-11-27 21:46:22.435 logging.py DEBUG - CMP-2247: Add a new profile for CIS OpenShift 1.5.0 (Lance Bragstad) 2024-11-27 21:46:22.435 logging.py DEBUG - change status of ANSSI R29 to automated (Vojtech Polasek) 2024-11-27 21:46:22.435 logging.py DEBUG - update R36 in ANSSI (Vojtech Polasek) 2024-11-27 21:46:22.435 logging.py DEBUG - update description of the "automated" status for control files (Vojtech Polasek) 2024-11-27 21:46:22.435 logging.py DEBUG - Changes in template service_disabled - ansible part (rchikov) 2024-11-27 21:46:22.435 logging.py DEBUG - Update github workflows PR runs (Vincent Shen) 2024-11-27 21:46:22.435 logging.py DEBUG - k8s content image: Comment the commit used (Watson Sato) 2024-11-27 21:46:22.435 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2024-11-27 21:46:22.435 logging.py DEBUG - k8s content images: Don't tag PR images as latest (Watson Sato) 2024-11-27 21:46:22.435 logging.py DEBUG - Refactor CMake macros (Jan Černý) 2024-11-27 21:46:22.435 logging.py DEBUG - Do not reformat XCCDF if not needed (Jan Černý) 2024-11-27 21:46:22.435 logging.py DEBUG - Improve XCCDF output format (Jan Černý) 2024-11-27 21:46:22.435 logging.py DEBUG - Update controls/anssi.yml (vojtapolasek) 2024-11-27 21:46:22.436 logging.py DEBUG - Update ANSSI requirement R29 (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Include RHEL9 CCE for file_permissions_systemmap (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - New templated rule file_groupowner_systemmap (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - New templated rule file_owner_systemmap (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Ensure proper test scenarios for templated rule (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Remove local OVAL in favor of template (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Update file_permissions_systemmap rule (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Do not reformat OCIL if not needed (Jan Černý) 2024-11-27 21:46:22.436 logging.py DEBUG - Use indent for OCIL if possible (Jan Černý) 2024-11-27 21:46:22.436 logging.py DEBUG - update notes of the R36 requirement for ANSSI (Vojtech Polasek) 2024-11-27 21:46:22.436 logging.py DEBUG - Do not reformat if not needed (Jan Černý) 2024-11-27 21:46:22.436 logging.py DEBUG - Indent using 2 spaces (Jan Černý) 2024-11-27 21:46:22.436 logging.py DEBUG - Stop pretty formatting unlinked OVALs (Jan Černý) 2024-11-27 21:46:22.436 logging.py DEBUG - profile_tool.py: Fix traceback in sub command (Watson Sato) 2024-11-27 21:46:22.436 logging.py DEBUG - Revert "Add scripts to Update SRG" (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Add scripts to Update SRG (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Update SRG GPOS Control to v2r7 (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Fix python2 support (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Update docuentation (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add processing of controlfiles (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Fix invalid number usage in oauth variable (Lance Bragstad) 2024-11-27 21:46:22.436 logging.py DEBUG - Add profile collected from controll files (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Unselect R29 rules not applicable for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Update ANSSI R29 (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Change command line arguments (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add test (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add documentation for a new script capability (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add calculation of most used rules (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add getter of profiles stats (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add subcommand with arguments (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Update ANSSI R36 requirement (Marcus Burghardt) 2024-11-27 21:46:22.436 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 (dependabot[bot]) 2024-11-27 21:46:22.436 logging.py DEBUG - extend the explanation why ANSSI R52 requirement is manual (Vojtech Polasek) 2024-11-27 21:46:22.436 logging.py DEBUG - Add Base STIG Profile for RHEL 10 (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Add RHEL10 to CI (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Human sort the sections in fix_rules (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Update DISA Import Based on Reviewer Commnets (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Add RHEL 10 Product (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Image Pruner Rule has inconsistent ocil text (Paul Bastide) 2024-11-27 21:46:22.436 logging.py DEBUG - Add RHEL 9 to Ansible Gating (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Fix search not included components (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add env_yaml to xccdf as xml (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add filtering of groups and rules to build of XCCDF benchamrk (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Rework Group xml generation (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Change abroach for generation of thin ds (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Rework build of benchmark xml (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Batch generation of OVAL (Jan Rodak) 2024-11-27 21:46:22.436 logging.py DEBUG - Add platform machine to systctl.d rules (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Unify variable selection in CIS controls (Jan Černý) 2024-11-27 21:46:22.436 logging.py DEBUG - Extend the stable-profiles test (Jan Černý) 2024-11-27 21:46:22.436 logging.py DEBUG - add manual rules to APP.4.4.A4 (sluetze) 2024-11-27 21:46:22.436 logging.py DEBUG - add referencing method (sluetze) 2024-11-27 21:46:22.436 logging.py DEBUG - add referencing method (sluetze) 2024-11-27 21:46:22.436 logging.py DEBUG - add references for bsi.app.4.4.a4+a3 (sluetze) 2024-11-27 21:46:22.436 logging.py DEBUG - fix bsi rhcos4 versioning and control usage (sluetze) 2024-11-27 21:46:22.436 logging.py DEBUG - added versioned profiles (sluetze) 2024-11-27 21:46:22.436 logging.py DEBUG - kick off sys 1.6. profile (sluetze) 2024-11-27 21:46:22.436 logging.py DEBUG - OCP4: use utf-8 as default xml encoding (Vincent Shen) 2024-11-27 21:46:22.436 logging.py DEBUG - Add docs for ./utils/import_disa_stig.py (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Move srg_utils to a module so the openpyxl is only included as needed (Matthew Burket) 2024-11-27 21:46:22.436 logging.py DEBUG - Change permissions of /etc/ipsec.d (Jan Černý) 2024-11-27 21:46:22.437 logging.py DEBUG - Fix grub2_bootloader_argument to check /etc/default/grub.d on Ubuntu (Miha Purg) 2024-11-27 21:46:22.438 logging.py DEBUG - Fix ubuntu tests in template grub2_bootloader_argument (Miha Purg) 2024-11-27 21:46:22.438 logging.py DEBUG - Add new reference stats to HTML stats (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Fix CI issues with utils/srg_utils.py (Matthew Burket) 2024-11-27 21:46:22.438 logging.py DEBUG - Fix nologin_ignored tests for rules using create_local_interactive_users_object (Miha Purg) 2024-11-27 21:46:22.438 logging.py DEBUG - Remove intermediary dictionary (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Reduce count of ctor parameters (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Remove superfluous variable (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Clean up utils/srg_utils.py (Matthew Burket) 2024-11-27 21:46:22.438 logging.py DEBUG - Add tests for utils/import_disa_stig.py (Matthew Burket) 2024-11-27 21:46:22.438 logging.py DEBUG - Add script to import DISA STIG XML to PSC (Matthew Burket) 2024-11-27 21:46:22.438 logging.py DEBUG - Factor out common methods in utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:22.438 logging.py DEBUG - Add get_all_controls_dict to policy (Matthew Burket) 2024-11-27 21:46:22.438 logging.py DEBUG - OCP4: add api_server_api_priority_v1_flowschema_catch_all (Vincent Shen) 2024-11-27 21:46:22.438 logging.py DEBUG - Use correct directory permissions (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Refactor: Extract function get_cis_uri (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Fix TypeError in get_implemented_stigs (svet-se) 2024-11-27 21:46:22.438 logging.py DEBUG - Check PCI-DSS references in RHEL7 (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Check PCI-DSS references in RHEL8 (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Extend test missing-references-ssg-rhel9-ds.xml (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Add ability to check "stigid" references in rules (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Unify options naming (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Remove unused variable (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Reconcile stig_ns variable (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Remove dead code (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Remove disa-stigs-uri from XSLT (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Disable build of OCIL for thin DS (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Fix getting relevant benchmarks for a product (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Add XML declaration (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Deal with empty OVAL and OCIL components (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Add compose of multiple ds (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Enable component generation per profile (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Generates components per profile (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Prepare for generation benchmark per profile (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Add test to verify missing PCIDSS references (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Add test to verify missing CCN references (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Format long lines (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Create profile per rule (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Add entrypoints to the build_product script (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Rework build_xccdf.py (Jan Rodak) 2024-11-27 21:46:22.438 logging.py DEBUG - Test missing references in RHEL 9 (Jan Černý) 2024-11-27 21:46:22.438 logging.py DEBUG - Account for non-existent 'build' dir in build_product (Jiri Jaburek) 2024-11-27 21:46:22.438 logging.py DEBUG - Adding ocp4.14 ocp4.15 to applicable ocp rules (Vincent Shen) 2024-11-27 21:46:22.438 logging.py DEBUG - OCP4: Fix OCP version regex (Vincent Shen) 2024-11-27 21:46:22.438 logging.py DEBUG - Remove token from thollander's action parameters (Watson Sato) 2024-11-27 21:46:22.438 logging.py DEBUG - Remove used CCEs from pool (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Use correct permissions in /etc/sysctl.d (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Improve ANSSI references (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Flush automatus test logs before outputting results (Jiri Jaburek) 2024-11-27 21:46:22.439 logging.py DEBUG - Rename run command var name assignemnt (Watson Sato) 2024-11-27 21:46:22.439 logging.py DEBUG - Fix step id and output reference (Watson Sato) 2024-11-27 21:46:22.439 logging.py DEBUG - Use variable for remediation of rule (Watson Sato) 2024-11-27 21:46:22.439 logging.py DEBUG - Use correct permissions for /etc/sudoers.d (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Fix rule for accounts_authorized_local_users in SLE15 (teacup-on-rockingchair) 2024-11-27 21:46:22.439 logging.py DEBUG - Update linux_os/guide/system/apparmor/all_apparmor_profiles_in_enforce_complain_mode/tests/correct_all_apparmor_profiles_in_complain.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.439 logging.py DEBUG - Disable remediation for accounts_umask_interactive_users on Ubuntu (Miha Purg) 2024-11-27 21:46:22.439 logging.py DEBUG - Update DISA STIG manual for SLE12 V2R13 (svet-se) 2024-11-27 21:46:22.439 logging.py DEBUG - Update SLE12 STIG version (svet-se) 2024-11-27 21:46:22.439 logging.py DEBUG - Update DISA STIG manual for SLE15 V1R12 (svet-se) 2024-11-27 21:46:22.439 logging.py DEBUG - Update SLE15 STIG version (svet-se) 2024-11-27 21:46:22.439 logging.py DEBUG - Add missing CCEs (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Assign rules to components (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Clarify files and directories (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule directory_permissions_etc_iptables (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule directory_owner_etc_iptables (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule directory_groupowner_etc_iptables (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule file_permissions_etc_sudoers (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule file_owner_etc_sudoers (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule file_groupowner_etc_sudoers (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule file_permissions_etc_ipsec_secrets (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule file_owner_etc_ipsec_secrets (Jan Černý) 2024-11-27 21:46:22.439 logging.py DEBUG - Create rule file_groupowner_etc_ipsec_secrets (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_permissions_etc_ipsec_conf (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_owner_etc_ipsec_conf (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_groupowner_etc_ipsec_conf (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_permissions_etc_chrony_keys (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_owner_etc_chrony_keys (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_groupowner_etc_chrony_keys (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_permissions_etc_crypttab (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_owner_etc_crypttab (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_groupowner_etc_crypttab (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_permissions_etc_sudoersd (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_owner_etc_sudoersd (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_groupowner_etc_sudoersd (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_permissions_etc_sysctld (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_owner_etc_sysctld (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_groupowner_etc_sysctld (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_permissions_etc_nftables (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_owner_etc_nftables (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_groupowner_etc_nftables (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_permissions_etc_ipsecd (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_owner_etc_ipsecd (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_groupowner_etc_ipsecd (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_permissions_etc_sestatus_conf (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_groupowner_etc_sestatus_conf (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule file_owner_etc_sestatus_conf (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_permissions_etc_selinux (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_groupowner_etc_selinux (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Create rule directory_owner_etc_selinux (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add missing rules to ANSSI R50 (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add RHEL 9 CCEs (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add new rule file_permissions_sudo (Matthew Burket) 2024-11-27 21:46:22.440 logging.py DEBUG - Fix reviewer comments in #11590 (Matthew Burket) 2024-11-27 21:46:22.440 logging.py DEBUG - Hide profiles not in good shape for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.440 logging.py DEBUG - Remove references test (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Remove empty references keys from rules (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Use controls to generate RHEL 9 STIG references (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Use control file to generate PCI DSS 4 references (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Use controls to generate CCN references (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add stigrefs after references from controls (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Code climate fix for tests/cces-removed.py (Matthew Burket) 2024-11-27 21:46:22.440 logging.py DEBUG - Add new test cces-removed.py (Matthew Burket) 2024-11-27 21:46:22.440 logging.py DEBUG - Fix OVAL macro create_local_interactive_users_object (Miha Purg) 2024-11-27 21:46:22.440 logging.py DEBUG - Extend kernel_config_default_mmap_min_addr to aarch64 (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Fix title (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add platform to kernel_config_unmap_kernel_at_el0 (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add platform to kernel_config_modify_ldt_syscall (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add platform to kernel_config_ia32_emulation (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add platform to kernel_config_page_table_isolation (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add platform to kernel_config_randomize_memory (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Specify platform of kernel_config_default_mmap_min_addr (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Add a new platform x86_64_arch (Jan Černý) 2024-11-27 21:46:22.440 logging.py DEBUG - Upsert image comment instead of creating new one (Watson Sato) 2024-11-27 21:46:22.440 logging.py DEBUG - Fix empty pull reference number (Watson Sato) 2024-11-27 21:46:22.440 logging.py DEBUG - build_ds_container.py: Enable container image push (Watson Sato) 2024-11-27 21:46:22.440 logging.py DEBUG - Update sudo_dedicated_group (Matthew Burket) 2024-11-27 21:46:22.440 logging.py DEBUG - Fix description for auditd_max_log_file_action (Miha Purg) 2024-11-27 21:46:22.440 logging.py DEBUG - OCP: Fix e2e remediation for container_security_operator_exists (Vincent Shen) 2024-11-27 21:46:22.440 logging.py DEBUG - OCPBUGS-18331: Include sshd config directories in remediation template (Lance Bragstad) 2024-11-27 21:46:22.440 logging.py DEBUG - Update utils/ansible_playbook_to_role.py (Matthew Burket) 2024-11-27 21:46:22.440 logging.py DEBUG - Update STIG references for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.440 logging.py DEBUG - Map SRG to chronyd_specify_remote_server (Marcus Burghardt) 2024-11-27 21:46:22.441 logging.py DEBUG - Include chronyd_specify_remote_server in STIG profiles (Marcus Burghardt) 2024-11-27 21:46:22.441 logging.py DEBUG - Include option for stig in var_multiple_time_servers (Marcus Burghardt) 2024-11-27 21:46:22.441 logging.py DEBUG - HIPAA profile for SLE 15 - update (rchikov) 2024-11-27 21:46:22.441 logging.py DEBUG - Improve Milestone description when created (Marcus Burghardt) 2024-11-27 21:46:22.441 logging.py DEBUG - Include simple function to get github username (Marcus Burghardt) 2024-11-27 21:46:22.441 logging.py DEBUG - Update the release cadence function (Marcus Burghardt) 2024-11-27 21:46:22.441 logging.py DEBUG - Document API Token scopes for release_helper (Marcus Burghardt) 2024-11-27 21:46:22.441 logging.py DEBUG - Fix regex in sssd_offline_cred_expiration (Edgar Aguilar) 2024-11-27 21:46:22.441 logging.py DEBUG - Fix spacing in ANSSI Control File (Matthew Burket) 2024-11-27 21:46:22.442 logging.py DEBUG - Update ANSSI R68 (Matthew Burket) 2024-11-27 21:46:22.442 logging.py DEBUG - Add 11 rounds to var_password_pam_unix_rounds (Matthew Burket) 2024-11-27 21:46:22.442 logging.py DEBUG - Format outputing XCCDF xml (Jan Rodak) 2024-11-27 21:46:22.442 logging.py DEBUG - Reduce OCIL XML according to selected rules (Jan Rodak) 2024-11-27 21:46:22.442 logging.py DEBUG - Fix rule audit_rules_networkconfig_modification for Ubuntu (Miha Purg) 2024-11-27 21:46:22.442 logging.py DEBUG - Fix ubuntu tests for audit_rules_networkconfig_modification (Miha Purg) 2024-11-27 21:46:22.442 logging.py DEBUG - Fix rule description for audit_rules_networkconfig_modification (Miha Purg) 2024-11-27 21:46:22.442 logging.py DEBUG - Bump docker/setup-qemu-action from 2 to 3 (dependabot[bot]) 2024-11-27 21:46:22.442 logging.py DEBUG - Bump docker/metadata-action from 4 to 5 (dependabot[bot]) 2024-11-27 21:46:22.442 logging.py DEBUG - Update ANSSI R71 (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Minor fixes after removal of prodtype (Evgeny Kolesnikov) 2024-11-27 21:46:22.442 logging.py DEBUG - sysctl template: allow skipping of runtime checks (Watson Sato) 2024-11-27 21:46:22.442 logging.py DEBUG - Set status for ANSSI R79 to partial (Matthew Burket) 2024-11-27 21:46:22.442 logging.py DEBUG - Add a note to ANSSI R23 (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Update ANSSI R32 (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Replace bogus 'prodtype' with 'product' in Jinja expressions (Evgeny Kolesnikov) 2024-11-27 21:46:22.442 logging.py DEBUG - Remove all references to prodtype (Docs) (Evgeny Kolesnikov) 2024-11-27 21:46:22.442 logging.py DEBUG - Remove all references to prodtype (Code and Tests) (Evgeny Kolesnikov) 2024-11-27 21:46:22.442 logging.py DEBUG - Update ANSSI R40 (Matthew Burket) 2024-11-27 21:46:22.442 logging.py DEBUG - Add a new rule accounts_password_set_max_life_root (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - RHEL 9 STIG: replace configure_bashrc_exec_tmux with configure_bashrc_tmux (Vojtech Polasek) 2024-11-27 21:46:22.442 logging.py DEBUG - Revert "Remove 'exec' from configure_bashrc_exec_tmux" (Vojtech Polasek) 2024-11-27 21:46:22.442 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A10 (Benjamin Ruland) 2024-11-27 21:46:22.442 logging.py DEBUG - Change password minimal lenght (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Update a comment (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Update utils/ansible_playbook_to_role.py (Dan Clark) 2024-11-27 21:46:22.442 logging.py DEBUG - Use controls to assign ANSSI references (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Prevent conflicts in references (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Bump docker/setup-buildx-action from 2 to 3 (dependabot[bot]) 2024-11-27 21:46:22.442 logging.py DEBUG - Remove disabling_ipv6_autoconfig rule (Jan Rodak) 2024-11-27 21:46:22.442 logging.py DEBUG - Red Hat product security is on the path of deprecating the OVAL CVE feed (Evgeny Kolesnikov) 2024-11-27 21:46:22.442 logging.py DEBUG - Remove one-off script remove_references.sh (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Reword and extend documentation (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - CMP-2366: Update service_autofs_disabled default e2e result (Lance Bragstad) 2024-11-27 21:46:22.442 logging.py DEBUG - OCP4: Fix pr image workflow (Vincent Shen) 2024-11-27 21:46:22.442 logging.py DEBUG - CMP-2372: Remove info override for virtual syscall rules (Lance Bragstad) 2024-11-27 21:46:22.442 logging.py DEBUG - CMP-2365: Fix check for rotating kubelet server certificates (Lance Bragstad) 2024-11-27 21:46:22.442 logging.py DEBUG - Update entities/common.py to use CDumper (Matthew Burket) 2024-11-27 21:46:22.442 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Add documentation (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Remove CIS references from rules (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Add a unit test (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Remove refcheck test for CIS profiles (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Use references from control files (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Add a one-off script to remove references (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Add references from control files to rules (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Extend control file schema to support references (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Represent references as lists internally (Jan Černý) 2024-11-27 21:46:22.442 logging.py DEBUG - Make tests apparmor platform dependent (teacup-on-rockingchair) 2024-11-27 21:46:22.442 logging.py DEBUG - Make sure pattern matching includes subexpressions (teacup-on-rockingchair) 2024-11-27 21:46:22.443 logging.py DEBUG - Updates to support rhel9 role conversion and using main as the primary branch instead of master (Dan Clark) 2024-11-27 21:46:22.443 logging.py DEBUG - Update oval rule with improved variable declarations and rule naming (teacup-on-rockingchair) 2024-11-27 21:46:22.443 logging.py DEBUG - Add OVAL check for apparmor profile rules (teacup-on-rockingchair) 2024-11-27 21:46:22.443 logging.py DEBUG - Add platform dependency for the apparmor profiles rule (teacup-on-rockingchair) 2024-11-27 21:46:22.443 logging.py DEBUG - Enable apparmor package installed rule for SLE15 (teacup-on-rockingchair) 2024-11-27 21:46:22.443 logging.py DEBUG - Define apparmor package platform (teacup-on-rockingchair) 2024-11-27 21:46:22.443 logging.py DEBUG - Fix Ansible compatibility with sysctl module (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - remove /dev/shm partition definition from RHEL 7 kickstarts (Vojtech Polasek) 2024-11-27 21:46:22.443 logging.py DEBUG - remove /dev/shm partition definition from RHEL 9 kickstarts (Vojtech Polasek) 2024-11-27 21:46:22.443 logging.py DEBUG - Add tests to OL8 sssd rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Update OL8 sssd rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Fix ubuntu remediation for pam_faildelay (Miha Purg) 2024-11-27 21:46:22.443 logging.py DEBUG - Fix step reference to output and set-output (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - Update audit_ospp_general_ppc64le (Matthew Burket) 2024-11-27 21:46:22.443 logging.py DEBUG - Update audit_ospp_general_aarch64 (Matthew Burket) 2024-11-27 21:46:22.443 logging.py DEBUG - set indent to 4 (sluetze) 2024-11-27 21:46:22.443 logging.py DEBUG - Remove restrictions in sshd_use_approved_ciphers remediation (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - fix regex in Ansible remediation of configure_ssh_crypto_policy (Vojtech Polasek) 2024-11-27 21:46:22.443 logging.py DEBUG - Parametrize rule oauth token maxage rules (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - Adjust kube remediation to urlencoding (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - SRG-APP-000141-CTR-000315: allow hid and hub (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - OCP4 STIG: select rule for audit backlog limit (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - OCP4 STIG: Enable SRG-APP-000141-CTR-000315 rules (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - OCP4 STIG: select rule to audit pt_chown binary (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - OCP4 STIG: audit for unsuccessful deletion (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - OCP4 STIG: add rule for accessTokenMaxAgeSeconds (Watson Sato) 2024-11-27 21:46:22.443 logging.py DEBUG - Minor alignment in CIS test scenario for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Bump peter-evans/create-pull-request from 5.0.2 to 6.0.0 (dependabot[bot]) 2024-11-27 21:46:22.443 logging.py DEBUG - Update audit_ospp_general (Matthew Burket) 2024-11-27 21:46:22.443 logging.py DEBUG - Remove BuildRequire /usr/bin/python3 from spec (Matthew Burket) 2024-11-27 21:46:22.443 logging.py DEBUG - Fix STIG Version for RHEL 8 (Matthew Burket) 2024-11-27 21:46:22.443 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Update crypto_policy test scenario for CIS RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Align logind_session_timeout value with RHEL9 STIG (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Align logind_session_timeout value with RHEL8 STIG (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Make additional check if selinux is actually enabled (teacup-on-rockingchair) 2024-11-27 21:46:22.443 logging.py DEBUG - Bump actions/github-script from 6 to 7 (dependabot[bot]) 2024-11-27 21:46:22.443 logging.py DEBUG - Fix tests on sssd-ldap (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Fix shellcheck warning on find command (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Add tests to sssd-ldap rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Update sssd-ldap rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Update one existing test scenario to accept /bin/false (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Default the module line to /bin/false in Kubernetes (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Default the module line to /bin/false in Bash (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Add a warning to sshd_limit_user_access (Jan Černý) 2024-11-27 21:46:22.443 logging.py DEBUG - Update CIS RHEL8 requirements related to crypto (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Include more specific rules to CIS RHEL9 5.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Include more specific rules to CIS RHEL8 4.4.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Update CIS RHEL7 requirement 3.4.4.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - remove prodtype from add_kubernetes_rule (sluetze) 2024-11-27 21:46:22.443 logging.py DEBUG - Remove option `--add-product-to-fips-certified` (Jan Černý) 2024-11-27 21:46:22.443 logging.py DEBUG - Use `--remove-fips-certified` in CI (Jan Černý) 2024-11-27 21:46:22.443 logging.py DEBUG - Add option '--remove-fips-certified' (Jan Černý) 2024-11-27 21:46:22.443 logging.py DEBUG - Improve github workflow for building OCP PR image (Vincent Shen) 2024-11-27 21:46:22.443 logging.py DEBUG - Fix OVAL identation in faillock rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Update oval in faillock enable rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Set OL8 STIG id in faillock rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Add tests to faillock rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Update OL08-00-020025 & OL08-00-020026 assignment (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Add automation to faillock rules (Edgar Aguilar) 2024-11-27 21:46:22.443 logging.py DEBUG - Bump master version to 0.1.73 (Marcus Burghardt) 2024-11-27 21:46:22.443 logging.py DEBUG - Alibaba Cloud Linux 3 CIS Benchmark has stopped receiving updates and has entered the End-of-Life (EOL) maintenance stage. As a result, the Alibaba Cloud Linux 3 CIS-related profile and its associated references will be removed. (Yuqing Yang) 2024-11-27 21:46:22.443 logging.py DEBUG - Alibaba Cloud Linux 2 CIS Benchmark has stopped receiving updates and has entered the End-of-Life (EOL) maintenance stage. As a result, the Alibaba Cloud Linux 2 CIS-related profile and its associated references will be removed. (Yuqing Yang) 2024-11-27 21:46:22.443 logging.py DEBUG - remove prodtype (steven.y.gui) 2024-11-27 21:46:22.443 logging.py DEBUG - Remove prodtype from rule schema (Matthew Burket) 2024-11-27 21:46:22.443 logging.py DEBUG - Update CIS profiles descriptions (Jan Černý) 2024-11-27 21:46:22.443 logging.py DEBUG - Move to /bin/false in wireless_disable_interface (Miha Purg) 2024-11-27 21:46:22.443 logging.py DEBUG - add tests for cis profile and auditd_data_retention_admin_space_left_action (Vojtech Polasek) 2024-11-27 21:46:22.443 logging.py DEBUG - auditd_data_retention_admin_space_left_action - allow multiple config values (Vojtech Polasek) 2024-11-27 21:46:22.443 logging.py DEBUG - update RHEL 8 section 5.2.2.4 (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - update RHEL 7 section 5.2.2.4 (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - update RHEL 8 CIS section 5.2.2.3 (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - switch RHEL 7 CIS control 1.7.1 to automated (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - add rhel8 prodtype to package_dnsmasq_removed (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - align RHEL 7 CIS with RHEL 8 CIS WRT logging (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - add rhel7 prodtype to file_permissions_at_allow (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - add missing rhel7 prodtype to file_groupowner_at_allow (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - update RHEL 8 CIS section 1.2.2 (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - update RHEL 7 CIS section 1.7.5 (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - update RHEL 7 section 1.7.4 (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - add rhel7 prodtype to audit_rules_execution_setfacl (Vojtech Polasek) 2024-11-27 21:46:22.444 logging.py DEBUG - Fix remediation for smartcard_pam_enabled (Miha Purg) 2024-11-27 21:46:22.444 logging.py DEBUG - Convert prodtype fields into default profiles (Evgeny Kolesnikov) 2024-11-27 21:46:22.444 logging.py DEBUG - Small CI fixes (Evgeny Kolesnikov) 2024-11-27 21:46:22.444 logging.py DEBUG - Remove no_new_global_applicable_rules test (Evgeny Kolesnikov) 2024-11-27 21:46:22.444 logging.py DEBUG - Clean up product properties and shared platforms (Evgeny Kolesnikov) 2024-11-27 21:46:22.444 logging.py DEBUG - Build CPEs for all products that share the guide directory (Evgeny Kolesnikov) 2024-11-27 21:46:22.444 logging.py DEBUG - Filter out unused OVAL components from oval_unlinked.xml when composing final XCCDF document (Evgeny Kolesnikov) 2024-11-27 21:46:22.444 logging.py DEBUG - Ignore prodtype when building Benchmark and include only rules that are part of a Profile (Evgeny Kolesnikov) 2024-11-27 21:46:22.444 logging.py DEBUG - Bump peter-evans/find-comment from 2 to 3 (dependabot[bot]) 2024-11-27 21:46:22.444 logging.py DEBUG - Bump peter-evans/create-or-update-comment from 3 to 4 (dependabot[bot]) 2024-11-27 21:46:22.444 logging.py DEBUG - Update RHEL 8 PCI DSS stability (Matthew Burket) 2024-11-27 21:46:22.444 logging.py DEBUG - Fix more review issues on CIS RHEL 8 section 3 (Matthew Burket) 2024-11-27 21:46:22.444 logging.py DEBUG - Add missing CCE to rules (Matthew Burket) 2024-11-27 21:46:22.444 logging.py DEBUG - Remove CIS@rhel8 reference from set_firewalld_default_zone (Matthew Burket) 2024-11-27 21:46:22.444 logging.py DEBUG - Update RHEL 8 CIS Section 3 based on reviewer comments (Matthew Burket) 2024-11-27 21:46:22.444 logging.py DEBUG - Update RHEL 8 CIS 3.1.3 (Matthew Burket) 2024-11-27 21:46:22.444 logging.py DEBUG - Adjust title for 3.4.2.4 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Adjust title for 3.3.10 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Add rules to Ensure host based firewall loopback traffic is configured for RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update rule file references for RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Remove unused section 3 controls for RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.4.2.5 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.4.2.4 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.4.2.3 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.4.2.2 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.4.2.1 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.4.1.2 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.4.1.1 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.11 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.10 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.9 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.8 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.7 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.6 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.5 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.4 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.3 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.2 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.3.1 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.2.4 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.2.3 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.2.2 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.2.1 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.1.3 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.1.2 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update section 3.1.1 RHEL 8 CIS (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Fix ubuntu tests for faillock rules (Miha Purg) 2024-11-27 21:46:22.446 logging.py DEBUG - Fix pam_faillock remediation macro for ubuntu (Miha Purg) 2024-11-27 21:46:22.446 logging.py DEBUG - Fix position of faillock-preauth module in pam (Miha Purg) 2024-11-27 21:46:22.446 logging.py DEBUG - Update version number for RHEL 9 STIG V1R2 (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update DISA files for RHEL 9 STIG V1R2 (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Clean up policy for audit_rules_dac_modification_umount (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Remove extraneous autrace in aide_files (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Remove 'exec' from configure_bashrc_exec_tmux (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - service_rngd_enabled is only non-FIPS system in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Ensure that var_sshd_set_keepalive is set to 1 in the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_ca/rule.yml (Matthew Burket) 2024-11-27 21:46:22.446 logging.py DEBUG - Update pci-dss reference for profile stability test (Marcus Burghardt) 2024-11-27 21:46:22.446 logging.py DEBUG - Update contributors list for v0.1.72 release (Marcus Burghardt) 2024-11-27 21:46:22.446 logging.py DEBUG - Move CIS RHEL8 5.2.3.5 to partial (Marcus Burghardt) 2024-11-27 21:46:22.446 logging.py DEBUG - Update CIS RHEL8 4.5.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.446 logging.py DEBUG - Include note in CIS RHEL8 4.4.3.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.447 logging.py DEBUG - Enable sshd_use_strong_macs for RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.447 logging.py DEBUG - Enable sshd_use_strong_kex for RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.447 logging.py DEBUG - Include explicit variable for CIS RHEL8 4.2.6 (Marcus Burghardt) 2024-11-27 21:46:22.447 logging.py DEBUG - Make CIS RHEL8 4.2.1 partial (Marcus Burghardt) 2024-11-27 21:46:22.447 logging.py DEBUG - Make CIS RHEL8 4.1.2.1 partial (Marcus Burghardt) 2024-11-27 21:46:22.447 logging.py DEBUG - remove the task which deletes artifacts from automatus GH workflows (Vojtech Polasek) 2024-11-27 21:46:22.448 logging.py DEBUG - Update SRG GPOS file references to v2r7 (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Add package install to tests for sssd_ldap_configure_tls_reqcert (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Update pci-dss reference for profile stability test (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - OCPBUGS-20015: Add remediation for RHCOS banners (Lance Bragstad) 2024-11-27 21:46:22.448 logging.py DEBUG - Update SRG GPOS to V2R7 (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Update RHEL 8 STIG version (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Update DISA files for RHEL 8 STIG V1R13 (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Allow sssd_offline_cred_expiration to be configed in drop in dirs (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Update RHEL 7 STIG version (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Update DISA files for RHEL 7 STIG V3R14 (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Add warning to sssd_ldap_configure_tls_ca (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Remove sssd_ldap_configure_tls_ca_dir from RHEL 7 STIG (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Allow sssd_ldap_configure_tls_reqcert to be in drop files as well (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Allow sssd_ldap_start_tls to be in drop files as well (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Move to /bin/false for disabling kernel modules (Matthew Burket) 2024-11-27 21:46:22.448 logging.py DEBUG - Update ol stig references (Edgar Aguilar) 2024-11-27 21:46:22.448 logging.py DEBUG - Small fixes in references (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Include missing CCE for RHEL8 in aide_use_fips_hashes (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update rules related to CIS RHEL8 5.3 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update CIS RHEL8 section 5.3 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Enable rules for RHEL8 CIS (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update CIS RHEL8 section 5.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update CIS RHEL8 section 5.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update CIS RHEL8 section 5.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update CIS RHEL8 section 5.12.1 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update rules related to CIS RHEL8 5.1.3 and 5.1.4 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update CIS RHEL8 sections 5.1.3 and 5.1.4 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update rules related to CIS RHEL8 5.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.448 logging.py DEBUG - Update CIS RHEL8 section 5.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 5.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 5.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Remove CIS RHEL8 references from rules in dropped requirements (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Reviewed policy changelog about section 4 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.5.3 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.5.3 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Enable ensure_root_password_configured to rhel8 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.5.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.5.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.5.1 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.5.1 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rule related to CIS RHEL8 4.4.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.2.1 and 4.4.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.4.1 and 4.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.3 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.3 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update CIS RHEL8 section 4.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.449 logging.py DEBUG - Update rules related to CIS RHEL8 4.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL8 section 4.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Add /etc/shells rules to CIS control 6.1.9 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Improve CIS 6.2.11 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Change RHEL 7 CIS 6.2.11 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Update control status (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Update control status (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Update control status (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Add dir_perms_world_writable_sticky_bits to 6.1.11 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Update control status (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Update control status (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Remove leftover sections (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.11 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.10 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.9 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.8 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.7 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.6 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.5 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.2.4 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.14 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.13 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.12 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.11 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.10 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.9 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.8 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.6 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.4 and 6.1.5 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.3 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.2 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Align CIS 6.1.1 (Jan Černý) 2024-11-27 21:46:22.450 logging.py DEBUG - Fix regex for pam_wheel.so line with use_uid (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Remove unnecessary space at the beginning (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Just minor update in the line format (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Include note in CIS RHEL7 4.5.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update selection in CIS RHEL7 4.5.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Fix rule section in CIS RHEL7 4.2.15 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Review usage of sudo_require_reauthentication (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Review sshd_approved_ciphers.var (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update requirements status after review (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Fix wrong reference (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL7 version in header (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update var_password_pam_remember for CIS RHEL7 4.0.0 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Removed CIS RHEL7 references in dropped rules (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update rules related to CIS RHEL7 4.5.3 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL7 section 4.5.3 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Enable ensure_root_password_configured to rhel7 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update rules related to CIS RHEL7 4.5.1 and 4.5.2 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL7 section 4.5.1 and 4.5.2 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL7 section 4.4.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Enable accounts_password_pam_dictcheck to rhel7 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL7 section 4.4.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL7 section 4.4.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.450 logging.py DEBUG - Update CIS RHEL7 section 4.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Enable rhel7 in rules required by CIS RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update rules related to CIS RHEL7 4.3 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update CIS RHEL7 section 4.3 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update rules related to CIS RHEL7 4.2 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update CIS RHEL7 section 4.2 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update rules related to CIS RHEL7 4.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update CIS RHEL7 section 4.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update rules related to CIS RHEL7 4.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - Update CIS RHEL7 section 4.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.451 logging.py DEBUG - remove cis reference from xwindows_remove_packages (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.2.20 to set correct runlevel (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update refernce in related rule of 2.2.3 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - include reference also in related rule for 2.2.2 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - change status of 2.2.1 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - modify profile stability test of RHEL 8 PCI-DSS (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - remove CIS references in rules which were removed from the profile (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - remove control 2.4 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.3.5 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.3.3 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.3.2 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.3.1 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.2.22 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.2.21 (Vojtech Polasek) 2024-11-27 21:46:22.451 logging.py DEBUG - update control 2.2.20 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.19 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.18 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.17 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.16 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.15 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.14 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.13 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.12 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.11 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.10 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.9 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.8 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.7 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.6 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.5 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.4 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.3 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.2 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.2.1 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.1.3 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update control 2.1.2 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - update section 2.1.1 (Vojtech Polasek) 2024-11-27 21:46:22.452 logging.py DEBUG - Change status of a control (Jan Černý) 2024-11-27 21:46:22.453 logging.py DEBUG - Add rules to RHEL 8 CIS 6.1.10 (Matthew Burket) 2024-11-27 21:46:22.453 logging.py DEBUG - Add rule file_owner_backup_etc_shells (Matthew Burket) 2024-11-27 21:46:22.453 logging.py DEBUG - Add new rule file_groupowner_etc_shells (Matthew Burket) 2024-11-27 21:46:22.516 logging.py DEBUG - Add new rule file_permissions_etc_shells (Matthew Burket) 2024-11-27 21:46:22.516 logging.py DEBUG - change how xwindows is disabled in CIS profile (Vojtech Polasek) 2024-11-27 21:46:22.516 logging.py DEBUG - Add a CCE (Jan Černý) 2024-11-27 21:46:22.516 logging.py DEBUG - Update control title (Jan Černý) 2024-11-27 21:46:22.516 logging.py DEBUG - Add rules rsyslog_files_* to CIS 5.1.4 (Jan Černý) 2024-11-27 21:46:22.516 logging.py DEBUG - Update rule references for 5.1.3 (Jan Černý) 2024-11-27 21:46:22.516 logging.py DEBUG - Fix the control status (Jan Černý) 2024-11-27 21:46:22.516 logging.py DEBUG - Fix the control status (Jan Černý) 2024-11-27 21:46:22.516 logging.py DEBUG - Fix the control status (Jan Černý) 2024-11-27 21:46:22.516 logging.py DEBUG - change the sysctl module fqcn for rhel7 product (Vojtech Polasek) 2024-11-27 21:46:22.517 logging.py DEBUG - Allow tests/test_product_stability.py to be executed. (Matthew Burket) 2024-11-27 21:46:22.517 logging.py DEBUG - Fix OpenEmbedded name in test stability (Matthew Burket) 2024-11-27 21:46:22.517 logging.py DEBUG - Add missing CCEs (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Fix indentation (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Remove leftover sections (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.11 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.10 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.9 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.8 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.7 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.6 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.5 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.4 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.3 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.2 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.2.1 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.14 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.13 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.12 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.11 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.10 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.9 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.8 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.7 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.6 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.5 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.4 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.3 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.2 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 6.1.1 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Fix OVAL in auditd_data_retention_space_left_action (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Fix remediation in auditd_data_retention_space_left_action (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Fix leftover section (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Update control status (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Remove leftovers (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.3.2 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.3.1 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.10 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.9 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.8 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.7 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.6 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.5 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.4 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.3 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.2 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.4.1 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.21 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.20 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.19 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.18 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.17 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.16 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.15 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.14 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.13 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.12 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.11 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.10 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.9 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.8 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.7 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.6 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.5 (Jan Černý) 2024-11-27 21:46:22.517 logging.py DEBUG - Align CIS 5.2.3.4 (Jan Černý) 2024-11-27 21:46:22.518 logging.py DEBUG - Align CIS 5.2.3.3 (Jan Černý) 2024-11-27 21:46:22.518 logging.py DEBUG - Align CIS 5.2.3.2 (Jan Černý) 2024-11-27 21:46:22.518 logging.py DEBUG - Align CIS 5.2.3.1 (Jan Černý) 2024-11-27 21:46:22.518 logging.py DEBUG - Align CIS 5.2.2.4 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.2.2.3 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.2.2.2 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.2.2.1 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.2.1.4 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.2.1.3 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.2.1.2 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.2.1.1 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.4 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.3 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.6 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.5 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.4 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.3 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.2 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.1.4 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.1.3 (Jan Černý) 2024-11-27 21:46:22.519 logging.py DEBUG - Align CIS 5.1.2.1.2 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.2.1.1 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Remove obsolete section (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.1.7 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.1.6 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.1.5 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.1.4 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.1.3 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.1.2 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - Align CIS 5.1.1.1 (Jan Černý) 2024-11-27 21:46:22.520 logging.py DEBUG - update sles oval feed url (svet-se) 2024-11-27 21:46:22.520 logging.py DEBUG - remove the control containing service_autofs_disabled from section 1 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - remove cis references from dropped rules (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - remove control 2.4 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - add control 2.3.5 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.3.3 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.3.2 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.3.1 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.22 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.21 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.20 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.19 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.18 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.17 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.16 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.15 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.14 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.13 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.12 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.11 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.10 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.9 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update section 2.2.8 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.7 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.6 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.5 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.4 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update section 2.2.3 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.2 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.2.1 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update control 2.1.3 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - update 2.1.2 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - control 2.1.1 (Vojtech Polasek) 2024-11-27 21:46:22.520 logging.py DEBUG - fix package_iptables_installed (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Update titles in section 1.1 for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Fix up section 1.1.1 for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Fix mount_option_home_nosuid references (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - fixup! Add RHEL 7 CIS reference to 1.1.2.7.4 (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Update RHEL 7 Section 1 references (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Update CIS reference for kernel_module_hfs_disabled (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS reference to mount_option_var_nosuid (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS reference to mount_option_var_log_audit_nosuid (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS reference for sysctl_kernel_yama_ptrace_scope (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS reference mount_option_var_log_audit_nodev (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS references to dconf_gnome_screensaver_idle_delay (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS reference to selinux_not_disabled (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add selinux_not_disabled to RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL7 CIS reference for mount_option_var_log_nodev (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS reference to 1.1.2.7.4 (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL7 CIS reference to dconf_gnome_disable_autorun (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Add RHEL 7 CIS reference to mount_option_var_log_noexec (Matthew Burket) 2024-11-27 21:46:22.520 logging.py DEBUG - Update references on mount_option_var_log_nosuid for RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update dconf_gnome_disable_automount_open references for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update references on dconf_gnome_screensaver_user_locks for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update dconf_gnome_disable_automount references for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update references for mount_option_var_nodev RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update mount_option_home_nosuid RHEL 7 CIS references (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update section 1.7 for RHEL 7 CIS Control (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Remove section 1.9 as it was moved up to 1.2.5 (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Remove 1.2.5 from the RHEL 7 Benchmark (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update section 1.6 RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update section 1.5 RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Remove prelink removed rule from RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Remove NX rule has it is no longer in the RHEL 7 Benchmark (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update Section 1.4 for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update Section 1.3 for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update Section 1.2 for RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Remove "removable media partitions mount rules from RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update RHEL 7 CIS /var/log/audit (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - RHEL 7 CIS Update /var/log section (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - RHEL 7 CIS Update /var/tmp section (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update CIS for RHEL 7 /var section (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update section for /home checks RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update section for /dev/shm checks RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update section for /tmp checks RHEL 7 CIS (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update Section 1.1 of RHEL 7 CIS Control (Matthew Burket) 2024-11-27 21:46:22.521 logging.py DEBUG - Update OL8 STIG id references (Edgar Aguilar) 2024-11-27 21:46:22.521 logging.py DEBUG - Update .github/workflows/k8s-content-pr.yaml (Vincent Shen) 2024-11-27 21:46:22.521 logging.py DEBUG - Update .github/workflows/k8s-content-pr.yaml (Vincent Shen) 2024-11-27 21:46:22.522 logging.py DEBUG - Mark control 3.4.4.2.6 as partial (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Fix configure_bashrc_exec_tmux missing parentheses (BenGui) 2024-11-27 21:46:22.522 logging.py DEBUG - Add a missing CCE (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Add a missing header (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Fix a missing reference (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Sort references in service_bluetooth_disabled (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Remove section 3.5 (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Align CIS 3.4.4.3.6 (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Align CIS 3.4.4.3.5 (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Align CIS 3.4.4.3.4 (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Align CIS 3.4.4.3.3 (Jan Černý) 2024-11-27 21:46:22.522 logging.py DEBUG - Align CIS 3.4.4.3.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.3.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.2.6 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Fix references issues detected in tests (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.2.5 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.2.4 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.2.3 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.2.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.2.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.4.1.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.9 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.8 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.7 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.6 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.5 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Add group.yml file for firewalld_deactivation rules (teacup-on-rockingchair) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.4 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.3 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Update rules related to CIS RHEL8 1.8 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.8 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.3.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.2.4 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.2.3 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.2.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.2.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.1.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.4.1.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.11 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.10 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.9 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.8 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.7 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.6 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.5 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.4 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.3 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.3.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.2.4 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.2.3 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.2.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.2.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.1.3 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.7 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update rule related to CIS RHEL8 1.6 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.6 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.1.2 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Align CIS 3.1.1 (Jan Černý) 2024-11-27 21:46:22.523 logging.py DEBUG - Update rules related to CIS RHEL8 1.5 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.5 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update rules related to CIS RHEL8 1.4 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.4 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update rules related to CIS RHEL8 1.3 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.3 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update rules related to CIS RHEL8 1.2 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.2 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Remove dropped filesystem requiremens from CIS RHEL8 1 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update rules related to CIS RHEL8 1.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.523 logging.py DEBUG - Update CIS RHEL8 section 1.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.524 logging.py DEBUG - Update rules related to CIS RHEL8 1.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.525 logging.py DEBUG - Fix import problem (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Update CIS RHEL8 section 1.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.525 logging.py DEBUG - Update CIS version in RHEL8 control file (Marcus Burghardt) 2024-11-27 21:46:22.525 logging.py DEBUG - Remove unnessary conditionals (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Move import to top of file (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Fix typo (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Rename functions (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Format via black tool (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Move command processing to separate files (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Decompose statistics generation in html (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Separate commands to functions (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Separate subparsers to functions (Jan Rodak) 2024-11-27 21:46:22.525 logging.py DEBUG - Update k8s action to build image on new PR (Vincent Shen) 2024-11-27 21:46:22.525 logging.py DEBUG - add missing ocil part (Vojtech Polasek) 2024-11-27 21:46:22.525 logging.py DEBUG - align the audit line with remediations and check (Vojtech Polasek) 2024-11-27 21:46:22.525 logging.py DEBUG - add explaining comment to mount_option bash template (Vojtech Polasek) 2024-11-27 21:46:22.525 logging.py DEBUG - Create the cron.allow file with correct permissions (Jan Černý) 2024-11-27 21:46:22.525 logging.py DEBUG - Add optional parameters to file_existence template (Jan Černý) 2024-11-27 21:46:22.525 logging.py DEBUG - Update product_stability test data with BSI reference (Benjamin Ruland) 2024-11-27 21:46:22.525 logging.py DEBUG - Define notes and rules for BSI APP.4.4.A12 (Benjamin Ruland) 2024-11-27 21:46:22.525 logging.py DEBUG - add bsi constant (sluetze) 2024-11-27 21:46:22.525 logging.py DEBUG - Add new rule file_cron_allow_exists (Jan Černý) 2024-11-27 21:46:22.525 logging.py DEBUG - Add a note to the description (Jan Černý) 2024-11-27 21:46:22.525 logging.py DEBUG - Allow using declare keyword (Jan Černý) 2024-11-27 21:46:22.525 logging.py DEBUG - xccdf_org.ssgproject.content_rule_accounts_tmout: replace 'declare' by 'typeset' (Renaud Métrich) 2024-11-27 21:46:22.525 logging.py DEBUG - Removes shebang from files that are not directly executed (Jennifer Power) 2024-11-27 21:46:22.525 logging.py DEBUG - Support drop-in config in journald rules on RHEL (Jan Černý) 2024-11-27 21:46:22.525 logging.py DEBUG - Add ocp platforms to some eks shared OVALs (Evgeny Kolesnikov) 2024-11-27 21:46:22.525 logging.py DEBUG - Do not change comments by remediations (Jan Černý) 2024-11-27 21:46:22.525 logging.py DEBUG - Allow spaces in rule sudo_custom_logfile (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Move install_mcafee_hbss shared OVAL to the install_hids rule (Evgeny Kolesnikov) 2024-11-27 21:46:22.526 logging.py DEBUG - fix invalid level (Vojtech Polasek) 2024-11-27 21:46:22.526 logging.py DEBUG - add tests for the function validating policy levels (Vojtech Polasek) 2024-11-27 21:46:22.526 logging.py DEBUG - add function validating policy levels (Vojtech Polasek) 2024-11-27 21:46:22.526 logging.py DEBUG - ensure that loaded Policy class has always list of levels (Vojtech Polasek) 2024-11-27 21:46:22.526 logging.py DEBUG - Do not check for yum on dnf systems (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Consider checking for iptables service only if we don't have firewalld service enabled (teacup-on-rockingchair) 2024-11-27 21:46:22.526 logging.py DEBUG - Add support to disable wifi interfaces via wicked (teacup-on-rockingchair) 2024-11-27 21:46:22.526 logging.py DEBUG - remove spaces for code check (steven.y.gui) 2024-11-27 21:46:22.526 logging.py DEBUG - Updates tools_and_utilities.md based on code review feedback (Jennifer Power) 2024-11-27 21:46:22.526 logging.py DEBUG - Add zlib1g-dev to debain 10 CI deps (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - Add libxml2 and libxslt dev packages to Debian 10 CI (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - fix ctest fail (steven.y.gui) 2024-11-27 21:46:22.526 logging.py DEBUG - fix compilation errors (steven.y.gui) 2024-11-27 21:46:22.526 logging.py DEBUG - remove openeuler and modified rule ids (steven.y.gui) 2024-11-27 21:46:22.526 logging.py DEBUG - Add reference title mapping (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Fix a duplication of the code ID 3.5.2.1 (rchikov) 2024-11-27 21:46:22.526 logging.py DEBUG - add new product openeuler supporting (steven.y.gui) 2024-11-27 21:46:22.526 logging.py DEBUG - Update Install VM to use Fedora 39 (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - Fix levels in CIS OCP 1.4.0 (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - Fail load a control if the level is a string (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - Remove unused imports from tests/unit/ssg-module/test_controls.py (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - Fix type hints in utils/render_all_policies.py (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - Add Windows CI (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - We should raise NotImplementedError (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - Fix Ansible in rule ensure_redhat_gpgkey_installed (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Update GitHub Artifacts Action Steps to v4 (Matthew Burket) 2024-11-27 21:46:22.526 logging.py DEBUG - fix: better with absolute path (Whidix) 2024-11-27 21:46:22.526 logging.py DEBUG - fix: service_timesyncd_configured (Whidix) 2024-11-27 21:46:22.526 logging.py DEBUG - Ignore none as possible root dir (Commandcracker) 2024-11-27 21:46:22.526 logging.py DEBUG - Use correct HTML element for inline code (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Bump geekyeggo/delete-artifact from 2 to 4 (dependabot[bot]) 2024-11-27 21:46:22.526 logging.py DEBUG - adapt styling (Commandcracker) 2024-11-27 21:46:22.526 logging.py DEBUG - Use XSLT_PREFIX (Commandcracker) 2024-11-27 21:46:22.526 logging.py DEBUG - Find xccdf-guide.xsl by pssible openscap root dirs (adds Windows support) (Commandcracker) 2024-11-27 21:46:22.526 logging.py DEBUG - Account for division by zero (Commandcracker) 2024-11-27 21:46:22.526 logging.py DEBUG - Find xccdf_1.1_to_1.2.xsl on Windows (Commandcracker) 2024-11-27 21:46:22.526 logging.py DEBUG - move bsi os checks into os profile (sluetze) 2024-11-27 21:46:22.526 logging.py DEBUG - split bsi profile into node and not node (sluetze) 2024-11-27 21:46:22.526 logging.py DEBUG - Added OCP4 Profile and Controls for BSI APP.4.4 (ermeratos) 2024-11-27 21:46:22.526 logging.py DEBUG - Finish rename to Automatus (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Fix broken formatting (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Update test-check-eof for smoke test (Jan Černý) 2024-11-27 21:46:22.526 logging.py DEBUG - Add anolis23/anolis8 support for pci-dss compliance. (YuQing.Yang) 2024-11-27 21:46:22.526 logging.py DEBUG - Add alinux2/alinux3 support for pci-dss compliance. (YuQing.Yang) 2024-11-27 21:46:22.526 logging.py DEBUG - Remove unnecessary overwrite of the init function (Jan Rodak) 2024-11-27 21:46:22.526 logging.py DEBUG - Add invoke parent's init function (Jan Rodak) 2024-11-27 21:46:22.526 logging.py DEBUG - Fix value of sshd_strong_kex variable on Ubuntu (David du Colombier) 2024-11-27 21:46:22.526 logging.py DEBUG - Rename inconsistent shared OVAL IDs (Oracle Linux) (Evgeny Kolesnikov) 2024-11-27 21:46:22.526 logging.py DEBUG - add template path prefix with environment override (Stephen L Arnold) 2024-11-27 21:46:22.526 logging.py DEBUG - configure_bashrc_tmux: escape braces within regex (Vojtech Polasek) 2024-11-27 21:46:22.526 logging.py DEBUG - configure_bashrc_exec_tmux: escape braces within regex (Vojtech Polasek) 2024-11-27 21:46:22.526 logging.py DEBUG - Minor update in default ini file name (Marcus Burghardt) 2024-11-27 21:46:22.526 logging.py DEBUG - Revert "Amend: Update e2e results for OVS-related checks" (Vincent Shen) 2024-11-27 21:46:22.526 logging.py DEBUG - Revert "Update e2e results for OVS-related checks" (Vincent Shen) 2024-11-27 21:46:22.526 logging.py DEBUG - Revert "OCPBUGS-11932: Disable checks for Open vSwitch on NSX cluster" (Vincent Shen) 2024-11-27 21:46:22.526 logging.py DEBUG - add high ANSSI-BP-028 profile for Debian (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - add enhanced ANSSI-BP-028 profile for Debian (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable package_pam_apparmor_installed for Debian (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable grub2_enable_apparmor for Debian (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable package_apparmor_installed for Debian (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable apparmor_configured for Debian (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable all_apparmor_profiles_enforced for Debian12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable debian ansible remediation in audit_rules_session_events (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable debian ansible remediation audit_rules_privileged_commands (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable debian ansible remediation in audit_rules_kernel_module_loading_init (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable debian ansible remediation in audit_rules_kernel_module_loading_finit (Alexandre Skrzyniarz) 2024-11-27 21:46:22.526 logging.py DEBUG - enable debian ansible remediation in audit_rules_kernel_module_loading_delete (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - escape pipefail for debian in rsyslog_logfiles_attributes_modify (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - Remove bogus specifier from audit_rules_privileged_commands_unix2_chkpwd rule's template (Evgeny Kolesnikov) 2024-11-27 21:46:22.527 logging.py DEBUG - Fix duplicate OVAL ids (gpgkey package, GDM login) (Evgeny Kolesnikov) 2024-11-27 21:46:22.527 logging.py DEBUG - Add STIG Tables for RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.527 logging.py DEBUG - Add CCE-ID for SLE-15 for iptables_default_forward (Christian Hagenest) 2024-11-27 21:46:22.527 logging.py DEBUG - Add CCE-ID for SLE-12 for require_singleuser_auth (Christian Hagenest) 2024-11-27 21:46:22.527 logging.py DEBUG - Fixes update-oscal.yml to remove env context from matrix variables (Jennifer Power) 2024-11-27 21:46:22.527 logging.py DEBUG - Add missing group.yml (Jan Černý) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_time_rules (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_session_events (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_networkconfig_modification (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_immutable (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_sysadmin_actions (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_time_clock_settime (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_time_adjtimex (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_login_events (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_uncuccessful_file_modification (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_file_deletion_events template (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian remediation in audit_rules_dac_modification template (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable osrelease strings ending with -amd64 to pass prefer_64bit_os check (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - Add ANSSI-BP-028 intermediary profile for Debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian 12 ansible remediation for accounts_maximum_age_login_defs rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable Debian remediation for sshd_set_keepalive rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable Debian bash remediation for sysctl template (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - add debian remediation support in grub2_bootloader_argument template and related macros (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - fix package name for debian 12 in service_auditd_enabled rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable debian 12 in aide_build_database rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.527 logging.py DEBUG - enable bash remediation for Debian in package_installed template (Alexandre Skrzyniarz) 2024-11-27 21:46:22.529 logging.py DEBUG - enable remediation for Debian in postfix client rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.529 logging.py DEBUG - change defaut root mail alias in postfix client rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.529 logging.py DEBUG - Add ANSSI-BP-028 minimal profile for Debian 12 (Alexandre Skrzyniarz) 2024-11-27 21:46:22.529 logging.py DEBUG - Updates yaml files to comply to YAML styleguide requirements (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Updates installed dependencies on nightly_build.yml and release.yaml (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Updates requirements.txt and test-requirements.txt with lxml-stubs and requests (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Adds information about the OSCAL utilities to the developer docs (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Updates OscalStatus mappings and adds unit tests (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Updates response handling to always add the status prop to the implemented requirement (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Adds ControlSelector for extensible control response selection logic (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Adds rule and parameter transformation in OSCAL props and set parameters (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Adds a separate helper class for OSCAL profile processing (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Add type hints and mypy tests for utils/oscal (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Adds control responses by status and adds status property (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Updates requirements.txt with compliance-trestle and updates test configuration (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Adds unit tests for the handle_response function (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Adds initial OSCAL component definition generation (Jennifer Power) 2024-11-27 21:46:22.529 logging.py DEBUG - Correction of step descriptions (Jan Rodak) 2024-11-27 21:46:22.529 logging.py DEBUG - Typo in product.yml (Håvard) 2024-11-27 21:46:22.529 logging.py DEBUG - Sort shared/applicability/package.yml (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Add snmpd package platform to service_snmpd_disabled (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Add autofs package platform to service_autofs_disabled (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Remove rlogin rules from RHEL9 HIPAA profile (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Add avahi package platform to service_avahi-daemon_disabled (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Remove xinetd rules from HIPAA and e8 profiles on RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Add package telnet-server platform to service_telnet_disabled (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Add squid package platform to service_squid_disabled (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Add blueprint remedation for enable_fips_mode (Matthew Burket) 2024-11-27 21:46:22.529 logging.py DEBUG - Implementation of some additional changes in ansible (rchikov) 2024-11-27 21:46:22.530 logging.py DEBUG - Update ANSSI profile description and SME for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.530 logging.py DEBUG - Update ANSSI profile description and SME for RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.530 logging.py DEBUG - Update ANSSI profile description and SME for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.530 logging.py DEBUG - Fix url to ANSSI policy in control file (Marcus Burghardt) 2024-11-27 21:46:22.530 logging.py DEBUG - Fix shellcheck in accounts_polyinstantiated_*tmp (Matthew Burket) 2024-11-27 21:46:22.530 logging.py DEBUG - Turn off blueprint remediation for mount_option_dev_shm_* (Matthew Burket) 2024-11-27 21:46:22.530 logging.py DEBUG - Remove remediations from partition_for_dev_shm (Matthew Burket) 2024-11-27 21:46:22.530 logging.py DEBUG - Remove not osbuild from enable_pam_namespace (Matthew Burket) 2024-11-27 21:46:22.530 logging.py DEBUG - Remove not os_build from accounts_polyinstantiated_*tmp (Matthew Burket) 2024-11-27 21:46:22.530 logging.py DEBUG - Remove not osbuild from selinux-booleans group (Matthew Burket) 2024-11-27 21:46:22.530 logging.py DEBUG - Make some improvements to bash remediation template (teacup-on-rockingchair) 2024-11-27 21:46:22.530 logging.py DEBUG - Add e2e test for audit_rules_login_events_faillock (Lance Bragstad) 2024-11-27 21:46:22.530 logging.py DEBUG - Removed unnecessary platform definitions in tests (Miha Purg) 2024-11-27 21:46:22.530 logging.py DEBUG - Use the rule id for the path in Kubernetes remediation (Watson Sato) 2024-11-27 21:46:22.530 logging.py DEBUG - audit_rule_login_events: handle path_is_variable in Kubernetes remediation (Watson Sato) 2024-11-27 21:46:22.530 logging.py DEBUG - Add Gate tests back to master (Matthew Burket) 2024-11-27 21:46:22.530 logging.py DEBUG - Bump actions/setup-python from 4 to 5 (dependabot[bot]) 2024-11-27 21:46:22.530 logging.py DEBUG - Update shared/templates/sebool/ansible.template (Rumen) 2024-11-27 21:46:22.530 logging.py DEBUG - Update test scenario to test file hashes (Marcus Burghardt) 2024-11-27 21:46:22.530 logging.py DEBUG - remove irrelevant rules from rhel8 and rhel9 pci-dss profile (Vojtech Polasek) 2024-11-27 21:46:22.530 logging.py DEBUG - add warnings to package_*_removed rules (Vojtech Polasek) 2024-11-27 21:46:22.530 logging.py DEBUG - Update Ubuntu STIG-20-010072 (Miha Purg) 2024-11-27 21:46:22.530 logging.py DEBUG - Add ubuntu to rule faillock_silent and fix tests (Miha Purg) 2024-11-27 21:46:22.530 logging.py DEBUG - Add ubuntu to faillock_audit rule and fix tests (Miha Purg) 2024-11-27 21:46:22.530 logging.py DEBUG - Fix for ubuntu OVALs for rules faillock_deny and faillock_interval (Miha Purg) 2024-11-27 21:46:22.530 logging.py DEBUG - Minor fix in OVAL and version bump (Miha Purg) 2024-11-27 21:46:22.531 logging.py DEBUG - Refactor ubuntu OVAL in accounts_passwords_pam_faillock_unlock_time (Miha Purg) 2024-11-27 21:46:22.531 logging.py DEBUG - Fix ubuntu OVAL for accounts_passwords_pam_faillock_unlock_time (Miha Purg) 2024-11-27 21:46:22.531 logging.py DEBUG - Fix missing platforms in tests and add ubuntu to faillock rules (Miha Purg) 2024-11-27 21:46:22.531 logging.py DEBUG - Implementation of proposed changes (rchikov) 2024-11-27 21:46:22.531 logging.py DEBUG - Add package_firewalld_installed to RHEL 9 CIS (Matthew Burket) 2024-11-27 21:46:22.531 logging.py DEBUG - Show etcd's encryption's status more clearly (Watson Sato) 2024-11-27 21:46:22.531 logging.py DEBUG - Move section to bottom of document (Jan Rodak) 2024-11-27 21:46:22.531 logging.py DEBUG - Turn off blueprint for package_MFEhiplsm_installed (Matthew Burket) 2024-11-27 21:46:22.531 logging.py DEBUG - Update DISA STIG versions in SLE STIG profiles (Christian Hagenest) 2024-11-27 21:46:22.531 logging.py DEBUG - Update DISA STIG for SLES 15 to V1 R11 (Christian Hagenest) 2024-11-27 21:46:22.531 logging.py DEBUG - remove the rule from rhel8 pci-dss profile (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - remove the rule from the rhel7 pci-dss profile (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - add warning to rule timer_logrotate_enabled (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - Show rhel article in warning only to rhel products (Marcus Burghardt) 2024-11-27 21:46:22.531 logging.py DEBUG - Show rhel article in warning only to rhel products (Marcus Burghardt) 2024-11-27 21:46:22.531 logging.py DEBUG - Show rhel article in warning only to rhel products (Marcus Burghardt) 2024-11-27 21:46:22.531 logging.py DEBUG - Make sure required ansible steps are not skipped (teacup-on-rockingchair) 2024-11-27 21:46:22.531 logging.py DEBUG - Ensure that normal UEFI does not use secure boot in install_vm.py (Matthew Burket) 2024-11-27 21:46:22.531 logging.py DEBUG - Fix Secureboot Installs (Matthew Burket) 2024-11-27 21:46:22.531 logging.py DEBUG - remove rule service_ntpd_enabled from rhel8 and rhel9 pci-dss profiles (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - add warning to rule service_ntpd_enabled that the service does not exist on some products (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - Fix style guide (Jan Rodak) 2024-11-27 21:46:22.531 logging.py DEBUG - remove stigid from rule passwd_system-auth_substack (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - replace audit_immutable_login_uids with audit_rules_immutable_login_uids in rhel9 stig (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - remove stigid from rule no longer selected in RHEL 8 STIG (Vojtech Polasek) 2024-11-27 21:46:22.531 logging.py DEBUG - Add documentation of the actual steps that OVAL content goes through during build (Jan Rodak) 2024-11-27 21:46:22.531 logging.py DEBUG - Refactor OVAL in no_files_unowned_by_user (Marcus Burghardt) 2024-11-27 21:46:22.531 logging.py DEBUG - Improve rule description in no_files_unowned_by_user (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Fix test scenario comment in alignment to the commands (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Refactor OVAL in dir_perms_world_writable_sticky_bits (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve rule description in dir_perms_world_writable_sticky_bits (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Refactor OVAL in dir_perms_world_writable_system_owned (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve rule description in dir_perms_world_writable_system_owned (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve Bash in file_permissions_unauthorized_world_writable (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Refactor OVAL in file_permissions_unauthorized_world_writable (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve rule description in file_permissions_unauthorized_world_writable (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Refactor OVAL in file_permissions_unauthorized_sgid (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve rule description in file_permissions_unauthorized_sgid (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Adopt new macro in file_permissions_unauthorized_suid (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Refactor OVAL check to not collect same objects twice (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve OVAL readability in file_permissions_unauthorized_suid (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Update file_permissions_unauthorized_suid description (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Include warning in file_permissions_ungroupowned (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Update file_permissions_ungroupowned description (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Adopt new macro in file_permissions_ungroupowned (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Introduce OVAL macro to map local mount points (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Refactor OVAL in file_permissions_ungroupowned (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve OVAL readability in file_permissions_ungroupowned (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improved OVAL readability in rpm_verify_permissions (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve rule description in rpm_verify_permissions (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Refactor OVAL in rpm_verify_ownership (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve rule description in rpm_verify_ownership (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Add ansible remediation for ubuntu for rule accounts_password_pam_unix_remember (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - Minor improvements in Ansible remediation for rpm_verify_hashes (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Minor improvements in Bash remediation for rpm_verify_hashes (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improved OVAL readability in rpm_verify_hashes (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Improve rule description in rpm_verify_hashes (Marcus Burghardt) 2024-11-27 21:46:22.532 logging.py DEBUG - Updates the PR body message in update-oscal.yml (Jennifer Power) 2024-11-27 21:46:22.532 logging.py DEBUG - Converts the README under shared/references/oscal to Markdown (Jennifer Power) 2024-11-27 21:46:22.532 logging.py DEBUG - Minor formatting for CMake section (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Add CMakeLint requirement to CMake section (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Add GitHub Actions section to style guide (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Fix wording in PR section (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Updates update-oscal to use variables for references in the repositories (Jennifer Power) 2024-11-27 21:46:22.532 logging.py DEBUG - OCPBUGS-8041: Remove info override for vsyscall kernerl argument (Lance Bragstad) 2024-11-27 21:46:22.532 logging.py DEBUG - Amend: Update e2e results for OVS-related checks (Vincent Shen) 2024-11-27 21:46:22.532 logging.py DEBUG - Added few ubuntu tests for `accounts_password_pam_unix_remember` (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - Change template for 'aide_disable_silentreports' (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - Fixed tests for aide_disable_silentreports (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - Added comment for UBTU-20-010451 (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - Remove trailing whitespaces (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - add aide_disable_silentreports rule for UBTU-20-010437 (Dexter Le) 2024-11-27 21:46:22.532 logging.py DEBUG - OCP4: Add option to deploy profile without upstrem prefix (Vincent Shen) 2024-11-27 21:46:22.532 logging.py DEBUG - Add more type hints for methods in check_eof script (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Exclude mypy_cache from check_eof (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Fix ShellCheck in secure_boot_enabled (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Fix quoting for runtime_kernel_fips_enabled CPE check (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - remove explicit remediations, check and tests from templated rule audit_rules_privileged_commands_kmod (Vojtech Polasek) 2024-11-27 21:46:22.532 logging.py DEBUG - remove explicit remediations, check and tests from templated rule audit_rules_privileged_commands_kmod (Vojtech Polasek) 2024-11-27 21:46:22.532 logging.py DEBUG - Remove all contributors file (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Move ansible_sudo_remove_config to FQCN (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Add docs for ansible_sudo_remove_config (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Fix wrong_value test in sudo_require_authentication (Matthew Burket) 2024-11-27 21:46:22.532 logging.py DEBUG - Add profile aliases for OpenShift versioned profiles (Lance Bragstad) 2024-11-27 21:46:22.532 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.4.3 to 4.5.0 (dependabot[bot]) 2024-11-27 21:46:22.532 logging.py DEBUG - Update Oracle Linux anssi profiles (Edgar Aguilar) 2024-11-27 21:46:22.532 logging.py DEBUG - Update OL8 stig selection for OL08-00-040259 (Edgar Aguilar) 2024-11-27 21:46:22.532 logging.py DEBUG - remove calls to exit from Bash remediations (Vojtech Polasek) 2024-11-27 21:46:22.532 logging.py DEBUG - OCP4: Fix e2e result on CIS kube file permission issues (Vincent Shen) 2024-11-27 21:46:22.532 logging.py DEBUG - bump version to 0.1.72 (Vojtech Polasek) 2024-11-27 21:46:22.532 logging.py DEBUG - Fixed auditd package name (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - Fix audit key check in audit_rules_privileged_commands_fdisk (Miha Purg) 2024-11-27 21:46:22.532 logging.py DEBUG - update list of contributors before 0.1.71 release (Vojtech Polasek) 2024-11-27 21:46:22.532 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_base_chain/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.532 logging.py DEBUG - Disable the build of OVAL intermediate files (Jan Rodak) 2024-11-27 21:46:22.532 logging.py DEBUG - Fix FutureWarning: The behavior of this method will change in future versions. (Jan Rodak) 2024-11-27 21:46:22.532 logging.py DEBUG - Add test (Jan Rodak) 2024-11-27 21:46:22.533 logging.py DEBUG - Add parameter for generation of OVAL document for each rule (Jan Rodak) 2024-11-27 21:46:22.533 logging.py DEBUG - Implement generation of OVAL documents for each rule (Jan Rodak) 2024-11-27 21:46:22.533 logging.py DEBUG - Generate a subset of an OVAL document according to the OVALDefinitionReference class (Jan Rodak) 2024-11-27 21:46:22.533 logging.py DEBUG - Revert "Created test cases covering /etc/audit/rules.d/privileged.rules and /etc/audit/audit.rules" (rchikov) 2024-11-27 21:46:22.533 logging.py DEBUG - Revert "Additional changes into ansible part" (rchikov) 2024-11-27 21:46:22.533 logging.py DEBUG - Revert "Modification of ansible part and test files, 2 additional tests added" (rchikov) 2024-11-27 21:46:22.533 logging.py DEBUG - add multi_platform_ubuntu to sshd_lineinfile/tests (Paul Roche) 2024-11-27 21:46:22.533 logging.py DEBUG - enable sshd_distributed_config for ubuntu2004 (Paul Roche) 2024-11-27 21:46:22.533 logging.py DEBUG - enable sshd_distributed_config for ubuntu2204 (Paul Roche) 2024-11-27 21:46:22.533 logging.py DEBUG - Update grub2_mitigation_argument texts (Edgar Aguilar) 2024-11-27 21:46:22.533 logging.py DEBUG - add suggested rules to warnings (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - fix ugly grammar from previous PR (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - remove rules not relevant to rhel7 from pcidss profile (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - add rhel7 prodtype to rules related to loopback traffic (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - add rhel7 prodtype to package_audit-audispd-plugins_installed (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - add rhel7 prodtype to service_ntp_enabled (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - Return empty list when parameter is not found (Watson Sato) 2024-11-27 21:46:22.533 logging.py DEBUG - Add check if to continue with ansible task (teacup-on-rockingchair) 2024-11-27 21:46:22.533 logging.py DEBUG - Fix attribute in reference element of OVAL definition (Jan Rodak) 2024-11-27 21:46:22.533 logging.py DEBUG - display warning for service_ntp_enabled also for sle15 (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - Add Ubuntu to audit_rules_kernel_module_loading tests (Miha Purg) 2024-11-27 21:46:22.533 logging.py DEBUG - audit_rules_privileged_commands_ssh_keysign: Fix ssh-keysign path for Ubuntu 22.04 (Eduardo Barretto) 2024-11-27 21:46:22.533 logging.py DEBUG - modify rhel8 and rhel9 pci-dss profiles to exclude rules which do not apply (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - add back prodtype to set_loopback_traffic (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - add back prodtypes to set_ipv6_loopback_traffic (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - add prodtype and warning to package-audit-audispd-plugins_installed (Vojtech Polasek) 2024-11-27 21:46:22.533 logging.py DEBUG - add back prodtype and warning to service_ntp_enabled (Vojtech Polasek) 2024-11-27 21:46:22.534 logging.py DEBUG - return prodtype to ntpd_specify_remote_server (Vojtech Polasek) 2024-11-27 21:46:22.534 logging.py DEBUG - return prodtype to ntpd_specify_multiple_servers (Vojtech Polasek) 2024-11-27 21:46:22.534 logging.py DEBUG - Add an ID translation test for the OVAL object model (Jan Rodak) 2024-11-27 21:46:22.534 logging.py DEBUG - Remove not applicable tests (Jan Rodak) 2024-11-27 21:46:22.534 logging.py DEBUG - Report an empty OVAL definition title or description (Jan Rodak) 2024-11-27 21:46:22.534 logging.py DEBUG - Adapt OVALlinker for OVAL object model (Jan Rodak) 2024-11-27 21:46:22.534 logging.py DEBUG - Add a method for OVAL object model translation (Jan Rodak) 2024-11-27 21:46:22.534 logging.py DEBUG - Add translate_id method to OVAL object model (Jan Rodak) 2024-11-27 21:46:22.534 logging.py DEBUG - add the rule to profile stability test (Vojtech Polasek) 2024-11-27 21:46:22.534 logging.py DEBUG - add enable_authselect rule to pci-dss control file (Vojtech Polasek) 2024-11-27 21:46:22.534 logging.py DEBUG - Fix kernel_module_disabled template for Ubuntu (Miha Purg) 2024-11-27 21:46:22.534 logging.py DEBUG - Removed broken test for kernel_module_disabled (Miha Purg) 2024-11-27 21:46:22.534 logging.py DEBUG - Add check if SELinux is enabled in bash sebool remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.535 logging.py DEBUG - Update e2e results for OVS-related checks (Lance Bragstad) 2024-11-27 21:46:22.535 logging.py DEBUG - OCPBUGS-11932: Disable checks for Open vSwitch on NSX cluster (Vincent Shen) 2024-11-27 21:46:22.535 logging.py DEBUG - fix: incorporates PR feedback on update-vendor.yml and directory location (Jennifer Power) 2024-11-27 21:46:22.535 logging.py DEBUG - Fix EOF in .github/pull_request_template.md (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Added .github to EOF checker (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - feat(action): adds directory and action for vendor dir (Jennifer Power) 2024-11-27 21:46:22.535 logging.py DEBUG - Reordered rules in stig profile (Miha Purg) 2024-11-27 21:46:22.535 logging.py DEBUG - Fix and modify UBTU-20-010463 (no_empty_passwords) (Miha Purg) 2024-11-27 21:46:22.535 logging.py DEBUG - Update pcidss reference for rhel8 profile stability test (Marcus Burghardt) 2024-11-27 21:46:22.535 logging.py DEBUG - Exclude rpm_verify_permissions in pcidss profiles for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.535 logging.py DEBUG - Remove old ubuntu versions from package_audit-audispd-plugins_installed (Marcus Burghardt) 2024-11-27 21:46:22.535 logging.py DEBUG - Exclude rule in pci-dss profile for rhel9 (Marcus Burghardt) 2024-11-27 21:46:22.535 logging.py DEBUG - Complement pcidss_4 requirement 10.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.535 logging.py DEBUG - Apdate style of sudo_require_reauthentication (Edgar Aguilar) 2024-11-27 21:46:22.535 logging.py DEBUG - Fix wording around remove merge commits in style guide (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Add PR title rule to the style guide (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Override the tests for audit_rules_privileged_commands_kmod (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Enable remediations for audit_rules_privileged_commands_kmod on all platforms (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Add some more comments for Ansible lint (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Update Ansible Lint Config (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Per the style guide make the prodtype now required in JSON schema. (Matthew Burket) 2024-11-27 21:46:22.535 logging.py DEBUG - Bump OL7 STIG version to V2R13 (Edgar Aguilar) 2024-11-27 21:46:22.535 logging.py DEBUG - Bump OL8 STIG version to V1R8 (Edgar Aguilar) 2024-11-27 21:46:22.535 logging.py DEBUG - Add test to sudo_require_reauthentication (Edgar Aguilar) 2024-11-27 21:46:22.535 logging.py DEBUG - Fix edge case in sudo_require_reauthentication (Edgar Aguilar) 2024-11-27 21:46:22.535 logging.py DEBUG - Update DISA STIG for SLES 12 to V2 R12 (Christian Hagenest) 2024-11-27 21:46:22.535 logging.py DEBUG - Change to multi_platform_ubuntu (Miha Purg) 2024-11-27 21:46:22.535 logging.py DEBUG - Add ubuntu product to audit_rules_kernel_odule_loading_delete tests (Miha Purg) 2024-11-27 21:46:22.535 logging.py DEBUG - Include rhv4 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2024-11-27 21:46:22.535 logging.py DEBUG - Update grub2_mitigation_argument (Edgar Aguilar) 2024-11-27 21:46:22.581 logging.py DEBUG - Include ol8 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2024-11-27 21:46:22.581 logging.py DEBUG - Include ol8 in prodtype for service_ntpd_enabled (Marcus Burghardt) 2024-11-27 21:46:22.581 logging.py DEBUG - Include rhcos4 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2024-11-27 21:46:22.581 logging.py DEBUG - Include rhel9 in prodtype for directory_access_var_log_audit (Marcus Burghardt) 2024-11-27 21:46:22.581 logging.py DEBUG - Update pcidss reference for rhel8 profile stability test (Marcus Burghardt) 2024-11-27 21:46:22.581 logging.py DEBUG - Include rhel8 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2024-11-27 21:46:22.581 logging.py DEBUG - Include rhel8 in prodtype for service_ntpd_enabled (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Include rhel cces in ntpd_specify_multiple_servers (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Define prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Define prodtype for ntpd_specify_multiple_servers (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Define prodtype for NTP service rules (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Define prodtype for set_loopback_traffic (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Define prodtype for package_audit-audispd-plugins_installed (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Define prodtype for set_ipv6_loopback_traffic (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Add log option to stcript ./build_product (Jan Rodak) 2024-11-27 21:46:22.582 logging.py DEBUG - fix kernel_config_security_writable_hooks rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.582 logging.py DEBUG - fix kernel_config_security_dmesg_restrict rule (Alexandre Skrzyniarz) 2024-11-27 21:46:22.582 logging.py DEBUG - Add awk support in sle15 containers so can run tests involving awk processing (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Fix accounts_set_post_pw_existing awk expression (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Fix name for stig_srg_mapping_test (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Add alternatives to mandatory keys (Watson Sato) 2024-11-27 21:46:22.582 logging.py DEBUG - Update PCI-DSS profile for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Update PCI-DSS profile for RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Update PCI-DSS profile for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Add docs for tests/stig_srg_mapping.py (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Add SRG Mapping test to ctest (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Add test to ensure that rules in a STIG profile have an SRG reference (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Make sure required step is not skipped (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Fix code climate issues in no_new_global_applicable_rules.py (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Clean up and add types to no_new_global_applicable_rules.py (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Add forgotten patch for custom timesyncd configuration files directory is setup for test environment (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Define prodtype for directory_access_var_log_audit (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Include related_rule for pcidss_4 requirement 10.6.3 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Update pcidss_4 requirement 10.6.2 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Complement pcidss_4 requirement 10.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Update pcidss_4 requirement 10.2.1.4 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Remove duplicated rule in pcidss_4 10.6.3 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Complement pcidss_4 requirement 10.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Improve pcidss_4 requirement 10.2.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Complement pcidss_4 requirement 10.7.2 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Enable PCI-DSS in test-farm tests (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Add SRG id to file_owner_grub2_cfg for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Remove new line (Jan Rodak) 2024-11-27 21:46:22.582 logging.py DEBUG - Enable debug loging in CMAKE (Jan Rodak) 2024-11-27 21:46:22.582 logging.py DEBUG - Add docs for `utils/no_new_global_applicable_rules.py` (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Make prodtype required on all new rules in the style guide (Matthew Burket) 2024-11-27 21:46:22.582 logging.py DEBUG - Drop service_timesyncd_configured from CIS SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Fix ansible SLES cis remediations in check mode (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Make sure custom timesyncd configuration files directory is setup for test environment (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Drop superfluous condition (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Fix by mistake overwritten comment (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Remove smart-quotes in pcidss_4.yml (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Update status of parent pcidss_4 requirements (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Complement few pcidss_4 requirement 6.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Move dconf_db_up_to_date rule in pcidss_4 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Add missing SLE15 CCE id for package_libselinux_installed rule (teacup-on-rockingchair) 2024-11-27 21:46:22.582 logging.py DEBUG - Include rhv4 in no_password_auth_for_systemaccounts (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Complement few pcidss_4 requirements (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Include prodtype in rules without SLE cce (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Fix typo and improved wording (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Complement pcidss_4 requirement 8.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Quote pcidss_4 ids that might be seen as float (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Complement pcidss_4 requirement 3.3.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Review and update pcidss_4 requirement A3.5 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Review and update pcidss_4 requirement A3.4 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Review and update pcidss_4 requirement A3.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Review and update pcidss_4 requirement A3.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Review and update pcidss_4 requirement A3.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.582 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.6 (Marcus Burghardt) 2024-11-27 21:46:22.583 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.5 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.4 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.3 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A2.1.3 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A2.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A2.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A1.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A1.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A1.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.4 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.3 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.7 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.6 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.5 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.4 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.3 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.1 and 12.10.2 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.9 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.5 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.4 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.3 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.2 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.1 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.7 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.6 (Marcus Burghardt) 2024-11-27 21:46:22.584 logging.py DEBUG - Review and update pcidss_4 requirement 12.5 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.4 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.3.4. (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.3.3. (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.3.2. (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.3 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.4 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.3 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.6 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.5.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.5.1 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.4 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 11.1 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Include option in var_password_pam_tally2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.7.3 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.7.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.7.1 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.6.3 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.6.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.6.1 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.5.1 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.4.3 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.585 logging.py DEBUG - Review and update pcidss_4 requirement 10.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.3.1 and 10.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.7 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.6 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.5 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Fix small indentation issue in 10.2.1.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 10.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Fix typo in pcidss_4 reference in 3 rules (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.5 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.7 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.6 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.5 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 9.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Fix typo in description key of 8.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.6.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.6.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.6.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.5 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.11 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.10 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.9 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.8 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.7 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.6 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.5 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.8 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.7 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.6 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.5 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 8.1 (Marcus Burghardt) 2024-11-27 21:46:22.586 logging.py DEBUG - Review and update pcidss_4 requirement 7.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.587 logging.py DEBUG - Review and update pcidss_4 requirement 7.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.6 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.5 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 7.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.6 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.5 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.4 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.4.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 6.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.5 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.4 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.2 and 5.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 5.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 4.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.7.8 and 3.7.9 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Include pcidss_4 missing requirement 3.7.7 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.7.1 to 3.7.6 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.6.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.6.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.6.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.5.1.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.5.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.5.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.4 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.2 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 3.1 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 2.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.7 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.6 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.5 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.588 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.589 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.589 logging.py DEBUG - Review and update pcidss_4 requirement 2.1 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.5.1 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Change 1.4.2 and 1.4.3 from automated to partial (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.5 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.4 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.3 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.2 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.1 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.3.3 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.3.2 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.3.1 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.8 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.7 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.6 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Include pcidss_4 missing requirement 1.2.5 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.4 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.3 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.2 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.1 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.1.2 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Review and update pcidss_4 requirement 1.1.1 (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Update pcidss_4 control file header (Marcus Burghardt) 2024-11-27 21:46:22.590 logging.py DEBUG - Improve stability of timesyncd based remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.590 logging.py DEBUG - Reformat combine_ovals.py with black tool (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Fix comparation of object in python2 (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Modify tests to use the new OVAL bulder (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Modify combine_ovals.py to use the new OVAL bulder (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Modify the OVAL builder to use the OVAL object model (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Fix CI job after Fedora 39 release (Jan Černý) 2024-11-27 21:46:22.591 logging.py DEBUG - Modification of ansible part and test files, 2 additional tests added (rchikov) 2024-11-27 21:46:22.591 logging.py DEBUG - Add new script to ensure that no new rules don't have a prodtype (Matthew Burket) 2024-11-27 21:46:22.591 logging.py DEBUG - Update the RHEL8 STIG profile stability data (Simon THOBY) 2024-11-27 21:46:22.591 logging.py DEBUG - Fix multiple STIG IDs for RHEL8 (THOBY Simon) 2024-11-27 21:46:22.591 logging.py DEBUG - Switch set_firewalld_default_zone to a 'lineinfile' template (Simon THOBY) 2024-11-27 21:46:22.591 logging.py DEBUG - Add a warning to rule service_rngd_enabled (Jan Černý) 2024-11-27 21:46:22.591 logging.py DEBUG - Extend OVAL filters to exclude dracut temp files (Marcus Burghardt) 2024-11-27 21:46:22.591 logging.py DEBUG - Include test scenario for dracut temp files (Marcus Burghardt) 2024-11-27 21:46:22.591 logging.py DEBUG - Minor update to remove extra empty line (Marcus Burghardt) 2024-11-27 21:46:22.591 logging.py DEBUG - Include test scenario for extra rules (Marcus Burghardt) 2024-11-27 21:46:22.591 logging.py DEBUG - Changes into template sebool - bash part (rchikov) 2024-11-27 21:46:22.591 logging.py DEBUG - Changes into template sebool - ansible part (rchikov) 2024-11-27 21:46:22.591 logging.py DEBUG - remove duplicated multi_platform_sle in bash.template (Whidix) 2024-11-27 21:46:22.591 logging.py DEBUG - Remove warning from kubelet rule. (Thomas Montague) 2024-11-27 21:46:22.591 logging.py DEBUG - Add var_networkmanager_dns_mode to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.591 logging.py DEBUG - Restore CRONTAB and CRONDIRS variables needed for non-SLE solution (teacup-on-rockingchair) 2024-11-27 21:46:22.591 logging.py DEBUG - Additional changes into ansible part (rchikov) 2024-11-27 21:46:22.591 logging.py DEBUG - Fix docs for utils.add_kubernetes_rule (Matthew Burket) 2024-11-27 21:46:22.591 logging.py DEBUG - Add Stabilization phase document reference to Release process doc (Milan Lysonek) 2024-11-27 21:46:22.591 logging.py DEBUG - Add stabilization phase description to developers guide (Milan Lysonek) 2024-11-27 21:46:22.591 logging.py DEBUG - Add optional product argument (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Add tests (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Add validation of referenced OVAL components (Jan Rodak) 2024-11-27 21:46:22.591 logging.py DEBUG - Use GITHUB_SHA instead (Thomas Montague) 2024-11-27 21:46:22.591 logging.py DEBUG - Use recommended Github reference name for image tag. (Thomas Montague) 2024-11-27 21:46:22.591 logging.py DEBUG - Move jqfilter parameter to common parser (Watson Sato) 2024-11-27 21:46:22.591 logging.py DEBUG - Update RHEL 9 STIG IDs based on feedback (Matthew Burket) 2024-11-27 21:46:22.591 logging.py DEBUG - remove sle15 from package_samba_common_installed (Whidix) 2024-11-27 21:46:22.591 logging.py DEBUG - Rename script to add_kuberentes_rule.py (Watson Sato) 2024-11-27 21:46:22.591 logging.py DEBUG - Add support for rules with jqfilters (Watson Sato) 2024-11-27 21:46:22.591 logging.py DEBUG - Create rules in a more yaml friendly approach (Watson Sato) 2024-11-27 21:46:22.591 logging.py DEBUG - Remove references to CIS/STIG benchmarks, since Debian 12 has not been released. (Paul Rensing) 2024-11-27 21:46:22.591 logging.py DEBUG - Fix rsyslog file test - use Jinja variable for group name (Paul Rensing) 2024-11-27 21:46:22.591 logging.py DEBUG - Fix test of gshadow - should fix most Debian versions (Paul Rensing) 2024-11-27 21:46:22.592 logging.py DEBUG - Some templates which need Debian12 listed (Paul Rensing) 2024-11-27 21:46:22.592 logging.py DEBUG - Copy Debian11 product to Debian12 (Paul Rensing) 2024-11-27 21:46:22.592 logging.py DEBUG - Fix rule mapping for RHEL-09-213075 (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Fix rule mapping for RHEL-09-271030 and RHEL-09-271035 (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Update rule mapping for RHEL-09-654180 (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Add aide_scan_notification to RHEL-09-651015 (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Corrections for rsyslog_logfiles_attributes PR #2 (Miha Purg) 2024-11-27 21:46:22.592 logging.py DEBUG - Add RHEL 9 regex for var_accounts_authorized_local_users_regex (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Fix formatting in the RHEL 9 STIG Control File (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Ensure RHEL 9 STIG version is in all right places (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Added missing variables to ubuntu profiles (Miha Purg) 2024-11-27 21:46:22.592 logging.py DEBUG - Corrections for rsyslog_logfiles_attributes PR (Miha Purg) 2024-11-27 21:46:22.592 logging.py DEBUG - Modified ensure_rsyslog_log_file_conf OVAL to allow user/groupnames (Miha Purg) 2024-11-27 21:46:22.592 logging.py DEBUG - Fix for rsyslog_logfiles_attributes remediation for ubuntu (Miha Purg) 2024-11-27 21:46:22.592 logging.py DEBUG - Added ubuntu to tests for rule 'rsyslog_logfiles_attributes_modify' (Miha Purg) 2024-11-27 21:46:22.592 logging.py DEBUG - Don't hard code the wheel group in selinux_context_elevation_for_sudo (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Move selinux_context_elevation_for_sudo tests to all platforms (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Update RHEL7 STIG profiles to V3R13. (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Move RHEL 9 STIG Refchecker back to the macro (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Update on RHEL 9 STIG based on code review (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Add Unit tests (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Fix missing tag of affected element child (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Inherit features from OVAL container to OVAL document (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Create OVAL shorthand class (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Create OVAL container class (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Create class for stroing references of OVAL definitions (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Update tests (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Add logging and fix imports (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Update info about generator in genereted OVAL document (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Add methods for obtaining references (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Add a method to the OVAL definition that checks if the Affected in Metadata field is not empty (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - Add a method to the OVAL Definition that checks if it is applicable to the product (Jan Rodak) 2024-11-27 21:46:22.592 logging.py DEBUG - update link to ISO27001:2013 standard (Vojtech Polasek) 2024-11-27 21:46:22.592 logging.py DEBUG - update links to RHEL 8 and 9 chrony documentation (Vojtech Polasek) 2024-11-27 21:46:22.592 logging.py DEBUG - Update RHEL 7 DISA SCAP content to V3R13 (Matthew Burket) 2024-11-27 21:46:22.592 logging.py DEBUG - Update RHEL 7 STIG content to V3R13 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Update RHEL 8 STIG profiles (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Update RHEL 8 DISA SCAP Content (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Update RHEL 8 STIG Manual (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Pull service_rngd_enabled from the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Move RHEL-09-672030 to configure_crypto_policy (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Pull rpm_verify_hashes from RHEL-09-214030 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add a better Error Message For Undefined Identifier Types (Jan Černý) 2024-11-27 21:46:22.593 logging.py DEBUG - Fix rpm python package SLE15 Automatus docker file (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Adopt gpasswd command for Bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.593 logging.py DEBUG - Remove warning about missing remediation (Marcus Burghardt) 2024-11-27 21:46:22.593 logging.py DEBUG - Fix test scenarios for fapolicy_default_deny (Marcus Burghardt) 2024-11-27 21:46:22.593 logging.py DEBUG - Create Ansible remediation for fapolicy_default_deny (Marcus Burghardt) 2024-11-27 21:46:22.593 logging.py DEBUG - Create bash remediation for fapolicy_default_deny (Marcus Burghardt) 2024-11-27 21:46:22.593 logging.py DEBUG - Fix Codeclimate issues (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Remove add_stigid_from_csv (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Updated rule selection for RHEL-09-271090 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Adjust rule for RHEL-09-253075 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add rule for RHEL-09-252040 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add rule for RHEL-09-232235 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add rule for RHEL-09-232230 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add rule for RHEL-09-252020 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Adjust rule for RHEL-09-213040 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Adjust rule for RHEL-09-212040 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add rule for RHEL-09-211025 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add more rules for RHEL-09-654025 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add more rules for RHEL-09-412020 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add more rules for RHEL-09-654015 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add more rules for RHEL-09-654020 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add rule for RHEL-09-654080 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add more rules for RHEL-09-654070 (Matthew Burket) 2024-11-27 21:46:22.593 logging.py DEBUG - Add more rules for RHEL-09-654065 (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Exclude enable_authselect from the refcheck on RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Update controlrefcheck script for STIGIDs (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add STIGID to cro file_owner_* rules (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add second RHEL 9 STIG for configure_crypto_policy (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Fix mix up with STIG IDs for RHEL 9 on /var/log mount opts (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Fix STIGID for package_s-nail_installed in RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add RHEL 9 STIG manual (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add STIG ID to file_audit_tools_group_ownership (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Fix rule assignment for RHEL-09-231150 (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Ensure that spacing is correct for all controls in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add rules for RHEL-09-232230 in the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add rules for RHEL-09-232225 in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add package_s-nail_installed to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Fix var_auditd_max_log_file_action (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add var_sssd_certificate_verification_digest_function for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add var_accounts_maximum_age_login_defs vars for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Fix var_accounts_authorized_local_users_regex (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add var for chronyd_or_ntpd_set_maxpoll to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Fix Needed rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Update RHEL 9 STIG FIPS rule (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add enable_authselect rule to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add password vars for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add failock vars for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add sshd_idle_timeout_value var to RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add SELinux vars for the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add PAM variables (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add umask variable (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add rekey variables (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add tests for RHEL 9 STIG control file (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Format add variables for the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add RHEL 9 STIGID for service_debug-shell_disabled (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Fix RHEL 9 STIG ID for RHEL-09-215060 (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Move the RHEL 9 STIG to the RHEL 9 STIG Control File (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add the RHEL 9 STIG Control File (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Add RHEL 9 STIG IDs (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Improve the import script. (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - First draft of utils/add_stigid_from_csv.py (Matthew Burket) 2024-11-27 21:46:22.594 logging.py DEBUG - Also remove groupmems from test scenario script (Marcus Burghardt) 2024-11-27 21:46:22.594 logging.py DEBUG - Remove groupmems from Bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.594 logging.py DEBUG - Fixed broken bash remediation for 'set_nftables_loopback_traffic' (Miha Purg) 2024-11-27 21:46:22.594 logging.py DEBUG - Minor fix for pam_faillock regex on Ubuntu (5.4.2) (Miha Purg) 2024-11-27 21:46:22.595 logging.py DEBUG - Add more information on the SLE15 approach to the aidecheck notifications (teacup-on-rockingchair) 2024-11-27 21:46:22.595 logging.py DEBUG - Fix bash remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.595 logging.py DEBUG - Add SLE15 specific remediation for aide check notification (teacup-on-rockingchair) 2024-11-27 21:46:22.595 logging.py DEBUG - Add checks that allow notification to be implemented via systemd unit (teacup-on-rockingchair) 2024-11-27 21:46:22.595 logging.py DEBUG - Make sure to use aide_periodic_checking_systemd_timer for sle15 platform (teacup-on-rockingchair) 2024-11-27 21:46:22.595 logging.py DEBUG - Update OVAL in sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2024-11-27 21:46:22.595 logging.py DEBUG - Fix typos (Jan Černý) 2024-11-27 21:46:22.595 logging.py DEBUG - Corrections in bash/ansible remedition of the rule audit_rules_privileged_commands_kmod (rchikov) 2024-11-27 21:46:22.595 logging.py DEBUG - Avoid duplicate loading of component files (Jan Černý) 2024-11-27 21:46:22.595 logging.py DEBUG - Review use_pam_wheel_group_for_su description (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Rephrase the rule description and include warning (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Include fixtext section (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Improve Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Simplify bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Simplify test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Using an empty value for group has no effect (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Refactored OVAL to make it simpler and more efficient (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Updates about style and comments on OVAL (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - update sle15 test data (svet-se) 2024-11-27 21:46:22.595 logging.py DEBUG - remove unused code (Šimon Lukašík) 2024-11-27 21:46:22.595 logging.py DEBUG - Add cron.deny owner rules to srg_gpos control (Matthew Burket) 2024-11-27 21:46:22.595 logging.py DEBUG - Add new rule file_groupowner_cron_deny (Matthew Burket) 2024-11-27 21:46:22.595 logging.py DEBUG - Add new rule file_owner_cron_deny (Matthew Burket) 2024-11-27 21:46:22.595 logging.py DEBUG - Minor updates in rule description (Marcus Burghardt) 2024-11-27 21:46:22.595 logging.py DEBUG - Exlcude timer_logrotate_enabled from the RHEL8 and RHEL9 anssi profiles (Matthew Burket) 2024-11-27 21:46:22.595 logging.py DEBUG - Add package requirement for auditctl tests (teacup-on-rockingchair) 2024-11-27 21:46:22.595 logging.py DEBUG - Fix rule title for networkmanager_dns_mode (Matthew Burket) 2024-11-27 21:46:22.596 logging.py DEBUG - nftables: sce: Same principle of commit 3d87ab8 (Eduardo Barretto) 2024-11-27 21:46:22.596 logging.py DEBUG - Fix Ansible variable name in networkmanager_dns_mode (Matthew Burket) 2024-11-27 21:46:22.596 logging.py DEBUG - Add a platform for timer_logrotate_enabled on RHEL products (Matthew Burket) 2024-11-27 21:46:22.596 logging.py DEBUG - Add timer_logrotate_enabled back to RHEL 7 and RHEL 8 (Matthew Burket) 2024-11-27 21:46:22.596 logging.py DEBUG - remove some unnecessary imports (Šimon Lukašík) 2024-11-27 21:46:22.596 logging.py DEBUG - Fix privileged commands not concating gathered lists (Mackemania) 2024-11-27 21:46:22.596 logging.py DEBUG - install python-rpm package so to be able to run some ansible tests (svet-se) 2024-11-27 21:46:22.596 logging.py DEBUG - override crontabs package (svet-se) 2024-11-27 21:46:22.597 logging.py DEBUG - Created test cases covering /etc/audit/rules.d/privileged.rules and /etc/audit/audit.rules (rchikov) 2024-11-27 21:46:22.597 logging.py DEBUG - Add how to run unit tests via ctest (Jan Rodak) 2024-11-27 21:46:22.597 logging.py DEBUG - Add Documentation about tox unit tests (Jan Rodak) 2024-11-27 21:46:22.597 logging.py DEBUG - Disable flake8 (Jan Rodak) 2024-11-27 21:46:22.597 logging.py DEBUG - A fix into ansible part of the rule audit_rules_suid_privilege_function (rchikov) 2024-11-27 21:46:22.597 logging.py DEBUG - Bump version for 0.1.71 (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - fix sle remediation to unmask logrotate timer service (svet-se) 2024-11-27 21:46:22.597 logging.py DEBUG - Select the var_accounts_passwords_pam_faillock_dir=run in RHEL7 profiles. (Gabriel Becker) 2024-11-27 21:46:22.597 logging.py DEBUG - A change in ansible remediation part (rchikov) 2024-11-27 21:46:22.597 logging.py DEBUG - Add merge group trigger to required jobs (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Ensure that NetworkManger is relaoded after networkmanager_dns_mode (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Add var and profiles to the editorconfig file (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Add networkmanager_dns_mode to SRG GPOS Control (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Add new rule networkmanager_dns_mode (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Fix add_reference_elements sad path (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Update Contributors for v0.1.70 (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Small changes in bash and ansible fixes of the rule aide_build_database (rchikov) 2024-11-27 21:46:22.597 logging.py DEBUG - Add JSON schmea for controls (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Add JSON schema for variables (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Add version metadata to the OCP PCI-DSS profile (Lance Bragstad) 2024-11-27 21:46:22.597 logging.py DEBUG - Version FedRAMP high and moderate profiles for OpenShift (Lance Bragstad) 2024-11-27 21:46:22.597 logging.py DEBUG - Add version for OCP STIG (Lance Bragstad) 2024-11-27 21:46:22.597 logging.py DEBUG - Add version for OCP CIS (Lance Bragstad) 2024-11-27 21:46:22.597 logging.py DEBUG - Update test on sshd_lineinfile (Edgar Aguilar) 2024-11-27 21:46:22.597 logging.py DEBUG - Update ansible in sshd_lineinfile (Edgar Aguilar) 2024-11-27 21:46:22.597 logging.py DEBUG - Add ansible remediation for root group owner of audit for UBTU-20-010124 (Dexter Le) 2024-11-27 21:46:22.597 logging.py DEBUG - Use shared remediations for non-template applicable OS's (Dexter Le) 2024-11-27 21:46:22.597 logging.py DEBUG - Update Mailmap (Matthew Burket) 2024-11-27 21:46:22.597 logging.py DEBUG - Update ansible in sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2024-11-27 21:46:22.598 logging.py DEBUG - Update Packit (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - Skipp tests that behave strangely in python2 (Jan Rodak) 2024-11-27 21:46:22.598 logging.py DEBUG - Add unit test execution with coverage for ssg module and flake8 for project (Jan Rodak) 2024-11-27 21:46:22.598 logging.py DEBUG - Fix datetime for older Python (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - Remove old build documentation before build (Jan Rodak) 2024-11-27 21:46:22.598 logging.py DEBUG - Remove a test that doesn't test anything (Jan Rodak) 2024-11-27 21:46:22.598 logging.py DEBUG - Ignore coverage files (Jan Rodak) 2024-11-27 21:46:22.598 logging.py DEBUG - [utils/create_scap_delta_tailoring.py] Fix case where the profile was not found (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - str are not bools (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - Move to datetime.datetime.now(datetime.UTC) (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - Add package_s-nail_installed to SRG GPOS control (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - Add rule package_s-nail_installed (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - Add capability to create node rules (Watson Sato) 2024-11-27 21:46:22.598 logging.py DEBUG - Add libvirt-dev to read the docs apt packages (Matthew Burket) 2024-11-27 21:46:22.598 logging.py DEBUG - fix lint errors (Vojtech Polasek) 2024-11-27 21:46:22.598 logging.py DEBUG - Disable sysctl_kernel_yama_ptrace_scope rule for sle15 (teacup-on-rockingchair) 2024-11-27 21:46:22.598 logging.py DEBUG - Add SELinux as platform (teacup-on-rockingchair) 2024-11-27 21:46:22.598 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Add a unit test (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Fail build if controls contain invalid rule IDs (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Fix broken profile resolution (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Add accounts_users_own_home_directories to Ubuntu 22.04 (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Add missing prodtypes (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Fix broken autoprodtyper tool (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Fix invalid rule ID (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Add sysctl_kernel_exec_shield to OL 9 (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Add kerberos_disable_no_keytab to OL 9 (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Add package_python3-abrt-addon_removed to OL 8 (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Remove audit_rules_privileged_commands_pt_chown from Fedora OSPP (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:22.598 logging.py DEBUG - Remove rules from SLE15 standard profile (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Add missing prodtypes to rule package_iptables_installed (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Remove locking_out_password_attempts from profiles (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Remove rule service_zebra_disabled from RHEL 9 HIPAA profile (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Remove service_rexec_disabled from RHEL 9 HIPAA profile (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Remove rule service_zebra_disabled from RHEL 9 E8 profile (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Fix rule ID (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - ubuntu2004: cis_level1_server: Add missing nftables_base_chain variables (Eduardo Barretto) 2024-11-27 21:46:22.599 logging.py DEBUG - ubuntu2204: cis_level1_server: Add missing nftables_base_chain variables (Eduardo Barretto) 2024-11-27 21:46:22.599 logging.py DEBUG - set_nftables_loopback_traffic: bash: Improve bash and store ruleset (Eduardo Barretto) 2024-11-27 21:46:22.599 logging.py DEBUG - nftables_rules_permanent: Add Ubuntu specific bash and OVAL and drop SCE (Eduardo Barretto) 2024-11-27 21:46:22.599 logging.py DEBUG - nftables: sce: Improve scripts to avoid text being recognized (Eduardo Barretto) 2024-11-27 21:46:22.599 logging.py DEBUG - Build OCP STIG profiles by default (Watson Sato) 2024-11-27 21:46:22.599 logging.py DEBUG - Update developer page with tox method for building sphinx docs (Stephen L Arnold) 2024-11-27 21:46:22.599 logging.py DEBUG - Move master to use merge groups (Matthew Burket) 2024-11-27 21:46:22.599 logging.py DEBUG - Make new functions more readable (Marcus Burghardt) 2024-11-27 21:46:22.599 logging.py DEBUG - Rename a variable (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Convert derivative name to original product ID (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Refactor: Extract function (Jan Černý) 2024-11-27 21:46:22.599 logging.py DEBUG - Export controls content metrics to Prometheus (Marcus Burghardt) 2024-11-27 21:46:22.599 logging.py DEBUG - Update package_audit-libs_installed rule.yml (Whidix) 2024-11-27 21:46:22.599 logging.py DEBUG - Extend controleval.py to show rules and variables (Marcus Burghardt) 2024-11-27 21:46:22.599 logging.py DEBUG - Include rules list for each control (Marcus Burghardt) 2024-11-27 21:46:22.599 logging.py DEBUG - remove forgotten no longer used function (Vojtech Polasek) 2024-11-27 21:46:22.599 logging.py DEBUG - rework applicability check of test scenarios (Vojtech Polasek) 2024-11-27 21:46:22.599 logging.py DEBUG - Add shorthand with variable and state (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Fix attrubite with namespaces (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Fix misleading code (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Separate tag and namespace (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Move constant from ssg/oval_object_model/general.py to ssg/constants.py (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Fix Code climate and python2 support (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Create tests for load and store of an OVAL document (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Rename OVALEndPoint to OVAL Entity (Jan Rodak) 2024-11-27 21:46:22.599 logging.py DEBUG - Add object of OVAL document (Jan Rodak) 2024-11-27 21:46:22.600 logging.py DEBUG - Add object reprezentation of OVAL entities (Jan Rodak) 2024-11-27 21:46:22.600 logging.py DEBUG - Add general utilities for OVAL object model (Jan Rodak) 2024-11-27 21:46:22.600 logging.py DEBUG - Unify file saving (Jan Černý) 2024-11-27 21:46:22.600 logging.py DEBUG - Remove unused logging (Jan Černý) 2024-11-27 21:46:22.600 logging.py DEBUG - accounts_umask_etc_bashrc: ansible: Fix bashrc path for Ubuntu (Eduardo Barretto) 2024-11-27 21:46:22.600 logging.py DEBUG - Enable ansible and bash remediation for sssd for UBTU-20-010441 (Dexter Le) 2024-11-27 21:46:22.600 logging.py DEBUG - Add Ubuntu ansible remediation and shorten shared ansible for UBTU-20-010450 (Dexter Le) 2024-11-27 21:46:22.600 logging.py DEBUG - Change how example ROLE_LIST are formatted (Watson Sato) 2024-11-27 21:46:22.600 logging.py DEBUG - Remove dnf5 from Rawhide job (Jan Černý) 2024-11-27 21:46:22.600 logging.py DEBUG - Fix OrderedDict definition (Jan Černý) 2024-11-27 21:46:22.600 logging.py DEBUG - Bump paambaati/codeclimate-action from 4.0.0 to 5.0.0 (dependabot[bot]) 2024-11-27 21:46:22.600 logging.py DEBUG - Fix Ansible Tasks order (Jan Černý) 2024-11-27 21:46:22.600 logging.py DEBUG - Remove the rule accounts_passwords_pam_faillock_interval from SLE profiles (rchikov) 2024-11-27 21:46:22.600 logging.py DEBUG - Fix path for aide to /etc/aide/aide.conf for UBTU-20-010205 (Dexter Le) 2024-11-27 21:46:22.600 logging.py DEBUG - [utils/create-stig-overlay.py] Marked the output flag as required (Matthew Burket) 2024-11-27 21:46:22.600 logging.py DEBUG - [utils/create-stig-overlay.py] raw_input -> input (Matthew Burket) 2024-11-27 21:46:22.600 logging.py DEBUG - Use fromJSON function to expand rules from CTF (Gabriel Becker) 2024-11-27 21:46:22.640 logging.py DEBUG - Simplify ansible remediation of auditd_name_format. (Gabriel Becker) 2024-11-27 21:46:22.641 logging.py DEBUG - Fix ansible remediation style. (Gabriel Becker) 2024-11-27 21:46:22.641 logging.py DEBUG - Make sure value none is double quoted in variables. (Gabriel Becker) 2024-11-27 21:46:22.641 logging.py DEBUG - Add warning to auditd_name_format. (Gabriel Becker) 2024-11-27 21:46:22.641 logging.py DEBUG - Select STIG variable for auditd_name_format in STIG profiles. (Gabriel Becker) 2024-11-27 21:46:22.641 logging.py DEBUG - Make auditd_name_format accept multiple valid values. (Gabriel Becker) 2024-11-27 21:46:22.641 logging.py DEBUG - Add variable support to configure_auditd_data_retention rule. (Gabriel Becker) 2024-11-27 21:46:22.641 logging.py DEBUG - fix ssh-keysign path for UBTU-20-010141 (Dexter Le) 2024-11-27 21:46:22.641 logging.py DEBUG - Add UBTU-20-010463 to ensure system does not allow accounts configured with blank or null pass (Dexter Le) 2024-11-27 21:46:22.641 logging.py DEBUG - Add dependabot (Matthew Burket) 2024-11-27 21:46:22.641 logging.py DEBUG - Revert actions/checkout to v3 on CentOS 7 (Matthew Burket) 2024-11-27 21:46:22.641 logging.py DEBUG - Fix UBTU-20-010179 to use proper parameters and key (Dexter Le) 2024-11-27 21:46:22.641 logging.py DEBUG - Enable ansible remediation for MACs SSH UBTU-20-010043 (Dexter Le) 2024-11-27 21:46:22.641 logging.py DEBUG - Add UBTU-20-010461 to ensure kernel module usb-storage is blacklisted and disabled (Dexter Le) 2024-11-27 21:46:22.641 logging.py DEBUG - Refactor logic and fix ocil for UBTU-20-010033 (Dexter Le) 2024-11-27 21:46:22.641 logging.py DEBUG - Fix ansible for accounts_umask_interactive_users (Edgar Aguilar) 2024-11-27 21:46:22.641 logging.py DEBUG - Fix UBTU-20-10450 STIG (Dexter Le) 2024-11-27 21:46:22.641 logging.py DEBUG - Update changelog to use new format (Matthew Burket) 2024-11-27 21:46:22.641 logging.py DEBUG - Update mikepenz/release-changelog-builder-action@v3 to v4 (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Update actions/checkout@v{2,3} to actions/checkout@v4 (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Update notiz-dev/github-action-json-property from 0.1.0 to 0.2.0 (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Update actions/upload-artifact from 2 to 3 (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Update JamesIves/github-pages-deploy-action from 4.3.3 to 4.4.3 (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Update geekyeggo/delete-artifact to v2 (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Add support for xccdf_variable (Watson Sato) 2024-11-27 21:46:22.642 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:22.642 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:22.642 logging.py DEBUG - Fix Automatus traceback (Jan Černý) 2024-11-27 21:46:22.642 logging.py DEBUG - Use var_accounts_passwords_pam_faillock_dir in audit_rules_login_events (Jan Černý) 2024-11-27 21:46:22.642 logging.py DEBUG - Add rules for GRUB2 permissions to standard profile (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Add file owner and group owner rules for auth files to standard (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Add gid_passwd_group_same to standard profile (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Add service_auditd_enabled to standard (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - Add file permission for /etc/{group,passwd,shadow} (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - fix delete_module for UBTU-20-010181 (Dexter Le) 2024-11-27 21:46:22.642 logging.py DEBUG - add sphinxcontrib-apidoc to docs build, test sphinx with tox file (Stephen L Arnold) 2024-11-27 21:46:22.642 logging.py DEBUG - Update bash for accounts_umask_etc_profile (Edgar Aguilar) 2024-11-27 21:46:22.642 logging.py DEBUG - Add test to accounts_umask_interactive_users (Edgar Aguilar) 2024-11-27 21:46:22.642 logging.py DEBUG - Fix bash for accounts_umask_interactive_users (Edgar Aguilar) 2024-11-27 21:46:22.642 logging.py DEBUG - Remove DRAFT wording for OpenShift STIG (Lance Bragstad) 2024-11-27 21:46:22.642 logging.py DEBUG - api_server_encryption_provider_cipher rule.yml has bad jsonpath (Paul Bastide) 2024-11-27 21:46:22.642 logging.py DEBUG - Update Ubuntu 20.04 DISA Manual STIG to v1r9 (Dexter Le) 2024-11-27 21:46:22.642 logging.py DEBUG - Replace shell command with find for chrony.conf files on UBTU-20-010435 (Dexter Le) 2024-11-27 21:46:22.642 logging.py DEBUG - Add rsyslog ansible remediation for UBTU-20-010403 (Dexter Le) 2024-11-27 21:46:22.642 logging.py DEBUG - Add remediation and OVAL for UBTU-20-010297 (Dexter Le) 2024-11-27 21:46:22.642 logging.py DEBUG - Fix path and add ansible remediation UBTU-20-010298 (Dexter Le) 2024-11-27 21:46:22.642 logging.py DEBUG - Updates based reviewer feedback in #11076 (Matthew Burket) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro bash_firefox_cfg_setting (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: ansible_pkg_conditional: use basic types (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro ocil_firefox_config (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro fixtext_audit_rules_comman (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro kubernetes_machine_config_file_with_required_value (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro kubernetes_machineconfig_auditd_config_with_required_value (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro ansible_etc_profile_set (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro body_of_warning_about_dependent_rule (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro bash_perform_audit_rules_privileged_commands_remediation (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro kernel_build_config_ocil (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: jinja: remove unused macro kernel_build_config_warning (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: join_list: use full type (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: create_system_accounts_list_object: param/type format (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: machine_volume_encrypted: extra } in ocil (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: openshift_cluster_setting/doc: type change (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: openshift_filtered_cluster_setting: typing (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: oval_argument_value_in_line_test: set value really optional (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: oval_line_in_file_state: change multi_value is boolean (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification: use full type (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_chown: duplicate macro definition (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: ocil_firewalld_*_access: either service or port+proto (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: describe_firewalld_prevent: rename and simplify (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: describe_firewalld_allow: split either service or proto (Markus Linnala) 2024-11-27 21:46:22.642 logging.py DEBUG - fix: harden_ssh_client_crypto_policy: multi_value is boolean (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - fix: jinja: remove unused macro bash_firefox_js_setting (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - fix: audit_syscalls_rule: key is optional (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - fix: ansible_set_config_file: escape_regex not used (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - style: jinja: ws cleanum in macro body (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - style: jinja macros: add/remove newlines (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - style: jinja macros: no 2 consecutive emtpy lines (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - change: style_guide: use python typing types (Markus Linnala) 2024-11-27 21:46:22.643 logging.py DEBUG - Fix excluded_files and recursive for UBTU-20-010416 (Dexter Le) 2024-11-27 21:46:22.643 logging.py DEBUG - Fix UBTU-20-010267 and deprecate STIGs (Dexter Le) 2024-11-27 21:46:22.643 logging.py DEBUG - Deprecate UBTU-20-010180 (Dexter Le) 2024-11-27 21:46:22.643 logging.py DEBUG - Remove override-true-all-profile-* tests (Matthew Burket) 2024-11-27 21:46:22.643 logging.py DEBUG - Expand docs for STIG spreadsheets (Matthew Burket) 2024-11-27 21:46:22.644 logging.py DEBUG - Generate metrics file in build folder (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Add UBTU-20-010044 to existing ansible remediation (Dexter Le) 2024-11-27 21:46:22.644 logging.py DEBUG - Fix UBTU-20-010449 ansible remediation to proper path and substitution (Dexter Le) 2024-11-27 21:46:22.644 logging.py DEBUG - Add UBTU-20-010401 to restrict kernel message buffer (Dexter Le) 2024-11-27 21:46:22.644 logging.py DEBUG - Add UBTU-20-010462 to lock accounts without passwords (Dexter Le) 2024-11-27 21:46:22.644 logging.py DEBUG - Add UBTU-20-010181 for generating audit record for unsuccessful attempts to delete_module syscall (Dexter Le) 2024-11-27 21:46:22.644 logging.py DEBUG - fix naming for UBTU-20-010430 (Dexter Le) 2024-11-27 21:46:22.644 logging.py DEBUG - Ensure prometheus-client module is installed (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Update generate_html_pages.sh to include policies metrics (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Include task to generate policies metrics (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - sshd_use_approved_kex_ordered_stig: tests: Fix logic in correct_scrambled (Eduardo Barretto) 2024-11-27 21:46:22.644 logging.py DEBUG - sshd_use_approved_kex_ordered_stig: tests: Fix typo in correct_scrambled (Eduardo Barretto) 2024-11-27 21:46:22.644 logging.py DEBUG - Add UBTU-20-010045 for enforcing proper kex exchange algorithms (Dexter Le) 2024-11-27 21:46:22.644 logging.py DEBUG - sshd_use_approved_kex_ordered_stig: oval: Fix regex and improve comment (Eduardo Barretto) 2024-11-27 21:46:22.644 logging.py DEBUG - Include conditional ctest for prometheus metrics (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Minor comment update in requirements.txt (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Remove prometheus functions from controleval.py (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Introduce the controleval_metrics.py (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Make the output to stdout as default (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Update requirements.txt for prometheus in controleval.py (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Abbreviate controls_manager to ctrls_mgr (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Minor type hints updates in new functions (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Create functions to create prometheus registry (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Create functions to collect prometheus metrics (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Define new subcmd for Prometheus metrics (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Simplify main function (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Fix minor typo (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - sshd_use_strong_kex: Fix OVAL variable comment (Eduardo Barretto) 2024-11-27 21:46:22.644 logging.py DEBUG - Include new options in var_accounts_minimum_age_login_defs (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Include python3-pip in Ubuntu dependencies (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Include warning about missing OVAL check (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Remove wrong OVAL check (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Fix Gate Test on Fedora Rawhide (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Ensure Python dependencies in Gate tests (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Enable lograte timer check on RHCOS4 (Watson Sato) 2024-11-27 21:46:22.644 logging.py DEBUG - Align bash and Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Simulate interaction for pkcs11-switch command (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - scap-security-guide: Add Poky support (Armin Kuster) 2024-11-27 21:46:22.644 logging.py DEBUG - Use correct build_ds_container script (Watson Sato) 2024-11-27 21:46:22.644 logging.py DEBUG - Add SCAPVal to stabilize task (Matthew Burket) 2024-11-27 21:46:22.644 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:22.644 logging.py DEBUG - Remove unused code (Jan Černý) 2024-11-27 21:46:22.644 logging.py DEBUG - update link to English version of ANSSI guide (Vojtech Polasek) 2024-11-27 21:46:22.644 logging.py DEBUG - Use lxml in the publication GitHub job (Jan Černý) 2024-11-27 21:46:22.644 logging.py DEBUG - Add mount platform to mount_option_var_nosuid (Eduardo Barretto) 2024-11-27 21:46:22.644 logging.py DEBUG - Add a faster alternative for generating HTML guides (Jan Černý) 2024-11-27 21:46:22.644 logging.py DEBUG - Do not coment settings in /usr/lib/sysctl.d/* (teacup-on-rockingchair) 2024-11-27 21:46:22.644 logging.py DEBUG - add platforms to appropriate audit rules to exclude them from aarch64 architecture (Vojtech Polasek) 2024-11-27 21:46:22.644 logging.py DEBUG - Add a test for pcre2 compatibility (Jan Černý) 2024-11-27 21:46:22.644 logging.py DEBUG - Resolve CodeClimate issue (Jan Černý) 2024-11-27 21:46:22.644 logging.py DEBUG - Do not use textwrap module (Jan Černý) 2024-11-27 21:46:22.644 logging.py DEBUG - Update platforms in test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:22.644 logging.py DEBUG - Small alignment in jinja conditional syntax (Marcus Burghardt) 2024-11-27 21:46:22.645 logging.py DEBUG - Make control more flexible in remediation (Marcus Burghardt) 2024-11-27 21:46:22.645 logging.py DEBUG - Make verbiage in rule description more flexible (Marcus Burghardt) 2024-11-27 21:46:22.645 logging.py DEBUG - Use generate_profile_remediations.py during build (Jan Černý) 2024-11-27 21:46:22.645 logging.py DEBUG - Extend generate_bash_scripts.py to build Ansible (Jan Černý) 2024-11-27 21:46:22.645 logging.py DEBUG - Convert code to a class (Jan Černý) 2024-11-27 21:46:22.645 logging.py DEBUG - Update tests for audit login events faillock (Mackemania) 2024-11-27 21:46:22.645 logging.py DEBUG - Optimize KubeletConfig rules (Vincent Shen) 2024-11-27 21:46:22.645 logging.py DEBUG - Aling Bash and Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Update Bash remediation to use better macro (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Update regex reference for new sshd_config line (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Change rule to use variable when auditing faillock (Mackemania) 2024-11-27 21:46:22.646 logging.py DEBUG - Minor OVAL improvements in sshd_disable_compression (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Improve the remediation header (Jan Černý) 2024-11-27 21:46:22.646 logging.py DEBUG - Add executable permission (Jan Černý) 2024-11-27 21:46:22.646 logging.py DEBUG - iptables_ruleset_modifications: depend on iptables being installed (Craig Andrews) 2024-11-27 21:46:22.646 logging.py DEBUG - Resolve CodeClimate problems (Jan Černý) 2024-11-27 21:46:22.646 logging.py DEBUG - Build profile bash scripts differently (Jan Černý) 2024-11-27 21:46:22.646 logging.py DEBUG - Update no_legacy_plus_entries_etc_shadow (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Update no_legacy_plus_entries_etc_passwd (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Include rule warnings about possible corner cases (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - New Ansible macro to configure pam_lastlog.so (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Update test scenario scripts in alignment to Bash changes (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - New Bash macro to configure pam_lastlog.so (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Fix Ansible macros used for PAM (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Make sure cis reference is interpreted as string (teacup-on-rockingchair) 2024-11-27 21:46:22.646 logging.py DEBUG - Update no_legacy_plus_entries_etc_group (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Update enable_fips_mode to follow the style guide (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Change enable_fips_mode to multi_platform_all (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Add Ansible remediation for directory_group_ownership_var_log_audit (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Add missing CIS references for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:22.646 logging.py DEBUG - Update control value (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Add product as parameter when building profile reports (teacup-on-rockingchair) 2024-11-27 21:46:22.646 logging.py DEBUG - Add new tests for auditd_configure_rules/directory_ownership_var_log_audit (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Update after_match value (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Remove extra blank lines from remediation (Marcus Burghardt) 2024-11-27 21:46:22.646 logging.py DEBUG - Add Ansible remediation for directory_ownership_var_log_audit (Matthew Burket) 2024-11-27 21:46:22.646 logging.py DEBUG - Update CMakeLists.txt (akuster) 2024-11-27 21:46:22.646 logging.py DEBUG - Update CMakeLists.txt (akuster) 2024-11-27 21:46:22.646 logging.py DEBUG - Update CMakeLists.txt (akuster) 2024-11-27 21:46:22.647 logging.py DEBUG - Grant packages permissions to k8s-content workflow (Watson Sato) 2024-11-27 21:46:22.647 logging.py DEBUG - Allow the workflow to write (Watson Sato) 2024-11-27 21:46:22.647 logging.py DEBUG - Add tmux platform to tmux related rules. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - do not produce output when using grep command (Vojtech Polasek) 2024-11-27 21:46:22.647 logging.py DEBUG - Assign RHEL-08-020332 to no_empty_passwords. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Assign RHEL-08-020014 to accounts_passwords_pam_faillock_unlock_time. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Assign RHEL-08-020018 to accounts_passwords_pam_faillock_silent. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Assign more STIG ids to accounts_passwords_pam_faillock_dir. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Restrict accounts_passwords_pam_faillock_audit to RHEL>=8.2. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Restrict accounts_passwords_pam_faillock_deny_root to RHEL>=8.2. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Assign RHEL-08-020028 to account_password_selinux_faillock_dir. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Assign RHEL8 STIG id to service_rngd_enabled. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Update the STIG overlay creation to support multiple STIG ids per rule. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - It's not possible to select the default selector. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Do not use default selector as it results in an OpenSCAP error. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Drop template section for rule in sle context (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Fix accounts_passwords_pam_tally2_unlock_time OVAL check (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/package_nftables_removed/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - add test scenario (Vojtech Polasek) 2024-11-27 21:46:22.647 logging.py DEBUG - improve regexp capturing mount point from fstab (Vojtech Polasek) 2024-11-27 21:46:22.647 logging.py DEBUG - Fix ansible remediation of configure_ssh_crypto_policy. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Improved indentation in the new macros (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Update SCAPVAL docs (Matthew Burket) 2024-11-27 21:46:22.647 logging.py DEBUG - Improve Consistency of Headings in 5_tools_and_utilities.md (Matthew Burket) 2024-11-27 21:46:22.647 logging.py DEBUG - Correct up-to-date in docs (Matthew Burket) 2024-11-27 21:46:22.647 logging.py DEBUG - Github -> GitHub in docs (Matthew Burket) 2024-11-27 21:46:22.647 logging.py DEBUG - s.a. to i.e. or e.g. in docs (Matthew Burket) 2024-11-27 21:46:22.647 logging.py DEBUG - add rules enabling audit to ANSSI control file (Vojtech Polasek) 2024-11-27 21:46:22.647 logging.py DEBUG - add anssi references to rules (Vojtech Polasek) 2024-11-27 21:46:22.647 logging.py DEBUG - Implementation of the correction proposed (rchikov) 2024-11-27 21:46:22.647 logging.py DEBUG - Update fixtext to represent correct file of disabled module. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Fix title variable expansion in ansible remediation. (Gabriel Becker) 2024-11-27 21:46:22.647 logging.py DEBUG - Add a HTML link to XCCDF Values (Jan Černý) 2024-11-27 21:46:22.647 logging.py DEBUG - Clean up some cis references that are in rules not used in such (Eduardo Barretto) 2024-11-27 21:46:22.647 logging.py DEBUG - no_empty_passwords: Remove cis@ubuntu2204 (Eduardo Barretto) 2024-11-27 21:46:22.647 logging.py DEBUG - ubuntu2204: cis_level1_server: Add no_forward_files (Eduardo Barretto) 2024-11-27 21:46:22.647 logging.py DEBUG - ubuntu: cis_level1_server: Fix CIS ID for mount_option_home_nosuid (Eduardo Barretto) 2024-11-27 21:46:22.647 logging.py DEBUG - pam_faillock: Fix issue in OVAL regex check for Ubuntu after improvement (Eduardo Barretto) 2024-11-27 21:46:22.647 logging.py DEBUG - Update kernel_build_config templated scenarios to work in container env (Matus Marhefka) 2024-11-27 21:46:22.647 logging.py DEBUG - remove sebool_secure_mode_insmod from RHEL ANSSI high (Vojtech Polasek) 2024-11-27 21:46:22.647 logging.py DEBUG - Fix platform limitation for all sle and error in shebang (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Remove "not available" message (Jan Černý) 2024-11-27 21:46:22.647 logging.py DEBUG - Refine platform requirement from package to service for improved flexibility (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Reuse macro for service disabled checks (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Add rule and template for service disabled cpe check (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Rework platform requirements to check for service firewalld disabled (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Express more accurate per package platform limitation for firewall rules (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Remove unused import (Jan Černý) 2024-11-27 21:46:22.647 logging.py DEBUG - Add warning to network_configure_name_resolution (Jan Černý) 2024-11-27 21:46:22.647 logging.py DEBUG - remove rules not relevant to RHEL 9 from STIG profile (Vojtech Polasek) 2024-11-27 21:46:22.647 logging.py DEBUG - Add RHEL as platform in su pam wheel group remidiation (Mackemania) 2024-11-27 21:46:22.647 logging.py DEBUG - Improve rendering controls to HTML (Jan Černý) 2024-11-27 21:46:22.647 logging.py DEBUG - OCPBUGS-11696: Update encryption type to support 4.13 deployments (Lance Bragstad) 2024-11-27 21:46:22.647 logging.py DEBUG - Fix kernel config name typo in rule kernel_config_slab_freelist_random (Matus Marhefka) 2024-11-27 21:46:22.647 logging.py DEBUG - Remove rule from OCP CIS v.1.4.0 (Watson Sato) 2024-11-27 21:46:22.647 logging.py DEBUG - Remove duplicate builds for GitHub Actions (Jan Černý) 2024-11-27 21:46:22.647 logging.py DEBUG - Add tests to cover cases of missing/commented GRUB_CMDLINE_LINUX cfg (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Drop trailing whitespaces (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Remove test "validate-parse-platform" (Jan Černý) 2024-11-27 21:46:22.647 logging.py DEBUG - Improve template macros for grub command line (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Drop irrelevant return statement in bash remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.647 logging.py DEBUG - Fix namespace when checking the hosted clusters (Watson Sato) 2024-11-27 21:46:22.647 logging.py DEBUG - Update docs for yamlpath (Matthew Burket) 2024-11-27 21:46:22.647 logging.py DEBUG - Remvoe YAML path from test-requirements.txt (Matthew Burket) 2024-11-27 21:46:22.648 logging.py DEBUG - Update metadata of OSPP profile in RHEL8/9. (Gabriel Becker) 2024-11-27 21:46:22.648 logging.py DEBUG - test_machine_only_rules: allow multiple whitespaces within Ansible conditional (Vojtech Polasek) 2024-11-27 21:46:22.648 logging.py DEBUG - Remove yamlpath from CMakeLists.txt (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Remove reference files used by file_block_removed_and_added test (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Remove scripts used for file_block_removed_and_added tests (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Remove the file_block_removed_and_added test (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - OCPBUGS-7455: Hide API warning messages (Vincent Shen) 2024-11-27 21:46:22.648 logging.py DEBUG - OCPBUGS-17216: Update rotate certificates check for OCP 4.14 (Lance Bragstad) 2024-11-27 21:46:22.648 logging.py DEBUG - Update test scenario scripts in alignment to the check (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Update Ansible remediation in alignment to the check (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Update bash remediation in alignment to the check (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Simplify display_login_attempts check (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Reduce the number of times we build all of the products in CI (Matthew Burket) 2024-11-27 21:46:22.648 logging.py DEBUG - OCPBUGS-10508: Add quotes around SCC audit procedure (Lance Bragstad) 2024-11-27 21:46:22.648 logging.py DEBUG - Update the rule text to align with the checks (Watson Sato) 2024-11-27 21:46:22.648 logging.py DEBUG - Fix remediation of sssd_enable_smartcards (Edgar Aguilar) 2024-11-27 21:46:22.648 logging.py DEBUG - Add test to sshd_lineinfile template (Edgar Aguilar) 2024-11-27 21:46:22.648 logging.py DEBUG - Fix regex in bash_sshd_remediation macro (Edgar Aguilar) 2024-11-27 21:46:22.648 logging.py DEBUG - Update rule description of display_login_attempts (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Add CCN profile refchecks tests for RHEL 9. (Matthew Burket) 2024-11-27 21:46:22.648 logging.py DEBUG - Add CIS refchecks tests for RHEL9 (Matthew Burket) 2024-11-27 21:46:22.648 logging.py DEBUG - Unify tests that use fix_rules.py (Jan Černý) 2024-11-27 21:46:22.648 logging.py DEBUG - Add "test_all" subcommand (Jan Černý) 2024-11-27 21:46:22.648 logging.py DEBUG - Refactor fix_rules.py (Jan Černý) 2024-11-27 21:46:22.648 logging.py DEBUG - Update reference for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Update sshd_approved_ciphers value for RHEL9 STIG Draft (Marcus Burghardt) 2024-11-27 21:46:22.648 logging.py DEBUG - Update sshd_approved_ciphers value for RHEL8 STIG (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Keep the rule's e2e result aligned with CI version (Watson Sato) 2024-11-27 21:46:22.650 logging.py DEBUG - Add additional rules from CIS Level 1 to SAP hardening profile (sampsone) 2024-11-27 21:46:22.650 logging.py DEBUG - Check for etcd pod specification in /etc/kubernetes/manifests (Watson Sato) 2024-11-27 21:46:22.650 logging.py DEBUG - Change "[DRAFT]" to DRAFT in draft profiles (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Remove kernel cmdline check (Jan Černý) 2024-11-27 21:46:22.650 logging.py DEBUG - Skip OVAL schematron validation in CI (Jan Černý) 2024-11-27 21:46:22.650 logging.py DEBUG - Remove CTest test "parse affected' (Jan Černý) 2024-11-27 21:46:22.650 logging.py DEBUG - Check for presence of "affected" element (Jan Černý) 2024-11-27 21:46:22.650 logging.py DEBUG - Update tests in ssh ciphers rule (Edgar Aguilar) 2024-11-27 21:46:22.650 logging.py DEBUG - Update OL8 STIG sshd_approved_ciphers (Edgar Aguilar) 2024-11-27 21:46:22.650 logging.py DEBUG - Update tests in ssh macs rule (Edgar Aguilar) 2024-11-27 21:46:22.650 logging.py DEBUG - Update OL8 STIG sshd_approved_macs (Edgar Aguilar) 2024-11-27 21:46:22.650 logging.py DEBUG - Use parameter value in ansible lineinfile macro. (Gabriel Becker) 2024-11-27 21:46:22.650 logging.py DEBUG - Fix service_httpd_disabled rule (Whidix) 2024-11-27 21:46:22.650 logging.py DEBUG - Improve Ansible remediation for dir_perms_world_writable_sticky_bits (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Fix whitespace issue in build system guide (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Add compile_product.py to the docs (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Fix Rawhide Python Install (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Split base building requirements into a new file (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Add manifest as a dependence for zipfile (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Update default event creation limit to 50 (Watson Sato) 2024-11-27 21:46:22.650 logging.py DEBUG - Fix package name in components mapping (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Update package name in rule description (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Update CCN A.25.SEC-RHEL1 and A.25.SEC-RHEL2 (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Enable package_cryptsetup-luks_installed for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Remove tests from templated rule (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Include test scenarios for timer_enabled template (Marcus Burghardt) 2024-11-27 21:46:22.650 logging.py DEBUG - Add Oracle Linux 9 as supported platform (teacup-on-rockingchair) 2024-11-27 21:46:22.650 logging.py DEBUG - Update linux_os/guide/system/logging/log_rotation/timer_logrotate_enabled/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.650 logging.py DEBUG - Update linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.650 logging.py DEBUG - Remove rules that cannot be applied during image build (Robert Schweikert) 2024-11-27 21:46:22.650 logging.py DEBUG - Add prodtype clause to limit rule to platforms with logrotate.timer defined (teacup-on-rockingchair) 2024-11-27 21:46:22.650 logging.py DEBUG - Add manifests to zipfile target (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Fix STIG version for RHEL 8 STIG (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Move to setting the variable value in harden_sshd_macs_opensshserver_conf_crypto_policy tests (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Create new option for SSHD MAC (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Update RHEL 8 Profile Stability (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Add service_rngd_enabled to the RHEL 8 STIG (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Update comment for RHEL-08-040060 (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - The STIG now reflects that SSHD KeepAlive settings are for network issues (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Add RHEL-08-020035 to the RHEL 8 STIG (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Add note for RHEL-08-010471 that its not applicable for RHEL 8.4+ (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Update harden_sshd_macs_opensshserver_conf_crypto_policy for RHEL-08-010290 (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Update RHEL8 STIG to V1R11 (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Fix shellcheck errors in bash template (teacup-on-rockingchair) 2024-11-27 21:46:22.650 logging.py DEBUG - Add SRG to login_session_timeout (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Update chrony docs url (Matthew Burket) 2024-11-27 21:46:22.650 logging.py DEBUG - Remove CIS reference from image policy webhook rule (Lance Bragstad) 2024-11-27 21:46:22.651 logging.py DEBUG - Remove protect kernel default and sysctl rules from CIS (Lance Bragstad) 2024-11-27 21:46:22.651 logging.py DEBUG - Reduce cyclomatic complexity in Profile.to_xml_element (Matthew Burket) 2024-11-27 21:46:22.651 logging.py DEBUG - minor typo fix: add missing comma (Šimon Lukašík) 2024-11-27 21:46:22.651 logging.py DEBUG - Add profile version tests (Matthew Burket) 2024-11-27 21:46:22.651 logging.py DEBUG - default_result is pass on these sysctl rules (Watson Sato) 2024-11-27 21:46:22.651 logging.py DEBUG - sysctl_kernel_kptr_restrict is PASS by default (Watson Sato) 2024-11-27 21:46:22.651 logging.py DEBUG - Fix STIG versions for RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.652 logging.py DEBUG - Fix STIG versions for RHEL 8 (Matthew Burket) 2024-11-27 21:46:22.652 logging.py DEBUG - Add platform logrotate clause for logrotate related rules (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Modifications in the rules' definitions (rchikov) 2024-11-27 21:46:22.652 logging.py DEBUG - Correction in oval part (rchikov) 2024-11-27 21:46:22.652 logging.py DEBUG - Added prodtypes to package_logrotate_installed and timer_logrotate_enabled (rchikov) 2024-11-27 21:46:22.652 logging.py DEBUG - Added missing CCE numbers to the rules package_logrotate_installed and timer_logrotate_enabled (rchikov) 2024-11-27 21:46:22.652 logging.py DEBUG - Changes in SLE 12/15 profiles to support logrotate service (rchikov) 2024-11-27 21:46:22.652 logging.py DEBUG - use jinja conditionals to specify a package which provides systemd-coredump.socket (Vojtech Polasek) 2024-11-27 21:46:22.652 logging.py DEBUG - OL7 DISA STIG v2r12 update (Federico Ramirez) 2024-11-27 21:46:22.652 logging.py DEBUG - Update applicability of rule for OL8 (Edgar Aguilar) 2024-11-27 21:46:22.652 logging.py DEBUG - Add kernel_uek platform (Edgar Aguilar) 2024-11-27 21:46:22.652 logging.py DEBUG - Add secureboot platform (Edgar Aguilar) 2024-11-27 21:46:22.652 logging.py DEBUG - Add rule logind_session_timeout to OL8 STIG (Edgar Aguilar) 2024-11-27 21:46:22.652 logging.py DEBUG - Update platform of service_rngd_enabled for OL8 (Edgar Aguilar) 2024-11-27 21:46:22.652 logging.py DEBUG - Create runtime_kernel_fips_enabled cpe (Edgar Aguilar) 2024-11-27 21:46:22.652 logging.py DEBUG - Update OL8 STIG to V1R7 (Edgar Aguilar) 2024-11-27 21:46:22.652 logging.py DEBUG - accounts_umask_etc_bashrc: depend on bash being installed (Craig Andrews) 2024-11-27 21:46:22.652 logging.py DEBUG - Add version to profile to xml test data (Matthew Burket) 2024-11-27 21:46:22.652 logging.py DEBUG - Align comment with code (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/empty_config.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/dropin_config.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/bash/shared.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/timesyncd_config.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/no_fallback.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/empty_config.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Drop redundant checks for timesyncd enabled (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Drop redundant criterion (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Drop irrelevant commit (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/dropin_config.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/timesyncd_config.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/no_distance_config.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/bash/shared.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Drop redundant oval check for timesyncd enabled (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Add service_timesyncd_root_distance_configured to systemd component (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Improve service_timesyncd_configured tests naming (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Add implementation of service_timesyncd_root_distance_configured rule (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Extract root distance check and remediation in separate rule (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Reuse timesyncd enabled from service_timesyncd_enabled (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Move tests to the right place in the project structure (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.652 logging.py DEBUG - Improve code style working with bash arrays (teacup-on-rockingchair) 2024-11-27 21:46:22.653 logging.py DEBUG - Implement bash remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.653 logging.py DEBUG - Rebase and map timesyncd_configured to systemd component (teacup-on-rockingchair) 2024-11-27 21:46:22.653 logging.py DEBUG - Fix rule description (teacup-on-rockingchair) 2024-11-27 21:46:22.653 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.653 logging.py DEBUG - Improve the oval checks and remediations and add tests (teacup-on-rockingchair) 2024-11-27 21:46:22.653 logging.py DEBUG - Add rule service_timesyncd_configured to CIS SLE profiles (teacup-on-rockingchair) 2024-11-27 21:46:22.653 logging.py DEBUG - Add SLE CCE ids for service_timesyncd_configured rule (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Add definition of service_timesyncd_configured rule (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Refactor and simplify test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Remove unnecessary tasks from Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Refactor Ansible remediation in no_user_host_based_files (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Adopt new Ansible macro in no_host_based_files (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Adopt new Ansible macro in dir_perms_world_writable_root_owned (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Include Ansible macro to create list of local paths (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Improve OVAL comments for better readability (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - add new parameter packagename (Vojtech Polasek) 2024-11-27 21:46:22.654 logging.py DEBUG - Update shared/macros/10-warning.jinja (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Align the parameters ordering in OVAL objects (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Update components mapping for service_rpcbind_disabled (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - More robust jinja product condition (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Fix missing EOFs (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Add aide_periodic_checking_systemd_timer to aide component (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Rename the macro flag for more intuitive (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Update shared/macros/10-warning.jinja (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Update shared/macros/10-warning.jinja (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Better OVAL comments language (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Utilise systemd_dropin_configuration template for journald configuration rules (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Add directory_permissions_var_log_audit to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.654 logging.py DEBUG - Add dconf_gnome_login_banner_text back to the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:22.654 logging.py DEBUG - Add version to profile in the datastream (Matthew Burket) 2024-11-27 21:46:22.654 logging.py DEBUG - no_rsh_trust_files: depend on rsh-server being installed (Craig Andrews) 2024-11-27 21:46:22.654 logging.py DEBUG - Fix association of nfs-utils package with rpcbind service (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Add template for systemd module dropin configuration (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Fix bash array loop (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Add journald configuration droping remediations (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - add template documentation (Vojtech Polasek) 2024-11-27 21:46:22.654 logging.py DEBUG - use the new template with socket_systemd-journal-remote_disabled (Vojtech Polasek) 2024-11-27 21:46:22.654 logging.py DEBUG - service_systemd-coredump_disabled: use new template, the rule is about masking a socket (Vojtech Polasek) 2024-11-27 21:46:22.654 logging.py DEBUG - add a new template socket_disabled (Vojtech Polasek) 2024-11-27 21:46:22.654 logging.py DEBUG - Include RHEL indentifiers in timer_logrotate_enabled (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Include RHEL indentifiers in package_logrotate_installed (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Update CIS RHEL8 control file regarding logrotate rules (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Include CIS RHEL9 reference for logrotate related rules (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Update CIS reference for RHEL7 in logrotate rules (Marcus Burghardt) 2024-11-27 21:46:22.654 logging.py DEBUG - Drop warning_rule_deprecated_cause macro (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Update linux_os/guide/services/ftp/ftp_configure_vsftpd/ftp_present_banner/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Drop redundant package platform requirement in test (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Rename rule's oval,ansible and bash so they can be generic (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Add package aide definition (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Improve ansible remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.654 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/tests/aide_not_installed.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/oval/sle15.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/bash/sle15.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/sle15.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/sle15.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - For SLE15 use aide_periodic_checking_systemd_timer (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Add new CCE references for aide_periodic_checking_systemd_timer (teacup-on-rockingchair) 2024-11-27 21:46:22.655 logging.py DEBUG - Extract from aide_periodic_cron_checking separate rule for systemd timer (teacup-on-rockingchair) 2024-11-27 21:46:22.656 logging.py DEBUG - Wrap some lines to fit in the 99 chars rule (teacup-on-rockingchair) 2024-11-27 21:46:22.656 logging.py DEBUG - Add remediations for aide_periodic_cron_checking via systemd (teacup-on-rockingchair) 2024-11-27 21:46:22.656 logging.py DEBUG - Add option to verify the periodic check also through systemd timer (teacup-on-rockingchair) 2024-11-27 21:46:22.656 logging.py DEBUG - A correction in the rule pam_disable_automatic_configuration (rchikov) 2024-11-27 21:46:22.656 logging.py DEBUG - remove duplicate oval state (Vojtech Polasek) 2024-11-27 21:46:22.656 logging.py DEBUG - rewrite criteria in OVAL (Vojtech Polasek) 2024-11-27 21:46:22.656 logging.py DEBUG - shared: templates: file_permissions: fix ansible find regex parameter (Eduardo Barretto) 2024-11-27 21:46:22.656 logging.py DEBUG - Use explicit empty value for oval_test_package_installed's EVR parameter (teacup-on-rockingchair) 2024-11-27 21:46:22.656 logging.py DEBUG - SLE15 selinux policy directories depend on separate packages (teacup-on-rockingchair) 2024-11-27 21:46:22.656 logging.py DEBUG - add OVAL tests to test for fips=1 in /boot/loader/entries and in kernel command line (Vojtech Polasek) 2024-11-27 21:46:22.656 logging.py DEBUG - Update RHEL 7 STIG profile to V3R12 (Matthew Burket) 2024-11-27 21:46:22.656 logging.py DEBUG - Update RHEL 7 STIG references to V3R12 (Matthew Burket) 2024-11-27 21:46:22.656 logging.py DEBUG - Sanitize lines for clean YAML output when generating profiles (Lance Bragstad) 2024-11-27 21:46:22.656 logging.py DEBUG - Corrections related to audit_rules_sysadmin_actions and adaptation of the rule sudo_log_events for usage in SLE 12/15 (rchikov) 2024-11-27 21:46:22.656 logging.py DEBUG - Fix in audit_rules_systadmin_actions and new rule audit_rules_sysadmin_scope (rchikov) 2024-11-27 21:46:22.656 logging.py DEBUG - Implementation of the recommended changes (rchikov) 2024-11-27 21:46:22.656 logging.py DEBUG - Fix into the rule sysctl_kernel_randomize_va_space (rchikov) 2024-11-27 21:46:22.656 logging.py DEBUG - Update controls to parse and validate the new fields (Matthew Burket) 2024-11-27 21:46:22.656 logging.py DEBUG - Refactor Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Minor updates in rule description to improve readability (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Replace shell module by command module (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - change hardcoded value to variable (Vojtech Polasek) 2024-11-27 21:46:22.656 logging.py DEBUG - Include warning in uefi group regarding vfat file systems (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Allow 0700 permission for UEFI files (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - shared: templates: file_permissions: ansible: Improve handling of (Eduardo Barretto) 2024-11-27 21:46:22.656 logging.py DEBUG - Add warning_rule_deprecated_cause macro (teacup-on-rockingchair) 2024-11-27 21:46:22.656 logging.py DEBUG - Update platform on rule about nx cpu flag (Edgar Aguilar) 2024-11-27 21:46:22.656 logging.py DEBUG - Fix Kubernetes remediation of audit_create_failed (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - Fix Kubernetes remediation of audit_access_failed (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - Use distributed product properties in Automatus (Jan Černý) 2024-11-27 21:46:22.656 logging.py DEBUG - Implement rules for CIS OCP Section 1.4 (Lance Bragstad) 2024-11-27 21:46:22.656 logging.py DEBUG - Remove rules from the RHEL9 STIG profile (Matěj Týč) 2024-11-27 21:46:22.656 logging.py DEBUG - CIS: Additional rules for already covered controls (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - CIS: Use the automated rule for checking kube scheduler permissions (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - CIS: Use the correct rule for 1.1.3 (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000506-CTR-001290: OpenShift must generate audit records when concurrent logons from different workstations and systems occur. (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000505-CTR-001285: OpenShift audit records must record user access start and end times. (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000504-CTR-001280: Red Hat Enterprise Linux CoreOS (RHCOS) must be configured to audit the loading and unloading of dynamic kernel modules (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000503-CTR-001275: OpenShift must generate audit records when successful/unsuccessful attempts to delete security objects occur (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000501-CTR-001265,SRG-APP-000502-CTR-001270: OpenShift must generate audit records when successful/unsuccessful attempts to delete security objects occur (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000499-CTR-001255: audit records when successful/unsuccessful attempts to delete privileges occur. (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - OCP4 STIG: audit records when successful/unsuccessful attempts to modify security objects occur. (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000495-CTR-001235: audit records when successful/unsuccessful attempts to modify privileges occur (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000121-CTR-000255: Covered by the audit_immutable_login_uids rule (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000119-CTR-000245 and SRG-APP-000120-CTR-000250: Covered by the audit_rules_immutable rule (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000116-CTR-000235: Needs chrony and NTP servers to be set (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - RHCOS STIG: Cover controls that need auditd.conf to be set (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - OCP4 STIG: Add the service_auditd_enabled rule to ensure that auditing is enabled at runtime (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - SRG-APP-000092-CTR-000165: Add the RHCOS4 rule coreos_audit_option to make sure auditing is on at system startup (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - AU-12(c): OpenShift must generate audit records when successful/unsuccessful attempts to access privileges occur. (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - Fix Kubernetes remediation for audit_ospp_general (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - Add Kubernetes remediation for audit_rules_dac_modification_umount (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - Fix Kubernetes remediation of audit_immutable_login_uids (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - Remove superseded script compare_disa_xml.py (Watson Sato) 2024-11-27 21:46:22.656 logging.py DEBUG - Update CIS profiles to use control files (Lance Bragstad) 2024-11-27 21:46:22.656 logging.py DEBUG - Fix run_scapval.py Python 2 syntax errors (Matthew Burket) 2024-11-27 21:46:22.656 logging.py DEBUG - Make CCN references more flexible (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Remove tickets from CIS control files (Lance Bragstad) 2024-11-27 21:46:22.656 logging.py DEBUG - update version to 0.1.70 (Vojtech Polasek) 2024-11-27 21:46:22.656 logging.py DEBUG - Port over etcd encryption rule from CIS 1.3 controls (Jakub Hrozek) 2024-11-27 21:46:22.656 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Create rhel9 kickstart file for CCN Advanced (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Create rhel9 kickstart file for CCN Intermediate (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Create rhel9 kickstart file for CCN Basic (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Resolve confusing comment (Jan Černý) 2024-11-27 21:46:22.656 logging.py DEBUG - Move CCN reference_uri to RHEL9 only (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - A change into sudoers_validate_passwd (rchikov) 2024-11-27 21:46:22.656 logging.py DEBUG - Update reference for product stability test (Marcus Burghardt) 2024-11-27 21:46:22.656 logging.py DEBUG - Create RHEL9 profiles for CCN in its three levels (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Update constants to include CCN profiles (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - 0640 permission in permissions_local_var_log should only apply to files (cueball23) 2024-11-27 21:46:22.657 logging.py DEBUG - Include option used in CCN Policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Fix the informed variable option (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Include option used in CCN Policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Include CCN reference in special rules (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.30.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Partially cover A.25.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Partially cover A.25.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.23.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.19.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.15.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.11.SEC-RHEL12 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.11.SEC-RHEL9 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.11.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.11.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.11.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.11.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Drop irrelevant rules from STIG profile (teacup-on-rockingchair) 2024-11-27 21:46:22.657 logging.py DEBUG - Make sure sssd.conf files have 0600 permissions mode. (Gabriel Becker) 2024-11-27 21:46:22.657 logging.py DEBUG - Update SLE12 STIG reference to V2R10 (teacup-on-rockingchair) 2024-11-27 21:46:22.657 logging.py DEBUG - Add missing ANSSI and HIPAA references for SLES (teacup-on-rockingchair) 2024-11-27 21:46:22.657 logging.py DEBUG - Fix STIG SLE12 references (teacup-on-rockingchair) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.11.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.6.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.8.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.8.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.8.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.657 logging.py DEBUG - Complete A.6.SEC-RHEL5 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.659 logging.py DEBUG - Complete A.6.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.659 logging.py DEBUG - Complete A.6.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.659 logging.py DEBUG - Complete A.6.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.6.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.5.SEC-RHEL8 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.5.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.5.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.5.SEC-RHEL5 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.5.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.5.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.5.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Partially cover A.3.SEC-RHEL10 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.3.SEC-RHEL9 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Fix small typo (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.3.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.3.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.3.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.3.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.3.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Complete A.3.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2024-11-27 21:46:22.697 logging.py DEBUG - Add missing STIG references for SLE (teacup-on-rockingchair) 2024-11-27 21:46:22.697 logging.py DEBUG - Update SLE15 STIG reference to V1R10 (teacup-on-rockingchair) 2024-11-27 21:46:22.697 logging.py DEBUG - Fix invalid levels key in section 5 (Lance Bragstad) 2024-11-27 21:46:22.697 logging.py DEBUG - Remove a parameter (Jan Černý) 2024-11-27 21:46:22.697 logging.py DEBUG - Add documentation of macro (Jan Černý) 2024-11-27 21:46:22.697 logging.py DEBUG - Extract macro (Jan Černý) 2024-11-27 21:46:22.697 logging.py DEBUG - Check password inactivity only for local users (Jan Černý) 2024-11-27 21:46:22.697 logging.py DEBUG - Use macro in OVAL (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Extract macro (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Check password warning age only for local users (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Check password minimal age only for local users (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Extract code to a macro (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Check password max age only for local users (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Add an explanatory comment (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in accounts_users_home_files_ownership (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in file_ownership_home_directories (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in file_groupownership_home_directories (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in file_permissions_home_directories (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in accounts_user_dot_user_ownership (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in accounts_umask_interactive_users (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in accounts_users_home_files_permissions (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in accounts_user_dot_group_ownership (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Change OVAL in accounts_users_home_files_groupownership (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Refactor OVAL code (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Fix a wrong data type (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Check only local users home directories (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Add a small test scenario to prevent quoting issues (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Prevent quoting issues in rule firewalld-backend (Jan Černý) 2024-11-27 21:46:22.698 logging.py DEBUG - Modifications which support installation of bats and ShellCheck on SLE15 (rchikov) 2024-11-27 21:46:22.698 logging.py DEBUG - Update .github/workflows/automatus-sle15.yaml (Gabriel Becker) 2024-11-27 21:46:22.698 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2024-11-27 21:46:22.698 logging.py DEBUG - Added automatus-sle15.ymal and modifiied gate.yaml and test_suite-sle15 files (rchikov) 2024-11-27 21:46:22.698 logging.py DEBUG - Update Dockerfiles/test_suite-sle15 (Rumen) 2024-11-27 21:46:22.698 logging.py DEBUG - Delete sshd_config (Rumen) 2024-11-27 21:46:22.698 logging.py DEBUG - Fix test_suite_sle15 (rchikov) 2024-11-27 21:46:22.698 logging.py DEBUG - Files relates to SLES 15 SP 3 test container - podman (rumch-se) 2024-11-27 21:46:22.699 logging.py DEBUG - Add support for multiple STIG id assignments. (Gabriel Becker) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 5.5 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2024-11-27 21:46:22.699 logging.py DEBUG - align behavior of Ansible remediation to Bash remediation (Vojtech Polasek) 2024-11-27 21:46:22.699 logging.py DEBUG - update bash remediation to align with OVAL check (Vojtech Polasek) 2024-11-27 21:46:22.699 logging.py DEBUG - align Bash remediation with rule description (Vojtech Polasek) 2024-11-27 21:46:22.699 logging.py DEBUG - align Ansible remediation with the rule description (Vojtech Polasek) 2024-11-27 21:46:22.699 logging.py DEBUG - update list of contributors (Vojtech Polasek) 2024-11-27 21:46:22.699 logging.py DEBUG - Add rule to verify protection of profiling data (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Allow verify_references.py to identify RH OVALv2 feed IDs as remote (Evgeny Kolesnikov) 2024-11-27 21:46:22.699 logging.py DEBUG - Fix invalid yaml in CIS OCP section 5 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Update product stability for RHEL OVAL (Matthew Burket) 2024-11-27 21:46:22.699 logging.py DEBUG - Move to OVAL V2 URL for RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.699 logging.py DEBUG - Move to OVAL V2 URL for RHEL 8 (Matthew Burket) 2024-11-27 21:46:22.699 logging.py DEBUG - Move to OVAL V2 URL for RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.699 logging.py DEBUG - Fix invalid yaml in CIS section 4 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 1.2 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 1.1 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Ensure Title Case as defined in the Style Guide (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Update docs/manual/developer/03_creating_content.md (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Add ansible RHEL9 STIG profile to testing farm. (Gabriel Becker) 2024-11-27 21:46:22.699 logging.py DEBUG - Ignore errors on enable_fips_mode ansible remediation when checking FIPS mode. (Gabriel Becker) 2024-11-27 21:46:22.699 logging.py DEBUG - Revert accounts_authorized_local_users to SLES only. (Gabriel Becker) 2024-11-27 21:46:22.699 logging.py DEBUG - Set platform all for rules that are selected in RHEL9 STIG profile. (Gabriel Becker) 2024-11-27 21:46:22.699 logging.py DEBUG - Remove unnecessary state check in test (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Improve OVAL readability (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Refactor Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Minor improvements in wording and readability (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Improve readability in Bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 5.4 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 5.3 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 5.2 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 5.1 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 4.2 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 4.1 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Implement rules for CIS OCP Section 3 (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Remove unnecessary comments about policy sections (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Fix invalid YAML in OCP CIS control file (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Don't wrap titles in control files (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Fix `levels` key in general_profile script (Lance Bragstad) 2024-11-27 21:46:22.699 logging.py DEBUG - Define ipv6 platform in group of ipv6 settings rules (Marcus Burghardt) 2024-11-27 21:46:22.699 logging.py DEBUG - Include an OVAL template for ipv6 applicability (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Include applicability definition for ipv6 (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Fix account_emergency_expire_date subkeys order (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - Fix Profile stability for RHEL8 (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - Deprecate account_emergency_expire_date (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - Remove deprecated rules from control file (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Move to account_temp_expire_date in RHEL 7 STIG (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - Move to account_temp_expire_date in the RHEL 8 STIG (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - Add package_mailx_installed to the RHEL 8 STIG (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - Add ensure_redhat_gpgkey_installed to the RHEL 8 STIG (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - Update to RHEL 8 V1R10 (Matthew Burket) 2024-11-27 21:46:22.700 logging.py DEBUG - accounts_passwords_pam_faillock_unlock_time: show XCCDF variable in the description (Vojtech Polasek) 2024-11-27 21:46:22.700 logging.py DEBUG - account_password_selinux_faillock_dir: show XCCDF variable in the description (Vojtech Polasek) 2024-11-27 21:46:22.700 logging.py DEBUG - rule accounts_passwords_pam_faillock_interval: show XCCDF variable in the description (Vojtech Polasek) 2024-11-27 21:46:22.700 logging.py DEBUG - accounts_pam_faillock_deny: mention XCCDF variables in the rule description (Vojtech Polasek) 2024-11-27 21:46:22.700 logging.py DEBUG - Include related_rules in A.24.SEC-RHEL2 (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Include notes in pending requirements (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Translate the original titles to english (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Include candidate rules for most requirements (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Initial control file for CCN-STIC-610A22 (Marcus Burghardt) 2024-11-27 21:46:22.700 logging.py DEBUG - Implement rules for CIS OCP Section 5.7 (Lance Bragstad) 2024-11-27 21:46:22.700 logging.py DEBUG - Update RHEL 7 GUI profile to V3R11 (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - SRG-APP-000029-CTR-000085: Audit execution of all setuid and setgid binaries on RHCOS4 (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - OCP4 STIG: SRG-APP-000343-CTR-000780 and SRG-APP-000381-CTR-000905 are covered by audit_rules_suid_privilege_function (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - Update OL8 hipaa profile (Edgar Aguilar) 2024-11-27 21:46:22.701 logging.py DEBUG - Move RHEL-07-010271 to account_temp_expire_date (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add RHEL7 CCE to package_mailx_installed (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add package_mailx_installed to RHEL 7 STIG (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add dconf_gnome_disable_user_list to RHEL 7 STIG (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Select ensure_redhat_gpgkey_installed in RHEL7 STIG (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Update to RHEL 7 STIG to version V3R11 (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Implement rules for CIS OCP Section 2 (Lance Bragstad) 2024-11-27 21:46:22.701 logging.py DEBUG - Implement rules for CIS OCP Section 1.3 (Lance Bragstad) 2024-11-27 21:46:22.701 logging.py DEBUG - Stop using "imp" module (Jan Černý) 2024-11-27 21:46:22.701 logging.py DEBUG - Add a test for rule journald_compress (Jan Černý) 2024-11-27 21:46:22.701 logging.py DEBUG - Add a test for rule journald_storage (Jan Černý) 2024-11-27 21:46:22.701 logging.py DEBUG - Add docs for SCAPVal testing (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Move Stabilization to use ctest based scapval (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add SCAPVal test to product build (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add SCAPVal configuration options to root CMake (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add the ability to the run_scapval script to scan one file (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add audit_rules_login_events_faillock to RHEL 8 STIG (Jan Černý) 2024-11-27 21:46:22.701 logging.py DEBUG - .github/workflows/gate.yaml:Add anolis8 product. (rain-Qing) 2024-11-27 21:46:22.701 logging.py DEBUG - Remove dead code in ssg/control.py (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Fix control file found by new check (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add test for importing a control dict with unsupported keys (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Add check for unsupported keys in control files (Matthew Burket) 2024-11-27 21:46:22.701 logging.py DEBUG - Switch from "use_pam_wheel_for_su" to "use_pam_wheel_group_for_su" for RHEL 8 and 9 (Kacper) 2024-11-27 21:46:22.701 logging.py DEBUG - ocp4: Add missing test YAML manifests (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - Don't use the obsolete filegid attribute, use gid_or_name instead (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - Modify the auditd_configure_rules rule to check for permissions 600 on RHCOS, too (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - OCP4: SRG-APP-000118-CTR-000240: Audit and pod logs files ownership and permission (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - scap-security-guide: add openembedded distro support (Armin Kuster) 2024-11-27 21:46:22.701 logging.py DEBUG - Set accounts-physical as machine only (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - Use prefer-controls in GH actions that generate OCP4 STIG exports (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - Amend several RHCOS controls to include a check and a fix (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - create_srg_export: Add a command-line flag to prefer check and fix from the control over rules (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - Set package_rng-tools_installed as machine only (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - service_apport_disabled: depend on apport being installed (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - ensure_pam_wheel_group_empty: depend on pam being installed (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - use_pam_wheel_group_for_su: depend on pam being installed (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - Set ensure_root_password_configured as machine only (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - Set package_iptables_installed as machine only (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - Set package_nftables_installed as machine only (Craig Andrews) 2024-11-27 21:46:22.701 logging.py DEBUG - SRG-APP-000450-CTR-001105: Add two related RHCOS rules (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - products/anolis23: supports Anolis OS 23 (rain-Qing) 2024-11-27 21:46:22.701 logging.py DEBUG - SRG-APP-000243-CTR-000600: Covered with kernel arguments and sysctls (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - Update rule description to include also drop-in option configuration (teacup-on-rockingchair) 2024-11-27 21:46:22.701 logging.py DEBUG - SRG-APP-000439-CTR-001080: This is a manual rule (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - SRG-APP-000233-CTR-000585: Covered by ensuring SELinux is enabled (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - SRG-APP-000211-CTR-000530: A manual rule to check that root and core are the only users (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - OCP4: Fix instructions of scc_limit_container_allowed_capabilities (Jakub Hrozek) 2024-11-27 21:46:22.701 logging.py DEBUG - Update linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_storage/tests/coredumps_storage_none_dropin.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.702 logging.py DEBUG - Add profile as sshd_strong_macs to stable profile (teacup-on-rockingchair) 2024-11-27 21:46:22.702 logging.py DEBUG - Fix OL9 stability oval url (Matthew Burket) 2024-11-27 21:46:22.702 logging.py DEBUG - Fix OL8 stability oval url (Matthew Burket) 2024-11-27 21:46:22.702 logging.py DEBUG - Fix OL7 stability oval url (Matthew Burket) 2024-11-27 21:46:22.702 logging.py DEBUG - Add mount platform to mount_option_home_grpquota (Matthew Burket) 2024-11-27 21:46:22.702 logging.py DEBUG - Add mount platform to mount_option_home_nodev (Matthew Burket) 2024-11-27 21:46:22.702 logging.py DEBUG - Add mount platform to mount_option_home_nosuid (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_home_usrquota (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_opt_nosuid (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_srv_nosuid (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_log_audit_nodev (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_log_audit_noexec (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_log_audit_nosuid (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_log_nodev (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_log_noexec (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_log_nosuid (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_nodev (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add mount platform to mount_option_var_noexec (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Add new missing mount platforms (Matthew Burket) 2024-11-27 21:46:22.703 logging.py DEBUG - Remove quotes from journald config parameters (Mackemania) 2024-11-27 21:46:22.703 logging.py DEBUG - Extract method to fix Codeclimate (Jan Černý) 2024-11-27 21:46:22.703 logging.py DEBUG - Reduce code complexity (Jan Černý) 2024-11-27 21:46:22.703 logging.py DEBUG - Add a missing None in function definition (Jan Černý) 2024-11-27 21:46:22.703 logging.py DEBUG - Add support for diffing the values (Jan Černý) 2024-11-27 21:46:22.703 logging.py DEBUG - Refactor: split differences from printing (Jan Černý) 2024-11-27 21:46:22.703 logging.py DEBUG - Introduce a script to compare ComplianceAsCode versions (Jan Černý) 2024-11-27 21:46:22.703 logging.py DEBUG - OCP4: Remove the CIS 1.3 controls completely (Jakub Hrozek) 2024-11-27 21:46:22.703 logging.py DEBUG - Update ol9 oval_feed_url (Edgar Aguilar) 2024-11-27 21:46:22.703 logging.py DEBUG - Update ol8 oval_feed_url (Edgar Aguilar) 2024-11-27 21:46:22.703 logging.py DEBUG - Fix selection of var_multiple_time_servers for OL7 (Edgar Aguilar) 2024-11-27 21:46:22.703 logging.py DEBUG - Update ol7 oval_feed_url (Edgar Aguilar) 2024-11-27 21:46:22.703 logging.py DEBUG - Remove outdated comment from OCP4 CIS profile (Lance Bragstad) 2024-11-27 21:46:22.703 logging.py DEBUG - Add ol8 & ol9 products in prodtype of rule (Edgar Aguilar) 2024-11-27 21:46:22.703 logging.py DEBUG - Add rule selinux_state to OL8 anssi enhanced (Edgar Aguilar) 2024-11-27 21:46:22.703 logging.py DEBUG - Update OL8 cjis profile (Edgar Aguilar) 2024-11-27 21:46:22.703 logging.py DEBUG - Update function and variables related to check_fact_ref (Marcus Burghardt) 2024-11-27 21:46:22.703 logging.py DEBUG - Allow populating one content type by more means (Matej Tyc) 2024-11-27 21:46:22.703 logging.py DEBUG - Defer creation of the manifest (Matej Tyc) 2024-11-27 21:46:22.703 logging.py DEBUG - Fix the grub update executable for SLE15 (Matej Tyc) 2024-11-27 21:46:22.703 logging.py DEBUG - Remove irrelevant selections from compiled controls (Matej Tyc) 2024-11-27 21:46:22.703 logging.py DEBUG - Revert "fix: aide/remediations: add crontabs" (Eduardo Barretto) 2024-11-27 21:46:22.703 logging.py DEBUG - Introduce rule platform names and profile values (Matej Tyc) 2024-11-27 21:46:22.704 logging.py DEBUG - Add build of a JSON manifest file to the build process (Matej Tyc) 2024-11-27 21:46:22.704 logging.py DEBUG - Introduce a script summarizing contents to json (Matěj Týč) 2024-11-27 21:46:22.704 logging.py DEBUG - Add missing headings (Matej Tyc) 2024-11-27 21:46:22.704 logging.py DEBUG - Improve the language and readability (Matěj Týč) 2024-11-27 21:46:22.704 logging.py DEBUG - Modification of the rule ensure_pam_wheel_group_empty (rchikov) 2024-11-27 21:46:22.704 logging.py DEBUG - Move to file_owner test for template Automatus test (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Fix grep for Automatus sanity (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - OCP4: SRG-APP-000142-CTR-000325: No longer Does Not Meet (Jakub Hrozek) 2024-11-27 21:46:22.704 logging.py DEBUG - Minor update in alignment to Style Guide (Marcus Burghardt) 2024-11-27 21:46:22.704 logging.py DEBUG - Fix desired attribute for check-fact-ref element (Marcus Burghardt) 2024-11-27 21:46:22.704 logging.py DEBUG - Fix searched string for cpe platform elements (Marcus Burghardt) 2024-11-27 21:46:22.704 logging.py DEBUG - Add a section guiding through the process of rule divergence (Matěj Týč) 2024-11-27 21:46:22.704 logging.py DEBUG - Small correction in bash part (rchikov) 2024-11-27 21:46:22.704 logging.py DEBUG - utils: Add SRG to NIST control mapping for the OCP4 STIG (Jakub Hrozek) 2024-11-27 21:46:22.704 logging.py DEBUG - Update rule.yml (Rumen) 2024-11-27 21:46:22.704 logging.py DEBUG - A small correction in bash part of the rule (rchikov) 2024-11-27 21:46:22.704 logging.py DEBUG - Updates of the rule use_pam_wheel_group_for_su (rchikov) 2024-11-27 21:46:22.704 logging.py DEBUG - Fix ectd rule e2e failures (Vincent Shen) 2024-11-27 21:46:22.704 logging.py DEBUG - macros: bash: Fix shellcheck warning (Eduardo Barretto) 2024-11-27 21:46:22.704 logging.py DEBUG - Add data about nested controls to the compiled controls (Matěj Týč) 2024-11-27 21:46:22.704 logging.py DEBUG - Rename wrong varaible in test (Markus Mathiason) 2024-11-27 21:46:22.704 logging.py DEBUG - macros: bash: pam_faillock: Improve bash to consider different (Eduardo Barretto) 2024-11-27 21:46:22.704 logging.py DEBUG - Drop FIPS references from oval definition (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - set_ufw_loopback_traffic: sce: Fix logic in script (Eduardo Barretto) 2024-11-27 21:46:22.704 logging.py DEBUG - wireless_disable_interfaces: bash: Improve Ubuntu remediation (Eduardo Barretto) 2024-11-27 21:46:22.704 logging.py DEBUG - macros: bash: Avoid matching comments in fstab macros (Eduardo Barretto) 2024-11-27 21:46:22.704 logging.py DEBUG - Update test cases to match jinja macro order (Mackemania) 2024-11-27 21:46:22.704 logging.py DEBUG - Change file_groupowner template parameter after rebase (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - Add sshd_strong_macs variable (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - Add empty line at the end of file (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - Too much stripping breaks the code (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - Drop extra whitespaces from jinja macros (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - For SLE15 check drop-in files instead of symlink (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - SLES15 use dropin configuration for issue banner (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 4 (Lance Bragstad) 2024-11-27 21:46:22.704 logging.py DEBUG - Generate OpenShift CIS 1.4.0 Section 5 (Lance Bragstad) 2024-11-27 21:46:22.704 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 3 (Lance Bragstad) 2024-11-27 21:46:22.704 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 2 (Lance Bragstad) 2024-11-27 21:46:22.704 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 1 (Lance Bragstad) 2024-11-27 21:46:22.704 logging.py DEBUG - Move the most important links to a better place (Jan Černý) 2024-11-27 21:46:22.704 logging.py DEBUG - Add platform package clause for firewalld related rules (teacup-on-rockingchair) 2024-11-27 21:46:22.704 logging.py DEBUG - file_groupownership_ssh_private_key: exclude templated test scenario (Vojtech Polasek) 2024-11-27 21:46:22.704 logging.py DEBUG - file_groupownership_ssh_private_key: make sure that the group ssh_keys exists before using it in test scenario (Vojtech Polasek) 2024-11-27 21:46:22.704 logging.py DEBUG - Remove component SuSEfirewall2 (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Clarify descriptions in rule text (Mackemania) 2024-11-27 21:46:22.704 logging.py DEBUG - Update name of rule to remove benchmark coupling (Mackemania) 2024-11-27 21:46:22.704 logging.py DEBUG - Add PR number for why RHEL-08-010471 is not covered (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add accounts_password_minlen_login_defs (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add CCE for RHEL 8 to sssd_has_trust_anchor (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add RHEL 8 CCE to disallow_bypass_password_sudo (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Update profile stability (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Fix STIG ID for RHEL 8.2+ accounts_passwords_pam_faillock_interval (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add a rule for RHEL-08-010385 to the RHEL8 STIG (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add a rule for RHEL-08-010121 to the RHEL8 STIG (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add a rule for RHEL-08-010090 to the RHEL8 STIG (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add RHEL8 STIGID to accounts_password_minlen_login_defs (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add RHEL8 STIGID to no_empty_passwords_etc_shadow (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Move to RHEL 8.2+ STIGID in accounts_passwords_pam_faillock_deny_root (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Move to RHEL 8.2+ STIGID in accounts_passwords_pam_faillock_unlock_time (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add RHEL8 STIGID to disallow_bypass_password_sudo (Matthew Burket) 2024-11-27 21:46:22.704 logging.py DEBUG - Add RHEL8 to the sssd_has_trust_anchor prodtype (Matthew Burket) 2024-11-27 21:46:22.705 logging.py DEBUG - Document nesting of controls by references (Matej Tyc) 2024-11-27 21:46:22.705 logging.py DEBUG - Improve code style (Matej Tyc) 2024-11-27 21:46:22.705 logging.py DEBUG - Expand subcontrols handling (Matej Tyc) 2024-11-27 21:46:22.705 logging.py DEBUG - Use existing functionality for controls I/O (Matej Tyc) 2024-11-27 21:46:22.705 logging.py DEBUG - Restructure the control unit test of controls (Matej Tyc) 2024-11-27 21:46:22.705 logging.py DEBUG - Store rendered control files. (Gabriel Becker) 2024-11-27 21:46:22.705 logging.py DEBUG - Change case title (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Rename variable (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Add typing hints (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Use --root argument (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Use long variable names (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Create a wrapper function (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Add utility to render components in HTML (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Use the changelog property in Component class (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Unify template rendering functions (Jan Černý) 2024-11-27 21:46:22.705 logging.py DEBUG - Update of anssi profile for SLE 12/15 (rchikov) 2024-11-27 21:46:22.705 logging.py DEBUG - Add platform package clause for firewalld related rules (teacup-on-rockingchair) 2024-11-27 21:46:22.705 logging.py DEBUG - Add platform package definitions for firewalld and iptables (teacup-on-rockingchair) 2024-11-27 21:46:22.705 logging.py DEBUG - fix srg (svet-se) 2024-11-27 21:46:22.705 logging.py DEBUG - SRG-APP-000141-CTR-000315: Covered by disabling SSH and locking down USB (Jakub Hrozek) 2024-11-27 21:46:22.705 logging.py DEBUG - SRG-APP-000185-CTR-000490: Covered by disabling SSH (Jakub Hrozek) 2024-11-27 21:46:22.705 logging.py DEBUG - Add bash and ansible relevant remediations' changes (teacup-on-rockingchair) 2024-11-27 21:46:22.705 logging.py DEBUG - Handle different ssh strong macs list for different platforms (teacup-on-rockingchair) 2024-11-27 21:46:22.705 logging.py DEBUG - SRG-APP-000148-CTR-000335,SRG-APP-000190-CTR-000500: Covered by sshd_disable_root_login (Jakub Hrozek) 2024-11-27 21:46:22.705 logging.py DEBUG - Add modified audit suid privilege function rule for CIS (Mackemania) 2024-11-27 21:46:22.705 logging.py DEBUG - Add small test to cover drop-in pass configuration (teacup-on-rockingchair) 2024-11-27 21:46:22.705 logging.py DEBUG - For SLE platforms put remedy in drop-in (teacup-on-rockingchair) 2024-11-27 21:46:22.705 logging.py DEBUG - For SLE platforms put remedy in drop-in (teacup-on-rockingchair) 2024-11-27 21:46:22.706 logging.py DEBUG - Add modified version of oval_check_config_file (teacup-on-rockingchair) 2024-11-27 21:46:22.706 logging.py DEBUG - Updated fix_rules to use product class (Matej Tyc) 2024-11-27 21:46:22.706 logging.py DEBUG - split too long lines in template.py (Vojtech Polasek) 2024-11-27 21:46:22.706 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_defined/bash/shared.sh (Marcus Burghardt) 2024-11-27 21:46:22.707 logging.py DEBUG - OCP4: Remove obsolete rule scheduler_no_bind_address (Jakub Hrozek) 2024-11-27 21:46:22.707 logging.py DEBUG - Improve error message (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Removal of package_libreswan_installed from SLE 12/15 profiles (rchikov) 2024-11-27 21:46:22.707 logging.py DEBUG - Fix attribute for args root (Dexter Le) 2024-11-27 21:46:22.707 logging.py DEBUG - use multi_platform_ubuntu (Dexter Le) 2024-11-27 21:46:22.707 logging.py DEBUG - Add components_root to example stability (Matthew Burket) 2024-11-27 21:46:22.707 logging.py DEBUG - add rules UBTU-20-010045 (Dexter Le) 2024-11-27 21:46:22.707 logging.py DEBUG - Fix traceback in release helper (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Fix grub2 remediation instructions (Henry Finucane) 2024-11-27 21:46:22.707 logging.py DEBUG - Add couple of tests for new bash jinja macro (teacup-on-rockingchair) 2024-11-27 21:46:22.707 logging.py DEBUG - Rework jinja macro to use [[:blank:]] instead of \> (teacup-on-rockingchair) 2024-11-27 21:46:22.707 logging.py DEBUG - add overriding test scenario to file_groupownership_sshd_pub_key rule (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - update missing_file_test test scenarios of file_groupownership and file_owner template (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - fix test scenarios for file_(groupownership|owner|permissions) template (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - extract duplicated function from file_(owner|groupowner|permissions) templates into shared module (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - modify the oval for file_groupownership template (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - modify the preprocessing function of file_groupownership template (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - modify remediations for file_groupownership template (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - change the parameter name in template tests (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - modify rule.yaml files to change the parameter name of file_groupownership template from filegid to gid_or_name (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - update template documentation (Vojtech Polasek) 2024-11-27 21:46:22.707 logging.py DEBUG - Change double underscore to a single underscore (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Add graphs to represent the life cycle of controls file. (Gabriel Becker) 2024-11-27 21:46:22.707 logging.py DEBUG - Add a Playbook name to Ansible Playbooks (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - add-rules sles-15-010418 sles-12-010498 (svet-se) 2024-11-27 21:46:22.707 logging.py DEBUG - Polish OVAL in sysctl template (Edgar Aguilar) 2024-11-27 21:46:22.707 logging.py DEBUG - Fix CodeClimate problem (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - controls/srg_ctr.yaml: Remove the controls section to make SRG export happy (Jakub Hrozek) 2024-11-27 21:46:22.707 logging.py DEBUG - RHCOS4 STIG: AC-2(4),AU-12(c): Controls covered with audit_rules_sysadmin_actions and audit_rules_usergroup_modification (Jakub Hrozek) 2024-11-27 21:46:22.707 logging.py DEBUG - profiles: Add a stub STIG RHCOS4 profile (Jakub Hrozek) 2024-11-27 21:46:22.707 logging.py DEBUG - OCP4: Move the var_openshift_audit_profile variable from srg_ctr.yml to the OCP4 STIG profile (Jakub Hrozek) 2024-11-27 21:46:22.707 logging.py DEBUG - Remove a space (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Fix a traceback (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Replace must by should (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Create template testing plugins (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Make the parameters required (Jan Černý) 2024-11-27 21:46:22.707 logging.py DEBUG - Add components to resolved rules (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Replace double underscore by single underscore (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Update example product.yml in Developer's guide (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Assign rule package_iptables-services_removed to a component (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Simplify function test_platform (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Extract function (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Allow products to specify the components directory (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Use ssg.components module in _load_components (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Avoid many return statements (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Reduce amount of parameters (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Reduce complexity of main function (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Fix CodeClimate PEP8 problem (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Extract method (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Add a unit test for the ssg.components module (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - remove env_yaml (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Add a test for components based on groups (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Add test for component based on platforms (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Add a simple test for component consistency (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Enforce component mapping (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Assign network_implement_access_control to firewalld component (Jan Černý) 2024-11-27 21:46:22.708 logging.py DEBUG - Add fail test to sysctl template (Edgar Aguilar) 2024-11-27 21:46:22.708 logging.py DEBUG - Improve ansible remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.708 logging.py DEBUG - Add jinja bash macro to comment out config setting (teacup-on-rockingchair) 2024-11-27 21:46:22.708 logging.py DEBUG - A fix in macro sshd_oval_check (rchikov) 2024-11-27 21:46:22.708 logging.py DEBUG - A fix in the rule sshd_set_keepalive (rchikov) 2024-11-27 21:46:22.708 logging.py DEBUG - Add RHEL 7 CCE to selinux_confine_to_least_privilege (Matthew Burket) 2024-11-27 21:46:22.708 logging.py DEBUG - Add RHEL 7 CCE to disallow_bypass_password_sudo (Matthew Burket) 2024-11-27 21:46:22.708 logging.py DEBUG - Revert macro usage in zipl rules (Matej Tyc) 2024-11-27 21:46:22.708 logging.py DEBUG - Add support for loading Jinja without the product context (Matej Tyc) 2024-11-27 21:46:22.708 logging.py DEBUG - Simplify aide rules by leveraging product properties (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Consolidate grub rules (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Guard product test references, not products (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Expand the product stability test to autofix reference data (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Add product families (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Fix the current product properties (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Move grub paths to product properties (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Start using product properties for ID numbers (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Introduce minor text improvements (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Add selinux_confine_to_least_privilege to RHEL 7 STIG (Matthew Burket) 2024-11-27 21:46:22.709 logging.py DEBUG - Add disallow_bypass_password_sudo to RHEL 7 STIG (Matthew Burket) 2024-11-27 21:46:22.709 logging.py DEBUG - Add no_empty_passwords_etc_shadow to RHEL 7 STIG (Matthew Burket) 2024-11-27 21:46:22.709 logging.py DEBUG - SRG-APP-000158-CTR-000390: Add supporting evidence to an Inherently Met rule (Jakub Hrozek) 2024-11-27 21:46:22.709 logging.py DEBUG - SRG-APP-000090-CTR-000155: No longer Does not Meet, but instead covered by setting the OCP audit profile (Jakub Hrozek) 2024-11-27 21:46:22.709 logging.py DEBUG - OCP4: Update instructions of scc/scc_limit_container_allowed_capabilities (Jakub Hrozek) 2024-11-27 21:46:22.709 logging.py DEBUG - Update CIS control file for RHEL7 and RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Include rule to remove iptables-services package (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Updating control_response (pending) to prevent test failure (Rutvik) 2024-11-27 21:46:22.709 logging.py DEBUG - Updating control_response for control id 1.3.1 (Rutvik) 2024-11-27 21:46:22.709 logging.py DEBUG - Fix CMakelint (Matthew Burket) 2024-11-27 21:46:22.709 logging.py DEBUG - Fix a cmake linting error (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Remove the deployment section (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Address reviewer feedback (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Integrate manpage with CMake better (Matej Tyc) 2024-11-27 21:46:22.709 logging.py DEBUG - Update reference for product stability test (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Change of anssi recommendation for the rule mount_option_home_nosuid (rchikov) 2024-11-27 21:46:22.709 logging.py DEBUG - Pretty minor fix in product title (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - OCP4 Add the suppresse warning tag (Vincent Shen) 2024-11-27 21:46:22.709 logging.py DEBUG - Align notes in nftables supported requirements (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 3.5.3.1.2 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 3.5.1.3 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 3.5.3.1.1 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 3.5.2.1 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 5.7 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Update the CIS 5.5.4 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 3.5.1.4 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 5.5.1.2 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 5.5.1.1 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 4.1.1.1 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 5.5.2 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Typo correction in CIS profile for SLE 12 (rchikov) 2024-11-27 21:46:22.709 logging.py DEBUG - Add sanity test for Automatus in CMake (Matthew Burket) 2024-11-27 21:46:22.709 logging.py DEBUG - Add Automatus Sanity tests (Matthew Burket) 2024-11-27 21:46:22.709 logging.py DEBUG - Add testing profile for Fedora (Matthew Burket) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 5.4.2 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Complete the CIS 4.1.15 requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Replace legacy parameter in CIS RHEL7 control file (Marcus Burghardt) 2024-11-27 21:46:22.709 logging.py DEBUG - Fix in ansible part of the rule audit_rules_kernel_module_loading (rchikov) 2024-11-27 21:46:22.709 logging.py DEBUG - Add requirements files for python dependencies (Lance Bragstad) 2024-11-27 21:46:22.709 logging.py DEBUG - Fix of rule sudo_dedicated_group for sle 12/15 (rchikov) 2024-11-27 21:46:22.709 logging.py DEBUG - Reduce the test install_vm to Python 3 (Jan Černý) 2024-11-27 21:46:22.709 logging.py DEBUG - Add a sanity test of install_vm.py (Jan Černý) 2024-11-27 21:46:22.709 logging.py DEBUG - Fixes in 1.3.1 GC rules with updated doc links and completing control_response (rutvik23) 2024-11-27 21:46:22.709 logging.py DEBUG - Update ansible.template (Rumen) 2024-11-27 21:46:22.709 logging.py DEBUG - Implementation of proposed corrections (rchikov) 2024-11-27 21:46:22.710 logging.py DEBUG - Add warning to rsyslog_remote_tls_cacert (Matthew Burket) 2024-11-27 21:46:22.710 logging.py DEBUG - OCP4: Fix group ownerships checks (Jakub Hrozek) 2024-11-27 21:46:22.710 logging.py DEBUG - Changes in SLE 12/15 profiles related to time_sync services (rchikov) 2024-11-27 21:46:22.710 logging.py DEBUG - Add rsyslog_remote_loghost droping remediations (teacup-on-rockingchair) 2024-11-27 21:46:22.710 logging.py DEBUG - Do not replace character in compare-ds job. (Gabriel Becker) 2024-11-27 21:46:22.710 logging.py DEBUG - Fix in SLE 12/15 rule accounts_passwords_pam_tally2_unlock_time (rchikov) 2024-11-27 21:46:22.710 logging.py DEBUG - Fix Ansible fatal error from configure_tmux_lock_keybinding (Milan Lysonek) 2024-11-27 21:46:22.710 logging.py DEBUG - Add remediations for rule network_sniffer_disabled (Federico Ramirez) 2024-11-27 21:46:22.710 logging.py DEBUG - Fix title case in ansible tasks name (Edgar Aguilar) 2024-11-27 21:46:22.710 logging.py DEBUG - Fix var_firewalld_default_zone_filename datatype (Matthew Burket) 2024-11-27 21:46:22.710 logging.py DEBUG - fix ansible kex_algos_regex (svet-se) 2024-11-27 21:46:22.710 logging.py DEBUG - Some SLE 12/15 fixes related to the rule accounts_passwords_pam_tally2 (rchikov) 2024-11-27 21:46:22.710 logging.py DEBUG - Change git to git-core (Jan Černý) 2024-11-27 21:46:22.711 logging.py DEBUG - OCP: Add CPE for HyperShift Hosted cluster (Vincent Shen) 2024-11-27 21:46:22.711 logging.py DEBUG - Add remediation headers in rule (Edgar Aguilar) 2024-11-27 21:46:22.711 logging.py DEBUG - Add tests for network_implement_access_control (Federico Ramirez) 2024-11-27 21:46:22.711 logging.py DEBUG - Harden bash in file_permission_user_init_files (Edgar Aguilar) 2024-11-27 21:46:22.711 logging.py DEBUG - Polish OVAL in file_permission_user_init_files (Edgar Aguilar) 2024-11-27 21:46:22.711 logging.py DEBUG - Fix install_vm.py on older versions of Python (Jan Černý) 2024-11-27 21:46:22.711 logging.py DEBUG - Add git to dependencies of the stabilize workflow (Jan Černý) 2024-11-27 21:46:22.711 logging.py DEBUG - Document packages key (Jan Černý) 2024-11-27 21:46:22.711 logging.py DEBUG - Fix the current product properties (Matej Tyc) 2024-11-27 21:46:22.711 logging.py DEBUG - Implement limitations of defining product properties (Matej Tyc) 2024-11-27 21:46:22.711 logging.py DEBUG - Fix loading of product yaml to utilities (Matej Tyc) 2024-11-27 21:46:22.711 logging.py DEBUG - Document product properties (Matej Tyc) 2024-11-27 21:46:22.711 logging.py DEBUG - Add support for properties into the build script (Matej Tyc) 2024-11-27 21:46:22.711 logging.py DEBUG - Introduce input hierarchy to the product class (Matej Tyc) 2024-11-27 21:46:22.711 logging.py DEBUG - Allow product to update itself from directories (Matej Tyc) 2024-11-27 21:46:22.711 logging.py DEBUG - Bump version to 0.1.69 (Jan Černý) 2024-11-27 21:46:22.711 logging.py DEBUG - Update contributors for version 0.1.68 (Jan Černý) 2024-11-27 21:46:22.711 logging.py DEBUG - update rule sles-12-030250 (svet-se) 2024-11-27 21:46:22.711 logging.py DEBUG - Add changelog key to the components YAML (Jan Černý) 2024-11-27 21:46:22.711 logging.py DEBUG - fix oval check (svet-se) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: use grep -E instead of deprecated egrep (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: accounts_user_interactive_home_directory_defined: use nobody_gid (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - bugfix: accounts_user_interactive_home_directory_defined: use gid_min with groups (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: nobody_uid: use it in ansible too (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: nobody_uid: use it (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: ssg_test_suite: warning when rule not in benchmark (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: file_groupownership_system_commands_dirs: use gid_min (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: no_password_auth_for_systemaccounts: use uid_min (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: interactive_users tests: actually use uid_min (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: uid_min: use it in various cases (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: uid_min: use it in audit auid checks, out jinja macro (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: uid_min: use it in audit auid checks, in jinja macro (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: accounts_user_interactive_home_directory_defined: typo (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: cmake: do not quote \$ when using variable value (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - change: cmake: use list APPEND (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: cmake: ssg_build_sds: make REFERENCES_CHECK_PROFILE_LIST actually a list (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - fix: cmake: symbolic DEPENDS also files in COMMANDS (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - bugfix: cmake: use files as output, not directories (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - bugfix: cmake: custom targets should not be quoted (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - bugfix: cmake: ssg_build_derivative_product: create DERIVATIVE elements (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - style: cmake: ssg_build_html_ref_tables use upcase for foreach variable (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - style: cmake: silence other issues (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - style: cmake: add missing include(FindPackageHandleStandardArgs) (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - style: cmake: remove extra newlines (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - change: cmake: style use only up to 2 empty lines (Markus Linnala) 2024-11-27 21:46:22.711 logging.py DEBUG - style: cmake: use indent 4 (Markus Linnala) 2024-11-27 21:46:22.712 logging.py DEBUG - change: cmake: change style to set indent 4 (Markus Linnala) 2024-11-27 21:46:22.712 logging.py DEBUG - style: cmake: drop extra spaces with commands (Markus Linnala) 2024-11-27 21:46:22.712 logging.py DEBUG - change: cmake: change style to not use extra spaces with commands (Markus Linnala) 2024-11-27 21:46:22.712 logging.py DEBUG - Add OVAL for network_implement_access_control (Federico Ramirez) 2024-11-27 21:46:22.712 logging.py DEBUG - Implement network_implement_access_control rule (Federico Ramirez) 2024-11-27 21:46:22.712 logging.py DEBUG - add rules sles-15-040450 sles-12-030270 (svet-se) 2024-11-27 21:46:22.712 logging.py DEBUG - Document components feature (Jan Černý) 2024-11-27 21:46:22.712 logging.py DEBUG - Remove a one-off tool for semi-automated component assignment (Jan Černý) 2024-11-27 21:46:22.712 logging.py DEBUG - Add initial component-rule mapping (Jan Černý) 2024-11-27 21:46:22.712 logging.py DEBUG - Add a one-off tool for semi-automated component assignment (Jan Černý) 2024-11-27 21:46:22.712 logging.py DEBUG - Implementation of proposed changes (rchikov) 2024-11-27 21:46:22.712 logging.py DEBUG - Removal of extra spaces (rchikov) 2024-11-27 21:46:22.712 logging.py DEBUG - Add two tests to sysctl template (Edgar Aguilar) 2024-11-27 21:46:22.712 logging.py DEBUG - Update sysctl template OVAL (Edgar Aguilar) 2024-11-27 21:46:22.712 logging.py DEBUG - Add tests to file_permission_user_init_files (Edgar Aguilar) 2024-11-27 21:46:22.712 logging.py DEBUG - Add remediation to file_permission_user_init_files (Edgar Aguilar) 2024-11-27 21:46:22.712 logging.py DEBUG - Add OVAL to file_permission_user_init_files (Edgar Aguilar) 2024-11-27 21:46:22.712 logging.py DEBUG - Use complete names in ansible modules (Edgar Aguilar) 2024-11-27 21:46:22.713 logging.py DEBUG - Update shared/macros/10-bash.jinja (Edgar Aguilar) 2024-11-27 21:46:22.713 logging.py DEBUG - Simple test to avoid service restart if unnecessary (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Fix Automatus Fedora (Matthew Burket) 2024-11-27 21:46:22.713 logging.py DEBUG - Align the Ansible remediation with Bash (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - applying changes to control_response, rule.yml and rebase (rutvik23) 2024-11-27 21:46:22.713 logging.py DEBUG - Update pass aging rules to not ignore empty pass (Edgar Aguilar) 2024-11-27 21:46:22.713 logging.py DEBUG - Sync OL8 stig profile with stigids in rules (Edgar Aguilar) 2024-11-27 21:46:22.713 logging.py DEBUG - Sync OL7 stig profile with stigids in rules (Edgar Aguilar) 2024-11-27 21:46:22.713 logging.py DEBUG - Fix template not found error in Automatus (Matthew Burket) 2024-11-27 21:46:22.713 logging.py DEBUG - Include firewalld option in var_nftables_table.var (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update CIS requirement about nftables table (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update CIS requirement about nftables base chains (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include Ansible remediation for rsyslog_nolisten (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include Bash remediation for rsyslog_nolisten (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update rule description to include RainerScript (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Extend OVAL in rsyslog_nolisten rule to use RainerScript (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update CIS requirement for system accounts (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update test scenario scripts to remediate (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include Ansible remediation to fix system accounts shell (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include Bash remediation to fix system accounts shell (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update no_shelllogin_for_systemaccounts rule description (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include rule in CIS profile for RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Update rule description (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include Ansible remediation to lock system accounts (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include test scenarios for system accounts with password (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include Bash remediation to lock system accounts (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Create OVAL to check systemaccounts with password (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Include OVAL macro to create systemaccounts list (Marcus Burghardt) 2024-11-27 21:46:22.713 logging.py DEBUG - Remove ids from dedicated_ssh_keyowner in the product stability (Matthew Burket) 2024-11-27 21:46:22.713 logging.py DEBUG - style: install_vm: split big main in smaller parts (Markus Linnala) 2024-11-27 21:46:22.713 logging.py DEBUG - fix: install_vm: handle SUDO_USER only when needed (Markus Linnala) 2024-11-27 21:46:22.713 logging.py DEBUG - style: virt_install: minor style changes (Markus Linnala) 2024-11-27 21:46:22.713 logging.py DEBUG - fix: install_vm: handle per distro using dicts (Markus Linnala) 2024-11-27 21:46:22.713 logging.py DEBUG - add rules sles-15-010375 sles-12-010375 (svet-se) 2024-11-27 21:46:22.713 logging.py DEBUG - Cosmetic refactoring (Matej Tyc) 2024-11-27 21:46:22.713 logging.py DEBUG - Only consider a product when the products/$product/product.yml exists. (Gabriel Becker) 2024-11-27 21:46:22.713 logging.py DEBUG - Use jinja templates to render the policies page. (Gabriel Becker) 2024-11-27 21:46:22.713 logging.py DEBUG - Use add_custom_command instead of creating a custom target. (Gabriel Becker) 2024-11-27 21:46:22.714 logging.py DEBUG - Upload artifacts in case the event is a pull request. (Gabriel Becker) 2024-11-27 21:46:22.714 logging.py DEBUG - Fix codeclimate issues. (Gabriel Becker) 2024-11-27 21:46:22.714 logging.py DEBUG - Add rendered policies page to published html gh pages. (Gabriel Becker) 2024-11-27 21:46:22.714 logging.py DEBUG - Add CMake target render-policies to render all policies available. (Gabriel Becker) 2024-11-27 21:46:22.714 logging.py DEBUG - add rules sles-15-010420 sles-12-010500 (svet-se) 2024-11-27 21:46:22.714 logging.py DEBUG - Use specific name in private key groups instead of gid. (Gabriel Becker) 2024-11-27 21:46:22.714 logging.py DEBUG - add rules sles-15-010419 sles-12-010499 (svet-se) 2024-11-27 21:46:22.714 logging.py DEBUG - Refactor the test scripts (Matej Tyc) 2024-11-27 21:46:22.714 logging.py DEBUG - add rule aide_scan_notification for sle 15 (svet-se) 2024-11-27 21:46:22.714 logging.py DEBUG - SRG-APP-000390-CTR-000930 is now not applicable (Jakub Hrozek) 2024-11-27 21:46:22.714 logging.py DEBUG - SRG-APP-000266-CTR-000625: Inherently met SRG Was missing status justification (Jakub Hrozek) 2024-11-27 21:46:22.714 logging.py DEBUG - SRG-APP-000441-CTR-001090,SRG-APP-000442-CTR-001095: Add justification to a rule that's inherently met (Jakub Hrozek) 2024-11-27 21:46:22.714 logging.py DEBUG - OCP4 STIG: Several RBAC related controls are no longer Inherently Met, let's use a manual rule to cut duplication (Jakub Hrozek) 2024-11-27 21:46:22.714 logging.py DEBUG - Make the scapval waiving easier to update (Matej Tyc) 2024-11-27 21:46:22.714 logging.py DEBUG - Add eks platforms to some ocp shared OVAL (Matej Tyc) 2024-11-27 21:46:22.714 logging.py DEBUG - Extract parts of the stab tests into a function (Matej Tyc) 2024-11-27 21:46:22.714 logging.py DEBUG - Reuse code between profile stab and product stab tests (Matej Tyc) 2024-11-27 21:46:22.714 logging.py DEBUG - change task names to title case (Vojtech Polasek) 2024-11-27 21:46:22.714 logging.py DEBUG - Add support for exclusion of properties from stab test (Matej Tyc) 2024-11-27 21:46:22.714 logging.py DEBUG - Populate product stability data with all products (Matej Tyc) 2024-11-27 21:46:22.715 logging.py DEBUG - Rename rule from chronyd_configures_time_sources to chronyd_configure_pool_and_server (rchikov) 2024-11-27 21:46:22.715 logging.py DEBUG - style: install_vm: print infosection intelligently (Markus Linnala) 2024-11-27 21:46:22.715 logging.py DEBUG - fix: install_vm: use specific err function to handle errors (Markus Linnala) 2024-11-27 21:46:22.715 logging.py DEBUG - fix: install_vm: use shlex when printing command (Markus Linnala) 2024-11-27 21:46:22.715 logging.py DEBUG - style: install_vm: create virt-install as list (Markus Linnala) 2024-11-27 21:46:22.715 logging.py DEBUG - style: install_vm: use explicit number in format (Markus Linnala) 2024-11-27 21:46:22.715 logging.py DEBUG - fix: install_vm.py: use subprocess with command as list (Markus Linnala) 2024-11-27 21:46:22.715 logging.py DEBUG - Introduce a product yaml stability test (Matej Tyc) 2024-11-27 21:46:22.715 logging.py DEBUG - Change of variable settings for PCI DSS (rchikov) 2024-11-27 21:46:22.715 logging.py DEBUG - style: install_vm: sort other imports (Markus Linnala) 2024-11-27 21:46:22.715 logging.py DEBUG - style: automatus: sort other imports (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - style: ssg_test_suite: sort other imports (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_line_in_file_object/doc: missing_parameter_pass is bool (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_metadata/doc: affected_platforms is list[str] (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_chown: type name (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: ocil_firewalld_allow_access/doc: port is str (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: ocil_firefox_config/doc: add hint about accepted values for value (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: update_etc_default_grub_manually_absent/doc: add type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: update_etc_default_grub_manually/doc: add types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: systemd_ocil_timer_enabled/doc: fix parameter name (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: set_config_file/doc: add types, add missing argument (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: openshift_cluster_setting_kubeletconfig/doc: bad doc (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: grub2_bootloader_argument_absent_remediation/doc: fix type format (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: grub2_bootloader_argument_remediation/doc: fix type format (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: grub_command/doc: arguments/types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fix_openshift_logging_rbac/doc: add type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: die/doc: add types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: create_interactive_users_list_object/doc: param/type must start line (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: warning_rule_deprecated_by/doc: add types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: warning_ovirt_rule_notapplicable/doc: add type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: srg_requirement_directory_group_owner/doc: fix name in doc (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_line_in_file_criterion/doc: fix parameters (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_check_dconf_ini_file/doc: fix types and add missing argument (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_argument_value_in_line/doc: fix types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_auditd_config/doc: fix types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_grub_config/doc: fix type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_file_contents/doc: add type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_check_shell_file/doc: use jinja type names, fix type name (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: oval_check_config_file/doc: bool type as bool (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: ocil_clause_file_group_owner/doc: fix parameter name in doc (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: ocil_cluster_logging_rbac_review/doc: fix types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_service_enabled/doc: parameter name (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_service_disabled/doc: parameter name (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_socket_disabled/doc: parameter name (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_file_group_owner/doc: parameter name (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_file_deletion_events/doc: fix type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_chmod/doc: fix type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_attr: fix types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification/doc: fix types (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification_o_creat/doc: fix type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write/doc: fix type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification_rule_order/doc: fix type (Markus Linnala) 2024-11-27 21:46:22.775 logging.py DEBUG - fix: fixtext_sshd_lineinfile/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_shell_file_set/doc: argument types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_fix_audit_syscall_rule/doc: fix names, add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_get_version_os_linux/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_compare_version_os_linux/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_os_linux_conditional/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_remove_pam_module_option_configuration/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_pam_module_configuration/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_remove_pam_module_option/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_pam_module_option/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_pam_module_line/doc: add types, fix format (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_ini_config/doc: add types, fix format (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_chromium_pol_setting/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_pkg_conditional_dpkg/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_compare_version_dpkg/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_get_dpkg_package_version/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_pkg_conditional_rpm/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_compare_version/doc: add types, fix sphinx format (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_pkg_conditional_compare/doc: add types, fix sphinx format (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_get_rpm_package_version/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_pkg_conditional/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_mount_option_for_vfstype/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_replace_or_append/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_file_contents/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_pam_faillock_parameter_value/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_pam_pwhistory_parameter_value/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_apply_authselect_changes/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_there_are_servers_in_ntp_compatible_config_file/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_firefox_cfg_setting/doc: add types, add missing params (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_firefox_js_setting/doc: add types, add missing param (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_fix_audit_watch_rule/doc: add types, move right place (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_perform_audit_rules_privileged_commands_remediation/doc: add types, move right place (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_service_command/doc: add types, indent (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_pam_variables_and_authselect_profile/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_provide_pam_module_options/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_pam_module_options/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_mount_option_in_fstab/doc: param must start line, add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_ensure_nl_at_eof/doc: param must start line, add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: bash_pam_pwhistory_enable/doc: param must start line, add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_grub2_bootloader_argument_absent/doc: fix type format (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_grub2_bootloader_argument/doc: fix type format (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_instantiate_variables/doc: fix format (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_remove_pam_module_option_configuration/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_ensure_pam_module_configuration/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_ensure_pam_facts_and_authselect_profile/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_remove_pam_module_option/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_ensure_pam_module_option/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_ensure_pam_module_line/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_pam_faillock_parameter_value/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_pam_pwhistory_parameter_value/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_pam_pwhistory_enable/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_apply_authselect_changes/doc: add type (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_pkg_conditional/doc: add types (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_audit_auditctl_add_syscall_rule/doc: add types, fix name/order (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - fix: ansible_audit_augenrules_add_syscall_rule/doc: add types, fix name (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - style: jinja macros: add/remove newlines (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - style: jinja: ws cleanup (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - bugfix: bash_ensure_mount_option_for_vfstype: fix parameter name (Markus Linnala) 2024-11-27 21:46:22.776 logging.py DEBUG - Update audit_rules_suid_privilege_function tests (Edgar Aguilar) 2024-11-27 21:46:22.776 logging.py DEBUG - Update audit_rules_suid_privilege_function for ol8 (Edgar Aguilar) 2024-11-27 21:46:22.776 logging.py DEBUG - Fix tests in sshd_lineinfile template (Edgar Aguilar) 2024-11-27 21:46:22.776 logging.py DEBUG - modify regexp in bash remediation of chronyd_specify_remote_server (Vojtech Polasek) 2024-11-27 21:46:22.776 logging.py DEBUG - Fix problem with sshd_strong_kex default selector (teacup-on-rockingchair) 2024-11-27 21:46:22.776 logging.py DEBUG - Update set-output commands (Matthew Burket) 2024-11-27 21:46:22.776 logging.py DEBUG - Address Gate test issue on empty string (Edgar Aguilar) 2024-11-27 21:46:22.776 logging.py DEBUG - Add Ubuntu SCE checks for iptables rules (Eduardo Barretto) 2024-11-27 21:46:22.776 logging.py DEBUG - ubuntu2204: cis_level1_server: Set nftables as default firewall (Eduardo Barretto) 2024-11-27 21:46:22.776 logging.py DEBUG - Add platform to iptables rules (Eduardo Barretto) 2024-11-27 21:46:22.776 logging.py DEBUG - Add platform to UFW rules (Eduardo Barretto) 2024-11-27 21:46:22.776 logging.py DEBUG - Add platform to nftables rules (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - applicability: Add nftables and ufw to package applicability (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_nftables_base_chain (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_nftables_base_chain (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - set_nftables_base_chain: sce: Simplify check so we don't run same (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - set_nftables_base_chain: Add ubuntu prodtype and cis references (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule nftables_ensure_default_deny_policy (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule nftables_ensure_default_deny_policy (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - nftables_ensure_default_deny_policy: Add ubuntu SCE check (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - nftables_ensure_default_deny_policy: Add ubuntu prodtype and cis references (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_nftables_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_nftables_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - set_nftables_loopback_traffic: Add ubuntu SCE check (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - set_nftables_loopback_traffic: Add ubuntu prodtype and cis references (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule nftables_rules_permanent (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - ubuntu2004: cis_level_1_server: Add rule nftables_rules_permanent (Eduardo Barretto) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: execute_tests: handle older versions (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - change: bash_replace_or_append: drop logic about symlinks (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: bash_replace_or_append: use bash_ensure_nl_at_eof (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - feature: bash: add bash_ensure_nl_at_eof (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - improve: test_bash_replace_or_append: more tests (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: test_set_config_file: use bats features (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: test_set_config_file: add test name prefix (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: bash_os_linux_conditional: use bats features (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: test_bash_replace_or_append: use bats features (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: test_bash_ensure_ini_config: use bats features (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - style: test_bash_ensure_ini_config (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - style: test_set_config_file.bats.jinja: indent, drop tabs (Markus Linnala) 2024-11-27 21:46:22.777 logging.py DEBUG - fix: bats tests: add set -pu (Markus Linnala) 2024-11-27 21:46:22.779 logging.py DEBUG - feature: unit/bash/execute_tests: allow to enable bats features (Markus Linnala) 2024-11-27 21:46:22.779 logging.py DEBUG - Make sure the directory exists before saving the rendered policy file. (Gabriel Becker) 2024-11-27 21:46:22.779 logging.py DEBUG - add ansible remediation to rule configure_bashrc_exec_tmux (Vojtech Polasek) 2024-11-27 21:46:22.779 logging.py DEBUG - Use selections attribute from controls instead of rules. (Gabriel Becker) 2024-11-27 21:46:22.779 logging.py DEBUG - nftables_rules_permanent: Add Ubuntu SCE check (Eduardo Barretto) 2024-11-27 21:46:22.779 logging.py DEBUG - nftables_rules_permanent: Add Ubuntu prodtypes and cis references (Eduardo Barretto) 2024-11-27 21:46:22.779 logging.py DEBUG - fix: ssg_test_suite.get_product_context: fake Product (Markus Linnala) 2024-11-27 21:46:22.779 logging.py DEBUG - Update Add Product guide (Matthew Burket) 2024-11-27 21:46:22.779 logging.py DEBUG - Reloval of ubuntu os support from the rule (rchikov) 2024-11-27 21:46:22.779 logging.py DEBUG - Improve the structure of cmake macros (Matej Tyc) 2024-11-27 21:46:22.779 logging.py DEBUG - Rename SLE 12/15 rule and change package name (rchikov) 2024-11-27 21:46:22.779 logging.py DEBUG - Replace grep command with ansible find (teacup-on-rockingchair) 2024-11-27 21:46:22.779 logging.py DEBUG - fix: aide_string: drop nl at end (Markus Linnala) 2024-11-27 21:46:22.779 logging.py DEBUG - Add warning for remediation (teacup-on-rockingchair) 2024-11-27 21:46:22.779 logging.py DEBUG - Fix Bash heredoc (Matthew Burket) 2024-11-27 21:46:22.779 logging.py DEBUG - SLE 12/15 profile updates (rchikov) 2024-11-27 21:46:22.779 logging.py DEBUG - Include aide_check_audit_tools rule in CIS for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.779 logging.py DEBUG - Update linux_os/guide/system/selinux/selinux_not_disabled/oval/shared.xml (Marcus Burghardt) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_deny_root/rule.yml (Rumen) 2024-11-27 21:46:22.780 logging.py DEBUG - Ensure that we correctly stated the version for action-gh-release (Matthew Burket) 2024-11-27 21:46:22.780 logging.py DEBUG - Update Code Climate (Matthew Burket) 2024-11-27 21:46:22.780 logging.py DEBUG - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.780 logging.py DEBUG - Introduce selinux_not_disabled rule (Marcus Burghardt) 2024-11-27 21:46:22.780 logging.py DEBUG - New rule ensure_chrony_is_configured (rchikov) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_base_chain/sce/shared.sh (Rumen) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update rule.yml to be relvant for sle15 only for now (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/oval/sle15.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/tests/valid_config_file_handle_lo.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/bash/shared.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - Update CIS control file for RHEL9 regarding lo traffic (Marcus Burghardt) 2024-11-27 21:46:22.780 logging.py DEBUG - Introduce the firewalld_loopback_traffic_restricted rule (Marcus Burghardt) 2024-11-27 21:46:22.780 logging.py DEBUG - Introduce firewalld_loopback_traffic_trusted rule (Marcus Burghardt) 2024-11-27 21:46:22.780 logging.py DEBUG - Fix issue when adding fstab entries with iso9660 (Edgar Aguilar) 2024-11-27 21:46:22.780 logging.py DEBUG - fix: ensure_fedora_gpgkey_installed/bash: use bash_package_install (Markus Linnala) 2024-11-27 21:46:22.780 logging.py DEBUG - Fix tests applicablity for ol8 product (Edgar Aguilar) 2024-11-27 21:46:22.780 logging.py DEBUG - Update OL9 jinja conditionals from RHEL9 ones (Edgar Aguilar) 2024-11-27 21:46:22.780 logging.py DEBUG - Update jinja conditionals that apply to OL8 (Edgar Aguilar) 2024-11-27 21:46:22.780 logging.py DEBUG - Update jinja conditionals that apply to any ol (Edgar Aguilar) 2024-11-27 21:46:22.780 logging.py DEBUG - Remove use of mstksg/get-package in actions (Matthew Burket) 2024-11-27 21:46:22.780 logging.py DEBUG - Streamline compile_all (Matej Tyc) 2024-11-27 21:46:22.780 logging.py DEBUG - Update actions/download-artifact (Matthew Burket) 2024-11-27 21:46:22.780 logging.py DEBUG - Update comment actions (Matthew Burket) 2024-11-27 21:46:22.780 logging.py DEBUG - Fixes in SLE 12/15 rule accounts_passwords_pam_tally2_deny_root (rchikov) 2024-11-27 21:46:22.780 logging.py DEBUG - Fix in SLE 12/15 rule sshd_use_approved_macs (rchikov) 2024-11-27 21:46:22.780 logging.py DEBUG - Fix in the SLE 12/15 rule sshd_use_strong_kex (rchikov) 2024-11-27 21:46:22.780 logging.py DEBUG - bugfix: dir_perms_world_writable_root_owned: do not modify files under /proc (Markus Linnala) 2024-11-27 21:46:22.780 logging.py DEBUG - Fix in sshd_use_approved_ciphers (rchikov) 2024-11-27 21:46:22.780 logging.py DEBUG - Add oval check and tests (teacup-on-rockingchair) 2024-11-27 21:46:22.780 logging.py DEBUG - style: install_vm (Markus Linnala) 2024-11-27 21:46:22.780 logging.py DEBUG - feature: install_vm: add --disk-unsafe (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - fix: install_vm: show defaults in --help (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - fix: install_vm: allow other start dir than tests (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - bugfix: aide_periodic_cron_checking: jinja expansion (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - bugfix: package_libselinux_installed: custom-package-removed.fail.sh: need to set releasever (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - bugfix: install_vm: support biosboot (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - bugfix: configure_etc_hosts_deny/tests/file_missing.fail.sh: typo (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - fix: ensure_logrotate_activated/bash: quote #! with '', avoid history expansion (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - bugfix: packages: delim is comma (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - fix: ssg_test_suite/oscap send_files_remote: drop, is unused (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - fix: sysctl: remove unnecessary tests/shared/sysctl.sh (Markus Linnala) 2024-11-27 21:46:22.781 logging.py DEBUG - Fix title case of rule (teacup-on-rockingchair) 2024-11-27 21:46:22.781 logging.py DEBUG - Fix ansible style titles and FQCN of tasks (teacup-on-rockingchair) 2024-11-27 21:46:22.781 logging.py DEBUG - Fix rule name in control (teacup-on-rockingchair) 2024-11-27 21:46:22.781 logging.py DEBUG - Optimize sysctl checks to use ansible sysctl module (teacup-on-rockingchair) 2024-11-27 21:46:22.781 logging.py DEBUG - Replace non-existing command create with insert (teacup-on-rockingchair) 2024-11-27 21:46:22.781 logging.py DEBUG - Assign CCE-ID SLE15 set_nftables_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:22.781 logging.py DEBUG - fix ocil for set_nftables_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:22.781 logging.py DEBUG - add newlines (Christian Hagenest) 2024-11-27 21:46:22.781 logging.py DEBUG - fix ansible syntax error (Christian Hagenest) 2024-11-27 21:46:22.782 logging.py DEBUG - move ocil_clauses between iptables rules (Christian Hagenest) 2024-11-27 21:46:22.782 logging.py DEBUG - New Rule nftable loopback traffic (Christian Hagenest) 2024-11-27 21:46:22.782 logging.py DEBUG - bugfix: aide_scan_notificatio/tests: ensure crontabs/chronie (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - bugfix: aide_check_audit_tools: Ensure no suffix prefix (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - bugfix: auditd_offload_logs/tests: ensure crontabs installed (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - bugfix: file_permissions_cron_allow/tests: ensure crontabs installed (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - bugfix: file_cron_deny_not_exist/tests: ensure crontabs installed (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: aide_periodic_cron_checking/tests: use bash_package_remove (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - bugfix: aide_periodic_cron_checking/tests: ensure packages are installed (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: aide/remediations: add crontabs (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: chronyd_or_ntpd_set_maxpoll/tests: use bash_package_remove (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: snmpd_not_default_password/tests: use bash_package_remove (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: configure_bind_crypto_policy/tests: use bash_package_remove (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: configure_libreswan_crypto_policy/tests: use bash_package_remove (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: snmpd_not_default_password/tests: use packages feature to install packages (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: smartcard_configure_cert_checking/bash: use bash_package_install to install required packages (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: accounts_polyinstantiated_var_tmp: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: accounts_polyinstantiated_tmp: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: build_profiler: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: sysctl: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: rsyslog_cron_logging/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: dir_system_commands_root_owned/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: accounts_users_home_files_permissions/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: file_ownership_library_dirs/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: sudo_require_authentication/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: sudo_remove_nopasswd/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: sudo_remove_no_authenticate/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: accounts_umask_interactive_users/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: file_group_ownership_var_log_audit/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: directory_permissions_var_log_audit/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: auditd_data_disk_full_action/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.782 logging.py DEBUG - fix: auditd_data_disk_error_action/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: rsyslog_encrypt_offload_defaultnetstreamdriver/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: rsyslog_encrypt_offload_actionsendstreamdrivermode/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: rsyslog_encrypt_offload_actionsendstreamdriverauthmode/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: dir_system_commands_group_root_owned/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: sssd_enable_pam_services/bash: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: dir_perms_world_writable_system_owned_group/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: dir_perms_world_writable_system_owned/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: dir_perms_world_writable_sticky_bits/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: dir_perms_world_writable_root_owned/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: rsyslog_remote_tls/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: directory_group_ownership_var_log_audit/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: account_password_selinux_faillock_dir/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: usbguard_allow_hid_and_hub/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: file_permissions_library_dirs/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - fix: mount_option_nodev_nonroot_local_partitions/tests: use mkdir -p (Markus Linnala) 2024-11-27 21:46:22.783 logging.py DEBUG - Update CIS control file for RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.783 logging.py DEBUG - Include missing CIS reference for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.783 logging.py DEBUG - Update CIS control files for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.783 logging.py DEBUG - Introduce file_groupownership_sshd_pub_key rule (Marcus Burghardt) 2024-11-27 21:46:22.783 logging.py DEBUG - Introduce file_ownership_sshd_pub_key rule (Marcus Burghardt) 2024-11-27 21:46:22.783 logging.py DEBUG - Update CIS control files for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.783 logging.py DEBUG - Introduce file_groupownership_sshd_private_key rule (Marcus Burghardt) 2024-11-27 21:46:22.784 logging.py DEBUG - Include id attribute to dedicated_ssh_keyowner (Marcus Burghardt) 2024-11-27 21:46:22.784 logging.py DEBUG - Remove unnecessary blank lines in templates (Marcus Burghardt) 2024-11-27 21:46:22.784 logging.py DEBUG - Introduce file_ownership_sshd_private_key rule (Marcus Burghardt) 2024-11-27 21:46:22.784 logging.py DEBUG - Quote octal value informed to mode option (Marcus Burghardt) 2024-11-27 21:46:22.784 logging.py DEBUG - Rename test scenario scripts and include tests (Marcus Burghardt) 2024-11-27 21:46:22.784 logging.py DEBUG - Minor changes into variables and ansible (rchikov) 2024-11-27 21:46:22.784 logging.py DEBUG - Fixes of cron package/service for SLE 12/15 (rchikov) 2024-11-27 21:46:22.784 logging.py DEBUG - Ensure that doctext blocks end with a blank line (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - Fix up some warnings in walk_rules (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - Fix link to developer docs in docs README (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - Remove utils/find_shadowed_files.py from docs (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - Update Heading Issues (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - Remove utils/count_oval_objects.py from docs (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - Python2 compatibility (Matej Tyc) 2024-11-27 21:46:22.784 logging.py DEBUG - Changes in profiles (rchikov) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: another instance of multi-tennant (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: another instance of httpasswd (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - Upgrade to changelog v3 (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - Update add product guide (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: typos in documentation (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: typos in controls (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: copied truncated text from CIS EKS benchmark (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: typos in controls/srg_gpos (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: more status_justification misspellings (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: typos in srg_ctr (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: fixed typos in label status_justfication (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - fix: typos in openshift content (Gene Gotimer) 2024-11-27 21:46:22.784 logging.py DEBUG - Use a dictionary as the env_yaml argument (Matej Tyc) 2024-11-27 21:46:22.784 logging.py DEBUG - Make the product class usable by the build system (Matej Tyc) 2024-11-27 21:46:22.784 logging.py DEBUG - Make product dict an object (Matej Tyc) 2024-11-27 21:46:22.784 logging.py DEBUG - Prepare for the concept of compiled products (Matej Tyc) 2024-11-27 21:46:22.784 logging.py DEBUG - refactor ansible and use FQCN (svet-se) 2024-11-27 21:46:22.784 logging.py DEBUG - update rule sles-15-040250 (svet-se) 2024-11-27 21:46:22.784 logging.py DEBUG - Use actions/checkout@v3 (Matthew Burket) 2024-11-27 21:46:22.784 logging.py DEBUG - fix letter cases, remove abandoned rule, fix rule 7.1 description and add vars (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Update cusp_firefox.yml (j-ode) 2024-11-27 21:46:22.784 logging.py DEBUG - Update cusp_fedora.yml (j-ode) 2024-11-27 21:46:22.784 logging.py DEBUG - Update controls/cusp_fedora.yml (j-ode) 2024-11-27 21:46:22.784 logging.py DEBUG - Update controls/cusp_fedora.yml (j-ode) 2024-11-27 21:46:22.784 logging.py DEBUG - Remove trailing space (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Remove rules that disable ip forwarding due to hardening of VM guests (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Fix order of fedora prodtype in rules (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Remove mount option rules due to inconsistencies, fix remediation platforms (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Remove rules based on testing the profile (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Fix controls yaml (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Add Firefox controls, remove duplicate rules in fedora controls (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - remove rule references (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - remove superfluous rule (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - fix control file and add fedora prodtype to rules (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Fix firefox rule, create new cusp_firefox profile and update rule 6.1 to reflect (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Fix YAML errors (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - test - enable fedora product build with cusp_fedora profile (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Add CaC rule to rule 6.1, add rules 6.2, 7.1, 7.2 (Jiri Odehnal) 2024-11-27 21:46:22.784 logging.py DEBUG - Add placeholder for rule 6.1 (j-ode) 2024-11-27 21:46:22.784 logging.py DEBUG - Add rule 5.2 (j-ode) 2024-11-27 21:46:22.784 logging.py DEBUG - Add rule 5.1 (j-ode) 2024-11-27 21:46:22.784 logging.py DEBUG - Fix rule 3.10 title (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.10 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rules to 4.3 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 4.3 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 4.2 and update 3.5 to audit sudo config (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 4.1 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add journald rule to 3.6 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.6 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.9 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Update cusp_fedora.yml (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.8 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.7 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.6 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Remove misplaced rule in 3.4 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add new rule to ensure gnome-software is installed and add it to cusp_fedora controls (Jiri Odehnal) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.4 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix rule 3.3 status (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.2 and 3.3 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rule 3.1 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add section 2. System installation (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Rename policy to security policy (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Rename profile to policy (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Add rules to section 1 (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Create cup_fedora controls file (j-ode) 2024-11-27 21:46:22.785 logging.py DEBUG - Set permissions mode 640 in rsyslog_files_permissions for every product. (Gabriel Becker) 2024-11-27 21:46:22.785 logging.py DEBUG - Remove deadcode (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - Improve indentation in oval definitions (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix read the docs build (Matthew Burket) 2024-11-27 21:46:22.785 logging.py DEBUG - Corrections in bash and ansible (rchikov) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix: many misspellings, typos (Gene Gotimer) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix: grammar- mismatched tense (Gene Gotimer) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix: another misspelled word, adminstrator (Gene Gotimer) 2024-11-27 21:46:22.785 logging.py DEBUG - fix: Fix misspelled word infrastruture #10530 (Gene Gotimer) 2024-11-27 21:46:22.785 logging.py DEBUG - Add CCE reference for SLE15 (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Remove duplicate IDs (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Add newline at eof (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Add Jinja variable to OS-based path in results (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Update Path config with macros (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix pkg names in macro (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Update descriptions for rsyslog-gnutls to account for sle packages (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Revert rsyslog-gnutls changes (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Remove duplicate macro and fix variable names (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix typos (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix syntax error and banner mixup. (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Update all CIS Control files with new banner cfg (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Update rule calls to comply to current cis req (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Create separate rule for sle rsyslog-gnutls pkg. (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Add sle prodtype and refences to faillog rule (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Update command paths for sle products (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Update mode of /etc/shadow for sles os (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Separate variables for banners This allows a separate regex for each file. (Nico Truzzolino) 2024-11-27 21:46:22.785 logging.py DEBUG - Drop of some rules from SLE 12/15 profiles (rchikov) 2024-11-27 21:46:22.785 logging.py DEBUG - Implement a tool for parsing profiles and outputing rules (Lance Bragstad) 2024-11-27 21:46:22.785 logging.py DEBUG - Make sure rule is valid for sle only (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - Add no remediation tag (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix title to follow title case rule (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - Rule renamed to shorter (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - Test added (rchikov) 2024-11-27 21:46:22.785 logging.py DEBUG - feature: template_reference: add jinja filter documentations (Markus Linnala) 2024-11-27 21:46:22.785 logging.py DEBUG - style: template_reference (Markus Linnala) 2024-11-27 21:46:22.785 logging.py DEBUG - Added SCE check (rchikov) 2024-11-27 21:46:22.785 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix nftables rules titles title-case (teacup-on-rockingchair) 2024-11-27 21:46:22.785 logging.py DEBUG - make scap-security-guide.spec support RHEL too (Jiri Jaburek) 2024-11-27 21:46:22.785 logging.py DEBUG - feature: jinja: add quote, shell quoting (Markus Linnala) 2024-11-27 21:46:22.785 logging.py DEBUG - style: jinja filters: sort (Markus Linnala) 2024-11-27 21:46:22.785 logging.py DEBUG - OCP add variable to define HyperShift namespace prefix (Vincent Shen) 2024-11-27 21:46:22.785 logging.py DEBUG - OCP4 NIST: Fix typo in rule selection (Jakub Hrozek) 2024-11-27 21:46:22.785 logging.py DEBUG - OCP4 CIS: Add control file response for 1.2.33 and 1.2.34 (Jakub Hrozek) 2024-11-27 21:46:22.785 logging.py DEBUG - Use opening parenthesis in the switch case condition. (Gabriel Becker) 2024-11-27 21:46:22.785 logging.py DEBUG - Fix in service_autofs_disabled - ansible (rchikov) 2024-11-27 21:46:22.786 logging.py DEBUG - Update rule to pass if no interactive users (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.786 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.786 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.786 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.786 logging.py DEBUG - Rename var_nftable_master_config_file (teacup-on-rockingchair) 2024-11-27 21:46:22.786 logging.py DEBUG - bugfix: mount_option: handle commented lines (Markus Linnala) 2024-11-27 21:46:22.786 logging.py DEBUG - Update CIS OCP 1.3.0 profile details (Lance Bragstad) 2024-11-27 21:46:22.786 logging.py DEBUG - change: use fedora 38 as builder (Markus Linnala) 2024-11-27 21:46:22.786 logging.py DEBUG - change: install_vm: use Fedora 38 (Markus Linnala) 2024-11-27 21:46:22.786 logging.py DEBUG - change: fedora 38 released (Markus Linnala) 2024-11-27 21:46:22.786 logging.py DEBUG - fix: ensure_fedora_gpgkey_installed: add rawhide and future in help (Markus Linnala) 2024-11-27 21:46:22.786 logging.py DEBUG - Add Kickstarts to the changelog (Matthew Burket) 2024-11-27 21:46:22.786 logging.py DEBUG - Update netrc requirement in CIS for RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - Style Guide alignment: one sentence per line (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - Fix in ansible part of the rule (rchikov) 2024-11-27 21:46:22.786 logging.py DEBUG - Add control file for OCP 1.3.0 (Lance Bragstad) 2024-11-27 21:46:22.786 logging.py DEBUG - Fix title in package_mailx_installed (Edgar Aguilar) 2024-11-27 21:46:22.786 logging.py DEBUG - Add package_mailx_installed to OL7 STIG (Edgar Aguilar) 2024-11-27 21:46:22.786 logging.py DEBUG - Add rule package_mailx_installed (Edgar Aguilar) 2024-11-27 21:46:22.786 logging.py DEBUG - add python3 to the list of build dependencies for RHEL-8+ (Jiri Jaburek) 2024-11-27 21:46:22.786 logging.py DEBUG - Update release documentation about release_helper (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - Implementation of proposed changes in ansible (rchikov) 2024-11-27 21:46:22.786 logging.py DEBUG - Including missing line in the rule description (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - Update 4.1.3.19 CIS requirement for RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - New audit rule for query_module kernel module (Marcus Burghardt) 2024-11-27 21:46:22.786 logging.py DEBUG - Enable rule for RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.787 logging.py DEBUG - Style Guide alignment (Marcus Burghardt) 2024-11-27 21:46:22.788 logging.py DEBUG - Ansible tasks names in Title Case (Marcus Burghardt) 2024-11-27 21:46:22.788 logging.py DEBUG - Add SCE check (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Dropping irrelevant file (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Revert 3.5.3.2.3 requirement status to manual (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Revert 3.5.2.2 status to manual (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Use propper rule naming (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifications/set_iptables_outband_n_established_connections_configured/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Fix indentation in fixtext section (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifications/set_iptables_outband_n_established_connections_configured/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Fix indentation (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifications/set_iptables_outband_n_established_connections_configured/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Add couple of tests to illustrate target behaviour (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Fix duplicate reference key (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Add reference to set_iptables_outband_n_established_connections_configured rule in CIS SLE controls (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Add rule to define CIS requirements for ensuring iptables outbound and established connections are configured (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - Allocate CCE ids for the set_iptables_outband_n_established_connections_configured rule (teacup-on-rockingchair) 2024-11-27 21:46:22.788 logging.py DEBUG - unify logvol naming in RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.788 logging.py DEBUG - add required partitions to CIS server/workstation l1 RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.788 logging.py DEBUG - remove wrong temporary password disablement in pci-dss RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.788 logging.py DEBUG - fix broken bootloader passwords in RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.788 logging.py DEBUG - use keyboard --vckeymap in RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.789 logging.py DEBUG - remove default --append arguments from RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.789 logging.py DEBUG - remove --location=mbr from RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.789 logging.py DEBUG - Fix uefi cpe bash condition The condition should look for a directory and it looks for a file (Edgar Aguilar) 2024-11-27 21:46:22.789 logging.py DEBUG - remove unnecessary --pesize from RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.789 logging.py DEBUG - install RHEL stig_gui kickstarts with 'Server with GUI' packages (Jiri Jaburek) 2024-11-27 21:46:22.789 logging.py DEBUG - remove @Base from RHEL kickstarts (Jiri Jaburek) 2024-11-27 21:46:22.789 logging.py DEBUG - Update accounts_password_pam_retry yaml (Federico Ramirez) 2024-11-27 21:46:22.789 logging.py DEBUG - Bump OL7 STIG version to v2r11 (Federico Ramirez) 2024-11-27 21:46:22.789 logging.py DEBUG - Add ensure_oracle_gpgkey_installed to OL8 STIG (Edgar Aguilar) 2024-11-27 21:46:22.789 logging.py DEBUG - Update OL07-00-010271 requirement (Federico Ramirez) 2024-11-27 21:46:22.789 logging.py DEBUG - Bump OL8 STIG version to V1R6 (Edgar Aguilar) 2024-11-27 21:46:22.789 logging.py DEBUG - Implement OL07-00-010063 (Federico Ramirez) 2024-11-27 21:46:22.789 logging.py DEBUG - Implement OL07-00-010019 (Federico Ramirez) 2024-11-27 21:46:22.789 logging.py DEBUG - Add remediation none header (teacup-on-rockingchair) 2024-11-27 21:46:22.789 logging.py DEBUG - SLE add ability to configure emergency via dropin (teacup-on-rockingchair) 2024-11-27 21:46:22.789 logging.py DEBUG - Link api_server_encryption_provider_cipher with CIS 2.8 (Jakub Hrozek) 2024-11-27 21:46:22.789 logging.py DEBUG - Fix EOF test (Matthew Burket) 2024-11-27 21:46:22.789 logging.py DEBUG - Update rule description to consider /etc/profile.d (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - Update CIS requirement status for umask requirement (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - Update Ansible remediation to consider /etc/profile.d (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - Update Bash remediation to consider /etc/profile.d (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - Set service_nftables_enabled as machine only (Watson Sato) 2024-11-27 21:46:22.789 logging.py DEBUG - Update test scenarios and include /etc/profile.d (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - Extend OVAL check to consider /etc/profile.d dir (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - Update CIS RHEL9 control file for 4.1.4.5 (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - Include file_permissions_audit_configuration rule (Marcus Burghardt) 2024-11-27 21:46:22.789 logging.py DEBUG - OCPBUGS-11334: OCP4: Fix instructions for rules that set the kubelet related sysctls (Jakub Hrozek) 2024-11-27 21:46:22.790 logging.py DEBUG - OCP4: Use the sysctl probe when checking kubelet sysctls (Jakub Hrozek) 2024-11-27 21:46:22.790 logging.py DEBUG - Update ansible in mount_option_remote_filesystems (Edgar Aguilar) 2024-11-27 21:46:22.790 logging.py DEBUG - Update tests in mount_option_remote_filesystems (Edgar Aguilar) 2024-11-27 21:46:22.790 logging.py DEBUG - Update ansible in mount_option_remote_filesystems (Edgar Aguilar) 2024-11-27 21:46:22.790 logging.py DEBUG - OCP4: Add rules for SRG-APP-000456-CTR-001125 (Jakub Hrozek) 2024-11-27 21:46:22.790 logging.py DEBUG - Deletion of 2 tests (rchikov) 2024-11-27 21:46:22.790 logging.py DEBUG - OCPBUGS-7307: Remove templating from OCIL in alert_receiver_configured (Lance Bragstad) 2024-11-27 21:46:22.790 logging.py DEBUG - Use F38 for Ansible lint test (Matthew Burket) 2024-11-27 21:46:22.790 logging.py DEBUG - Expand the list of rules skiped by Ansible lint (Matthew Burket) 2024-11-27 21:46:22.790 logging.py DEBUG - Revert ansible lint gating job to Fedora 37. (Gabriel Becker) 2024-11-27 21:46:22.790 logging.py DEBUG - Fix unused variable in shell script (teacup-on-rockingchair) 2024-11-27 21:46:22.790 logging.py DEBUG - Modify SLE remediation for ensure_logrotate_activated (teacup-on-rockingchair) 2024-11-27 21:46:22.790 logging.py DEBUG - accounts_password_pam_unix_remember: bash: Improve ubuntu remediation (Eduardo Barretto) 2024-11-27 21:46:22.790 logging.py DEBUG - Ubuntu move from pam_pwhistory_remember to pam_unix_remember (Eduardo Barretto) 2024-11-27 21:46:22.790 logging.py DEBUG - Fix logic for the release step (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Do not treat pull requests and issues differently (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Fix missing argument in update_milestone() (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Fix missing argument in get_version_milestone() (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Update utils/release_helper.py (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Include required argument to milestone.edit (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Remove unexpected data from datetime string (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Expand use home directory if present in file path (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Format simplification for functions that print stats (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Rename functions for better readability (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Improve communication messages (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Improve a little bit get_release_end_message function (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Remove function which is no longer used (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Increase robustness in functions that use local files (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Simplified main function with a dictionary (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Improve error handling for session creation (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Update utils/release_helper.py (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Move the bump_version option to release_prep (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Some improvements regarding readability (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Improvements based on the CodeClimate report (Marcus Burghardt) 2024-11-27 21:46:22.790 logging.py DEBUG - Introduce the release_helper.py script (Marcus Burghardt) 2024-11-27 21:46:22.791 logging.py DEBUG - sshd_limit_user_acess: tests: Fix typo (Eduardo Barretto) 2024-11-27 21:46:22.791 logging.py DEBUG - Ensure all control files end with a new line (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Add control files to check_eof script (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Add sysctl disable_ipv6 rule to CIS 3.1.1 (teacup-on-rockingchair) 2024-11-27 21:46:22.791 logging.py DEBUG - Allow dot in VERSION_ID (Jan Černý) 2024-11-27 21:46:22.791 logging.py DEBUG - Code Climate changed in check_eof (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - OCP4: New rule image_pruner_active covers SRG-APP-000454-CTR-001110 and SRG-APP-000454-CTR-001115 (Jakub Hrozek) 2024-11-27 21:46:22.791 logging.py DEBUG - OCP4: CO related rules resolve three SRGs in SI-6 (Jakub Hrozek) 2024-11-27 21:46:22.791 logging.py DEBUG - OCP4: Add a new rule scansettings_have_schedule (Jakub Hrozek) 2024-11-27 21:46:22.791 logging.py DEBUG - OCP4: STIG does not mandate FIO to be installed (Jakub Hrozek) 2024-11-27 21:46:22.791 logging.py DEBUG - SRG-APP-000474-CTR-001180: Is does not meet (Jakub Hrozek) 2024-11-27 21:46:22.791 logging.py DEBUG - OCP4: Check for scansettingbinding, not compliancesuite (Jakub Hrozek) 2024-11-27 21:46:22.791 logging.py DEBUG - Add test scenario vs port number 22 when sshd (teacup-on-rockingchair) 2024-11-27 21:46:22.791 logging.py DEBUG - Use proto list also in criteria definition (teacup-on-rockingchair) 2024-11-27 21:46:22.791 logging.py DEBUG - Use jinja to shorten the OVAL (teacup-on-rockingchair) 2024-11-27 21:46:22.791 logging.py DEBUG - Reorder vars,objects,states for better readability (teacup-on-rockingchair) 2024-11-27 21:46:22.791 logging.py DEBUG - add warning explaining the change (Vojtech Polasek) 2024-11-27 21:46:22.791 logging.py DEBUG - ignore the /proc and its subdirectories when checking / remediating the rule (Vojtech Polasek) 2024-11-27 21:46:22.791 logging.py DEBUG - fix tests errors (svet-se) 2024-11-27 21:46:22.791 logging.py DEBUG - Improve oval indentation (teacup-on-rockingchair) 2024-11-27 21:46:22.791 logging.py DEBUG - Fix XLXS test (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - FIx New EOF Issues (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Fix final file EOF (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Ignore /tests/data/utils/ in check_eof (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Update tests/CMakeLists.txt (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Add test folder to check EOF (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Fix more files without newlines at the end (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Add exclusion for files in the check_eof script (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Add more extensions for check_eof (Matthew Burket) 2024-11-27 21:46:22.791 logging.py DEBUG - Update check_eof based on PR feedback. (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Only run test-check-eof on Python 3 (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Fix type hints in utils/check_eof.py (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Ensure that all files in the repo end with a newline (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Add docs for utils/check_eof.py (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Add test for ensure that files end with a new file (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Add mypy test for utils/check_eof (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Update docs for adding mypy to tests (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - UUpdate mypy tests to use a macro (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Add script to fix new line at end of files (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Update CIS requirement for SSH access limit (Marcus Burghardt) 2024-11-27 21:46:22.792 logging.py DEBUG - sshd_limit_user_access: tests: Add empty variable tests (Eduardo Barretto) 2024-11-27 21:46:22.792 logging.py DEBUG - sshd_limit_user_access: oval: Improve code style (Eduardo Barretto) 2024-11-27 21:46:22.792 logging.py DEBUG - Use versioned expressions for OS checks (Jan Černý) 2024-11-27 21:46:22.792 logging.py DEBUG - OCP4: Don't limit prometheus rules to 500 (Jakub Hrozek) 2024-11-27 21:46:22.792 logging.py DEBUG - Fix CMakelint errors (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Add CMakelint test (Matthew Burket) 2024-11-27 21:46:22.792 logging.py DEBUG - Fix iterator of path_exists items (teacup-on-rockingchair) 2024-11-27 21:46:22.792 logging.py DEBUG - Fix small states boolean value (teacup-on-rockingchair) 2024-11-27 21:46:22.792 logging.py DEBUG - Use alternative approach to get interactive users (teacup-on-rockingchair) 2024-11-27 21:46:22.792 logging.py DEBUG - Make the test for access mode more explicit (teacup-on-rockingchair) 2024-11-27 21:46:22.792 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Fix state id thanks to @marcusburghardt for the help (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Fix rule definitions and warnings to more clear (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Wrap lines in oval check definition (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/bash/shared.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Set rule prodtype sle platforms only (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Drop dead code from bash remediation and some double quote to prevent globbing and word splitting. (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Assign CCE SLE ids for accounts_users_netrc_file_permissions rule (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - Add implementation for accounts_users_netrc_file_permissions (teacup-on-rockingchair) 2024-11-27 21:46:22.844 logging.py DEBUG - The expat package provides xmlwf which is not being used anymore. (Gabriel Becker) 2024-11-27 21:46:22.844 logging.py DEBUG - Add CMake rules to style guide (Matthew Burket) 2024-11-27 21:46:22.844 logging.py DEBUG - Update strategy shall be one of the given values (Matthew Burket) 2024-11-27 21:46:22.844 logging.py DEBUG - Update strategy in remediation to include combination (Matthew Burket) 2024-11-27 21:46:22.844 logging.py DEBUG - Update warning types to include all types of the XCCDF specification (Matthew Burket) 2024-11-27 21:46:22.844 logging.py DEBUG - Update controls docs (Matthew Burket) 2024-11-27 21:46:22.844 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule sshd_limit_user_access (Eduardo Barretto) 2024-11-27 21:46:22.844 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule sshd_limit_user_access (Eduardo Barretto) 2024-11-27 21:46:22.844 logging.py DEBUG - sshd_limit_user_access: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.844 logging.py DEBUG - sshd_limit_user_access: Add OVAL (Eduardo Barretto) 2024-11-27 21:46:22.844 logging.py DEBUG - sshd_limit_user_access: Update rule description (Eduardo Barretto) 2024-11-27 21:46:22.844 logging.py DEBUG - Update shared.xml (Rumen) 2024-11-27 21:46:22.844 logging.py DEBUG - Update in OVAL regexp , updates in tests (rchikov) 2024-11-27 21:46:22.844 logging.py DEBUG - Simplify OVAL for rule aide_build_database (Jan Černý) 2024-11-27 21:46:22.845 logging.py DEBUG - remove trailing spaces (svet-se) 2024-11-27 21:46:22.845 logging.py DEBUG - Revert 06d377c4f5a6b3327959b498d40318c9465f0e17. (Gabriel Becker) 2024-11-27 21:46:22.845 logging.py DEBUG - update rule sles 15-010340 and file_permissions template (svet-se) 2024-11-27 21:46:22.845 logging.py DEBUG - OCPBUGS 7816: Fix remediation for sshd-set-loglevel-info (Vincent Shen) 2024-11-27 21:46:22.845 logging.py DEBUG - ubuntu2204: cis_level2_workstation: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - ubuntu2204: cis_level2_server: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - ubuntu2004: cis_level2_workstation: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - ubuntu2004: cis_level2_server: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: bash: Add Ubuntu bits (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Add Ubuntu bits to (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - all_apparmor_profiles_enforced: Add SCE check (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - all_apparmor_profiles_enforced: bash: Add Ubuntu bits (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - all_apparmor_profiles_enforced: Add Ubuntu bits to description (Eduardo Barretto) 2024-11-27 21:46:22.845 logging.py DEBUG - Updates in bash and ansible remediation (rchikov) 2024-11-27 21:46:22.845 logging.py DEBUG - Test to trigger automatus. (Gabriel Becker) 2024-11-27 21:46:22.845 logging.py DEBUG - Add --no-remove-machine-only to runs of AutoMatus in gating. (Gabriel Becker) 2024-11-27 21:46:22.845 logging.py DEBUG - Add option to keep machine platforms in test_rule_in_container.sh. (Gabriel Becker) 2024-11-27 21:46:22.845 logging.py DEBUG - Add OVAL check for nftables_ensure_default_deny_policy rule (teacup-on-rockingchair) 2024-11-27 21:46:22.845 logging.py DEBUG - Add nftables_ensure_default_deny_policy to CIS SLE15 control (teacup-on-rockingchair) 2024-11-27 21:46:22.845 logging.py DEBUG - Add rule definition for nftables default deny policy (teacup-on-rockingchair) 2024-11-27 21:46:22.845 logging.py DEBUG - SRG-APP-000456-CTR-001130 is not applicable (Jakub Hrozek) 2024-11-27 21:46:22.845 logging.py DEBUG - SRG-APP-000447-CTR-001100: This control is inherently met (Jakub Hrozek) 2024-11-27 21:46:22.845 logging.py DEBUG - Add mount[var-tmp] platform to mount_option_var_tmp_bind (Matthew Burket) 2024-11-27 21:46:22.845 logging.py DEBUG - No remediation warning for fapolicy_default_deny (Milan Lysonek) 2024-11-27 21:46:22.845 logging.py DEBUG - Revert package version enforcing for xmldiff in CI. (Gabriel Becker) 2024-11-27 21:46:22.845 logging.py DEBUG - Include rule_title in Ansible tasks names (Marcus Burghardt) 2024-11-27 21:46:22.845 logging.py DEBUG - Fix change in Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.845 logging.py DEBUG - Update OL9 stig_gui (Edgar Aguilar) 2024-11-27 21:46:22.845 logging.py DEBUG - Move template platform_mount to use cpe-oval from oval (Matthew Burket) 2024-11-27 21:46:22.845 logging.py DEBUG - Missing wrong_value_2.fail.sh test added (rchikov) 2024-11-27 21:46:22.845 logging.py DEBUG - Optimizations in bash and ansible parts (rchikov) 2024-11-27 21:46:22.845 logging.py DEBUG - Update of ansible part (rchikov) 2024-11-27 21:46:22.845 logging.py DEBUG - templates/mount_option: Switch mount Ansible remediation module's state back to 'mounted' (Evgeny Kolesnikov) 2024-11-27 21:46:22.845 logging.py DEBUG - permissions/partitions: Add mount[] platform to mount_option_tmp* and mount_option_var_tmp* rules (Evgeny Kolesnikov) 2024-11-27 21:46:22.845 logging.py DEBUG - shared/applicability: Replace partition-tmp and partition-var-tmp with a new templated platform mount[] (Evgeny Kolesnikov) 2024-11-27 21:46:22.845 logging.py DEBUG - Revert change in test scenario script (Marcus Burghardt) 2024-11-27 21:46:22.845 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_rules_permanent/ansible/sle15.yml (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Enable SCE check in set_nftables_table for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Enable set_nftables_table rule for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Ensure the passwd package during the tests (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Add support for comma-separated version expressions (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - Enable ensure_root_password_configured for RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Fix change in enable_authselect Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Fix tasks in ansible_sssd_ldap_config (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Fix authselect check task (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Add documentation for the os_linux platform (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - Support versions in the os_linux platform (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - Add a warning to AutoMatus (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - ensure_root_password_configure: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.846 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule ensure_root_password_configured (Eduardo Barretto) 2024-11-27 21:46:22.846 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule ensure_root_password_configured (Eduardo Barretto) 2024-11-27 21:46:22.846 logging.py DEBUG - ensure_root_password_configured: Add OVAL check (Eduardo Barretto) 2024-11-27 21:46:22.846 logging.py DEBUG - Add new rule ensure_root_password_configured (Eduardo Barretto) 2024-11-27 21:46:22.846 logging.py DEBUG - Enable service_nftables_enabled for RHEL7 and RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Enable ensure_shadow_group_empty for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Enable bash remediation for all platforms (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - OCPBUGS-10473: Adds instructions to several OCP rules (Jakub Hrozek) 2024-11-27 21:46:22.846 logging.py DEBUG - Mitigate xmldiff package upgrade problem. (Gabriel Becker) 2024-11-27 21:46:22.846 logging.py DEBUG - Import default sysctl file from constants.py (teacup-on-rockingchair) 2024-11-27 21:46:22.846 logging.py DEBUG - Update rule description about block devices (Marcus Burghardt) 2024-11-27 21:46:22.846 logging.py DEBUG - Extend unit test data by a CPE OVAL component (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - Add a simple unit test for the XMLContent class (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - Add RHEL platforms to rsyslog_logging_configured (Matthew Burket) 2024-11-27 21:46:22.846 logging.py DEBUG - ensure_shadow_group_empty: oval: Improve criteria comment (Eduardo Barretto) 2024-11-27 21:46:22.846 logging.py DEBUG - ensure_shadow_group_empty: bash: Remove non-remediation line (Eduardo Barretto) 2024-11-27 21:46:22.846 logging.py DEBUG - Ensure /etc/cron.daily exists (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - Fix data stream component parsing (Jan Černý) 2024-11-27 21:46:22.846 logging.py DEBUG - Update documentation on sysctl template (teacup-on-rockingchair) 2024-11-27 21:46:22.846 logging.py DEBUG - Add sysctl_remediate_drop_in_file to ansible fix (teacup-on-rockingchair) 2024-11-27 21:46:22.846 logging.py DEBUG - Use sysctl_remediate_drop_in_file property (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Use jinja2 filter replace instead of bash (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Simplify a bit the rules (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Update OL9 STIG profile (Edgar Aguilar) 2024-11-27 21:46:22.847 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_avahi_removed (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_avahi_removed (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - package_avahi_removed: Add ubuntu prodtypes, cis references and pkgname (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ensure_shadow_group_empty: tests: Add test for no_shadow_group and (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ensure_shadow_group_empty: oval: Change logic in case of no shadow group (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ubuntu2204: Move from approved_macs to strong_macs (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ubuntu2204: Move from approved_ciphers to strong_ciphers (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - Update ssg/constants.py (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Improve wording in OVAL comments (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Increase regular expression flexibility (Jan Černý) 2024-11-27 21:46:22.847 logging.py DEBUG - Remove check of the "new" AIDE database (Jan Černý) 2024-11-27 21:46:22.847 logging.py DEBUG - Remove confused test scenario (Jan Černý) 2024-11-27 21:46:22.847 logging.py DEBUG - revert cce changes (svet-se) 2024-11-27 21:46:22.847 logging.py DEBUG - OCP4 STIG: Consolidate duplicate rules for SRG-APP-000429-CTR-001060, add policy file (Jakub Hrozek) 2024-11-27 21:46:22.847 logging.py DEBUG - Drop state_tcp/udp_listening_inet_ports filter (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Enable ip6tables_rules_for_open_ports for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Enable iptables_rules_for_open_ports for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Update RHEL7 CIS controlfile for iptables policies (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Enable iptables and ip6tables rules for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Fix reference id to pcidss4 as intended (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Add missing rules to PCIDSS-v4 (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Add to pcidss4 profile ntp and timesyncd rules (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Drop requirement id from title string (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Drop Req prefix from pcidss4 reference ids (teacup-on-rockingchair) 2024-11-27 21:46:22.847 logging.py DEBUG - Update CIS control files for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Enable has_nonlocal_mta rule for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Corrections in bash parts (rchikov) 2024-11-27 21:46:22.847 logging.py DEBUG - ensure_shadow_group_empty: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - Introduce option to var_user_initialization_files_regex (Federico Ramirez) 2024-11-27 21:46:22.847 logging.py DEBUG - Test scenarios for dot_no_world_writable_programs (Federico Ramirez) 2024-11-27 21:46:22.847 logging.py DEBUG - Update dot_no_world_writable_programs OVAL (Federico Ramirez) 2024-11-27 21:46:22.847 logging.py DEBUG - Update var_user_initialization_files_regex.var (Federico Ramirez) 2024-11-27 21:46:22.847 logging.py DEBUG - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - Enable service_nftables_disabled for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.847 logging.py DEBUG - var_pam_wheel_group_for_su: Fix title (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - Some additional corrections (rchikov) 2024-11-27 21:46:22.847 logging.py DEBUG - has_nonlocal_mta: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - Update ANSSI version for OL products (Watson Sato) 2024-11-27 21:46:22.847 logging.py DEBUG - Explicitly set SELinux type (Jan Černý) 2024-11-27 21:46:22.847 logging.py DEBUG - Update in bash part (rchikov) 2024-11-27 21:46:22.847 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/var_nftables_base_chain_priorities.var (Rumen) 2024-11-27 21:46:22.847 logging.py DEBUG - Small correction (rchikov) 2024-11-27 21:46:22.847 logging.py DEBUG - Small corrections (rchikov) 2024-11-27 21:46:22.847 logging.py DEBUG - Update CTF to its new home in the ComplianceAsCode org (Matthew Burket) 2024-11-27 21:46:22.847 logging.py DEBUG - ensure_pam_wheel_group_empty: bash: Fix bash shellcheck (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - use_pam_wheel_for_su: Remove ubuntu prodtypes and references (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ubuntu2004: cis_level1_server: Add pam wheel rules (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ubuntu2204: cis_level1_server: Add pam wheel rules (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ensure_pam_wheel_group_empty: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.847 logging.py DEBUG - ensure_pam_wheel_group_empty: Add OVAL check (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - ensure_pam_wheel_group_empty: Add bash remediation (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - Add rule ensure_pam_wheel_group_empty (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - use_pam_wheel_group_for_su: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - use_pam_wheel_group_for_su: Add OVAL check (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - use_pam_wheel_group_for_su: Add bash remediation (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - Add rule use_pam_wheel_group_for_su (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - Add variable var_pam_wheel_group_for_su (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - Include test scenarios for RHEL7 and CIS (Marcus Burghardt) 2024-11-27 21:46:22.848 logging.py DEBUG - Set sshd_strong_kex variable in CIS RHEL7 control (Marcus Burghardt) 2024-11-27 21:46:22.848 logging.py DEBUG - Complete 5.3.15 requirement for CIS RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.848 logging.py DEBUG - Remove unused imports (Jan Černý) 2024-11-27 21:46:22.848 logging.py DEBUG - delete rule SLES-15-040280 (svet-se) 2024-11-27 21:46:22.848 logging.py DEBUG - Remove unused variables (Jan Černý) 2024-11-27 21:46:22.848 logging.py DEBUG - ensure_shadow_group_empty: bash: Improve remediation (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - ensure_shadow_group_empty: oval: Improve check (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - Add CPE OVAL to the checklist catalog (Jan Černý) 2024-11-27 21:46:22.848 logging.py DEBUG - OCPBUGS-8347: Disable the check for scheduler's bind-address option, the option was removed from newer kuber versions (Jakub Hrozek) 2024-11-27 21:46:22.848 logging.py DEBUG - Disable logrotate timer in ensure_logrotate_activated tests (Matthew Burket) 2024-11-27 21:46:22.848 logging.py DEBUG - OCP: Disable rules for HyperShift (Vincent Shen) 2024-11-27 21:46:22.848 logging.py DEBUG - ensure_shadow_group_empty: Add OVAL check (Eduardo Barretto) 2024-11-27 21:46:22.848 logging.py DEBUG - Bump version for 0.1.68 (Matthew Burket) 2024-11-27 21:46:22.848 logging.py DEBUG - OCP4 STIG: Cover SRG-APP-000246-CTR-000605 and SRG-APP-000435-CTR-001070 (Jakub Hrozek) 2024-11-27 21:46:22.848 logging.py DEBUG - OCP4 STIG: SRG-APP-000190-CTR-000500 is covered by setting the OAuth client timeout (Jakub Hrozek) 2024-11-27 21:46:22.848 logging.py DEBUG - Remove redundant platforms from partitions/mount_option_* rules (Evgeny Kolesnikov) 2024-11-27 21:46:22.848 logging.py DEBUG - Add check for /etc/fstab entries in mount_option template (Evgeny Kolesnikov) 2024-11-27 21:46:22.848 logging.py DEBUG - SLE improve kernel module disabled rule (teacup-on-rockingchair) 2024-11-27 21:46:22.848 logging.py DEBUG - Use drop in file for sysctl variables for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - fix: ctest: test_assert_reference_unique.py handle pytest v2.7 (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - fix: ctest: skip test_assert_reference_unique.py if not py3 (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - Add missing rules for pcidss v4 control file (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Fix reference key naming (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Drop reference wrongly added during rebase (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Fix rule names (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Extract rules from SLE15 profile to PCI-DSS v4 control file (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Use PCI-DSS v4 control file as base for the profile (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Add support for PCI DSS v4 refernce support (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Add PCI-DSS v4 relevant requirement ids as references (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Fix status from pending to partial where needed (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - Add PCI DSS v4 control (teacup-on-rockingchair) 2024-11-27 21:46:22.849 logging.py DEBUG - fix: ctest: unique-cces: only if PYTHON_VERSION_MAJOR GREATER > 2 (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - bugfix: ctest: only run test-generate_contributors if .git exists (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - fix: ctest: only run respective ssg_controlrefcheck_test tests if product is enabled (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - style: rsyslog_logfiles_attributes_modify/ansible: split long line (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - style: no_user_host_based_files/ansible: drop unnecessary block (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - style: no_host_based_files/ansible: drop unnecessary block (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - style: no_rsh_trust_files/ansible: drop unnecessary block (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - style: ansible: Rule names to start with upcase (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - style: grub2_bootloader_argument_absent: split long result_authselect_present rules (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - fix: grub2_bootloader_argument_absent: simplify result_authselect_present rules (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - bugfix: set_ipv6_loopback_traffic/ansible: when is jinja2 already (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - bugfix: service_pcscd_enabled/ansible: service does not have masked parameter (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - bugfix: usbguard_generate_policy/ansible: service does not have masked parameter (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - bugfix: service_chronyd_or_ntpd_enabled/ansible: service does not have masked parameter (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - bugfix: service_enabled/ansible: service does not have masked parameter (Markus Linnala) 2024-11-27 21:46:22.849 logging.py DEBUG - change: accounts_root_path_dirs_no_write/ansible: it is run as root (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: use_kerberos_security_all_exports/ansible: do not ignore_errors (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: service_chronyd_or_ntpd_enabled: do not ignore_errors (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: ansible: do not use ignore_errors w/ grep (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: ansible_check_authselect_integrity: use rc, not ignore_errors (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: service_disabled/ansible: use failed_when instead of ignore_errors (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - bugfix: enable_authselect/tests/remediable.fail.sh: Allow testing under podman (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: enable_authselect/ansible: use failed_when instead of ignore_errors (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: ansible build_profile_remediations: add and use remove_too_many_blank_lines (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: ansible build_profile_remediations: tidy end of file (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: ansible_playbook_check: shellcheck fixes (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: assert_reference_unique: convert to python (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - bugfix: ansible-lint: ensure ctest jobs can be run parallel (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: yamllint: increase line length to 170 (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: yamllint: require document-start as checked documents have it (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: yamllint: allow consistent indentation (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - change: ansible-lint_config silence non-fixable issues (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: ansible-lint: mark all files as playbooks (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - bugfix: ssg_test_suite: RuleResult __eq__ (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - bugfix: display_login_attempts: bad product comparison against ubuntu (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - OCPBUGS-8358: enable_fips_mode: Make it clear that RHCOS can't be FIPS-enabled post-install (Jakub Hrozek) 2024-11-27 21:46:22.850 logging.py DEBUG - style: dconf_db_up_to_date: use [] when comparing multiple products (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: jinja: use product in when comparing multiple products, not or clause (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: security_patches_up_to_date: avoid product comparison when not needed (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - bugfix: permissions_important_account_files: use in product style when comparing products (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - bugfix: log_rotation: bad ubuntu product names (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - fix: package_xorg-x11-server-common_removed: simplify products (Markus Linnala) 2024-11-27 21:46:22.850 logging.py DEBUG - ubuntu2004: cis_level2_workstation: Add rule package_cups_removed (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - ubuntu2204: cis_level2_workstation: Add rule package_cups_removed (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule has_nonlocal_mta (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule has_nonlocal_mta (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - has_nonlocal_mta: Add OVAL (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - Add rule has_nonlocal_mta (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - postfix_network_listening_disabled: Restart postfix service (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_nfs-kernel-server_removed (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_nfs-kernel-server_removed (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - Add rule package_nfs-kernel-server_removed (Eduardo Barretto) 2024-11-27 21:46:22.850 logging.py DEBUG - RHCOS4: Updated rule for rhel9 based RHCOS (Vincent Shen) 2024-11-27 21:46:22.850 logging.py DEBUG - Update Contributors for v0.1.67 (Matthew Burket) 2024-11-27 21:46:22.850 logging.py DEBUG - Update mailmap for v0.1.67 (Matthew Burket) 2024-11-27 21:46:22.850 logging.py DEBUG - Remove references from rules that not selected (Watson Sato) 2024-11-27 21:46:22.850 logging.py DEBUG - Add references to rules configureing IPv6 stack (Watson Sato) 2024-11-27 21:46:22.850 logging.py DEBUG - Don't disable IPv6 stack, but configure it instead (Watson Sato) 2024-11-27 21:46:22.850 logging.py DEBUG - change ANSSI versions for SLE products (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - update ANSSI version for RHEL products (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - ANSSI control file is no longer draft (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - add enable_authselect rule to anssi control file (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - make location of rule title consistent in the file and with other control files (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - fix typos in the control file (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - add anssi references to rules (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - add missing CCEs to rules used in ANSSI profiles (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - fix duplicate CCE (Vojtech Polasek) 2024-11-27 21:46:22.850 logging.py DEBUG - Set as planned Recommendations that need update (Watson Sato) 2024-11-27 21:46:22.850 logging.py DEBUG - Update various Recommendations (Watson Sato) 2024-11-27 21:46:22.850 logging.py DEBUG - Update R39 - sudo configuration (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Update the hardening level of the recommendations (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Remove eliminated recommendations (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Fix grub2 mds variable and value (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Update analysis of R6 recommendation (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Fix typo on RNG confidence (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Update documentations status to manual (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Update status of requirements (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Update AIDE seal requirement (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Upddate R78 as automated (Watson Sato) 2024-11-27 21:46:22.851 logging.py DEBUG - Update rules for R8 (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update status of a few requirements (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Select audit rules for R76 (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Select rules for kernel compile config (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Select sysctl rules for R12 (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Move hidepid out of selected rules (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update R8 with new rules (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update R1 (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update R9 with new rules (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Select sysctl rule for R13 (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update R14 with sysctl rules (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update R40 with rule for sudo timestamp_tmeout (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update R28 with rule for hidepid=2 (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update status of remaining items (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Set status supported for items we can implement (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Fix requirement levels (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Add CCEs to rules reference in ANSSI (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Add and remove ANSSI references in rules (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - Update ANSSI-BP-028 to DRAFT v2.0 (Watson Sato) 2024-11-27 21:46:22.852 logging.py DEBUG - style: utils: use "not in" (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - style: build-scripts/verify_references.py: use "not in" (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - style: tests/unit/ssg_test_suite/test_matches_platform.py: use "is" to compare to truthy (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - style: utils/add_platform_rule.py: compare None using is (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - fix: tests/unit/ssg-module/test_build_remediations.py: unused variable (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - fix: utils/srg_audit.py: no need to use format string (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - fix: utils/ansible_playbook_to_role.py: simplify platform_version (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - fix: tests: drop unused format params (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix: automatus: help string: rule testing is supported by openscap (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix: utils/ansible_playbook_to_role.py: add missing import UnknownObjectException (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix: ssg/content_diff.py: add missing idref as parameter (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix: ssg/entities/profile_base.py: add missing import CPEDoesNotExist (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix: tests/ssg_test_suite/log.py: mixup with format and sys.stderr (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix: ssg/xml: drop duplicate definition of get_test_action_ref_element (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix: ssg/build_yaml: there is not xccdf v1.2.4, but v1.2 (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix/change: ssg/escape_regex: do not escape "," (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - bugfix/change: ssg etc: improve and use mkdir_p (Markus Linnala) 2024-11-27 21:46:22.852 logging.py DEBUG - Improve the UX of remediation macros (Matej Tyc) 2024-11-27 21:46:22.852 logging.py DEBUG - Improve version sanity check (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Clarify the usage of epoch in the documentation (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add a BATS test for bash_compare_version (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Change macro bash_compare_version (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Remove a local location (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Improve text consistency (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Explain versions caveat in the documentation (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add support for epoch in platform package (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Introduce a macro that is rpm-agnostic (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Recommend to not use package platforms (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Remove release part of the version string (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Support only numeric versions (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Check package release for RPM packages (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Fix quoting problems (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add a simpler example of the bash_pkg_conditional use (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Remove duplicate code (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Remove the dist part of the version from the test (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Split macro bash_compare_version_rpm (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add documentation for package CPE platform (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add a description of algortihm (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Remove dependency on real-world RPM packages (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Improve test names (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add BATS tests for bash_pkg_conditional_rpm macro (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add Ansible statement for package version checking (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Add Bash conditional for package version checking (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Stop raising an exception (Jan Černý) 2024-11-27 21:46:22.852 logging.py DEBUG - Align rhel7 dracut-fips-aesni remediations (Watson Sato) 2024-11-27 21:46:22.853 logging.py DEBUG - Regexp matches multiple lines (nnerdmann) 2024-11-27 21:46:22.853 logging.py DEBUG - fix loops within ansible template for rsyslog_files (Vojtech Polasek) 2024-11-27 21:46:22.853 logging.py DEBUG - Remove package_avahi_removed from RHEL 9 CIS Level 2 (Matthew Burket) 2024-11-27 21:46:22.853 logging.py DEBUG - Remove package_avahi-autoipd_removed from RHEL 9 CIS (Matthew Burket) 2024-11-27 21:46:22.853 logging.py DEBUG - OCP change CatalogSource used to deploy CO (Vincent Shen) 2024-11-27 21:46:22.853 logging.py DEBUG - OCP change CatalogSource used to deploy CO (Vincent Shen) 2024-11-27 21:46:22.853 logging.py DEBUG - change: ssg/build_ovals.py: fail if OVAL definition ID does not match rule ID (Markus Linnala) 2024-11-27 21:46:22.853 logging.py DEBUG - bugfix: sysctl_crypto_fips_enabled: rhcos4: fix definition name to match rule name (Markus Linnala) 2024-11-27 21:46:22.853 logging.py DEBUG - SRG-APP-000414-CTR-001010 is completely manual (Jakub Hrozek) 2024-11-27 21:46:22.854 logging.py DEBUG - ubuntu2204: cis_level1_server: Make timesyncd default ntp service (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - ubuntu2004: cis_level1_server: Add ntp related rules (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - ntp: Add ubuntu2004 platform and fix cis references (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - service_chrony_enabled: Alter platform to package chrony (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - service_ntp_enabled: Add platform package ntp (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - service_timesyncd_enabled: Add platform not package chrony and ntp (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - service_timesyncd_enabled: Add packagename@ubuntu2204 (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - Add url for ism in constants (Matthew Burket) 2024-11-27 21:46:22.854 logging.py DEBUG - OCP optimize rule for hypershift (Vincent Shen) 2024-11-27 21:46:22.854 logging.py DEBUG - OCP4 STIG: SRG-APP-000243-CTR-000595 is covered with manual SCC rules as well (Jakub Hrozek) 2024-11-27 21:46:22.854 logging.py DEBUG - OCP4 STIG: SRG-APP-000386-CTR-000920 is inherently met (Jakub Hrozek) 2024-11-27 21:46:22.854 logging.py DEBUG - OCP4 STIG: SRG-APP-000384-CTR-000915 is covered by CVO (Jakub Hrozek) 2024-11-27 21:46:22.854 logging.py DEBUG - OCP4 STIG: SRG-APP-000383-CTR-000910 is inherently met (Jakub Hrozek) 2024-11-27 21:46:22.854 logging.py DEBUG - OCP4 STIG: SRG-APP-000142-CTR-000330 is implemented via several manual rules (Jakub Hrozek) 2024-11-27 21:46:22.854 logging.py DEBUG - OCP4 STIG: SRG-APP-000141-CTR-000320: Fix typo in attribute (Jakub Hrozek) 2024-11-27 21:46:22.854 logging.py DEBUG - sshd_use_strong_kex: oval: Remove fips check (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule sshd_use_strong_kex (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - sshd_use_strong_kex: oval: Make comments more generic (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - sshd_use_strong_kex: Add ubuntu2204 prodtype and cis reference (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - installed_OS_is_ubuntu*: Improve title and description (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - ubuntu2204: cis_level2_workstation: Fix title and description (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - ubuntu2204: cis_level1_server: Fix typo in rule name (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule all_apparmor_profiles_in_enforce_complain_mode (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule all_apparmor_profiles_in_enforce_complain_mode (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Add SCE check (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: bash: Add ubuntu (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Add ubuntu prodtypes and (Eduardo Barretto) 2024-11-27 21:46:22.854 logging.py DEBUG - sudo_add_use_pty: depend on sudo being installed (Craig Andrews) 2024-11-27 21:46:22.854 logging.py DEBUG - make rule accounts_password_last_change_is_in_past not applicable to containers (Vojtech Polasek) 2024-11-27 21:46:22.854 logging.py DEBUG - Remove VMM reference from unit tests (Matthew Burket) 2024-11-27 21:46:22.854 logging.py DEBUG - Add /dev/shm to CIS Server Level 2 Kickstart on RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.854 logging.py DEBUG - Add /dev/shm to RHEL 9 CIS Workstation Level 1 kickstart (Matthew Burket) 2024-11-27 21:46:22.854 logging.py DEBUG - Add /dev/shm to RHEL 9 CIS Server Level 1 kickstart (Matthew Burket) 2024-11-27 21:46:22.854 logging.py DEBUG - Add /dev/shm to RHEL 9 CIS Server Level 2 kickstart (Matthew Burket) 2024-11-27 21:46:22.854 logging.py DEBUG - Add /dev/shm to RHEL 7 CIS Workstation Level 2 kickstart (Matthew Burket) 2024-11-27 21:46:22.854 logging.py DEBUG - Add /dev/shm to RHEL 7 CIS Workstation Level 1 kickstart (Matthew Burket) 2024-11-27 21:46:22.855 logging.py DEBUG - Add /dev/shm to RHEL 7 CIS Server Level 1 kickstart (Matthew Burket) 2024-11-27 21:46:22.855 logging.py DEBUG - Fix CCE URI (Jan Černý) 2024-11-27 21:46:22.855 logging.py DEBUG - Corrections in the rule.yml (rchikov) 2024-11-27 21:46:22.855 logging.py DEBUG - Remove vsrg reference from rules (Matthew Burket) 2024-11-27 21:46:22.855 logging.py DEBUG - From vmmsrg from documentation and test data (Matthew Burket) 2024-11-27 21:46:22.855 logging.py DEBUG - Remove vmmsrg references from rules (Matthew Burket) 2024-11-27 21:46:22.855 logging.py DEBUG - Corrections in bash, ansible and variables (rchikov) 2024-11-27 21:46:22.855 logging.py DEBUG - Optimize loop through protocol families (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Add tests if no service listens we consider it pass (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_rules_permanent/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Modify oval rule on missing/incorrect config to return fail (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/wrong.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/correct.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/correct.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/common.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.855 logging.py DEBUG - Update ansible in file_permissions_binary_dirs (Edgar Aguilar) 2024-11-27 21:46:22.855 logging.py DEBUG - Add SCE flag to ubuntu2204 gate (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - cmake: Make test-ds-sce run for both ubuntu2004 and ubuntu2204 (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_nftables_table (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_nftables_table (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - set_nftables_table: sce: Add sce auditing script (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - set_nftables_table: bash: Add ubuntu platform (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - set_nftables_table: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule service_nftables_enabled (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule service_nftables_enabled (Eduardo Barretto) 2024-11-27 21:46:22.855 logging.py DEBUG - service_nftables_enabled: Add ubuntu prodtype and cis references (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - Include warning for NM Keyfiles in RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Include RHEL reference for CIS firewalld zone rule (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Update RHEL CIS requirement for privileged commands (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Improve Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Remove systemctl restart command in test scenarios (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Improve OVAL check regarding eligible partitions (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Update bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Review and update test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Ensure perm filter is considered in regex (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Introduce variable for rule regex (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Update the rule description and references (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Improve audit_privileged_commands OVAL readability (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Include Ansible remediation for rsyslog_filecreatemode (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Enable rsyslog_filecreatemode rule for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Small fix in Bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.856 logging.py DEBUG - Use check-fact-ref in platform element (Jan Černý) 2024-11-27 21:46:22.856 logging.py DEBUG - sudo_custom_logfile: depend on sudo being installed (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - coredump_disable_storage: depend on systemd being installed (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - coredump_disable_backtraces: depend on systemd being installed (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - Add srg to account_passwords_pam_faillock_dir (Matthew Burket) 2024-11-27 21:46:22.856 logging.py DEBUG - sudo_require_reauthentication: depend on sudo being installed (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - use_pam_wheel_for_su: depend on pam being installed (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - aide_build_database: ansible: Add ubuntu bits (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule accounts_password_last_change_is_in_past (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule accounts_password_last_change_is_in_past (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - accounts_password_last_change_is_in_past: Add cis@ubuntu references (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule banner_etc_motd (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule banner_etc_motd (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - banner_etc_motd: bash: Add ubuntu platform (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - banner_etc_motd: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - Remove of OVAL part (rchikov) 2024-11-27 21:46:22.856 logging.py DEBUG - New SLE 12/15 rule all_apparmor_profiles_in_enforce_complain_mode which covers CIS recommendation (rchikov) 2024-11-27 21:46:22.856 logging.py DEBUG - Remove OVAL part (rchikov) 2024-11-27 21:46:22.856 logging.py DEBUG - A new rule as a part of CIS profile for SLE 12/15 - all_apparmor_profiles_enforced (rchikov) 2024-11-27 21:46:22.856 logging.py DEBUG - Add package_ftp_removed rule (cortesana) 2024-11-27 21:46:22.856 logging.py DEBUG - vlock_installed: apply only to platform machine (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - package_pam_pwquality_installed: depend on pam being installed (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - accounts_passwords_pam_tally2: depend on pam being installed (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - accounts_passwords_pam_faildelay_delay: depend on pam (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - apparmor: apply only to platform machine (Craig Andrews) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_cyrus-imapd_removed (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_cyrus-imapd_removed (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - package_cyrus-imapd_removed: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_nginx_removed (Eduardo Barretto) 2024-11-27 21:46:22.856 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_nginx_removed (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - package_nginx_removed: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - OCP4 STIG: Fix status of SRG-APP-000360-CTR-000815 (Jakub Hrozek) 2024-11-27 21:46:22.857 logging.py DEBUG - nist_rhcos4: Fix typo in rule name (Jakub Hrozek) 2024-11-27 21:46:22.857 logging.py DEBUG - Add /dev/shm to CIS Workstation Level 2 Kickstart on RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: bash: Improve remediation (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - Add package_dnsmasq_removed rule (cortesana) 2024-11-27 21:46:22.857 logging.py DEBUG - Update pam_pwquality requirements in CIS (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Update CIS RHEL control files regarging nginx (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Introduce rule to remove nginx package (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Introduce rule to remove cyrus-imapd package (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: oval: Improve comments (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: Improve ocil_clause (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: bash: Make it multi_platform_all (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: tests: Remove platform (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: oval: Simplify tests (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_files_permissions: Remove reference cis@ubuntu2004 (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule rsyslog_filecreatemode (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule rsyslog_filecreatemode (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: Add OVAL audit (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - rsyslog_filecreatemode: Add bash remediation (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - Add new rule rsyslog_filecreatemode (Eduardo Barretto) 2024-11-27 21:46:22.857 logging.py DEBUG - SRG-APP-000243-CTR-000600 is completely manual (Jakub Hrozek) 2024-11-27 21:46:22.857 logging.py DEBUG - OCP4 STIG: SRG-APP-000431-CTR-001065 is inherently met (Jakub Hrozek) 2024-11-27 21:46:22.857 logging.py DEBUG - OCP4 STIG: Two SRGs that relate to SC-24 are inherently met (Jakub Hrozek) 2024-11-27 21:46:22.857 logging.py DEBUG - Enable sshd_enable_warning_banner_net for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Fix conditional in bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Introduce Ansible remediation for journal-remote socket (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Enable systemd-journal-remote rule for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Corrections in the rule package_openldap-clients_removed (rchikov) 2024-11-27 21:46:22.857 logging.py DEBUG - Enable rule for RHEL and update CIS controlfiles (Marcus Burghardt) 2024-11-27 21:46:22.857 logging.py DEBUG - Update remediations in alignment to OVAL (Marcus Burghardt) 2024-11-27 21:46:22.858 logging.py DEBUG - Align test scenarios to the OVAL updates (Marcus Burghardt) 2024-11-27 21:46:22.858 logging.py DEBUG - Increase robustness of OVAL check (Marcus Burghardt) 2024-11-27 21:46:22.858 logging.py DEBUG - Small change in rule.yml (rchikov) 2024-11-27 21:46:22.858 logging.py DEBUG - Disable SLE platforms for password_quality-based rules (teacup-on-rockingchair) 2024-11-27 21:46:22.858 logging.py DEBUG - Small corrections in package_dhcp_client_removed (rchikov) 2024-11-27 21:46:22.858 logging.py DEBUG - Changes in rule.yml (rchikov) 2024-11-27 21:46:22.858 logging.py DEBUG - Fix package names for some SUSE packages (teacup-on-rockingchair) 2024-11-27 21:46:22.858 logging.py DEBUG - Add in ANSSI control cracklib_accounts_password_ rules (teacup-on-rockingchair) 2024-11-27 21:46:22.858 logging.py DEBUG - Drop extra pam_pwquality rules we have in CIS SLE controls (teacup-on-rockingchair) 2024-11-27 21:46:22.858 logging.py DEBUG - Fix automatus on Python 3.6 (Matthew Burket) 2024-11-27 21:46:22.858 logging.py DEBUG - OCP4 STIG: SRG-APP-000092-CTR-000165,SRG-APP-000111-CTR-000220 are covered by two existing rules (Jakub Hrozek) 2024-11-27 21:46:22.858 logging.py DEBUG - Complete the 6.2.14 CIS requirement for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Enable no_forward_files rule for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Update requirements for .netrc in RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Adjust fixtext in accounts_password_pam_pwhistory_remember_password_auth (Matthew Burket) 2024-11-27 21:46:22.859 logging.py DEBUG - OCP4 STIG: SRGs related to NIST CM-11 are inherently met (Jakub Hrozek) 2024-11-27 21:46:22.859 logging.py DEBUG - OCP4 STIG: SRG-APP-000039-CTR-000110 is resolved by project_config_and_template_network_policy (Jakub Hrozek) 2024-11-27 21:46:22.859 logging.py DEBUG - OCP4: Add a new rule project_config_and_template_network_policy (Jakub Hrozek) 2024-11-27 21:46:22.859 logging.py DEBUG - socket_systemd-journal-remote_disabled: bash: Remove package install (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - socket_systemd-journal-remote_disabled: Fix prodtype position (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - Update references for no_empty_passwords rule (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Enable no_empty_passwords_etc_shadow rule for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Small corrections (rchikov) 2024-11-27 21:46:22.859 logging.py DEBUG - Resolve issues found in review of #10185 (Matthew Burket) 2024-11-27 21:46:22.859 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:22.859 logging.py DEBUG - Correction in rule package_openldap-servers_removed (rchikov) 2024-11-27 21:46:22.859 logging.py DEBUG - socket_systemd-journal-remote_disabled: bash: Move away from bash macro (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - socket_systemd-journal-remote_disabled: Add prodtype and alter ocil and (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - macros: fixtext: Add fixtext_socket_disabled macro (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - socket_systemd-journal-remote_disabled: Add tests (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - macros: bash: reset-failed services only if they are in failed state (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - macros: fixtext: Fix indentation or build fails (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - Rename rule to socket_systemd-journal-remote_disabled (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - service_systemd-journal-remote_disabled: Add OVAL (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - service_systemd-journal-remote_disabled: Add bash remediation (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - service_systemd-journal-remote_disabled: Remove template (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - service_systemd-journal-remote_disabled: Fix fixtext field (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - service_systemd-journal-remote_disabled: Improve Note (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule service_systemd-journal-remote_disabled (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - Add rule service_systemd-journal-remote_disabled (Eduardo Barretto) 2024-11-27 21:46:22.859 logging.py DEBUG - Update password hashing algorithm CIS requirement (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - New rule package_dhcp_client_removed (rchikov) 2024-11-27 21:46:22.859 logging.py DEBUG - Update docs/manual/developer/01_introduction.md (Matthew Burket) 2024-11-27 21:46:22.859 logging.py DEBUG - Update CIS requirement for RHEL products (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Improve test scenatio scripts (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Update remediation to ignore users without password (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Increase robustness of OVAL check (Marcus Burghardt) 2024-11-27 21:46:22.859 logging.py DEBUG - Enable accounts_set_post_pw_existing rule for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.941 logging.py DEBUG - Replacement of > with -gt in if statements (rchikov) 2024-11-27 21:46:22.941 logging.py DEBUG - Changes in bash remediation for accounts_password_set_max_life_existing and accounts_password_set_min_life_existing (rchikov) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP: Optimize HyperShift Support (Vincent Shen) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP4 fix kubelet_enable_protect_kernel_defaults (Vincent Shen) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP4: New rule: container_security_operator_exists covers SRG-APP-000516-CTR-001335, remove all the other references to this control (Jakub Hrozek) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP4 STIG: Remove references to SRG-APP-000516-CTR-001330, the rule is inherently met (Jakub Hrozek) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP4 STIG: SRG-APP-000516-CTR-000790: Add mitigation and status justification to a Does Not Meet control (Jakub Hrozek) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP4 STIG: Add status justification and artifact description to two rules covering IA-11 (Jakub Hrozek) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP4 STIG: Add status justification to two SRGs related to the IA-5 control family (Jakub Hrozek) 2024-11-27 21:46:22.941 logging.py DEBUG - Rule description was changed (rchikov) 2024-11-27 21:46:22.941 logging.py DEBUG - OCP4 STIG: Add status justification to SRG-APP-000178-CTR-000470, covering IA-6 (Jakub Hrozek) 2024-11-27 21:46:22.941 logging.py DEBUG - set_ufw_loopback_Traffica: Add Ubuntu prodtype (Eduardo Barretto) 2024-11-27 21:46:22.941 logging.py DEBUG - Assignment of SLE 12/15 CCE codes for rule security_patches_up_to_date (rchikov) 2024-11-27 21:46:22.941 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_ufw_default_rule (Eduardo Barretto) 2024-11-27 21:46:22.941 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_ufw_default_rule (Eduardo Barretto) 2024-11-27 21:46:22.941 logging.py DEBUG - set_ufw_default_rule: Add sce check (Eduardo Barretto) 2024-11-27 21:46:22.941 logging.py DEBUG - Add new rule set_ufw_default_rule (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_ufw_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_ufw_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - set_ufw_loopback_traffic: Add sce check (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - set_ufw_loopback_traffic: Add bash (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - Add new rule set_ufw_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule ufw_rules_for_open_ports (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ufw_rules_for_open_ports: Add sce check (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - Add new rule ufw_rules_for_open_ports (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rules iptables_rules_for_open_ports (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ip6tables_rules_for_open_ports: Add sce check (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - Add new rule ip6tables_rules_for_open_ports (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - iptables_rules_for_open_ports: Add sce check (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - Add new rule iptables_rules_for_open_ports (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - Removal of $ from some parts in rule.yml (rchikov) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_password_hashing_algorithm_logindefs (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - set_password_hashing_algorithm_logindefs: bash: Add ubuntu platform (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - set_password_hashing_algorithm_logindefs: Adjust description to get (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - set_password_hashing_algorithm_logindefs: Add ubuntu2204 prodtype and (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - var_password_hashing_algorithm: Add yescrypt option (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - OCP: Add OCP 4.13 support for applicable rules (Vincent Shen) 2024-11-27 21:46:22.942 logging.py DEBUG - package_iptables-persistent_removed: Fix typo in package name (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - wireless_disable_interfaces: Add ubuntu specific bash (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: product: Fix oval feed name and add NetworkManager to (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - New tests added (rchikov) 2024-11-27 21:46:22.942 logging.py DEBUG - Corrections in rule.yml (rchikov) 2024-11-27 21:46:22.942 logging.py DEBUG - Small corrections in bash and ansible code (rchikov) 2024-11-27 21:46:22.942 logging.py DEBUG - OCP4 STIG: The majority of controls related to CM-5 are inherently met (Jakub Hrozek) 2024-11-27 21:46:22.942 logging.py DEBUG - OCP4 STIG: SRG-APP-000131-CTR-000285 is configurable with reject_unsigned_images_by_default (Jakub Hrozek) 2024-11-27 21:46:22.942 logging.py DEBUG - Replace login_defs platform by package platform (Jan Černý) 2024-11-27 21:46:22.942 logging.py DEBUG - Increase the robustness of OVAL check (Marcus Burghardt) 2024-11-27 21:46:22.942 logging.py DEBUG - Fix in USBGuard rules' platform (cortesana) 2024-11-27 21:46:22.942 logging.py DEBUG - Disable FIPS-related rule group for 'osbuild' platform (Evgeny Kolesnikov) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule service_chronyd_enabled (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule service_chronyd_enabled (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - service_chronyd_or_ntpd_enabled: Remove Ubuntu cis references (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - service_chronyd_enabled: Add Ubuntu cis references (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule rsyslog_nolisten (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - rsyslog_nolisten: Add cis@ubuntu2204 reference (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule permissions_local_var_log (Eduardo Barretto) 2024-11-27 21:46:22.942 logging.py DEBUG - Include test scenario for no password users (Marcus Burghardt) 2024-11-27 21:46:22.942 logging.py DEBUG - Include rule for checking password last change in RHEL (Marcus Burghardt) 2024-11-27 21:46:22.943 logging.py DEBUG - permissions_local_var_log: Add cis@ubuntu2204 reference (Eduardo Barretto) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: Remove audit_profile_set from rules: in controls where it's only related and will be covered by RHCOS checks later (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000380-CTR-000900 is Inherently Met; add justification (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000375-CTR-000870 is Inherently Met; add justification (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000374-CTR-000865 is Inherently Met; add justification (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000181-CTR-000485 is Inherently Met; add justification (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000118-CTR-000240: Add justification to a Does Not Meet control (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000090-CTR-000155: Add justification to a Does Not Meet control (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000121-CTR-000255, SRG-APP-000122-CTR-000260 and RG-APP-000123-CTR-000265 are covered by manual rules (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000089-CTR-000150 and SRG-APP-000101-CTR-000205 are covered by setting the proper audit log (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000069-CTR-000125 is a manual rule (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4: oauth_login_template_set: Add an e2e test (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4 STIG: SRG-APP-000068-CTR-000120: Convert the replies to per-rule policy files (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - OCP4: Add a new rule oauth_provider_selection_set (Jakub Hrozek) 2024-11-27 21:46:22.943 logging.py DEBUG - Corrections in rule (rchikov) 2024-11-27 21:46:22.943 logging.py DEBUG - add cap_system_chroot capability to podman container when running automatus in container mode (Vojtech Polasek) 2024-11-27 21:46:22.943 logging.py DEBUG - Fix broken CI (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - New tests added (rchikov) 2024-11-27 21:46:22.944 logging.py DEBUG - Update CIS RHEL requirements for log files permissions (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - Follow alphabetical order in prodtype clause (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Forgot to update description (sampsone) 2024-11-27 21:46:22.944 logging.py DEBUG - OCP4 STIG: Cover SRG-APP-000359-CTR-000810 and SRG-APP-000360-CTR-000815 (AU-5) (Jakub Hrozek) 2024-11-27 21:46:22.944 logging.py DEBUG - correction in oval - regexp and tests (rchikov) 2024-11-27 21:46:22.944 logging.py DEBUG - Include partition_for_dev_shm in CIS RHEL7 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - OCP4 STIG: SRG-APP-000126-CTR-000275 is covered by FIPS and using TLS for log forwarding (Jakub Hrozek) 2024-11-27 21:46:22.944 logging.py DEBUG - Make sure all CIS SLE 1.10 rules are built (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Remove nonexistent directories from CMake (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - Move CPE OVALs (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - Move remaining applicability checks to shared (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - Build CPE OVAL separately (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - Change language type for OVAL templates (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - Introduce new template language type CPE-OVAL (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - Prevent creating empty element (Jan Černý) 2024-11-27 21:46:22.944 logging.py DEBUG - Drop file added by mistake (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Enable package_gdm_removed for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Add gdm-related rules to CIS controls for sle12 and sle15 (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - OCP4 STIG: Clean up the usage of fips_mode_enabled_on_all_nodes (Jakub Hrozek) 2024-11-27 21:46:22.944 logging.py DEBUG - Fix CIS req ids to be explicitely declared as strings (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Add CIS SLE reference ids in the rule (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Add SLE platform to dconf_gnome_disable_user_list rule (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Update CIS SLE12 reference requirement id (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Set product variable for dconf gdm subdir for SLE products (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - OCP4 STIG: SRG-APP-000290-CTR-000670: Inherently met, add status justification (Jakub Hrozek) 2024-11-27 21:46:22.944 logging.py DEBUG - OCP4 STIG: SRG-APP-000109-CTR-000215 is Does Not Meet despite having a rule (Jakub Hrozek) 2024-11-27 21:46:22.944 logging.py DEBUG - A correction in description (rchikov) 2024-11-27 21:46:22.944 logging.py DEBUG - Remove CIS RHEL references from service_avahi-daemon_disabled (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - Remove api_server_audit_log_maxsize remediation (Lance Bragstad) 2024-11-27 21:46:22.944 logging.py DEBUG - Update CIS RHEL control files for avahi rules (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - Enable avahi related rules to RHEL products (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - OCP4 STIG: Cover SRG-APP-000297-CTR-000705 with a new rule oauth_logout_url_set (Jakub Hrozek) 2024-11-27 21:46:22.944 logging.py DEBUG - A correction in regex in OVAL (rchikov) 2024-11-27 21:46:22.944 logging.py DEBUG - a correction in OVAL part (rchikov) 2024-11-27 21:46:22.944 logging.py DEBUG - postfix_prevent_unrestricted_relay: allow whitespaces and no comma for 'smtpd_client_restrictions' value (Renaud Métrich) 2024-11-27 21:46:22.944 logging.py DEBUG - Update OVAL lines to satisfy the Style Guide (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - Update remediation platform for audit_mac_modification (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - Update RHEL CIS controlfiles for mac_modification (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - Limit the rule to SLE platforms only (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Update linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_logging_configured/rule.yml (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - Use values instead of variables in tests (teacup-on-rockingchair) 2024-11-27 21:46:22.944 logging.py DEBUG - SUSE: fix rule package_dhcp_removed (sampsone) 2024-11-27 21:46:22.944 logging.py DEBUG - RHCOS4: Temporarily disable selinux_confinement_of_daemons to work around kubelet bug (Jakub Hrozek) 2024-11-27 21:46:22.944 logging.py DEBUG - Use integer comparison for api_server_audit_log_maxsize (Lance Bragstad) 2024-11-27 21:46:22.944 logging.py DEBUG - Creates comments informing the dictionary structure (Marcus Burghardt) 2024-11-27 21:46:22.944 logging.py DEBUG - update the Ubuntu products (Thomas Sjögren) 2024-11-27 21:46:22.944 logging.py DEBUG - New SLE 12/15 rule audit_rules_mac_modification_usr_share (rchikov) 2024-11-27 21:46:22.944 logging.py DEBUG - CIS numbers for SLE 12/15 rule audit_rules_login_events_tallylog (rchikov) 2024-11-27 21:46:22.944 logging.py DEBUG - OCP4 fix version dection for OCP (Vincent Shen) 2024-11-27 21:46:22.944 logging.py DEBUG - New SLE 15 rule set_nftables_base_chain (rchikov) 2024-11-27 21:46:22.945 logging.py DEBUG - A coorecting checkig for sudo package (rchikov) 2024-11-27 21:46:22.945 logging.py DEBUG - Introduce commit messages style guidelines (Federico Ramirez) 2024-11-27 21:46:22.945 logging.py DEBUG - In the user guide upgrade to RHEL 9 from RHEL 6 (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Fix typo in dev guide around product removal (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Ensure that the old .adoc files are consistent with each other (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Update no_forward_files to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_umask_interactive_users to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update file_permissions_home_dirs to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_user_dot_group_ownership to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_user_dot_user_ownership to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_user_interactive_home_directory_exists to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_user_interactive_home_directory_defined to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_users_home_files_permissions to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_users_home_files_groupownership to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update accounts_users_home_files_ownership to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update file_permissions_home_directories to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update file_groupownership_home_directories to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Update file_ownership_home_directories to use OVAL macro (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Include macro to create interactive users object (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Fix broken link to statistics page. (Gabriel Becker) 2024-11-27 21:46:22.945 logging.py DEBUG - Fix in sudo_require_reauthentication (rchikov) 2024-11-27 21:46:22.945 logging.py DEBUG - Add deprecation notice to docs/manual/user_guide.adoc (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Convert the user guide to markdown and read the docs (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Update rules for RHEL 9 SIG (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Update test scenarios for accounts_password_last_change_is_in_past (Marcus Burghardt) 2024-11-27 21:46:22.945 logging.py DEBUG - Add implementation for rsyslog_logging_configured rule (teacup-on-rockingchair) 2024-11-27 21:46:22.945 logging.py DEBUG - Update bios_enable_execution_restrictions PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Update harden_sshd_macs_openssh_conf_crypto_policy PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Update rsyslog_nolisten PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.945 logging.py DEBUG - Minor change to grub2_audit_backlog_limit_argument (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update no_shelllogin_for_systemaccounts PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Minor fix in grub2_admin_username PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Adjust MACs for RHEL 9 STIG in SSHD (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Add check text for accounts_password_pam_unix_rounds-* (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Ensure that < and > HTML encoding have a semicolon (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Fix accounts_passwords_pam_faillock_unlock_time PSC content (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update vuldiscussion in ssh_keys_passphrase_protected for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update checktext for accounts_umask_interactive_users in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Add checktext to kernel_module_sctp_disabled for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update harden_sshd_ciphers_openssh_conf_crypto_policy PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update harden_sshd_ciphers_openssh_conf_crypto_policy PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update harden_sshd_ciphers_opensshserver_conf_crypto_policy PSC for RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update ensure_redhat_gpgkey_installed PSC for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Update PSC file_permissions_sshd_private_key for RHEL 9 (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - check -> checktext in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Fix RHEL 9 to full_name in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Add check text to package_audispd-plugins_installed (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Move audit_rules_login_events_faillock to use /var/log/faillock (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Fix fix -> fixtext package_nss-tools_installed (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Clean up sysctl_net_ipv4_icmp_echo_ignore_broadcasts (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Fix up kernel_module_sctp_disabled (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Fix file_groupowner_grub2_cfg to be group owner (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Add PSC content for package_audispd-plugins_installed (Matthew Burket) 2024-11-27 21:46:22.946 logging.py DEBUG - Add PSC content for kernel_module_sctp_disabled (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Add two rules to SRG-OS-000021-GPOS-00005 for the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Always use aide_periodic_cron_checking for the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Add package_nss-tools_installed to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Fix `>` to `>` for audit rules in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update configure_crypto_policy for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Minor fix on configure_openssl_tls_crypto_policy for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Add package_audispd-plugins_installed to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Add accounts_password_pam_unix_rounds_* rules to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Add kernel_module_sctp_disabled to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Add RHEL 9 specific content for installed_OS_is_vendor_supported (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - More update to network_configure_name_resolution for PSC (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Remove extraneous text from grub2_password for PSC (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update dconf_gnome_disable_ctrlaltdel_reboot for poliy specific content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update file_groupowner_grub2_cfg to use group-owner in PSC (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update auditd_audispd_configure_sufficiently_large_partition policy specific content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Fix up accounts_user_interactive_home_directory_defined for policy specifc content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update SSH crypto rules in policy specific content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Clean up security_patches_up_to_date for policy specifc content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update accounts_password_set_min_life_existing to use passwd (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update rules about unauthorized accounts in policy specific content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Fix small errors in account_emergency_expire_date policy specifc content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Fix capitalization in accounts_passwords_pam_faillock_unlock_time for PSC (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update crypto policy for policy specific content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update kernel module disabling product specific content for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Escape < and > in product specific content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Update SSH key permissions for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Remove variables from product specific content (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - RHEL 9 STIG Import Whitespace Changes (Matthew Burket) 2024-11-27 21:46:22.947 logging.py DEBUG - Style rules to use Title Case in Ansible tasks names (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - Update docs/manual/developer/04_style_guide.md (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - Include consideration about explicit parameters (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - Make it easier to indetify ansible-lint is a link (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - Style rule for Ansible Native YAML Syntax (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - Style rules for Ansible booleans values (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - Style rules for Ansible tasks names (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - Style rules for Ansible modules usage (Marcus Burghardt) 2024-11-27 21:46:22.948 logging.py DEBUG - products/alinux3: fix some missing rules in the cis profile. (YiLin.Li) 2024-11-27 21:46:22.948 logging.py DEBUG - Use bash variables properly in tests (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - products/alinux2: fix some missing rules in the cis profile. (YiLin.Li) 2024-11-27 21:46:22.948 logging.py DEBUG - Fix platform specification in the remediation scripts for bash and ansible (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Code style improvements (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - add newlines to files without them (Shane Siebken) 2024-11-27 21:46:22.948 logging.py DEBUG - Update utils/srg_diff.py based on reviewer feedback (Matthew Burket) 2024-11-27 21:46:22.948 logging.py DEBUG - Correction (rchikov) 2024-11-27 21:46:22.948 logging.py DEBUG - Fixes in sysctl template (rchikov) 2024-11-27 21:46:22.948 logging.py DEBUG - align stability tests (Vojtech Polasek) 2024-11-27 21:46:22.948 logging.py DEBUG - remove rule logind_session_timeout from profiles (Vojtech Polasek) 2024-11-27 21:46:22.948 logging.py DEBUG - Add rule to the CIS profile (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Allocate CCE for the nftables_rules_permanent rule (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Update linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml (Jan Černý) 2024-11-27 21:46:22.948 logging.py DEBUG - Add SLE15 based implementation of nftables_rules_permanent rule (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Always clean lines (Matthew Burket) 2024-11-27 21:46:22.948 logging.py DEBUG - Ensure that < and > in utils/srg_diff.py are handled correctly (Matthew Burket) 2024-11-27 21:46:22.948 logging.py DEBUG - Shorten rule title (Jan Černý) 2024-11-27 21:46:22.948 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/all_password_change_time_in_past.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/user_password_change_time_in_future.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Add 1 more CIS SLE reference to remove nftables rule (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - OCP4 STIG: Mark SRG-APP-000560-CTR-001340 with three existing controls (Jakub Hrozek) 2024-11-27 21:46:22.948 logging.py DEBUG - update ubuntu 2004 cis level 1 server (Shane Siebken) 2024-11-27 21:46:22.948 logging.py DEBUG - Move authconfig_config_files_symlinks rule (Federico Ramirez) 2024-11-27 21:46:22.948 logging.py DEBUG - OCP4 STIG: SRG-APP-000342-CTR-000775 is covered by two manual rules (Jakub Hrozek) 2024-11-27 21:46:22.948 logging.py DEBUG - Update installed_OS_is_sle15.xml (rumch-se) 2024-11-27 21:46:22.948 logging.py DEBUG - Fixes of errors (rchikov) 2024-11-27 21:46:22.948 logging.py DEBUG - OCP4 STIG: SRG-APP-000340-CTR-000770 is a manual rule (Jakub Hrozek) 2024-11-27 21:46:22.948 logging.py DEBUG - Small fixes (rchikov) 2024-11-27 21:46:22.948 logging.py DEBUG - Update OCP4 for HyperShift for better user experience (Vincent Shen) 2024-11-27 21:46:22.948 logging.py DEBUG - OCP4 Modify etcd encryption check rule for hypershift (Vincent Shen) 2024-11-27 21:46:22.948 logging.py DEBUG - Rename remediations to ol instead of shared (Edgar Aguilar) 2024-11-27 21:46:22.948 logging.py DEBUG - Add extra line to shadow file to make tests pass (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Revert --stdin passwd option not available on suse (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Make running tests in special container env pass (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Add variable declaration that contains the shadow file output (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Add more descriptive fixtext and warnign for automatic remediation absence (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Fix comment to be more accurate since we are comparing days not accurate timestamps (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/user_password_change_time_in_future.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/user_password_change_time_in_future.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Style fixes (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Fix copy-paste error referencing to another rule state (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Remove from available list the CCE ids for accounts_password_last_change_is_in_past rule (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Rework OVAL rule to check time difference between now and last change date of shadow entry (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Add basic tests for accounts_password_last_change_is_in_past (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - OVAL changes for accounts_password_last_change_is_in_past rule (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Simplify ocil clause in rule (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Add accounts_password_last_change_is_in_past rule to CIS profiles (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Initial implementation for rule checking if last password change is in the past (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Add back osrelease parameter check (teacup-on-rockingchair) 2024-11-27 21:46:22.948 logging.py DEBUG - Sort references in ssh_keys_passphrase_protected (Matthew Burket) 2024-11-27 21:46:22.949 logging.py DEBUG - Move SRG-OS-000067-GPOS-00035 to use ssh_keys_passphrase_protected (Matthew Burket) 2024-11-27 21:46:22.949 logging.py DEBUG - Implementation of proposed corrections (rchikov) 2024-11-27 21:46:22.949 logging.py DEBUG - Use distributed configuration in tests (Jan Černý) 2024-11-27 21:46:22.949 logging.py DEBUG - Update profile stability tests for STIG (Marcus Burghardt) 2024-11-27 21:46:22.949 logging.py DEBUG - Minor update in baseline for STIG stability test (Marcus Burghardt) 2024-11-27 21:46:22.949 logging.py DEBUG - Added support for new SUSE product SLE HPC (rchikov) 2024-11-27 21:46:22.949 logging.py DEBUG - Add a simple unit test for ssg/build_ovals.py (Jan Černý) 2024-11-27 21:46:22.949 logging.py DEBUG - Update warning about pwhistory feature in authselect (Marcus Burghardt) 2024-11-27 21:46:22.949 logging.py DEBUG - Update variable value in SRG-OS-000077-GPOS-00045 (Marcus Burghardt) 2024-11-27 21:46:22.949 logging.py DEBUG - Update variable value for RHEL8 STIG (Marcus Burghardt) 2024-11-27 21:46:22.949 logging.py DEBUG - Update variable value for CIS RHEL8 and RHEL9 (Marcus Burghardt) 2024-11-27 21:46:22.949 logging.py DEBUG - Introduce variable values with two values for RHEL (Marcus Burghardt) 2024-11-27 21:46:22.949 logging.py DEBUG - Add condition if kernel package arch is 64 then instead matching kernel release name (teacup-on-rockingchair) 2024-11-27 21:46:22.949 logging.py DEBUG - Add srg to ssh_keys_passphrase_protected (Matthew Burket) 2024-11-27 21:46:22.949 logging.py DEBUG - Fixes related to SLE 12/15 for the rules set_min/max_life_existing (rchikov) 2024-11-27 21:46:22.949 logging.py DEBUG - Minor change (rchikov) 2024-11-27 21:46:22.949 logging.py DEBUG - Minor updates (rchikov) 2024-11-27 21:46:22.949 logging.py DEBUG - Added a new rule accounts_password_set_warn_age_existing (rchikov) 2024-11-27 21:46:22.949 logging.py DEBUG - Added rule partition_for_dev_shm (rchikov) 2024-11-27 21:46:22.949 logging.py DEBUG - Link sshd_use_strong_kex rule to PCI_DSSv4 2.2.7 requirement (teacup-on-rockingchair) 2024-11-27 21:46:22.949 logging.py DEBUG - Enable SCE integrity checks for RHEL8 (Simon THOBY) 2024-11-27 21:46:22.949 logging.py DEBUG - Simplify definition of xml object for ssh service (Watson Sato) 2024-11-27 21:46:22.949 logging.py DEBUG - fix capitalization of "ol" and "os" (Vojtech Polasek) 2024-11-27 21:46:22.949 logging.py DEBUG - change applicability of rule package_rear_installed (Vojtech Polasek) 2024-11-27 21:46:22.949 logging.py DEBUG - add new platform and OVAL check checking if OL >= 9.0 (Vojtech Polasek) 2024-11-27 21:46:22.949 logging.py DEBUG - add new platform and OVAL check checking if RHEL <= 8.4 (Vojtech Polasek) 2024-11-27 21:46:22.949 logging.py DEBUG - add new platform and OVAL check checking if RHEL >= 9.0 (Vojtech Polasek) 2024-11-27 21:46:22.950 logging.py DEBUG - add OVAL inventory check checking if installed system is OL (Vojtech Polasek) 2024-11-27 21:46:22.950 logging.py DEBUG - Change custom zones check in reaction to OpenSCAP change (Marcus Burghardt) 2024-11-27 21:46:22.950 logging.py DEBUG - Improved formulations (Matěj Týč) 2024-11-27 21:46:22.950 logging.py DEBUG - Add authconfig_config_files_symlinks to RHEL7 stig (Federico Ramirez) 2024-11-27 21:46:22.950 logging.py DEBUG - Add missing remediation warning to authconfig rule (Federico Ramirez) 2024-11-27 21:46:22.950 logging.py DEBUG - Introduce rule authconfig_config_files_symlinks (Federico Ramirez) 2024-11-27 21:46:22.950 logging.py DEBUG - Apply suggestions from code review (Edgar Aguilar) 2024-11-27 21:46:22.950 logging.py DEBUG - Update sebool_secure_mode_insmod OL remediations (Edgar Aguilar) 2024-11-27 21:46:22.951 logging.py DEBUG - add locked user to /etc/shadow (Thomas Sjögren) 2024-11-27 21:46:22.951 logging.py DEBUG - Add a template for reporting misalignment (Matej Tyc) 2024-11-27 21:46:22.951 logging.py DEBUG - Move to Code Climate for PEP 8 (Matthew Burket) 2024-11-27 21:46:22.951 logging.py DEBUG - rename exclusion (Thomas Sjögren) 2024-11-27 21:46:22.951 logging.py DEBUG - add exclude filter (Thomas Sjögren) 2024-11-27 21:46:22.951 logging.py DEBUG - update levels of some rules in RHEL8 CIS (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - Improve rule description in rsyslog_files_permissions (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - Include specific test scenario for 0640 permission (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - Fix typo in test scenario script name (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - Remove unnecessary conditions from runtime in Bash remediation (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - support locked account with hash present (Thomas Sjögren) 2024-11-27 21:46:22.951 logging.py DEBUG - remove the stig policy file (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - remove respective references from the rule (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - remove the rule from RHEL8 STIG profile (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - remove the rule from STIG RHEL9 profile (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/ansible.template (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - Disable rpcbind instead of removing the package (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - remove incorrectly assigned srg from package_aide_installed (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add missing srg to aide_build_database rule (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - Remove l1_workstation from 2.2.4 requirement in RHEL8 (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - apply the platform only in context of RHEL products (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/rule.yml (vojtapolasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add rule to ANSSI profiles (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add rule to RHEL8 RHT-CCP profile (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - update RHEL8 PCI-DSS profile (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add rule to RHEL8 OSPP profile (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add rule to RHEL8 CJIS profile (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - update references of rule logind_session_timeout (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - make rule sshd_idle_timeout applicable on RHEL <= 8.5 (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - apply platforms to logind_session_timeout rule (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add platform checking that RHEL == 9.0 (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add platform which is applicable if RHEL <= 8.5 (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add platform checking that RHEL >= 8.7 (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - add definition checking that installed os is RHEL (Vojtech Polasek) 2024-11-27 21:46:22.951 logging.py DEBUG - Bump version to 0.1.67 (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - Remove check of /var/log/dmesg from OVAL (Matej Tyc) 2024-11-27 21:46:22.951 logging.py DEBUG - Remove command path discovery with which (Marcus Burghardt) 2024-11-27 21:46:22.951 logging.py DEBUG - OCP: Automated apiserver tls checks (Vincent Shen) 2024-11-27 21:46:22.951 logging.py DEBUG - Add comment to sshd bash macro (Edgar Aguilar) 2024-11-27 21:46:22.951 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/var_nftables_table.var (rumch-se) 2024-11-27 21:46:22.951 logging.py DEBUG - OCP4 STIG: routes_protected_by_tls pertains to SRG-APP-000441-CTR-001090 and SRG-APP-000442-CTR-001095, not SRG-APP-000441-CTR-001090 (Jakub Hrozek) 2024-11-27 21:46:22.951 logging.py DEBUG - OCP4 STIG: Remove configure_network_policies and configure_network_policies_namespaces from controls that are not resolved by these rules (Jakub Hrozek) 2024-11-27 21:46:22.951 logging.py DEBUG - OCP4 STIG: SRG-APP-000645-CTR-001410: Fix rules, add artifact_description and status_justification (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: SRG-APP-000142-CTR-000325: Remove spurious rule, add mitigation and status_justification (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: SRG-APP-000141-CTR-000320: Fix rules, add check and fix, fix status (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: SRG-APP-000141-CTR-000315: Add artifact description and justification, remove spurious rule (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: SRG-APP-000038-CTR-000105: Move metadata to the policy file, select the correct rules (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - Update Rawhide before use (Matthew Burket) 2024-11-27 21:46:22.952 logging.py DEBUG - fips_mode_enabled_on_all_nodes: Remove SRG-APP-000014-CTR-000035 from SRG controls since the rule is only related to SRG-APP-000014-CTR-000035 (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - SRG-APP-000014-CTR-000035: Is now automated (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - SRG-APP-000014-CTR-000035: Move the fix and check into policy files (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: Add artifact description to SRG-APP-000033 (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: Add status justification and related_rules to not_applicable rules solved by IDP (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: SRG-APP-00050{3,5,6}: Not applicable rules, solved by IDP (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: IDP related rules only resolve SRG-APP-000023-CTR-000055, the other controls are related (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4 STIG: SRG-APP-000023-CTR-000055: Move metadata to control files (Jakub Hrozek) 2024-11-27 21:46:22.952 logging.py DEBUG - Extend the regex to match log files (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - Update rsyslog_files_permissions rule to use template (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - Test scenarios cleanup for rsyslog_files_permissions (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - Extend rsyslog template to assess and remediate file permissions (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - Extend test scenario scripts to test file permissions (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - Fix Ansible remediation to read multiline include (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - Renamed test scenario scripts in alignment to their contents (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - Minor improvements in OVAL comments and readability (Marcus Burghardt) 2024-11-27 21:46:22.952 logging.py DEBUG - OCP4: Change default values for kubeletconfig garbage collection rules (Vincent Shen) 2024-11-27 21:46:22.953 logging.py DEBUG - Add sub folders of utils to code climate (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Remove count_oval_objects as it broken (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - OCP4: configure_network_policies: fix typo (Jakub Hrozek) 2024-11-27 21:46:22.953 logging.py DEBUG - Two SLE 12/15 rules related to avahi package (rchikov) 2024-11-27 21:46:22.953 logging.py DEBUG - Some corrections (rchikov) 2024-11-27 21:46:22.953 logging.py DEBUG - Some text corrections (rchikov) 2024-11-27 21:46:22.953 logging.py DEBUG - Move 'not osbuild' platform for enable_pam_namespace into the existing platform field (Evgeny Kolesnikov) 2024-11-27 21:46:22.953 logging.py DEBUG - OCP4 STIG: Related rule should not reference SRG-APP-000014-CTR-000040 (Jakub Hrozek) 2024-11-27 21:46:22.953 logging.py DEBUG - OCP4 STIG: Move metadata of SRG-APP-000014-CTR-000040 to rule policy files (Jakub Hrozek) 2024-11-27 21:46:22.953 logging.py DEBUG - OCP4 STIG: SRG-APP-000014-CTR-000040 is now automated (Jakub Hrozek) 2024-11-27 21:46:22.953 logging.py DEBUG - New SLE 15 rule set_nftables_table (rchikov) 2024-11-27 21:46:22.953 logging.py DEBUG - Create the test user/group (teacup-on-rockingchair) 2024-11-27 21:46:22.953 logging.py DEBUG - Fix regex in OVAL, Ansible and Bash remediations (teacup-on-rockingchair) 2024-11-27 21:46:22.953 logging.py DEBUG - Update tests in configure_tmux_lock_keybinding (Edgar Aguilar) 2024-11-27 21:46:22.953 logging.py DEBUG - Update configure_tmux_lock_keybinding (Edgar Aguilar) 2024-11-27 21:46:22.953 logging.py DEBUG - Update bashrc tmux rule in OL8 (Edgar Aguilar) 2024-11-27 21:46:22.953 logging.py DEBUG - Add missing-remediation warning (Federico Ramirez) 2024-11-27 21:46:22.953 logging.py DEBUG - Add tests to sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2024-11-27 21:46:22.953 logging.py DEBUG - Add docs for utils/controlrefcheck.py (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Adjust utils/controlrefcheck.py based on reviewer comments (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Remove duplicate rule_object check in utils/controlrefcheck.py (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Clean up utils/controlrefcheck.py (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - In controlrefcheck don't error on nonexistent rules (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Fix RHEL 8 issues for controlrefchecker (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Fix issues for controlrefchecker for RHEL 7 (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Fix the issues for the RHEL 9 controlrefchecker (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Add controlrefchecker to CTest (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - Add utils/controlrefcheck.py (Matthew Burket) 2024-11-27 21:46:22.953 logging.py DEBUG - packages_iptables-persistent_removed: Fix typo (Eduardo Barretto) 2024-11-27 21:46:22.953 logging.py DEBUG - Add tests to cover cases where RainerScript is used to define target log file (teacup-on-rockingchair) 2024-11-27 21:46:22.953 logging.py DEBUG - Introduce rule sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2024-11-27 21:46:22.953 logging.py DEBUG - Update sshd_disable_compression applicability (Federico Ramirez) 2024-11-27 21:46:22.953 logging.py DEBUG - Introduce CPE for OL7 older than 7.4 (Federico Ramirez) 2024-11-27 21:46:22.953 logging.py DEBUG - Update audit failure mode for OL7 (Federico Ramirez) 2024-11-27 21:46:22.953 logging.py DEBUG - Add sysctl_kernel_dmesg_restric rule to OL7 stig (Federico Ramirez) 2024-11-27 21:46:22.953 logging.py DEBUG - OL7 STIG v2r10 update (Federico Ramirez) 2024-11-27 21:46:22.953 logging.py DEBUG - Bump version of OL8 STIG to V1R5 (Edgar Aguilar) 2024-11-27 21:46:22.953 logging.py DEBUG - assign ntp_configure_restrictions to SLE12 (Christian Hagenest) 2024-11-27 21:46:22.953 logging.py DEBUG - service_iptables_enabled: Remove Ubuntu CIS references (Eduardo Barretto) 2024-11-27 21:46:22.953 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_iptables-persistent_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_iptables-persistent_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Add rule packages_iptables-persistent_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2004: cis_level1_server: Add set_ipv6_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_ipv6_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - set_ipv6_loopback_traffic: remediation: Add Ubuntu platform (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - set_ipv6_loopback_traffic: Add Ubuntu CIS references (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add set_loopback_traffic (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - set_loopback_traffic: remediation: Add ubuntu platform (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - set_loopback_traffic: Add Ubuntu CIS references and adjust description (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add set_ip6tables_default_rule (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add set_iptables_default_rule (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_iptables-persistent_installed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_iptables-persistent_installed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Add rule package_iptables-persistent_installed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_ufw_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_ufw_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Add rule package_ufw_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Add a CTest test for shorthand_to_oval.py (Jan Černý) 2024-11-27 21:46:22.954 logging.py DEBUG - Drop a test temporary file committed by mistake (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - nist_ocp4: Fix rule references (Jakub Hrozek) 2024-11-27 21:46:22.954 logging.py DEBUG - nist_ocp4: Fix nonexistent rule name (Jakub Hrozek) 2024-11-27 21:46:22.954 logging.py DEBUG - Inhibit ShellCheck warning for osbuild platform (Evgeny Kolesnikov) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_root_IncludeConfig_is_other.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/oval.template (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/is_root.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/is_other.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_multiline_is_root.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_root_IncludeConfig_is_root.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_root.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_other.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/IncludeConfig_is_root.pass.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/IncludeConfig_is_other.fail.sh (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Minor change (rchikov) 2024-11-27 21:46:22.954 logging.py DEBUG - Small syntax corrections (rchikov) 2024-11-27 21:46:22.954 logging.py DEBUG - Fix shell remediation argument passing (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Add 'not osbuild' platform to polyinstantiated and selinux-boolean rules (Evgeny Kolesnikov) 2024-11-27 21:46:22.954 logging.py DEBUG - OCP4 STIG: Add status justification to SRG-APP-000033 (Jakub Hrozek) 2024-11-27 21:46:22.954 logging.py DEBUG - Update contributors list for v0.1.66 release (Marcus Burghardt) 2024-11-27 21:46:22.954 logging.py DEBUG - New SLE 15 rule set_nftables_new_connections (rchikov) 2024-11-27 21:46:22.954 logging.py DEBUG - accounts_passwords_pam_tally2: ansible: Move to (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - RHEL-08-010100: create a new rule ssh_keys_passphrase_protected (THOBY Simon) 2024-11-27 21:46:22.954 logging.py DEBUG - New SLE 15 rule service_nftables_enabled (rchikov) 2024-11-27 21:46:22.954 logging.py DEBUG - update rule title (Vojtech Polasek) 2024-11-27 21:46:22.954 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_bashrc_tmux/rule.yml (vojtapolasek) 2024-11-27 21:46:22.954 logging.py DEBUG - move two rules to higher level in cis_rhel8 (Vojtech Polasek) 2024-11-27 21:46:22.954 logging.py DEBUG - New SLE 15 rule ensure_iptables_are_flushed (rchikov) 2024-11-27 21:46:22.954 logging.py DEBUG - Remove set_iptables_default_rule CCEs from available lists (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - Add cce id for SLES platform to set_iptables_default_rule (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Add rule package_systemd-journal-remote_installed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level2_server: Add rule audit_sudo_log_events (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - audit_sudo_log_events: Add cis@ubuntu2204 reference (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level2: Add rule audit_rules_suid_privilege_function (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - audit_rules_suid_privilege_function: Update cis@ubuntu2204 reference (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2004: cis_level2_server: Add missing variables (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level2_server: Add missing variables (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Remove ubunt2204 prodtype from rules not being used (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Refactor and promote function to a class (Jan Černý) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add service_nftables_disabled (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2004: cis_level1_server: Add service_nftables_disabled (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - service_nftables_disabled: Add ubuntu platform and CIS references (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Enable bash&ansible remediations for all platforms (teacup-on-rockingchair) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2204: cis_level1_server: Add packages_nftables_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - ubuntu2004: cis_level1_server: Add packages_nftables_removed (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - package_nftables_removed: Add ubuntu platforms and CIS references (Eduardo Barretto) 2024-11-27 21:46:22.954 logging.py DEBUG - Change sshd_disable_compression applicability (Jan Černý) 2024-11-27 21:46:22.955 logging.py DEBUG - swap rules in RHEL 8 STIG profile (Vojtech Polasek) 2024-11-27 21:46:22.955 logging.py DEBUG - add tests (Vojtech Polasek) 2024-11-27 21:46:22.955 logging.py DEBUG - add Ansible remediation (Vojtech Polasek) 2024-11-27 21:46:22.955 logging.py DEBUG - add Bash remediation (Vojtech Polasek) 2024-11-27 21:46:22.955 logging.py DEBUG - add OVAL check (Vojtech Polasek) 2024-11-27 21:46:22.955 logging.py DEBUG - create new rule (Vojtech Polasek) 2024-11-27 21:46:22.955 logging.py DEBUG - Make benchmark inclusion optional (Jan Černý) 2024-11-27 21:46:22.955 logging.py DEBUG - Split code into 2 functions (Jan Černý) 2024-11-27 21:46:22.955 logging.py DEBUG - Include RHEL7 and RHEL9 in sysctl_net_ipv4_conf_all_forwarding (Marcus Burghardt) 2024-11-27 21:46:22.955 logging.py DEBUG - OCP4 PCI-DSS: Fix non-existent rule name (Jakub Hrozek) 2024-11-27 21:46:22.955 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_algorithm_systemauth/rule.yml (Marcus Burghardt) 2024-11-27 21:46:22.955 logging.py DEBUG - Remove rule for SSHD Compresion from RHEL8 STIG (Watson Sato) 2024-11-27 21:46:22.955 logging.py DEBUG - Update linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml (Marcus Burghardt) 2024-11-27 21:46:22.955 logging.py DEBUG - Drop parameter variable use template values instead (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Wrap lines in oval template and fixed a bug with matching aribitary file paths not only log targets (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Add implementation for rsyslog_logging_configured rule (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/oval.template (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Set the attribute values as part of the template (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Set the attribute values as part of the template (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Simplify OVAL template naming ids and references (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Move tests and oval from rsyslog_files_groupownership and rsyslog_files_ownership to rsyslog_logfiles_attributes_modify teamplate (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Drop extra empty line (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Fix ansible template tasks naming (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Use complete name of ansible modules (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Fix unbalanced jinja brackets and identation (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Adjust bash template to produce scripts without shellcheck warnings (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Add missing newline at the end of the file (teacup-on-rockingchair) 2024-11-27 21:46:22.955 logging.py DEBUG - Replace shell find command with ansible find module (teacup-on-rockingchair) 2024-11-27 21:46:22.956 logging.py DEBUG - Add rsyskig owner and group variables to sle12 profiles (teacup-on-rockingchair) 2024-11-27 21:46:22.956 logging.py DEBUG - Rework rsyslog_logfiles_attributes_modify template to use more generic approach, not depending on low-level commands (teacup-on-rockingchair) 2024-11-27 21:46:22.956 logging.py DEBUG - Use set_fact to aggregate outputs of two tasks (teacup-on-rockingchair) 2024-11-27 21:46:22.956 logging.py DEBUG - Add double quotes to prevent globbing and word splitting (teacup-on-rockingchair) 2024-11-27 21:46:22.956 logging.py DEBUG - Add Check for RainerScript action log format in rsyslog configuration - check for RainerScript format, which might be also multiline so grep regex is a bit curly - extract possibly multiline action omfile expressions - extract and match only "logfile" expression (teacup-on-rockingchair) 2024-11-27 21:46:22.957 logging.py DEBUG - Add remediations for rsyslog_files_groupownership and rsyslog_files_ownership (teacup-on-rockingchair) 2024-11-27 21:46:22.957 logging.py DEBUG - Add template to set parameters of log files from rsyslog (teacup-on-rockingchair) 2024-11-27 21:46:22.957 logging.py DEBUG - Remove sshd_disable_compression from OL8 & RHEL8 (Edgar Aguilar) 2024-11-27 21:46:22.957 logging.py DEBUG - Remove rules related to UEFI path (Marcus Burghardt) 2024-11-27 21:46:22.957 logging.py DEBUG - Remove aide_use_fips_hashes from controlfile (Marcus Burghardt) 2024-11-27 21:46:22.957 logging.py DEBUG - Included missing references (Marcus Burghardt) 2024-11-27 21:46:22.957 logging.py DEBUG - Add aide_build_database to STIG in OL and RHEL (Edgar Aguilar) 2024-11-27 21:46:22.957 logging.py DEBUG - Update policy for ssh host key permissions (Edgar Aguilar) 2024-11-27 21:46:22.957 logging.py DEBUG - Update reference for profile stability tests (Marcus Burghardt) 2024-11-27 21:46:22.957 logging.py DEBUG - Include rule for new controlfile in CODEOWNERS (Marcus Burghardt) 2024-11-27 21:46:22.957 logging.py DEBUG - New rule for SLE 15 set_firewalld_appropriate_zone (rchikov) 2024-11-27 21:46:22.957 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.040 logging.py DEBUG - New rule for SLE 15 unnecessary_firewalld_services_ports_disabled (rchikov) 2024-11-27 21:46:23.040 logging.py DEBUG - Update RHEL9 CIS profiles (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Reviewed all pending requirements (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - A new SLE 12/15 rule ensure_package_repositories_are_configured/ (rchikov) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in System Maintainance related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in AAA related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - New rule SLE 12/15 ensure_GPG_keys_are_configured (rchikov) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in Logging related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in Network Config related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in client services related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Refactor function expand_shorthand (Jan Černý) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in Special Services related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in NTP related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include 4 rules in the stig profile for RHEL8 (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Update stigid for RHEL8 in accounts_passwords_pam_faillock_deny (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include STIG for RHEL in accounts_passwords_pam_faillock_silent (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in GDM related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in banners related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in SELinux related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in process hardening related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in fs integrity related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in software updates related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in bootloader related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Include CIS RHEL9 reference in partition related rules (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Add osbuild platform (Evgeny Kolesnikov) 2024-11-27 21:46:23.040 logging.py DEBUG - Using the Ansible shell actions is needed in package_prelink_remove (Matthew Burket) 2024-11-27 21:46:23.040 logging.py DEBUG - Document utils/shorthand_to_oval.py (Jan Černý) 2024-11-27 21:46:23.040 logging.py DEBUG - Introduce utils/shorthand_to_oval.py (Jan Černý) 2024-11-27 21:46:23.040 logging.py DEBUG - Move method and promote it (Jan Černý) 2024-11-27 21:46:23.040 logging.py DEBUG - New CIS RHEL9 control file (Marcus Burghardt) 2024-11-27 21:46:23.040 logging.py DEBUG - Update rule selections in RHEL 7 STIG (Jan Černý) 2024-11-27 21:46:23.040 logging.py DEBUG - cce-ids for sysctl_net...log_martians (Christian Hagenest) 2024-11-27 21:46:23.040 logging.py DEBUG - Correct variable description (Jan Černý) 2024-11-27 21:46:23.040 logging.py DEBUG - Use only single textfilecontent54_state (Jan Černý) 2024-11-27 21:46:23.040 logging.py DEBUG - Update RHEL7 STIG to V3R10 (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R10 (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R10 (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Update RHEL8 STIG to V1R9 (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R8 (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R9 (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Select rule in RHEL8 STIG profile (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Add rule for tmux lock-session keybinding (Watson Sato) 2024-11-27 21:46:23.040 logging.py DEBUG - Change hardocded string with variable of strong kex algorithms (teacup-on-rockingchair) 2024-11-27 21:46:23.040 logging.py DEBUG - Add account_emergency_expire_date to OL7 stig (Federico Ramirez) 2024-11-27 21:46:23.040 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_prelink_remove to profile (Eduardo Barretto) 2024-11-27 21:46:23.040 logging.py DEBUG - ubuntu2204: cis_level1_server Add package_prelink_removed to profile (Eduardo Barretto) 2024-11-27 21:46:23.040 logging.py DEBUG - package_prelink_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2024-11-27 21:46:23.040 logging.py DEBUG - Remove ubuntu2204 and ubuntu2004 from disable_prelink (Eduardo Barretto) 2024-11-27 21:46:23.040 logging.py DEBUG - fix bash remediation (Vojtech Polasek) 2024-11-27 21:46:23.040 logging.py DEBUG - add rule to profile (Vojtech Polasek) 2024-11-27 21:46:23.040 logging.py DEBUG - add Ansible remediation (Vojtech Polasek) 2024-11-27 21:46:23.041 logging.py DEBUG - add OVAL check (Vojtech Polasek) 2024-11-27 21:46:23.041 logging.py DEBUG - add Bash remediation (Vojtech Polasek) 2024-11-27 21:46:23.041 logging.py DEBUG - add tests (Vojtech Polasek) 2024-11-27 21:46:23.041 logging.py DEBUG - add new rule definition (Vojtech Polasek) 2024-11-27 21:46:23.041 logging.py DEBUG - Parametrize rule "audit_rules_system_shutdown" (Jan Černý) 2024-11-27 21:46:23.041 logging.py DEBUG - Added 2 rules for SLE 15 related to nftables (rchikov) 2024-11-27 21:46:23.041 logging.py DEBUG - Use variable instead of hardcoded list of algorithms (teacup-on-rockingchair) 2024-11-27 21:46:23.041 logging.py DEBUG - Redo DisaStatus.from_string method (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - Move SRG Export data to a new file (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - Add CTests for all formats of the SRG Export script (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - Rename export Python files for SRG Export (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - Move convert_srg_export_* files to its own module (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - create_srg_export.py: Map NOT_APPLICABLE (Jakub Hrozek) 2024-11-27 21:46:23.041 logging.py DEBUG - Only restore prelinked binaries if prelinked is installed (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - build_product script: enable SCE checks for ubuntu20.04 (Simon THOBY) 2024-11-27 21:46:23.041 logging.py DEBUG - build scripts: introduce a test for SCE checks (Simon THOBY) 2024-11-27 21:46:23.041 logging.py DEBUG - Add package_prelink_removed to RHEL 7 CIS profile (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - Create new rule package_prelink_removed (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - Remove utils/find_shadowed_files.py (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - Remove xccdf2csv-stig.py (Matthew Burket) 2024-11-27 21:46:23.041 logging.py DEBUG - accounts_passwords_pam_tally2: bash: Move to (Eduardo Barretto) 2024-11-27 21:46:23.041 logging.py DEBUG - Add link to using Chrony to configure NTP (Watson Sato) 2024-11-27 21:46:23.041 logging.py DEBUG - Fix broken link for Fedora NTP docs (Watson Sato) 2024-11-27 21:46:23.041 logging.py DEBUG - Include rule for CIS RHEL8 2.2.19 requirement (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Reviewed requirements in pending status (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Update requirements about user passwords and sessions (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Update status and rule rule for CIS RHEL8 5.3.7 requirement (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Include rule for CIS RHEL8 5.3.7 requirement (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Update SSH related requirements (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Remove unnecessary comments from cis_rhel8 controlfile (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Small updates about rsyslog requirements (Marcus Burghardt) 2024-11-27 21:46:23.041 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.18 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.17 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.16 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.15 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.4 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.3 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.2 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 3.4.2.1 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 2.2.20 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 2.2.6 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL8 2.2.5 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include rule for CIS RHEL7/RHEL8 2.2.4 requirement (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Include related rule for CIS RHEL7 1.9 (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Update CIS requirement to remove gdm package (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_rpcbind_removed (Eduardo Barretto) 2024-11-27 21:46:23.042 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_rpcbind_removed (Eduardo Barretto) 2024-11-27 21:46:23.042 logging.py DEBUG - package_rpcbind_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2024-11-27 21:46:23.042 logging.py DEBUG - package_rpcbind_removed: Fix some typo leftovers (Eduardo Barretto) 2024-11-27 21:46:23.042 logging.py DEBUG - try to fix too complex function get_stripped_conditionals (Vojtech Polasek) 2024-11-27 21:46:23.042 logging.py DEBUG - remove definition_location line from test platform (Vojtech Polasek) 2024-11-27 21:46:23.042 logging.py DEBUG - reword exception message (Vojtech Polasek) 2024-11-27 21:46:23.042 logging.py DEBUG - Don't test ANSSI-BP-028 on CentOS 7 (Milan Lysonek) 2024-11-27 21:46:23.042 logging.py DEBUG - Spec file python2 build requirements for CentOS 7 (Milan Lysonek) 2024-11-27 21:46:23.042 logging.py DEBUG - Define distro where EPEL7 will be tested (Milan Lysonek) 2024-11-27 21:46:23.042 logging.py DEBUG - Extend spec file for CentOS 7 (Milan Lysonek) 2024-11-27 21:46:23.042 logging.py DEBUG - Enable TF on CentOS 7 (Milan Lysonek) 2024-11-27 21:46:23.042 logging.py DEBUG - Do COPR build for CentOS 7 and for EPEL 7 (Milan Lysonek) 2024-11-27 21:46:23.042 logging.py DEBUG - Typo corrections in the name of the rule (rchikov) 2024-11-27 21:46:23.042 logging.py DEBUG - Update package name for RHEL in package_rsync_removed (Marcus Burghardt) 2024-11-27 21:46:23.042 logging.py DEBUG - Use variable containing strong KEX algorithms for remediations (teacup-on-rockingchair) 2024-11-27 21:46:23.042 logging.py DEBUG - Add ansible remediation for sshd_use_strong_kex rule (teacup-on-rockingchair) 2024-11-27 21:46:23.042 logging.py DEBUG - Add sshd_use_strong_kex to CIS SLE profiles (teacup-on-rockingchair) 2024-11-27 21:46:23.042 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_nftables_installed (Eduardo Barretto) 2024-11-27 21:46:23.042 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_nftables_installed (Eduardo Barretto) 2024-11-27 21:46:23.042 logging.py DEBUG - package_nftables_installed: Add Ubuntu platform and CIS references (Eduardo Barretto) 2024-11-27 21:46:23.042 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_rsync_removed (Eduardo Barretto) 2024-11-27 21:46:23.043 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_rsync_removed (Eduardo Barretto) 2024-11-27 21:46:23.043 logging.py DEBUG - package_rsync_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2024-11-27 21:46:23.043 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_cups_removed (Eduardo Barretto) 2024-11-27 21:46:23.043 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_cups_removed (Eduardo Barretto) 2024-11-27 21:46:23.043 logging.py DEBUG - package_cups_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2024-11-27 21:46:23.043 logging.py DEBUG - Fix the service_telnet_disabled rule (Marcus Burghardt) 2024-11-27 21:46:23.043 logging.py DEBUG - Added a new SLE 12/15's rule package_rcpbind_removed (rchikov) 2024-11-27 21:46:23.043 logging.py DEBUG - Fix accounts_password template for OL (Matthew Burket) 2024-11-27 21:46:23.043 logging.py DEBUG - decrease complexity of get_stripped_conditionals function (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - Include RHEL products in audit_sudo_log_events (Marcus Burghardt) 2024-11-27 21:46:23.043 logging.py DEBUG - Include RHEL products in package_nftables_installed (Marcus Burghardt) 2024-11-27 21:46:23.043 logging.py DEBUG - Include RHEL products in package_rsync_removed (Marcus Burghardt) 2024-11-27 21:46:23.043 logging.py DEBUG - fix a typo (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - update outdated mention of shadow-utils platform (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - update documentation explaining the change (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - add test and new testing platform (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - Include RHEL products in package_cups_removed (Marcus Burghardt) 2024-11-27 21:46:23.043 logging.py DEBUG - wip test (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - prevent content build if usage of certain platform defiinitions would cause inconsistency between OVAL and remediations (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - Include ANSSI reference on pam_pwhistory rules (Marcus Burghardt) 2024-11-27 21:46:23.043 logging.py DEBUG - Update rules to limit password reuse (Marcus Burghardt) 2024-11-27 21:46:23.043 logging.py DEBUG - extend tests for version_to_evr (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - remove no longer valid tests (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - remove no longer used functions which were used for parsing of version to evr (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - change method for parsing of version to evr (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - Added a new rule package_tcp_wrappers_removed (rchikov) 2024-11-27 21:46:23.043 logging.py DEBUG - Fix OCP rule routes_protected_by_tls (Vincent Shen) 2024-11-27 21:46:23.043 logging.py DEBUG - Add tests to sshd_lineinfile for relative paths (Edgar Aguilar) 2024-11-27 21:46:23.043 logging.py DEBUG - Handle relative paths in sshd_config include (Edgar Aguilar) 2024-11-27 21:46:23.043 logging.py DEBUG - Bump fedora version in Dockerfiles to 37 (Jakub Hrozek) 2024-11-27 21:46:23.043 logging.py DEBUG - Fix a few isssues in test-compare-disa-xml (Matthew Burket) 2024-11-27 21:46:23.043 logging.py DEBUG - remove blank line and not used "register" statements from Ansible remediation (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2024-11-27 21:46:23.043 logging.py DEBUG - change method to clear a list to be compatible with Python 2 (Vojtech Polasek) 2024-11-27 21:46:23.043 logging.py DEBUG - Small corrections related to 3 rules (rchikov) 2024-11-27 21:46:23.043 logging.py DEBUG - Assign CCE ids for sle sshd_use_strong_kex rule (teacup-on-rockingchair) 2024-11-27 21:46:23.043 logging.py DEBUG - Add initial implementation of sshd_use_strong_kex rule (teacup-on-rockingchair) 2024-11-27 21:46:23.043 logging.py DEBUG - Fixes for review notes (teacup-on-rockingchair) 2024-11-27 21:46:23.043 logging.py DEBUG - build support: when SCE support is enabled, include the SCE scripts in the output datastream (THOBY Simon) 2024-11-27 21:46:23.043 logging.py DEBUG - build support: prefix the variables in SCE scripts with 'xccdf_org.ssgproject.content_value_' (THOBY Simon) 2024-11-27 21:46:23.043 logging.py DEBUG - build support: ignore empty CPE directories (needed for SCE generation) (THOBY Simon) 2024-11-27 21:46:23.043 logging.py DEBUG - Add sanity tests for compare_disa_xml.py (Matthew Burket) 2024-11-27 21:46:23.044 logging.py DEBUG - Add rule to OL7 stig profile (Federico Ramirez) 2024-11-27 21:46:23.044 logging.py DEBUG - accounts_password_set_max_life_existing: tests: Attempt to unify the (Eduardo Barretto) 2024-11-27 21:46:23.044 logging.py DEBUG - update tests (Vojtech Polasek) 2024-11-27 21:46:23.044 logging.py DEBUG - rewrite bash remediation (Vojtech Polasek) 2024-11-27 21:46:23.044 logging.py DEBUG - rewrite ansible remediation to pass tests (Vojtech Polasek) 2024-11-27 21:46:23.044 logging.py DEBUG - enable test scenarios which test remediations (Vojtech Polasek) 2024-11-27 21:46:23.044 logging.py DEBUG - use full module names in remediation (Vojtech Polasek) 2024-11-27 21:46:23.044 logging.py DEBUG - add few tests which test also files within /etc/rsyslog.d directory (Vojtech Polasek) 2024-11-27 21:46:23.044 logging.py DEBUG - rewrite the remediation so that it does not use shell commands anymore (Vojtech Polasek) 2024-11-27 21:46:23.044 logging.py DEBUG - Produce an understanable error (Matej Tyc) 2024-11-27 21:46:23.044 logging.py DEBUG - accounts_password_set_min_life_existing: tests: Attempt to unite the (Eduardo Barretto) 2024-11-27 21:46:23.044 logging.py DEBUG - accounts_password_set_min_life_existing: tests: Add dummy password to (Eduardo Barretto) 2024-11-27 21:46:23.044 logging.py DEBUG - accounts_password_set_max_life_existing: tests: Add dummy password to (Eduardo Barretto) 2024-11-27 21:46:23.044 logging.py DEBUG - Update control flag in test scenario scripts for rhel7 cis (Marcus Burghardt) 2024-11-27 21:46:23.044 logging.py DEBUG - Optimize conditional in bash remediation (Marcus Burghardt) 2024-11-27 21:46:23.044 logging.py DEBUG - Remove unnecessary grep from test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:23.044 logging.py DEBUG - Update _no_removeable_media tests (Federico Ramirez) 2024-11-27 21:46:23.044 logging.py DEBUG - Update _no_removeable_media rules (Federico Ramirez) 2024-11-27 21:46:23.044 logging.py DEBUG - Add two new rules to Ansible lint (Matthew Burket) 2024-11-27 21:46:23.044 logging.py DEBUG - Minor indentation adjustments (Marcus Burghardt) 2024-11-27 21:46:23.044 logging.py DEBUG - Add test to accounts_password for OL (Edgar Aguilar) 2024-11-27 21:46:23.044 logging.py DEBUG - Update accounts_password for OL (Edgar Aguilar) 2024-11-27 21:46:23.044 logging.py DEBUG - accounts_password_set_min_life_existing: oval: Improve regex and filter (Eduardo Barretto) 2024-11-27 21:46:23.044 logging.py DEBUG - accounts_password_set_max_life_existing: tests: Fix var name (Eduardo Barretto) 2024-11-27 21:46:23.044 logging.py DEBUG - accounts_password_set_max_life_existing: oval: Improve regex and filter (Eduardo Barretto) 2024-11-27 21:46:23.044 logging.py DEBUG - Remove the CODEOWNERS for RHEL 8 STIG control (Matthew Burket) 2024-11-27 21:46:23.044 logging.py DEBUG - Remove RHEL 8 STIG Control (Matthew Burket) 2024-11-27 21:46:23.045 logging.py DEBUG - fix: service_disabled/tests: handle socket actication services (Markus Linnala) 2024-11-27 21:46:23.045 logging.py DEBUG - Add Ubuntu 22.04 to gating (Matthew Burket) 2024-11-27 21:46:23.045 logging.py DEBUG - Lower case the file for EXPLICIT_BUILD_TARGETS in build_product (Matthew Burket) 2024-11-27 21:46:23.045 logging.py DEBUG - Update stig profile references for stability tests (Marcus Burghardt) 2024-11-27 21:46:23.045 logging.py DEBUG - Align parameter name in Ansible macro for pam_pwhistory (Marcus Burghardt) 2024-11-27 21:46:23.045 logging.py DEBUG - Fixed unnecessary extra parameter in macro (Marcus Burghardt) 2024-11-27 21:46:23.045 logging.py DEBUG - Update STIG related description to use variable (Marcus Burghardt) 2024-11-27 21:46:23.045 logging.py DEBUG - Update pam_pwhistory control flag variable for STIG (Marcus Burghardt) 2024-11-27 21:46:23.045 logging.py DEBUG - Update pam_pwhistory control flag variable for CIS (Marcus Burghardt) 2024-11-27 21:46:23.045 logging.py DEBUG - Use condition based on packaging system name (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for zypper platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for yum platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for usbguard platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for tmux platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for tfpt-server platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for systemd platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for sudo platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for sssd platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for postfix platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for polkit platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for pam platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for ntp platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for nss-pam-ldapd platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for net-snmp platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for libuser platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for gdm platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for chrony platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Use templated platform for audit platform (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Prevent broken build with Python 2 (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Modify bash_pkg_conditional (Jan Černý) 2024-11-27 21:46:23.045 logging.py DEBUG - Add missing rules to OL7 stig (Federico Ramirez) 2024-11-27 21:46:23.045 logging.py DEBUG - Bump OL7 stig profile version to v2r9 (Federico Ramirez) 2024-11-27 21:46:23.045 logging.py DEBUG - ubuntu2204: cis_level1_server: Add grub2_enable_apparmor rule (Eduardo Barretto) 2024-11-27 21:46:23.045 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule grub2_enable_apparmor (Eduardo Barretto) 2024-11-27 21:46:23.045 logging.py DEBUG - grub2_enable_apparmor: oval: Add audit (Eduardo Barretto) 2024-11-27 21:46:23.046 logging.py DEBUG - grub2_enable_apparmor: bash: Add remediation (Eduardo Barretto) 2024-11-27 21:46:23.046 logging.py DEBUG - ubuntu: Add new CIS rule grub2_enable_apparmor (Eduardo Barretto) 2024-11-27 21:46:23.046 logging.py DEBUG - Install NetworkManager as part of wireless_disable_interfaces remediation (Milan Lysonek) 2024-11-27 21:46:23.046 logging.py DEBUG - WIP: feature: add faillock_path (Markus Linnala) 2024-11-27 21:46:23.046 logging.py DEBUG - fixing bootloader password (Jindrich Skacel) 2024-11-27 21:46:23.046 logging.py DEBUG - Added a new rule accounts_set_post_pw_existing (rchikov) 2024-11-27 21:46:23.046 logging.py DEBUG - Improve Bash macro name and description (Marcus Burghardt) 2024-11-27 21:46:23.046 logging.py DEBUG - Fix Jinja condition in macro for pam_faillock (Marcus Burghardt) 2024-11-27 21:46:23.046 logging.py DEBUG - Added a new SLE 15 rule package_nftables_installed (rchikov) 2024-11-27 21:46:23.046 logging.py DEBUG - add correct cce id (denknorr) 2024-11-27 21:46:23.046 logging.py DEBUG - Define srpm_build_deps in packit configuration (Matus Marhefka) 2024-11-27 21:46:23.046 logging.py DEBUG - Added a new rule package_audit-libs_installed (rchikov) 2024-11-27 21:46:23.046 logging.py DEBUG - CMP-1389 : Update titles of API server tlsSecurityProfile rules (Bharath B) 2024-11-27 21:46:23.046 logging.py DEBUG - Improve conditional criteria in Ansible task (Marcus Burghardt) 2024-11-27 21:46:23.046 logging.py DEBUG - Update rule description in aligment to OVAL and remediation (Marcus Burghardt) 2024-11-27 21:46:23.046 logging.py DEBUG - Update rule description in aligment to OVAL and remediation (Marcus Burghardt) 2024-11-27 21:46:23.046 logging.py DEBUG - Update the test scenario scripts to cover new scenarios (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update Ansible remediation to use new macros (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update Bash remediation to use new macros (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update the test scenario scripts to cover new scenarios (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update Ansible remediation to use new macros (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update Bash remediation to use new macros (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update Ansible remediation to use new macros (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Include Ansible macros for pam_pwhistory.so (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update the test scenario scripts to cover new scenarios (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Update Bash remediation to use new macros (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Include Bash macros for pam_pwhistory.so (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Rename Blacklist to Disabled in profile selections (Watson Sato) 2024-11-27 21:46:23.047 logging.py DEBUG - Remove usage of whitelist in check comments (Watson Sato) 2024-11-27 21:46:23.047 logging.py DEBUG - SLE 12/15 CIS profile updates (rchikov) 2024-11-27 21:46:23.047 logging.py DEBUG - Rename PROFILE_ID_BLACKLIST to PROFILE_ID_SKIPLIST (Watson Sato) 2024-11-27 21:46:23.047 logging.py DEBUG - ansible_playbook_to_role.py: Rename whitelist to allowlist (Watson Sato) 2024-11-27 21:46:23.047 logging.py DEBUG - test platform with invalid argument (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - raise anexception if invalid argument to templated platform is supplied (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - Small corrections related to 3 rules (rchikov) 2024-11-27 21:46:23.047 logging.py DEBUG - Modifications into files (rchikov) 2024-11-27 21:46:23.047 logging.py DEBUG - Fix failure test to actually create netrc file in user's home dir (teacup-on-rockingchair) 2024-11-27 21:46:23.047 logging.py DEBUG - Fix failure test to actually create forward file in user's home dir (teacup-on-rockingchair) 2024-11-27 21:46:23.047 logging.py DEBUG - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - Style guide alignment (Marcus Burghardt) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_min_life_existing: Add consistency by moving from (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_max_life_existing: test: Improve tests (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_max_life_existing: oval: Change existence check to (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_max_life_existing: Fix ansible to avoid system (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_max_life_existing: Fix OVAL to avoid system (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_max_life_existing: Fix bash to avoid system (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_min_life_existing: test: Improve incorrect_min_pass_age.fail.sh (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_min_life_existing: oval: Change existence check to (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_min_life_existing: Fix ansible to avoid system (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_min_life_existing: Fix OVAL to avoid system (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - accounts_password_set_min_life_existing: Fix bash to avoid system (Eduardo Barretto) 2024-11-27 21:46:23.047 logging.py DEBUG - Fix CIS SLEs requirement id in sshd_set_keepalive (teacup-on-rockingchair) 2024-11-27 21:46:23.047 logging.py DEBUG - Add no_forward_files rule to CIS SLE profiles (teacup-on-rockingchair) 2024-11-27 21:46:23.047 logging.py DEBUG - Assign CCE SLE ids for no_forward_files rule (teacup-on-rockingchair) 2024-11-27 21:46:23.047 logging.py DEBUG - Add rule to Ensure no users have .forward files (teacup-on-rockingchair) 2024-11-27 21:46:23.047 logging.py DEBUG - Assign SLE CCE ids and CIS references to no_netrc_files rule (teacup-on-rockingchair) 2024-11-27 21:46:23.047 logging.py DEBUG - make the os_linux unversioned (so far) (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - add new parametrized platform os_linux (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - ensure that platforms update their conditionals after respective CPE items update their templated conditionals (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - save templated remediations into CPE items (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - change meaning of function build_lang_for_templatable (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - add conditional setter to CPEItem (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - always store the xml representation of platform as string (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - add a new function to platforms which collects conditionals from associated CPE items (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - modify the function which resolves and adds new CPE items based on parameters passed to platform (Vojtech Polasek) 2024-11-27 21:46:23.047 logging.py DEBUG - Update rule.yml (Bharath B) 2024-11-27 21:46:23.047 logging.py DEBUG - Update rule.yml (Bharath B) 2024-11-27 21:46:23.047 logging.py DEBUG - Update rule.yml (Bharath B) 2024-11-27 21:46:23.047 logging.py DEBUG - aide_periodic_cron_checking: oval: ubuntu: Improve regexes (Eduardo Barretto) 2024-11-27 21:46:23.048 logging.py DEBUG - aide_periodic_cron_checking: bash: ubuntu: Improve regex (Eduardo Barretto) 2024-11-27 21:46:23.048 logging.py DEBUG - Bump OL8 STIG version to V1R4 (Edgar Aguilar) 2024-11-27 21:46:23.048 logging.py DEBUG - Handle polyinstantiated directories/mount points (Edgar Aguilar) 2024-11-27 21:46:23.048 logging.py DEBUG - Documentation: Describe versioned platforms/CPE entities. (Evgeny Kolesnikov) 2024-11-27 21:46:23.048 logging.py DEBUG - CPE AL: Allow version specifiers only for CPEs that explicitly support them (Evgeny Kolesnikov) 2024-11-27 21:46:23.048 logging.py DEBUG - Drop RHEL 7 CIS reference also after a tip from @yuumasato :bow: (teacup-on-rockingchair) 2024-11-27 21:46:23.048 logging.py DEBUG - accounts_umask_etc_bashrc: Fix tests for ubuntu (Eduardo Barretto) 2024-11-27 21:46:23.048 logging.py DEBUG - accounts_passwords_pam_faillock_unlock_time: Add Ubuntu specific OVAL (Eduardo Barretto) 2024-11-27 21:46:23.048 logging.py DEBUG - accounts_passwords_pam_faillock_interval: Add Ubuntu specific OVAL (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - accounts_passwords_pam_faillock_deny: Add ubuntu specific OVAL (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - macros: bash: faillock: Add Ubuntu specific case (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Add new value to var_accounts_passwords_pam_faillock_deny.var (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - sshd_approved_*.var: Add cis_ubuntu value (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - accounts_tmout: Add ubuntu specific bash (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - chronyd_run_as_chrony_user: Add ubuntu specific bash (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - chronyd_run_as_chrony_user: Add ubuntu specific tests (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Add platforms to chronyd_run_as_chrony_user tests (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Fix some rules bash for ubuntu2204 (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Fix some rules OVAL files for ubuntu2204 (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Fix some rules descriptions and ocil for ubuntu2204 (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Remove ubuntu2204 prodtype and cis reference from some rules (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Add some ubuntu2204 specific template vars (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level2_server: Add platform to bash remediations (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level1_server: Add platform to bash remediations (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: product.yml: Add avahi and dconf to (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: product.yml: Update grub2_uefi_boot_path (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: product.yml: Fix title (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level2_server: Add cis references (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level1_server: Add cis references (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level2_server: Add prodtype to rules (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level1_server: Add prodtype to rules (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level2_worstation: Update profile (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level1_workstation: Update profile (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level2_server: Update profile (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - ubuntu2204: cis_level1_server: Update profile (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Satisfy CodeClimate (Evgeny Kolesnikov) 2024-11-27 21:46:23.049 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.049 logging.py DEBUG - Added a new rule service_firewalld_disabled (rchikov) 2024-11-27 21:46:23.049 logging.py DEBUG - Fix references and add CCE ids for backup_etc_gshadow related rules (teacup-on-rockingchair) 2024-11-27 21:46:23.049 logging.py DEBUG - Drop CIS reference in no_legacy_plus_entries_etc_group rule for SLE15 (teacup-on-rockingchair) 2024-11-27 21:46:23.049 logging.py DEBUG - Add note about Koji scratch builds (Watson Sato) 2024-11-27 21:46:23.049 logging.py DEBUG - Add section about Fedora updates (Watson Sato) 2024-11-27 21:46:23.049 logging.py DEBUG - CPE AL: Polish the implementation (Evgeny Kolesnikov) 2024-11-27 21:46:23.049 logging.py DEBUG - Update ISM and E8 profile SMEs (shaneboulden) 2024-11-27 21:46:23.049 logging.py DEBUG - Update sshd_lineinfile template tests (Edgar Aguilar) 2024-11-27 21:46:23.049 logging.py DEBUG - Update macros related to sshd configuration files (Edgar Aguilar) 2024-11-27 21:46:23.049 logging.py DEBUG - Fix varible in ctest for srg-export-rhel9 (Matthew Burket) 2024-11-27 21:46:23.049 logging.py DEBUG - Added a new rule package_cups_removed (rchikov) 2024-11-27 21:46:23.049 logging.py DEBUG - Add support for intermediary version of setuptools to requirements_specs.py (Evgeny Kolesnikov) 2024-11-27 21:46:23.049 logging.py DEBUG - CCE / CIS numbers for SLE 12/15 rules which belong to CIS group Initial setup (rchikov) 2024-11-27 21:46:23.049 logging.py DEBUG - Add RHEL9 product to `srg-export-rhel9` and `srg-diff-rhel9` (Matthew Burket) 2024-11-27 21:46:23.049 logging.py DEBUG - Move to using PYTHON_VERSION_MAJOR (Matthew Burket) 2024-11-27 21:46:23.049 logging.py DEBUG - Fix typo. (Gabriel Becker) 2024-11-27 21:46:23.049 logging.py DEBUG - Ensure all notes use the same markdown format (Marcus Burghardt) 2024-11-27 21:46:23.049 logging.py DEBUG - Documentation about Fedora Packages (Marcus Burghardt) 2024-11-27 21:46:23.049 logging.py DEBUG - Include links for release and examples for cleanup (Marcus Burghardt) 2024-11-27 21:46:23.049 logging.py DEBUG - Include -vX.Y.Z suffix where stabilization branch is mentioned (Marcus Burghardt) 2024-11-27 21:46:23.049 logging.py DEBUG - Include references in Checklist section (Marcus Burghardt) 2024-11-27 21:46:23.049 logging.py DEBUG - Add new Ubuntu-exclusive OVAL rule (Eduardo Barretto) 2024-11-27 21:46:23.049 logging.py DEBUG - Enhancement to aide_build_database Ubuntu script (Eduardo Barretto) 2024-11-27 21:46:23.050 logging.py DEBUG - accounts_user_dot_group_ownership: Improve OVAL to avoid nobody group (Eduardo Barretto) 2024-11-27 21:46:23.050 logging.py DEBUG - Use CPEItem id_ for templated CPEs (Evgeny Kolesnikov) 2024-11-27 21:46:23.050 logging.py DEBUG - Refactor boolean_expressions.py (Evgeny Kolesnikov) 2024-11-27 21:46:23.050 logging.py DEBUG - Refactor test_utils.py (Evgeny Kolesnikov) 2024-11-27 21:46:23.050 logging.py DEBUG - CPE AL: Introduce version specifiers support (Evgeny Kolesnikov) 2024-11-27 21:46:23.050 logging.py DEBUG - Fix var_firewalld_active_zones var type to match object type (teacup-on-rockingchair) 2024-11-27 21:46:23.050 logging.py DEBUG - Modifications in files with available CCE numbers for SLE 12/15 (rchikov) 2024-11-27 21:46:23.050 logging.py DEBUG - CCE and CIS numbers assignments for SLE 12/15 rules which belong to user and group settings (rchikov) 2024-11-27 21:46:23.050 logging.py DEBUG - Document the Stabilization prefix in PRs (Marcus Burghardt) 2024-11-27 21:46:23.050 logging.py DEBUG - Provide reference of message in Github Discussion (Marcus Burghardt) 2024-11-27 21:46:23.050 logging.py DEBUG - Update reference PR to be aligned to the given example (Marcus Burghardt) 2024-11-27 21:46:23.050 logging.py DEBUG - Update the step related to contributors list (Marcus Burghardt) 2024-11-27 21:46:23.050 logging.py DEBUG - Correction of files with available CCE numbers for SLE12/15 (rchikov) 2024-11-27 21:46:23.050 logging.py DEBUG - CCE / CIS numbers assigment to SLE 12/15 rules (rchikov) 2024-11-27 21:46:23.050 logging.py DEBUG - Select new audispd rules in RHEL7 STIG profile (Watson Sato) 2024-11-27 21:46:23.050 logging.py DEBUG - Changes into files with CCE codes available (rchikov) 2024-11-27 21:46:23.050 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.050 logging.py DEBUG - CCE and CIS codes for SLE 12/15 rules which belong to CIS group 5.2 configure ssh server (rchikov) 2024-11-27 21:46:23.050 logging.py DEBUG - Improve rule definition (teacup-on-rockingchair) 2024-11-27 21:46:23.050 logging.py DEBUG - Add two simple tests for the new rule (teacup-on-rockingchair) 2024-11-27 21:46:23.050 logging.py DEBUG - Update sudo_require_reauthentication (Federico Ramirez) 2024-11-27 21:46:23.050 logging.py DEBUG - Update OL7 kmod audit rule (Federico Ramirez) 2024-11-27 21:46:23.051 logging.py DEBUG - Fix and improve rule descriptions (Watson Sato) 2024-11-27 21:46:23.051 logging.py DEBUG - Rename template to key_value_pair_in_file (Watson Sato) 2024-11-27 21:46:23.051 logging.py DEBUG - removed unavailable cce-ids for sles (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Ensure the test scenarios are successful (Watson Sato) 2024-11-27 21:46:23.051 logging.py DEBUG - SLE 12/15 CCE and CIS numbers for the CIS group job schedulers (rchikov) 2024-11-27 21:46:23.051 logging.py DEBUG - Parametrize /etc/bashrc check with Jinja variable (Watson Sato) 2024-11-27 21:46:23.051 logging.py DEBUG - Build all profiles on all CentOS and CentOS Streams (Milan Lysonek) 2024-11-27 21:46:23.051 logging.py DEBUG - Make definition of textfilecontent54_object clearer (Watson Sato) 2024-11-27 21:46:23.051 logging.py DEBUG - Use param_value_in_file template to configure audispd daemon (Watson Sato) 2024-11-27 21:46:23.051 logging.py DEBUG - Add new template param_value_in_file (Watson Sato) 2024-11-27 21:46:23.051 logging.py DEBUG - Fix file name for CIS SLE15 control file in CODEOWNERS (Matthew Burket) 2024-11-27 21:46:23.051 logging.py DEBUG - fix bash syntax for set_ipv6_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - really add newline to bash set_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - CIS + CCEID SLES service_iptables_enabled (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - SLES CIS-ID sysctl_net_ipv6_conf_default_accept_ra (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - CCE-IDs SLE sysctl_net_ipv6_conf_all_accept_ra (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Add CIS Nrs for set_ip6tables_default_rule sles (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.051 logging.py DEBUG - add newline to ansible remed for loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - add newline at end of ipv6 loopback remed (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - add ipv6 enabled check to ansible f ipv6 loopback (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Add check for ipv6-disable to ipv6_loopback bash (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Update CIS Nr for set_ipv6_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Modifications in rule and profile to cover CIS requirment 3.5.3.1.3 (rchikov) 2024-11-27 21:46:23.051 logging.py DEBUG - Added a new rule package_firewalld_removed (rchikov) 2024-11-27 21:46:23.051 logging.py DEBUG - Changing a few harcoded OS names for full_name (Edgar Aguilar) 2024-11-27 21:46:23.051 logging.py DEBUG - bash remed for set_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - ansible remed for set_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - add ansible remed for set_ipv6_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Migrate package_dracut-fips_installed to template (Edgar Aguilar) 2024-11-27 21:46:23.051 logging.py DEBUG - add bash remediation to set_ipv6_loopback_traffic (Christian Hagenest) 2024-11-27 21:46:23.051 logging.py DEBUG - Wait for storage to finish writes (Matej Tyc) 2024-11-27 21:46:23.051 logging.py DEBUG - Added a new SLE 12/15 rule package_rsync_removed (rchikov) 2024-11-27 21:46:23.051 logging.py DEBUG - Fix oval check warning for comparing int vs string (teacup-on-rockingchair) 2024-11-27 21:46:23.051 logging.py DEBUG - Status is partial automated can be partially ;) (teacup-on-rockingchair) 2024-11-27 21:46:23.051 logging.py DEBUG - Add ensure_firewall_rules_exist_for_all_open_ports rule to SLE15 CIS and PCIDSS profile (teacup-on-rockingchair) 2024-11-27 21:46:23.051 logging.py DEBUG - Add rule definition on firewalling open ports (teacup-on-rockingchair) 2024-11-27 21:46:23.051 logging.py DEBUG - Corrections related to SLE 12/15 CIS profiles (rchikov) 2024-11-27 21:46:23.052 logging.py DEBUG - incorporated comment (Bharath B) 2024-11-27 21:46:23.052 logging.py DEBUG - Fix typing import in create_srg_export.py (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - Fix the file param in rule_dir_json (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - Add tests to package_dracut-fips-aesni_installed (Edgar Aguilar) 2024-11-27 21:46:23.052 logging.py DEBUG - Add tests to grub2_enable_fips_mode (Edgar Aguilar) 2024-11-27 21:46:23.052 logging.py DEBUG - Add refcheck test for RHEL 7 and RHEL 8 (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - Fix message in refchecker.py (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - Make refchecker use full paths (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - Add OL7 to the /etc/bashrc conditional (Watson Sato) 2024-11-27 21:46:23.052 logging.py DEBUG - Fix refchecker (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - update ocp identifiers in the rules (Bharath B) 2024-11-27 21:46:23.052 logging.py DEBUG - CMP-1389: SRG-APP-000014-CTR-000040: Needs an automated rule to check Kubelet tlsSecurityProfile (Bharath B) 2024-11-27 21:46:23.052 logging.py DEBUG - Remove ids, and add cis quotes (anivan-suse) 2024-11-27 21:46:23.052 logging.py DEBUG - Fix CCE-ID (anivan-suse) 2024-11-27 21:46:23.052 logging.py DEBUG - cis change (anivan-suse) 2024-11-27 21:46:23.052 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.052 logging.py DEBUG - SLE 12/15 CCE/CIS codes added and CIS codes updated (rchikov) 2024-11-27 21:46:23.052 logging.py DEBUG - The test-controleval tests should use test files (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - Improve the arguments for Ansible command module (Marcus Burghardt) 2024-11-27 21:46:23.052 logging.py DEBUG - Refactor build_cpe (rename confusing symbol-related variables) (Evgeny Kolesnikov) 2024-11-27 21:46:23.052 logging.py DEBUG - Update documentation for templated CPEs (Evgeny Kolesnikov) 2024-11-27 21:46:23.052 logging.py DEBUG - Rename CPE template cond_package into platform_package (Evgeny Kolesnikov) 2024-11-27 21:46:23.052 logging.py DEBUG - The controleval script needs Python 3.7+ (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - Update package_dracut-fips-aesni_installed ansible (Edgar Aguilar) 2024-11-27 21:46:23.052 logging.py DEBUG - Update grub2_enable_fips_mode ansible (Edgar Aguilar) 2024-11-27 21:46:23.052 logging.py DEBUG - Add tests to package_dracut-fips_installed (Edgar Aguilar) 2024-11-27 21:46:23.052 logging.py DEBUG - Update package_dracut-fips_installed ansible (Edgar Aguilar) 2024-11-27 21:46:23.052 logging.py DEBUG - Add sanity tests for controleval.py (Matthew Burket) 2024-11-27 21:46:23.052 logging.py DEBUG - CIS / CCE numbers for SLE 12/15 covering special services (rchikov) 2024-11-27 21:46:23.052 logging.py DEBUG - Fix make_items_product_specific function (Evgeny Kolesnikov) 2024-11-27 21:46:23.052 logging.py DEBUG - Use replace insted of lineinfile to fix TMOUT (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Fix PEP8 in build_cpe.py (Evgeny Kolesnikov) 2024-11-27 21:46:23.053 logging.py DEBUG - Document templated CPEs (shared/applicability/*.yml) (Evgeny Kolesnikov) 2024-11-27 21:46:23.053 logging.py DEBUG - Clean up templates.py, add missing conditionals for applicability/package.yml (Evgeny Kolesnikov) 2024-11-27 21:46:23.053 logging.py DEBUG - Refactor build_cpe.py (CPEALFactRef.pass_parameters) (Evgeny Kolesnikov) 2024-11-27 21:46:23.053 logging.py DEBUG - Refactor boolean_expression (Evgeny Kolesnikov) 2024-11-27 21:46:23.053 logging.py DEBUG - Use dry run in test-create_scap_delta_tailoring (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Fix bad name in sshd_enable_pam fix and check text (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Fix issues with duplicative lines at the end of the file (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Handle /etc/bashrc file in RHEL7 (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Add tests for /etc/bashrc for RHEL7 (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Fix pass duplicate test scenarios (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Ensure the remediation updates occurences of TMOUT (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Make sure that at least one TMOUT is defined (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Fail rule when any file contain incompliant TMOUT (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Make rule assess all occurences of TMOUT in file (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Add tests for conflicting and duplicate TMOUT (Watson Sato) 2024-11-27 21:46:23.053 logging.py DEBUG - Add nonessential services rule (anivan-suse) 2024-11-27 21:46:23.053 logging.py DEBUG - Fix build bug (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Whitespace update (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update kernel_module_can_disabled for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update audit and logging rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update chronyd_server_directive for the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update partition rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update account session rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update some auth rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update TFTP rule for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update OS is updated or RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update accounts physical rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update password quality rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update GRUB 2 rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update lockout rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update file permission rules RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Upadate crypto rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update accounts restrictions rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update system restrictions rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update AIDE rules for RHEL 9 (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Update seprate file system rules in RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Tmux rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.053 logging.py DEBUG - Audit and auditd config rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update USB guard rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update audit rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update networking sysctl for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update important file ownership for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update package rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update NFS rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update GNOME rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update postfix rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update GPG rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update SSHD rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Package and service rule update for RHEL 9 (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update service rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Update cron file permissions rules from RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Remove configure_kerberos_crypto_policy from the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Sync rules for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.054 logging.py DEBUG - Include platform: grub2 for grub2_enable_selinux rule (Marcus Burghardt) 2024-11-27 21:46:23.054 logging.py DEBUG - Improve test scenario scripts in alignment to OVAL (Marcus Burghardt) 2024-11-27 21:46:23.054 logging.py DEBUG - Ensure style guide alignment in OVAL (Marcus Burghardt) 2024-11-27 21:46:23.054 logging.py DEBUG - Extend Ansible remediation to avoid fatal errors (Marcus Burghardt) 2024-11-27 21:46:23.054 logging.py DEBUG - Allocate difference SLE12 CCE id to avoid conflict with meanwhile consumed CCEs (teacup-on-rockingchair) 2024-11-27 21:46:23.054 logging.py DEBUG - Add sanity check to verify a log_file config is present (teacup-on-rockingchair) 2024-11-27 21:46:23.054 logging.py DEBUG - Update linux_os/guide/system/auditing/auditd_configure_rules/file_permissions_var_log_audit/ansible/shared.yml (teacup-on-rockingchair) 2024-11-27 21:46:23.054 logging.py DEBUG - Change chmod command with file module in ansible template (teacup-on-rockingchair) 2024-11-27 21:46:23.054 logging.py DEBUG - Add ansible remediation for file_permissions_var_log_audit rule (teacup-on-rockingchair) 2024-11-27 21:46:23.054 logging.py DEBUG - Add file_permissions_var_log_audit to SLE12 PCI-DSS profile (teacup-on-rockingchair) 2024-11-27 21:46:23.054 logging.py DEBUG - Update of CIS profiles for SLE 12/15 (rchikov) 2024-11-27 21:46:23.054 logging.py DEBUG - CPE AL: Introduce templated platforms (CPEs) (Evgeny Kolesnikov) 2024-11-27 21:46:23.054 logging.py DEBUG - Add package_firewalld_installed to OL7 STIG (Edgar Aguilar) 2024-11-27 21:46:23.054 logging.py DEBUG - Add rule to set ipv4 tcp_invalid_ratelimit in OL7 (Edgar Aguilar) 2024-11-27 21:46:23.054 logging.py DEBUG - Fix typo. (Gabriel Becker) 2024-11-27 21:46:23.054 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2024-11-27 21:46:23.054 logging.py DEBUG - Add audit rule for create_module to OL7 STIG (Edgar Aguilar) 2024-11-27 21:46:23.055 logging.py DEBUG - Use dry run in test-create_scap_delta_tailoring_resolved (Matthew Burket) 2024-11-27 21:46:23.055 logging.py DEBUG - Provide documentation for automatic detection of platform_package_overrides in tests (David Fernandez Gonzalez) 2024-11-27 21:46:23.055 logging.py DEBUG - Update rule tests to rely on platform_package_overrides + add needed alternatives to products (David Fernandez Gonzalez) 2024-11-27 21:46:23.055 logging.py DEBUG - Check packages against platform_package_overrides before installing in tests (David Fernandez Gonzalez) 2024-11-27 21:46:23.055 logging.py DEBUG - Set the proper rule for RHEL8 STIG control file (Marcus Burghardt) 2024-11-27 21:46:23.055 logging.py DEBUG - Update the test scenario scripts for newer sshd versions (Marcus Burghardt) 2024-11-27 21:46:23.055 logging.py DEBUG - Replace fixed value by the proper variable value (Marcus Burghardt) 2024-11-27 21:46:23.055 logging.py DEBUG - Refactor OVAL for sshd_set_keepalive (Marcus Burghardt) 2024-11-27 21:46:23.055 logging.py DEBUG - Sort conditional remediation platform checks. (Gabriel Becker) 2024-11-27 21:46:23.055 logging.py DEBUG - Map selinux_user_login_roles to RHEL-08-040400 (Watson Sato) 2024-11-27 21:46:23.055 logging.py DEBUG - Needs an automated rule to check IngressController tlsSecurityProfile (Bharath B) 2024-11-27 21:46:23.055 logging.py DEBUG - Needs an automated rule to check IngressController tlsSecurityProfile (Bharath B) 2024-11-27 21:46:23.055 logging.py DEBUG - Update space_left rule in OL7 STIG to use percentage (Edgar Aguilar) 2024-11-27 21:46:23.055 logging.py DEBUG - Update kernel_module_disabled for OL systems (Edgar Aguilar) 2024-11-27 21:46:23.055 logging.py DEBUG - Update grub2_password for OL7 to not check grub.cfg (Edgar Aguilar) 2024-11-27 21:46:23.055 logging.py DEBUG - Update OL7 STIG id on mount_option_ rules (Federico Ramirez) 2024-11-27 21:46:23.055 logging.py DEBUG - Recognize all 64bit architectures in sysctl_kernel_exec_shield rule (Milan Lysonek) 2024-11-27 21:46:23.055 logging.py DEBUG - Remove offending stigid from apple_os/auditing/service_com_apple_auditd_enabled rule (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Fix line length in build_sce.py (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Refactor entities/common (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Recognize all 64bit architectures in audit rules (Milan Lysonek) 2024-11-27 21:46:23.055 logging.py DEBUG - Add max_line_length parameter to .editorconfig (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Refactor entities/common (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Refactor templates (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Refactor common.Templatable (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Refactor templates (Evgeny Kolesnikov) 2024-11-27 21:46:23.055 logging.py DEBUG - Recognize all 64bit architectures in audit_rules templates (Milan Lysonek) 2024-11-27 21:46:23.055 logging.py DEBUG - Add to pci-dss profile (anivan-suse) 2024-11-27 21:46:23.055 logging.py DEBUG - Add pci-dss Req (anivan-suse) 2024-11-27 21:46:23.055 logging.py DEBUG - Add 4.1.14 to cis@sle15 (anivan-suse) 2024-11-27 21:46:23.055 logging.py DEBUG - Fix config file for dconf_gnome_screensaver_lock_locked (Federico Ramirez) 2024-11-27 21:46:23.056 logging.py DEBUG - Fix missing backslash while configuring gitpod env. (Gabriel Becker) 2024-11-27 21:46:23.056 logging.py DEBUG - Add option to Automatus to remove platforms from benchmark/profiles. (Gabriel Becker) 2024-11-27 21:46:23.056 logging.py DEBUG - Include warning regarding quota options in XFS (Marcus Burghardt) 2024-11-27 21:46:23.056 logging.py DEBUG - Refactor build_yaml (Evgeny Kolesnikov) 2024-11-27 21:46:23.056 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.056 logging.py DEBUG - Add documentation about readthedocs.org integration. (Gabriel Becker) 2024-11-27 21:46:23.056 logging.py DEBUG - Added CIS / CCE codes to the rules which belong to warning banners group (rchikov) 2024-11-27 21:46:23.056 logging.py DEBUG - Refactor templates: move XCCDFEntity-specific code into Templatable (Evgeny Kolesnikov) 2024-11-27 21:46:23.056 logging.py DEBUG - Refactor templates: Rule and Templatable and products (Evgeny Kolesnikov) 2024-11-27 21:46:23.056 logging.py DEBUG - Refactor templates and XCCDFEntities (Evgeny Kolesnikov) 2024-11-27 21:46:23.056 logging.py DEBUG - Refactor template builder (Evgeny Kolesnikov) 2024-11-27 21:46:23.056 logging.py DEBUG - Ensure pwquality.conf.d dir exists on test scenarios (Marcus Burghardt) 2024-11-27 21:46:23.056 logging.py DEBUG - Add ANSSI and CIS ansible tests to CI (Milan Lysonek) 2024-11-27 21:46:23.056 logging.py DEBUG - Add dry run to utils/create_scap_delta_tailoring.py (Matthew Burket) 2024-11-27 21:46:23.056 logging.py DEBUG - Add test for create_scap_delta_tailoring using the resolved dirs flag (Matthew Burket) 2024-11-27 21:46:23.056 logging.py DEBUG - Unselect nfs-utils removal rule as GUI installation reqires the package (Milan Lysonek) 2024-11-27 21:46:23.126 logging.py DEBUG - Move is_name to Symbol class (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Remove unused import (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Bump version to 0.1.66 (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands/ansible/shared.yml (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Remove unnecessary extra tests (Watson Sato) 2024-11-27 21:46:23.127 logging.py DEBUG - Align rule with RHEL8 (Watson Sato) 2024-11-27 21:46:23.127 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.127 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.127 logging.py DEBUG - incorporated comments part-4 (Bharath B) 2024-11-27 21:46:23.127 logging.py DEBUG - Add SUSE Manager 4.x in installed_OS_is_sle15 (Xavier Coulon) 2024-11-27 21:46:23.127 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.127 logging.py DEBUG - Add sanity test for create_scap_delta_tailoring (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix issue where the last line of the file was being added again (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Add set_firewalld_default_zone rule to PCI DSS profile for sle15 (teacup-on-rockingchair) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix indentation in Ansible shell module parameter (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Replace OS name in check text as well. (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix the issue with no spaces in replaced name (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix macro loading order (Watson Sato) 2024-11-27 21:46:23.127 logging.py DEBUG - Change placeholder version in spec to 0.0.1 (Milan Lysonek) 2024-11-27 21:46:23.127 logging.py DEBUG - Add note about package version to spec file (Milan Lysonek) 2024-11-27 21:46:23.127 logging.py DEBUG - CIS numbers - added/updated CCE numbers - added for SLE 12/15 (rchikov) 2024-11-27 21:46:23.127 logging.py DEBUG - Change ignored_keys to frozenset (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Rename method reference_is_parametrized to cpe_id_is_parametrized (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Rename a variable (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Set ignored_keys to an empty list explicitely (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Rename method _is_parametrized to reference_is_parametrized (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Use a frozenset as a default argument (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Extract function recurse_or_substitute_or_do_nothing (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Move function is_parametrized to Symbol class (Jan Černý) 2024-11-27 21:46:23.127 logging.py DEBUG - Only run test-generate_contributors if git is installed (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Install git in fedora rawhide gating (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Add sanity test for generate_contributors (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Add dry run to utils/generate_contributors.py (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix minor bug in release_process.md (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Make the contributors script use UTC for the time notice. (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Update contributors list for v0.1.65 release (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Use jinja to limit the RHEL 8 minor version text (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Fixed bash_shell_file_set macro to consider spaces (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Refactored the test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Refactored the OVAL assessment for fapolicy_default_deny (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Update ocil and fixtext in fapolicy_default_deny (Marcus Burghardt) 2024-11-27 21:46:23.127 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.127 logging.py DEBUG - Update rule.yml (rumch-se) 2024-11-27 21:46:23.127 logging.py DEBUG - removed wrong rule from hipaa.profile (hagenest) 2024-11-27 21:46:23.127 logging.py DEBUG - Add config for Ansible lint (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix Code Climate issues (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix PEP8 issuses in utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix typo in test platforms (Eduardo Barretto) 2024-11-27 21:46:23.127 logging.py DEBUG - Refactor CPE AL (Evgeny Kolesnikov) 2024-11-27 21:46:23.127 logging.py DEBUG - Add Ansible destructive CI tests (Milan Lysonek) 2024-11-27 21:46:23.127 logging.py DEBUG - Update existing FMF plans to explicitly say they are testing Bash (Milan Lysonek) 2024-11-27 21:46:23.127 logging.py DEBUG - incorporated comments part-3 (Bharath B) 2024-11-27 21:46:23.127 logging.py DEBUG - incorporated comments part-2 (Bharath B) 2024-11-27 21:46:23.127 logging.py DEBUG - incorporated comments part-1 (Bharath B) 2024-11-27 21:46:23.127 logging.py DEBUG - Formatting and bug fixes in utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:23.127 logging.py DEBUG - Update instructions for TLS cipher suite algorithms (Lance Bragstad) 2024-11-27 21:46:23.127 logging.py DEBUG - Make rpm_verify_hashes ansible remediation applicable on all RHELs (Milan Lysonek) 2024-11-27 21:46:23.127 logging.py DEBUG - Add new CCI on RHEL-07-020019 (Watson Sato) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix CCI of RHEL-07-020019 (Watson Sato) 2024-11-27 21:46:23.127 logging.py DEBUG - Correction of CIS numbers assigned to SLES 12/15 rules (rchikov) 2024-11-27 21:46:23.127 logging.py DEBUG - Fix rpm_verify_* ansible remediations (Milan Lysonek) 2024-11-27 21:46:23.127 logging.py DEBUG - Add sle platform support for ansible remediation in set_password_hashing_algorithm_libuserconf rule (teacup-on-rockingchair) 2024-11-27 21:46:23.127 logging.py DEBUG - Enable set_password_hashing_algorithm_libuserconf rule for sle12 platform (teacup-on-rockingchair) 2024-11-27 21:46:23.127 logging.py DEBUG - Make service_disabled template compatible with Ansible 2.14 (Milan Lysonek) 2024-11-27 21:46:23.127 logging.py DEBUG - Revert "Align service_disabled template to service_enabled" (Milan Lysonek) 2024-11-27 21:46:23.128 logging.py DEBUG - clean up rule_dir_json.py import (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - sysctl: remove settings in /usr/local/lib/sysctl.d (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - sysctl: Align Ansible and Bash remediations (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Extend OVAL check to ignore .bash_history file (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Include test scenario to test .bash_history treatment (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Update remediation to skip .bash_profile file (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Update checktext for RHEL-08-020352 (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - sysctl: Check /usr/local/lib/sysctl.d for configs (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Add tests for sysctls in /usr/local/lib/sysctl.d (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Add SRG XLSX files to the build system (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Add --quiet to rule_dir_json (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Change more rule to rules (anivan-suse) 2024-11-27 21:46:23.128 logging.py DEBUG - Change rule to rules (anivan-suse) 2024-11-27 21:46:23.128 logging.py DEBUG - Fix type and bash line (anivan-suse) 2024-11-27 21:46:23.128 logging.py DEBUG - Remove deprecated warn parameter from Ansbile command module (Milan Lysonek) 2024-11-27 21:46:23.128 logging.py DEBUG - Remove remove_multiple_blank_lines function as it's no longer used (Milan Lysonek) 2024-11-27 21:46:23.128 logging.py DEBUG - CMP-1389: SRG-APP-000014-CTR-000040: Needs an automated rule to check for TLS Security Profile (Bharath B) 2024-11-27 21:46:23.128 logging.py DEBUG - Ignore results files from testing (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Update gitignore (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Do not remove blank lines when building profile playbook (Milan Lysonek) 2024-11-27 21:46:23.128 logging.py DEBUG - Align service_disabled template to service_enabled (Milan Lysonek) 2024-11-27 21:46:23.128 logging.py DEBUG - accounts_password_pam_retry: Add test for dupes and conflicts (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - accounts_password: Add tests for conflicting and duplicate values (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - accounts_password: Rename param conflict test (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - ssg/build_cpe: check if the reference of CPE item is not parametrized platform id (Vojtech Polasek) 2024-11-27 21:46:23.128 logging.py DEBUG - Remove unnecessary metric (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - add helper function to extract only the base name from parametrized platform name (Vojtech Polasek) 2024-11-27 21:46:23.128 logging.py DEBUG - Fix title in requirement 2.2.9 for cis_rhel8 (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - ssg/boolean_expression.py: more friendly naming of arguments (Vojtech Polasek) 2024-11-27 21:46:23.128 logging.py DEBUG - Include hint to update PYTHONPATH (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - sshd_lineinfile: Add tests for duplicated params (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Include new maintainers teams in CODEOWNERS (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Add test for duplicated SSHD parameter (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Separate the SSHD parameter from the value (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Add tests to check for RekeyLimit conflicts (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - use varible for ocp version detection (Vincent Shen) 2024-11-27 21:46:23.128 logging.py DEBUG - Address reviewer comments in 9778 (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Add sle platform for relevant accounts_password_pam_unix_remember test scripts (teacup-on-rockingchair) 2024-11-27 21:46:23.128 logging.py DEBUG - Enable sle12 support for accounts_password_pam_unix_remember bash and ansible remediation (teacup-on-rockingchair) 2024-11-27 21:46:23.128 logging.py DEBUG - Add CCE for sle12 to accounts_password_pam_unix_remember (teacup-on-rockingchair) 2024-11-27 21:46:23.128 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Pull openpyxl pandas from the Debian 10 tests (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Add more guarding of the smoke tests (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Sure CMake fixtures for rules_dir_json and SRG Export dependacies (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - add cis code (anivan-suse) 2024-11-27 21:46:23.128 logging.py DEBUG - Change rpm command (anivan-suse) 2024-11-27 21:46:23.128 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - allow passing of parameters when creating the platform (Vojtech Polasek) 2024-11-27 21:46:23.128 logging.py DEBUG - enhance the boolean_expression.Symbol class to handle parameters and store them (Vojtech Polasek) 2024-11-27 21:46:23.128 logging.py DEBUG - Add test for param conflicts for SSH compression (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - add new function to apply formatting on dictionary values (Vojtech Polasek) 2024-11-27 21:46:23.128 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Document rule deprecation instructions and agreements (Marcus Burghardt) 2024-11-27 21:46:23.128 logging.py DEBUG - Update profile stability test data (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Add opensc_card_drivers rules to sle12 platform (teacup-on-rockingchair) 2024-11-27 21:46:23.128 logging.py DEBUG - Add dconf_gnome_screensaver_idle_activation_enabled to sle12 platform (teacup-on-rockingchair) 2024-11-27 21:46:23.128 logging.py DEBUG - Enable install_hids for sle12 platform (teacup-on-rockingchair) 2024-11-27 21:46:23.128 logging.py DEBUG - Fix pandas dep in CI (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Add openpyxl to CI so that smoke tests run (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Add smoke test for the compare_ds script (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Add smoke test for the srg-diff script (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - Add smoke test for the create_srg_export script (Matthew Burket) 2024-11-27 21:46:23.128 logging.py DEBUG - OCP4: Don't select ocp4-node-on-ovn rules for NIST high profile (Jakub Hrozek) 2024-11-27 21:46:23.128 logging.py DEBUG - OCP4: 4.12 uses ebs.csi.aws.com not kubernetes.io/aws-ebs as storage provisioner on AWS (Jakub Hrozek) 2024-11-27 21:46:23.128 logging.py DEBUG - Change verbiage on idle timeout rule (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Add test to check for configuration conflicts (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Check all instances of ClientAliveCountMax (Watson Sato) 2024-11-27 21:46:23.128 logging.py DEBUG - Add tests to check for configuration conflicts (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Change verbiage on keepalive rules (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - RHEL8 STIG v1R8 requires ClientAliveCountMax 1 (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Fix broken Automatus CI jobs (Jan Černý) 2024-11-27 21:46:23.129 logging.py DEBUG - Add error messages (anivan-suse) 2024-11-27 21:46:23.129 logging.py DEBUG - Remove execute permission from SCAP content (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Remove execute permission from SCAP content (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Add rule name (anivan-suse) 2024-11-27 21:46:23.129 logging.py DEBUG - Include fedora in the prodtype list and test scenarios (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Update RHEL7 STIG to V3R9 (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R9 (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R9 (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Update RHEL8 STIG to V1R8 (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R7 (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R8 (Watson Sato) 2024-11-27 21:46:23.129 logging.py DEBUG - merge two if statements (Vojtech Polasek) 2024-11-27 21:46:23.129 logging.py DEBUG - fix blank lines to align with pep8 (Vojtech Polasek) 2024-11-27 21:46:23.129 logging.py DEBUG - extract functions for getting platform names and cpe names related to remediations (Vojtech Polasek) 2024-11-27 21:46:23.129 logging.py DEBUG - unify definition of remediatiojObject (Vojtech Polasek) 2024-11-27 21:46:23.129 logging.py DEBUG - Ignore errors on semanage command when SELinux is not used (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Add sorted results to srg_diff (Matthew Burket) 2024-11-27 21:46:23.129 logging.py DEBUG - Increment remediation to ensure correct SELinux fcontext (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Removed STIG references from account_passwords_pam_faillock_dir (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Change manual page name to pam_faillock in lowercase (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Include RHEL identifiers to the more complete rule (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - update build_remediations.py to reflect changes in XCCDF platform API (Vojtech Polasek) 2024-11-27 21:46:23.129 logging.py DEBUG - Include deprecation warning for duplicated rule (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Fix the stigid reference for RHEL8 (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Update SRG to use more complete rule for pam_faillock dir (Marcus Burghardt) 2024-11-27 21:46:23.129 logging.py DEBUG - Use the proper variable in bash remediation (Marcus Burghardt) 2024-11-27 21:46:23.131 logging.py DEBUG - Use the existing variable in fixtext instead of static value (Marcus Burghardt) 2024-11-27 21:46:23.131 logging.py DEBUG - Improve ocil and ocil_clause to be more clear (Marcus Burghardt) 2024-11-27 21:46:23.131 logging.py DEBUG - Include srg_requirement in accounts_passwords_pam_faillock_dir (Marcus Burghardt) 2024-11-27 21:46:23.131 logging.py DEBUG - change api for getting of remediation conditionla s from XCCDF platforms (Vojtech Polasek) 2024-11-27 21:46:23.131 logging.py DEBUG - Remove STIGIDs from deprecated rule (Watson Sato) 2024-11-27 21:46:23.131 logging.py DEBUG - Fix sloppy typing and spacing errors (anivan-suse) 2024-11-27 21:46:23.131 logging.py DEBUG - Fix nmcli bug (anivan-suse) 2024-11-27 21:46:23.131 logging.py DEBUG - products/anolis8: supports Anolis OS 8 (YiLin.Li) 2024-11-27 21:46:23.131 logging.py DEBUG - Fix - 2 new rules (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - OCP4: Mark file_{owner,groupowner,permissions}_openshift_sdn_cniserver_config as NOT-APPLICABLE on OCP 4.12 (Jakub Hrozek) 2024-11-27 21:46:23.132 logging.py DEBUG - OCP4: Mark file_{owner,groupowner,permissions}_ip_allocations as NOT-APPLICABLE on OCP 4.12 (Jakub Hrozek) 2024-11-27 21:46:23.132 logging.py DEBUG - OCP4: file_{owner,groupowner,permissions}_proxy_kubeconfig should be NOT_APPLICABLE on 4.12+ (Jakub Hrozek) 2024-11-27 21:46:23.132 logging.py DEBUG - Fix misnamed rule (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Add loopback rules (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Make the utils/srg_diff.py more generic (Matthew Burket) 2024-11-27 21:46:23.132 logging.py DEBUG - OCP4: improve rule scc_limit_container_allowed_capabilities instruction (Vincent Shen) 2024-11-27 21:46:23.132 logging.py DEBUG - Fix Automatus --duplicate-templates (Jan Černý) 2024-11-27 21:46:23.132 logging.py DEBUG - Remove text (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Add section to SRG Diff to highlight missing CCEs (Matthew Burket) 2024-11-27 21:46:23.132 logging.py DEBUG - Remove cces and fix bash (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Add shadow rule to pci-dss-4 (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Add new rule ensure_shadow_group_empty (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Add CIS and ANSSI machine hardening tests for TF (Milan Lysonek) 2024-11-27 21:46:23.132 logging.py DEBUG - OCP4 update rule general-default-seccomp-profile (Vincent Shen) 2024-11-27 21:46:23.132 logging.py DEBUG - Consider the last field the log file path (Watson Sato) 2024-11-27 21:46:23.132 logging.py DEBUG - Add test cases identical to the cloudinit conf (Watson Sato) 2024-11-27 21:46:23.132 logging.py DEBUG - OCP4: lowercase several rules (Jakub Hrozek) 2024-11-27 21:46:23.132 logging.py DEBUG - OCP4: Add more test manifests (Jakub Hrozek) 2024-11-27 21:46:23.132 logging.py DEBUG - Load and preprocess the template individually (Watson Sato) 2024-11-27 21:46:23.132 logging.py DEBUG - CCI -> CCE in srg_diff (Matthew Burket) 2024-11-27 21:46:23.132 logging.py DEBUG - Updates according to DISA updates published on 21.10.2022 (rumch-se) 2024-11-27 21:46:23.132 logging.py DEBUG - Rename and align extracted functions (Watson Sato) 2024-11-27 21:46:23.132 logging.py DEBUG - Remove Builder() from RuleChecker() (Watson Sato) 2024-11-27 21:46:23.132 logging.py DEBUG - Extract non-building functions from Builder() (Watson Sato) 2024-11-27 21:46:23.132 logging.py DEBUG - Update tests in dconf related rules (Edgar Aguilar) 2024-11-27 21:46:23.132 logging.py DEBUG - Align bash dconf macros with corresponding OVAL (Edgar Aguilar) 2024-11-27 21:46:23.132 logging.py DEBUG - Remove deprecated code (Jan Černý) 2024-11-27 21:46:23.132 logging.py DEBUG - Removed extra spaces in test scenarios (Marcus Burghardt) 2024-11-27 21:46:23.132 logging.py DEBUG - Include test scenarios with stig banner for ubuntu (Marcus Burghardt) 2024-11-27 21:46:23.132 logging.py DEBUG - Remove the harmful text from fapolicyd_prevent_home_folder_access (Matthew Burket) 2024-11-27 21:46:23.132 logging.py DEBUG - Add tests to accounts_password template (Edgar Aguilar) 2024-11-27 21:46:23.132 logging.py DEBUG - Clean up import sections (Matej Tyc) 2024-11-27 21:46:23.132 logging.py DEBUG - Split profile functionality from build_yaml (Matej Tyc) 2024-11-27 21:46:23.132 logging.py DEBUG - remove cceids from txt file (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Add Rules (anivan-suse) 2024-11-27 21:46:23.132 logging.py DEBUG - Add note about history (Watson Sato) 2024-11-27 21:46:23.132 logging.py DEBUG - Example how to create two PRs from a single branch (Watson Sato) 2024-11-27 21:46:23.133 logging.py DEBUG - How to relocate a fix from one to another (Watson Sato) 2024-11-27 21:46:23.133 logging.py DEBUG - Reformat example how to port fix between branches (Watson Sato) 2024-11-27 21:46:23.133 logging.py DEBUG - Update profiles for profile_stability tests (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Update SRG to use rule with consistent name (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Update rule name in OL8 STIG profile (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Update rule name in RHEL8 STIG profile (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Remove duplicated ids from OVAL (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Include deprecation warning in disaligned rule (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Create accounts_passwords_pam_faillock_audit rule (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Align test scenario scripts with banner_etc_issue rule (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Align the OVAL to the project style guide (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - Include missing platforms in remediations (Marcus Burghardt) 2024-11-27 21:46:23.133 logging.py DEBUG - remove no longer used imports and fix flak8 issues in templates.py (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - store templating languages in dict instead of list (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - drop usage of getiterator because we support only Python 2.7, not older (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - add forgotten __init__.py (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - extract function which converts "true" or "false" from yaml to booleans (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - add correct dependencies to cmake file (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - template handling: redesign how templating languages are defined (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - remove no longer valid comment (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - improve dictionary iteration (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - remove no longer used method (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - correctly raise an exception instead of printing a message (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - fixing issues reported by flake8 and codeclimate in modified files (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - remove function which was forgotten when extracting XCCDFEntity class (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - modify tests to use new way of initializing ProductCPEs (Vojtech Polasek) 2024-11-27 21:46:23.133 logging.py DEBUG - deduplicate code (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - rework adding of CPE items and product CPE items (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - add explanatory comment (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - Improve product CPEs (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - Support for compiled CPE items (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - Support reading content CPES from individual yaml files (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - Allow compiled content file names to contain dots (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - Extract XCCDFEntity class to be used in other module files (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - Add PCI-DSS rules (anivan-suse) 2024-11-27 21:46:23.134 logging.py DEBUG - Add PCI-DSS rules and update cceid (anivan-suse) 2024-11-27 21:46:23.134 logging.py DEBUG - Remove fapolicyd_prevent_home_folder_access from the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.134 logging.py DEBUG - Update SLE 15 SAP hardening profile (sampsone) 2024-11-27 21:46:23.134 logging.py DEBUG - Improvements based on review discussion (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Include Ansible remediation for banner_etc_issue_net (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Update requirement 1.7.3 for CIS RHEL7 (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Include RHEL in prodtype for banner_etc_issue_net rule (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - add tests (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - add Ansible remediation (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - add Bash remediation and change macro (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - add OVAL check (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - add rule and associated variable (Vojtech Polasek) 2024-11-27 21:46:23.134 logging.py DEBUG - OCP4: Check ownership and permission of OVN DB files (Jakub Hrozek) 2024-11-27 21:46:23.134 logging.py DEBUG - Add correct_value, profile independent test to rule (Edgar Aguilar) 2024-11-27 21:46:23.134 logging.py DEBUG - Add tests for file_ownership_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.134 logging.py DEBUG - Add tests for force_opensc_card_drivers (Edgar Aguilar) 2024-11-27 21:46:23.134 logging.py DEBUG - Add tests for configure_opensc_card_drivers (Edgar Aguilar) 2024-11-27 21:46:23.134 logging.py DEBUG - Reformulate the release_process documentation (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Added 4 rules to SLES 12/15 PCI DSS 4.0 profiles (rumch-se) 2024-11-27 21:46:23.134 logging.py DEBUG - OCP4: check file permissions and ownership of ovn-cni-server.sock (Jakub Hrozek) 2024-11-27 21:46:23.134 logging.py DEBUG - Clarify how the branches are syncronized (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Remove process to sincronize branches (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Fix CCE-86042-9 in the list of available CCEs (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Update requirement 1.7.6 for CIS RHEL7 (Marcus Burghardt) 2024-11-27 21:46:23.134 logging.py DEBUG - Update requirement 1.7.6 for CIS RHEL8 (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Create file_owner_etc_issue_net rule (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Create file_groupowner_etc_issue_net rule (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Create file_permissions_etc_issue_net rule (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Added SLES 15/12 CCE codes related to the rules ...backup_etc_group (rumch-se) 2024-11-27 21:46:23.135 logging.py DEBUG - Update pci-dss-4.profile (rumch-se) 2024-11-27 21:46:23.135 logging.py DEBUG - Fix test_id_translate.py to work with Python 2.7 (Matthew Burket) 2024-11-27 21:46:23.135 logging.py DEBUG - Improve regex to detect ifcfg files (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Remediation applicable to all NetworkManager connections (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Optimize test scenarios (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Adjust the OCP OVN platform detection for 4.12 (Jakub Hrozek) 2024-11-27 21:46:23.135 logging.py DEBUG - Created SLES 12 PCI DSS 4.0 profile and added rules to it (rumch-se) 2024-11-27 21:46:23.135 logging.py DEBUG - Add pci-ds rules (anivan-suse) 2024-11-27 21:46:23.135 logging.py DEBUG - Improve wording on warning about custom ssh.xml (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Simplify the Bash remediation in alignment to Ansible (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Trim nmcli connection names output (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Fix loop over array in bash remediation (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Introduce new Ansible remediation (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Recreated OVAL assessment for firewalld_sshd_port_enabled (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Reinvent the test scenarios for firewalld_sshd_port_enabled (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Review test scenario scripts (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Include warning message regarging custom SSH port (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Increase robustness of firewalld_sshd_port_enabled bash remediation (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Improve rule descriptions for firewalld_sshd_port_enabled (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - Include section of review hints in PR template (Marcus Burghardt) 2024-11-27 21:46:23.135 logging.py DEBUG - CCE codes added to the rule sshd_set_max_sessions (rumch-se) 2024-11-27 21:46:23.135 logging.py DEBUG - Docs/developer: Mention that rules will inherit its group(s) platforms (Evgeny Kolesnikov) 2024-11-27 21:46:23.135 logging.py DEBUG - Update docs/manual/developer/05_tools_and_utilities.md (Gabriel Becker) 2024-11-27 21:46:23.135 logging.py DEBUG - Make sure xatrr audit rules contains a check for root user on Ubuntu (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - Remove unused import (Jan Černý) 2024-11-27 21:46:23.135 logging.py DEBUG - Add an unit test for the to_ocil() method (Jan Černý) 2024-11-27 21:46:23.135 logging.py DEBUG - Add unit tests for warnings and sub elements (Jan Černý) 2024-11-27 21:46:23.135 logging.py DEBUG - Added rules to PCI DSS 4.0 SLES 15 profile (rumch-se) 2024-11-27 21:46:23.135 logging.py DEBUG - Ubuntu 20.04 CIS: add package_pam_pwquality_installed for the case where (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - install_smartcard_packages: Add Ubuntu specific remediation (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - rsyslog_remote_access_monitoring: Fix oval regex to avoid commented lines (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - rsyslog_remote_access_monitoring: Fix shared bash regex to avoid commented lines (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - ensure_rsyslog_log_file_configuration: Add Ubuntu specific bash (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - Add a test with a rule without CCE (Jan Černý) 2024-11-27 21:46:23.135 logging.py DEBUG - dir_perms_world_writable_sticky_bits: Update test remediation (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - dir_perms_world_writable_sticky_bits: Improve bash to avoid (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - dir_perms_world_writable_sticky_bits: Add ubuntu platform to bash (Eduardo Barretto) 2024-11-27 21:46:23.135 logging.py DEBUG - Add documentation about automatically adding CCE feature. (Gabriel Becker) 2024-11-27 21:46:23.136 logging.py DEBUG - Add newlines to SLES CCE available files. (Gabriel Becker) 2024-11-27 21:46:23.136 logging.py DEBUG - Remove broken link to CCE documentation. (Gabriel Becker) 2024-11-27 21:46:23.136 logging.py DEBUG - Add support to SLES CCE available codes in add-cce tool. (Gabriel Becker) 2024-11-27 21:46:23.136 logging.py DEBUG - Use diff_files instead of diff_trees (Jan Černý) 2024-11-27 21:46:23.136 logging.py DEBUG - Added 2 SLES 15/12 CCE codes to the rule disable_prelink (rumch-se) 2024-11-27 21:46:23.136 logging.py DEBUG - Remove expected items from the diff (Jan Černý) 2024-11-27 21:46:23.136 logging.py DEBUG - SLES 12/15 codes updates (rumch-se) 2024-11-27 21:46:23.136 logging.py DEBUG - Add xmldiff to the documentation (Jan Černý) 2024-11-27 21:46:23.136 logging.py DEBUG - Add a test for no prexisting confing in rsyslog_remote_tls (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - Update bash remedation for rsyslog_remote_tls (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - Ignore errors on rsyslog_remote_tls Ansible (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - remove ospp-mls.profile (Jiri Jaburek) 2024-11-27 21:46:23.136 logging.py DEBUG - Free and used CCE codes for SLES 12/15 OSes (rumch-se) 2024-11-27 21:46:23.136 logging.py DEBUG - Assign RHEL-07-010271 to account_emergency_expire_date. (Gabriel Becker) 2024-11-27 21:46:23.136 logging.py DEBUG - CIS: Update etcd encryption provider rationale (Matt Rogers) 2024-11-27 21:46:23.136 logging.py DEBUG - service_ntp_enabled: Fix description as service name is ntp (Eduardo Barretto) 2024-11-27 21:46:23.136 logging.py DEBUG - Fix Ubuntu 20.04 cis_level1_server profile for grub2 password (Eduardo Barretto) 2024-11-27 21:46:23.136 logging.py DEBUG - Fix Ubuntu 20.04 stig profile for grub2 password (Eduardo Barretto) 2024-11-27 21:46:23.136 logging.py DEBUG - grub2_uefi_password: Add Ubuntu specific OVAL (Eduardo Barretto) 2024-11-27 21:46:23.136 logging.py DEBUG - Fix grub2_uefi_boot_path for Ubuntu 20.04 (Eduardo Barretto) 2024-11-27 21:46:23.136 logging.py DEBUG - root_permissions_syslibrary_files: Re-add tests that were removed in 3800451 (Eduardo Barretto) 2024-11-27 21:46:23.136 logging.py DEBUG - corrected yaml value checks (Bharath B) 2024-11-27 21:46:23.136 logging.py DEBUG - corrected rule name in SRG CTR (Bharath B) 2024-11-27 21:46:23.136 logging.py DEBUG - Add pcidss Req-ids (anivan-suse) 2024-11-27 21:46:23.136 logging.py DEBUG - Use conditional import of xlmdiff and lxml (Jan Černý) 2024-11-27 21:46:23.136 logging.py DEBUG - Use xmldiff in unit tests of to_xml_element methods (Jan Černý) 2024-11-27 21:46:23.136 logging.py DEBUG - corrected indentation (Bharath B) 2024-11-27 21:46:23.136 logging.py DEBUG - Remove unit tests that check expected properties (Jan Černý) 2024-11-27 21:46:23.136 logging.py DEBUG - Update products/sle12/profiles/pci-dss.profile (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Update products/sle12/profiles/pci-dss.profile (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Add an empty last line to the file (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Set var_smartcard_drivers variable in the PCIDSS control file (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Add PCI-DSS v4 related rules in separate profile (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Change reference to PCI standard to correct version (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Add tally2 rules instead of faillock-based for sle12 platform (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Rename pcidss 3.2.1 to pcidss 3 (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Fix syntax errors in control format (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Fix missing CCEs for PCI-DSS (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Add PCI-DSS control for v.3.2.1 and SLE profiles to include it (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Add sle12 platform and missing CCE and PCIDSS references to rules related to PCIDSS effort for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:23.136 logging.py DEBUG - Remove docs for utils scripts that have been moved (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - Update links to documents for myst (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - Update docs about SCAP 1.2 content. (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - Allow linking to headers (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - Fix links in tests/README.md (Matthew Burket) 2024-11-27 21:46:23.136 logging.py DEBUG - Fix OL documentation links (Federico Ramirez) 2024-11-27 21:46:23.136 logging.py DEBUG - Add tests to rule (Edgar Aguilar) 2024-11-27 21:46:23.136 logging.py DEBUG - Refactor DISA content diff functions. (Gabriel Becker) 2024-11-27 21:46:23.136 logging.py DEBUG - Assigned 6 SLES 12/15 CCE codes to rules related to coredumps (rumch-se) 2024-11-27 21:46:23.136 logging.py DEBUG - Revert "6 SLES 12/15 CCE codes related to coredumps" (rumch-se) 2024-11-27 21:46:23.136 logging.py DEBUG - 6 SLES 12/15 CCE codes related to coredumps (rumch-se) 2024-11-27 21:46:23.137 logging.py DEBUG - renamed ocp_secure_allowed_registries_for_import rule (Bharath B) 2024-11-27 21:46:23.137 logging.py DEBUG - Fix config file and interpreter check control flow (win97pro) 2024-11-27 21:46:23.137 logging.py DEBUG - Add tests to sebool template (Edgar Aguilar) 2024-11-27 21:46:23.137 logging.py DEBUG - root_permissions_syslibrary_files: Re-add file_regex otherwise (Eduardo Barretto) 2024-11-27 21:46:23.137 logging.py DEBUG - Include the status tag in SRG-OS-000163-GPOS-00072 (Marcus Burghardt) 2024-11-27 21:46:23.137 logging.py DEBUG - Fix the total used to calculate general stats (Marcus Burghardt) 2024-11-27 21:46:23.137 logging.py DEBUG - Do not process checks from templates by Jinja (Jan Černý) 2024-11-27 21:46:23.137 logging.py DEBUG - Extract variable oval_file_path (Jan Černý) 2024-11-27 21:46:23.137 logging.py DEBUG - Use a negative condition and a continue (Jan Černý) 2024-11-27 21:46:23.137 logging.py DEBUG - Use negative condition and continue (Jan Černý) 2024-11-27 21:46:23.137 logging.py DEBUG - Add unit tests for CPEAL when conditionals are empty. (Gabriel Becker) 2024-11-27 21:46:23.137 logging.py DEBUG - Remove comparison utilities (Jan Černý) 2024-11-27 21:46:23.137 logging.py DEBUG - Remove definition_location paths (Jan Černý) 2024-11-27 21:46:23.137 logging.py DEBUG - OCP: change default kubelet tlscipher (Vincent Shen) 2024-11-27 21:46:23.137 logging.py DEBUG - Fix CCE ids (teacup-on-rockingchair) 2024-11-27 21:46:23.137 logging.py DEBUG - Add rpm_verify_permissions and rpm_verify_hashes rules sle12 support (teacup-on-rockingchair) 2024-11-27 21:46:23.137 logging.py DEBUG - Remove Travis CI (Matthew Burket) 2024-11-27 21:46:23.137 logging.py DEBUG - Added 4 SLES 15/12 codes to the rules group_unique_id/name (rumch-se) 2024-11-27 21:46:23.137 logging.py DEBUG - Added SLES 15 CCE and STIG ID code to the rule (rumch-se) 2024-11-27 21:46:23.137 logging.py DEBUG - Added CCE number for SLES_15 in the rule sshd_use_approved_ciphers (rumch-se) 2024-11-27 21:46:23.137 logging.py DEBUG - Sort the list of ids in json output (Marcus Burghardt) 2024-11-27 21:46:23.137 logging.py DEBUG - Include small function to order output list (Marcus Burghardt) 2024-11-27 21:46:23.137 logging.py DEBUG - Refactor json output function in controleval.py (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Fix typos. (Gabriel Becker) 2024-11-27 21:46:23.138 logging.py DEBUG - Complete 1.4.2 requirement for CIS RHEL7 v3.1.1 (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - New rules for permissions check on user.cfg file (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - New rules for owner check on user.cfg file (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - New rules for groupowner check on user.cfg file (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Add unit tests for conversion to XCCDF 1.2 (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Check if the values are not None (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - incorporated comments to remove CCE reference IDs used (Bharath B) 2024-11-27 21:46:23.138 logging.py DEBUG - Add dconf_gnome_disable_user_list to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Add PSC for dconf_gnome_disable_user_list (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Clean up checktext in audit_rules_login_events_tallylog (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Remove double text from sysctl_fs_protected_symlinks checktext (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Add sudo sysctl_kernel_kptr_restrict psc (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Fix path in /var/log/faillock psc (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Fix postfix_client_configure_mail_alias_postmaster checktext (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Add import-or-skip for lxml (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Skip test if xmldiff isn't available (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Add a test with xmldiff (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Add missing asserts (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Make oval_unix_namespace defintion a global (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Change unit tests for translate() (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Refactor by using a dictionary (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Reduce test data input (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Create unit tests for ssg.id_translate (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Create mount_option_home_grpquota rule for CIS (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Create mount_option_home_usrquota rule for CIS (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Fix order of cce-ids (anivan-suse) 2024-11-27 21:46:23.138 logging.py DEBUG - Add PCI-DSS Rules (anivan-suse) 2024-11-27 21:46:23.138 logging.py DEBUG - corrected identifiers format (Bharath B) 2024-11-27 21:46:23.138 logging.py DEBUG - incorporated comments to add ocil_clause (Bharath B) 2024-11-27 21:46:23.138 logging.py DEBUG - Fix Code Climate problems (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Add unit tests for ssg/build_renumber.py (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Cover the CIS 1.8.5 requirement for RHEL8 v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Cover the CIS 1.8.4 requirement for RHEL8 v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Cover the CIS 1.8.3 requirement for RHEL8 v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Delete test from accounts_umask_etc_login_defs (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Added sle support to sshd_set_max_auth_tries/ansible/shared.yml file (rumch-se) 2024-11-27 21:46:23.138 logging.py DEBUG - Added 6 SLES 15/12 CCE codes to the rules sshd_... (rumch-se) 2024-11-27 21:46:23.138 logging.py DEBUG - Use of variables in calculations and PEP8 fixes (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Substitute newlines with breaks in texts (Matej Tyc) 2024-11-27 21:46:23.138 logging.py DEBUG - Add support for templated rules (Matej Tyc) 2024-11-27 21:46:23.138 logging.py DEBUG - Added 6 SLES-15/12 CCE codes to the rules ..._backup_etc_shadow (rumch-se) 2024-11-27 21:46:23.138 logging.py DEBUG - Added SLES 15/12 codes to rules ..._backup_etc_passwd (rumch-se) 2024-11-27 21:46:23.138 logging.py DEBUG - Update ol products yaml files (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Update tests in service_enabled template (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Update test in kernel_module_disable template (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Update tests in wireless_disable_interfaces (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Update platform and fix in typo in tests of rule (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Update tests in sshd_use_priv_separation (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Fix tests in accounts_umask_etc_login_defs (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Add tests to mount_option template (Edgar Aguilar) 2024-11-27 21:46:23.138 logging.py DEBUG - Update CMake minimum version (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Add status output in cmake for SCE content (Matthew Burket) 2024-11-27 21:46:23.138 logging.py DEBUG - Summarize rule fields into a single HTML file. (Matej Tyc) 2024-11-27 21:46:23.138 logging.py DEBUG - Include coverage statistic in the output (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Remove superfluous XML namespaces from HTML tables (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Remove get_fixgroup_for_type (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Improve the stats output (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Make it optional to output the controls (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Separete functions to manipulate lists and output (Marcus Burghardt) 2024-11-27 21:46:23.138 logging.py DEBUG - Remove unused XSLT xccdf2table-profileanssirefs.xslt (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - SLES 15/12 CCE codes were added to 2 rules related to avahi-daemon and cups service (rchikov) 2024-11-27 21:46:23.138 logging.py DEBUG - Remove XCCDF 1.1 from get_profile_choices_for_input (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Stop iterating over both XCCDF 1.1 and XCCDF 1.2 (Jan Černý) 2024-11-27 21:46:23.138 logging.py DEBUG - Fix editorconfig (Matej Tyc) 2024-11-27 21:46:23.138 logging.py DEBUG - Remove unused import (Jan Černý) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove XCCDF 1.1 from profile tool (Jan Černý) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove XCCDF 1.1 from enable_derivatives.py (Jan Černý) 2024-11-27 21:46:23.139 logging.py DEBUG - Automated rule to check for insecure image registries (Bharath B) 2024-11-27 21:46:23.139 logging.py DEBUG - Add pci-dss rules (anivan-suse) 2024-11-27 21:46:23.139 logging.py DEBUG - Introduce pci-dss profile for OL9 (Edgar Aguilar) 2024-11-27 21:46:23.139 logging.py DEBUG - Require a Github account for gitpod.io workshops (Jiri Jaburek) 2024-11-27 21:46:23.139 logging.py DEBUG - Fix a bug in the remediation condition when using CPE AL. (Gabriel Becker) 2024-11-27 21:46:23.139 logging.py DEBUG - Refactor code that generates HTML output (Matej Tyc) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove jinja condition to make rule applicability to all products. (Gabriel Becker) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove "note" superfluous field from the controls file format. (Gabriel Becker) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove check for OpenSCAP OVAL version as that is no longer needed (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove duplicated and unnecessary test (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Refactor calculation of implicit status (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Simplify the calculation of assessed controls (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Refactor how the controls are calculated (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Two small corrections (rumch-se) 2024-11-27 21:46:23.139 logging.py DEBUG - Added SLES_15/12 CCE codes related to rules in the group restict_at_cron_users (rumch-se) 2024-11-27 21:46:23.139 logging.py DEBUG - Introduce cui profile for OL9 (Edgar Aguilar) 2024-11-27 21:46:23.139 logging.py DEBUG - Address CodeClimate coments (Edgar Aguilar) 2024-11-27 21:46:23.139 logging.py DEBUG - Extended controls.Status class to return status list (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Added 8 SLES 15/12 CCE codes to rules related to group restrict_at_cron_users (rumch-se) 2024-11-27 21:46:23.139 logging.py DEBUG - Extented the json function to include all available status (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Include controls for product argument (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove intentions before list items (Jan Černý) 2024-11-27 21:46:23.139 logging.py DEBUG - Add indentation before list items (Jan Černý) 2024-11-27 21:46:23.139 logging.py DEBUG - rearrange cce-ids (anivan-suse) 2024-11-27 21:46:23.139 logging.py DEBUG - Sort cce-ids (anivan-suse) 2024-11-27 21:46:23.139 logging.py DEBUG - Improve argparse descriptions and readability (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Added 2 SLES15/12 CCE codes to the rule service_rpcbind_disabled (rumch-se) 2024-11-27 21:46:23.139 logging.py DEBUG - Order the imported modules alphabetically (Marcus Burghardt) 2024-11-27 21:46:23.139 logging.py DEBUG - Fix incorrect variable reference (Dan Clark) 2024-11-27 21:46:23.139 logging.py DEBUG - Fix issues found in code review for #9574 (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Remove 5.10 oval_version attributes (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Update sysctl documentation (Edgar Aguilar) 2024-11-27 21:46:23.139 logging.py DEBUG - Update sysctl template's OVAL (Edgar Aguilar) 2024-11-27 21:46:23.139 logging.py DEBUG - Add rule id to titles for srg_diff (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Minor bug fix for srg diff (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Use rule id in SRG Diff for missing rules (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Fix SRG Diff html to be smaller (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Fix more Code Climate issues (Matthew Burket) 2024-11-27 21:46:23.139 logging.py DEBUG - Handle rules addd in new content (Watson Sato) 2024-11-27 21:46:23.139 logging.py DEBUG - Add more pci-dss rules (anivan-suse) 2024-11-27 21:46:23.139 logging.py DEBUG - Fix handling of rule missing in new datastream (Watson Sato) 2024-11-27 21:46:23.140 logging.py DEBUG - Added 10 SLES_15/12 codes to the rules file_permissions_cron_ (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Make CodeClimate to use .editorconfig (Matej Tyc) 2024-11-27 21:46:23.140 logging.py DEBUG - Remove function drop_oval_definitions (Jan Černý) 2024-11-27 21:46:23.140 logging.py DEBUG - Implementation of proposed changes (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Add pci-dss rules (anivan-suse) 2024-11-27 21:46:23.140 logging.py DEBUG - Change list to not use numbers (Jan Černý) 2024-11-27 21:46:23.140 logging.py DEBUG - Fix up mdl findings docs/manual/developer/05_tools_and_utilities.md (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Fix Code Climate issues (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Reduce the pickyness of radon for codeclimate (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Fix handling of < and > in the import_srg script (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Add some more formatting to 05_tools_and_utilities.md (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Add docs for utils/srg_diff.py (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Add SRG Diff script (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Fix vuldiscussion in SRG export (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Only load policy specific content if the rule doesn't already have it (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Update Rule.read_policy_specific_content to handle None env_yaml (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Import STIG content for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Remove duplicated CCE. (Gabriel Becker) 2024-11-27 21:46:23.140 logging.py DEBUG - Implementation of proposed changes (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Added SLES 15/12 CCE codes to different rules related to sshd (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Some corrections in rule service_rsyncd_disabled. (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Add PR gating guideline (Matej Tyc) 2024-11-27 21:46:23.140 logging.py DEBUG - Added 2 SLES15/12 CCE codes to the rule file_permissions_crontab (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Added a CCE code (SLES 12) for the rule 'Enable cron Service' (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Fix more OVAL 5.10 references (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - OCP4: Install FIO from the right catalog (Jakub Hrozek) 2024-11-27 21:46:23.140 logging.py DEBUG - Added 2 SLES-15/12' CCE codes for the rule package_net-snmp-removed (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Fix backend_krb5_config in configure_kerberos_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Added 2 SLES-15/12' CCE codes to the rule package_samba_removed (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Added 2 SLES15/12' CCE codes to the rule package_httpd_removed (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Added 2 SLES-15/12' CCE codes for the rule package_bind_removed (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Added two CCE codes for SLES-12/15 to the rule package_nfs-utils_removed (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Added SLES 12 and SLES 15 CCE codes to the rule package_openldap-servers_removed (rumch-se) 2024-11-27 21:46:23.140 logging.py DEBUG - Rework tests not to use separate files as templates for accounts passwords pam tally2 unlock time (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Rework tests not to use separate files as templates for accounts passwords pam tally2 (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Rework tests not to use separate files as templates (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Drop extra line (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Replace usage of bash/ansible_ensure_pam_module_options with bash/ansible_ensure_pam_module_option (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Fix duplicate CCE id (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Replace accounts_passwords_pam_faillock_unlock_time with accounts_passwords_pam_tally2_unlock_time for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Replace accounts_passwords_pam_faillock_deny_root with accounts_passwords_pam_tally2_deny_root for SLE platform (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Add accounts_passwords_pam_tally2 for cases when pam_faillock is not supported (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Drop accounts_passwords_pam_faillock_interval rule for SLE12 platform (teacup-on-rockingchair) 2024-11-27 21:46:23.140 logging.py DEBUG - Clarify instructions for implementing SCCs (Lance Bragstad) 2024-11-27 21:46:23.140 logging.py DEBUG - Remove if statements around OVAL 5.10 (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Remove OVAL 5.10 from the build system (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Remove SCAPVAL 1.2 from stablization (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Remove OVAL 5.10 from GH Actions (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - Remove ident_size for .py files from editorconfig (Matthew Burket) 2024-11-27 21:46:23.140 logging.py DEBUG - tftpd_uses_secure_mode: update rule wrt RHEL9 STIG (Matus Marhefka) 2024-11-27 21:46:23.140 logging.py DEBUG - usbguard_generate_policy: update ocil and fixtext wrt RHEL9 STIG (Matus Marhefka) 2024-11-27 21:46:23.140 logging.py DEBUG - use_pam_wheel_for_su: update fixtext, srg_requirement and add vuldiscussion (RHEL9 STIG) (Matus Marhefka) 2024-11-27 21:46:23.140 logging.py DEBUG - wireless_disable_interfaces: updated ocil and fixtext wrt RHEL9 STIG (Matus Marhefka) 2024-11-27 21:46:23.141 logging.py DEBUG - Update contributors for 0.1.64 release (Watson Sato) 2024-11-27 21:46:23.141 logging.py DEBUG - Bump version to 0.1.65 (Watson Sato) 2024-11-27 21:46:23.141 logging.py DEBUG - Re add the rule to RHEL9 data stream (Watson Sato) 2024-11-27 21:46:23.141 logging.py DEBUG - OCP4: Fix OCIL of machine_volume_encrypted (Jakub Hrozek) 2024-11-27 21:46:23.141 logging.py DEBUG - Style guide clean up (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Update the docs to use `'` vs `’` (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - xwindows_remove_packages: update srg_requirement based on RHEL9 STIG (Matus Marhefka) 2024-11-27 21:46:23.141 logging.py DEBUG - xwindows_runlevel_target: update ocil and fixtext wrt RHEL9 STIG (Matus Marhefka) 2024-11-27 21:46:23.141 logging.py DEBUG - Remove RPM verify rules from RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Use variable to remediate rule (Watson Sato) 2024-11-27 21:46:23.141 logging.py DEBUG - Fix unit tests for contributors (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Added gitmailmap validation job (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Update contributors.py based on new mailmap (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Add gitmailmap (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - OCP4: Add 4.12-specific test manifests (Jakub Hrozek) 2024-11-27 21:46:23.141 logging.py DEBUG - Remove mentions of "shorthand" from CMake (Jan Černý) 2024-11-27 21:46:23.141 logging.py DEBUG - Update documentation after shorthand removal (Jan Černý) 2024-11-27 21:46:23.141 logging.py DEBUG - Unselect rules that remove GUI from RHEL9 stig_gui (Watson Sato) 2024-11-27 21:46:23.141 logging.py DEBUG - Fix Markdown issues in 02_building_complianceascode.md (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Change to use extend and remove logic (sampsone) 2024-11-27 21:46:23.141 logging.py DEBUG - Fix create_output args in utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Add profile for SUSE SAP Public Cloud Images (sampsone) 2024-11-27 21:46:23.141 logging.py DEBUG - Fix case where get_policy_specific_content may return None vs empty string (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Add python3-mypy to CI dependencies (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Add content testing docs (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Add docs for mypy (Matthew Burket) 2024-11-27 21:46:23.141 logging.py DEBUG - Update import SRG to use policy specific content fields (Matthew Burket) 2024-11-27 21:46:23.235 logging.py DEBUG - Use the policy_specific_content for SRG export (Matthew Burket) 2024-11-27 21:46:23.235 logging.py DEBUG - Add MyPy CI Test (Matthew Burket) 2024-11-27 21:46:23.235 logging.py DEBUG - Removed the jre product. (Matthew Burket) 2024-11-27 21:46:23.235 logging.py DEBUG - Move to MyST as recommonmark and commonmark are not supported (Matthew Burket) 2024-11-27 21:46:23.235 logging.py DEBUG - Fix Code Climate issues (Jan Černý) 2024-11-27 21:46:23.235 logging.py DEBUG - Rename build_shorthand.py to build_xccdf.py (Jan Černý) 2024-11-27 21:46:23.235 logging.py DEBUG - Remove relabel_ids.py (Jan Černý) 2024-11-27 21:46:23.235 logging.py DEBUG - Relabel IDs as a part of shorthand creation (Jan Černý) 2024-11-27 21:46:23.235 logging.py DEBUG - Refactor: Extract method export_ocil_to_xml (Jan Černý) 2024-11-27 21:46:23.235 logging.py DEBUG - Add ability to export benchmark XML element from LinearLoader (Jan Černý) 2024-11-27 21:46:23.235 logging.py DEBUG - Create elements properly in OCIL namespace (Jan Černý) 2024-11-27 21:46:23.235 logging.py DEBUG - Use string type in var_event_record_qps OpenShift Variable. (Gabriel Becker) 2024-11-27 21:46:23.235 logging.py DEBUG - Fix OL7 URL documentation link. (Gabriel Becker) 2024-11-27 21:46:23.235 logging.py DEBUG - Improve the regulated content handling (Matěj Týč) 2024-11-27 21:46:23.235 logging.py DEBUG - Update OVAL to accept expected values from RHEL9 STIG profile. (Gabriel Becker) 2024-11-27 21:46:23.235 logging.py DEBUG - Removed fuse6 (Matthew Burket) 2024-11-27 21:46:23.235 logging.py DEBUG - Do not remove remediation for FIPS related rules in derivatives. (Gabriel Becker) 2024-11-27 21:46:23.235 logging.py DEBUG - add warning to sysctl_net_ipv4_conf_all_forwarding (Vojtech Polasek) 2024-11-27 21:46:23.235 logging.py DEBUG - add accounts_password_set_max_life_existing to unselect_rules_list (Vojtech Polasek) 2024-11-27 21:46:23.235 logging.py DEBUG - Disable anaconda remediation of mount_option_boot_efi_nosuid. (Gabriel Becker) 2024-11-27 21:46:23.235 logging.py DEBUG - Add support for regulated fields (Matej Tyc) 2024-11-27 21:46:23.235 logging.py DEBUG - Unselect configure_gnutls_tls_crypto_policy in RHEL9 STIG. (Gabriel Becker) 2024-11-27 21:46:23.235 logging.py DEBUG - Fix ansible lint warning (teacup-on-rockingchair) 2024-11-27 21:46:23.235 logging.py DEBUG - Use bash variable rsyslog_remote_loghost_address instead of jinja - thanks to @jan-cerny for the note (teacup-on-rockingchair) 2024-11-27 21:46:23.235 logging.py DEBUG - Drop unnecessary and wrong extra whitespaces (teacup-on-rockingchair) 2024-11-27 21:46:23.235 logging.py DEBUG - Add bash and ansible remediation for rsyslog_remote_tls (teacup-on-rockingchair) 2024-11-27 21:46:23.235 logging.py DEBUG - Fix doc error (Matthew Burket) 2024-11-27 21:46:23.235 logging.py DEBUG - Add tests to dconf_gnome_session_idle_user_locks (Edgar Aguilar) 2024-11-27 21:46:23.236 logging.py DEBUG - Fix bash conditional for and add ansible cond for container CPE. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Add custom bash/ansible conditionals for UEFI/non-UEFI CPE checks. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Add mount_option_boot_efi_nosuid to RHEL8 STIG profile. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Make rule applicable only to uefi systems mount_option_boot_efi_nosuid. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Resolve codeclimate problem (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Resolve codeclimate problem (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Remove duplicate id attribute assignment (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Remove the ssg-${product}-xccdf-1.2.xml file (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Use ssg-${PRODUCT}-xccdf.xml as dependency (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Generate XCCDF 1.2 directly (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Removed vsel (Matthew Burket) 2024-11-27 21:46:23.236 logging.py DEBUG - Introduce 'Not Applicable' platform (Edgar Aguilar) 2024-11-27 21:46:23.236 logging.py DEBUG - Remove superflous check of rule ID consistency (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Fix bash conditional for and add ansible cond for container CPE. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Add custom bash/ansible conditionals for UEFI/non-UEFI CPE checks. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Add mount_option_boot_efi_nosuid to RHEL8 STIG profile. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Make rule applicable only to uefi systems mount_option_boot_efi_nosuid. (Gabriel Becker) 2024-11-27 21:46:23.236 logging.py DEBUG - Add back SRG requirement to accounts_authorized_local_users (Jan Černý) 2024-11-27 21:46:23.236 logging.py DEBUG - Remove Debian 9 from products (Matthew Burket) 2024-11-27 21:46:23.236 logging.py DEBUG - Remove Debian 9 from docs and the build system (Matthew Burket) 2024-11-27 21:46:23.236 logging.py DEBUG - Remove the debian9 product (Matthew Burket) 2024-11-27 21:46:23.237 logging.py DEBUG - Update chronyd_client_only to align with RHEL9 STIG (Marek Haicman) 2024-11-27 21:46:23.237 logging.py DEBUG - Update chronyd_no_chronyc_network to align with RHEL9 STIG (Marek Haicman) 2024-11-27 21:46:23.237 logging.py DEBUG - Select sssd profile in RHEL9 STIG profile. (Gabriel Becker) 2024-11-27 21:46:23.237 logging.py DEBUG - Use custom content for auditd_name_format because of different path in EL7. (Gabriel Becker) 2024-11-27 21:46:23.237 logging.py DEBUG - Use XCCDF value instead of a hard coded value (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update ansible remediation of two umask rules. (Gabriel Becker) 2024-11-27 21:46:23.237 logging.py DEBUG - Make the ansible remediation of accounts_umask_etc_login_defs simpler. (Gabriel Becker) 2024-11-27 21:46:23.237 logging.py DEBUG - Fix pwquality.conf.d directory path (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Use XCCDF Value in OCIL and fixtext (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Add checktext to accounts_umask_etc_login_defs (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Add checktext to accounts_umask_etc_csh_cshrc (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Add checktext key to accounts_umask_etc_bashrc (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Revert addition of srg_requirement accounts_authorized_local_users (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Replace dnf by pkg_manager variable (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Remove a sentence that isn't a part of SRG requirement (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Remove commented out code (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Move variable setting to SRG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update fapolicyd_prevent_home_folder_access for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update ensure_gpgcheck_local_packages for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update ensure_gpgcheck_globally_activated for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update coredump_disable_backtraces for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update configure_firewalld_ports for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update configure_opensc_card_drivers for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update configure_usbguard_auditbackend for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update configure_tmux_lock_command for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update configure_tmux_lock_after_time for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update configure_bashrc_exec_tmux for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update auditd_data_retention_space_left_percentage (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Add rule auditd_data_retention_admin_space_left_percentage (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Update auditd_data_retention_space_left_action for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.237 logging.py DEBUG - Add variable for auditd freq (Matthew Burket) 2024-11-27 21:46:23.237 logging.py DEBUG - rename some templated test scenarios to keep consistency (Vojtech Polasek) 2024-11-27 21:46:23.237 logging.py DEBUG - update rule audit_rules_immutable (Vojtech Polasek) 2024-11-27 21:46:23.237 logging.py DEBUG - fix test inconsistencies (Vojtech Polasek) 2024-11-27 21:46:23.237 logging.py DEBUG - remove tests from rules which are covered by template test scenarios (Vojtech Polasek) 2024-11-27 21:46:23.237 logging.py DEBUG - extend tests for audit_rules_login_events and audit_rules_usergroup_modifications templates (Vojtech Polasek) 2024-11-27 21:46:23.237 logging.py DEBUG - Apply suggestions from code review (Edgar Aguilar) 2024-11-27 21:46:23.237 logging.py DEBUG - Add tests to no_host_based_files (Edgar Aguilar) 2024-11-27 21:46:23.237 logging.py DEBUG - Add tests to clean_components_post_updating (Edgar Aguilar) 2024-11-27 21:46:23.237 logging.py DEBUG - Update rule CCE-83441-6 with RHEL9 STIG assessment (Watson Sato) 2024-11-27 21:46:23.237 logging.py DEBUG - Add tests to no_user_host_based_files (Edgar Aguilar) 2024-11-27 21:46:23.237 logging.py DEBUG - Fix row order for SRG VulDiscussion and VulDiscussion (Matthew Burket) 2024-11-27 21:46:23.237 logging.py DEBUG - Add audit_rules_kernel_module_loading_create to RHEL7 STIG profile. (Gabriel Becker) 2024-11-27 21:46:23.237 logging.py DEBUG - Set the var_password_pam_retry variable closer to the rule (Marcus Burghardt) 2024-11-27 21:46:23.237 logging.py DEBUG - Fix the module name from pam_pwhistory.so to pam_pwquality.so (Marcus Burghardt) 2024-11-27 21:46:23.237 logging.py DEBUG - Update ocil and ocil_clause in display_login_attempts (Marcus Burghardt) 2024-11-27 21:46:23.237 logging.py DEBUG - Include checktest for banner_etc_issue rule (Marcus Burghardt) 2024-11-27 21:46:23.237 logging.py DEBUG - Update accounts_passwords_pam_faillock_deny (Marcus Burghardt) 2024-11-27 21:46:23.238 logging.py DEBUG - Update accounts_passwords_pam_faillock_deny_root (Marcus Burghardt) 2024-11-27 21:46:23.238 logging.py DEBUG - Update accounts_passwords_pam_faillock_interval (Marcus Burghardt) 2024-11-27 21:46:23.238 logging.py DEBUG - Update uditd_data_retention_max_log_file_action_stig (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update OCIL in auditd_data_retention_admin_space_left_action (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Add vuldiscussion in auditd_data_retention_admin_space_left_action (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update srg_requirement in auditd_data_retention_admin_space_left_action (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update fixtext in auditd_data_retention_admin_space_left_action (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update auditd_data_retention_action_mail_acct (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update fixtext in auditd_data_disk_full_action_stig (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update SRG requirement in auditd_data_disk_error_action_stig (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update OCIL in accounts_user_interactive_home_directory_exists (Jan Černý) 2024-11-27 21:46:23.238 logging.py DEBUG - Update OCIL in accounts_user_interactive_home_directory_defined (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update accounts_passwords_pam_faillock_unlock_time (Marcus Burghardt) 2024-11-27 21:46:23.239 logging.py DEBUG - Add tests to auditd_lineinfile template (Edgar Aguilar) 2024-11-27 21:46:23.239 logging.py DEBUG - Add tests to no_tmux_in_shells (Edgar Aguilar) 2024-11-27 21:46:23.239 logging.py DEBUG - Add tests to dir_perms_world_writable_system_owned (Edgar Aguilar) 2024-11-27 21:46:23.239 logging.py DEBUG - Add tests to rule (Edgar Aguilar) 2024-11-27 21:46:23.239 logging.py DEBUG - Add tests to file_ownership_binary_dirs (Edgar Aguilar) 2024-11-27 21:46:23.239 logging.py DEBUG - Update accounts_password_pam_retry rule (Marcus Burghardt) 2024-11-27 21:46:23.239 logging.py DEBUG - Update audit rules RHEL9 STIG metadata. (Gabriel Becker) 2024-11-27 21:46:23.239 logging.py DEBUG - Update ocil in accounts_password_pam_pwquality_system_auth (Marcus Burghardt) 2024-11-27 21:46:23.239 logging.py DEBUG - Update ocil in accounts_password_pam_pwquality_password_auth (Marcus Burghardt) 2024-11-27 21:46:23.239 logging.py DEBUG - Update accounts_password_pam_pwhistory_remember_system_auth (Marcus Burghardt) 2024-11-27 21:46:23.239 logging.py DEBUG - Update clean_components_post_updating to align with RHEL9 STIG (Marek Haicman) 2024-11-27 21:46:23.239 logging.py DEBUG - Use auid whenever possible in OCIL macros. (Gabriel Becker) 2024-11-27 21:46:23.239 logging.py DEBUG - Update chronyd_or_ntpd_set_maxpoll to align with RHEL9 STIG (Marek Haicman) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL accounts_user_home_paths_only (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Unify audit rules with existing macros. (Gabriel Becker) 2024-11-27 21:46:23.239 logging.py DEBUG - Update fixtext in accounts_user_dot_no_world_writable_programs (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_user_dot_no_world_writable_programs (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_umask_interactive_users (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update fixtext in accounts_umask_etc_login_defs (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_umask_etc_login_defs (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update srg_requirement in accounts_umask_etc_csh_cshrc (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update fixtext in accounts_umask_etc_csh_cshrc (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_umask_etc_csh_cshrc (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update srg_requirement in accounts_umask_etc_bashrc (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update fixtext in accounts_umask_etc_bashrc (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_umask_etc_bashrc (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Udpate OCIL in accounts_tmout (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_password_set_min_life_existing (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Remove audit_rules_execution_restorecon from SRG control files. (Gabriel Becker) 2024-11-27 21:46:23.239 logging.py DEBUG - Update fixtext for accounts_password_set_max_life_existing (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_password_pam_ucredit (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update SRG requirement in accounts_password_pam_ucredit (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update SRG requirement in accounts_password_pam_ocredit (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update fixtext in accounts_password_pam_ocredit (Jan Černý) 2024-11-27 21:46:23.239 logging.py DEBUG - Update OCIL in accounts_password_pam_ocredit (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL and SRG in accounts_password_pam_minlen (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_minclass (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update accounts_password_pam_pwhistory_remember_password_auth (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_maxrepeat (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_maxclassrepeat (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update accounts_password_all_shadowed_sha512 rule (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Update macros from audit privileged commands. (Gabriel Becker) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_lcredit (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update fixtext in accounts_password_pam_enforce_root (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_enforce_root (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update module name in ocil (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_difok (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update srg_requirement in account_password_selinux_faillock_dir (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Update fixtext in account_password_selinux_faillock_dir (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_dictcheck (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_password_pam_dcredit (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_minimum_age_login_defs (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Include checktext in ccounts_umask_etc_profile (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Update ocil and ocil_clause in accounts_umask_etc_profile (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Use XCCDF Value to parametrize fixtext (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - update rule accounts_no_uid_except_zero (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_maximum_age_login_defs (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - update accounts_max_concurrent_login_sessions (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - Update OCIL in accounts_logon_fail_delay (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - update accounts_have_homedir_login_defs (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - Update SRG requirement in accounts_authorized_local_users (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - update account_temp_expire_date (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - Add vuldiscussion account_unique_id (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update fixtext wording in account_emergency_expire_date (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Update fixtext wording in accounts_umask_etc_profile (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Update srg_requirement in accounts_umask_etc_profile (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - Improve regex to also match line without space (Marcus Burghardt) 2024-11-27 21:46:23.240 logging.py DEBUG - OCP: Correct the default value for var_oauth_inactivity_timeout (Vincent Shen) 2024-11-27 21:46:23.240 logging.py DEBUG - Update accounts_password template's OVAL (Edgar Aguilar) 2024-11-27 21:46:23.240 logging.py DEBUG - Fix tests for kernel_module_dccp_disabled for RHEL 7 (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Improve HTML in utils/tables/reference_tables_template.html (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - fix one test scenario - putting content into wrong file (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - do not return set of groups, we do not need them. They are needed only by the scan_rules_group function (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - if the datastream has not been build, just continue and do not perform loading of rules etc (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - small fixes based on feedback (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - Fixed badly placed variable initialization (Matej Tyc) 2024-11-27 21:46:23.240 logging.py DEBUG - OCP: Update kubelet rules to check default kubeletconfig (Vincent Shen) 2024-11-27 21:46:23.240 logging.py DEBUG - Refactored the machine platform test (Matěj Týč) 2024-11-27 21:46:23.240 logging.py DEBUG - In SRG Export change location that rationale is sourced from (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Remove empty load operation (Jan Černý) 2024-11-27 21:46:23.240 logging.py DEBUG - Address feedback in #9489 (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Use fully qualified name for ansible module. (Gabriel Becker) 2024-11-27 21:46:23.240 logging.py DEBUG - Remove unnecessary negative lookahead from regex. (Gabriel Becker) 2024-11-27 21:46:23.240 logging.py DEBUG - fix styling issues and remove forgotten no longer used code (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - try to fix one test scenario which fails in CI (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - fixmissing slash in sudoers-d path in ansible remediations (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - remove redundant and duplicate test scenarios (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - use the macro in other rules which remediate audit waches (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - use the fixed macro in Ansible templates for audit_login_events and audit_usergroup_modification (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - add tests to affected rules (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - modify OVAL checking for Audit watch rules to not require the key (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - Improve ansible remediation of accounts_umask_etc_login_defs. (Gabriel Becker) 2024-11-27 21:46:23.240 logging.py DEBUG - improve matching of platform definitions in test_machine_only_rules (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - rewrite test_machine_only_rules test (Vojtech Polasek) 2024-11-27 21:46:23.240 logging.py DEBUG - Update coredump_disable_storage (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Update package_policycoreutils_installed (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Update selinux_policytype (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Update partition_for_home (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Update dconf_db_up_to_date (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Update partition_for_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.240 logging.py DEBUG - Update check and fix text for partitions (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Fix tests in 2 rules used by OL8 (Edgar Aguilar) 2024-11-27 21:46:23.241 logging.py DEBUG - Add OL8 platform to required tests (Edgar Aguilar) 2024-11-27 21:46:23.241 logging.py DEBUG - Add checktext for partition_for_home (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Update encrypt_partitions (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Update macros for partitions (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Fix ensure_gpgcheck_never_disabled per review (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Update package_fapolicyd_installed (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Update srg_requirement_package_removed (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Update ensure_gpgcheck_never_disabled (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - modify passing of inherited cpe_platform_names when processing rules and groups (Vojtech Polasek) 2024-11-27 21:46:23.241 logging.py DEBUG - Add warnings to rules using mount_option_home (Edgar Aguilar) 2024-11-27 21:46:23.241 logging.py DEBUG - Clean up formatting in style guide (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Document the order the new checktext field (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Add section ordering for the platform key (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Fix style guide spelling (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - Add tests to audit privileged commands template (Edgar Aguilar) 2024-11-27 21:46:23.241 logging.py DEBUG - Update OVAL in openssh rule (Edgar Aguilar) 2024-11-27 21:46:23.241 logging.py DEBUG - Fix srg_requirement_package_removed (Matthew Burket) 2024-11-27 21:46:23.241 logging.py DEBUG - change parameter of findmnt used in bash partition conditional (Vojtech Polasek) 2024-11-27 21:46:23.241 logging.py DEBUG - Use service directive to restart auditd service. (Gabriel Becker) 2024-11-27 21:46:23.241 logging.py DEBUG - install_vm.py: add new option for disk size specification (Matus Marhefka) 2024-11-27 21:46:23.241 logging.py DEBUG - Introduce hipaa profile for ol9 (Edgar Aguilar) 2024-11-27 21:46:23.241 logging.py DEBUG - Fix audit_rules_privileged_commands_kmod rule in RHEL7. (Gabriel Becker) 2024-11-27 21:46:23.241 logging.py DEBUG - Remove unused xccdf2table-profilenistrefs.xslt (Jan Černý) 2024-11-27 21:46:23.241 logging.py DEBUG - Remove unused xccdf2table-profilenistrefs-cui.xslt (Jan Černý) 2024-11-27 21:46:23.241 logging.py DEBUG - Remove unused profilecisrefs.xslt (Jan Černý) 2024-11-27 21:46:23.241 logging.py DEBUG - Remove unused xccdf2table-byref.xslt (Jan Černý) 2024-11-27 21:46:23.241 logging.py DEBUG - Remove unused xccdf2stigformat.xslt (Jan Černý) 2024-11-27 21:46:23.241 logging.py DEBUG - Remove unused shared_xccdf2html.xslt (Jan Černý) 2024-11-27 21:46:23.243 logging.py DEBUG - Remove unused table-sortbyref.xslt (Jan Černý) 2024-11-27 21:46:23.243 logging.py DEBUG - Remove unused table-add-srgitems.xslt (Jan Černý) 2024-11-27 21:46:23.243 logging.py DEBUG - Remove unused templates cci2html.xsl (Jan Černý) 2024-11-27 21:46:23.243 logging.py DEBUG - Remove unused file includelogo.xslt (Jan Černý) 2024-11-27 21:46:23.243 logging.py DEBUG - Do not print identifiers when there is no actual diff. (Gabriel Becker) 2024-11-27 21:46:23.243 logging.py DEBUG - Fix PEP issues and typos. (Gabriel Becker) 2024-11-27 21:46:23.243 logging.py DEBUG - Table headings should use th vs td elements (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Add lang and doctype to utils/tables/tables_template_common.html (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Update macros to use more STIG like language (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Fix vuldiscussion key in utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: package_gdm_removed: package name is gdm, not quagga (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: sudo_add_use_pty/tests/use_pty_absent.fail.sh: ls iterating files is not needed and is bad actually (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: sudo_add_noexec: Handle situation where /etc/sudoers.d is empty (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: sudo_add_use_pty: Handle situation where /etc/sudoers.d is empty (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: sudo_custom_logfile: Handle situation where /etc/sudoers.d is empty (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: sudoers_validate_passwd/tests: /etc/sudoers.d can be empty (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - change: service_sssd_enabled: add fedora (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: service_sssd_enabled: fix tests (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - bugfix: accounts_password_all_shadowed_sha512: add !* as locked (Markus Linnala) 2024-11-27 21:46:23.243 logging.py DEBUG - Add srg reference for service_chronyd_enabled (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Add srg to references for file_groupowner_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Add srg to references for file_groupowner_etc_passwd (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Add srg to references for file_groupowner_etc_group (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Add srg to references for file_groupowner_etc_group (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Add srg to references for file_groupowner_backup_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.243 logging.py DEBUG - Document compare_ds.py (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Make groups inherit platforms from parent groups (Evgeny Kolesnikov) 2024-11-27 21:46:23.243 logging.py DEBUG - Print path where diff files were saved. (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Fix bug in get_check_docs (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Rename variable to clarify they are DISA rule IDs (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Unify compare_rule_texts (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Decouple per rule diffs from STIG mode (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Use difflib to generate platform diff (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Fix PEP8 issues (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Reduce cognitive complexity on compare_checks (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Simplify compare_checks a bit (Watson Sato) 2024-11-27 21:46:23.243 logging.py DEBUG - Add ol7 platform to existing required tests (Edgar Aguilar) 2024-11-27 21:46:23.243 logging.py DEBUG - Align OL7 tests with RHEL7 ones (Edgar Aguilar) 2024-11-27 21:46:23.244 logging.py DEBUG - Bump version of OL8 to V1R3 and update STIG ids (Edgar Aguilar) 2024-11-27 21:46:23.244 logging.py DEBUG - Align the OVAL and OCIL diff messages (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Rename diff generation funcion (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Standardize diff generation with difflib (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Output rule/check ID instead of old/new datastream (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Standardize function names with similar purpose (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Fix PEP8 isues (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Update docs/workshop/README.adoc (Gabriel Becker) 2024-11-27 21:46:23.244 logging.py DEBUG - Update docs/workshop/next_steps_with_complianceascode.adoc (Gabriel Becker) 2024-11-27 21:46:23.244 logging.py DEBUG - Conditional for Ansible remediation on RHEL7 (Marcus Burghardt) 2024-11-27 21:46:23.244 logging.py DEBUG - Remove pam_unix_rounds rules (Matthew Burket) 2024-11-27 21:46:23.244 logging.py DEBUG - Remove redundant rules from RHEL9 STIG (Marcus Burghardt) 2024-11-27 21:46:23.244 logging.py DEBUG - Remove init_system conditional on xwindows_runlevel_target (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Remove upstart in disable_ctrlaltdel_reboot (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Remove upstart handling in require_singleuser_auth (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Remove upstart handling in rsyslog_cron_logging (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Avoid sed hack (Jan Černý) 2024-11-27 21:46:23.244 logging.py DEBUG - Remove upstart in audit ExecStartPost checks (Watson Sato) 2024-11-27 21:46:23.244 logging.py DEBUG - Fix documentation of ocil_timer_enabled macro (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Remove upstart handling from bash remediation macro (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Remove upstart from service_enabled template (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Remvoe upstart from service_disabled template (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Include informative message regaring profile selection (Marcus Burghardt) 2024-11-27 21:46:23.245 logging.py DEBUG - Include srg_requirement and fixtext for enable_authselect (Marcus Burghardt) 2024-11-27 21:46:23.245 logging.py DEBUG - Minor updates in rule description and style alignment (Marcus Burghardt) 2024-11-27 21:46:23.245 logging.py DEBUG - Include enable_authselect rule for RHEL9 STIG (Marcus Burghardt) 2024-11-27 21:46:23.245 logging.py DEBUG - Move kernel_module_disabled use more genric RHEL in conditionals (Matthew Burket) 2024-11-27 21:46:23.245 logging.py DEBUG - Remove RHEL 9 SRG GPOS (Matthew Burket) 2024-11-27 21:46:23.245 logging.py DEBUG - bugfix: tests: do not use sudo, tests are run using root (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - change: sshd_rekey_limit/tests: add correct_value.pass.sh (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - fix: sshd_rekey_limit/tests: rename ospp tests as such (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - fix: sshd_rekey_limit/tests: ensure only proper key match (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - fix: sshd_rekey_limit/tests: drop unnecessary .* (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - fix: sshd_rekey_limit/tests: keys are caseinsensitive (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - bugfix: sshd_rekey_limit/tests: when testing other value, use variable for another (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - bugfix: sshd_rekey_limit/tests: Handle possible /etc/ssh/sshd_config.d files too (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - bugfix: sshd_rekey_limit: use -i instead of -e in sed (Markus Linnala) 2024-11-27 21:46:23.245 logging.py DEBUG - Simplify compare_platforms() a bit (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Move find_boolean_question() to xml.py (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Remove self argument from compare remediations (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Don't pass self paramenters to its own functions (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Move extraction of rule text to XMLRule class (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Move serialization of OVAL XML elements to class (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Add workshops reference into the main page. (Gabriel Becker) 2024-11-27 21:46:23.245 logging.py DEBUG - Remove unused images in the workshop. (Gabriel Becker) 2024-11-27 21:46:23.245 logging.py DEBUG - Add disclaimer that a github, gitlab or bitbucket is required. (Gabriel Becker) 2024-11-27 21:46:23.245 logging.py DEBUG - Put links to gitpod pointing to official repository. (Gabriel Becker) 2024-11-27 21:46:23.245 logging.py DEBUG - Add lab exercise 2. (Gabriel Becker) 2024-11-27 21:46:23.245 logging.py DEBUG - Fix namespace of select elements (Jan Černý) 2024-11-27 21:46:23.245 logging.py DEBUG - Add srg to references for file_permissions_cron_allow (Matthew Burket) 2024-11-27 21:46:23.245 logging.py DEBUG - Update Ansible styleguide to prefix tasks names (Marcus Burghardt) 2024-11-27 21:46:23.245 logging.py DEBUG - Improve comparison of empty rule elements (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Quit when content is not a STIG Benchmark (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Handle sub elements in rule descriptions (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Separate XML structure from and Diff logic (Watson Sato) 2024-11-27 21:46:23.245 logging.py DEBUG - Make compare_ds.py output diffs in a separate dir (Watson Sato) 2024-11-27 21:46:23.246 logging.py DEBUG - Add Rule text comparison (Watson Sato) 2024-11-27 21:46:23.246 logging.py DEBUG - Add STIG rule mapping between releases (Watson Sato) 2024-11-27 21:46:23.246 logging.py DEBUG - Parametrize the XCCDF version (Watson Sato) 2024-11-27 21:46:23.246 logging.py DEBUG - Recognize XCCDF Benchmark arguments (Watson Sato) 2024-11-27 21:46:23.246 logging.py DEBUG - Unselect empty groups during shorthand creation (Jan Černý) 2024-11-27 21:46:23.246 logging.py DEBUG - Improve the test which check config existence (Marcus Burghardt) 2024-11-27 21:46:23.246 logging.py DEBUG - Update the var_check CheckEnumeration value (Marcus Burghardt) 2024-11-27 21:46:23.246 logging.py DEBUG - Include test scenario where faillock dir is not set (Marcus Burghardt) 2024-11-27 21:46:23.246 logging.py DEBUG - Improve remediation to not fail when no dirs are defined (Marcus Burghardt) 2024-11-27 21:46:23.246 logging.py DEBUG - Fix missing files in echo commands (Marcus Burghardt) 2024-11-27 21:46:23.246 logging.py DEBUG - Fix check_existence enumeration (Marcus Burghardt) 2024-11-27 21:46:23.246 logging.py DEBUG - Remove bash machine platform condition from core pattern empty string. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Fix help text in utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:23.246 logging.py DEBUG - Update utils/import_srg_spreadsheet.py based on feedback in #9416 (Matthew Burket) 2024-11-27 21:46:23.246 logging.py DEBUG - Fix 5.10 OVAL validation of core_pattern_empty_string rule. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Add variable definition in documents. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Add lab5 exercise. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Add lab exercise number 4. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Add lab exercise 3 to the workshop. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Remove markdown version of the lab exercise 1. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Improve format and add table of contents. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Update OVAL reference link in lab exercise 1. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Put caption to OSPP image. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Fix missing content in lab exercise 1 asciidoc. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Fix typo. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Remove leftover text in the adoc from lab exercise 1. (Gabriel Becker) 2024-11-27 21:46:23.246 logging.py DEBUG - Lab exercise 1: Update section about commenting on bash remediation. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Update images of lab exercise 1. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Add adoc version of the lab exercise 1. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Fixes to lab1 exercise documentation. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Update how to open the guide in the workshop. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Add lab1_introduction module. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Add step to copy ospp profile back to workshop setup. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Remove unused setup.sh from workshop files. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Update gitpod with workshop. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Do not copy RHEL8 OSPP profiles in the workshop setup. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Make lab build individually with parameter. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Initial import of workshop setup files. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Fix e2e expected test result for configure_usbguard_auditbackend (Vincent Shen) 2024-11-27 21:46:23.247 logging.py DEBUG - Align ANSSI profiles for SLE platforms with common control spec (teacup-on-rockingchair) 2024-11-27 21:46:23.247 logging.py DEBUG - Add SUSE gpgkey rule to ANSSI profile (teacup-on-rockingchair) 2024-11-27 21:46:23.247 logging.py DEBUG - Add rules to SLE12 platform in context of ANSSI profiles (teacup-on-rockingchair) 2024-11-27 21:46:23.247 logging.py DEBUG - More doc fixes for (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Exclude rule MD014 from MDL lint (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Fix CodeClimate errors for utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Add docs for utils/import_srg_spreadsheet.py (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Add a new script to import changes from a SRG spreadsheet (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Update tests of mount_option_home (Edgar Aguilar) 2024-11-27 21:46:23.247 logging.py DEBUG - Update mount_option_home for edge cases (Edgar Aguilar) 2024-11-27 21:46:23.247 logging.py DEBUG - Fix missing OCIL text and 800-53 references (Jan Černý) 2024-11-27 21:46:23.247 logging.py DEBUG - Update account_emergency_expire_date (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Add checktext and vuldiscussion to rule (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Add newline at end of file (Jan Černý) 2024-11-27 21:46:23.247 logging.py DEBUG - Add explicit dependency (Jan Černý) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: regexp: quote .*.suffix properly (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - change: quote dot delim in regexps (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - change: yaml double quote string, quote dot delim in regexps (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - style: jinja: use ~ as concat, not + (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: jinja: avoid concat in macro if not needed (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: bootloader-grub2: no double quote with parameter inside jinja macro (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: restrict_at_cron_users: no double quote with target_perms_octal inside jinja macro (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: ntp: no double quote with chrony_conf_path inside jinja macro (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: aide_check_audit_tools: no double quote with full_name inside jinja macro (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: mount: no double quote with MOUNTPOINT inside jinja macro (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - fix: sshd_rekey_limit: no double quote with parameter inside jinja macro (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - Use correct defition of template value parameter in api_server_bind_address. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - change: quote pam_foo.so in regexps (Markus Linnala) 2024-11-27 21:46:23.247 logging.py DEBUG - Skip configure_usbguard_auditbackend e2e test (Vincent Shen) 2024-11-27 21:46:23.247 logging.py DEBUG - Fix kernel_module_disabled remediation template (Vincent Shen) 2024-11-27 21:46:23.247 logging.py DEBUG - Update mount_option_home (Edgar Aguilar) 2024-11-27 21:46:23.247 logging.py DEBUG - Create mount_option_home and use it in ol8 (Edgar Aguilar) 2024-11-27 21:46:23.247 logging.py DEBUG - Add more test scenarios for sysctl_kernel_core_pattern_empty_string. (Gabriel Becker) 2024-11-27 21:46:23.247 logging.py DEBUG - Avoid code duplication (Jan Černý) 2024-11-27 21:46:23.247 logging.py DEBUG - Add package_xorg-x11-server-common_removed back to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.247 logging.py DEBUG - Update configure_libreswan_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Add harden SSH crypto rules to RHEL 9 (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Add firewalld_sshd_port_enabled to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Update dconf_db_up_to_date to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Add grub2_disable_interactive_boot to RHEL9 (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Add set_firewalld_default_zone to RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Add grub2_kernel_trust_cpu_rng to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Add sysctl_kernel_exec_shield to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Add rules for permissions on /etc/cron.allow to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.248 logging.py DEBUG - Refactor: Extract function parse_description (Jan Černý) 2024-11-27 21:46:23.248 logging.py DEBUG - Add a blank line (Jan Černý) 2024-11-27 21:46:23.248 logging.py DEBUG - Use short profile ID in the visualization (Jan Černý) 2024-11-27 21:46:23.248 logging.py DEBUG - Remove unused XSLT template (Jan Černý) 2024-11-27 21:46:23.248 logging.py DEBUG - Use XCCDF 1.2 and Jinja 2 to generate STIG tables (Jan Černý) 2024-11-27 21:46:23.248 logging.py DEBUG - Add an alternative script to generate HTML tables (Jan Černý) 2024-11-27 21:46:23.248 logging.py DEBUG - Refactor: Move function definition (Jan Černý) 2024-11-27 21:46:23.249 logging.py DEBUG - Fix PEP8 issue. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Fix ansible remediation to preserve old non compliant values. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Update configure_libreswan_crypto_policy for the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.249 logging.py DEBUG - Add ssh_client_rekey_limit to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.249 logging.py DEBUG - Add SSHD time out rules back to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.249 logging.py DEBUG - Fix selinux_context_elevation_for_sudo spelling (Matthew Burket) 2024-11-27 21:46:23.249 logging.py DEBUG - Fix test parse affected to support OVAL with multiple def-group tags. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Address feedback. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Fix return type annotations (Watson Sato) 2024-11-27 21:46:23.249 logging.py DEBUG - Switch bash remediation applicable to all products in sysctl_kernel_core_pattern_empty_string. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Make the conflicts attribute appblicable only to RHEL9. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Refactor so that each rule-result is looped once (Watson Sato) 2024-11-27 21:46:23.249 logging.py DEBUG - Print ID of the executed check during scan (Watson Sato) 2024-11-27 21:46:23.249 logging.py DEBUG - Make code climate indent check better (Matthew Burket) 2024-11-27 21:46:23.249 logging.py DEBUG - Adding rule to DISA STIG for RHEL7 as of V3R7 (Vuln V-250314). (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.249 logging.py DEBUG - Since string is a subset of sequence, it needs to check first for str. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Create custom sysctl_kernel_core_pattern_empty_string content. (Gabriel Becker) 2024-11-27 21:46:23.249 logging.py DEBUG - Skip configure_usbguard_auditbackend to unblock the e2e (Vincent Shen) 2024-11-27 21:46:23.249 logging.py DEBUG - sap_host: solve shellcheck error SC2046 (Markus Linnala) 2024-11-27 21:46:23.249 logging.py DEBUG - products/jre: silence shellcheck SC2174 (Markus Linnala) 2024-11-27 21:46:23.249 logging.py DEBUG - Convert newlines in strings to use '|-' syntax. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.249 logging.py DEBUG - Sort check-export elements (Jan Černý) 2024-11-27 21:46:23.249 logging.py DEBUG - Create elements with explicit namespace (Jan Černý) 2024-11-27 21:46:23.249 logging.py DEBUG - Generate per profile testinfo tables from XCCDF 1.2 (Jan Černý) 2024-11-27 21:46:23.249 logging.py DEBUG - Replace platform conditionals in whole remediation code (Jan Černý) 2024-11-27 21:46:23.249 logging.py DEBUG - GRUB2 is not available on s390x (Watson Sato) 2024-11-27 21:46:23.249 logging.py DEBUG - Add more rules to ANSSI profile (teacup-on-rockingchair) 2024-11-27 21:46:23.249 logging.py DEBUG - Enable sle support for postfix_network_listening_disabled rule remediations (teacup-on-rockingchair) 2024-11-27 21:46:23.249 logging.py DEBUG - Add CCE ids for sle12 and sle15 for postfix_network_listening_disabled in context of anssi profile (teacup-on-rockingchair) 2024-11-27 21:46:23.249 logging.py DEBUG - Add CCE id for sle12 rule package_chrony_installed (teacup-on-rockingchair) 2024-11-27 21:46:23.249 logging.py DEBUG - Add mount_option rules to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.249 logging.py DEBUG - Add SLES CCE ids for mount_option_tmp and mount_option_var_tmp (teacup-on-rockingchair) 2024-11-27 21:46:23.249 logging.py DEBUG - Enable SLE12,SLE15 platforms for mount_option_opt_nosuid/noexec,mount_option_var_log_nosuid/noexec,mount_option_var_noexec/nosuid (teacup-on-rockingchair) 2024-11-27 21:46:23.249 logging.py DEBUG - Enable SLE12 platform for mount_option_boot_nosuid,mount_option_home_noexec,mount_option_nodev_nonroot_local_partitions (teacup-on-rockingchair) 2024-11-27 21:46:23.250 logging.py DEBUG - Enable SLE12 platform for mount_option_boot_noexec (teacup-on-rockingchair) 2024-11-27 21:46:23.250 logging.py DEBUG - change: sudoers_validate_passwd: suggest cvtsudoers (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - fix: sudoers_default_includedir/tests: sed regexp // are matches .* at beginnin/end not needed (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - fix: sudoers_validate_passwd/tests: check last one (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - bugfix: sudoers_validate_passwd: handle @ includes too (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - Add trim_trailing_whitespace to editorconfig (Matthew Burket) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix warning when build STIG overlay. (Gabriel Becker) 2024-11-27 21:46:23.250 logging.py DEBUG - Put smartcard rules with pam_pkcs11 out of s390x (Watson Sato) 2024-11-27 21:46:23.250 logging.py DEBUG - Use data stream to generate HTML statistics (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Use data stream to generate stats (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Ensure password pam_pkcs11.so fixed in smartcard-auth (Watson Sato) 2024-11-27 21:46:23.250 logging.py DEBUG - Ensure auth pam_pkcs11.so fixed in smartcard-auth (Watson Sato) 2024-11-27 21:46:23.250 logging.py DEBUG - Add tests for PAM with and without authconfig (Watson Sato) 2024-11-27 21:46:23.250 logging.py DEBUG - smartcard_auth: PAM stack with faildelay enabled (Watson Sato) 2024-11-27 21:46:23.250 logging.py DEBUG - Disable wrong_runtime.fail.sh test scenario for sysctl_kernel_unprivileged_bpf_disabled (Milan Lysonek) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix PEP8 problems (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Rename a variable (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Use data stream in test for missing references (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Add support for data streams in profile_tool.py (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Add support for XCCDF 1.2 to profile_tool (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Save XCCDF namespace as a member of the class (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Extract method (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Quote shell for Ubuntu (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix PREP8 finding. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - Remove abort in macro. (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - fix tests to account for both possible locations. (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - Prefer distribution location when writing remediations if there is one already there. (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - Use search_value to specify SSL Minimum version check instead of needing to reproduce the OVAL check manually. (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - Restrict OVAL so that it uses a separate State (so that the search doesn't incorrectly pass a failure) entry and allow for overrides of the OVAL state so that the search term can be overridden. (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - Remove unnecessary command substitution (Marcus Burghardt) 2024-11-27 21:46:23.250 logging.py DEBUG - style: grub2_bootloader_argument: use multi_platform_rhel instead of listing all (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - fix: grub2_bootloader_argument: fedora grub is like rhel9 (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - fix: grub2_bootloader_argument/tests/invalid_rescue.pass.sh: support arg_variable (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - fix: grub2_bootloader_argument/tests: ensure grub is setup properly (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - style: grub2_bootloader_argument: product ifs (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - fix: grub2_bootloader_argument: use arg_name not audit in comments (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - bugfix: grub2_slub_debug_argument: honor variable var_slub_debug_options (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - add/remove fedora from privileged commands depending if exists or not (Markus Linnala) 2024-11-27 21:46:23.250 logging.py DEBUG - Update controls/srg_gpos/SRG-OS-000366-GPOS-00153.yml based on review (Matthew Burket) 2024-11-27 21:46:23.250 logging.py DEBUG - remove ospp reference from sysctl_kernel_core_pattern_empty_string (Vojtech Polasek) 2024-11-27 21:46:23.250 logging.py DEBUG - switch sysctl_kernel_core_pattern_empty_string for sysctl_kernel_core_pattern (Vojtech Polasek) 2024-11-27 21:46:23.250 logging.py DEBUG - Add ubuntu2204 to jinja if statements that were missing. (Juan Antonio Osorio) 2024-11-27 21:46:23.250 logging.py DEBUG - Add Ubuntu 22.04 to build_product (Juan Antonio Osorio) 2024-11-27 21:46:23.250 logging.py DEBUG - Tag Ubuntu CIS reference for 22.04 (Juan Antonio Osorio) 2024-11-27 21:46:23.250 logging.py DEBUG - Tag rules applicable to ubuntu2004 as applicable to ubuntu2204 too (Juan Antonio Osorio) 2024-11-27 21:46:23.250 logging.py DEBUG - Introduce Ubuntu 22.04 (Juan Antonio Osorio) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix test scenario script with invalid fcontext (Marcus Burghardt) 2024-11-27 21:46:23.250 logging.py DEBUG - Include test scenario for multiple dirs (Marcus Burghardt) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix issues with bash remediation (Marcus Burghardt) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix many copy-and-paste issues and improved style (Marcus Burghardt) 2024-11-27 21:46:23.250 logging.py DEBUG - Improve the rule description for selinux_faillock_dir (Marcus Burghardt) 2024-11-27 21:46:23.250 logging.py DEBUG - Update a comment (Jan Černý) 2024-11-27 21:46:23.250 logging.py DEBUG - Manually set OVAL check for SSL minimum version to catch tls1.2 or tls1.3 (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - Revise bash remediation template to use /etc/firefox/policies instead of /usr/lib64/firefox/distribution (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix incorrect escaping in OCIL for colons (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.250 logging.py DEBUG - Clean up OCIL text and some template names. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - Mark FFOX-00-000003 as a manual check. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - V6R3: Implementing controls as policy files. * FFOX-00-000002 * FFOX-00-000003 * FFOX-00-000004 * FFOX-00-000009 * FFOX-00-000010 * FFOX-00-000011 * FFOX-00-000014 * FFOX-00-000022 * FFOX-00-000023 * FFOX-00-000024 * FFOX-00-000025 * FFOX-00-000026 * FFOX-00-000027 * FFOX-00-000028 * FFOX-00-000038 * FFOX-00-000039 (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - Remove duplicate rule for Top Sites (combined into nonessential_capabilities) (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - Remove unused Firefox template. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - V6R3: Remove unused checks (or checks replaced with profile changes) (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - Revise Mozilla Firefox STIG profile to V6R3 from upstream. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.250 logging.py DEBUG - Add sshd_set_keepalive_0 to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.250 logging.py DEBUG - Add ensure_redhat_gpgkey_installed to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.250 logging.py DEBUG - Add mount_option_krb_sec_remote_filesystems to the RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.250 logging.py DEBUG - Fix srg_requirement in file_permissions_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.250 logging.py DEBUG - bugfix: build_test_container.sh: actually honor --name/-n (Markus Linnala) 2024-11-27 21:46:23.251 logging.py DEBUG - Update command in fixtext section (Marcus Burghardt) 2024-11-27 21:46:23.251 logging.py DEBUG - Add identifiers to rule_dir_json (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Add harden_sshd_ciphers_opensshserver_conf_crypto_policy to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Add sshd_set_idle_timeout to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Add sysctl_net_ipv4_icmp_ignore_bogus_error_responses to RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Add ssh_private_keys_have_passcode to RHEL 9 (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Add AUID filters on audit kernel module loading (Watson Sato) 2024-11-27 21:46:23.251 logging.py DEBUG - Revise OVAL template to use backreferences, move DisableDevelopmentTools to policy (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.251 logging.py DEBUG - Move "find python" to a macro (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.251 logging.py DEBUG - Add templates to handle detection of most Firefox Policy json items. Implement several rules with templates. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.251 logging.py DEBUG - fix: sub_var_value: deprecated, use xccdf_value (Markus Linnala) 2024-11-27 21:46:23.251 logging.py DEBUG - Update test scenario scripts to respect symlinks (Marcus Burghardt) 2024-11-27 21:46:23.251 logging.py DEBUG - Remove auditd_data_retention_max_log_file_action STIG specific test scenario (Milan Lysonek) 2024-11-27 21:46:23.251 logging.py DEBUG - Include leading caret to regex (Marcus Burghardt) 2024-11-27 21:46:23.251 logging.py DEBUG - Remove DCCP from RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Fix srg_requirement in fapolicyd_prevent_home_folder_access (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Fix srg_requirement in no_empty_passwords_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Fix srg_requirement in file_permissions_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Remove nss-tools from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.251 logging.py DEBUG - Fix order of CCEs (anivan-suse) 2024-11-27 21:46:23.251 logging.py DEBUG - Ensure the expected values for test scenarios (Marcus Burghardt) 2024-11-27 21:46:23.251 logging.py DEBUG - Optimize Ansible remediation for accounts_password_set_max_life_existing (Marcus Burghardt) 2024-11-27 21:46:23.251 logging.py DEBUG - Change the command which set the max age for passwords (Marcus Burghardt) 2024-11-27 21:46:23.251 logging.py DEBUG - Increment exclusion filter for accounts_password_all_shadowed_sha512 (Marcus Burghardt) 2024-11-27 21:46:23.251 logging.py DEBUG - Mask password field in accounts_password_all_shadowed_sha512 (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Include pass test scenario for accounts_password_all_shadowed_sha512 (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Include remediation header in fail scripts without remediation (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Mask password field in accounts_password_all_shadowed (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Mask password field in accounts_password_set_max_life_existing (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Aligned the OVAL content to style guide (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Add selinux_state rule to ANSSI (anivan-suse) 2024-11-27 21:46:23.311 logging.py DEBUG - Don't select the variable selector 'default' (Watson Sato) 2024-11-27 21:46:23.311 logging.py DEBUG - Move rule to correct profile (anivan-suse) 2024-11-27 21:46:23.311 logging.py DEBUG - audit_rules_suid_privilege_function: test spaces in other_key.pass.sh (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - audit_rules_suid_privilege_function: drop miss_k.fail.sh as unnecessary (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - audit_rules_suid_privilege_function: only one arch rule (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - change: audit_rules_suid_privilege_function: better regexp (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - change: audit_rules_suid_privilege_function: add fedora (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - fix: audit_rules_suid_privilege_function: rename no rules as such (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - bugfix: sudo_add_umask: xccdf_value is jinja macro, use as such (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - change: prefer xccdf_value instead of sub_var_value (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - fix: test_xccdf_values_in_ds.sh: check sub_var_value too (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - fix: SSG_SHELLCHECK_BASH_FIXES_VALIDATION_ENABLED: drop discourage (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - change: shellcheck_wrapper.sh: use bash nullglob (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - Shorten platform header and fix typo in rule.yml (Edgar Aguilar) 2024-11-27 21:46:23.311 logging.py DEBUG - Mark arguments as required (Jan Černý) 2024-11-27 21:46:23.311 logging.py DEBUG - Add git package to the Ansible Role test github action. (Gabriel Becker) 2024-11-27 21:46:23.311 logging.py DEBUG - feature: ssg parsing: add sometimes external_variable related asserts (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - Specify output file names (Jan Černý) 2024-11-27 21:46:23.311 logging.py DEBUG - Add package_chrony_installed rule to ANSSI (anivan-suse) 2024-11-27 21:46:23.311 logging.py DEBUG - Move the RHEL 9 STIG to use the srg_gpos control (Matthew Burket) 2024-11-27 21:46:23.311 logging.py DEBUG - fix: fedora has dedicated_ssh_keyowner ssh_keys (Markus Linnala) 2024-11-27 21:46:23.311 logging.py DEBUG - Don't fail rule if /etc/grubenv missing on s390x (Watson Sato) 2024-11-27 21:46:23.311 logging.py DEBUG - Add tests to rule about pam_faillock_silent (Edgar Aguilar) 2024-11-27 21:46:23.311 logging.py DEBUG - Create rule to cover OL08-00-020018 & 020019 (Edgar Aguilar) 2024-11-27 21:46:23.311 logging.py DEBUG - Update build-scripts/verify_references.py (Gabriel Becker) 2024-11-27 21:46:23.311 logging.py DEBUG - Packit: change Fedora test target to be the latest released Fedora (Matus Marhefka) 2024-11-27 21:46:23.311 logging.py DEBUG - Rearrange criteria in sysctl template to previous correct behavior. (Gabriel Becker) 2024-11-27 21:46:23.311 logging.py DEBUG - Add oracle and ubuntu href references to OVAL verify references test. (Gabriel Becker) 2024-11-27 21:46:23.311 logging.py DEBUG - Include warning about the pam_securetty.so PAM module (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Simplify platform value in no_direct_root_logins remediation (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Align no_direct_root_logins OVAL with style guide (Marcus Burghardt) 2024-11-27 21:46:23.311 logging.py DEBUG - Do not use the sshd service disabled OVAL in sshd_set_max_auth_tries. (Gabriel Becker) 2024-11-27 21:46:23.311 logging.py DEBUG - Remove executable permissions for disa-stig-rhel7-v3r8-xccdf-scap.xml (Juan Antonio Osorio) 2024-11-27 21:46:23.311 logging.py DEBUG - Avoid use of json_query and additional dependency (Watson Sato) 2024-11-27 21:46:23.311 logging.py DEBUG - Access the mounts via ansible_mounts (Watson Sato) 2024-11-27 21:46:23.311 logging.py DEBUG - DISA looks for a very specific set of configurations (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.311 logging.py DEBUG - Set RHEL7-specific override files to satisfy DISA STIG (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.311 logging.py DEBUG - Allow context elevation for sudo in multiple files (Federico Ramirez) 2024-11-27 21:46:23.311 logging.py DEBUG - Allow sudoers_validate_passwd in multiple files (Federico Ramirez) 2024-11-27 21:46:23.311 logging.py DEBUG - Add SRG requirement and fixtext macros (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.311 logging.py DEBUG - Allow timestamp_timeout config in several files (Federico Ramirez) 2024-11-27 21:46:23.311 logging.py DEBUG - OL7 DISA STIG v2r8 update (Federico Ramirez) 2024-11-27 21:46:23.312 logging.py DEBUG - Add the AUID filters on audit kernel module rules (Federico Ramirez) 2024-11-27 21:46:23.312 logging.py DEBUG - Add perm filter for OL7 privileged commands rules (Federico Ramirez) 2024-11-27 21:46:23.312 logging.py DEBUG - add 4 rules back to RHEL9 datastream (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Fix typo in audit_access_success_aarch64 rule title. (Gabriel Becker) 2024-11-27 21:46:23.312 logging.py DEBUG - Use get blob when file is bigger than 1M in ansible roles conversion. (Gabriel Becker) 2024-11-27 21:46:23.312 logging.py DEBUG - Fix CMake dependencies (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Ignore invalid or non existing include objects (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Align Ansible remediation with Bash (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Should have been delete with "git mv" but was not (Earl Sampson) 2024-11-27 21:46:23.312 logging.py DEBUG - Add test for for missing rsyslog included files (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Don't parse hidden config files for Includes (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Reset the arrays before using them (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Added platform. (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - Fixed incorrect parsing of rules in old code (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - Match glob() function of rsyslog (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - Rsyslog says we should include all files (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - Update test files. (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - Cover the include pattern '/etc/rsyslog.d/' (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - The way using 'find' can be retired. (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - Add test for wildcard paths used in rsyslog (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - A better fix. (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - rsyslog: Fix array creation when path has wildcard (Flos Lonicerae) 2024-11-27 21:46:23.312 logging.py DEBUG - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_create/ansible/shared.yml (Joseph Lenox) 2024-11-27 21:46:23.312 logging.py DEBUG - The test now accepts mulitple users in the same group. (sampsone) 2024-11-27 21:46:23.312 logging.py DEBUG - Add the platform applicability to relevant rules (Matej Tyc) 2024-11-27 21:46:23.312 logging.py DEBUG - Improve code style (Matej Tyc) 2024-11-27 21:46:23.312 logging.py DEBUG - Use partition exist platforms on a real rule (Matej Tyc) 2024-11-27 21:46:23.312 logging.py DEBUG - Add platforms for partition existence (Matej Tyc) 2024-11-27 21:46:23.312 logging.py DEBUG - switch rule grub2_disable_interactive_boot for grub2_disable_recovery in rhel8 ospp (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Extend rule to audit uses of kmod on RHEL7 to satisfy DISA STIG. (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.312 logging.py DEBUG - Implement DISA check for auditing create_module for RHEL7. (Lenox, Joseph D (Joseph)) 2024-11-27 21:46:23.312 logging.py DEBUG - SUSE fix file_groupownership_home_directories (sampsone) 2024-11-27 21:46:23.312 logging.py DEBUG - fix ocils (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Reintroduce back the sshd timeout rules in RHEL8 STIG profile. (Gabriel Becker) 2024-11-27 21:46:23.312 logging.py DEBUG - Avoid very long lines by renaming varaible (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Fix CodeClimate problems (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Update a comment (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Add SUSE remote content to verify_references.py (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Use data stream to verify references (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - make sysctl_kernel_core_pattern conflicting with sysctl_kernel_core_pattern_empty_string (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - describe beneficial dependency between sysctl_kernel_core_pattern_empty_string and sysctl:kernel_core_uses_pid (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - add rule to RHEL9 OSPP profile (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - add new rule setting kernel.core_pattern to empty string (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - add new rule sysctl_kernel_core_uses_pid (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - remove conditional from sysctl templated OVAL (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - remove unneeded coredump related rules from rhel9 ospp (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Update RHEL7 STIG to V3R8 (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R8 (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R8 (Watson Sato) 2024-11-27 21:46:23.312 logging.py DEBUG - Build 5.10 content for sanity test. (Gabriel Becker) 2024-11-27 21:46:23.312 logging.py DEBUG - Fix build in OVAL 5.10 mode. (Gabriel Becker) 2024-11-27 21:46:23.312 logging.py DEBUG - Update linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_loghost/rule.yml (vojtapolasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Add Kubernets remediation for rule configure_crypto_policy (vincent056) 2024-11-27 21:46:23.312 logging.py DEBUG - add warning to the rsyslog_remote_loghost rule about configuring queues (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - OCP4: Look at rendered-config-xyz when checking FIPS, consolidate two rules (Jakub Hrozek) 2024-11-27 21:46:23.312 logging.py DEBUG - add warning to audit_rules_for_ospp because the same case as audit_basic_configuration applies (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Add an empty line (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Use XCCDF 1.2 to create a STIG overlay (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Extend create-stig-overlay.py to accept XCCDF 1.2 (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Remove unused import (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Fix a traceback in help (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - Generate CCE tables from data stream (Jan Černý) 2024-11-27 21:46:23.312 logging.py DEBUG - update profile stability test (Vojtech Polasek) 2024-11-27 21:46:23.312 logging.py DEBUG - Fix CodeClimate problem (Jan Černý) 2024-11-27 21:46:23.313 logging.py DEBUG - Fix rule sudo_custom_logfile (Jan Černý) 2024-11-27 21:46:23.313 logging.py DEBUG - change authselect profile to minimal in rhel8 ospp (Vojtech Polasek) 2024-11-27 21:46:23.313 logging.py DEBUG - change authselect profile to minimal in rhel9 ospp (Vojtech Polasek) 2024-11-27 21:46:23.313 logging.py DEBUG - fix ospp references (Vojtech Polasek) 2024-11-27 21:46:23.313 logging.py DEBUG - Use data stream to verify profile titles and descriptions (Jan Černý) 2024-11-27 21:46:23.313 logging.py DEBUG - Stop validating ssg-product-xccdf.xml (Jan Černý) 2024-11-27 21:46:23.313 logging.py DEBUG - Use data stream to build Ansible Playbooks and Bash scripts (Jan Černý) 2024-11-27 21:46:23.313 logging.py DEBUG - Add the AUID filters on audit kernel module rules (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Add perm filter for RHEL7 privileged commands rule (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Remove useless whitespace chars from references. (Gabriel Becker) 2024-11-27 21:46:23.313 logging.py DEBUG - Update OCIL check along with the rule (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Gitpod: move ssh into workspace so it's persisted between sessions. (Gabriel Becker) 2024-11-27 21:46:23.313 logging.py DEBUG - Improve definition's comments (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Restrict sysctl multivalue compliance to rhel and ol (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Remove variable selector that will result in error (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Make rule for kptr_restrict accept two values (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Make rule sysctl ipv4 rp_filter accept two values (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Add ol9 to jinja conditionals (Edgar Aguilar) 2024-11-27 21:46:23.313 logging.py DEBUG - Introduce e8 profile for ol9 (Edgar Aguilar) 2024-11-27 21:46:23.313 logging.py DEBUG - Accept sudoers files without includes as compliant (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Add rsyslogd to the list of tools check by aide (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Support commas in variables (Jan Černý) 2024-11-27 21:46:23.313 logging.py DEBUG - Better align with RHEL-08-040259 (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Add rule for sysctl net.ipv4.conf.all.forwarding (Watson Sato) 2024-11-27 21:46:23.313 logging.py DEBUG - Add tests to account_password_selinux_faillock_dir (Edgar Aguilar) 2024-11-27 21:46:23.313 logging.py DEBUG - Add automation content to a rule (Edgar Aguilar) 2024-11-27 21:46:23.313 logging.py DEBUG - Add OVAL to fapolicy_default_deny (Edgar Aguilar) 2024-11-27 21:46:23.313 logging.py DEBUG - Update RHEL8 STIG to V1R7 (Watson Sato) 2024-11-27 21:46:23.315 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R6 (Watson Sato) 2024-11-27 21:46:23.315 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R7 (Watson Sato) 2024-11-27 21:46:23.315 logging.py DEBUG - Mention both values 1 and 2 in the rule description (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Remove RHEL 8 STIG ID (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Improve documentation of the sysctl template (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Add a variable sysctl_kernel_unprivileged_bpf_disabled_value (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Rename parameter missing_static_pass (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Rename a template parameter (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Replace the sysctlval_remediate template parameter (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Simplify sysctl template (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Change test_config.yml (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Introduce sysctlval_wrong parameter (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Document the missing_static_pass option (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Document that sysctlval can be a list (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Use rule sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Add test scenarios for rule sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý) 2024-11-27 21:46:23.315 logging.py DEBUG - Introduce new rule sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Accept multiple values in the sysctl remediation (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Add option to allow system default (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Allow multiple values in sysctl static configuration (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Move check unrelated to the test scenarios (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Use a list of values in sysctl template (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Rename IDs in sysctl OVAL template (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Remove a rule from RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Fix broken XCCDF Values in Chromium (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Add test for broken XCCDF Values (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - Fix broken XCCDF values (Jan Černý) 2024-11-27 21:46:23.316 logging.py DEBUG - ssg/constants.py: fix the alinux3 full name error (YiLin.Li) 2024-11-27 21:46:23.316 logging.py DEBUG - ssg/constants.py: fix the alinux2 full name error (YiLin.Li) 2024-11-27 21:46:23.316 logging.py DEBUG - Gathering chrony conf field does not change system (sampsone) 2024-11-27 21:46:23.316 logging.py DEBUG - Reword description of account_disable_inactivity (Edgar Aguilar) 2024-11-27 21:46:23.316 logging.py DEBUG - Fix titles in accounts_passwords_pam_faillock_audit (Edgar Aguilar) 2024-11-27 21:46:23.316 logging.py DEBUG - Update pam_faillock_parameter_value macros (Edgar Aguilar) 2024-11-27 21:46:23.316 logging.py DEBUG - Install ansible for the extra modules (Watson Sato) 2024-11-27 21:46:23.316 logging.py DEBUG - Never add OCIL for security_patches_up_to_date (Watson Sato) 2024-11-27 21:46:23.316 logging.py DEBUG - Introcuce a shortcut for --datastream-only (Matej Tyc) 2024-11-27 21:46:23.316 logging.py DEBUG - fix white space problem (Earl Sampson) 2024-11-27 21:46:23.316 logging.py DEBUG - Remove unused import (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Double quote sysctl values (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Avoid data duplication (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Avoid data duplication (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Avoid confusion (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Extract method _find_tests_paths (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - OCP: Fix rule kubelet_configure_event_creation (vincent056) 2024-11-27 21:46:23.317 logging.py DEBUG - Add tests to accounts_passwords_pam_faillock_audit (Edgar Aguilar) 2024-11-27 21:46:23.317 logging.py DEBUG - Add automated content to a rule (Edgar Aguilar) 2024-11-27 21:46:23.317 logging.py DEBUG - Update contributors for v0.1.63 release (Watson Sato) 2024-11-27 21:46:23.317 logging.py DEBUG - Update gitpod HTML preview extension. (Gabriel Becker) 2024-11-27 21:46:23.317 logging.py DEBUG - Align test scenario value with variable's values. (Gabriel Becker) 2024-11-27 21:46:23.317 logging.py DEBUG - SUSE SLE15 add messagebus and nscd to authorized_local_users (sampsone) 2024-11-27 21:46:23.317 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Update rule to accept binaries with GID > 1000 (Watson Sato) 2024-11-27 21:46:23.317 logging.py DEBUG - Add system account owned file test scenario (Watson Sato) 2024-11-27 21:46:23.317 logging.py DEBUG - Update shared.yml (Earl Sampson) 2024-11-27 21:46:23.317 logging.py DEBUG - Extract function load_local_test_scenarios (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Extract function load_templated_test_scenarios (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Update SRG-APP-000131-CTR-000285 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.317 logging.py DEBUG - Move variable definition nearer its usage (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Separate finding paths from loading test scenarios (Jan Černý) 2024-11-27 21:46:23.317 logging.py DEBUG - Update SRG-APP-000069-CTR-000125 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.317 logging.py DEBUG - Update SRG-APP-000068-CTR-000120 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.317 logging.py DEBUG - Update SRG-APP-000039-CTR-000110 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.317 logging.py DEBUG - SUSE update chronyd max poll to support chrony.d (sampsone) 2024-11-27 21:46:23.317 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2024-11-27 21:46:23.318 logging.py DEBUG - Remove a confusing sentence (Jan Černý) 2024-11-27 21:46:23.318 logging.py DEBUG - Rename variables (Jan Černý) 2024-11-27 21:46:23.318 logging.py DEBUG - Fix bash remediation in rsyslog_remote_access_monitoring rule (Marcus Burghardt) 2024-11-27 21:46:23.318 logging.py DEBUG - Separate locating test scenarios (Jan Černý) 2024-11-27 21:46:23.318 logging.py DEBUG - Improve bash_ensure_pam_module_line macro (Marcus Burghardt) 2024-11-27 21:46:23.318 logging.py DEBUG - Extract method (Jan Černý) 2024-11-27 21:46:23.318 logging.py DEBUG - Refactor by merging functions (Jan Černý) 2024-11-27 21:46:23.318 logging.py DEBUG - Remove unused parameters (Jan Černý) 2024-11-27 21:46:23.318 logging.py DEBUG - Include test scenario for accounts_password_pam_retry rule (Marcus Burghardt) 2024-11-27 21:46:23.318 logging.py DEBUG - Improve wording in pwhistory_remember rules (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Update tests to use authselect when available (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Update pam_pwhistory_remember rule (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Update tests in pam_pwhistory_remember rules (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Update var_password_pam_remember_control_flag (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Improve remediation which enable pam_faillock.so (Marcus Burghardt) 2024-11-27 21:46:23.318 logging.py DEBUG - Improve regex to match retry parameter (Marcus Burghardt) 2024-11-27 21:46:23.318 logging.py DEBUG - Create FMF test plans for destructive and non-destructive tests (Milan Lysonek) 2024-11-27 21:46:23.318 logging.py DEBUG - Fix ansible role condition when a package/service rule id has hyphen. (Gabriel Becker) 2024-11-27 21:46:23.318 logging.py DEBUG - Fix pep issues. (Gabriel Becker) 2024-11-27 21:46:23.318 logging.py DEBUG - Create rule to cover OL08-00-020261 (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Create rule to cover OL08-00-020260 (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Include ol9 product to jinja conditionals (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Improve ol9 anssi rules wording (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Introduce anssi profiles to ol9 (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Update macro bash_ensure_pam_module_line (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Fix typos in accounts_password_pam_retry (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Address maintainer comments (pam_retry rule) (Edgar Aguilar) 2024-11-27 21:46:23.318 logging.py DEBUG - Update ansible macro for systems without authselect (Edgar Aguilar) 2024-11-27 21:46:23.319 logging.py DEBUG - Update accounts_password_pam_retry behavior (Edgar Aguilar) 2024-11-27 21:46:23.319 logging.py DEBUG - Condition run of newaliases to its availability (Watson Sato) 2024-11-27 21:46:23.319 logging.py DEBUG - Update SRG-APP-000038-CTR-000105 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.319 logging.py DEBUG - Update SRG-APP-000126-CTR-000275 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.319 logging.py DEBUG - Update SRG-APP-000111-CTR-000220 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.319 logging.py DEBUG - Update SRG-APP-000092-CTR-000165 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.319 logging.py DEBUG - Remove rules for package removal from RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.319 logging.py DEBUG - The RHEL 9 OSPP gets out of Draft phase. (Jan Pazdziora) 2024-11-27 21:46:23.319 logging.py DEBUG - Update the OSPP SFR references in the profile file for the Annex items. (Jan Pazdziora) 2024-11-27 21:46:23.319 logging.py DEBUG - Clarify that management and audit servers are not selected in trusted channel SFR. (Jan Pazdziora) 2024-11-27 21:46:23.319 logging.py DEBUG - Refer to the actual protection profile page. (Jan Pazdziora) 2024-11-27 21:46:23.319 logging.py DEBUG - Add OL platform to tests (Federico Ramirez) 2024-11-27 21:46:23.319 logging.py DEBUG - Refactor ansible role with STIG references code. (Gabriel Becker) 2024-11-27 21:46:23.319 logging.py DEBUG - Add DISA STIG ids to ansible when conditions in roles. (Gabriel Becker) 2024-11-27 21:46:23.319 logging.py DEBUG - Add OL9 to jinja conditionals (Federico Ramirez) 2024-11-27 21:46:23.319 logging.py DEBUG - Exclude OL9 from remediations (Federico Ramirez) 2024-11-27 21:46:23.319 logging.py DEBUG - Add OL9 platform to remediations for stig profile (Federico Ramirez) 2024-11-27 21:46:23.319 logging.py DEBUG - Introduce draft stig profile for OL9 (Federico Ramirez) 2024-11-27 21:46:23.319 logging.py DEBUG - remove rules from rhel8 ospp (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - change not aarch64 specific rules to be not applicable on rhel9 if we are on aarch64 (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - make audit aarch64 rules rhel9 only (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - remove rule from rhel9 ospp (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - remove umask related rules from rhel9 ospp (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - Don't pass sssd rules when sssd.conf is absent (Watson Sato) 2024-11-27 21:46:23.319 logging.py DEBUG - remove redundant rules from rhel9 ospp (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - remove rule from rhel9 ospp profile (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - remove 4 rules from rhel9 ospp (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - Remove unrelated rule from CIS RHEL8 control (Watson Sato) 2024-11-27 21:46:23.319 logging.py DEBUG - Move iptables rules to related_rules (Watson Sato) 2024-11-27 21:46:23.319 logging.py DEBUG - fix CCE assignments after rebase (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - Remove unused build option (Jan Černý) 2024-11-27 21:46:23.319 logging.py DEBUG - make newly added rules RHEL9 only (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add new rules to rhel9 ospp profile (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_perm_change_success ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_perm_change_failed for ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_owner_change_success aarch64 (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_owner_change_failed ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_ospp_general ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_module_load ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit modify_success ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_modify_failed ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_delete_success ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_delete_failed ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_create_success ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_create_failed ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_access_success ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add audit_access_failed_ppc64le (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - add ppc64le applicability platform (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - Fix OCP rule kubelet_enable_client_cert_rotation (vincent056) 2024-11-27 21:46:23.319 logging.py DEBUG - Remove CentOS 6 and SL 6 from the project (Matthew Burket) 2024-11-27 21:46:23.319 logging.py DEBUG - Remove duplicate keys for alinux (Matthew Burket) 2024-11-27 21:46:23.319 logging.py DEBUG - Fix pre tag in ocil_mount_option (Matthew Burket) 2024-11-27 21:46:23.319 logging.py DEBUG - The FMT_MOF_EXT.1 only deals with restricting management functions to administrator, the functions themselves are listed in FMT_SMF_EXT.1. (Jan Pazdziora) 2024-11-27 21:46:23.319 logging.py DEBUG - update test scenarios of postfix_client_configure_mail_alias to install postfix (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - make rule rhel9 aware and add it to stig profile (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - correct ansible remediatiation postfix_client_configure_mail_alias (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - use fixtext macro (Vojtech Polasek) 2024-11-27 21:46:23.319 logging.py DEBUG - Update linux_os/guide/services/mail/package_postfix_installed/rule.yml (vojtapolasek) 2024-11-27 21:46:23.319 logging.py DEBUG - Add more sysctl rules to intermediary profile (anivan-suse) 2024-11-27 21:46:23.319 logging.py DEBUG - Add headers to remediations in faillock_dir rule (Edgar Aguilar) 2024-11-27 21:46:23.319 logging.py DEBUG - Add more ANSSI Intermediary Rules (anivan-suse) 2024-11-27 21:46:23.319 logging.py DEBUG - Automatus: close hanging tempfiles descriptors (Matus Marhefka) 2024-11-27 21:46:23.319 logging.py DEBUG - Add pass and fail tests for auditd_audispd_disk_full_action rule (teacup-on-rockingchair) 2024-11-27 21:46:23.319 logging.py DEBUG - Update CIS RHEL8 2.2.18 requirement to mask nfs-server (Marcus Burghardt) 2024-11-27 21:46:23.321 logging.py DEBUG - Update the service_nfs_disabled for CIS RHEL8 v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:23.321 logging.py DEBUG - Add oval check, bash and ansible remediation for auditd_audispd_disk_full_action rule (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - change remediations to include the "=" sign (Vojtech Polasek) 2024-11-27 21:46:23.321 logging.py DEBUG - add rule to rhel8 stig profiles (Vojtech Polasek) 2024-11-27 21:46:23.321 logging.py DEBUG - add new rule (Vojtech Polasek) 2024-11-27 21:46:23.321 logging.py DEBUG - Add user session timeout rules to ANSSI enhanced profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add rules for Uninstalling SELinux Policy Debugging Tools to ANSSI SLE high profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sebool_polyinstantiation_enabled to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sebool rules for execheap insmod and ssh login to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add ANSSI high profile for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sysctl_vm_mmap_min_addr rule to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sysctl_kernel_yama_ptrace_scope to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sysctl_kernel_sysrq to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sysctl_kernel_pid_max to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add rules that restricts the use of the perf system to ANSSI SLE profiles (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add enhanced ANSSI profile for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sysctl_kernel_modules_disabled to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add sysctl_kernel_dmesg_restrict rule to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add NX/DX setting rules to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add rule sysctl_fs_suid_dumpable to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Add to SLE12 and SLE15 ANSSI profile rules for sysctl_fs_protected_symlinks (teacup-on-rockingchair) 2024-11-27 21:46:23.321 logging.py DEBUG - Introduce sebool description and ocil macros (Edgar Aguilar) 2024-11-27 21:46:23.321 logging.py DEBUG - Bump version to 0.1.64 (Watson Sato) 2024-11-27 21:46:23.321 logging.py DEBUG - Fix PEP8 issue and useless assignment in rule_dir_json.py (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Fix copy paste error in test_build_cpe.py (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Fix usage of fix_file_prompt in utils/fix_rules.py (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Fix error message in rule test_suite (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Remove 3 package rules from RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.321 logging.py DEBUG - Remove 3 crypto rules from RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.321 logging.py DEBUG - Presence of the argument enables interactive boot (Watson Sato) 2024-11-27 21:46:23.321 logging.py DEBUG - Improve rule description and fix wrt rhcos4 (Matej Tyc) 2024-11-27 21:46:23.321 logging.py DEBUG - Add tests for accounts_passwords_pam_faillock_dir (Edgar Aguilar) 2024-11-27 21:46:23.321 logging.py DEBUG - Create rule to cover OL08-00-020016 & 020017 (Edgar Aguilar) 2024-11-27 21:46:23.321 logging.py DEBUG - Update linux_os/guide/system/auditing/policy_rules/audit_immutable_login_uids/rule.yml (vojtapolasek) 2024-11-27 21:46:23.321 logging.py DEBUG - Remove rule dnf-automatic_security_updates_only from RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.321 logging.py DEBUG - Ensure the Ansible shell command don't fail (Watson Sato) 2024-11-27 21:46:23.321 logging.py DEBUG - Define the dedicated_ssh_keyowner in RHCOS4 product to ssh_keys. (Gabriel Becker) 2024-11-27 21:46:23.321 logging.py DEBUG - Revert "Fix copy paste error in test_build_cpe.py" (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Revert "Fix PEP8 issue and useless assignment in rule_dir_json.py" (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Fix copy paste error in test_build_cpe.py (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Fix PEP8 issue and useless assignment in rule_dir_json.py (Matthew Burket) 2024-11-27 21:46:23.321 logging.py DEBUG - Add missing rules to OL8 STIG (Edgar Aguilar) 2024-11-27 21:46:23.321 logging.py DEBUG - Add template to firewalld-backend (Edgar Aguilar) 2024-11-27 21:46:23.321 logging.py DEBUG - Update platform in test (Edgar Aguilar) 2024-11-27 21:46:23.321 logging.py DEBUG - Update rule no_empty_passwords (Edgar Aguilar) 2024-11-27 21:46:23.321 logging.py DEBUG - Minor fix to OVAL check files storing. (Gabriel Becker) 2024-11-27 21:46:23.321 logging.py DEBUG - Update rationale for package_iptables-services_installed (Marcus Burghardt) 2024-11-27 21:46:23.321 logging.py DEBUG - Re-introduce former check features (Matej Tyc) 2024-11-27 21:46:23.321 logging.py DEBUG - Amend OSPP references for some package_*_installed rules. (Jan Pazdziora) 2024-11-27 21:46:23.321 logging.py DEBUG - Inform the package name for systemd-journald service unit (Marcus Burghardt) 2024-11-27 21:46:23.321 logging.py DEBUG - Update CIS L2 test for configure_crypto_policy (Watson Sato) 2024-11-27 21:46:23.321 logging.py DEBUG - Make the Ansible remediation less generic (Matej Tyc) 2024-11-27 21:46:23.322 logging.py DEBUG - Add a supercompliance test scenario. (Matej Tyc) 2024-11-27 21:46:23.322 logging.py DEBUG - Add automated content to a rule (Edgar Aguilar) 2024-11-27 21:46:23.322 logging.py DEBUG - Include package_iptables-services_installed rule (Marcus Burghardt) 2024-11-27 21:46:23.322 logging.py DEBUG - Only store OVAL checks that are applicable to the product. (Gabriel Becker) 2024-11-27 21:46:23.322 logging.py DEBUG - Fix CIS RHEL8 titles for 2.2.5 and 5.3.5 ids (Marcus Burghardt) 2024-11-27 21:46:23.322 logging.py DEBUG - Ensure audit is installed in test scenarios (Watson Sato) 2024-11-27 21:46:23.322 logging.py DEBUG - Fix typo's (Håvard F. Aasen) 2024-11-27 21:46:23.323 logging.py DEBUG - Command 'chown', change from '.' to ':' separator (Håvard F. Aasen) 2024-11-27 21:46:23.323 logging.py DEBUG - Fix man-page header for lexgrog (Håvard F. Aasen) 2024-11-27 21:46:23.323 logging.py DEBUG - Add test scripts for auditd_audispd_network_failure_action rule (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Add SLE12 CCE ids for file_owner_etc_gshadow and file_permissions_etc_gshadow rules (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Drop sle12 support from accounts_password_pam_ucredit rule since it duplicates with cracklib_accounts_password_pam_ucredit (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Drop sle12 support from accounts_password_pam_ocredit rule since it duplicates with cracklib_accounts_password_pam_ocredit (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Drop sle12 support from accounts_password_pam_minlen rule since it duplicates with cracklib_accounts_password_pam_minlen (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Drop sle12 support from accounts_password_pam_dcredit rule since it duplicates with cracklib_accounts_password_pam_dcredit (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Drop sle12 support from accounts_password_pam_unix_remember rule since it duplicates with accounts_password_pam_pwhistory_remember (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Drop debug printout and prefer line length over indentation (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - More code climate minor improvements (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Reduce code complexity (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Add long profiles option to missin_cces test (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Move OVAL templated checks to a folder called checks_from_template. (Gabriel Becker) 2024-11-27 21:46:23.323 logging.py DEBUG - Store intermediate OVAL check files into the build directory. (Gabriel Becker) 2024-11-27 21:46:23.323 logging.py DEBUG - Fix check and remediation wrt POSIX CLI standard (Matej Tyc) 2024-11-27 21:46:23.323 logging.py DEBUG - Don't treat missing file as failure (Matej Tyc) 2024-11-27 21:46:23.323 logging.py DEBUG - Relaxed the chrony user check (Matej Tyc) 2024-11-27 21:46:23.323 logging.py DEBUG - Remove authselect profile select from RHEL8 and RHEL9 kickstarts (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Update profile stability for rhel8 STIG (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Add var_authselect_profile to RHEL8 and RHEL9 STIG profiles (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Add references to enable_authselect (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Add enable_authselect to RHEL 8 and RHEL 9 STIG profiles (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Remove the vendor-zipfile and redhat-zipfile targets (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Removed iptables and ip6tables rules from CIS RHEL8 controlfile (Marcus Burghardt) 2024-11-27 21:46:23.323 logging.py DEBUG - Fix missing identifiers and references in rules (Marcus Burghardt) 2024-11-27 21:46:23.323 logging.py DEBUG - Change false to true where needed (anivan-suse) 2024-11-27 21:46:23.323 logging.py DEBUG - Fix Ansible tests for Fedora building (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Update Fedora linker checker to Fedora latest (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Update Fedora Dockerfile to latest (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Update Ubuntu docker file (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Configure markdownlint (mld) via .mdlrc and style file (Evgeny Kolesnikov) 2024-11-27 21:46:23.323 logging.py DEBUG - Remove obsolete one-off scripts following the Style Guide (Evgeny Kolesnikov) 2024-11-27 21:46:23.323 logging.py DEBUG - Configure markdownlint (mld) via .mdlrc (Evgeny Kolesnikov) 2024-11-27 21:46:23.323 logging.py DEBUG - Fix Style Guide formatting according to mdl (markdownlint) (Evgeny Kolesnikov) 2024-11-27 21:46:23.323 logging.py DEBUG - Extract Project-level recommendations from General Coding Style and add the entry about one-off scripts (Evgeny Kolesnikov) 2024-11-27 21:46:23.323 logging.py DEBUG - Python 2 has been removed from Fedora (Matthew Burket) 2024-11-27 21:46:23.323 logging.py DEBUG - Include fedora product in the macro conditional for sssd_enable_smartcards (Marcus Burghardt) 2024-11-27 21:46:23.323 logging.py DEBUG - Add missing CCES for SLE15 (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Tune missing CCEs test for SLE platform (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Add ability to filter missing cces by profile list (teacup-on-rockingchair) 2024-11-27 21:46:23.323 logging.py DEBUG - Fix test syntax (anivan-suse) 2024-11-27 21:46:23.323 logging.py DEBUG - Replace lowercase "pam" by "PAM" in description (Marcus Burghardt) 2024-11-27 21:46:23.323 logging.py DEBUG - Update CIS RHEL8 controlfile to v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:23.323 logging.py DEBUG - Added the original rhcos4 behavior to the PR (Matej Tyc) 2024-11-27 21:46:23.324 logging.py DEBUG - Remove CIS RHEL8 reference for rules not present on v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:23.324 logging.py DEBUG - Update RHEL8 CIS refereces for system maintainance rules (Marcus Burghardt) 2024-11-27 21:46:23.324 logging.py DEBUG - Update RHEL8 CIS refereces for access, authentication and authorization rules (Marcus Burghardt) 2024-11-27 21:46:23.324 logging.py DEBUG - Update RHEL8 CIS refereces for logging and auditing rules (Marcus Burghardt) 2024-11-27 21:46:23.324 logging.py DEBUG - Update RHEL8 CIS refereces for network configuration rules (Marcus Burghardt) 2024-11-27 21:46:23.324 logging.py DEBUG - Update RHEL8 CIS refereces for services rules (Marcus Burghardt) 2024-11-27 21:46:23.324 logging.py DEBUG - Update RHEL8 CIS refereces for initial setup rules (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Add missing cce test for SLE platforms (teacup-on-rockingchair) 2024-11-27 21:46:23.325 logging.py DEBUG - Add tests in faillock rules (Edgar Aguilar) 2024-11-27 21:46:23.325 logging.py DEBUG - Improve faillock related macros (Edgar Aguilar) 2024-11-27 21:46:23.325 logging.py DEBUG - Add oval,bash and ansible for auditd_audispd_network_failure_action rule (teacup-on-rockingchair) 2024-11-27 21:46:23.325 logging.py DEBUG - Reduce the list of FIPS crypto policies (Matej Tyc) 2024-11-27 21:46:23.325 logging.py DEBUG - Remove yp-related rules from RHEL9 (Matej Tyc) 2024-11-27 21:46:23.325 logging.py DEBUG - Solve the issue of dedicated ssh key groups. (Matej Tyc) 2024-11-27 21:46:23.325 logging.py DEBUG - Extract file mode check to an extend definition (Jan Černý) 2024-11-27 21:46:23.325 logging.py DEBUG - Fix assigned STIG id to set_password_hashing_min_rounds_logindefs rule (teacup-on-rockingchair) 2024-11-27 21:46:23.325 logging.py DEBUG - Remove SLES-15-010250 rule to follow up updated of DISA STIG (teacup-on-rockingchair) 2024-11-27 21:46:23.325 logging.py DEBUG - Update description in RHEL8 CIS profiles and controlfile for v2.0.0 (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Include test scenarios for missing /etc/sssd/sssd.conf (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Update OVAL assessment for sssd_enable_smartcards (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Include relevant test scenarios for sssd_enable_smartcards rule (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Update Ansible remediation for sssd_enable_smartcards (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Update Bash remediation for sssd_enable_smartcards (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Update the sssd_enable_smartcards rule description (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Fix spacing in ansible (anivan-suse) 2024-11-27 21:46:23.325 logging.py DEBUG - Fix tests (anivan-suse) 2024-11-27 21:46:23.325 logging.py DEBUG - Modified the rule description. (Matej Tyc) 2024-11-27 21:46:23.325 logging.py DEBUG - Added tests for the new behavior. (Matej Tyc) 2024-11-27 21:46:23.325 logging.py DEBUG - De-template the rule (Matej Tyc) 2024-11-27 21:46:23.325 logging.py DEBUG - remove rule from rhel9 ospp (Vojtech Polasek) 2024-11-27 21:46:23.325 logging.py DEBUG - Clean up small typos (anivan-suse) 2024-11-27 21:46:23.325 logging.py DEBUG - controls/cis_alinux2.yml: modify the check value error of some rules (YiLin.Li) 2024-11-27 21:46:23.325 logging.py DEBUG - BUG: 2105878 OCP: Fix rule ocp4-kubelet-enable-streaming-connections (vincent056) 2024-11-27 21:46:23.325 logging.py DEBUG - Fix typo in wrong_value.fail.sh (anivan-suse) 2024-11-27 21:46:23.325 logging.py DEBUG - SUSE dconf_gnome_screensaver_lock_enabled fix bash and ansible remediation (anivan-suse) 2024-11-27 21:46:23.325 logging.py DEBUG - Mark tasks that don't make changes (Watson Sato) 2024-11-27 21:46:23.325 logging.py DEBUG - Set pipefail in Ansible shell commands with pipe (Watson Sato) 2024-11-27 21:46:23.325 logging.py DEBUG - Remove the secret from file (vincent056) 2024-11-27 21:46:23.325 logging.py DEBUG - bash remediation prepends a blank line (Vojtech Polasek) 2024-11-27 21:46:23.325 logging.py DEBUG - Enhance the bash_ensure_pam_module_line macro capabilities (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Create Bash macro to apply authselect changes (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Align bash_ensure_pam_module_line to the Ansible equivalent (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - revert back usage of audit_file_contents template (Vojtech Polasek) 2024-11-27 21:46:23.325 logging.py DEBUG - Unify the rhel approach for the rule (Watson Sato) 2024-11-27 21:46:23.325 logging.py DEBUG - Fix missing condition for Ansible authselect backup task (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - Create macro for authselect backup - Ansible (Marcus Burghardt) 2024-11-27 21:46:23.325 logging.py DEBUG - SLE15 SP4 audit_rules_augenrules broken. (sampsone) 2024-11-27 21:46:23.325 logging.py DEBUG - add ansible conditionals to CPE platforms determining architecture (Vojtech Polasek) 2024-11-27 21:46:23.325 logging.py DEBUG - make RHEL-08-020231 automated again (Vojtech Polasek) 2024-11-27 21:46:23.325 logging.py DEBUG - Select grub debug-shell rule in RHEL9 OSPP (Watson Sato) 2024-11-27 21:46:23.325 logging.py DEBUG - Add zipl_systemd_debug-shell_argument_absent (Watson Sato) 2024-11-27 21:46:23.325 logging.py DEBUG - Fix file_groupowner_grub2_cfg (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Remove SSG and openscap packages from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update audit_rules_usergroup_modification_passwd (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update audit_rules_usergroup_modification_passwd (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update audit_rules_usergroup_modification_gshadow (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update audit_rules_usergroup_modification_opasswd (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update audit_rules_usergroup_modification_group (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update suoders rules (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update account_temp_expire_date (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Update account_emergency_expire_date (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Fix PEP8 issues (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Add grub2_systemd_debug-shell_argument_absent (Watson Sato) 2024-11-27 21:46:23.325 logging.py DEBUG - Add to docs that product removals need to use the label (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Finish WRLinux removal (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Remove multi_platform_wrlinux from various places in the project (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Remove WRLinux 1019 product (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - Remove WRLinux8 products (Matthew Burket) 2024-11-27 21:46:23.325 logging.py DEBUG - The reasons for disabling Ctrl-Alt-Del reboot is audit trail related, to have the subject identity for the reboot operation. (Jan Pazdziora) 2024-11-27 21:46:23.326 logging.py DEBUG - Update link in PAM group (Milan Lysonek) 2024-11-27 21:46:23.326 logging.py DEBUG - remove rules from rhel9 ospp profile (Vojtech Polasek) 2024-11-27 21:46:23.326 logging.py DEBUG - fix scoring of audit_access_success in rhel9 ospp profile (Vojtech Polasek) 2024-11-27 21:46:23.327 logging.py DEBUG - sort cces (anivan-suse) 2024-11-27 21:46:23.327 logging.py DEBUG - Add sysctl kernel rules and cceids for mount rules (anivan-suse) 2024-11-27 21:46:23.327 logging.py DEBUG - Add Ansible remediation (anivan-suse) 2024-11-27 21:46:23.327 logging.py DEBUG - Disable glob expansion in Compare Datastream service. (Gabriel Becker) 2024-11-27 21:46:23.327 logging.py DEBUG - Fix ubuntu logic in display_login_attempts (Eduardo Barretto) 2024-11-27 21:46:23.327 logging.py DEBUG - Fix issues found in code review for #9101 (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Fix more missing ocil clauses. (Gabriel Becker) 2024-11-27 21:46:23.327 logging.py DEBUG - Add missing ocil_clause for audit rules. (Gabriel Becker) 2024-11-27 21:46:23.327 logging.py DEBUG - Update OCIL (Jan Černý) 2024-11-27 21:46:23.327 logging.py DEBUG - Add removed products to the changelog (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Add two rules and some more CCEIDs (anivan-suse) 2024-11-27 21:46:23.327 logging.py DEBUG - Improve conditionals for authselect apply-changes tasks (Marcus Burghardt) 2024-11-27 21:46:23.327 logging.py DEBUG - Add file mode checks to configure_tmux_lock_command (Jan Černý) 2024-11-27 21:46:23.327 logging.py DEBUG - Add file mode checks to configure_tmux_lock_after_time (Jan Černý) 2024-11-27 21:46:23.327 logging.py DEBUG - Fix ansible syntax and make sure default rsyslog config file is also scanned for log file entries (teacup-on-rockingchair) 2024-11-27 21:46:23.327 logging.py DEBUG - products/alinux3 && controls: Add CIS Alibaba Cloud Linux 3 profiles (YuQing) 2024-11-27 21:46:23.327 logging.py DEBUG - Update the ocil_mount_option to remove the use of should (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update network_sniffer_disabled (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update ocil_sysctl_option_value (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update no_user_host_based_files (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update xwindows_runlevel_target (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update accounts_no_uid_except_zero (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update accounts_user_interactive_home_directory_exists (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update accounts_umask_interactive_users (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update rsyslog_cron_logging (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update rsyslog_nolisten (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update coredump_disable_backtraces (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update coredump_disable_storage (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update disable_users_coredumps (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update dconf_gnome_disable_ctrlaltdel_reboot (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update sudo_restrict_privilege_elevation_to_authorized (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Improve Ansible macros for PAM rules (Marcus Burghardt) 2024-11-27 21:46:23.327 logging.py DEBUG - Rephrasing and ordering adjustments - no functional impact (Marcus Burghardt) 2024-11-27 21:46:23.327 logging.py DEBUG - Improve regex for Ansible remediation in display_login_attempts (Marcus Burghardt) 2024-11-27 21:46:23.327 logging.py DEBUG - Update postfix_prevent_unrestricted_relay (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update no_host_based_files (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update tftpd_uses_secure_mode (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update network_configure_name_resolution (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Remove "should from OCIL in installed_OS_is_vendor_supported (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update display_login_attempts (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Improve output of srg_audit (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update Columns in srg_audit script (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update Oracle GPG reference reference links (Federico Ramirez) 2024-11-27 21:46:23.327 logging.py DEBUG - Add OL9 Dockerfile (Federico Ramirez) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_permissions_backup_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_permissions_backup_etc_passwd (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_permissions_backup_etc_gshadow (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_permissions_backup_etc_group (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_owner_backup_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_owner_backup_etc_passwd (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_owner_backup_etc_gshadow (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_owner_backup_etc_group (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_groupowner_backup_etc_group (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_groupowner_backup_etc_gshadow (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Update file_groupowner_backup_etc_passwd (Matthew Burket) 2024-11-27 21:46:23.327 logging.py DEBUG - Adjust bash remediation to correspond to rule.yml for correct value of TimedLoginEnable (Lenox, Joseph D (Collins)) 2024-11-27 21:46:23.327 logging.py DEBUG - Add rules to ensure the backup security files are protected. (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_permissions_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_permissions_etc_passwd (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_permissions_etc_gshadow (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_permissions_etc_group (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Fix ordering args in fixtext_directory_permissions (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Add file_permissions_etc_* to the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_owner_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_owner_etc_passwd (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_owner_etc_gshadow (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update file_owner_etc_group (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Fix small typo in bash_enable_authselect_feature description (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for no_empty_passwords (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Include Ansible macro to enable authselect feature (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Include Ansible remediation for password hashing algorithm (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Include Ansible remediation for set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Include Ansible macro to remove PAM module option (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update ansible_ensure_pam_module_line macro (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for display_login_attempts (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for pam_unix rounds option in system-auth (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for pam_unix rounds option in password-auth (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Fix the back references for replace module (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for accounts_password_pam_unix_remember (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for accounts_password_pam_retry (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for pam_pwquality in system_auth (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for pam_pwquality in password_auth (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for pam_pwhistory in system_auth (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Update Ansible remediation for pam_pwhistory in password_auth (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Introduce new Ansible macros to configure PAM modules (Marcus Burghardt) 2024-11-27 21:46:23.328 logging.py DEBUG - Add file_owner_etc_* to the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update accounts_password_pam_pwquality_password_auth (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Update accounts_password_pam_pwquality_system_auth (Matthew Burket) 2024-11-27 21:46:23.328 logging.py DEBUG - Add srg_requirement to audit_rules_immutable (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update dir_permissions_library_dirs (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Fix missing newlines at EOF (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - Improve a regular expression (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - remove no longer applicable references from the rule (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - update profile stability tests (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - remove rule and variable from control files (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - remove rule and variable from Fedora profiles (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - remove rule and variable from RHEL7 profiles (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - remove rule and variable from RHEL8 profiles (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - remove rule and variable from RHEL9 profiles (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - Fix regular expression (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - Increase Congintive Complexity threshold (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - Stop checking systemd.confirm_spawn in RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - Create rule grub2_disable_recovery (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - Increase Congintive Complexity threshold (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - RHEL9 OSPP: Drop rule preventing forwarding (Watson Sato) 2024-11-27 21:46:23.362 logging.py DEBUG - RHEL9 OSPP: Drop log martians rules (Watson Sato) 2024-11-27 21:46:23.362 logging.py DEBUG - RHEL9 OSPP: Remove rules that affect secuity of TOE (Watson Sato) 2024-11-27 21:46:23.362 logging.py DEBUG - RHEL9 OSPP: Drop send redirect rules that don't affect the TOE (Watson Sato) 2024-11-27 21:46:23.362 logging.py DEBUG - RHEL9 OSPP: Drop rules changing default values not related to OSPP (Watson Sato) 2024-11-27 21:46:23.362 logging.py DEBUG - RHEL9 OSPP: Drop rules affecting important funcionality (Watson Sato) 2024-11-27 21:46:23.362 logging.py DEBUG - RHEL9 OSPP: Drop rules w/o specific need aligned with default value (Watson Sato) 2024-11-27 21:46:23.362 logging.py DEBUG - update rhel8 ospp profile stability test (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - aarch64 version of audit_perm_change_success (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - aarch64 version of audit_perm_change_failed (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - aarch64 version of audit_owner_change_success (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - aarch64 version of audit_owner_change_failed (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - add aarch64 version of audit_delete_success (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - add aarch64 version of audit_delete_failed (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - add aarch64 version of audit_access_failed / success rules (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - add aarch64 version of audi_modify_success (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - add aarch64 version of audit_modify_failed (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - add aarch64 rule audit_create_success (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - make audi_create_failed aarch64 version (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - make aarch64 version of audit_ospp_general (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - modify the oval_file_content macro to use rule_id (Vojtech Polasek) 2024-11-27 21:46:23.362 logging.py DEBUG - Switch aide variable to the wrapper in Ubuntu products. (Gabriel Becker) 2024-11-27 21:46:23.362 logging.py DEBUG - Use product defined aide_bin_path variable instead of custom ones. (Gabriel Becker) 2024-11-27 21:46:23.362 logging.py DEBUG - Fix PEP8 (Jan Černý) 2024-11-27 21:46:23.362 logging.py DEBUG - Use a aideinit script to generate ubuntu aide databases. (Gabriel Becker) 2024-11-27 21:46:23.362 logging.py DEBUG - Use correct aide path variable in the rule descriptions and ocil. (Gabriel Becker) 2024-11-27 21:46:23.362 logging.py DEBUG - Ensure an authselect profile is selected for tests (Marcus Burghardt) 2024-11-27 21:46:23.362 logging.py DEBUG - Ignore IntelliJ Idea configuration (Evgeny Kolesnikov) 2024-11-27 21:46:23.362 logging.py DEBUG - Update file_groupowner_etc_gshadow (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update file_groupowner_etc_group (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update file_groupowner_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update file_groupowner_etc_passwd (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update file_groupowner_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update file_groupowner_grub2_cfg (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Add more file_groupowner_* rules to the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update chronyd_server_directive (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update service_chronyd_enabled (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update SRG-OS-000355-GPOS-00143 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.362 logging.py DEBUG - Update set_password_hashing_algorithm_passwordauth (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Add set_password_hashing_algorithm_passwordauth to the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Update set_password_hashing_min_rounds_logindefs (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Add set_password_hashing_min_rounds_logindefs to the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Add accounts_password_pam_pwquality_* to RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Add sysctl_net_ipv4_conf_default_accept_redirects to the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Add dir_permissions_library_dirs to RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Refactor: Extract function file_known_as_useless (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Extract condition (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Extract a variable (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Refactor: Extract function write_rule_test_content_to_dir (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Fix content applicability to correctly use templated content. (Gabriel Becker) 2024-11-27 21:46:23.363 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Split method (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Rework tarball generation (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Ansible remediation for enable_authselect (Milan Lysonek) 2024-11-27 21:46:23.363 logging.py DEBUG - Update version in SRG control file. (Gabriel Becker) 2024-11-27 21:46:23.363 logging.py DEBUG - Extend the regex on macro to remove PAM option (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Improve test scenarios for accounts_password_pam_retry rule (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - OCP4: Drop not-s390x from file_owner_ovs_conf_db (Jakub Hrozek) 2024-11-27 21:46:23.363 logging.py DEBUG - OCP: Drop not-arch from file_groupowner_ovs_sys_id_conf (Jakub Hrozek) 2024-11-27 21:46:23.363 logging.py DEBUG - OCP4: Drop not-arch from file_groupowner_ovs_conf_db_lock (Jakub Hrozek) 2024-11-27 21:46:23.363 logging.py DEBUG - OCP4: Drop not-arch from file_groupowner_ovs_conf_db (Jakub Hrozek) 2024-11-27 21:46:23.363 logging.py DEBUG - Enforce rule sysctl_user_max_user_namespaces in RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Remove rule zip_vsyscall_argument (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Make rule audit_access_success in OSPP profile unenforcing (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Fix the PAM file informed in the two scripts (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Improve regex to remove option from PAM line (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Improve test scenarios for display_login_attempts (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Regex and descriptions improvemens in PAM macros (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update no_empty_passwords rule remediation and test scenarios (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - New bash macro to enable authselect feature (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update remediation for display_login_attempts rule (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Include bash macro to remove PAM module options (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Updated accounts_password_pam_retry rule remediation (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update bash_ensure_pam_module_configuration macro (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update remediation for pam_pwquality in system-auth (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update remediation for pam_pwquality in password-auth (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update remediation for pam_unix_rounds in system-auth (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update remediation for pam_unix_rounds in password-auth (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update remediation for password_hashing_algorithm in system-auth (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update remediation for password_hashing_algorithm in password-auth (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update the sed and grep commands to interpret vars (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Update bash remediation for pam_pwhistory rules (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Include test scenario for missing PAM line (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Use new PAM macros for bash remediation (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Introduce new bash macros to configure PAM modules (Marcus Burghardt) 2024-11-27 21:46:23.363 logging.py DEBUG - Remove sysctl_fs_protected_* rules from RHEL 9 OSPP (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Assign RHEL-08-030030 to postfix_client_configure_mail_alias_postmaster. (Gabriel Becker) 2024-11-27 21:46:23.363 logging.py DEBUG - Set tmux config files mode (Jan Černý) 2024-11-27 21:46:23.363 logging.py DEBUG - Add headers to remediations of a rule (Edgar Aguilar) 2024-11-27 21:46:23.363 logging.py DEBUG - Improve asterisk and spacing in markdown export (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - usbguard_generate_policy: fix Ansible remediation (Matus Marhefka) 2024-11-27 21:46:23.363 logging.py DEBUG - Fix type hints in convert_srg_export_to_md (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Fix type hints and constancy in utils/create_srg_export.py (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Add a markdown output target to create_srg_export (Matthew Burket) 2024-11-27 21:46:23.363 logging.py DEBUG - Add python vscode extension to the gitpod environment. (Gabriel Becker) 2024-11-27 21:46:23.363 logging.py DEBUG - Update RHEL8 profile stability data (Watson Sato) 2024-11-27 21:46:23.363 logging.py DEBUG - remove test data no longer used (Vojtech Polasek) 2024-11-27 21:46:23.363 logging.py DEBUG - remove custom test scenarios (Vojtech Polasek) 2024-11-27 21:46:23.363 logging.py DEBUG - create templated test scenarios (Vojtech Polasek) 2024-11-27 21:46:23.363 logging.py DEBUG - Add ansible remediation for postfix_prevent_unrestricted_relay. (Gabriel Becker) 2024-11-27 21:46:23.363 logging.py DEBUG - Fix RHEL8 STIG selection for sysctl forwarding (Watson Sato) 2024-11-27 21:46:23.363 logging.py DEBUG - Select rule for RHEL8 STIG (Watson Sato) 2024-11-27 21:46:23.363 logging.py DEBUG - Update testing container name in gitpod integration. (Gabriel Becker) 2024-11-27 21:46:23.363 logging.py DEBUG - Build content in debug mode when generating coverage statistics. (Gabriel Becker) 2024-11-27 21:46:23.363 logging.py DEBUG - Fix overlapping CCE ids for SLE15 (teacup-on-rockingchair) 2024-11-27 21:46:23.363 logging.py DEBUG - Add more rules to ANSSI profile for SLE platform (teacup-on-rockingchair) 2024-11-27 21:46:23.363 logging.py DEBUG - Add log related rules to ANSSI profile for SLE (teacup-on-rockingchair) 2024-11-27 21:46:23.364 logging.py DEBUG - Add rule rsyslog_files_permissions to sle12 ANSSI profile (teacup-on-rockingchair) 2024-11-27 21:46:23.364 logging.py DEBUG - Add rules to ANSSI SLE profile (teacup-on-rockingchair) 2024-11-27 21:46:23.364 logging.py DEBUG - OCP4: api_server_api_priority_gate_enabled: Checking this rule only makes sense for OCP 4.6 or older (Jakub Hrozek) 2024-11-27 21:46:23.364 logging.py DEBUG - Fix the sorting of identifiers (Marcus Burghardt) 2024-11-27 21:46:23.364 logging.py DEBUG - Fix regular expression in Ansible remediation (Jan Černý) 2024-11-27 21:46:23.364 logging.py DEBUG - usbguard_generate_policy: handle also systems without USBs (Matus Marhefka) 2024-11-27 21:46:23.364 logging.py DEBUG - Add ANSSI rules (anivan-suse) 2024-11-27 21:46:23.364 logging.py DEBUG - Add the SFRs from the SSH Functional Package as they are the most specific. (Jan Pazdziora) 2024-11-27 21:46:23.364 logging.py DEBUG - With the SSH Extended Package sunset and replaced by the Functional package (FP) via TD0649, use the relevant SFR from the FP. (Jan Pazdziora) 2024-11-27 21:46:23.364 logging.py DEBUG - The reason for disabling Kerberos and GSSAPI is the "and no other methods" in FCS_SSH_EXT.1.2 of the SSH Functional Package. (Jan Pazdziora) 2024-11-27 21:46:23.364 logging.py DEBUG - Remove test scenario that is no longer relevant (Jan Černý) 2024-11-27 21:46:23.364 logging.py DEBUG - In OSPP the reason for disabling root logins is to know the real identity of the administrator who logged in (and then used su/sudo), for auditing purposes. (Jan Pazdziora) 2024-11-27 21:46:23.364 logging.py DEBUG - remove test scenarios which test the content against files provided by audit (Vojtech Polasek) 2024-11-27 21:46:23.364 logging.py DEBUG - edit description of audit_policy_rules/* (Vojtech Polasek) 2024-11-27 21:46:23.364 logging.py DEBUG - Unify the OSPP references for the tmux-based session locking rules, add the implicitly satisfied FTA_SSL.1. (Jan Pazdziora) 2024-11-27 21:46:23.364 logging.py DEBUG - Use the correct path in a test scenario (Jan Černý) 2024-11-27 21:46:23.364 logging.py DEBUG - Add OL9 to jinja conditionals (Federico Ramirez) 2024-11-27 21:46:23.364 logging.py DEBUG - Update OL9 GPG key packages release (Federico Ramirez) 2024-11-27 21:46:23.364 logging.py DEBUG - Add OL9 platform to remediations for OSPP profile (Federico Ramirez) 2024-11-27 21:46:23.364 logging.py DEBUG - Introduce OSPP profile for OL9 (Federico Ramirez) 2024-11-27 21:46:23.364 logging.py DEBUG - Update fixtext_audit_file_watch_rule (Matthew Burket) 2024-11-27 21:46:23.364 logging.py DEBUG - Fixtext full_name in SRG-OS-000001-GPOS-00001 (Matthew Burket) 2024-11-27 21:46:23.364 logging.py DEBUG - OCP4: configure_network_policies: Calico also supports NetworkPolicies (Jakub Hrozek) 2024-11-27 21:46:23.364 logging.py DEBUG - Fix ocil_fix_srg_privileged_command arg in audit_rules_privileged_commands_usermod (Matthew Burket) 2024-11-27 21:46:23.364 logging.py DEBUG - Update srg_requirement file_permissions_etc_audit_auditd (Matthew Burket) 2024-11-27 21:46:23.364 logging.py DEBUG - Update srg_requirement in file_permissions_etc_audit_rulesd (Matthew Burket) 2024-11-27 21:46:23.364 logging.py DEBUG - Fix srg_requirement in service_fapolicyd_enabled (Matthew Burket) 2024-11-27 21:46:23.366 logging.py DEBUG - Update linux_os/guide/services/sssd/sssd_enable_pam_services/bash/shared.sh (Gabriel Becker) 2024-11-27 21:46:23.366 logging.py DEBUG - OCP4: Filter out SCCs that end with -v2 from the allowedCapabilities list (Jakub Hrozek) 2024-11-27 21:46:23.366 logging.py DEBUG - Use correct faillock path in group description (Jan Černý) 2024-11-27 21:46:23.366 logging.py DEBUG - Use correct faillock path (Jan Černý) 2024-11-27 21:46:23.366 logging.py DEBUG - Update PR comments with gitpod links to include OL8. (Gabriel Becker) 2024-11-27 21:46:23.366 logging.py DEBUG - Proper username regex in accounts_user_interactive_home_directory_defined (Milan Lysonek) 2024-11-27 21:46:23.366 logging.py DEBUG - Rename SSGTS to Automatus in gitpod integration files. (Gabriel Becker) 2024-11-27 21:46:23.366 logging.py DEBUG - Do not include symlink tests into OVAL 5.10. (Gabriel Becker) 2024-11-27 21:46:23.367 logging.py DEBUG - Remove audispd (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Fix a broken Jinja variable definition (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Remove audispd related rules (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add a dot (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Update OCIL and add SRG to rsyslog_encrypt_offload_defaultnetstreamdriver (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Update OCIL and add SRG to rsyslog_encrypt_offload_actionsendstreamdrivermode (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Remove rule package_audit-audispd-plugins_installed (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add SRG and fixtext package_audispd-plugins_installed (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add OCIL and SRG in auditd_overflow_action (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add fixtext and SRG requirement to auditd_audispd_syslog_plugin_activated (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add fixtext and SRG to auditd_audispd_network_failure_action (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add fixtext and SRG to auditd_audispd_encrypt_sent_records (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add fixtext and SRG requirement to auditd_audispd_disk_full_action (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Add a missing word (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Update text and SRG requirement in auditd_audispd_configure_sufficiently_large_partition (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Update OCIL and fixtext in auditd_audispd_configure_remote_server (Jan Černý) 2024-11-27 21:46:23.367 logging.py DEBUG - Fix build errors during bug fixing (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Add anssi_bp28_intermediary profile (anivan-suse) 2024-11-27 21:46:23.367 logging.py DEBUG - Add srg_requirement to configure_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Tweak srg_requirement_audit_file_watch_rule text (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Remove erroneous curly brace from accounts_password_pam_difok (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - In accounts_password_all_shadowed_sha512 cite FIPS 140-3 for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Update srg_requirement to accounts_password_pam_unix_rounds_password_auth (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Update srg_requirement to accounts_password_pam_unix_rounds_system_auth (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Fix srg_requirement in service_pcscd_enabled (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Add fixtxet to SRG-OS-000024-GPOS-00007 (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Update srg_requirement in configure_openssl_tls_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Parametrize the file name of the container used by gitpod integration. (Gabriel Becker) 2024-11-27 21:46:23.367 logging.py DEBUG - Use full_name in file_permissions_sshd_private_key (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Use full_name in file_permissions_sshd_pub_key (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - service_rsyslog_enabled should use service_enabled macros (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Update srg_requirement for package_tftp-server_removed (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Rewrite fixtext in ssh_private_keys_have_passcode (Edgar Aguilar) 2024-11-27 21:46:23.367 logging.py DEBUG - Use pkg_manager vs yum in rpm_verify_hashes (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Remove configure_libreswan_crypto_policy from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Align sssd_enable_pam_services tests to expect existing pam service (Milan Lysonek) 2024-11-27 21:46:23.367 logging.py DEBUG - sssd_enable_pam_services needs pam service to exist in [sssd] section (Milan Lysonek) 2024-11-27 21:46:23.367 logging.py DEBUG - Add a better srg_requirement for ensure_gpgcheck_globally_activated (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Add better srg_requirement for ensure_gpgcheck_local_packages (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Add better srg_requirement for ensure_gpgcheck_never_disabled (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Fix spelling errer in ensure_gpgcheck_never_disabled (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Add fixtext to SRG-OS-000358-GPOS-00145 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Fix -> fixtext in RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Fix formatting for fixtext macros "Run the following command" (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Use the fixtext macro for the fixtext in package_vsftpd_removed (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Handle variables in SRG Requirement (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Variable in configure_opensc_card_drivers for srg_requirement (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Pull force_opensc_card_drivers from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Update tests/unit/ssg-module/test_playbook_builder_data/guide/configure_crypto_policy/rule.yml (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Add platform machine to two rules (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - Update tests/unit/ssg-module/test_playbook_builder_data/guide/configure_crypto_policy/rule.yml (Matthew Burket) 2024-11-27 21:46:23.367 logging.py DEBUG - EKS: Fix typo (Jakub Hrozek) 2024-11-27 21:46:23.367 logging.py DEBUG - adapt to paramters (Marcus Meissner) 2024-11-27 21:46:23.367 logging.py DEBUG - OCP4: The flowcontrol API was bumped to v1beta2 in 4.11 (Jakub Hrozek) 2024-11-27 21:46:23.368 logging.py DEBUG - add products/uos20 to support UnionTech OS Server 20 (binyanling) 2024-11-27 21:46:23.368 logging.py DEBUG - Create rule to cover OL08-00-010100 (Edgar Aguilar) 2024-11-27 21:46:23.368 logging.py DEBUG - Fix quotes in accounts_password_set_min_life_existing (Matthew Burket) 2024-11-27 21:46:23.368 logging.py DEBUG - Fix quotes in accounts_minimum_age_login_defs (Matthew Burket) 2024-11-27 21:46:23.368 logging.py DEBUG - Fix quotes in accounts_password_set_max_life_existing (Matthew Burket) 2024-11-27 21:46:23.368 logging.py DEBUG - Fix quotes in accounts_maximum_age_login_defs (Matthew Burket) 2024-11-27 21:46:23.368 logging.py DEBUG - Fix quotes in rsyslog_remote_loghost (Matthew Burket) 2024-11-27 21:46:23.368 logging.py DEBUG - Fix quotes in dir_perms_world_writable_root_owned (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Fix quotes in sshd_enable_warning_banner (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_ocredit (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to account_disable_post_pw_expiration (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_logon_fail_delay (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_max_concurrent_login_sessions (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_minlen_login_defs (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_dcredit (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_dictcheck (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_difok (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_lcredit (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_maxclassrepeat (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_maxrepeat (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - sssd_enable_smartcards: authselect with-smarcard (Watson Sato) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_minclass (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_minlen (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_pwhistory_remember_password_auth (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_pwhistory_remember_system_auth (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_retry (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add whitespace in macro function so CTF can parse properly tokens. (Gabriel Becker) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_ucredit (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - test_env.py: add more attempts when executing ssh command (Matus Marhefka) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_unix_remember (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_unix_rounds_password_authk (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_password_pam_unix_rounds_system_auth (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_umask_etc_csh_cshrc (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_umask_etc_login_defs (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to accounts_umask_etc_profile (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to account_temp_expire_date (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to aide_periodic_cron_checking (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to banner_etc_issue (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to chronyd_or_ntpd_set_maxpoll (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to configure_bind_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Update configure_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Do not include OCIL content in rules that define OVAL external content. (Gabriel Becker) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to dconf_gnome_banner_enabled (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Fix issues in code review for PR #9025 (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for dconf_gnome_lock_screen_on_smartcard_removal (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for configure_tmux_lock_after_time (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for bios_enable_execution_restrictions (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for clean_components_post_updating (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for configure_firewalld_ports (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for configure_kerberos_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for configure_libreswan_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for configure_tmux_lock_command (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for dconf_gnome_login_banner_text (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for dconf_gnome_screensaver_idle_delay (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement for dconf_gnome_screensaver_lock_delay (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Add srg_requirement to dconf_gnome_screensaver_lock_enabled (Matthew Burket) 2024-11-27 21:46:23.369 logging.py DEBUG - Update dconf_gnome_screensaver_lock_locked (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Remove dconf_gnome_screensaver_mode_blank from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to dconf_gnome_screensaver_user_locks (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to dconf_gnome_session_idle_user_locks (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to dir_ownership_library_dirs (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to disable_ctrlaltdel_burstaction (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to disable_host_auth (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to enable_dracut_fips_module (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to enable_fips_mode (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to encrypt_partitions (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to ensure_gpgcheck_globally_activated (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to ensure_gpgcheck_never_disabled (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Pull ensure_redhat_gpgkey_installed from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to file_audit_tools_group_ownership (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to file_audit_tools_ownership (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to file_audit_tools_permissions (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Update file_permissions_var_log (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to grub2_admin_username (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Update file_permissions_var_log_messages (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Remove firewalld_sshd_port_enabled from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to gnome_gdm_disable_automatic_login (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to grub2_audit_backlog_limit_argument (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to grub2_password (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to grub2_uefi_admin_username (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to grub2_uefi_password (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to install_smartcard_packages (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to no_tmux_in_shells (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Update package_pcsc-lite_installed (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to postfix_client_configure_mail_alias (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to require_emergency_target_auth (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to require_singleuser_auth (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to rsyslog_encrypt_offload_actionsendstreamdriverauthmode (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to rsyslog_encrypt_offload_actionsendstreamdrivermode (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to rsyslog_encrypt_offload_defaultnetstreamdriver (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to sshd_enable_pam (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to rsyslog_remote_access_monitoring (Matthew Burket) 2024-11-27 21:46:23.370 logging.py DEBUG - Add srg_requirement to selinux_policytype (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to service_pcscd_enabled (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to service_sshd_enabled (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to service_usbguard_enabled (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Update set_password_hashing_algorithm_libuserconf (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Update set_password_hashing_algorithm_logindefs (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Update set_password_hashing_algorithm_systemauth (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Pull ssh_client_rekey_limit (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sshd_do_not_permit_user_env (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sshd_enable_warning_banner (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sssd_certificate_verification (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sssd_enable_smartcards (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sssd_has_trust_anchor (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sssd_offline_cred_expiration (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sudo_remove_no_authenticate (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sudo_remove_nopasswd (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sudo_require_reauthentication (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sysctl_fs_protected_hardlinks (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sysctl_fs_protected_symlinks (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Removing sysctl_kernel_exec_shield from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Add srg_requirement to sysctl_kernel_perf_event_paranoid (Matthew Burket) 2024-11-27 21:46:23.371 logging.py DEBUG - Don't fail utils/compare_results.py when idref/result is missing, just add placeholder to inform (Milan Lysonek) 2024-11-27 21:46:23.371 logging.py DEBUG - OCP4: Update policy.json verification (Jakub Hrozek) 2024-11-27 21:46:23.371 logging.py DEBUG - Remove references to authselect.conf not being empty (Matej Tyc) 2024-11-27 21:46:23.372 logging.py DEBUG - Add anssi gshadow rules (anivan-suse) 2024-11-27 21:46:23.372 logging.py DEBUG - fix title in account_password_pam_faillock_system_auth (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update rule to allow special bits in library dirs (Watson Sato) 2024-11-27 21:46:23.372 logging.py DEBUG - OCP4: Our CI checks for version.yml not version.yaml (Jakub Hrozek) 2024-11-27 21:46:23.372 logging.py DEBUG - Add 4.11 test manifests to several rules (Jakub Hrozek) 2024-11-27 21:46:23.372 logging.py DEBUG - Address feedback in #9016 (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update no_empty_passwords_etc_shadow (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update disallow_bypass_password_sudo (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add file_permissions_etc_group to anssi (anivan-suse) 2024-11-27 21:46:23.372 logging.py DEBUG - Add ssh rules to ANSSI (anivan-suse) 2024-11-27 21:46:23.372 logging.py DEBUG - Ensure pam_lastlog with 'silent' is caught (Watson Sato) 2024-11-27 21:46:23.372 logging.py DEBUG - convert to jinja template (Marcus Meissner) 2024-11-27 21:46:23.372 logging.py DEBUG - Correct display_login_attempts pass scenarios (Watson Sato) 2024-11-27 21:46:23.372 logging.py DEBUG - Remove any ocurrence of silent from postlogin (Watson Sato) 2024-11-27 21:46:23.372 logging.py DEBUG - OCP: use variable for oauthclient_inactivity_timeout (vincent) 2024-11-27 21:46:23.372 logging.py DEBUG - Add EditorConfig file (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add srg_requirement to sysctl_net_ipv4_tcp_invalid_ratelimit (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add srg_requirement to usbguard_generate_policy (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add srg_requirement to use_pam_wheel_for_su (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add srg_requirement to wireless_disable_interfaces (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update aide_scan_notification (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Remove harden_ssh_client_crypto_policy from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update disable_users_coredumps (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update coredump_disable_storage (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update coredump_disable_backtraces (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update xwindows_remove_packages (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - utils: Remove obsolete script (Jakub Hrozek) 2024-11-27 21:46:23.372 logging.py DEBUG - Update no_files_unowned_by_user (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update rpm_verify_permissions (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update rpm_verify_ownership (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add fixtext to sysctl_kernel_perf_event_paranoid (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add fixtext to sysctl_kernel_dmesg_restrict (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update sysctl bash template (Federico Ramirez) 2024-11-27 21:46:23.372 logging.py DEBUG - Sort subkeys in the new rules (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add new rule firewalld-backend (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add new rule fapolicy_default_deny (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update configured_firewalld_default_deny (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add new rule kernel_module_uvcvideo_disabled (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Update audit_rules_login_events_faillock (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add new rule account_password_pam_faillock_password_auth (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add new rule account_password_pam_faillock_password_auth (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Fix auditd_overflow_action OVAL to work properly on RHEL9. (Gabriel Becker) 2024-11-27 21:46:23.372 logging.py DEBUG - Fix account_passwords_pam_faillock_dir formatting issue (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Add new rule account_password_selinux_faillock_dir (Matthew Burket) 2024-11-27 21:46:23.372 logging.py DEBUG - Remove empty line in ensure_gpgcheck_never_disabled ansible remediation (Milan Lysonek) 2024-11-27 21:46:23.373 logging.py DEBUG - Update dconf_gnome_screensaver_lock_locked (Matthew Burket) 2024-11-27 21:46:23.373 logging.py DEBUG - Add new rule account_passwords_pam_faillock_audit to RHEL STIGs (Matthew Burket) 2024-11-27 21:46:23.373 logging.py DEBUG - Add rule for account_passwords_pam_faillock_dir for RHEL STIGs (Matthew Burket) 2024-11-27 21:46:23.373 logging.py DEBUG - Add mount_option_boot_efi_nosuid to RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.373 logging.py DEBUG - Add disallow_bypass_password_sudo to RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.373 logging.py DEBUG - Add no_empty_passwords_etc_shadow to SRG-OS-000480-GPOS-00227 (Matthew Burket) 2024-11-27 21:46:23.373 logging.py DEBUG - Add srg_requirement to postfix rule (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Extract function (Jan Černý) 2024-11-27 21:46:23.373 logging.py DEBUG - Handle symlinks in pkg manager config file path (Watson Sato) 2024-11-27 21:46:23.373 logging.py DEBUG - Follow symlinks in ensure_gpgcheck_local_packages (Watson Sato) 2024-11-27 21:46:23.373 logging.py DEBUG - Restrict multiline tests for SLE (Watson Sato) 2024-11-27 21:46:23.373 logging.py DEBUG - Update accounts_tmout to export and readonly TMOUT (Watson Sato) 2024-11-27 21:46:23.373 logging.py DEBUG - Make krb5 rules applicable only to older versions of certain package. (Gabriel Becker) 2024-11-27 21:46:23.373 logging.py DEBUG - Create rule to cover OL08-00-020262 (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Create rule to cover OL08-00-020263 (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Create rule to cover OL08-00-020264 (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Introduce rule passwd_system-auth_substack (Federico Ramirez) 2024-11-27 21:46:23.373 logging.py DEBUG - Create rule to cover OL08-00-030030 (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Create rule to cover OL08-00-010572 (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Create rule to cover OL08-00-010424 (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Add tests to configure_tmux_lock_after_time (Edgar Aguilar) 2024-11-27 21:46:23.373 logging.py DEBUG - Update configure_tmux_lock_after_time (Edgar Aguilar) 2024-11-27 21:46:23.374 logging.py DEBUG - OCP4: Kubernetes 1.24+ does not support the insecure-port flag (Jakub Hrozek) 2024-11-27 21:46:23.374 logging.py DEBUG - Update stability of RHEL8 STIG (Watson Sato) 2024-11-27 21:46:23.374 logging.py DEBUG - RHEL8 STIG: Install redhat gpg key (Watson Sato) 2024-11-27 21:46:23.374 logging.py DEBUG - Move method to parent class (Jan Černý) 2024-11-27 21:46:23.374 logging.py DEBUG - Remove unused code (Jan Černý) 2024-11-27 21:46:23.374 logging.py DEBUG - Refactor: extract method (Jan Černý) 2024-11-27 21:46:23.374 logging.py DEBUG - Add sysctl rules to anssi (anivan-suse) 2024-11-27 21:46:23.374 logging.py DEBUG - fedora 34 is EOL since 2022-06-07 (Markus Linnala) 2024-11-27 21:46:23.374 logging.py DEBUG - fix: ansible_sshd_set: sshd_config is case-insensitive (Markus Linnala) 2024-11-27 21:46:23.374 logging.py DEBUG - Fix sssd_enable_smartcards case sensitivity (Hunter Jones) 2024-11-27 21:46:23.374 logging.py DEBUG - Update file_owner_var_log (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update file_owner_var_log (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update file_groupowner_var_log_messages (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update file_groupowner_var_log (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_tmp_nosuid (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_tmp_nexec (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_tmp_nodev (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_nodev (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_log_nosuid (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_log_audit_nosuid (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_log_noexec (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_log_nodev (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_log_audit_noexec (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_var_log_audit_node (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_boot_nodev (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_tmp_noexec (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_tmp_noexec (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_tmp_nodev (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_home_nodev (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_dev_shm_nosuid (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_dev_shm_noexec (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update mount_option_dev_shm_nodev (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update disable_ctrlaltdel_reboot (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update service_fapolicyd_enabled (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_openssh-server_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_crypto-policies_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_usbguard_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_opensc_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update ensure_gpgcheck_local_packages (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_fapolicyd_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_subscription-manager_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_sudo_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Update package_chrony_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Add srg_requirement to package_tmux_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Add srg_requirement to package_aide_installed (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Allow srg_rule_audit to audit a whole SRG (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Add srg_requirement to configure_bashrc_exec_tmux (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Fix usage of an undefined variable (Jan Černý) 2024-11-27 21:46:23.374 logging.py DEBUG - Update configure_openssl_tls_crypto_policy (Edgar Aguilar) 2024-11-27 21:46:23.374 logging.py DEBUG - OCP4 STIG: Only use resource_requests_quota directly, not its subtests (Jakub Hrozek) 2024-11-27 21:46:23.374 logging.py DEBUG - Add package_tftp-server_removed to ANSSI (anivan-suse) 2024-11-27 21:46:23.374 logging.py DEBUG - Use Ansible from the Fedora repos in the nightly (Matthew Burket) 2024-11-27 21:46:23.374 logging.py DEBUG - Remove unused utils (Jan Černý) 2024-11-27 21:46:23.374 logging.py DEBUG - Add tests to file_ownership_var_log_audit_stig (Edgar Aguilar) 2024-11-27 21:46:23.374 logging.py DEBUG - Update file_ownership_var_log_audit_stig [rhel8] (Edgar Aguilar) 2024-11-27 21:46:23.375 logging.py DEBUG - Update file_ownership_var_log_audit_stig for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.375 logging.py DEBUG - Update OL8 STIG profile comments (Edgar Aguilar) 2024-11-27 21:46:23.375 logging.py DEBUG - Update OL8 STIG profiles to reflect v1r2 revision (Edgar Aguilar) 2024-11-27 21:46:23.375 logging.py DEBUG - Update references in OL8 STIG rules (Edgar Aguilar) 2024-11-27 21:46:23.375 logging.py DEBUG - Clean and update OL8 STIG profile (Edgar Aguilar) 2024-11-27 21:46:23.375 logging.py DEBUG - Add missing OL7 stig IDs (Federico Ramirez) 2024-11-27 21:46:23.375 logging.py DEBUG - Check for module blacklist on RHCOS4 (Watson Sato) 2024-11-27 21:46:23.375 logging.py DEBUG - Add fapolicyd_prevent_home_folder_access for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - add comment to audit rules which require blankline at the end (Vojtech Polasek) 2024-11-27 21:46:23.375 logging.py DEBUG - strip trailing blank lines for some rules using audit-file_contents template (Vojtech Polasek) 2024-11-27 21:46:23.375 logging.py DEBUG - Update SRG-APP-000101-CTR-000205 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.375 logging.py DEBUG - Update no_host_based_files (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - Update no_user_host_based_files (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - Update tftpd_uses_secure_mode (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - Update display_login_attempts (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - Remove selinux_all_devicefiles_labeled from RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - Update installed_OS_is_vendor_supported (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - Update rpm_verify_hashes (Matthew Burket) 2024-11-27 21:46:23.375 logging.py DEBUG - Update security_patches_up_to_date (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Add RHEL9 CCE to service_systemd-journald_enabled (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - User urlencode filter in kubernetes remediation (Watson Sato) 2024-11-27 21:46:23.376 logging.py DEBUG - Update SRG-APP-000023-CTR-000055 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.376 logging.py DEBUG - Update the status with inherently met for OCP4 controls (Dhriti Shikhar) 2024-11-27 21:46:23.376 logging.py DEBUG - Update the control status with not applicable (Dhriti Shikhar) 2024-11-27 21:46:23.376 logging.py DEBUG - Select the correct macro for set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2024-11-27 21:46:23.376 logging.py DEBUG - The separate partition is to meet FMT_SMF_EXT.1's Configure local audit storage capacity. (Jan Pazdziora) 2024-11-27 21:46:23.376 logging.py DEBUG - products/alinux3: supports Alibaba Cloud Linux 3 (YiLin.Li) 2024-11-27 21:46:23.376 logging.py DEBUG - Fix rule sysctl_kernel_yama_ptrace_scope and sysctl_kernel_core_pattern (vincent) 2024-11-27 21:46:23.376 logging.py DEBUG - Fix OCIL entry for world_writable_programs rule (Federico Ramirez) 2024-11-27 21:46:23.376 logging.py DEBUG - Introduce variable for user init files (Federico Ramirez) 2024-11-27 21:46:23.376 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs (Federico Ramirez) 2024-11-27 21:46:23.376 logging.py DEBUG - Set missing_parameter_pass to false in auditd_local_events (Federico Ramirez) 2024-11-27 21:46:23.376 logging.py DEBUG - Update SRG-OS-000269-GPOS-00103 (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update postfix_prevent_unrestricted_relay (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update network_sniffer_disabled (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update network_configure_name_resolution (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Removed from libreswan_approved_tunnels from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Fix srg_requirement in service_firewalld_enabled (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Add new rule configured_firewalld_default_deny (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Remove grub2_disable_interactive_boot from RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Remove grub2_kernel_trust_cpu_rng from RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Add SRG-OS-000480-GPOS-00230 to fapolicyd rules (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Fail sshd_disable_compression if parameter missing (Watson Sato) 2024-11-27 21:46:23.376 logging.py DEBUG - Remove rule harden_ssh_client_crypto_policy (Jan Černý) 2024-11-27 21:46:23.376 logging.py DEBUG - Set var_system_crypto_policy=fips (Jan Černý) 2024-11-27 21:46:23.376 logging.py DEBUG - Add fixtext to package_crypto-policies_installed (Jan Černý) 2024-11-27 21:46:23.376 logging.py DEBUG - Add fixtext for configure_crypto_policy (Jan Černý) 2024-11-27 21:46:23.376 logging.py DEBUG - Address pull request feedback from #8960 (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update file_group_ownership_var_log_audit tests (Edgar Aguilar) 2024-11-27 21:46:23.376 logging.py DEBUG - Update rule file_group_ownership_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.376 logging.py DEBUG - Update SRG-OS-000312-GPOS-00122 for the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update SRG-OS-000312-GPOS-00124 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Upate xwindows_runlevel_target (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Remove use_kerberos_security_all_exports from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Fix boolean to string conversion caused by yaml.CSafeLoader (Jiri Odehnal) 2024-11-27 21:46:23.376 logging.py DEBUG - Fix CDumper issue where unexpected end-of-document three dots are inserted (Jiri Odehnal) 2024-11-27 21:46:23.376 logging.py DEBUG - Fix formatting (Jiri Odehnal) 2024-11-27 21:46:23.376 logging.py DEBUG - Use Cloader and Cdumper in ssg.yaml and avoid error due to missing Cdumper (Jiri Odehnal) 2024-11-27 21:46:23.376 logging.py DEBUG - Fix build profiling for targets with multiple outputs (Jiri Odehnal) 2024-11-27 21:46:23.376 logging.py DEBUG - Update no_empty_passwords (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update sudo_restrict_privilege_elevation_to_authorized (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Upate sudoers_validate_passwd (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update no_shelllogin_for_systemaccounts (Matthew Burket) 2024-11-27 21:46:23.376 logging.py DEBUG - Update SRG file name to v2r3 (Jan Černý) 2024-11-27 21:46:23.376 logging.py DEBUG - Improve the rule (Matej Tyc) 2024-11-27 21:46:23.376 logging.py DEBUG - Add the enable_authselect rule to profiles (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Introduce authselect enabled rule (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Update SRG-APP-000014-CTR-000035 for OCP4 STIG (Jakub Hrozek) 2024-11-27 21:46:23.377 logging.py DEBUG - Properly exclude all files from analysis (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Fix some whitespace and indentation issues (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Call automatus, not test_suite.py (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Rename gh actions to Automatus. (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Refresh the script (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Provide an adaptor to the legacy call of the test suite (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Introduce Automatus (Matej Tyc) 2024-11-27 21:46:23.377 logging.py DEBUG - Update SRG-APP-000089-CTR-000150 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.377 logging.py DEBUG - Use CCI number instead of first identifier in the CCI column (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Use os.path for Python 2 compatibility (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Remove fstring for Python 2 compatibility (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Remove type annotations for Python 2 compatibility (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Unify 2 functions (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Handle missing CCEs (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Fix Python2 compatibility (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Generate srgmap tables using Jinja (Jan Černý) 2024-11-27 21:46:23.377 logging.py DEBUG - Update accounts_no_uid_except_zero (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_authorized_local_users (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_umask_interactive_users (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_user_interactive_home_directory_exists (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_umask_etc_bashrc (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_user_interactive_home_directory_defined (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_user_home_paths_only (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Fix accounts_have_homedir_login_defs (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update accounts_have_homedir_login_defs (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Update aide_verify_ext_attributes (Matthew Burket) 2024-11-27 21:46:23.378 logging.py DEBUG - Override audisp_conf_path for OL7 and RHEL7 (Federico Ramirez) 2024-11-27 21:46:23.378 logging.py DEBUG - Update tests for audisp rules (Federico Ramirez) 2024-11-27 21:46:23.378 logging.py DEBUG - Update remediations to use audisp_conf_path (Federico Ramirez) 2024-11-27 21:46:23.378 logging.py DEBUG - Update OVAL checks to use audisp_conf_path (Federico Ramirez) 2024-11-27 21:46:23.378 logging.py DEBUG - Update rule text to use audisp_conf_path (Federico Ramirez) 2024-11-27 21:46:23.378 logging.py DEBUG - Add audisp_conf_path as an implied property (Federico Ramirez) 2024-11-27 21:46:23.378 logging.py DEBUG - Update the status with does not meet for OCP4 controls (Dhriti Shikhar) 2024-11-27 21:46:23.378 logging.py DEBUG - Increase the threshold for duplication detection (Matej Tyc) 2024-11-27 21:46:23.378 logging.py DEBUG - Add shellcheck checks for our shell scripts (Matej Tyc) 2024-11-27 21:46:23.378 logging.py DEBUG - Further restrict files to analyze (Matej Tyc) 2024-11-27 21:46:23.378 logging.py DEBUG - remove automated field (Dhriti Shikhar) 2024-11-27 21:46:23.378 logging.py DEBUG - Add file_permissions_etc_passwd (anivan-suse) 2024-11-27 21:46:23.378 logging.py DEBUG - Include about me section in the template (Marcus Burghardt) 2024-11-27 21:46:23.378 logging.py DEBUG - Specify how merge rights should be requested (Marcus Burghardt) 2024-11-27 21:46:23.378 logging.py DEBUG - Include new issue template for requesting merge rights (Marcus Burghardt) 2024-11-27 21:46:23.378 logging.py DEBUG - Remove the RHCOS4 OSPP profile (Jakub Hrozek) 2024-11-27 21:46:23.378 logging.py DEBUG - Move the definition of test data to template.py (Watson Sato) 2024-11-27 21:46:23.438 logging.py DEBUG - sysctl template: Add tests for options in symlinks (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add tests for two sysctl options (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add test for option defined in two places (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add test for wrong .d option (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add test for wrong runtime value (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add test for wrong option (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add test for line missing (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add test for correct value (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - sysctl template: Add test for commented option (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - Update SRG-APP-000014-CTR-000040 for OCP4 STIG (Dhriti Shikhar) 2024-11-27 21:46:23.439 logging.py DEBUG - Don't add check for modprobe.conf on RHEL content (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - Update kernel_module_disabled documentation (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - Add support for blacklist in kernel_module_disabled (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - Update directory_ownership_var_log_audit rule.yml (Edgar Aguilar) 2024-11-27 21:46:23.439 logging.py DEBUG - Update directory_ownership_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.439 logging.py DEBUG - Update directory_ownership_var_log_audit for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.439 logging.py DEBUG - Update OVAL for enable_fips_mode (Edgar Aguilar) 2024-11-27 21:46:23.439 logging.py DEBUG - Add handling for blacklist in tests (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - add tests (Vojtech Polasek) 2024-11-27 21:46:23.439 logging.py DEBUG - align rule fixtext and description (Vojtech Polasek) 2024-11-27 21:46:23.439 logging.py DEBUG - change OVAL (Vojtech Polasek) 2024-11-27 21:46:23.439 logging.py DEBUG - Configure the file analysis on a include basis (Matej Tyc) 2024-11-27 21:46:23.439 logging.py DEBUG - Update RHEL8 and RHEL9 links in sssd group.yml (Matus Marhefka) 2024-11-27 21:46:23.439 logging.py DEBUG - Remove check for disabled from SLE products (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - Stop codecov for files that are not unit-testable (Matej Tyc) 2024-11-27 21:46:23.439 logging.py DEBUG - Append email_mappings dict (Marcus Burghardt) 2024-11-27 21:46:23.439 logging.py DEBUG - Add file_owner_etc_shadow to anssi (anivan-suse) 2024-11-27 21:46:23.439 logging.py DEBUG - Update README.md (Marcus Burghardt) 2024-11-27 21:46:23.439 logging.py DEBUG - Update visible email in Contributors.md (Marcus Burghardt) 2024-11-27 21:46:23.439 logging.py DEBUG - Add ANSSI minimal profile to SLE12 (teacup-on-rockingchair) 2024-11-27 21:46:23.439 logging.py DEBUG - Add ensure_suse_gpgkey_installed rule to ansi sle minimal profile (teacup-on-rockingchair) 2024-11-27 21:46:23.439 logging.py DEBUG - Add missing cce for sle12 (teacup-on-rockingchair) 2024-11-27 21:46:23.439 logging.py DEBUG - Add SLE support for ensure_gpgcheck_never_disabled remediations (teacup-on-rockingchair) 2024-11-27 21:46:23.439 logging.py DEBUG - Drop irrelevant rules for SLE platform (teacup-on-rockingchair) 2024-11-27 21:46:23.439 logging.py DEBUG - Enable SLE12 for ANSSI minimal profile rules and add relevant CCEs (teacup-on-rockingchair) 2024-11-27 21:46:23.439 logging.py DEBUG - Enable timer_dnf-automatic_enabled for SLE12 platform (teacup-on-rockingchair) 2024-11-27 21:46:23.439 logging.py DEBUG - OCP:Fix rule kubelet_enable_streaming_connections (vincent) 2024-11-27 21:46:23.439 logging.py DEBUG - Add CCE to rule and this to RHEL8 sability test (Edgar Aguilar) 2024-11-27 21:46:23.439 logging.py DEBUG - Add rule to RHEL8 stability test (Edgar Aguilar) 2024-11-27 21:46:23.439 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2024-11-27 21:46:23.439 logging.py DEBUG - Adjust for different syntax (Jan Černý) 2024-11-27 21:46:23.439 logging.py DEBUG - OCP4: Split node and platform DISA STIG profiles (Jakub Hrozek) 2024-11-27 21:46:23.439 logging.py DEBUG - Update aide_verify_acls (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Remove aide_use_fips_hashes (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Include SRG reference for dconf_gnome_disable_user_list (Marcus Burghardt) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_kernel_randomize_va_space (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_kernel_kptr_restrict (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_user_max_user_namespaces (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_net_core_bpf_jit_harden (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_kernel_yama_ptrace_scope (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_kernel_unprivileged_bpf_disabled (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Define grub2 uefi boot path for OL7 (Federico Ramirez) 2024-11-27 21:46:23.439 logging.py DEBUG - Add file system kernel modules rules to OL7 ncp (Federico Ramirez) 2024-11-27 21:46:23.439 logging.py DEBUG - Add OL prodtype to rules and remediations (Federico Ramirez) 2024-11-27 21:46:23.439 logging.py DEBUG - Add OL7 ncp profile (Federico Ramirez) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_kernel_kexec_load_disabled (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_net_ipv4_ip_forward (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Fix RHEL8 STIG ID for sysctl_net_ipv4_ip_forward (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_net_ipv4_conf_default_send_redirects (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Separate tests for blacklist and install (Watson Sato) 2024-11-27 21:46:23.439 logging.py DEBUG - Improve Ansible remediation for accounts_umask_etc_profile (Marcus Burghardt) 2024-11-27 21:46:23.439 logging.py DEBUG - Remove double "that" from Ansible task title (Marcus Burghardt) 2024-11-27 21:46:23.439 logging.py DEBUG - Remove harden_* rules (Jan Černý) 2024-11-27 21:46:23.439 logging.py DEBUG - Update OCIL, add fixtext and srg in configure_ssh_crypto_policy (Jan Černý) 2024-11-27 21:46:23.439 logging.py DEBUG - Add fixtext and SRG and update configure_openssl_tls_crypto_policy (Jan Černý) 2024-11-27 21:46:23.439 logging.py DEBUG - Add fixtext and SRG and update configure_openssl_crypto_policy (Jan Černý) 2024-11-27 21:46:23.439 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_send_redirects (Matthew Burket) 2024-11-27 21:46:23.439 logging.py DEBUG - Remove sysctl_net_ipv4_icmp_ignore_bogus_error_responses from RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_icmp_echo_ignore_broadcasts (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Pull the sysctl_net_ipv4_conf_default_* rules (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_conf_default_accept_source_route (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_conf_default_accept_redirects (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_kernel_core_pattern (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_secure_redirects (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_rp_filter (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_log_martians (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_accept_source_route (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_accept_redirects (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv6_conf_default_accept_source_route (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv6_conf_default_accept_redirects (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv6_conf_default_accept_ra (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_forwarding (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_accept_source_route (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_accept_redirects (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add a missing new line at the end of the file (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_accept_ra (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Resolve the auditctl and augenrules conflict (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Update rule audit_rules_suid_privilege_function (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Include missing rule in STIG profile for RHEL7 (Marcus Burghardt) 2024-11-27 21:46:23.440 logging.py DEBUG - Update partition_for_var_tmp (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update partition_for_var_log_adit (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update partition_for_var_log (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update partition_for_var (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update partition_for_tmp (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add macro srg_requirement_separate_partition (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update partition_for_home (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add fixtext_separate_partition macro (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add srg_requirement (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Use a specific value in auditd_data_disk_error_action_stig (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Use a Jinja macro istead of custom code (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Add a new rule for audit max_log_file (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Add a new rule for audit disk_full_action (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Add a new rule for audit disk_error_action (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Replace the operating system by full_name (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Remove variable from the original file (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and fixtext in auditd_data_retention_max_log_file_action (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and add fixtext for auditd_data_retention_max_log_file_action (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Remove duplicate text (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and add fixtext for auditd_data_disk_full_action (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and add fixtext for auditd_data_disk_error_action (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - products/alinux2 && controls: Add CIS Alibaba Cloud Linux (Aliyun Linux) 2 profiles (YiLin.Li) 2024-11-27 21:46:23.440 logging.py DEBUG - Use target type instead of rule spec (Jan Černý) 2024-11-27 21:46:23.440 logging.py DEBUG - Let's not Jinja expand Vi swp files (Watson Sato) 2024-11-27 21:46:23.440 logging.py DEBUG - Organize tests and objects to reduce check size (Watson Sato) 2024-11-27 21:46:23.440 logging.py DEBUG - Merge test on similar objects to a single test (Watson Sato) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL in unsuccessful syscall rules (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_open_by_handle_at (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_open (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_ftruncate (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_creat (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update srg_requirement for audit_rules_unsuccessful_file_modification_openat (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add ocil macros for unsuccessful syscall audits (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Fix docs for the srg_requirement_audit_syscall macro (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add a macro for srg requirements for auditing unsuccessful syscalls (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Remove duplicative audit rules in SRG-OS-000064-GPOS-00033 (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_rename (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_renameat (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_unlink (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_unlink (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Remove line before in macro srg_requirement_audit_syscall (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update SRG-OS-000064-GPOS-00033 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Fix spelling in titles in audit_rules_unsuccessful_* (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update sshd_use_strong_rng rationale (Edgar Aguilar) 2024-11-27 21:46:23.440 logging.py DEBUG - Set metadata for OL8 STIG_GUI profile (Edgar Aguilar) 2024-11-27 21:46:23.440 logging.py DEBUG - Add srg_requirement to rsyslog_remote_loghost (Matthew Burket) 2024-11-27 21:46:23.440 logging.py DEBUG - Update rsyslog_nolisten (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Update rsyslog_cron_logging (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Update dconf_gnome_disable_ctrlaltdel_reboot (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Remove dconf_gnome_remote_access_encryption from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Fix bash in two rules to manage commented lines (Edgar Aguilar) 2024-11-27 21:46:23.441 logging.py DEBUG - Relocate shebang in tests (Edgar Aguilar) 2024-11-27 21:46:23.441 logging.py DEBUG - Remove dconf_gnome_disable_restart_shutdown from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Remove dconf_db_up_to_date from RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add srg_requirement to auditd_write_logs (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add srg_requirement to auditd_log_format (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Remove auditd_data_retention_flush from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Address feedback in 10-ocil.jinja (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Remove newline at the start of the systemd_ocil_service_disabled (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Fix docs on srg_requirement_service_disabled (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Fix up fixtext_service_disabled macro (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add fixtext and srg_requirement to service_systemd-coredump_disabled (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Updatue service_firewalld_enabled for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Update service_rsyslog_enabled for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Update service_syslogng_enabled for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Update service_debug-shell_disabled for the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Update service_rngd_enabled for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add fixtext and srg_requirement to service_kdump_disabled (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add fixtext_service_disabled macro (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add sudo in the fixtext_service_enabled macro (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add the macro ocil_clause_service_enabled (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Add the macro srg_requirement_service_disabled (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Fix formatting for srg_requirement_service_enabled (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Fix OCIL and fixtext sshd_use_strong_rng (Matthew Burket) 2024-11-27 21:46:23.441 logging.py DEBUG - Update sshd_x11_use_localhost (Matthew Burket) 2024-11-27 21:46:23.443 logging.py DEBUG - Update sshd_use_strong_rng (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Remove sshd_use_priv_separation from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_rekey_limit (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_print_last_log (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Remove sshd_enable_x11_forwarding from RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_enable_strictmodes (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_disable_x11_forwarding (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_disable_user_known_hosts (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_disable_root_login (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Remove sshd_disable_rhosts_rsa from SRG-OS-000480-GPOS-00227 (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_disable_rhosts (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_disable_kerb_auth (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_disable_gssapi_auth (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update sshd_disable_empty_passwords (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update shd_disable_compression (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Make macros loading procedure deterministic and designate 01_general.jinja file to be first in the sequence (Evgeny Kolesnikov) 2024-11-27 21:46:23.444 logging.py DEBUG - ANSSI enabled for file_permissions_unaurorized_world_writable (anivan-suse) 2024-11-27 21:46:23.444 logging.py DEBUG - Update mount_option_nosuid_removable_partitions (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_noexec_removable_partitions (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Update mount_option_nodev_removable_partitions (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add srg_requirement to mount_option_nodev_nonroot_local_partitions (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Fix mount_option_home_nosuid (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Fixup srg_requirement to mount_option_home_noexec (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add srg_requirement to mount_option_boot_nosuid (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add ensure_gpgcheck_never_disabled to STIG (Edgar Aguilar) 2024-11-27 21:46:23.444 logging.py DEBUG - Add macro srg_requirement_mount_option (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_nosuid_remote_filesystems (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_noexec_remote_filesystems (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_nodev_remote_filesystems (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Remove mount_option_krb_sec_remote_filesystems from SRG-OS-000480-GPOS-00227 (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Enable all rhel8 profiles in centos8 product (Milan Lysonek) 2024-11-27 21:46:23.444 logging.py DEBUG - Fix srg_requirement_*_permission name (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_ungroupowned (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_home_directories (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement file_groupownership_home_directories (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permission_user_init_files (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_sshd_private_key (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_sshd_private_key (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_sshd_config (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_sshd_config (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_sshd_config (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Pull the cron.allow rules from the RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_monthly (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_weekly (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_crontab (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_hourly (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_daily (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_d (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add macro srg_requirement_directory_mode (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Fix directory mode commont (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add macro srg_requirement_file_mode (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_crontab (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_weekly (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_monthly (Matthew Burket) 2024-11-27 21:46:23.444 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_hourly (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_daily (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_d (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_crontab (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_weekly (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_monthly (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_hourly (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_daily (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_d (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add macro srg_requirement_directory_group_owner (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add macro srg_requirement_directory_owner (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add macro srg_requirement_file_group_owner (Matthew Burket) 2024-11-27 21:46:23.445 logging.py DEBUG - Add macro srg_requirement_file_owner (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add macro fixtext_file_permissions (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add macro fixtext_directory_permissions (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add macro fixtext_directory_group_owner (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add macro fixtext_directory_owner (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add macro fixtext_file_group_owner (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add macro fixtext_file_owner (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add new line to the end of files (Edgar Aguilar) 2024-11-27 21:46:23.446 logging.py DEBUG - Apply CPEs for krb5 packages to rhel8 (Edgar Aguilar) 2024-11-27 21:46:23.446 logging.py DEBUG - Introduce applicability CPEs for krb5 packages (Edgar Aguilar) 2024-11-27 21:46:23.446 logging.py DEBUG - Fix build issues with auditd_data_retention_admin_space_left_act and auditd_data_retention_space_left_action (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Fix template mode (Jan Černý) 2024-11-27 21:46:23.446 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Update the fixtext for package installed and removed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - OCP4: Add compat rules for checking API server and kubelet TLS certs and keys on OCP releases <= 4.8 (Jakub Hrozek) 2024-11-27 21:46:23.446 logging.py DEBUG - OCP4: Don't use a list in platforms (Jakub Hrozek) 2024-11-27 21:46:23.446 logging.py DEBUG - Do not try to define the rc value in the Rule Test Suite mode. (Gabriel Becker) 2024-11-27 21:46:23.446 logging.py DEBUG - unit test the new function derive_id_from_file_name (Vojtech Polasek) 2024-11-27 21:46:23.446 logging.py DEBUG - extract the function which derives id from the file name (Vojtech Polasek) 2024-11-27 21:46:23.446 logging.py DEBUG - correctly load files with multiple dots in file name (Vojtech Polasek) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_tuned_removed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_scap-security-guide_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_rng-tools_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_openscap-scanner_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_nss-tools_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_gnutls-utils_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_MFEhiplsm_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_gdm_removed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_policycoreutils-python-utils_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and update srg_requirement for package_libreswan_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_openssh-clients_installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_quagga_removed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext and srg_requirement to package_tftp-server_removed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add a fixtext macro for package installed (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Clean up EOF on auditd_data_retention_space_left (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add srg_requirement to auditd_data_retention_space_left_action (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add srg_requirement to auditd_data_retention_space_left_percentage (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add srg_requirement to auditd_data_retention_admin_space_left_action (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add srg_requirement to auditd_data_retention_action_mail_acct (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add srg_requirement to auditd_data_disk_full_action (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Remove obsolete rules from SRG-OS-000480-GPOS-00227. (Gabriel Becker) 2024-11-27 21:46:23.446 logging.py DEBUG - Group rules from SRG-OS-000480-GPOS-00227 into categories. (Gabriel Becker) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext to auditd_data_retention_space_left_action (Matthew Burket) 2024-11-27 21:46:23.446 logging.py DEBUG - Add fixtext to auditd_data_retention_space_left_percentage (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Add fixtext to auditd_data_retention_admin_space_left_action (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Upadate fixtext in auditd_data_retention_action_mail_acct (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Update SRG-OS-000343-GPOS-00134 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Update RHEL8 profile stability data (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Select correct rules for RHEL-07-010270 (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove RHEL7 stigid from rule audit rule (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Select rule for RHEL-07-010200 V-204415 (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove unsuccessful audit syscall rules from SRG-OS-000468-GPOS-00212. (Gabriel Becker) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove RHEL7 stigid from emergency target rule (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Fix a python2 syntax issue in the Test Suite. (Gabriel Becker) 2024-11-27 21:46:23.447 logging.py DEBUG - Update SRG-OS-000392-GPOS-00172 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove RHEL7 stigid from rule (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove RHEL7 stigid from xorg-x11-server-commom removed (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Fix typo in rule ID (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Apply suggestions from code review (Edgar Aguilar) 2024-11-27 21:46:23.447 logging.py DEBUG - Update audit_immutable_login_uids yaml file (Edgar Aguilar) 2024-11-27 21:46:23.447 logging.py DEBUG - New issue template for Product Removal (Marcus Burghardt) 2024-11-27 21:46:23.447 logging.py DEBUG - Include an issue template for changes proposals (Marcus Burghardt) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove the new_rule issue template (Marcus Burghardt) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove stigid from SSHD rules not STIG selected (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Remove stigids from abrt rules not STIG selected (Watson Sato) 2024-11-27 21:46:23.447 logging.py DEBUG - Revert undesired change made in 6404c2075. (Gabriel Becker) 2024-11-27 21:46:23.447 logging.py DEBUG - Update docs/manual/developer/01_introduction.md (Gabriel Becker) 2024-11-27 21:46:23.447 logging.py DEBUG - update documentation status to false (Dhriti Shikhar) 2024-11-27 21:46:23.447 logging.py DEBUG - Fix a traceback in combined mode (Jan Černý) 2024-11-27 21:46:23.447 logging.py DEBUG - k8scontent: Switch to using `metal-toolbox/container-push` workflow (Juan Antonio Osorio) 2024-11-27 21:46:23.447 logging.py DEBUG - Simplify the message around the label-less approach (Marcus Burghardt) 2024-11-27 21:46:23.447 logging.py DEBUG - Update creating DISA STIG docs (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Update rule schema (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Update the style guide on rules (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Add pygithub to build guide (Matthew Burket) 2024-11-27 21:46:23.447 logging.py DEBUG - Get sphinxcontrib-napoleon from GitHub (Matthew Burket) 2024-11-27 21:46:23.448 logging.py DEBUG - Fix header underrun in docs (Matthew Burket) 2024-11-27 21:46:23.448 logging.py DEBUG - Revise the removal policy (Matthew Burket) 2024-11-27 21:46:23.448 logging.py DEBUG - Improve wording on the removal policy (Matthew Burket) 2024-11-27 21:46:23.448 logging.py DEBUG - Update audit_immutable_login_uids template (Edgar Aguilar) 2024-11-27 21:46:23.448 logging.py DEBUG - Update auditd_data_disk_error_action (Edgar Aguilar) 2024-11-27 21:46:23.448 logging.py DEBUG - Update auditd_data_disk_full_action (Edgar Aguilar) 2024-11-27 21:46:23.448 logging.py DEBUG - Publish the coverage ID and restrict repo (Matej Tyc) 2024-11-27 21:46:23.448 logging.py DEBUG - Add 'key' parameter to macro ocil_audit_rules_unsuccessful_file_modification (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Rename SRG file according to latest SRG GPOS release. (Gabriel Becker) 2024-11-27 21:46:23.448 logging.py DEBUG - Update SRG GPOS to latest version V2R3. (Gabriel Becker) 2024-11-27 21:46:23.448 logging.py DEBUG - Move join_list to general.jinja (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Fix typo (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Include guidelines for labels (Marcus Burghardt) 2024-11-27 21:46:23.448 logging.py DEBUG - Incremented instructions to file issues (Marcus Burghardt) 2024-11-27 21:46:23.448 logging.py DEBUG - Add CCE for new audit rules in RHEL9 product. (Gabriel Becker) 2024-11-27 21:46:23.448 logging.py DEBUG - Use parenteshis in nist reference for new audit rules. (Gabriel Becker) 2024-11-27 21:46:23.448 logging.py DEBUG - Add CCE to rule and this to RHEL8 sability test (Edgar Aguilar) 2024-11-27 21:46:23.448 logging.py DEBUG - Generate tmux applicability cpe (Edgar Aguilar) 2024-11-27 21:46:23.448 logging.py DEBUG - Add ol support in cpes_to_platform function (Edgar Aguilar) 2024-11-27 21:46:23.448 logging.py DEBUG - Do not use block asignments (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Change the macro to create a human readable sentence (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Remove rules not present in RHEL 8 (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Fix macro fixtext_audit_rules_unsuccessful_file_modification_rule_order (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Fix macro fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Fix macro fixtext_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Create OCIL macro for template audit_rules_unsuccessful_file_modification_rule_order (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Create OCIL macro for template audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use macro ocil_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Introduce macro ocil_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Use the OCIL macro corresponding to the template (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Update OCIL by using a more specific jinja macro (Jan Černý) 2024-11-27 21:46:23.448 logging.py DEBUG - Add OCIL macro (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Align fixtext with bash remediation (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Improve vertical whitespace (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_unlinkat (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_unlink (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_renameat (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_rename (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Allow to add the syscall grouping as a parameter (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_openat_rule_order (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_openat_o_trunc_write (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_openat_o_creat (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_open_rule_order (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add a fixtext to audit_rules_unsuccessful_file_modification_open_o_trunc_write (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_open_o_creat (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add a fixtext to audit_rules_unsuccessful_file_modification_open_by_handle_at_rule_order (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Create a fixtext macro for template audit_rules_unsuccessful_file_modification_rule_order (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Move a macro from bash.jinja to general.jinja (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Refactor: Extract macro audit_remediation_unsuccessful_file_modification_detailed_audit_file_content (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_open_by_handle_at_o_trunc_write (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Introduce macro fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext in audit_rules_unsuccessful_file_modification_open_by_handle_at_o_creat (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Introduce macro fixtext_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Rename fixtext macro fixtext_audit_rules_unsuccessful_file_modification_creat (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.449 logging.py DEBUG - Add docs for srg_requirement_service_enabled (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add srg_requirement to package_audit_installed (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add srg_requirement to service_auditd_enabled (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add srg_requirement_service_enabled macro (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add macro srg_requirement_package_installed (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add severity to required attributes for rules schema (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add reboot rules to SRG-OS-000477-GPOS-00222 (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add new rule audit_privileged_commands_init (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add a new rule aaudit_privileged_commands_poweroff (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add new rule audit_privileged_commands_reboot (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add rule audit_privileged_commands_shutdown (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Revise removal of products policy (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Adjust formatting for product removal (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Update tests for bash_ensure_ini_config (Edgar Aguilar) 2024-11-27 21:46:23.449 logging.py DEBUG - Update ansible in sssd_enable_smartcards (Edgar Aguilar) 2024-11-27 21:46:23.449 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext to audit_rules_execution_restorecon (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add does not meet text to SRG-OS-000274-GPOS-00104 (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Exclude files from Code Climate (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add srg_requirement to auditd_local_events (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add srg_requirement and fixtext to configure_usbguard_auditbackend (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Update OCIL, Fix text, and SRG Requirement for audit_rules_privileged_commands_pt_chown (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Update OCIL, Fix text, and SRG Requirement for audit_rules_privileged_commands_umount (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Update OCIL, Fix text, and SRG Requirement for audit_rules_privileged_commands_mount (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to package_nfs-utils_removed (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to package_telnet-server_removed (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to package_sendmail_removed (Matthew Burket) 2024-11-27 21:46:23.449 logging.py DEBUG - Add fixtext to kernel_module_atm_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add fixtext to kernel_module_can_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add fixtext to kernel_module_ticp_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add fixtext to kernel_module_cramfs_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Grammar fix in chronyd_no_chronyc_network (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add for fixtext package_gssproxy_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add fixtext for package_iprutils_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add fix text macro for kernel module removal (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add fixtext macro for package removal (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to package_iprutils_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to package_gssproxy_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_cramfs_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Update srg_requirement on kernel_module_bluetooth_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_tipc_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_sctp_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_rds_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_firewire-core_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_dccp_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_can_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to kernel_module_atm_disabled (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to package_telnet-server_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Update ocil_clause on chronyd_client_only (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to package_nfs-utils_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add srg_requirement to package_sendmail_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add macro srg_requirement_kernel_module_disable (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Add macro srg_requirement_package_removed (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Remove rules from SRG-OS-000095-GPOS-00049 that are not in RHEL9 (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Upload artifacts for OCP4 SRG Mapping if its on a pull request (Matthew Burket) 2024-11-27 21:46:23.450 logging.py DEBUG - Don not pass target as a parameter (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Merge _iterate_over_rules in _get_rules_to_test (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - update mapping of duplicate mails in contributors.py (Vojtech Polasek) 2024-11-27 21:46:23.450 logging.py DEBUG - update contributors (Vojtech Polasek) 2024-11-27 21:46:23.450 logging.py DEBUG - Rename method (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Split functions (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Rename "target" (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Improve handling templated test scenarios (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Move Rule to rule.py (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Simplify condition (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Do not duplicate check for the rule in the benchmark (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Check that rule exists in the benchmark sooner (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Inverse condition (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Move the rule ID comparison sooner (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Pass only the rule short ID (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Move iterate_over_rules to RuleChecker class (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Split the decision if a rule should be tested (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Update description of the Rule named tuple fields (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Merge _get_all_rule_scenarios and fetch_test_scenarios (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Split responsibilities (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Move scenario object creation (Jan Černý) 2024-11-27 21:46:23.450 logging.py DEBUG - Move fetch_test_scenarios from common to rule (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Decouple responsibility for rules from scenarios (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Extract function fetch_test_scenarios (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Pass rule into the Rule named tuple (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Move test_config to the function where it's used (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Pass the template_builder from outside of iterate_over_rules (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Add local_env_yaml to Rule named tuple (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Extract function fetch_local_test_scenarios (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Extract function fetch_templated_test_scenarios (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Move definition of the template_name variable (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Separate profiles overriding to a special method (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Add unit test on Scenario class (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Change methods in the Scenario class (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Simplify code (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Promote Scenario from named tuple to a class (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Extract Method _scenario_matches_platform (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Extract function _scenario_matches_regex (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Extract method _get_rule_scenarios (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Change misleading named tuple member name (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Remove parameters that are always class members (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Extract method _get_scenarios_by_rule_id (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Rename method _get_scenarios to _filter_scenarios (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Remove unused parameter rule_dir (Jan Černý) 2024-11-27 21:46:23.451 logging.py DEBUG - Update OCIL and fixtext in audit_rules_dac_modification_umount (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Update OCIL for audit_rules_execution_chacl (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Fix OCIL for audit_rules_execution_chcon (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Update OCIL and fixtext in audit_rules_execution_setfiles (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Fix doc error in fixtext_audit_rules_privileged_commands (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Fix EOF in a macro files (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Fix paramter error in complete_ocil_entry_audit_privileged_commands macro (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Add a macro ocil_clause_audit (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Fix doc error in complete_ocil_entry_audit_privileged_commands (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Add docs for fixtext_audit_rules_command macro (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Rename fixtext_privileged_commands to better fit (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_setsebool (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_setfiles (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_semanage (Matthew Burket) 2024-11-27 21:46:23.451 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_setfacl (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_chacl (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Fix srg_rule_audit to also check for None values (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add missing CCEs for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Clean up code climate issues (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_pam_timestamp_check (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_delete (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_finit (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_init (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_userhelper (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_unix_upate (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_unix_chkpwd (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_sudoedit (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_sudo (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_ssh-keysign (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_su (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_ssh-agent (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_postqueue (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_postdrop (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_passwd (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_newgrp (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_kmod (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_gpasswd (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_crontab (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_chsh (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_chage (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_usermod (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Update OCIL, OCIL clause and add fixtext and srg_requirement to audit_rules_media_export (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add ocil_fix_srg_privileged_command macro (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add fixtext_privileged_commands macro (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add complete_ocil_entry_audit_privileged_commands macro (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add macro srg_requirement_audit_command (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Fix doc string in srg_requirement_audit_syscall (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Add script to find rules needing keys for the STIG (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Update lineinfile documentation (Edgar Aguilar) 2024-11-27 21:46:23.452 logging.py DEBUG - Add tests to sssd_enable_smartcards (Edgar Aguilar) 2024-11-27 21:46:23.452 logging.py DEBUG - Add policy for removal of products (Matthew Burket) 2024-11-27 21:46:23.452 logging.py DEBUG - Update rule sssd_enable_smartcards (Edgar Aguilar) 2024-11-27 21:46:23.452 logging.py DEBUG - Update linux_os/guide/system/software/integrity/fips/enable_dracut_fips_module/ansible/shared.yml (vojtapolasek) 2024-11-27 21:46:23.452 logging.py DEBUG - no fatal fail when return code is 1 (Vojtech Polasek) 2024-11-27 21:46:23.452 logging.py DEBUG - Make the repository safe (Matěj Týč) 2024-11-27 21:46:23.453 logging.py DEBUG - Send coverage to Code Climate (Matěj Týč) 2024-11-27 21:46:23.453 logging.py DEBUG - Update tests directory_group_ownership_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update directory_group_ownership_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Add the plugins to the config file (Matthew Burket) 2024-11-27 21:46:23.453 logging.py DEBUG - Update bash in rule to handle commented lines (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update tests of directory_permissions_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update ocil and fixtext of rule (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Add RHEL requirements for new rule (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update rule accounts_users_home_files_permissions (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update SRG references for audit permissions (Matthew Burket) 2024-11-27 21:46:23.453 logging.py DEBUG - OCP4 build: Don't use fedora-33 anymore (Jakub Hrozek) 2024-11-27 21:46:23.453 logging.py DEBUG - Update SRG-OS-000258-GPOS-00099 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.453 logging.py DEBUG - Update SRG-OS-000257-GPOS-00098 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.453 logging.py DEBUG - Update PAM password hash algo remediation (Federico Ramirez) 2024-11-27 21:46:23.453 logging.py DEBUG - Update SRG-OS-000066-GPOS-00034 and SRG-OS-000384-GPOS-00167. (Matthew Burket) 2024-11-27 21:46:23.453 logging.py DEBUG - Added new rule sssd_has_trust_anchor (Matthew Burket) 2024-11-27 21:46:23.453 logging.py DEBUG - Update PAM password hashing algorithm for OL8 (Federico Ramirez) 2024-11-27 21:46:23.453 logging.py DEBUG - Update sssd_offline_cred_expiration description (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update docs to point to correct constants file path (Dhriti Shikhar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update docs to point to correct build_products file (Dhriti Shikhar) 2024-11-27 21:46:23.453 logging.py DEBUG - update docs for creating product (Dhriti Shikhar) 2024-11-27 21:46:23.453 logging.py DEBUG - Remove ol8 from rsyslog_remote_loghost fixes (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - update docs (Dhriti Shikhar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update directory_permissions_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Add tests to directory_permissions_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update directory_permissions_var_log_audit[rhel8] (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update directory_permissions_var_log_audit [ol8] (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Fix sssd_enable_certmap OVAL (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Update tests in dconf_gnome_disable_user_list (Edgar Aguilar) 2024-11-27 21:46:23.453 logging.py DEBUG - Add dconf_gnome_disable_user_list to STIG profile (Edgar Aguilar) 2024-11-27 21:46:23.524 logging.py DEBUG - Update file_permissions_var_log_audit description (Edgar Aguilar) 2024-11-27 21:46:23.524 logging.py DEBUG - Add tests to file_permissions_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.524 logging.py DEBUG - Update file_permissions_var_log_audit bash[rhel8] (Edgar Aguilar) 2024-11-27 21:46:23.524 logging.py DEBUG - Update bash in file_permissions_var_log_audit (Edgar Aguilar) 2024-11-27 21:46:23.524 logging.py DEBUG - Update file_permissions_var_log_audit for rhel8 (Edgar Aguilar) 2024-11-27 21:46:23.524 logging.py DEBUG - Update file_permissions_var_log_audit for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_setsebool. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_setfiles. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_semanage. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_chcon. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_setfacl. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_chacl. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext macro for audit system commands. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_dac_modification_umount. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Only print group text if variable is defined in fixtext. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_dac_modification_umount2. (Gabriel Becker) 2024-11-27 21:46:23.524 logging.py DEBUG - Add OCP4 STIG profile (Dhriti Shikhar) 2024-11-27 21:46:23.524 logging.py DEBUG - OCP NIST controls: Remove link to a PR (Jakub Hrozek) 2024-11-27 21:46:23.524 logging.py DEBUG - Presence of management function Configure host-based firewall is in FMT_SMF_EXT.1.1, not in FMT_MOF_EXT.1. (Jan Pazdziora) 2024-11-27 21:46:23.524 logging.py DEBUG - The debug-shell.target does not exist, the rule is about service. (Jan Pazdziora) 2024-11-27 21:46:23.524 logging.py DEBUG - Replace the system by full name (Jan Černý) 2024-11-27 21:46:23.524 logging.py DEBUG - Apply suggestions from code review (Jan Černý) 2024-11-27 21:46:23.524 logging.py DEBUG - Use a unique account name for the superusers account (Jan Černý) 2024-11-27 21:46:23.524 logging.py DEBUG - Update OCIL (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Use grub_command macro in rules in SRG-OS-000080-GPOS-00048 (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Add an update operation to macro grub_command (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Add fixtext in grub2_uefi_password (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Align OCIL with OVAL in grub2_uefi_password (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Add fixtext in grub2_uefi_admin_username (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Align OCIL with OVAL in grub2_uefi_admin_username (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Add fixtext for grub2_password (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Align OCIL with OVAL in grub2_password (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Add fixtext for grub2_admin_username (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Update OCIL in grub2_admin_username (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Add fixtext to require_singleuser_auth (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Align OCIL with OVAL for require_singleuser_auth (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Add fixtext to require_emergency_target_auth (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Update OCIL for require_emergency_target_auth (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Replace RHEL 9 by full name (Jan Černý) 2024-11-27 21:46:23.525 logging.py DEBUG - Update OL8 STIG severities (Edgar Aguilar) 2024-11-27 21:46:23.525 logging.py DEBUG - Update set_password_hashing_min_rounds_logindefs (Edgar Aguilar) 2024-11-27 21:46:23.525 logging.py DEBUG - Set check_root_user to true on multiple rules ol8 (Edgar Aguilar) 2024-11-27 21:46:23.525 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2024-11-27 21:46:23.525 logging.py DEBUG - Update nightly build links to github actions generated artifacts. (Gabriel Becker) 2024-11-27 21:46:23.525 logging.py DEBUG - Update titles for nightly builds (Matthew Burket) 2024-11-27 21:46:23.525 logging.py DEBUG - Stop SSGTS when a wrong domain name is informed (Marcus Burghardt) 2024-11-27 21:46:23.525 logging.py DEBUG - Update tests for sssd_offline_cred_expiration (Edgar Aguilar) 2024-11-27 21:46:23.525 logging.py DEBUG - Update OVAL for sssd_offline_cred_expiration (Edgar Aguilar) 2024-11-27 21:46:23.525 logging.py DEBUG - Update sssd_offline_cred_expiration OVAL [rhel8] (Edgar Aguilar) 2024-11-27 21:46:23.525 logging.py DEBUG - Update sssd_offline_cred_expiration OVAL for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.525 logging.py DEBUG - Add OCP4 to the SRG Mapping CI job (Matthew Burket) 2024-11-27 21:46:23.525 logging.py DEBUG - Add check and fixtext to Contributing content docs (Matthew Burket) 2024-11-27 21:46:23.525 logging.py DEBUG - Update SRG-OS-000379-GPOS-00164 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.525 logging.py DEBUG - In the docs Fix -> Fixtext (Matthew Burket) 2024-11-27 21:46:23.525 logging.py DEBUG - Add Code Climate config (Matthew Burket) 2024-11-27 21:46:23.525 logging.py DEBUG - Added a config for pycodestyle (Matthew Burket) 2024-11-27 21:46:23.525 logging.py DEBUG - Improve wording (Matěj Týč) 2024-11-27 21:46:23.525 logging.py DEBUG - srg_gpos: Fix typos in attribute names (Jakub Hrozek) 2024-11-27 21:46:23.525 logging.py DEBUG - Do not include symlink_state in 5.10 content (Watson Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Adds ocp4 controls (Dhriti Shikhar) 2024-11-27 21:46:23.526 logging.py DEBUG - bump version to 0.1.63 (Vojtech Polasek) 2024-11-27 21:46:23.526 logging.py DEBUG - SUSE SLE15 create profile for hardening cloud images (sampsone) 2024-11-27 21:46:23.526 logging.py DEBUG - Rename test scenario with wrong extension (Watson Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Remove duplicated ocp4 test result (Watson Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Update rule to allow special bits in library dirs (Watson Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Fix typo and update docs (Watson Yuuma Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Update linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/rule.yml (Gabriel Becker) 2024-11-27 21:46:23.526 logging.py DEBUG - Update linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/rule.yml (Gabriel Becker) 2024-11-27 21:46:23.526 logging.py DEBUG - Do not macro expand swap files of test scenarios (Watson Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Improve fixtext in kernel_module_dccp_disabled (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Update OCIL and fixtext in usbguard_generate_policy (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Add fixtext to service_usbguard_enabled (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Add fixtext to package_usbguard_installed (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Apply suggestions from code review (Watson Yuuma Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Address review feedback (Watson Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Fix template not found error message (Watson Sato) 2024-11-27 21:46:23.526 logging.py DEBUG - Add RHEL9 package name into rule service_dhcpd_disabled (Matus Marhefka) 2024-11-27 21:46:23.526 logging.py DEBUG - Remove redundant service_disabled custom test scenarios (Matus Marhefka) 2024-11-27 21:46:23.526 logging.py DEBUG - Remove redundant service_enabled custom test scenarios (Matus Marhefka) 2024-11-27 21:46:23.526 logging.py DEBUG - Remove remaining rules (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Change status to does not meet (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Change fix to fixtext (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Explicitely set variable in controls file (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Add fix for accounts_tmout (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Improve OCIL clause for accounts_tmout (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Update SRG-OS-000163-GPOS-00072 for RHEL9 STIG (Jan Černý) 2024-11-27 21:46:23.526 logging.py DEBUG - Split nightly builds (Matthew Burket) 2024-11-27 21:46:23.526 logging.py DEBUG - Added Nightly builds action (Matthew Burket) 2024-11-27 21:46:23.527 logging.py DEBUG - Be explicit about adding tests when rules need them (Matej Tyc) 2024-11-27 21:46:23.527 logging.py DEBUG - Specify current version for Packit (Milan Lysonek) 2024-11-27 21:46:23.527 logging.py DEBUG - Introduce Testing Farm (Milan Lysonek) 2024-11-27 21:46:23.527 logging.py DEBUG - Introduce packit-as-a-service (Milan Lysonek) 2024-11-27 21:46:23.527 logging.py DEBUG - Revert efb925b462a541d55dffff2eab6a49b011e56ff3 (Matus Marhefka) 2024-11-27 21:46:23.527 logging.py DEBUG - SSGTS: update prefix name of the snapshots wrt podman limitation (Matus Marhefka) 2024-11-27 21:46:23.527 logging.py DEBUG - SSGTS: Extend cpes_to_platform function to handle CentOS (Matus Marhefka) 2024-11-27 21:46:23.527 logging.py DEBUG - Replace Scrutinizer badage with Code Climate (Matthew Burket) 2024-11-27 21:46:23.527 logging.py DEBUG - Update README (Matthew Burket) 2024-11-27 21:46:23.527 logging.py DEBUG - Remove All Contributors from the README (Matthew Burket) 2024-11-27 21:46:23.527 logging.py DEBUG - clean_components_post_updating, enabe bash remediation for sle15 (sampsone) 2024-11-27 21:46:23.527 logging.py DEBUG - Add tests to rsyslog_cron_logging (Edgar Aguilar) 2024-11-27 21:46:23.527 logging.py DEBUG - OCP: Update file_groupowner_ovs_conf_db rule (vincent) 2024-11-27 21:46:23.527 logging.py DEBUG - Update OVAl from rsyslog_cron_logging (Edgar Aguilar) 2024-11-27 21:46:23.527 logging.py DEBUG - make test scenarios modify all relevant directories (Vojtech Polasek) 2024-11-27 21:46:23.527 logging.py DEBUG - Test (Gabriel Becker) 2024-11-27 21:46:23.527 logging.py DEBUG - Switch oscap-ssh in SSGTS GHA to maint-1.3. (Gabriel Becker) 2024-11-27 21:46:23.527 logging.py DEBUG - Add Centos Stream Dockerfiles and enable them in GHA for testing. (Gabriel Becker) 2024-11-27 21:46:23.527 logging.py DEBUG - Enable recursivity for root_permissions_syslibrary_files rule (Marcus Burghardt) 2024-11-27 21:46:23.527 logging.py DEBUG - Update shell_lineinfile OVAL template to handle escaping of dollar sign (Matus Marhefka) 2024-11-27 21:46:23.527 logging.py DEBUG - Add templated test scenarios for shell_lineinfile template (Matus Marhefka) 2024-11-27 21:46:23.527 logging.py DEBUG - Use correct path for sshd options in ansible remediation. (Gabriel Becker) 2024-11-27 21:46:23.527 logging.py DEBUG - Parametrize test suite name (Marcus Burghardt) 2024-11-27 21:46:23.527 logging.py DEBUG - Remove similar test scenarios on rules templated by file_groupownership (Marcus Burghardt) 2024-11-27 21:46:23.527 logging.py DEBUG - drop custom test scenarios from kernel_module_disabled (Vojtech Polasek) 2024-11-27 21:46:23.527 logging.py DEBUG - create tests for kernel_module_disabled template (Vojtech Polasek) 2024-11-27 21:46:23.527 logging.py DEBUG - Remove redundant package_installed custom test scenarios (Matej Tyc) 2024-11-27 21:46:23.527 logging.py DEBUG - Introduce a proper custom test scenario (Matej Tyc) 2024-11-27 21:46:23.527 logging.py DEBUG - add test scenarios covering missing files (Vojtech Polasek) 2024-11-27 21:46:23.527 logging.py DEBUG - remove redundant test scenario (Vojtech Polasek) 2024-11-27 21:46:23.527 logging.py DEBUG - Remove redundant package_removed test scenarios (Matej Tyc) 2024-11-27 21:46:23.527 logging.py DEBUG - Update ocp4_content fedora version to latest (Lance Bragstad) 2024-11-27 21:46:23.527 logging.py DEBUG - Refactor snapshot prefix related functions (Marcus Burghardt) 2024-11-27 21:46:23.527 logging.py DEBUG - Point to new content gh pages. (Gabriel Becker) 2024-11-27 21:46:23.527 logging.py DEBUG - Remove Link Checker from the README (Matthew Burket) 2024-11-27 21:46:23.527 logging.py DEBUG - Cleanup duplicate scenarios for sshd_lineinfile template (Matus Marhefka) 2024-11-27 21:46:23.527 logging.py DEBUG - Skip test scenarios when prep scripts fail (Matej Tyc) 2024-11-27 21:46:23.527 logging.py DEBUG - Include the keep-snapshots option to ssgts (Marcus Burghardt) 2024-11-27 21:46:23.528 logging.py DEBUG - Use secret token to publish pages to a different repository. (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Simplify the snapshot_lookup function (Marcus Burghardt) 2024-11-27 21:46:23.528 logging.py DEBUG - Include snapshot cleanup functions for SSGTS (Marcus Burghardt) 2024-11-27 21:46:23.528 logging.py DEBUG - Update Fedora-based Actions to latest Fedora (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Sysctl: template Remediate files in /run/sysctl.d (Watson Sato) 2024-11-27 21:46:23.528 logging.py DEBUG - Don't scan /usr/lib/sysctl.d/ for conf files (Watson Sato) 2024-11-27 21:46:23.528 logging.py DEBUG - Add templated tests for dconf_ini_file. (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Document recent changes to sysctl template (Watson Sato) 2024-11-27 21:46:23.528 logging.py DEBUG - Workaround for git unsafe repository CVE-2022-24765 (Milan Lysonek) 2024-11-27 21:46:23.528 logging.py DEBUG - Publish content pages to a different repository. (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Add template mode to SSGTS (Watson Sato) 2024-11-27 21:46:23.528 logging.py DEBUG - Add ocil_clause to service_ufw_enabled (Eduardo Barretto) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to aide_check_audit_tools (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to sysctl_crypto_fips_enabled (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Fix fixtext in sysctl_crypto_fips_enabled (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to configure_gnutls_tls_crypto_policy (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to dconf_gnome_disable_autorun (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to dconf_gnome_disable_automount_open (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to selinux_state (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to package_policycoreutils_installed (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to grub2_slub_debug_argument (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to service_autofs_disabled (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to kernel_module_usb-storage_disabled (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to root_permissions_syslibrary_files (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to file_permissions_library_dirs (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to file_permissions_binary_dirs (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to file_ownership_library_dirs (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to file_ownership_binary_dirs (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to file_groupownership_system_commands_dirs (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to dir_group_ownership_library_dirs (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to dir_perms_world_writable_sticky_bits (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to dir_perms_world_writable_root_owned (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to sysctl_net_ipv4_tcp_syncookies (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg_requirement to package_firewalld_installed (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Grammer fix in gid_passwd_group_same (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Fix Jinja error force_opensc_card_drivers (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Clean up accounts_password_pam_lcredit (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Update OCIL clause for accounts_password_pam_enforce_root (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Fix "the operating system" in fixtext for accounts_password_pam_dcredit (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Fix the check for SRG-OS-000191-GPOS-00080 (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Pull the explicit rules for USB guard (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml (Marcus Burghardt) 2024-11-27 21:46:23.528 logging.py DEBUG - Remove html tags from fixtext and include sudo (Marcus Burghardt) 2024-11-27 21:46:23.528 logging.py DEBUG - Add a sentence into OCIL (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Use a modern hash function (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Use XCCDF Variable in fixtext (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Separate decision on config file path (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Remove quotes (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Update OCIL and add fixtext to accounts_password_pam_unix_rounds_system_auth (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Update rule accounts_password_pam_unix_rounds_password_auth (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Use sudo with standard user prompt (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Update OCIL and add fixtext to set_password_hashing_algorithm_systemauth (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Add OCIL and fixtext to set_password_hashing_algorithm_logindefs (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Improve OCIL and add fixtext in set_password_hashing_algorithm_libuserconf (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Remove var_system_crypto_policy (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Fix missing new line at the of files. (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Remove rules from SRG-OS-000458-GPOS-00203 that don't belong there. (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Remove superfluous quotes (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Add srg requirement text to deletion audit syscalls. (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Add fixtext to service_pcscd_enabled (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Add reviewer comments (Matthew Burket) 2024-11-27 21:46:23.528 logging.py DEBUG - Add a fixtext to package_pcsc-lite_installed (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Add variable setting to SRG file (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Remove unused cmake macros (Jiri Odehnal) 2024-11-27 21:46:23.528 logging.py DEBUG - Update fixtext and srg_requirement of creat/open/truncate syscalls (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Add variable value (Jan Černý) 2024-11-27 21:46:23.528 logging.py DEBUG - Restrict the symlink test to OVAL 5.11 (Watson Sato) 2024-11-27 21:46:23.528 logging.py DEBUG - Consider file/link/dir while applying ansible remediation on sysctl template. (Gabriel Becker) 2024-11-27 21:46:23.528 logging.py DEBUG - Include relevant variables on SRG-OS-000077-GPOS-00045 (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Update accounts_password_pam_pwhistory_remember rules (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Include fixtext on accounts_password_pam_unix_remember rule (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Include respective variables on SRG-OS-000021-GPOS-00005 (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Include fixtext in accounts_passwords_pam_faillock_interval rule (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Include fixtext in accounts_passwords_pam_faillock_enforce_local rule (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Small adjustment in description. (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Remove duplicated warning section (Marcus Burghardt) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to grub2_page_poison_argument (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to grub2_vsyscall_argument (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add a warning about remediation to libreswan_approved_tunnels (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to libreswan_approved_tunnels (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add fixtext to libreswan_approved_tunnels (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Improve the OCIL for libreswan_approved_tunnels (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Swap package_libreswan_installed for libreswan_approved_tunnels (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Pull duplicate rules for rsyslog encryption (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to package_rsyslog-gnutls_installed (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to sshd_enable_pubkey_auth (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add rhel9 CCE to sshd_enable_pubkey_auth (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to gid_passwd_group_same (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Update OCIL clause for group_unique_id (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to group_unique_id (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add CCE for RHEL9 on group_unique_id (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to force_opensc_card_drivers (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to configure_opensc_card_drivers (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Don't scan dir with preconfigured sysctls in RHEL (Watson Sato) 2024-11-27 21:46:23.529 logging.py DEBUG - Remove package_krb5-workstation_removed from the STIG (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to package_krb5-workstation_removed (Matthew Burket) 2024-11-27 21:46:23.529 logging.py DEBUG - Add srg_requirement to kernel_module_bluetooth_disabled (Matthew Burket) 2024-11-27 21:46:23.533 logging.py DEBUG - Add srg_requirement to grub2_pti_argument (Matthew Burket) 2024-11-27 21:46:23.534 logging.py DEBUG - Add srg_requirement to chronyd_no_chronyc_network (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to chronyd_client_only (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Update enable_dracut_fips_module rule (Marcus Burghardt) 2024-11-27 21:46:23.535 logging.py DEBUG - ocil_file_permissions statement should be false on a correctly configured system (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Remove controls/stig_rhel9 (Jan Černý) 2024-11-27 21:46:23.535 logging.py DEBUG - Update fixtext and srg_requirement of attr syscalls. (Gabriel Becker) 2024-11-27 21:46:23.535 logging.py DEBUG - Update fixtext and srg_requirement of chown syscalls. (Gabriel Becker) 2024-11-27 21:46:23.535 logging.py DEBUG - Update fixtext and srg_requirement of chmod syscalls. (Gabriel Becker) 2024-11-27 21:46:23.535 logging.py DEBUG - Remove file_ownership_var_log_audit (Jan Černý) 2024-11-27 21:46:23.535 logging.py DEBUG - Remove file_ownership_var_log_audit (Jan Černý) 2024-11-27 21:46:23.535 logging.py DEBUG - Fix pidof path in ubuntu on chronyd_or_ntpd_set_maxpoll bash (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add Ubuntu platform to chronyd_or_ntpd_set_maxpoll bash (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add chronyd_sync_clock to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add tests to chronyd_sync_clock (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add rule chronyd_sync_clock (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Update chrony tests to use chrony_conf_path (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Update shared ansible to use chrony_conf_path (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Update shared bash script to fix chronyd path (Richard Maciel Costa) 2024-11-27 21:46:23.535 logging.py DEBUG - Update shared ovals to use chrony_conf_path (Richard Maciel Costa) 2024-11-27 21:46:23.535 logging.py DEBUG - Update rule text to use chrony_conf_path (Richard Maciel Costa) 2024-11-27 21:46:23.535 logging.py DEBUG - Add overridden chrony_conf_path for Debian-likes (Richard Maciel Costa) 2024-11-27 21:46:23.535 logging.py DEBUG - Add chrony_conf_path as an implied property (Richard Maciel Costa) 2024-11-27 21:46:23.535 logging.py DEBUG - Add package_chrony_installed to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add stigid to package_chrony_installed (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Remove trailing white space in Ubuntu 20.04 STIG profile (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add ufw_only_required_services to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add rule ufw_only_required_services (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add ufw_rate_limit to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add rule ufw_rate_limit (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add service_ufw_enabled to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add stigid, disa and srg to service_ufw_enabled (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add service_ufw_enabled for CIS 3.5.1.3 (Alexander Scheel) 2024-11-27 21:46:23.535 logging.py DEBUG - Add package_ufw_installed to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add stigid, disa and srg references to package_ufw_installed (Eduardo Barretto) 2024-11-27 21:46:23.535 logging.py DEBUG - Add package_ufw_installed for CIS 3.5.1.1 (Alexander Scheel) 2024-11-27 21:46:23.535 logging.py DEBUG - Add Uncomplicated Firewall (ufw) group (Alexander Scheel) 2024-11-27 21:46:23.535 logging.py DEBUG - Use sudo in systemctl related OCIL macros (Jan Černý) 2024-11-27 21:46:23.535 logging.py DEBUG - Style formatting in sysctl_crypto_fips_enabled rule (Marcus Burghardt) 2024-11-27 21:46:23.535 logging.py DEBUG - Improve text of SRG fixtext macro title. (Gabriel Becker) 2024-11-27 21:46:23.535 logging.py DEBUG - Fix no newline at the of the file. (Gabriel Becker) 2024-11-27 21:46:23.535 logging.py DEBUG - Remove unrelated audit rules and add package audit rule to SRGs. (Gabriel Becker) 2024-11-27 21:46:23.535 logging.py DEBUG - Fix typos. (Gabriel Becker) 2024-11-27 21:46:23.535 logging.py DEBUG - Change ocil_clause_entry_mount_option (Jan Černý) 2024-11-27 21:46:23.535 logging.py DEBUG - Use sudo in OCIL (Jan Černý) 2024-11-27 21:46:23.535 logging.py DEBUG - Remove variables from root file (Jan Černý) 2024-11-27 21:46:23.535 logging.py DEBUG - Fix build due to symbol for accounts_password_set_min_life_existing (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Fix files without a newline at the end (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to accounts_password_set_max_life_existing (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Remove duplicate fixtext in accounts_maximum_age_login_defs (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to accounts_maximum_age_login_defs (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Update OCIL for accounts_password_set_min_life_existing (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to accounts_password_set_min_life_existing (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to accounts_minimum_age_login_defs (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to package_vsftpd_removed (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to accounts_password_all_shadowed_sha512 (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Clean up the PAM credit OCIL (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to accounts_password_pam_enforce_root (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Addd srg_requirement to sssd_enable_certmap (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Addd srg_requirement to file_permissions_etc_audit_rulesd (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Addd srg_requirement to file_permissions_etc_audit_auditd (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to audit_immutable_login_uids (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to auditd_freq (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to file_ownership_var_log_audit_stig (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to file_group_ownership_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to directory_permissions_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Clean up OCIL clause in directory_permissions_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Add srg_requirement to directory_ownership_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.535 logging.py DEBUG - Addd srg_requirement to directory_group_ownership_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to file_permissions_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to auditd_freq (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_gshadow (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_group (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_sudoers_d (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_sudoers (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_login_events_tallylog (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_login_events_lastlog (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to audit_rules_login_events_faillock (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add a macro file for srg_requirement (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to package_audit_installed (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to service_auditd_enabled (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to grub2_audit_argument (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to auditd_name_format (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to account_unique_id (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_unlock_time (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_interval (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_deny_root (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_deny (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requirement to sshd_set_loglevel_verbose (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Remove audit_rules_usergroup_modification from the GPOS SRG (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Filter out symlinks referencing default dirs (Watson Sato) 2024-11-27 21:46:23.536 logging.py DEBUG - Add tests to ensure valid symlinks are checked (Watson Sato) 2024-11-27 21:46:23.536 logging.py DEBUG - Source requirement for SRG Export from rule or control (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requriment account_emergency_expire_date (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Add srg_requriment to rule (Matthew Burket) 2024-11-27 21:46:23.536 logging.py DEBUG - Update the describe_firewalld_allow macro (Marcus Burghardt) 2024-11-27 21:46:23.538 logging.py DEBUG - Separate the state from the object and check it (Watson Sato) 2024-11-27 21:46:23.538 logging.py DEBUG - Restrict test to sysctl.conf and /usr/sysctl.d (Watson Sato) 2024-11-27 21:46:23.538 logging.py DEBUG - Update SRG-OS-000297-GPOS-00115 for RHEL9 STIG (Marcus Burghardt) 2024-11-27 21:46:23.538 logging.py DEBUG - Remove test scenarios from service_firewalld_enabled rule (Marcus Burghardt) 2024-11-27 21:46:23.538 logging.py DEBUG - Use a full name in fixtexts (Jan Černý) 2024-11-27 21:46:23.538 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_minclass (Jan Černý) 2024-11-27 21:46:23.538 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_maxrepeat (Jan Černý) 2024-11-27 21:46:23.538 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_maxclassrepeat (Jan Černý) 2024-11-27 21:46:23.538 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_difok (Jan Černý) 2024-11-27 21:46:23.538 logging.py DEBUG - Add fixtext to mount_option_var_tmp_nosuid (Jan Černý) 2024-11-27 21:46:23.538 logging.py DEBUG - Add fixtext to mount_option_var_tmp_noexec (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_tmp_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_log_nosuid (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_log_noexec (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_log_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_log_audit_nosuid (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_log_audit_noexec (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_var_log_audit_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_tmp_nosuid (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_tmp_noexec (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_tmp_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Use jinja macro for fixtext in grub2_audit_backlog_limit_argument. (Gabriel Becker) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_nodev_nonroot_local_partitions (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add sudo to the command in OCIL (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_home_nosuid (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Remove unnecessary blank space from jinja macro text. (Gabriel Becker) 2024-11-27 21:46:23.539 logging.py DEBUG - Add package_audit_installed rule to SRG-OS-000254-GPOS-00095 control. (Gabriel Becker) 2024-11-27 21:46:23.539 logging.py DEBUG - Update SRG section of audit package/service with latest RHEL8 STIG info. (Gabriel Becker) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_home_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_dev_shm_nosuid (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_dev_shm_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_boot_nosuid (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to mount_option_boot_nodev (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Introduce macro fixtext_mount_option (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to root_permissions_syslibrary_files (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add test scenarios for sysctl symlink (Watson Sato) 2024-11-27 21:46:23.539 logging.py DEBUG - Update OCIL in root_permissions_syslibrary_files (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext in file_permissions_library_dirs (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Update OCIL in file_permissions_library_dirs (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to file_permissions_binary_dirs (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Update OCIL in file_permissions_binary_dirs (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Add fixtext to file_ownership_library_dirs (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Update OCIL in file_ownership_library_dirs (Jan Černý) 2024-11-27 21:46:23.539 logging.py DEBUG - Avoid using empty variable when no symlinks exist (Watson Sato) 2024-11-27 21:46:23.539 logging.py DEBUG - Add new macro for audit configuration fixtext field. (Gabriel Becker) 2024-11-27 21:46:23.539 logging.py DEBUG - Add package_audit_installed to SRG-OS-000255-GPOS-00096. (Gabriel Becker) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext to file_ownership_binary_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Update OCIL to file_ownership_binary_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext in file_groupownership_system_commands_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Update OCIL in file_groupownership_system_commands_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext to dir_ownership_library_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Update OCIL in dir_ownership_library_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext to dir_group_ownership_library_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Update OCIL on dir_group_ownership_library_dirs (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Remove code duplication by using bash and ansible macros (Marcus Burghardt) 2024-11-27 21:46:23.540 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_temp_expire_date/rule.yml (Gabriel Becker) 2024-11-27 21:46:23.540 logging.py DEBUG - Update shared/macros/warning.jinja (Marcus Burghardt) 2024-11-27 21:46:23.540 logging.py DEBUG - Create warning_rule_depracated_by macro. (Marcus Burghardt) 2024-11-27 21:46:23.540 logging.py DEBUG - Remediation and improvement for file_permissions_home_dirs rule (Marcus Burghardt) 2024-11-27 21:46:23.540 logging.py DEBUG - Update controls/srg_gpos/SRG-OS-000112-GPOS-00057.yml (Gabriel Becker) 2024-11-27 21:46:23.540 logging.py DEBUG - Filter out symlinks (Watson Sato) 2024-11-27 21:46:23.540 logging.py DEBUG - Use the XCCDF variable in fixtext (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Clean up the text in account_temp_expire_date (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Update SRG-OS-000024-GPOS-00007 (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Add rationale to SRG-OS-000112-GPOS-00057 (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Move var_password_pam_ucredit to SRG-OS-000069-GPOS-00037 (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Fix typo in accounts_password_pam_ucredit (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Update OCIL for accounts_password_pam_ucredit (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext to accounts_password_pam_ucredit (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Add variables to SRG GPOS control according to RHEL9 STIG profile. (Gabriel Becker) 2024-11-27 21:46:23.540 logging.py DEBUG - Fix title text of SRG-OS-000163-GPOS-00072. (Gabriel Becker) 2024-11-27 21:46:23.540 logging.py DEBUG - Add macroed ocil clause for service disabled rules. (Gabriel Becker) 2024-11-27 21:46:23.540 logging.py DEBUG - Bump OL7 STIG version to v2r7 (Federico Ramirez) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext to audit_immutable_login_uids (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Remove rule file_ownership_var_log_audit from SRG-OS-000057-GPOS-00027 (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add OCIL and fixtext to directory_permissions_var_log_audit (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add OCIL and fixtext to audit_rules_immutable (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext to auditd_data_retention_action_mail_acct (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add fixtext to rule audit_rules_system_shutdown (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Update the description to be aligned with Bash remediation (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Update postfix_client_configure_mail_alias for RHEL 9 STIG (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Fix grub_command macro for Ubuntu (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Fix variable substitution in SRG export (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Reformat OCIL text (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add a fixtext to configure_libreswan_crypto_policy (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Set variables (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Add forgotten CCE ID for file_permissions_unauthorized_sgid (teacup-on-rockingchair) 2024-11-27 21:46:23.540 logging.py DEBUG - Update OCIL clause and add fixtext for rsyslog_remote_loghost (Matthew Burket) 2024-11-27 21:46:23.540 logging.py DEBUG - Initial definition of ANSSI BP28 minmal profile for SLE (teacup-on-rockingchair) 2024-11-27 21:46:23.540 logging.py DEBUG - Add OVAL for gitops_operator_exists rule (vincent) 2024-11-27 21:46:23.540 logging.py DEBUG - Add a fixtext to sshd_rekey_limit (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Remove mentions of 32 bits systems (Jan Černý) 2024-11-27 21:46:23.540 logging.py DEBUG - Do not remove directory in audit_rules_sudoers empty.fail.sh (Milan Lysonek) 2024-11-27 21:46:23.541 logging.py DEBUG - Add sysctl_fs_protected_symlinks and sysctl_fs_protected_hardlinks to SRG-OS-000312-GPOS-00123 (Matthew Burket) 2024-11-27 21:46:23.541 logging.py DEBUG - Document new Jinja macros (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Use sudo in ocil_grub2_argument (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Trim white space in grub_command (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Fix broken grub2-mkconfig argument (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add fixtext for sudo_require_reauthentication (Watson Sato) 2024-11-27 21:46:23.541 logging.py DEBUG - Add machine platform to xwindows_runlevel_target (Milan Lysonek) 2024-11-27 21:46:23.541 logging.py DEBUG - Fix incomplete SRG title (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Replace operating system by full name (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Complete dconf_ini_file_fix macro (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Extend rationale (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add fix for dconf_gnome_disable_autorun (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add fix to dconf_gnome_disable_automount_open (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add fix to service_autofs_disabled (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add OCIL clause in service_autofs_disabled (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add fix to kernel_module_usb-storage_disabled (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add fix to usbguard_allow_hub (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add Ansible to usbguard_allow_hub (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add fix to usbguard_allow_hid_and_hub (Jan Černý) 2024-11-27 21:46:23.541 logging.py DEBUG - Add Ansible to usbguard_allow_hid_and_hub (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Add fix to usbguard_allow_hid (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Add Ansible to usbguard_allow_hid (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Assign a RHEL9 CPE to rule usbguard_allow_hid (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Add fixtext for use_pam_wheel_for_su (Watson Sato) 2024-11-27 21:46:23.542 logging.py DEBUG - Add a grouping notice to fixtext (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Align 64 bit system Ansible remediation (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Remove sudo_require_authentication from control (Watson Sato) 2024-11-27 21:46:23.542 logging.py DEBUG - Update RHEL8 STIG to v1r6 (Watson Sato) 2024-11-27 21:46:23.542 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R5 (Watson Sato) 2024-11-27 21:46:23.542 logging.py DEBUG - Create macro ansible_grub2_bootloader_argument_absent (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R6 (Watson Sato) 2024-11-27 21:46:23.542 logging.py DEBUG - Create macro ansible_grub2_bootloader_argument (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Add OCIL and fixtext to rule bios_enable_execution_restrictions (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Add fixtext to sysctl_kernel_kptr_restrict (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Update rule sysctl_kernel_exec_shield (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Unify Bash remediations in GRUB templates (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Remove duplicate platform (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Use grub_command in grub2_bootloader_argument_remediation (Jan Černý) 2024-11-27 21:46:23.542 logging.py DEBUG - Unify grub_command macro arguments (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Move macro grub_command to general macros (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Refactor Jinja fixtext macros (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Added control response for OCP:CM, MA, IA (vincent) 2024-11-27 21:46:23.543 logging.py DEBUG - Update DISA CCI reference (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - OCP: Added control resonse for NIST AU (vincent) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fix text to rsyslog_encrypt_offload_actionsendstreamdrivermode (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to rsyslog_encrypt_offload_defaultnetstreamdriver (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to package_rsyslog_installed (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fix text to rsyslog_encrypt_offload_actionsendstreamdriverauthmode (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Remove audispd rules from SRG-OS-000479-GPOS-00224 (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Remove empty rules file (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - fix: fedora: define login_defs in platform_package_overrides (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fix text to grub2_audit_backlog_limit_argument (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fix text to partition_for_var_log_audit (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fix text to auditd_audispd_configure_sufficiently_large_partition (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - cleanup: use one space with # platform consistently (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - cleanup: auditd_audispd_encrypt_sent_records: if multi_platform_all no need of others (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - cleanup: sshd_use_priv_separation: if multi_platform_all no need of others (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - bugfix: display_login_attempts: ensure \s is before keyword (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - Introduce fixtext macros for GRUB arguments (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Check whole file path instead of its file name (Watson Sato) 2024-11-27 21:46:23.543 logging.py DEBUG - Add tests for duplicate options (Watson Sato) 2024-11-27 21:46:23.543 logging.py DEBUG - Add comma to ocil question in the SRG mapping text. (Gabriel Becker) 2024-11-27 21:46:23.543 logging.py DEBUG - Shade rows that don't have fix text (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Apply suggestions from code review (Earl Sampson) 2024-11-27 21:46:23.543 logging.py DEBUG - bugfix: display_login_attempts: quote . in pam_lastlog.so when matching with regex (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - Update SRG-OS-000358-GPOS-00145 to inherently met (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Use BaseLoader to variable support for SRG Export (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Remove extranious SRG ids from audit_rules_suid_privilege_function (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - Update OCIL clause on audit_rules_suid_privilege_function (Matthew Burket) 2024-11-27 21:46:23.543 logging.py DEBUG - change: use pkg_manager_config_file to allow fedora to work (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - change: ensure_gpgcheck_repo_metadata: support fedora (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - change: clean_components_post_updating: support fedora (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - cleanup: ensure_gpgcheck_globally_activated: all sle are zypper (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - cleanup: clean_components_post_updating: simplify yum platform rule (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - fix: clean_components_post_updating: sle15 is zypper (Markus Linnala) 2024-11-27 21:46:23.543 logging.py DEBUG - Fix firewalld command for adding services (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Fix typo (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Fix syscall name in macro text (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Fix ansible remediation of dconf_gnome_screensaver_lock_delay. (Gabriel Becker) 2024-11-27 21:46:23.543 logging.py DEBUG - Upgrade cosign-installer github action to v2.3.0 (Juan Antonio Osorio) 2024-11-27 21:46:23.543 logging.py DEBUG - Remove reference to SRG-OS-000467-GPOS-00211 (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to audit_delete_success (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to audit_delete_failed (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_unlinkat (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_unlink (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_rmdir (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_renameat (Jan Černý) 2024-11-27 21:46:23.543 logging.py DEBUG - Add fixtext to audit_file_deletion_events (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Create a Jinja macro fixtext_audit_rules_file_deletion_events (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/rule.yml (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Exclude configure_usbguard_auditbackend from counting (vincent) 2024-11-27 21:46:23.544 logging.py DEBUG - Add unit tests for gnome screensaver settings. (Gabriel Becker) 2024-11-27 21:46:23.544 logging.py DEBUG - Fix deduplication of parameters (Watson Sato) 2024-11-27 21:46:23.544 logging.py DEBUG - Simplify the regex for when SYSCTLVAL is defined (Watson Sato) 2024-11-27 21:46:23.544 logging.py DEBUG - Avoid directly referencing empty object collections (Watson Sato) 2024-11-27 21:46:23.544 logging.py DEBUG - Print rule identifiers in utils/compare_results.py (Milan Lysonek) 2024-11-27 21:46:23.544 logging.py DEBUG - Change utils/compare_results.py to be albe analyse oscap --stig-viewer result (Milan Lysonek) 2024-11-27 21:46:23.544 logging.py DEBUG - address review comments, remove unneeded space. (sampsone) 2024-11-27 21:46:23.544 logging.py DEBUG - SUSE enable remediation configure_openssl_crypto_policy (rebased) (sampsone) 2024-11-27 21:46:23.544 logging.py DEBUG - Change UMASK to uppercase (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - from code review, remove double comma (Earl Sampson) 2024-11-27 21:46:23.544 logging.py DEBUG - Test include with wildcarding (*.conf) (sampsone) 2024-11-27 21:46:23.544 logging.py DEBUG - Add check for unique source of sysctl parameters (Watson Sato) 2024-11-27 21:46:23.544 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_ocredit/rule.yml (Marcus Burghardt) 2024-11-27 21:46:23.544 logging.py DEBUG - Fix pep issues. (Gabriel Becker) 2024-11-27 21:46:23.544 logging.py DEBUG - Add tests two definitions of sysctl parameters (Watson Sato) 2024-11-27 21:46:23.544 logging.py DEBUG - Move the appropriate comment to a Jinja var (Watson Sato) 2024-11-27 21:46:23.544 logging.py DEBUG - products/alinux2: supports Alibaba Cloud Linux 2 (YiLin.Li) 2024-11-27 21:46:23.544 logging.py DEBUG - configure_openssl_crypto_policy: OpenSSL v3.0 has = in include (Markus Linnala) 2024-11-27 21:46:23.544 logging.py DEBUG - Add ssh_client_rekey_limit to SRG-OS-000424-GPOS-00188 (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Replace the system by full name (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Remove SRG-OS-000480-GPOS-00225 (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Fix typo in accounts_passwords_pam_faillock_unlock_time ocil. (Gabriel Becker) 2024-11-27 21:46:23.544 logging.py DEBUG - Kubernetes container image: Use lowercase for image repository (Juan Antonio Osorio) 2024-11-27 21:46:23.544 logging.py DEBUG - OCP: Added control response for SI group (vincent) 2024-11-27 21:46:23.544 logging.py DEBUG - Update from review comments: (sampsone) 2024-11-27 21:46:23.544 logging.py DEBUG - cleanup: auditing: remove unnecessary mkdir -p /etc/audit/rules.d (Markus Linnala) 2024-11-27 21:46:23.544 logging.py DEBUG - fix: auditing: ensure audit package installed (Markus Linnala) 2024-11-27 21:46:23.544 logging.py DEBUG - Add SUSE to remediation for: audit_rules_... (sampsone) 2024-11-27 21:46:23.544 logging.py DEBUG - fix: audit_ospp_general/tests/correct_rules.pass.sh: add missing bash shebang (Markus Linnala) 2024-11-27 21:46:23.544 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Add fixtext to ensure_redhat_gpgkey_installed (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Add fixtext to ensure_gpgcheck_never_disabled (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Add fixtext to ensure_gpgcheck_local_packages (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Add fixtext to ensure_gpgcheck_globally_activated (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Add fixtext to package_subscription-manager_installed (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Add fixtext to sysctl_kernel_kexec_load_disabled (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Update wording in OCIL clause in accounts_umask rules (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Update OCIL and add fixtext accounts_umask_etc_profile (Jan Černý) 2024-11-27 21:46:23.544 logging.py DEBUG - Update OCIL and add fixtext accounts_umask_etc_login_defs (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Update OCIL and add fixtext accounts_umask_etc_csh_cshrc (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Add variable var_accounts_user_umask to SRG (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Update rule accounts_umask_etc_bashrc (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Add fixtext to accounts_logon_fail_delay (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Add variable var_accounts_fail_delay to SRG (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Add fixtext to accounts_password_pam_retry (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Add fixtext to accounts_password_pam_dictcheck (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Remove rules from SRG files that are not expected to be there. (Gabriel Becker) 2024-11-27 21:46:23.545 logging.py DEBUG - Update controls/srg_gpos/SRG-OS-000266-GPOS-00101.yml (Marcus Burghardt) 2024-11-27 21:46:23.545 logging.py DEBUG - Add fixtext to configure_gnutls_tls_crypto_policy (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Improve OCIL (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Add missing prodtype (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Add fixtext to ssh_client_rekey_limit (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Improve OCIL (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Set variables used by rule ssh_client_rekey_limit (Jan Černý) 2024-11-27 21:46:23.545 logging.py DEBUG - Improve HTML string substitution when exporting the SRG mapping tables. (Gabriel Becker) 2024-11-27 21:46:23.545 logging.py DEBUG - Moved rules to the public developer documentation (Matěj Týč) 2024-11-27 21:46:23.582 logging.py DEBUG - Improved wording based on review feedback (Matěj Týč) 2024-11-27 21:46:23.582 logging.py DEBUG - Update .github/workflows/srg-mapping-table.yaml (Gabriel Becker) 2024-11-27 21:46:23.582 logging.py DEBUG - Add fixtext for enable_fips_mode (Jan Černý) 2024-11-27 21:46:23.582 logging.py DEBUG - Change status of SRG-OS-000472-GPOS-00217 to inherently met (Jan Černý) 2024-11-27 21:46:23.582 logging.py DEBUG - Improve fixtext to be more instructive (Watson Yuuma Sato) 2024-11-27 21:46:23.582 logging.py DEBUG - dconf_gnome_screensaver_lock_enabled: Ensure that dconf is installed (Arnaud Patard) 2024-11-27 21:46:23.582 logging.py DEBUG - linux_os/guide/system/*/*/*/dconf_*/oval/shared.xml: Try fixing wrong regexp (Arnaud Patard) 2024-11-27 21:46:23.582 logging.py DEBUG - Publish Kubernetes content container image on each commit (Juan Antonio Osorio) 2024-11-27 21:46:23.582 logging.py DEBUG - Add fixtext to rule service_sshd_enabled (Jan Černý) 2024-11-27 21:46:23.582 logging.py DEBUG - Add OCIL clause to rule service_sshd_enabled (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix SRG mapping for rule service_sshd_enabled (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Remove rule dconf_gnome_enable_smartcard_auth from SRGs (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - The SRG export needs a valid build for variables (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix permissions on disa-stig-rhel7-v3r7-xccdf-scap.xml (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext and improve OCIL (Watson Sato) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext and improve OCIL (Watson Sato) 2024-11-27 21:46:23.583 logging.py DEBUG - Update version of RHEL7 STIG profiles to V3R7. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R7. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R7. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix PEP8 issues (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Use the correct selector in SRG-OS-000356-GPOS-00144 (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Adds support for default values and using selectors in create_srg_export (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Address reviewer feedback (Matěj Týč) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix style of SLE remediation (Matěj Týč) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix Grub remediation (Matej Tyc) 2024-11-27 21:46:23.583 logging.py DEBUG - Indent macros to prevent YAML error (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext to grub2_audit_argument (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext for audit_rules_login_events_tallylog (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext for audit_rules_login_events_lastlog (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext for audit_rules_login_events_faillock (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix typo (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - fix case of a package name (Vojtech Polasek) 2024-11-27 21:46:23.583 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/grub2_disable_interactive_boot/rule.yml (Earl Sampson) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext to audit_rules_for_ospp (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add RHEL 9 CCE (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Improve OCIL clause (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext for sysctl_kernel_randomize_va_space (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext for grub2_pti_argument (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/grub2_disable_interactive_boot/rule.yml (Earl Sampson) 2024-11-27 21:46:23.583 logging.py DEBUG - Update remediation in rule.yml to match ansible and bash code (sampsone) 2024-11-27 21:46:23.583 logging.py DEBUG - Update rule configure_bind_crypto_policy (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext for rule package_openssh-server_installed (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Update rule sssd_certificate_verification (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fix for dconf_gnome_enable_smartcard_auth (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext for package_opensc_installed (Jan Černý) 2024-11-27 21:46:23.583 logging.py DEBUG - Set the var_password_pam_ocredit variable for SRG-OS-000266-GPOS-00101 (Marcus Burghardt) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix the title in SRG-OS-000355-GPOS-00143 (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Add fixtext to kernel_module_bluetooth_disabled (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Subtle update to the ocil_clause of accounts_password_pam_enforce_root (Marcus Burghardt) 2024-11-27 21:46:23.583 logging.py DEBUG - Check for a CNI that supports network policies (Lance Bragstad) 2024-11-27 21:46:23.583 logging.py DEBUG - Update SRG-OS-000298-GPOS-00116 to inherently met (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Update SRG-OS-000266-GPOS-00101 for RHEL9 STIG (Marcus Burghardt) 2024-11-27 21:46:23.583 logging.py DEBUG - Add chronyd_server_directive to OL8 STIG profile (Edgar Aguilar) 2024-11-27 21:46:23.583 logging.py DEBUG - Add OL to chronyd_or_ntpd_set_maxpoll ansible (Edgar Aguilar) 2024-11-27 21:46:23.583 logging.py DEBUG - Add not applicable text to SRG-OS-000374-GPOS-00159 (Matthew Burket) 2024-11-27 21:46:23.583 logging.py DEBUG - Use grub2-mkconfig must be used to handle GRUB_DISABLE_RECOVERY (sampsone) 2024-11-27 21:46:23.583 logging.py DEBUG - Fix typo. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Update SRG-OS-000029-GPOS-00010 with new rules. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Update SRG of dconf_gnome_screensaver_lock_locked. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Update SRG-OS-000031-GPOS-00012 with a new rule. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Remove not applicable rules from SRG-OS-000029-GPOS-00010. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Add SRG-OS-000031-GPOS-00012 to idle delay dconf rules. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Remove rules that do not belong to SRG-OS-000240-GPOS-00091. (Gabriel Becker) 2024-11-27 21:46:23.583 logging.py DEBUG - Much less strange. (sampsone) 2024-11-27 21:46:23.583 logging.py DEBUG - Ensure that ntp/chronyd_or_ntpd_set_maxpoll uses variables vs static value (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Remove rules that do not belong to SRG-OS-000240-GPOS-00090. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - Remove SRG-OS-000359-GPOS-00146 in audit_rules_suid_privilege_function (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Update OCIL clause for package_audit_installed (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Exclude package_crypto-policies_installed removal tests (Milan Lysonek) 2024-11-27 21:46:23.584 logging.py DEBUG - Define a variable in SRG-OS-000029-GPOS-00010. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - Update idle-delay dconf rules. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - consistent perm_x product filtering (Markus Linnala) 2024-11-27 21:46:23.584 logging.py DEBUG - use grub2_uefi_boot_path (Markus Linnala) 2024-11-27 21:46:23.584 logging.py DEBUG - bugfix: no_shelllogin_for_systemaccounts: value parsing fixes (Markus Linnala) 2024-11-27 21:46:23.584 logging.py DEBUG - double quote find command. (sampsone) 2024-11-27 21:46:23.584 logging.py DEBUG - use mapfile to process find output to handle spell check errors. (sampsone) 2024-11-27 21:46:23.584 logging.py DEBUG - Restore double quotes in varible reference (sampsone) 2024-11-27 21:46:23.584 logging.py DEBUG - Bad use of double quotes in rsyslog_files_permissions/bash/shared.sh (sampsone) 2024-11-27 21:46:23.584 logging.py DEBUG - Add SRG-OS-000312-GPOS-00123 to sysctl_fs_protected_symlinks (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add SRG-OS-000312-GPOS-00123 to sysctl_fs_protected_hardlinks (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add variables for SRG-OS-000078-GPOS-00046 (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fixtext to accounts_password_minlen_login_defs (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fixtext to accounts_password_pam_minlen (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add json output function to controleval script (vincent) 2024-11-27 21:46:23.584 logging.py DEBUG - Update SRG-OS-000481-GPOS-000481 for RHEL9 STIG (Marcus Burghardt) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix text to aide_check_audit_tools (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix text to aide_periodic_cron_checking and update OCIL (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Update profile stability for RHEL 8 (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Move aide_string to macros (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add commented out umask fai test (sampsone) 2024-11-27 21:46:23.584 logging.py DEBUG - Update SRG-OS-000363-GPOS-00150 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Update SRG-OS-000256-GPOS-00097 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add new rule file_audit_tools_group_ownership (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add new rule file_audit_tools_permissions (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add new rule for file_audit_tools_ownership (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix text to package_aide_installed (Matthew Burket) 2024-11-27 21:46:23.584 logging.py DEBUG - Apply suggestions from code review (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Explicitely set a value (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fixtext to sysctl_net_ipv4_tcp_invalid_ratelimit (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add RHEL 9 CCE (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Address review comments (sampsone) 2024-11-27 21:46:23.584 logging.py DEBUG - Fix macro ocil_clause_file_owner (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Improve fixtext (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Improve HTML tag replacing during SRG mapping export. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - Update rule selection of SRG-OS-000239-GPOS-00089. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - Fix macro ocil_clause_file_group_owner (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Remove reference to SRG-OS-000206-GPOS-00084 (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Remove STIG id from audit_rules_usergroup_modification. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fixtext for file_permissions_var_log_audit (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add OCIL clause to file_permissions_var_log_audit (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Update SRG-OS-000024-GPOS-00007 and SRG-OS-000228-GPOS-00088. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - Iterate over every rule in the control selections. (Gabriel Becker) 2024-11-27 21:46:23.584 logging.py DEBUG - Add OCIL and fixtext to file_group_ownership_var_log_audit (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fixtext to directory_ownership_var_log_audit (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add ocil_clause to directory_ownership_var_log_audit (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add OCIL and fixtext for directory_group_ownership_var_log_audit (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Align remediation with OVAL (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Change fix to fixtext (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Remove file_ownership_var_log_audit from SRG-OS-000206-GPOS-00084 (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix for file_ownership_var_log_audit_stig (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Improve OCIL and align it with OVAL (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix to file_permissions_var_log_messages (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix to file_owner_var_log_messages (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix to file_groupowner_var_log_messages (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix to file_permissions_var_log (Jan Černý) 2024-11-27 21:46:23.584 logging.py DEBUG - Add fix to file_owner_var_log (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix to rule file_groupowner_var_log (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - SUSE audit_rules_privileged_commands_kmod add bash remediation SLE12/15 (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - Simplify ubuntu product checks. (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - SUSE enable remediiation for grub2_disable_interactive_boot (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fixtext to sssd_offline_cred_expiration (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add var_accounts_max_concurrent_login_sessions to SRG-OS-000057-GPOS-00027 (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix text to accounts_max_concurrent_login_sessions (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Update OCIL and add fixtext to chronyd_or_ntpd_set_maxpoll (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Update SRG-OS-000356-GPOS-00144 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix text to package_sudo_install (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Remove sebool_ssh_sysadm_login and selinux_user_login_roles from SRG-OS-000324-GPOS-00125 (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Update SRG-OS-000324-GPOS-00125 for RHEL 9 (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix text to service_debug-shell_disabled (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix text to sysctl_fs_protected_hardlinks (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix text to sysctl_fs_protected_hardlinks (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add macro for sysctl settings fix text (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix text to disable_ctrlaltdel_reboot (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix text to disable_ctrlaltdel_burstaction (Matthew Burket) 2024-11-27 21:46:23.585 logging.py DEBUG - Update linux_os/guide/system/selinux/selinux_policytype/bash/shared.sh (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fixtext to configure_firewalld_ports (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add OCIL clause and fix to firewalld_sshd_port_enabled (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add firewalld_sshd_port_enabled to SRG-OS-000096-GPOS-00050 (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Disambiguate rules configure_firewalld_ports and firewalld_sshd_port_enabled (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Fix description (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix for kernel_module_dccp_disabled (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Improve describe_module_disable macro (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add Ansible to chronyd_no_chronyc_network (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix and improve OCIL in chronyd_no_chronyc_network (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add Ansible to chronyd_client_only (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - Add fix and improve OCIL in chronyd_client_only (Jan Černý) 2024-11-27 21:46:23.585 logging.py DEBUG - OCP: Added control response for SA group (vincent) 2024-11-27 21:46:23.585 logging.py DEBUG - SUSE no_empty_passwords enable bash remediation. (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - SUSE auditd_data_retention_flush enable bash remditaion (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - SUSE enable selinux_policytype remediation bash and ansible (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - SUSE enable no_rsh_trust_files remediation bash and ansible (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - SUSE enable bash remediation for accounts_logon_fail_delay (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - Update shared/macros/bash.jinja (Earl Sampson) 2024-11-27 21:46:23.585 logging.py DEBUG - Update OCIL for SSHD to consider default values. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Add option in SSH rules to mark rule as default value is compliant. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Make sure test env doesn't have undesired ssh configuration. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Remove substring tests from ssh rules. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Introduce more templated tests for sshd line in file template. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Remove missing_parameter_pass from SSH rules. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Fix kubernets template removal. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Fixed broken var reference with in grub2_bootloader_argument_remediation (sampsone) 2024-11-27 21:46:23.585 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_pam_enabled/bash/shared.sh (Earl Sampson) 2024-11-27 21:46:23.585 logging.py DEBUG - Align the test audit.rules with the rule behavior (Watson Sato) 2024-11-27 21:46:23.585 logging.py DEBUG - Ensure the appropriate lines get to the test (Watson Sato) 2024-11-27 21:46:23.585 logging.py DEBUG - Add debug profile for the srg_gpos controls. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Rename unit tests according to their meaning. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Add unit tests for controls_dir option in controls files. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Rename SRG policy control file. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Add documentation about the controls_dir option in controls format. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Substitute operating system with full_name variable in SRG files. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Move SRG control files to a generic folder called srg_gpos. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Add support to load control files from a specific folder. (Gabriel Becker) 2024-11-27 21:46:23.585 logging.py DEBUG - Fix reference to Ansible macro reference (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Remove reference to section in index (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Update docs for general and highlevel jinja files (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Add names to the toctree section (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - OCP: Added Control Response for SC group (vincent) 2024-11-27 21:46:23.586 logging.py DEBUG - Point the docs to new jinja macro files (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Exclude ClientAliveCountMax check in sshd_set_idle_timeout for RHEL9 (Milan Lysonek) 2024-11-27 21:46:23.586 logging.py DEBUG - Cleanup sshd_set_idle_timeout test scenarios (Milan Lysonek) 2024-11-27 21:46:23.586 logging.py DEBUG - utils/compare_results.py specify column width (Milan Lysonek) 2024-11-27 21:46:23.586 logging.py DEBUG - Refactor utils/compare_results.py (Milan Lysonek) 2024-11-27 21:46:23.586 logging.py DEBUG - Fix blank lines in general.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Rename macro to describe_kernel_build_config (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Rename and move warning macros to warning.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move describe macros to general.jinja file (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Rename and mov fix_sysctl macro to fixtext.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL Firefox macro to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL OC macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Remove unused macro ocil_xinetd_service_disabled (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL Kernel build config to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL sysctl options macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL File macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL Timer enabled macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL SELinux booleans macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.586 logging.py DEBUG - Move OCIL partition macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL Kernel modules macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL firewalld macro to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL audit syscall macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL Mount option macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL SSHD macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL socket and service disabled to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL service disabled macros to ocil.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL service macros to ocil.jinja file (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move OCIL package macros to the ocil.jinja file (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Load all Jinja macros from shared/macros (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Add fix for encrypt_partitions (Jan Černý) 2024-11-27 21:46:23.587 logging.py DEBUG - Update title for SRG-OS-000185-GPOS-00079 (Jan Černý) 2024-11-27 21:46:23.587 logging.py DEBUG - Add CCE to the row if there is a rule (Matthew Burket) 2024-11-27 21:46:23.587 logging.py DEBUG - Refactor handle_output in create_srg_export.py (Matthew Burket) 2024-11-27 21:46:23.587 logging.py DEBUG - Add openpyxl to dependancies in install doc (Matthew Burket) 2024-11-27 21:46:23.587 logging.py DEBUG - Generalize changes in grub2_uefi_password (Edgar Aguilar) 2024-11-27 21:46:23.587 logging.py DEBUG - Update SRG-OS-000113-GPOS-00058 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.587 logging.py DEBUG - Update SRG-OS-000380-GPOS-00165 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.587 logging.py DEBUG - OCP: Add control response for RA-5(4) (vincent) 2024-11-27 21:46:23.587 logging.py DEBUG - fix grub2 remediations for sle12 ans sle15 (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - Simplify gid handling (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - Update linux_os/guide/system/permissions/files/permissions_important_account_files/file_etc_security_opasswd/bash/shared.sh (Earl Sampson) 2024-11-27 21:46:23.587 logging.py DEBUG - Deduplicate values in the IA Control in create_srg_export (Matthew Burket) 2024-11-27 21:46:23.587 logging.py DEBUG - bugfix: auditing: Fix documentation distro (Markus Linnala) 2024-11-27 21:46:23.587 logging.py DEBUG - Fix doc indentation of Fix Text (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move oval_affected macro to oval.jinja (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Rename macro files and align docs (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Rename the control fix key to fixtext (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - change: encrypt_partitions: add fedora url (Markus Linnala) 2024-11-27 21:46:23.587 logging.py DEBUG - bugfix: encrypt_partitions: use common . (Markus Linnala) 2024-11-27 21:46:23.587 logging.py DEBUG - SUSE disable_users_coredumps enable bash remediation for sle. (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - Align kernel_module_loading remediations (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Rename Rule key fix to fixtext (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Standardize fixtext macro names with prefix (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move fixtext macros to their file (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Add file to organize the fixtext macros (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - Move macros to their on place in shared folder (Watson Sato) 2024-11-27 21:46:23.587 logging.py DEBUG - For sle systems the etc shadow is group shadow (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - SUSE fix file_groupowner_backup_etc_shadow (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - SUSE add bash remediation for file_etc_security_opasswd (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - SUSE add multi_platform_sle to audit_rules_file_deletion_events/bash.template (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - SUSE SLE fix audit_rules_unsuccessful_file_modification_renameat2 (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - Update accounts_umask_etc_profile remediation regex to handle comments (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - Enable bash remediation for SUSE smartcard_pam_enabled (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - Downgrade OCP4 builder image to fedora 34 (Lance Bragstad) 2024-11-27 21:46:23.587 logging.py DEBUG - Enable for ansible and bash remediation for SLE15 and SLE12. (sampsone) 2024-11-27 21:46:23.587 logging.py DEBUG - Add docuemntion for Pandas dependancy (Matthew Burket) 2024-11-27 21:46:23.587 logging.py DEBUG - Fix duplicate SRG (Jan Černý) 2024-11-27 21:46:23.587 logging.py DEBUG - Make HTML pages HTML5 compatible. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Add rule package_policycoreutils_installed to SRG-OS-000134-GPOS-00068 for RHEL 9 (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add rule selinux_state to SRG-OS-000134-GPOS-00068 for RHEL 9 (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix coding style (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Remove IPv4 limitation (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix gh-pages SRG mapping index page generation and deployment. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - utils/compare_results.py returns 1 if results are not the same (Milan Lysonek) 2024-11-27 21:46:23.588 logging.py DEBUG - Exclude package_libreport-plugin-rhtsupport_removed from stig_gui profile. (Milan Lysonek) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix text to install_smartcard_packages (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix broken Oracle Linux doc links. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - bugfix: kernel_config_slub_debug: should be y (Markus Linnala) 2024-11-27 21:46:23.588 logging.py DEBUG - Add error checking for HTML guide index page generation. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Generate index.html page for SRG Mapping tables. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix typos and improve grammar (Watson Yuuma Sato) 2024-11-27 21:46:23.588 logging.py DEBUG - Move the release docs to docs/ (Watson Sato) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix for sysctl_net_ipv4_tcp_syncookies (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add a jinja macro for fixing sysctl items (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Change title in SRG-OS-000142-GPOS-00071 (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - typo: kernel_config_slub_debug Enale -> Enable (Markus Linnala) 2024-11-27 21:46:23.588 logging.py DEBUG - Change title in SRG-OS-000134-GPOS-00068 (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix to grub2_slub_debug_argument (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix to grub2_page_poison_argument (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix index page generation for guides artifacts. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix a typo (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix for rule grub2_vsyscall_argument (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Refactor HTML SRG exporting code to a separate python file. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Improve exception messages (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix coding style (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Change imports to not use "from" syntax (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Specify output file explicitely (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Exclude/remove package removal test scenarios that remove essential package (Milan Lysonek) 2024-11-27 21:46:23.588 logging.py DEBUG - Remove unused file (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Remove unused functions (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Remove generate_fixes_xml.py (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add remediations to rules (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Update the OCP e2e documentation (Lance Bragstad) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix pep issues. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Publish SRG mapping artifacts to github pages. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Remove unused release scripts (Watson Sato) 2024-11-27 21:46:23.588 logging.py DEBUG - Update release process documentation (Watson Sato) 2024-11-27 21:46:23.588 logging.py DEBUG - Add new GH job to generate XLSX table and HTML page with SRG mapping. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Handle variables in ocil_clause when generating the SRG spreadsheet. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Refactor SRG XLSX table creation. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix ocil_clause of package installed rules. (Gabriel Becker) 2024-11-27 21:46:23.588 logging.py DEBUG - Apply style suggestions (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix text sssd_enable_smartcards (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix text to sshd_enable_pubkey_auth (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Update the proposal based on community suggestions. (Matej Tyc) 2024-11-27 21:46:23.588 logging.py DEBUG - Update SRG-OS-000109-GPOS-00056 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Update SRG-OS-000108-GPOS-00055 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Update SRG-OS-000107-GPOS-00054 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Update SRG-OS-000106-GPOS-00053 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Typo fix (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Update SRG-OS-000105-GPOS-00052 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix for sysctl_crypto_fips_enabled (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix for sshd_enable_pam (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Use correct separator macro sshd_lineinfile_fix (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Update title of SRG-OS-000125-GPOS-00065 (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix for package_krb5-workstation_removed (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Add fix to configure_kerberos_crypto_policy (Jan Černý) 2024-11-27 21:46:23.588 logging.py DEBUG - Fix capital K (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - install_vm.py: update default Fedora version to 35 (Matus Marhefka) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix for package_libreswan_installed (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Update title in SRG-OS-000120-GPOS-00061 (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix to rsyslog_remote_tls (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - remove no longer needed rule from hipaa profiles (Vojtech Polasek) 2024-11-27 21:46:23.589 logging.py DEBUG - align stability test (Vojtech Polasek) 2024-11-27 21:46:23.589 logging.py DEBUG - remove rules from rhel8 ospp profile (Vojtech Polasek) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix for package_rsyslog-gnutls_installed (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix for accounts_password_all_shadowed_sha512 (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for 64b kernel (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Fix typos and improve rule descriptions (Watson Yuuma Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix for kerberos_disable_no_keytab (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Improve OCIL clause in kerberos_disable_no_keytab (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add Ansible for kerberos_disable_no_keytab (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add test scenarios for kerberos_disable_no_keytab (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for ARM64 kernel (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules to configure Kernel panic behavior (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add a custom sheet name and bug fixes (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - Apply suggestions from code review (Watson Yuuma Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add a pass test for the quoted value (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add test to ensure quote capturing behavior (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Fix handling of quotes matching against substrings (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add test for match against super strings (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Move kernel_config_rules to XCCDF variables (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix text to gid_passwd_group_same (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for kernel security options (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules to check kernel IP stack configs (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for kernel compiler features (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Fix typos in rule descriptions (Watson Yuuma Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add XCCDF variable support to kernel_build_config (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for various kernel behaviors (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix text to configure_opensc_card_drivers (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - Add fix text to force_opensc_card_drivers (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - Update group_unique_id for RHEL9 STIG and add fix text (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - Update SRG-OS-000104-GPOS-00051 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - Add SRG mapping text to the STIG mapping table. (Gabriel Becker) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for kernel module security (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Use GH team in codeowners (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Fix typo (Watson Yuuma Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Update ansible in audit_rules_kernel_module rules (Edgar Aguilar) 2024-11-27 21:46:23.589 logging.py DEBUG - Update tests in audit_rules_kernel_module rules (Edgar Aguilar) 2024-11-27 21:46:23.589 logging.py DEBUG - Move XLSX export to the SRG export script (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - tests/ds_unselect_rules.sh: make unselecting of rules more robust (Matus Marhefka) 2024-11-27 21:46:23.589 logging.py DEBUG - Change OCIL clauses to negative form (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rule for kernel config_compat_bkr (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for kernel page poisoning build config (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Change the OCIL clause to negative form (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Change OCIL clause to the negative form (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Fix typos from rule descriptions (Watson Yuuma Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules to check SLUB kernel build config (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules to check SLAB kernel build config (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for kernel data structure configs (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Set Benchmark's resolved attribute to true (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add CODEOWNERS (Jan Černý) 2024-11-27 21:46:23.589 logging.py DEBUG - Add Centos Stream 8/9 support in install_vm script. (Gabriel Becker) 2024-11-27 21:46:23.589 logging.py DEBUG - Fix ocil macro call for some kernel config rules (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Fix typos in rule descriptions (Watson Yuuma Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Extend description of rule for CONFIG_COMPAT_VDSO (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - feat: OCP4 on HyperShift product definition (Takuya Mishina) 2024-11-27 21:46:23.589 logging.py DEBUG - Update account_unique_id with warnings and fix text (Matthew Burket) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rules for kernel vsyscall configs (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rule for CONFIG_RETPOLINE (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rule to prevent unprivileged access to dmesg (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rule for CONFIG_COMPAT_VDSO (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rule for CONFIG_PROC_KCORE (Watson Sato) 2024-11-27 21:46:23.589 logging.py DEBUG - Add rule for CONFIG_DEVKMEM (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rule for CONFIG_ACPI_CUSTOM_METHOD (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rule for kernel CONFIG_FORTIFY_SOURCE (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rule for kernel refcounting (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Update SRG-OS-000121-GPOS-00062 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rule for CONFIG_VMAP_STACK (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rules for kernel hardened usercopy (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Remove a removed script from docs (Jan Černý) 2024-11-27 21:46:23.590 logging.py DEBUG - Fix PEP8 problem (Jan Černý) 2024-11-27 21:46:23.590 logging.py DEBUG - Remove unused code (Jan Černý) 2024-11-27 21:46:23.590 logging.py DEBUG - Stop using dedicated script (Jan Černý) 2024-11-27 21:46:23.590 logging.py DEBUG - Add STIG references to compiled rules (Jan Černý) 2024-11-27 21:46:23.590 logging.py DEBUG - Refactor: Extract function (Jan Černý) 2024-11-27 21:46:23.590 logging.py DEBUG - Check kernel config CONFIG_SCHED_STACK_END_CHECK (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rules for kernel build config stack protection (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rule to check kernel config_debug_wx (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - SRG-OS-000349-GPOS-00137 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.590 logging.py DEBUG - Add OCIL clause and update SRGs on service_auditd_enabled (Matthew Burket) 2024-11-27 21:46:23.590 logging.py DEBUG - Update SRG-OS-000281-GPOS-00111 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.590 logging.py DEBUG - *.py: always use shebang /usb/bin/python3 (Markus Linnala) 2024-11-27 21:46:23.590 logging.py DEBUG - bugfix: xml files do not need to be executable (Markus Linnala) 2024-11-27 21:46:23.590 logging.py DEBUG - Update package_krb5-server_removed references (Edgar Aguilar) 2024-11-27 21:46:23.590 logging.py DEBUG - Update ansible in configure_ssh_crypto_policy (Edgar Aguilar) 2024-11-27 21:46:23.590 logging.py DEBUG - Compare number of kernels with number of configs (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add no remediation metadat to fail test scenario (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add tests for missing config (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - All kernel config rules are machine only (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Clarify expected output of config grep command (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Make config applicable to all products (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Clarify template documentation (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Update OVAL to also check for negative values (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Default to input config in upper case letters (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rule to disable kernel debugfs (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Make template check for "n" values (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add rule to check Kernel config CONFIG_STRICT_KERNEL_RWX (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Add template to check for kernel build configs (Watson Sato) 2024-11-27 21:46:23.590 logging.py DEBUG - Use templated generated content instead of custom artifacts. (Gabriel Becker) 2024-11-27 21:46:23.591 logging.py DEBUG - Update profile_stability stigs data for rhel8 (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Restore rule.yml description and rationale (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Add CCE reference to package_krb5-server_removed (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Update profile_stability stigs data for rhel8 (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Update package_krb5-server_removed (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Fix variable path access issue (Andrew Becker) 2024-11-27 21:46:23.591 logging.py DEBUG - Refactoring for convert_srg_export_to_xlsx (Matthew Burket) 2024-11-27 21:46:23.591 logging.py DEBUG - OCP4: Remove oval check from file_groupowner_proxy_kubeconfig and file_owner_proxy_kubeconfig (vincent) 2024-11-27 21:46:23.591 logging.py DEBUG - Freeze Header Row (Matthew Burket) 2024-11-27 21:46:23.591 logging.py DEBUG - Add utils/convert_srg_export_to_xlsx.py (Matthew Burket) 2024-11-27 21:46:23.591 logging.py DEBUG - Add CCE to rule and update profile_stability data (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Update tests for configure_ssh_crypto_policy (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Introduce usbguard cpe (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Update tests in audit_rules_kernel_module rules (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Use Jinja template (Jan Černý) 2024-11-27 21:46:23.591 logging.py DEBUG - Simplify code (Jan Černý) 2024-11-27 21:46:23.591 logging.py DEBUG - Remove unused update_sds_version.py (Jan Černý) 2024-11-27 21:46:23.591 logging.py DEBUG - Build SCAP 1.2 and 1.3 using a single command (Jan Černý) 2024-11-27 21:46:23.591 logging.py DEBUG - Add option to build SCAP 1.3 (Jan Černý) 2024-11-27 21:46:23.591 logging.py DEBUG - Rename the script (Jan Černý) 2024-11-27 21:46:23.591 logging.py DEBUG - Fix same shadow field bug in tests (Alexander Scheel) 2024-11-27 21:46:23.591 logging.py DEBUG - Fix macro bash_ensure_mount_option_for_vfstype (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Add tests to mount_option_remote_filesystems (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Fix typo (Gabriel Becker) 2024-11-27 21:46:23.591 logging.py DEBUG - Update comments in STIG profiles for OL8 & RHEL8 (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Update OVAL in dconf_gnome_screensaver_lock_delay (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Add rule vlock_installed to STIG profile in OL8 (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Add OL8 STIG ID to configure_crypto_policy (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Update regex to detect nfs filesystems in fstab (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Fix typos and description of two sysctl_kernel rules (Marcus Burghardt) 2024-11-27 21:46:23.591 logging.py DEBUG - Update grub2_bootloader_argument template for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Add Fix text and update OCIL on clean_components_post_updating (Matthew Burket) 2024-11-27 21:46:23.591 logging.py DEBUG - Update configure_ssh_crypto_policy (Edgar Aguilar) 2024-11-27 21:46:23.591 logging.py DEBUG - Like the docs requirments GitPod should also use https vs the lagecy git protocol (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add text to selinux_state to fix and OCIL for better support to (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add text to selinux_policytype to fix and OCIL for better support to (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add variables for SRG-OS-000445-GPOS-00199 (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update grub2_uefi_password to use CPE (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Update grub2_uefi_admin_username to use CPE (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Apply grub2_uefi_password changes to rhel8 (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Make grub2_uefi_password rule compliant for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Ensure that headers and the Requirement field for create_srg_export are correct (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update accounts_password template OVAL for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Introduce CPE for tftp-server (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Remove shared_xccdf-removeaux.xslt (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Use the correct command in bash to list fingerprint of RHEL9 gpg keys. (Gabriel Becker) 2024-11-27 21:46:23.592 logging.py DEBUG - Stop using oscap xccdf resolve (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Do not insist on resolved Benchmarks (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Split command line arguments of add_stig_references.py (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Bump Fedora version, rawhide is now 37, drop 33 (Markus Linnala) 2024-11-27 21:46:23.592 logging.py DEBUG - Add rule audit_rules_dac_modification_lsetxattr to SLE12 (Yavor Georgiev) 2024-11-27 21:46:23.592 logging.py DEBUG - Fix CCE key for sle12 with right notation (Yavor Georgiev) 2024-11-27 21:46:23.592 logging.py DEBUG - Update grub2_password to use CPE (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Make grub2_password rule compliant for rhel8 (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Make grub2_password rule compliant for ol8 (Edgar Aguilar) 2024-11-27 21:46:23.592 logging.py DEBUG - Update SRG-OS-000364-GPOS-00151 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix text to package_fapolicyd_installed (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix text to service_fapolicyd_enabled (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update SRG-OS-000370-GPOS-00155 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Fix indentation in SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update SRG-OS-000432-GPOS-00191 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update SRG-OS-000437-GPOS-00194 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix text to selinux_state (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update selinux_policytype for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update SRG-OS-000445-GPOS-00199 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update SRG-OS-000031-GPOS-00012 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix text to dconf_gnome_screensaver_mode_blank (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Disable templated tests for the rule (Matej Tyc) 2024-11-27 21:46:23.592 logging.py DEBUG - Enable templated test scenarios filtering (Matěj Týč) 2024-11-27 21:46:23.592 logging.py DEBUG - Rename a Rule property files (Matěj Týč) 2024-11-27 21:46:23.592 logging.py DEBUG - Revert "chore: temporaliry change catalog image to load latest CO image" (Takuya Mishina) 2024-11-27 21:46:23.592 logging.py DEBUG - Update SRG-OS-000030-GPOS-00011 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Update create_srg_export based on feedback (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix to gnome_gdm_disable_automatic_login (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix to sshd_do_not_permit_user_env (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix and ocil clause to service_firewalld_enabled (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix and update rationale in package_firewalld_installed (Matthew Burket) 2024-11-27 21:46:23.592 logging.py DEBUG - Mention compose_ds.py in docs (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Remove sds_move_ocil_to_checks.py (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Stop using oscap to compose data stream (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Introduce script to compose data streams (Jan Černý) 2024-11-27 21:46:23.592 logging.py DEBUG - Group rules for removexattr and setxattr under sam SUSE STIG IDs (Yavor Georgiev) 2024-11-27 21:46:23.592 logging.py DEBUG - Group chown syscall audit rules under same STIG ID dor SLE12 and SLE15 (Yavor Georgiev) 2024-11-27 21:46:23.592 logging.py DEBUG - Group init_module and finit_module audit rules. (Yavor Georgiev) 2024-11-27 21:46:23.592 logging.py DEBUG - Fix minor typo (Yavor Georgiev) 2024-11-27 21:46:23.592 logging.py DEBUG - Add sudoers_default_includedir rule support to SLE12 and SLE15 platforms (Yavor Georgiev) 2024-11-27 21:46:23.592 logging.py DEBUG - Add fix text to sshd_disable_empty_passwords (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Add to fix disable_host_auth (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000480-GPOS-00229 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000480-GPOS-00232 for RHEL 9 SRG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - One step in getting the docs to build again (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000123-GPOS-00064 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Add variables for RHEL9 STIG Control (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Add support for variables in create_srg_export (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - HTML encode the < and > in accounts_password_set_max_life_existing (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Allow for HTML encoding of < and > in srg export (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Fix fix in dir_perms_world_writable_root_owned (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update how the utils/create_srg_export.py sets the Requirement column (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Populate the IA Control column if using the GPOS SRG. (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000138-GPOS-00069 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000076-GPOS-00044 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update accounts_password_set_max_life_existing (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Add fix text rules under SRG-OS-000075-GPOS-00043 (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Add text for SRG-OS-000067-GPOS-00035 (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Fix title in stig_rhel9 control (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Ensure that full_name used in the RHEL9 STIG control (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Fix a couple of issues at create_srg_export (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000362-GPOS-00149 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000360-GPOS-00147 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000344-GPOS-00135 for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000280-GPOS-00110 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000277-GPOS-00107 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000275-GPOS-00105 for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000205-GPOS-00083 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000184-GPOS-00078 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000132-GPOS-00067 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000079-GPOS-00047 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000066-GPOS-00034 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000024-GPOS-00007 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000001-GPOS-00001 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000395-GPOS-00175 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000362-GPOS-00149 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000279-GPOS-00109 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000276-GPOS-00106 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000275-GPOS-00105 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-0001320GPOS-00067 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000280-GPOS-00110 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000205-GPOS-00083 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000066-GPOS-00034 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update for SRG-OS-000344-GPOS-00135 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Fix issue with build due to rule SRG-OS-000126-GPOS-00066.yml (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000079-GPOS-00047 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000277-GPOS-00107 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000184-GPOS-00078 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000403-GPOS-00182 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000055-GPOS-00026 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - RHEL9 STIG SRG-OS-000024-GPOS-00007 (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Remove the sshd_set_idle_timeout rule since idle timeout no longer works on RHEL9. (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000360-GPOS-00147 for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000001-GPOS-00001 for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000001-GPOS-00001 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Updated SRG-OS-000079-GPOS-00047 for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Fix missing "to" in account restriction warnings (Alexander Scheel) 2024-11-27 21:46:23.593 logging.py DEBUG - Initial version of project rules (Matej Tyc) 2024-11-27 21:46:23.593 logging.py DEBUG - Use UID field for bash remediation of homedirs (Alexander Scheel) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000122-GPOS-00063 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - NIST: AC-18(4) ensure wireless capability is turned disabled using templating (vincent) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000118-GPOS-00060 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update account_disable_post_pw_expiration rationale and ocil_clause and add fix (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update SRG-OS-000112-GPOS-00057 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.593 logging.py DEBUG - Update accounts_password_set_max_life_existing for RHEL 9 STIG (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add fix text to accounts_maximum_age_login_defs (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Update SRG-OS-000076-GPOS-00044 for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Update SRG-OS-000074-GPOS-00042 for RHEL9 (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add fix text for package_vsftpd_removed (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Include RBAC related information for AC-6(8) (TrilokGeer) 2024-11-27 21:46:23.594 logging.py DEBUG - Update SRG-OS-000071-GPOS-00039 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add fix text to accounts_password_pam_dcredit (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Update SRG-OS-000070-GPOS-00038 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add fix text for accounts_password_pam_enforce_root (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add fix text to accounts_password_pam_lcredit (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add CCE for RHEL9 on accounts_password_pam_enforce_root (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add fix text for sssd_enable_certmap (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Update SRG-OS-000068-GPOS-00036 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Move code (anivan-suse) 2024-11-27 21:46:23.594 logging.py DEBUG - Add OCIL, OCIL Clause, Fix to file_permissions_etc_audit_rulesd (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Add OCIL and fix text to file_permissions_etc_audit_auditd (Matthew Burket) 2024-11-27 21:46:23.594 logging.py DEBUG - Apply text suggestions (Watson Yuuma Sato) 2024-11-27 21:46:23.594 logging.py DEBUG - Apply text suggestions (Watson Yuuma Sato) 2024-11-27 21:46:23.594 logging.py DEBUG - Override dconf_gdm_dir for OL8 (Federico Ramirez) 2024-11-27 21:46:23.594 logging.py DEBUG - Turn all wireless interfaces off (Federico Ramirez) 2024-11-27 21:46:23.594 logging.py DEBUG - Ignore commented lines in bash_fix_audit_watch_rule (Federico Ramirez) 2024-11-27 21:46:23.594 logging.py DEBUG - Audit changes to rsyslogd binary (Federico Ramirez) 2024-11-27 21:46:23.594 logging.py DEBUG - OCP4: Add rules to check kubelet config file permission (vincent) 2024-11-27 21:46:23.594 logging.py DEBUG - Introduce rules for abrt packages (Federico Ramirez) 2024-11-27 21:46:23.594 logging.py DEBUG - Update OL08-00-040001 requirement (Federico Ramirez) 2024-11-27 21:46:23.594 logging.py DEBUG - Allow auid to be not equal to -1 (Federico Ramirez) 2024-11-27 21:46:23.594 logging.py DEBUG - Ignore comments in bash_fix_audit_syscall_rule (Federico Ramirez) 2024-11-27 21:46:23.682 logging.py DEBUG - Add perm param for audit rules in OL8 (Federico Ramirez) 2024-11-27 21:46:23.682 logging.py DEBUG - Fix language errors (Matěj Týč) 2024-11-27 21:46:23.682 logging.py DEBUG - Update SRG-OS-000063-GPOS-00032 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Update SRG-OS-000055-GPOS-00026 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Update SRGs only containing service_auditd_enabled for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Add fix text to auditd_name_format (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Update SRG-OS-000039-GPOS-00017 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Update SRG-OS-000038-GPOS-00016 for RHEL9 STIG (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Add fix text to package_audit_installed (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - chore: temporaliry change catalog image to load latest CO image (Takuya Mishina) 2024-11-27 21:46:23.682 logging.py DEBUG - Update test platform (Edgar Aguilar) 2024-11-27 21:46:23.682 logging.py DEBUG - Add fix to service_auditd_enabled (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Add macro to describe for how to enable a service for fix text (Matthew Burket) 2024-11-27 21:46:23.682 logging.py DEBUG - Add tests to network_configure_name_resolution (Edgar Aguilar) 2024-11-27 21:46:23.682 logging.py DEBUG - Update network_configure_name_resolution (Edgar Aguilar) 2024-11-27 21:46:23.682 logging.py DEBUG - Add rule to prevent routing to loopback (Watson Sato) 2024-11-27 21:46:23.682 logging.py DEBUG - Update control response for AC-6(8) (TrilokGeer) 2024-11-27 21:46:23.682 logging.py DEBUG - Remove reference to a nonexistent file (Jan Černý) 2024-11-27 21:46:23.682 logging.py DEBUG - Add 
 tag HTML element to STIG mapping tables. (Gabriel Becker)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Add fix text to sshd_set_loglevel_verbose (Matthew Burket)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Add fix text to rsyslog_remote_access_monitoring (Matthew Burket)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Add macro for SSHD config fix text (Matthew Burket)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Update SRG-OS-000032-GPOS-00013 for RHEL9 STIG (Matthew Burket)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Expand project guidelines (Matěj Týč)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Unify a custom_command (Jan Černý)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Add rule to drop gratuitious ARP frames (Watson Sato)
2024-11-27 21:46:23.682 logging.py        DEBUG  - OCP: cluster version history bug fix (vincent)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Fix handling of missing limits.d/*.conf files (Edgar Aguilar)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Fix fix text macro in SRG-OS-000028-GPOS-00009 (Matthew Burket)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Remove one "oscap xccdf resolve" step (Jan Černý)
2024-11-27 21:46:23.682 logging.py        DEBUG  - SC-7(10) Control Response (vincent)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Bump version to 0.1.62 (Watson Sato)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Remove sudo from bash command (Edgar Aguilar)
2024-11-27 21:46:23.682 logging.py        DEBUG  - OCP: Add vaiabled support for kubelet_configure_tls_cipher_suites (vincent)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Update RHEL7 STIG references. (Gabriel Becker)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Update RHEL8 STIG rules. (Gabriel Becker)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Add rule for sysctl arp (Watson Sato)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Add rule for sysctl shared_media (Watson Sato)
2024-11-27 21:46:23.682 logging.py        DEBUG  - Add rule for net.ipv4.conf.all.accept_local (Watson Sato)
2024-11-27 21:46:23.682 logging.py        DEBUG  - fix: error on kubelet TLS config check in kubelet categoly (copied from api-server rules) (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - fix: error (lack of closing double quote) (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: update kube scheduler rules (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: update etcd rule (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: update kube-controller-manager rules (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: customization for ocp-api-server rule and openshift-api-server rule (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: hypershift customization for cert/key file locations (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - fix: now all rules are "pass" for regression test (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules regarding apiServerArguments (Takuya Mishina)
2024-11-27 21:46:23.682 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules with "at least one" (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules with "none satisfy" (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - chore: replace filepath (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - chore: replace warnings element (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - chore: add jinja variables after title (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - feat: customizable rule for api_server_admission_control_plugin_AlwaysAdmit (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - feat: customizable rule for api_server_no_adm_ctrl_plugins_disabled (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - feat: support custom/default API path and filter (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - chore: rename jinja variable names (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - feat: customizable rule for api_server_no_adm_ctrl_plugins_disabled (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - feat: support distinct object path and dump path for openshift_filtered_cluster_setting() (Takuya Mishina)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Make taylor reg ex to /etc/group and /etc/passwd structure. (sampsone)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Fix if statements with config_is_distributed (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Remove -F euid=0 parameter from a rule for ol8 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Remove unnecessary criterion from rule for rhel8 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Remove unnecessary criterion from rule for ol8 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Fix bash remediation of disable_users_coredumps (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Update network_configure_name_resolution (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Update network_configure_name_resolution for ol8 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Fix sshd_rekey_limit jinja if statements in OVAL (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Revert "Update sshd_oval_check related default constant" (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Update sshd_oval_check related default constant (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add auid criteria to rules required by rhel8 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add auid criteria to rule to meet OL08-00-030360 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add auid criteria to rule to meet OL08-00-030380 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add auid criteria to rule to meet OL08-00-030390 (Edgar Aguilar)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Fix reference to local_variable (Watson Sato)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add rule for HWRNG contribution to pool entropy (Watson Sato)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add rule for MDS vulnerability (Watson Sato)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add rule to force spectre_v2 mitigation (Watson Sato)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add rule to mitigate Spec Store Bypass vuln (Watson Sato)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add rule for l1tf mitigation (Watson Sato)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Update SRG-OS-000028-GPOS-00009 for RHEL9 STIG (Matthew Burket)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add a macro for donf_ini_file_fix (Matthew Burket)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Replace Red Hat Enterprise Linux 7 with {{{ full_name }}} (Yavor Georgiev)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Drop trailing whitespaces (Yavor Georgiev)
2024-11-27 21:46:23.683 logging.py        DEBUG  - gid_passwd_group_same oval does not allow ! in passwd field (sampsone)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Remove sle files (anivan-suse)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Update fix (anivan-suse)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Generalize OpenShift groups (Lance Bragstad)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Fix for bug 1195520 (anivan-suse)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Set reboot meta parameter to true since we modify grub related rule Thanks to @Mab879 for raising the issue (Yavor Georgiev)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Fix for literal-compare ansible lint rule (Yavor Georgiev)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add remediations metadata (Yavor Georgiev)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Update linux_os/guide/system/permissions/restrictions/enable_execshield_settings/sysctl_kernel_exec_shield/ansible/shared.yml (teacup-on-rockingchair)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Add sysctl_kernel_exec_shield to HIPAA profile (Yavor Georgiev)
2024-11-27 21:46:23.683 logging.py        DEBUG  - Use template variable for grub config path to improve portability of the OVAL rule (Yavor Georgiev)
2024-11-27 21:46:23.716 changelog_helper.py DEBUG  Setting Release in spec to '0.20241127214621178825.pr12636.14455.gd926f03b17'.
2024-11-27 21:46:23.755 base_git.py       DEBUG  List of sources to download (url, path, optional): []
2024-11-27 21:46:23.755 api.py            DEBUG  Copying /tmp/tmp4cnlb36_ -> /workdir
2024-11-27 21:46:25.360 api.py            INFO   Directory with sources: /workdir
2024-11-27 21:46:25.361 local_project.py  DEBUG  Cleaning: /tmp/tmp4cnlb36_
2024-11-27 21:46:25.754 local_project.py  DEBUG  Cleaning: /tmp/tmp4cnlb36_
Finish: chroot ['su - mockbuild -c \'set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-12636 COPR_PACKAGE=\'"\'"\'\'"\'"\' COPR_RESULTDIR=/workdir /script\'']
Finish: run
Running: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyout /workdir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir

cmd: ['mock', '-r', '/var/lib/copr-rpmbuild/results/mock-config.cfg', '--copyout', '/workdir', '/var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir']
cwd: .
rc: 0
stdout: 
stderr: INFO: mock.py version 5.9 starting (python version = 3.13.0, NVR = mock-5.9-1.fc41), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyout /workdir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir
Start(bootstrap): init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish(bootstrap): init plugins
Start: init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish: init plugins
INFO: Signal handler active
Start: run
Mock Version: 5.9
INFO: Mock Version: 5.9
Start(bootstrap): chroot init
INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root.
INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64-bootstrap/root.
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start(bootstrap): cleaning package manager metadata
Finish(bootstrap): cleaning package manager metadata
INFO: Package manager dnf5 detected and used (fallback)
Finish(bootstrap): chroot init
Start: chroot init
INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root.
INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-41-x86_64/root.
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start: cleaning package manager metadata
Finish: cleaning package manager metadata
INFO: enabled HW Info plugin
INFO: Package manager dnf5 detected and used (direct choice)
Finish: chroot init
INFO: copying /var/lib/mock/copr-custom-fedora-41-x86_64/root/workdir to /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir
Finish: run

Running: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --scrub all

cmd: ['mock', '-r', '/var/lib/copr-rpmbuild/results/mock-config.cfg', '--scrub', 'all']
cwd: .
rc: 0
stdout: 
stderr: INFO: mock.py version 5.9 starting (python version = 3.13.0, NVR = mock-5.9-1.fc41), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --scrub all
Start(bootstrap): init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish(bootstrap): init plugins
Start: init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish: init plugins
INFO: Signal handler active
Start: run
Start: scrub ['all']
INFO: scrubbing everything for mock-config
INFO: unmounting tmpfs.
INFO: unmounting tmpfs.
Finish: scrub ['all']
Finish: run

Running: rpmbuild -bs --define '_sourcedir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir' --define '_rpmdir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir' --define '_builddir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir' --define '_specdir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir' --define '_srcrpmdir /var/lib/copr-rpmbuild/results' /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir/scap-security-guide.spec

cmd: ['rpmbuild', '-bs', '--define', '_sourcedir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir', '--define', '_rpmdir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir', '--define', '_builddir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir', '--define', '_specdir /var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir', '--define', '_srcrpmdir /var/lib/copr-rpmbuild/results', '/var/lib/copr-rpmbuild/workspace/workdir-gcdkbor3/srcdir/scap-security-guide.spec']
cwd: .
rc: 0
stdout: Wrote: /var/lib/copr-rpmbuild/results/scap-security-guide-0.1.76-0.20241127214621178825.pr12636.14455.gd926f03b17.src.rpm

RPM build warnings:
stderr: Building target platforms: noarch
Building for target noarch
warning: %source_date_epoch_from_changelog is set, but %changelog has no entries to take a date from
    %source_date_epoch_from_changelog is set, but %changelog has no entries to take a date from

Output: ['scap-security-guide-0.1.76-0.20241127214621178825.pr12636.14455.gd926f03b17.src.rpm', 'mock-config.cfg']
Running SRPMResults tool
Package info: {
    "name": "scap-security-guide",
    "epoch": null,
    "version": "0.1.76",
    "release": "0.20241127214621178825.pr12636.14455.gd926f03b17",
    "exclusivearch": [],
    "excludearch": []
}
SRPMResults finished