Warning: Permanently added '44.201.129.125' (ED25519) to the list of known hosts. You can reproduce this build on your computer by running: sudo dnf install copr-rpmbuild /usr/bin/copr-rpmbuild --verbose --drop-resultdir --srpm --task-url https://copr.fedorainfracloud.org/backend/get-srpm-build-task/9825514 Version: 1.6 PID: 8660 Logging PID: 8662 Task: {'appstream': False, 'background': False, 'build_id': 9825514, 'chroot': 'fedora-43-x86_64', 'package_name': None, 'project_dirname': 'ComplianceAsCode-content-14163', 'project_name': 'ComplianceAsCode-content-14163', 'project_owner': 'packit', 'repos': [{'baseurl': 'https://download.copr.fedorainfracloud.org/results/packit/packit-stable/fedora-43-x86_64/', 'id': 'copr_packit_packit_stable', 'name': 'Additional repo copr_packit_packit_stable'}], 'sandbox': 'packit/ComplianceAsCode-content-14163--packit', 'source_json': {'builddeps': 'packit bash', 'chroot': 'fedora-43-x86_64', 'repos': 'copr://packit/packit-stable', 'resultdir': None, 'script': '\n' '#!/bin/sh\n' '\n' 'git config --global user.email "hello@packit.dev"\n' 'git config --global user.name "Packit"\n' 'resultdir=$PWD\n' 'packit -d prepare-sources --result-dir "$resultdir" --pr-id 14163 --merge-pr ' "--target-branch master --job-config-index 0 --merged-ref 'master' --no-create-symlinks " 'https://github.com/ComplianceAsCode/content\n' '\n'}, 'source_type': 9, 'submitter': 'packit', 'task_id': '9825514'} Running (timeout=5400): unbuffer copr-sources-custom --workdir /workdir --mock-config /var/lib/copr-rpmbuild/results/mock-config.cfg --script /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/script --builddeps 'packit bash' --env COPR_OWNER=packit --env COPR_PROJECT=ComplianceAsCode-content-14163 --env 'COPR_PACKAGE='"'"''"'"'' INFO:__main__:Working in '/workdir' INFO:__main__:Results should be created in '/workdir' INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --init INFO: mock.py version 6.5 starting (python version = 3.13.7, NVR = mock-6.5-1.fc42), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --init Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Start: clean chroot Finish: clean chroot Mock Version: 6.5 INFO: Mock Version: 6.5 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Guessed host environment type: unknown INFO: Using container image: registry.fedoraproject.org/fedora:43 INFO: Pulling image: registry.fedoraproject.org/fedora:43 INFO: Tagging container image as mock-bootstrap-f7b9514f-cd41-4feb-9125-fc1d9d02ed0d INFO: Checking that 8ca2fdf4adeb90316d68fb0e4d97c07082a6ab6d47c8c7ea30a6c497b4c9251a image matches host's architecture INFO: Copy content of container 8ca2fdf4adeb90316d68fb0e4d97c07082a6ab6d47c8c7ea30a6c497b4c9251a to /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root INFO: mounting 8ca2fdf4adeb90316d68fb0e4d97c07082a6ab6d47c8c7ea30a6c497b4c9251a with podman image mount INFO: image 8ca2fdf4adeb90316d68fb0e4d97c07082a6ab6d47c8c7ea30a6c497b4c9251a as /var/lib/containers/storage/overlay/814f65ad561f0c261daaf69ff7258312f79b4c724981362268f1acba5229813f/merged INFO: umounting image 8ca2fdf4adeb90316d68fb0e4d97c07082a6ab6d47c8c7ea30a6c497b4c9251a (/var/lib/containers/storage/overlay/814f65ad561f0c261daaf69ff7258312f79b4c724981362268f1acba5229813f/merged) with podman image umount INFO: Removing image mock-bootstrap-f7b9514f-cd41-4feb-9125-fc1d9d02ed0d INFO: Package manager dnf5 detected and used (fallback) INFO: Not updating bootstrap chroot, bootstrap_image_ready=True Start(bootstrap): creating root cache Finish(bootstrap): creating root cache Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Start: installing minimal buildroot with dnf5 Updating and loading repositories: Additional repo copr_packit_packit_sta 100% | 60.6 KiB/s | 4.7 KiB | 00m00s updates 100% | 40.5 MiB/s | 14.8 MiB | 00m00s fedora 100% | 26.3 MiB/s | 35.4 MiB | 00m01s Repositories loaded. Package Arch Version Repository Size Installing group/module packages: bash x86_64 5.3.0-2.fc43 fedora 8.4 MiB bzip2 x86_64 1.0.8-21.fc43 fedora 95.3 KiB coreutils x86_64 9.7-6.fc43 fedora 5.4 MiB cpio x86_64 2.15-6.fc43 fedora 1.1 MiB diffutils x86_64 3.12-3.fc43 fedora 1.6 MiB fedora-release-common noarch 43-25 fedora 20.6 KiB findutils x86_64 1:4.10.0-6.fc43 fedora 1.8 MiB gawk x86_64 5.3.2-2.fc43 fedora 1.8 MiB glibc-minimal-langpack x86_64 2.42-4.fc43 fedora 0.0 B grep x86_64 3.12-2.fc43 fedora 1.0 MiB gzip x86_64 1.13-4.fc43 fedora 388.8 KiB info x86_64 7.2-6.fc43 fedora 353.9 KiB patch x86_64 2.8-2.fc43 fedora 222.8 KiB redhat-rpm-config noarch 343-11.fc43 fedora 182.9 KiB rpm-build x86_64 6.0.0-1.fc43 fedora 287.4 KiB sed x86_64 4.9-5.fc43 fedora 857.3 KiB shadow-utils x86_64 2:4.18.0-3.fc43 fedora 3.9 MiB tar x86_64 2:1.35-6.fc43 fedora 2.9 MiB unzip x86_64 6.0-67.fc43 fedora 386.3 KiB util-linux x86_64 2.41.1-17.fc43 fedora 3.5 MiB which x86_64 2.23-3.fc43 fedora 83.5 KiB xz x86_64 1:5.8.1-2.fc43 fedora 1.3 MiB Installing dependencies: add-determinism x86_64 0.6.0-2.fc43 fedora 2.4 MiB alternatives x86_64 1.33-3.fc43 updates 62.2 KiB ansible-srpm-macros noarch 1-18.1.fc43 fedora 35.7 KiB audit-libs x86_64 4.1.2-2.fc43 updates 378.8 KiB binutils x86_64 2.45.1-1.fc43 updates 27.3 MiB build-reproducibility-srpm-macros noarch 0.6.0-2.fc43 fedora 735.0 B bzip2-libs x86_64 1.0.8-21.fc43 fedora 80.6 KiB ca-certificates noarch 2025.2.80_v9.0.304-1.1.fc43 fedora 2.7 MiB coreutils-common x86_64 9.7-6.fc43 fedora 11.3 MiB crypto-policies noarch 20250714-5.gitcd6043a.fc43 fedora 146.9 KiB curl x86_64 8.15.0-3.fc43 updates 461.5 KiB cyrus-sasl-lib x86_64 2.1.28-33.fc43 fedora 2.3 MiB debugedit x86_64 5.2-3.fc43 fedora 214.0 KiB dwz x86_64 0.16-2.fc43 fedora 287.1 KiB ed x86_64 1.22.2-1.fc43 fedora 148.1 KiB efi-srpm-macros noarch 6-4.fc43 fedora 40.1 KiB elfutils x86_64 0.194-1.fc43 updates 2.9 MiB elfutils-debuginfod-client x86_64 0.194-1.fc43 updates 84.0 KiB elfutils-default-yama-scope noarch 0.194-1.fc43 updates 1.8 KiB elfutils-libelf x86_64 0.194-1.fc43 updates 1.1 MiB elfutils-libs x86_64 0.194-1.fc43 updates 687.5 KiB fedora-gpg-keys noarch 43-1 fedora 131.2 KiB fedora-release noarch 43-25 fedora 0.0 B fedora-release-identity-basic noarch 43-25 fedora 631.0 B fedora-repos noarch 43-1 fedora 4.9 KiB file x86_64 5.46-8.fc43 fedora 100.2 KiB file-libs x86_64 5.46-8.fc43 fedora 11.9 MiB filesystem x86_64 3.18-50.fc43 fedora 112.0 B filesystem-srpm-macros noarch 3.18-50.fc43 fedora 38.2 KiB fonts-srpm-macros noarch 1:2.0.5-23.fc43 fedora 55.8 KiB forge-srpm-macros noarch 0.4.0-3.fc43 fedora 38.9 KiB fpc-srpm-macros noarch 1.3-15.fc43 fedora 144.0 B gap-srpm-macros noarch 2-1.fc43 fedora 2.1 KiB gdb-minimal x86_64 16.3-6.fc43 fedora 13.3 MiB gdbm-libs x86_64 1:1.23-10.fc43 fedora 129.9 KiB ghc-srpm-macros noarch 1.9.2-3.fc43 fedora 779.0 B glibc x86_64 2.42-4.fc43 fedora 6.7 MiB glibc-common x86_64 2.42-4.fc43 fedora 1.0 MiB glibc-gconv-extra x86_64 2.42-4.fc43 fedora 7.2 MiB gmp x86_64 1:6.3.0-4.fc43 fedora 811.2 KiB gnat-srpm-macros noarch 6-8.fc43 fedora 1.0 KiB gnulib-l10n noarch 20241231-1.fc43 fedora 655.0 KiB gnupg2 x86_64 2.4.8-4.fc43 fedora 6.5 MiB gnupg2-dirmngr x86_64 2.4.8-4.fc43 fedora 618.4 KiB gnupg2-gpg-agent x86_64 2.4.8-4.fc43 fedora 671.4 KiB gnupg2-gpgconf x86_64 2.4.8-4.fc43 fedora 250.0 KiB gnupg2-keyboxd x86_64 2.4.8-4.fc43 fedora 201.4 KiB gnupg2-verify x86_64 2.4.8-4.fc43 fedora 348.5 KiB gnutls x86_64 3.8.10-3.fc43 fedora 3.8 MiB go-srpm-macros noarch 3.8.0-1.fc43 fedora 61.9 KiB gpgverify noarch 2.2-3.fc43 fedora 8.7 KiB ima-evm-utils-libs x86_64 1.6.2-6.fc43 fedora 60.7 KiB jansson x86_64 2.14-3.fc43 fedora 89.1 KiB java-srpm-macros noarch 1-7.fc43 fedora 870.0 B json-c x86_64 0.18-7.fc43 fedora 82.7 KiB kernel-srpm-macros noarch 1.0-27.fc43 fedora 1.9 KiB keyutils-libs x86_64 1.6.3-6.fc43 fedora 54.3 KiB krb5-libs x86_64 1.21.3-7.fc43 fedora 2.3 MiB libacl x86_64 2.3.2-4.fc43 fedora 35.9 KiB libarchive x86_64 3.8.1-3.fc43 fedora 951.1 KiB libassuan x86_64 2.5.7-4.fc43 fedora 163.8 KiB libattr x86_64 2.5.2-6.fc43 fedora 24.4 KiB libblkid x86_64 2.41.1-17.fc43 fedora 262.4 KiB libbrotli x86_64 1.1.0-10.fc43 fedora 833.3 KiB libcap x86_64 2.76-3.fc43 fedora 209.1 KiB libcap-ng x86_64 0.8.5-8.fc43 fedora 68.9 KiB libcom_err x86_64 1.47.3-2.fc43 fedora 63.1 KiB libcurl x86_64 8.15.0-3.fc43 updates 903.2 KiB libeconf x86_64 0.7.9-2.fc43 fedora 64.9 KiB libevent x86_64 2.1.12-16.fc43 fedora 883.1 KiB libfdisk x86_64 2.41.1-17.fc43 fedora 380.4 KiB libffi x86_64 3.5.1-2.fc43 fedora 83.6 KiB libfsverity x86_64 1.6-3.fc43 fedora 28.5 KiB libgcc x86_64 15.2.1-4.fc43 updates 266.6 KiB libgcrypt x86_64 1.11.1-2.fc43 fedora 1.6 MiB libgomp x86_64 15.2.1-4.fc43 updates 541.6 KiB libgpg-error x86_64 1.55-2.fc43 fedora 915.3 KiB libidn2 x86_64 2.3.8-2.fc43 fedora 552.5 KiB libksba x86_64 1.6.7-4.fc43 fedora 398.5 KiB liblastlog2 x86_64 2.41.1-17.fc43 fedora 33.9 KiB libmount x86_64 2.41.1-17.fc43 fedora 372.7 KiB libnghttp2 x86_64 1.66.0-2.fc43 fedora 162.2 KiB libpkgconf x86_64 2.3.0-3.fc43 fedora 78.1 KiB libpsl x86_64 0.21.5-6.fc43 fedora 76.4 KiB libselinux x86_64 3.9-5.fc43 fedora 193.1 KiB libsemanage x86_64 3.9-4.fc43 fedora 308.5 KiB libsepol x86_64 3.9-2.fc43 fedora 822.0 KiB libsmartcols x86_64 2.41.1-17.fc43 fedora 180.5 KiB libssh x86_64 0.11.3-1.fc43 fedora 567.1 KiB libssh-config noarch 0.11.3-1.fc43 fedora 277.0 B libstdc++ x86_64 15.2.1-4.fc43 updates 2.8 MiB libtasn1 x86_64 4.20.0-2.fc43 fedora 176.3 KiB libtool-ltdl x86_64 2.5.4-7.fc43 fedora 70.1 KiB libunistring x86_64 1.1-10.fc43 fedora 1.7 MiB libusb1 x86_64 1.0.29-4.fc43 fedora 171.3 KiB libuuid x86_64 2.41.1-17.fc43 fedora 37.4 KiB libverto x86_64 0.3.2-11.fc43 fedora 25.4 KiB libxcrypt x86_64 4.5.2-1.fc43 updates 285.3 KiB libxml2 x86_64 2.12.10-5.fc43 fedora 1.7 MiB libzstd x86_64 1.5.7-2.fc43 fedora 799.9 KiB lua-libs x86_64 5.4.8-3.fc43 updates 280.8 KiB lua-srpm-macros noarch 1-16.fc43 fedora 1.3 KiB lz4-libs x86_64 1.10.0-3.fc43 fedora 161.4 KiB mpfr x86_64 4.2.2-2.fc43 fedora 832.8 KiB ncurses-base noarch 6.5-7.20250614.fc43 fedora 328.1 KiB ncurses-libs x86_64 6.5-7.20250614.fc43 fedora 946.3 KiB nettle x86_64 3.10.1-2.fc43 fedora 790.6 KiB npth x86_64 1.8-3.fc43 fedora 49.6 KiB ocaml-srpm-macros noarch 11-2.fc43 fedora 1.9 KiB openblas-srpm-macros noarch 2-20.fc43 fedora 112.0 B openldap x86_64 2.6.10-4.fc43 fedora 659.9 KiB openssl-libs x86_64 1:3.5.4-1.fc43 updates 8.9 MiB p11-kit x86_64 0.25.8-1.fc43 fedora 2.3 MiB p11-kit-trust x86_64 0.25.8-1.fc43 fedora 446.5 KiB package-notes-srpm-macros noarch 0.5-14.fc43 fedora 1.6 KiB pam-libs x86_64 1.7.1-3.fc43 fedora 126.8 KiB pcre2 x86_64 10.46-1.fc43 fedora 697.7 KiB pcre2-syntax noarch 10.46-1.fc43 fedora 275.3 KiB perl-srpm-macros noarch 1-60.fc43 fedora 861.0 B pkgconf x86_64 2.3.0-3.fc43 fedora 88.5 KiB pkgconf-m4 noarch 2.3.0-3.fc43 fedora 14.4 KiB pkgconf-pkg-config x86_64 2.3.0-3.fc43 fedora 989.0 B popt x86_64 1.19-9.fc43 fedora 132.8 KiB publicsuffix-list-dafsa noarch 20250616-2.fc43 fedora 69.1 KiB pyproject-srpm-macros noarch 1.18.5-1.fc43 updates 1.9 KiB python-srpm-macros noarch 3.14-5.fc43 fedora 51.5 KiB qt5-srpm-macros noarch 5.15.18-1.fc43 updates 500.0 B qt6-srpm-macros noarch 6.10.0-1.fc43 updates 464.0 B readline x86_64 8.3-2.fc43 fedora 511.7 KiB rpm x86_64 6.0.0-1.fc43 fedora 3.1 MiB rpm-build-libs x86_64 6.0.0-1.fc43 fedora 268.4 KiB rpm-libs x86_64 6.0.0-1.fc43 fedora 933.7 KiB rpm-sequoia x86_64 1.9.0-2.fc43 fedora 2.5 MiB rpm-sign-libs x86_64 6.0.0-1.fc43 fedora 39.7 KiB rust-srpm-macros noarch 26.4-1.fc43 fedora 4.8 KiB setup noarch 2.15.0-26.fc43 fedora 725.0 KiB sqlite-libs x86_64 3.50.2-2.fc43 fedora 1.5 MiB systemd-libs x86_64 258.2-1.fc43 updates 2.3 MiB systemd-standalone-sysusers x86_64 258.2-1.fc43 updates 293.5 KiB tpm2-tss x86_64 4.1.3-8.fc43 fedora 1.6 MiB tree-sitter-srpm-macros noarch 0.4.2-1.fc43 fedora 8.3 KiB util-linux-core x86_64 2.41.1-17.fc43 fedora 1.5 MiB xxhash-libs x86_64 0.8.3-3.fc43 fedora 90.2 KiB xz-libs x86_64 1:5.8.1-2.fc43 fedora 217.8 KiB zig-srpm-macros noarch 1-5.fc43 fedora 1.1 KiB zip x86_64 3.0-44.fc43 fedora 694.5 KiB zlib-ng-compat x86_64 2.2.5-2.fc43 fedora 137.6 KiB zstd x86_64 1.5.7-2.fc43 fedora 1.7 MiB Installing groups: Buildsystem building group Transaction Summary: Installing: 170 packages Total size of inbound packages is 59 MiB. Need to download 59 MiB. After this operation, 200 MiB extra will be used (install 200 MiB, remove 0 B). [ 1/170] bzip2-0:1.0.8-21.fc43.x86_64 100% | 356.0 KiB/s | 51.6 KiB | 00m00s [ 2/170] cpio-0:2.15-6.fc43.x86_64 100% | 2.0 MiB/s | 293.1 KiB | 00m00s [ 3/170] coreutils-0:9.7-6.fc43.x86_64 100% | 3.0 MiB/s | 1.1 MiB | 00m00s [ 4/170] diffutils-0:3.12-3.fc43.x86_6 100% | 3.7 MiB/s | 392.3 KiB | 00m00s [ 5/170] bash-0:5.3.0-2.fc43.x86_64 100% | 4.4 MiB/s | 1.9 MiB | 00m00s [ 6/170] fedora-release-common-0:43-25 100% | 481.8 KiB/s | 24.6 KiB | 00m00s [ 7/170] glibc-minimal-langpack-0:2.42 100% | 869.7 KiB/s | 38.3 KiB | 00m00s [ 8/170] grep-0:3.12-2.fc43.x86_64 100% | 5.7 MiB/s | 299.1 KiB | 00m00s [ 9/170] findutils-1:4.10.0-6.fc43.x86 100% | 5.3 MiB/s | 550.0 KiB | 00m00s [ 10/170] gzip-0:1.13-4.fc43.x86_64 100% | 4.2 MiB/s | 170.1 KiB | 00m00s [ 11/170] info-0:7.2-6.fc43.x86_64 100% | 4.6 MiB/s | 182.9 KiB | 00m00s [ 12/170] patch-0:2.8-2.fc43.x86_64 100% | 3.0 MiB/s | 113.8 KiB | 00m00s [ 13/170] redhat-rpm-config-0:343-11.fc 100% | 2.4 MiB/s | 79.1 KiB | 00m00s [ 14/170] rpm-build-0:6.0.0-1.fc43.x86_ 100% | 3.5 MiB/s | 138.0 KiB | 00m00s [ 15/170] sed-0:4.9-5.fc43.x86_64 100% | 4.8 MiB/s | 317.1 KiB | 00m00s [ 16/170] unzip-0:6.0-67.fc43.x86_64 100% | 4.6 MiB/s | 183.7 KiB | 00m00s [ 17/170] shadow-utils-2:4.18.0-3.fc43. 100% | 10.9 MiB/s | 1.3 MiB | 00m00s [ 18/170] which-0:2.23-3.fc43.x86_64 100% | 1.2 MiB/s | 41.7 KiB | 00m00s [ 19/170] tar-2:1.35-6.fc43.x86_64 100% | 6.4 MiB/s | 856.4 KiB | 00m00s [ 20/170] xz-1:5.8.1-2.fc43.x86_64 100% | 7.3 MiB/s | 572.5 KiB | 00m00s [ 21/170] util-linux-0:2.41.1-17.fc43.x 100% | 17.0 MiB/s | 1.2 MiB | 00m00s [ 22/170] gawk-0:5.3.2-2.fc43.x86_64 100% | 9.1 MiB/s | 1.1 MiB | 00m00s [ 23/170] filesystem-0:3.18-50.fc43.x86 100% | 22.2 MiB/s | 1.3 MiB | 00m00s [ 24/170] ncurses-libs-0:6.5-7.20250614 100% | 7.4 MiB/s | 332.7 KiB | 00m00s [ 25/170] bzip2-libs-0:1.0.8-21.fc43.x8 100% | 672.9 KiB/s | 43.1 KiB | 00m00s [ 26/170] glibc-0:2.42-4.fc43.x86_64 100% | 18.7 MiB/s | 2.2 MiB | 00m00s [ 27/170] gmp-1:6.3.0-4.fc43.x86_64 100% | 4.3 MiB/s | 319.3 KiB | 00m00s [ 28/170] libacl-0:2.3.2-4.fc43.x86_64 100% | 449.6 KiB/s | 24.3 KiB | 00m00s [ 29/170] coreutils-common-0:9.7-6.fc43 100% | 16.9 MiB/s | 2.1 MiB | 00m00s [ 30/170] libattr-0:2.5.2-6.fc43.x86_64 100% | 350.0 KiB/s | 17.9 KiB | 00m00s [ 31/170] libcap-0:2.76-3.fc43.x86_64 100% | 1.5 MiB/s | 86.9 KiB | 00m00s [ 32/170] libselinux-0:3.9-5.fc43.x86_6 100% | 2.4 MiB/s | 97.7 KiB | 00m00s [ 33/170] fedora-repos-0:43-1.noarch 100% | 178.8 KiB/s | 9.1 KiB | 00m00s [ 34/170] pcre2-0:10.46-1.fc43.x86_64 100% | 7.8 MiB/s | 262.2 KiB | 00m00s [ 35/170] glibc-common-0:2.42-4.fc43.x8 100% | 6.0 MiB/s | 325.2 KiB | 00m00s [ 36/170] ansible-srpm-macros-0:1-18.1. 100% | 642.2 KiB/s | 19.9 KiB | 00m00s [ 37/170] ed-0:1.22.2-1.fc43.x86_64 100% | 2.3 MiB/s | 83.7 KiB | 00m00s [ 38/170] build-reproducibility-srpm-ma 100% | 347.7 KiB/s | 11.8 KiB | 00m00s [ 39/170] dwz-0:0.16-2.fc43.x86_64 100% | 4.1 MiB/s | 135.5 KiB | 00m00s [ 40/170] efi-srpm-macros-0:6-4.fc43.no 100% | 639.8 KiB/s | 22.4 KiB | 00m00s [ 41/170] file-0:5.46-8.fc43.x86_64 100% | 1.4 MiB/s | 48.8 KiB | 00m00s [ 42/170] filesystem-srpm-macros-0:3.18 100% | 852.0 KiB/s | 26.4 KiB | 00m00s [ 43/170] fonts-srpm-macros-1:2.0.5-23. 100% | 776.4 KiB/s | 27.2 KiB | 00m00s [ 44/170] forge-srpm-macros-0:0.4.0-3.f 100% | 590.8 KiB/s | 20.1 KiB | 00m00s [ 45/170] fpc-srpm-macros-0:1.3-15.fc43 100% | 254.6 KiB/s | 7.9 KiB | 00m00s [ 46/170] gap-srpm-macros-0:2-1.fc43.no 100% | 263.8 KiB/s | 9.0 KiB | 00m00s [ 47/170] ghc-srpm-macros-0:1.9.2-3.fc4 100% | 257.2 KiB/s | 8.7 KiB | 00m00s [ 48/170] gnat-srpm-macros-0:6-8.fc43.n 100% | 273.8 KiB/s | 8.5 KiB | 00m00s [ 49/170] go-srpm-macros-0:3.8.0-1.fc43 100% | 808.8 KiB/s | 28.3 KiB | 00m00s [ 50/170] java-srpm-macros-0:1-7.fc43.n 100% | 233.6 KiB/s | 7.9 KiB | 00m00s [ 51/170] kernel-srpm-macros-0:1.0-27.f 100% | 287.8 KiB/s | 8.9 KiB | 00m00s [ 52/170] lua-srpm-macros-0:1-16.fc43.n 100% | 250.2 KiB/s | 8.8 KiB | 00m00s [ 53/170] ocaml-srpm-macros-0:11-2.fc43 100% | 272.4 KiB/s | 9.3 KiB | 00m00s [ 54/170] openblas-srpm-macros-0:2-20.f 100% | 245.0 KiB/s | 7.6 KiB | 00m00s [ 55/170] package-notes-srpm-macros-0:0 100% | 264.3 KiB/s | 9.0 KiB | 00m00s [ 56/170] perl-srpm-macros-0:1-60.fc43. 100% | 243.8 KiB/s | 8.3 KiB | 00m00s [ 57/170] python-srpm-macros-0:3.14-5.f 100% | 753.9 KiB/s | 23.4 KiB | 00m00s [ 58/170] tree-sitter-srpm-macros-0:0.4 100% | 430.7 KiB/s | 13.4 KiB | 00m00s [ 59/170] rust-srpm-macros-0:26.4-1.fc4 100% | 327.0 KiB/s | 11.1 KiB | 00m00s [ 60/170] zig-srpm-macros-0:1-5.fc43.no 100% | 272.1 KiB/s | 8.4 KiB | 00m00s [ 61/170] zip-0:3.0-44.fc43.x86_64 100% | 7.1 MiB/s | 261.6 KiB | 00m00s [ 62/170] rpm-0:6.0.0-1.fc43.x86_64 100% | 5.9 MiB/s | 576.3 KiB | 00m00s [ 63/170] debugedit-0:5.2-3.fc43.x86_64 100% | 2.6 MiB/s | 85.6 KiB | 00m00s [ 64/170] libarchive-0:3.8.1-3.fc43.x86 100% | 7.3 MiB/s | 421.1 KiB | 00m00s [ 65/170] popt-0:1.19-9.fc43.x86_64 100% | 1.1 MiB/s | 65.7 KiB | 00m00s [ 66/170] readline-0:8.3-2.fc43.x86_64 100% | 3.7 MiB/s | 224.6 KiB | 00m00s [ 67/170] rpm-build-libs-0:6.0.0-1.fc43 100% | 2.8 MiB/s | 127.9 KiB | 00m00s [ 68/170] rpm-libs-0:6.0.0-1.fc43.x86_6 100% | 8.7 MiB/s | 400.2 KiB | 00m00s [ 69/170] zstd-0:1.5.7-2.fc43.x86_64 100% | 9.7 MiB/s | 485.9 KiB | 00m00s [ 70/170] libeconf-0:0.7.9-2.fc43.x86_6 100% | 704.2 KiB/s | 35.2 KiB | 00m00s [ 71/170] libsemanage-0:3.9-4.fc43.x86_ 100% | 2.8 MiB/s | 123.5 KiB | 00m00s [ 72/170] pam-libs-0:1.7.1-3.fc43.x86_6 100% | 1.2 MiB/s | 57.5 KiB | 00m00s [ 73/170] setup-0:2.15.0-26.fc43.noarch 100% | 3.7 MiB/s | 157.3 KiB | 00m00s [ 74/170] xz-libs-1:5.8.1-2.fc43.x86_64 100% | 2.8 MiB/s | 112.9 KiB | 00m00s [ 75/170] mpfr-0:4.2.2-2.fc43.x86_64 100% | 7.2 MiB/s | 347.0 KiB | 00m00s [ 76/170] libblkid-0:2.41.1-17.fc43.x86 100% | 2.1 MiB/s | 123.1 KiB | 00m00s [ 77/170] libcap-ng-0:0.8.5-8.fc43.x86_ 100% | 563.7 KiB/s | 32.1 KiB | 00m00s [ 78/170] libfdisk-0:2.41.1-17.fc43.x86 100% | 4.9 MiB/s | 161.3 KiB | 00m00s [ 79/170] liblastlog2-0:2.41.1-17.fc43. 100% | 662.9 KiB/s | 23.2 KiB | 00m00s [ 80/170] libmount-0:2.41.1-17.fc43.x86 100% | 3.7 MiB/s | 162.5 KiB | 00m00s [ 81/170] libsmartcols-0:2.41.1-17.fc43 100% | 2.2 MiB/s | 84.0 KiB | 00m00s [ 82/170] libuuid-0:2.41.1-17.fc43.x86_ 100% | 672.5 KiB/s | 26.2 KiB | 00m00s [ 83/170] util-linux-core-0:2.41.1-17.f 100% | 9.3 MiB/s | 550.9 KiB | 00m00s [ 84/170] zlib-ng-compat-0:2.2.5-2.fc43 100% | 1.1 MiB/s | 79.2 KiB | 00m00s [ 85/170] glibc-gconv-extra-0:2.42-4.fc 100% | 32.4 MiB/s | 1.6 MiB | 00m00s [ 86/170] ncurses-base-0:6.5-7.20250614 100% | 1.8 MiB/s | 88.2 KiB | 00m00s [ 87/170] gnulib-l10n-0:20241231-1.fc43 100% | 3.1 MiB/s | 150.2 KiB | 00m00s [ 88/170] libsepol-0:3.9-2.fc43.x86_64 100% | 5.1 MiB/s | 345.4 KiB | 00m00s [ 89/170] pcre2-syntax-0:10.46-1.fc43.n 100% | 4.8 MiB/s | 162.2 KiB | 00m00s [ 90/170] fedora-gpg-keys-0:43-1.noarch 100% | 2.9 MiB/s | 138.9 KiB | 00m00s [ 91/170] add-determinism-0:0.6.0-2.fc4 100% | 21.4 MiB/s | 919.3 KiB | 00m00s [ 92/170] file-libs-0:5.46-8.fc43.x86_6 100% | 11.2 MiB/s | 850.3 KiB | 00m00s [ 93/170] libxml2-0:2.12.10-5.fc43.x86_ 100% | 7.7 MiB/s | 692.7 KiB | 00m00s [ 94/170] libzstd-0:1.5.7-2.fc43.x86_64 100% | 4.8 MiB/s | 314.6 KiB | 00m00s [ 95/170] lz4-libs-0:1.10.0-3.fc43.x86_ 100% | 1.3 MiB/s | 78.0 KiB | 00m00s [ 96/170] rpm-sign-libs-0:6.0.0-1.fc43. 100% | 381.6 KiB/s | 28.2 KiB | 00m00s [ 97/170] rpm-sequoia-0:1.9.0-2.fc43.x8 100% | 11.1 MiB/s | 933.3 KiB | 00m00s [ 98/170] sqlite-libs-0:3.50.2-2.fc43.x 100% | 13.3 MiB/s | 760.5 KiB | 00m00s [ 99/170] ima-evm-utils-libs-0:1.6.2-6. 100% | 514.4 KiB/s | 29.3 KiB | 00m00s [100/170] libfsverity-0:1.6-3.fc43.x86_ 100% | 273.9 KiB/s | 18.6 KiB | 00m00s [101/170] gnupg2-0:2.4.8-4.fc43.x86_64 100% | 15.8 MiB/s | 1.6 MiB | 00m00s [102/170] gpgverify-0:2.2-3.fc43.noarch 100% | 326.6 KiB/s | 11.1 KiB | 00m00s [103/170] gnupg2-dirmngr-0:2.4.8-4.fc43 100% | 5.0 MiB/s | 274.6 KiB | 00m00s [104/170] gnupg2-gpg-agent-0:2.4.8-4.fc 100% | 4.5 MiB/s | 272.9 KiB | 00m00s [105/170] gnupg2-gpgconf-0:2.4.8-4.fc43 100% | 1.6 MiB/s | 115.0 KiB | 00m00s [106/170] gnupg2-keyboxd-0:2.4.8-4.fc43 100% | 2.4 MiB/s | 94.7 KiB | 00m00s [107/170] libassuan-0:2.5.7-4.fc43.x86_ 100% | 1.3 MiB/s | 67.4 KiB | 00m00s [108/170] libgcrypt-0:1.11.1-2.fc43.x86 100% | 12.9 MiB/s | 595.8 KiB | 00m00s [109/170] gnupg2-verify-0:2.4.8-4.fc43. 100% | 2.2 MiB/s | 171.2 KiB | 00m00s [110/170] libgpg-error-0:1.55-2.fc43.x8 100% | 5.8 MiB/s | 244.3 KiB | 00m00s [111/170] npth-0:1.8-3.fc43.x86_64 100% | 610.9 KiB/s | 25.7 KiB | 00m00s [112/170] tpm2-tss-0:4.1.3-8.fc43.x86_6 100% | 7.3 MiB/s | 425.9 KiB | 00m00s [113/170] libksba-0:1.6.7-4.fc43.x86_64 100% | 2.9 MiB/s | 160.4 KiB | 00m00s [114/170] gnutls-0:3.8.10-3.fc43.x86_64 100% | 15.8 MiB/s | 1.4 MiB | 00m00s [115/170] openldap-0:2.6.10-4.fc43.x86_ 100% | 4.2 MiB/s | 259.6 KiB | 00m00s [116/170] json-c-0:0.18-7.fc43.x86_64 100% | 956.9 KiB/s | 45.0 KiB | 00m00s [117/170] libusb1-0:1.0.29-4.fc43.x86_6 100% | 1.4 MiB/s | 79.9 KiB | 00m00s [118/170] crypto-policies-0:20250714-5. 100% | 1.3 MiB/s | 98.5 KiB | 00m00s [119/170] libidn2-0:2.3.8-2.fc43.x86_64 100% | 2.2 MiB/s | 174.9 KiB | 00m00s [120/170] libtasn1-0:4.20.0-2.fc43.x86_ 100% | 1.3 MiB/s | 74.5 KiB | 00m00s [121/170] libunistring-0:1.1-10.fc43.x8 100% | 10.4 MiB/s | 542.9 KiB | 00m00s [122/170] nettle-0:3.10.1-2.fc43.x86_64 100% | 5.5 MiB/s | 424.2 KiB | 00m00s [123/170] p11-kit-0:0.25.8-1.fc43.x86_6 100% | 6.6 MiB/s | 503.8 KiB | 00m00s [124/170] cyrus-sasl-lib-0:2.1.28-33.fc 100% | 10.1 MiB/s | 787.9 KiB | 00m00s [125/170] libevent-0:2.1.12-16.fc43.x86 100% | 4.9 MiB/s | 257.8 KiB | 00m00s [126/170] libtool-ltdl-0:2.5.4-7.fc43.x 100% | 710.5 KiB/s | 36.2 KiB | 00m00s [127/170] libffi-0:3.5.1-2.fc43.x86_64 100% | 974.4 KiB/s | 40.9 KiB | 00m00s [128/170] gdbm-libs-1:1.23-10.fc43.x86_ 100% | 1.3 MiB/s | 56.8 KiB | 00m00s [129/170] libgcc-0:15.2.1-4.fc43.x86_64 100% | 2.5 MiB/s | 134.1 KiB | 00m00s [130/170] libxcrypt-0:4.5.2-1.fc43.x86_ 100% | 4.6 MiB/s | 128.1 KiB | 00m00s [131/170] systemd-libs-0:258.2-1.fc43.x 100% | 19.1 MiB/s | 823.5 KiB | 00m00s [132/170] audit-libs-0:4.1.2-2.fc43.x86 100% | 3.3 MiB/s | 138.4 KiB | 00m00s [133/170] libstdc++-0:15.2.1-4.fc43.x86 100% | 7.8 MiB/s | 921.3 KiB | 00m00s [134/170] openssl-libs-1:3.5.4-1.fc43.x 100% | 45.9 MiB/s | 2.6 MiB | 00m00s [135/170] lua-libs-0:5.4.8-3.fc43.x86_6 100% | 4.3 MiB/s | 131.8 KiB | 00m00s [136/170] ca-certificates-0:2025.2.80_v 100% | 16.7 MiB/s | 975.4 KiB | 00m00s [137/170] elfutils-libelf-0:0.194-1.fc4 100% | 14.3 MiB/s | 205.2 KiB | 00m00s [138/170] elfutils-libs-0:0.194-1.fc43. 100% | 17.7 MiB/s | 271.5 KiB | 00m00s [139/170] elfutils-0:0.194-1.fc43.x86_6 100% | 37.5 MiB/s | 575.6 KiB | 00m00s [140/170] elfutils-debuginfod-client-0: 100% | 6.5 MiB/s | 46.9 KiB | 00m00s [141/170] libgomp-0:15.2.1-4.fc43.x86_6 100% | 26.1 MiB/s | 374.6 KiB | 00m00s [142/170] jansson-0:2.14-3.fc43.x86_64 100% | 1.4 MiB/s | 45.3 KiB | 00m00s [143/170] binutils-0:2.45.1-1.fc43.x86_ 100% | 126.3 MiB/s | 5.9 MiB | 00m00s [144/170] pkgconf-pkg-config-0:2.3.0-3. 100% | 274.5 KiB/s | 9.6 KiB | 00m00s [145/170] pkgconf-0:2.3.0-3.fc43.x86_64 100% | 1.4 MiB/s | 44.6 KiB | 00m00s [146/170] curl-0:8.15.0-3.fc43.x86_64 100% | 15.9 MiB/s | 228.2 KiB | 00m00s [147/170] pkgconf-m4-0:2.3.0-3.fc43.noa 100% | 409.2 KiB/s | 13.9 KiB | 00m00s [148/170] libpkgconf-0:2.3.0-3.fc43.x86 100% | 1.1 MiB/s | 37.9 KiB | 00m00s [149/170] pyproject-srpm-macros-0:1.18. 100% | 1.9 MiB/s | 13.3 KiB | 00m00s [150/170] qt5-srpm-macros-0:5.15.18-1.f 100% | 1.2 MiB/s | 8.6 KiB | 00m00s [151/170] qt6-srpm-macros-0:6.10.0-1.fc 100% | 1.3 MiB/s | 9.4 KiB | 00m00s [152/170] elfutils-default-yama-scope-0 100% | 1.7 MiB/s | 12.4 KiB | 00m00s [153/170] alternatives-0:1.33-3.fc43.x8 100% | 5.7 MiB/s | 40.6 KiB | 00m00s [154/170] systemd-standalone-sysusers-0 100% | 10.2 MiB/s | 145.8 KiB | 00m00s [155/170] p11-kit-trust-0:0.25.8-1.fc43 100% | 3.1 MiB/s | 139.6 KiB | 00m00s [156/170] fedora-release-0:43-25.noarch 100% | 293.3 KiB/s | 13.5 KiB | 00m00s [157/170] xxhash-libs-0:0.8.3-3.fc43.x8 100% | 1.2 MiB/s | 38.5 KiB | 00m00s [158/170] libcurl-0:8.15.0-3.fc43.x86_6 100% | 28.2 MiB/s | 404.3 KiB | 00m00s [159/170] fedora-release-identity-basic 100% | 365.5 KiB/s | 14.3 KiB | 00m00s [160/170] gdb-minimal-0:16.3-6.fc43.x86 100% | 51.2 MiB/s | 4.4 MiB | 00m00s [161/170] libbrotli-0:1.1.0-10.fc43.x86 100% | 4.5 MiB/s | 339.1 KiB | 00m00s [162/170] libnghttp2-0:1.66.0-2.fc43.x8 100% | 1.1 MiB/s | 72.5 KiB | 00m00s [163/170] krb5-libs-0:1.21.3-7.fc43.x86 100% | 6.3 MiB/s | 758.9 KiB | 00m00s [164/170] libpsl-0:0.21.5-6.fc43.x86_64 100% | 1.0 MiB/s | 65.0 KiB | 00m00s [165/170] libssh-0:0.11.3-1.fc43.x86_64 100% | 3.7 MiB/s | 232.8 KiB | 00m00s [166/170] keyutils-libs-0:1.6.3-6.fc43. 100% | 627.0 KiB/s | 31.4 KiB | 00m00s [167/170] libcom_err-0:1.47.3-2.fc43.x8 100% | 525.3 KiB/s | 26.8 KiB | 00m00s [168/170] libverto-0:0.3.2-11.fc43.x86_ 100% | 439.9 KiB/s | 20.7 KiB | 00m00s [169/170] publicsuffix-list-dafsa-0:202 100% | 1.3 MiB/s | 59.2 KiB | 00m00s [170/170] libssh-config-0:0.11.3-1.fc43 100% | 202.5 KiB/s | 9.1 KiB | 00m00s -------------------------------------------------------------------------------- [170/170] Total 100% | 18.6 MiB/s | 59.2 MiB | 00m03s Running transaction Importing OpenPGP key 0x31645531: UserID : "Fedora (43) " Fingerprint: C6E7F081CF80E13146676E88829B606631645531 From : file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-43-primary The key was successfully imported. [ 1/172] Verify package files 100% | 787.0 B/s | 170.0 B | 00m00s [ 2/172] Prepare transaction 100% | 4.3 KiB/s | 170.0 B | 00m00s [ 3/172] Installing libgcc-0:15.2.1-4. 100% | 262.0 MiB/s | 268.3 KiB | 00m00s [ 4/172] Installing libssh-config-0:0. 100% | 0.0 B/s | 816.0 B | 00m00s [ 5/172] Installing publicsuffix-list- 100% | 0.0 B/s | 69.8 KiB | 00m00s [ 6/172] Installing fedora-release-ide 100% | 0.0 B/s | 888.0 B | 00m00s [ 7/172] Installing fedora-gpg-keys-0: 100% | 58.3 MiB/s | 179.0 KiB | 00m00s [ 8/172] Installing fedora-repos-0:43- 100% | 0.0 B/s | 5.7 KiB | 00m00s [ 9/172] Installing fedora-release-com 100% | 24.3 MiB/s | 24.9 KiB | 00m00s [ 10/172] Installing fedora-release-0:4 100% | 15.1 KiB/s | 124.0 B | 00m00s >>> Running sysusers scriptlet: setup-0:2.15.0-26.fc43.noarch >>> Finished sysusers scriptlet: setup-0:2.15.0-26.fc43.noarch >>> Scriptlet output: >>> Creating group 'adm' with GID 4. >>> Creating group 'audio' with GID 63. >>> Creating group 'cdrom' with GID 11. >>> Creating group 'clock' with GID 103. >>> Creating group 'dialout' with GID 18. >>> Creating group 'disk' with GID 6. >>> Creating group 'floppy' with GID 19. >>> Creating group 'ftp' with GID 50. >>> Creating group 'games' with GID 20. >>> Creating group 'input' with GID 104. >>> Creating group 'kmem' with GID 9. >>> Creating group 'kvm' with GID 36. >>> Creating group 'lock' with GID 54. >>> Creating group 'lp' with GID 7. >>> Creating group 'mail' with GID 12. >>> Creating group 'man' with GID 15. >>> Creating group 'mem' with GID 8. >>> Creating group 'nobody' with GID 65534. >>> Creating group 'render' with GID 105. >>> Creating group 'root' with GID 0. >>> Creating group 'sgx' with GID 106. >>> Creating group 'sys' with GID 3. >>> Creating group 'tape' with GID 33. >>> Creating group 'tty' with GID 5. >>> Creating group 'users' with GID 100. >>> Creating group 'utmp' with GID 22. >>> Creating group 'video' with GID 39. >>> Creating group 'wheel' with GID 10. >>> Creating user 'adm' (adm) with UID 3 and GID 4. >>> Creating group 'bin' with GID 1. >>> Creating user 'bin' (bin) with UID 1 and GID 1. >>> Creating group 'daemon' with GID 2. >>> Creating user 'daemon' (daemon) with UID 2 and GID 2. >>> Creating user 'ftp' (FTP User) with UID 14 and GID 50. >>> Creating user 'games' (games) with UID 12 and GID 100. >>> Creating user 'halt' (halt) with UID 7 and GID 0. >>> Creating user 'lp' (lp) with UID 4 and GID 7. >>> Creating user 'mail' (mail) with UID 8 and GID 12. >>> Creating user 'nobody' (Kernel Overflow User) with UID 65534 and GID 65534. >>> Creating user 'operator' (operator) with UID 11 and GID 0. >>> Creating user 'root' (Super User) with UID 0 and GID 0. >>> Creating user 'shutdown' (shutdown) with UID 6 and GID 0. >>> Creating user 'sync' (sync) with UID 5 and GID 0. >>> [ 11/172] Installing setup-0:2.15.0-26. 100% | 54.9 MiB/s | 730.6 KiB | 00m00s [ 12/172] Installing filesystem-0:3.18- 100% | 3.1 MiB/s | 212.8 KiB | 00m00s [ 13/172] Installing qt6-srpm-macros-0: 100% | 0.0 B/s | 740.0 B | 00m00s [ 14/172] Installing qt5-srpm-macros-0: 100% | 0.0 B/s | 776.0 B | 00m00s [ 15/172] Installing pkgconf-m4-0:2.3.0 100% | 0.0 B/s | 14.8 KiB | 00m00s [ 16/172] Installing pcre2-syntax-0:10. 100% | 271.2 MiB/s | 277.8 KiB | 00m00s [ 17/172] Installing gnulib-l10n-0:2024 100% | 215.5 MiB/s | 661.9 KiB | 00m00s [ 18/172] Installing coreutils-common-0 100% | 451.7 MiB/s | 11.3 MiB | 00m00s [ 19/172] Installing ncurses-base-0:6.5 100% | 86.3 MiB/s | 353.5 KiB | 00m00s [ 20/172] Installing bash-0:5.3.0-2.fc4 100% | 301.1 MiB/s | 8.4 MiB | 00m00s [ 21/172] Installing glibc-common-0:2.4 100% | 68.0 MiB/s | 1.0 MiB | 00m00s [ 22/172] Installing glibc-gconv-extra- 100% | 317.8 MiB/s | 7.3 MiB | 00m00s [ 23/172] Installing glibc-0:2.42-4.fc4 100% | 203.1 MiB/s | 6.7 MiB | 00m00s [ 24/172] Installing ncurses-libs-0:6.5 100% | 310.1 MiB/s | 952.8 KiB | 00m00s [ 25/172] Installing glibc-minimal-lang 100% | 0.0 B/s | 124.0 B | 00m00s [ 26/172] Installing zlib-ng-compat-0:2 100% | 135.2 MiB/s | 138.4 KiB | 00m00s [ 27/172] Installing bzip2-libs-0:1.0.8 100% | 0.0 B/s | 81.7 KiB | 00m00s [ 28/172] Installing libgpg-error-0:1.5 100% | 64.3 MiB/s | 921.1 KiB | 00m00s [ 29/172] Installing libstdc++-0:15.2.1 100% | 406.3 MiB/s | 2.8 MiB | 00m00s [ 30/172] Installing xz-libs-1:5.8.1-2. 100% | 213.8 MiB/s | 218.9 KiB | 00m00s [ 31/172] Installing libassuan-0:2.5.7- 100% | 161.7 MiB/s | 165.6 KiB | 00m00s [ 32/172] Installing libgcrypt-0:1.11.1 100% | 393.8 MiB/s | 1.6 MiB | 00m00s [ 33/172] Installing readline-0:8.3-2.f 100% | 501.8 MiB/s | 513.9 KiB | 00m00s [ 34/172] Installing gmp-1:6.3.0-4.fc43 100% | 397.2 MiB/s | 813.5 KiB | 00m00s [ 35/172] Installing libuuid-0:2.41.1-1 100% | 0.0 B/s | 38.5 KiB | 00m00s [ 36/172] Installing popt-0:1.19-9.fc43 100% | 68.1 MiB/s | 139.4 KiB | 00m00s [ 37/172] Installing npth-0:1.8-3.fc43. 100% | 0.0 B/s | 50.7 KiB | 00m00s [ 38/172] Installing libblkid-0:2.41.1- 100% | 257.2 MiB/s | 263.4 KiB | 00m00s [ 39/172] Installing libzstd-0:1.5.7-2. 100% | 391.2 MiB/s | 801.1 KiB | 00m00s [ 40/172] Installing elfutils-libelf-0: 100% | 373.7 MiB/s | 1.1 MiB | 00m00s [ 41/172] Installing sqlite-libs-0:3.50 100% | 379.1 MiB/s | 1.5 MiB | 00m00s [ 42/172] Installing libxcrypt-0:4.5.2- 100% | 281.3 MiB/s | 288.0 KiB | 00m00s [ 43/172] Installing gnupg2-gpgconf-0:2 100% | 20.5 MiB/s | 252.0 KiB | 00m00s [ 44/172] Installing libattr-0:2.5.2-6. 100% | 0.0 B/s | 25.4 KiB | 00m00s [ 45/172] Installing libacl-0:2.3.2-4.f 100% | 0.0 B/s | 36.8 KiB | 00m00s [ 46/172] Installing libtasn1-0:4.20.0- 100% | 173.9 MiB/s | 178.1 KiB | 00m00s [ 47/172] Installing libunistring-0:1.1 100% | 431.7 MiB/s | 1.7 MiB | 00m00s [ 48/172] Installing libidn2-0:2.3.8-2. 100% | 60.6 MiB/s | 558.7 KiB | 00m00s [ 49/172] Installing crypto-policies-0: 100% | 42.0 MiB/s | 172.0 KiB | 00m00s [ 50/172] Installing dwz-0:0.16-2.fc43. 100% | 23.5 MiB/s | 288.5 KiB | 00m00s [ 51/172] Installing gnupg2-verify-0:2. 100% | 31.1 MiB/s | 349.9 KiB | 00m00s [ 52/172] Installing mpfr-0:4.2.2-2.fc4 100% | 407.4 MiB/s | 834.4 KiB | 00m00s [ 53/172] Installing gawk-0:5.3.2-2.fc4 100% | 113.5 MiB/s | 1.8 MiB | 00m00s [ 54/172] Installing libksba-0:1.6.7-4. 100% | 391.7 MiB/s | 401.1 KiB | 00m00s [ 55/172] Installing unzip-0:6.0-67.fc4 100% | 31.7 MiB/s | 389.8 KiB | 00m00s [ 56/172] Installing file-libs-0:5.46-8 100% | 741.1 MiB/s | 11.9 MiB | 00m00s [ 57/172] Installing file-0:5.46-8.fc43 100% | 9.0 MiB/s | 101.7 KiB | 00m00s [ 58/172] Installing pcre2-0:10.46-1.fc 100% | 341.4 MiB/s | 699.1 KiB | 00m00s [ 59/172] Installing grep-0:3.12-2.fc43 100% | 71.6 MiB/s | 1.0 MiB | 00m00s [ 60/172] Installing xz-1:5.8.1-2.fc43. 100% | 88.8 MiB/s | 1.3 MiB | 00m00s [ 61/172] Installing libeconf-0:0.7.9-2 100% | 0.0 B/s | 66.5 KiB | 00m00s [ 62/172] Installing libcap-ng-0:0.8.5- 100% | 69.2 MiB/s | 70.8 KiB | 00m00s [ 63/172] Installing audit-libs-0:4.1.2 100% | 372.6 MiB/s | 381.5 KiB | 00m00s [ 64/172] Installing pam-libs-0:1.7.1-3 100% | 126.0 MiB/s | 129.0 KiB | 00m00s [ 65/172] Installing libcap-0:2.76-3.fc 100% | 17.4 MiB/s | 214.3 KiB | 00m00s [ 66/172] Installing systemd-libs-0:258 100% | 389.4 MiB/s | 2.3 MiB | 00m00s [ 67/172] Installing libsmartcols-0:2.4 100% | 177.3 MiB/s | 181.6 KiB | 00m00s [ 68/172] Installing libsepol-0:3.9-2.f 100% | 401.8 MiB/s | 822.9 KiB | 00m00s [ 69/172] Installing libselinux-0:3.9-5 100% | 189.8 MiB/s | 194.4 KiB | 00m00s [ 70/172] Installing findutils-1:4.10.0 100% | 123.9 MiB/s | 1.9 MiB | 00m00s [ 71/172] Installing sed-0:4.9-5.fc43.x 100% | 65.0 MiB/s | 865.5 KiB | 00m00s [ 72/172] Installing libmount-0:2.41.1- 100% | 364.9 MiB/s | 373.7 KiB | 00m00s [ 73/172] Installing lz4-libs-0:1.10.0- 100% | 158.6 MiB/s | 162.5 KiB | 00m00s [ 74/172] Installing json-c-0:0.18-7.fc 100% | 0.0 B/s | 84.0 KiB | 00m00s [ 75/172] Installing libffi-0:3.5.1-2.f 100% | 83.0 MiB/s | 85.0 KiB | 00m00s [ 76/172] Installing p11-kit-0:0.25.8-1 100% | 127.3 MiB/s | 2.3 MiB | 00m00s [ 77/172] Installing lua-libs-0:5.4.8-3 100% | 275.4 MiB/s | 282.0 KiB | 00m00s [ 78/172] Installing alternatives-0:1.3 100% | 5.7 MiB/s | 63.8 KiB | 00m00s [ 79/172] Installing p11-kit-trust-0:0. 100% | 23.0 MiB/s | 448.2 KiB | 00m00s [ 80/172] Installing openssl-libs-1:3.5 100% | 424.4 MiB/s | 8.9 MiB | 00m00s [ 81/172] Installing coreutils-0:9.7-6. 100% | 175.9 MiB/s | 5.5 MiB | 00m00s [ 82/172] Installing ca-certificates-0: 100% | 2.2 MiB/s | 2.5 MiB | 00m01s [ 83/172] Installing gzip-0:1.13-4.fc43 100% | 29.6 MiB/s | 394.4 KiB | 00m00s [ 84/172] Installing rpm-sequoia-0:1.9. 100% | 413.1 MiB/s | 2.5 MiB | 00m00s [ 85/172] Installing libfsverity-0:1.6- 100% | 0.0 B/s | 29.5 KiB | 00m00s [ 86/172] Installing libevent-0:2.1.12- 100% | 288.7 MiB/s | 886.8 KiB | 00m00s [ 87/172] Installing zstd-0:1.5.7-2.fc4 100% | 114.0 MiB/s | 1.7 MiB | 00m00s [ 88/172] Installing util-linux-core-0: 100% | 92.5 MiB/s | 1.5 MiB | 00m00s [ 89/172] Installing tar-2:1.35-6.fc43. 100% | 164.3 MiB/s | 3.0 MiB | 00m00s [ 90/172] Installing libsemanage-0:3.9- 100% | 303.0 MiB/s | 310.2 KiB | 00m00s [ 91/172] Installing systemd-standalone 100% | 23.9 MiB/s | 294.1 KiB | 00m00s [ 92/172] Installing rpm-libs-0:6.0.0-1 100% | 304.4 MiB/s | 935.2 KiB | 00m00s [ 93/172] Installing libusb1-0:1.0.29-4 100% | 21.1 MiB/s | 172.9 KiB | 00m00s >>> Running sysusers scriptlet: tpm2-tss-0:4.1.3-8.fc43.x86_64 >>> Finished sysusers scriptlet: tpm2-tss-0:4.1.3-8.fc43.x86_64 >>> Scriptlet output: >>> Creating group 'tss' with GID 59. >>> Creating user 'tss' (Account used for TPM access) with UID 59 and GID 59. >>> [ 94/172] Installing tpm2-tss-0:4.1.3-8 100% | 314.4 MiB/s | 1.6 MiB | 00m00s [ 95/172] Installing ima-evm-utils-libs 100% | 60.5 MiB/s | 62.0 KiB | 00m00s [ 96/172] Installing gnupg2-gpg-agent-0 100% | 34.7 MiB/s | 675.4 KiB | 00m00s [ 97/172] Installing zip-0:3.0-44.fc43. 100% | 52.5 MiB/s | 698.4 KiB | 00m00s [ 98/172] Installing gnupg2-keyboxd-0:2 100% | 39.6 MiB/s | 202.7 KiB | 00m00s [ 99/172] Installing libpsl-0:0.21.5-6. 100% | 75.7 MiB/s | 77.5 KiB | 00m00s [100/172] Installing liblastlog2-0:2.41 100% | 7.0 MiB/s | 35.9 KiB | 00m00s [101/172] Installing libfdisk-0:2.41.1- 100% | 372.5 MiB/s | 381.4 KiB | 00m00s [102/172] Installing nettle-0:3.10.1-2. 100% | 387.5 MiB/s | 793.7 KiB | 00m00s [103/172] Installing gnutls-0:3.8.10-3. 100% | 383.9 MiB/s | 3.8 MiB | 00m00s [104/172] Installing libxml2-0:2.12.10- 100% | 106.5 MiB/s | 1.7 MiB | 00m00s [105/172] Installing libarchive-0:3.8.1 100% | 310.2 MiB/s | 953.1 KiB | 00m00s [106/172] Installing bzip2-0:1.0.8-21.f 100% | 8.9 MiB/s | 99.8 KiB | 00m00s [107/172] Installing add-determinism-0: 100% | 152.7 MiB/s | 2.4 MiB | 00m00s [108/172] Installing build-reproducibil 100% | 0.0 B/s | 1.0 KiB | 00m00s [109/172] Installing cpio-0:2.15-6.fc43 100% | 78.5 MiB/s | 1.1 MiB | 00m00s [110/172] Installing diffutils-0:3.12-3 100% | 104.1 MiB/s | 1.6 MiB | 00m00s [111/172] Installing ed-0:1.22.2-1.fc43 100% | 13.3 MiB/s | 150.4 KiB | 00m00s [112/172] Installing patch-0:2.8-2.fc43 100% | 19.9 MiB/s | 224.3 KiB | 00m00s [113/172] Installing libtool-ltdl-0:2.5 100% | 0.0 B/s | 71.2 KiB | 00m00s [114/172] Installing gdbm-libs-1:1.23-1 100% | 128.5 MiB/s | 131.6 KiB | 00m00s [115/172] Installing cyrus-sasl-lib-0:2 100% | 143.5 MiB/s | 2.3 MiB | 00m00s [116/172] Installing openldap-0:2.6.10- 100% | 324.1 MiB/s | 663.7 KiB | 00m00s [117/172] Installing gnupg2-dirmngr-0:2 100% | 31.9 MiB/s | 621.1 KiB | 00m00s [118/172] Installing gnupg2-0:2.4.8-4.f 100% | 252.0 MiB/s | 6.6 MiB | 00m00s [119/172] Installing rpm-sign-libs-0:6. 100% | 0.0 B/s | 40.6 KiB | 00m00s [120/172] Installing gpgverify-0:2.2-3. 100% | 0.0 B/s | 9.4 KiB | 00m00s [121/172] Installing libgomp-0:15.2.1-4 100% | 530.2 MiB/s | 543.0 KiB | 00m00s [122/172] Installing jansson-0:2.14-3.f 100% | 88.3 MiB/s | 90.5 KiB | 00m00s [123/172] Installing libpkgconf-0:2.3.0 100% | 77.4 MiB/s | 79.2 KiB | 00m00s [124/172] Installing pkgconf-0:2.3.0-3. 100% | 8.1 MiB/s | 91.0 KiB | 00m00s [125/172] Installing pkgconf-pkg-config 100% | 177.3 KiB/s | 1.8 KiB | 00m00s [126/172] Installing xxhash-libs-0:0.8. 100% | 89.4 MiB/s | 91.6 KiB | 00m00s [127/172] Installing libbrotli-0:1.1.0- 100% | 272.0 MiB/s | 835.6 KiB | 00m00s [128/172] Installing libnghttp2-0:1.66. 100% | 159.5 MiB/s | 163.3 KiB | 00m00s [129/172] Installing keyutils-libs-0:1. 100% | 0.0 B/s | 55.7 KiB | 00m00s [130/172] Installing libcom_err-0:1.47. 100% | 0.0 B/s | 64.2 KiB | 00m00s [131/172] Installing libverto-0:0.3.2-1 100% | 26.6 MiB/s | 27.2 KiB | 00m00s [132/172] Installing krb5-libs-0:1.21.3 100% | 382.0 MiB/s | 2.3 MiB | 00m00s [133/172] Installing libssh-0:0.11.3-1. 100% | 277.9 MiB/s | 569.2 KiB | 00m00s [134/172] Installing libcurl-0:8.15.0-3 100% | 294.4 MiB/s | 904.3 KiB | 00m00s [135/172] Installing curl-0:8.15.0-3.fc 100% | 21.6 MiB/s | 464.0 KiB | 00m00s [136/172] Installing rpm-0:6.0.0-1.fc43 100% | 85.8 MiB/s | 2.6 MiB | 00m00s [137/172] Installing efi-srpm-macros-0: 100% | 40.2 MiB/s | 41.1 KiB | 00m00s [138/172] Installing java-srpm-macros-0 100% | 0.0 B/s | 1.1 KiB | 00m00s [139/172] Installing lua-srpm-macros-0: 100% | 0.0 B/s | 1.9 KiB | 00m00s [140/172] Installing tree-sitter-srpm-m 100% | 0.0 B/s | 9.3 KiB | 00m00s [141/172] Installing zig-srpm-macros-0: 100% | 0.0 B/s | 1.7 KiB | 00m00s [142/172] Installing filesystem-srpm-ma 100% | 0.0 B/s | 38.9 KiB | 00m00s [143/172] Installing elfutils-default-y 100% | 408.6 KiB/s | 2.0 KiB | 00m00s [144/172] Installing elfutils-libs-0:0. 100% | 224.4 MiB/s | 689.3 KiB | 00m00s [145/172] Installing elfutils-debuginfo 100% | 7.0 MiB/s | 86.3 KiB | 00m00s [146/172] Installing elfutils-0:0.194-1 100% | 172.4 MiB/s | 2.9 MiB | 00m00s [147/172] Installing binutils-0:2.45.1- 100% | 370.0 MiB/s | 27.4 MiB | 00m00s [148/172] Installing gdb-minimal-0:16.3 100% | 323.3 MiB/s | 13.3 MiB | 00m00s [149/172] Installing debugedit-0:5.2-3. 100% | 17.7 MiB/s | 217.3 KiB | 00m00s [150/172] Installing rpm-build-libs-0:6 100% | 262.9 MiB/s | 269.2 KiB | 00m00s [151/172] Installing rust-srpm-macros-0 100% | 0.0 B/s | 5.6 KiB | 00m00s [152/172] Installing perl-srpm-macros-0 100% | 0.0 B/s | 1.1 KiB | 00m00s [153/172] Installing package-notes-srpm 100% | 0.0 B/s | 2.0 KiB | 00m00s [154/172] Installing openblas-srpm-macr 100% | 0.0 B/s | 392.0 B | 00m00s [155/172] Installing ocaml-srpm-macros- 100% | 0.0 B/s | 2.1 KiB | 00m00s [156/172] Installing kernel-srpm-macros 100% | 0.0 B/s | 2.3 KiB | 00m00s [157/172] Installing gnat-srpm-macros-0 100% | 0.0 B/s | 1.3 KiB | 00m00s [158/172] Installing ghc-srpm-macros-0: 100% | 0.0 B/s | 1.0 KiB | 00m00s [159/172] Installing gap-srpm-macros-0: 100% | 0.0 B/s | 2.7 KiB | 00m00s [160/172] Installing fpc-srpm-macros-0: 100% | 0.0 B/s | 420.0 B | 00m00s [161/172] Installing ansible-srpm-macro 100% | 0.0 B/s | 36.2 KiB | 00m00s [162/172] Installing rpm-build-0:6.0.0- 100% | 22.3 MiB/s | 296.5 KiB | 00m00s [163/172] Installing pyproject-srpm-mac 100% | 0.0 B/s | 2.5 KiB | 00m00s [164/172] Installing redhat-rpm-config- 100% | 184.7 MiB/s | 189.1 KiB | 00m00s [165/172] Installing forge-srpm-macros- 100% | 0.0 B/s | 40.3 KiB | 00m00s [166/172] Installing fonts-srpm-macros- 100% | 0.0 B/s | 57.0 KiB | 00m00s [167/172] Installing go-srpm-macros-0:3 100% | 0.0 B/s | 63.0 KiB | 00m00s [168/172] Installing python-srpm-macros 100% | 25.8 MiB/s | 52.8 KiB | 00m00s [169/172] Installing util-linux-0:2.41. 100% | 111.6 MiB/s | 3.6 MiB | 00m00s [170/172] Installing shadow-utils-2:4.1 100% | 152.7 MiB/s | 4.0 MiB | 00m00s [171/172] Installing which-0:2.23-3.fc4 100% | 7.6 MiB/s | 85.7 KiB | 00m00s [172/172] Installing info-0:7.2-6.fc43. 100% | 235.4 KiB/s | 354.3 KiB | 00m02s Complete! Finish: installing minimal buildroot with dnf5 Start: creating root cache Finish: creating root cache Finish: chroot init INFO: Installed packages: INFO: add-determinism-0.6.0-2.fc43.x86_64 alternatives-1.33-3.fc43.x86_64 ansible-srpm-macros-1-18.1.fc43.noarch audit-libs-4.1.2-2.fc43.x86_64 bash-5.3.0-2.fc43.x86_64 binutils-2.45.1-1.fc43.x86_64 build-reproducibility-srpm-macros-0.6.0-2.fc43.noarch bzip2-1.0.8-21.fc43.x86_64 bzip2-libs-1.0.8-21.fc43.x86_64 ca-certificates-2025.2.80_v9.0.304-1.1.fc43.noarch coreutils-9.7-6.fc43.x86_64 coreutils-common-9.7-6.fc43.x86_64 cpio-2.15-6.fc43.x86_64 crypto-policies-20250714-5.gitcd6043a.fc43.noarch curl-8.15.0-3.fc43.x86_64 cyrus-sasl-lib-2.1.28-33.fc43.x86_64 debugedit-5.2-3.fc43.x86_64 diffutils-3.12-3.fc43.x86_64 dwz-0.16-2.fc43.x86_64 ed-1.22.2-1.fc43.x86_64 efi-srpm-macros-6-4.fc43.noarch elfutils-0.194-1.fc43.x86_64 elfutils-debuginfod-client-0.194-1.fc43.x86_64 elfutils-default-yama-scope-0.194-1.fc43.noarch elfutils-libelf-0.194-1.fc43.x86_64 elfutils-libs-0.194-1.fc43.x86_64 fedora-gpg-keys-43-1.noarch fedora-release-43-25.noarch fedora-release-common-43-25.noarch fedora-release-identity-basic-43-25.noarch fedora-repos-43-1.noarch file-5.46-8.fc43.x86_64 file-libs-5.46-8.fc43.x86_64 filesystem-3.18-50.fc43.x86_64 filesystem-srpm-macros-3.18-50.fc43.noarch findutils-4.10.0-6.fc43.x86_64 fonts-srpm-macros-2.0.5-23.fc43.noarch forge-srpm-macros-0.4.0-3.fc43.noarch fpc-srpm-macros-1.3-15.fc43.noarch gap-srpm-macros-2-1.fc43.noarch gawk-5.3.2-2.fc43.x86_64 gdb-minimal-16.3-6.fc43.x86_64 gdbm-libs-1.23-10.fc43.x86_64 ghc-srpm-macros-1.9.2-3.fc43.noarch glibc-2.42-4.fc43.x86_64 glibc-common-2.42-4.fc43.x86_64 glibc-gconv-extra-2.42-4.fc43.x86_64 glibc-minimal-langpack-2.42-4.fc43.x86_64 gmp-6.3.0-4.fc43.x86_64 gnat-srpm-macros-6-8.fc43.noarch gnulib-l10n-20241231-1.fc43.noarch gnupg2-2.4.8-4.fc43.x86_64 gnupg2-dirmngr-2.4.8-4.fc43.x86_64 gnupg2-gpg-agent-2.4.8-4.fc43.x86_64 gnupg2-gpgconf-2.4.8-4.fc43.x86_64 gnupg2-keyboxd-2.4.8-4.fc43.x86_64 gnupg2-verify-2.4.8-4.fc43.x86_64 gnutls-3.8.10-3.fc43.x86_64 go-srpm-macros-3.8.0-1.fc43.noarch gpg-pubkey-c6e7f081cf80e13146676e88829b606631645531-66b6dccf gpgverify-2.2-3.fc43.noarch grep-3.12-2.fc43.x86_64 gzip-1.13-4.fc43.x86_64 ima-evm-utils-libs-1.6.2-6.fc43.x86_64 info-7.2-6.fc43.x86_64 jansson-2.14-3.fc43.x86_64 java-srpm-macros-1-7.fc43.noarch json-c-0.18-7.fc43.x86_64 kernel-srpm-macros-1.0-27.fc43.noarch keyutils-libs-1.6.3-6.fc43.x86_64 krb5-libs-1.21.3-7.fc43.x86_64 libacl-2.3.2-4.fc43.x86_64 libarchive-3.8.1-3.fc43.x86_64 libassuan-2.5.7-4.fc43.x86_64 libattr-2.5.2-6.fc43.x86_64 libblkid-2.41.1-17.fc43.x86_64 libbrotli-1.1.0-10.fc43.x86_64 libcap-2.76-3.fc43.x86_64 libcap-ng-0.8.5-8.fc43.x86_64 libcom_err-1.47.3-2.fc43.x86_64 libcurl-8.15.0-3.fc43.x86_64 libeconf-0.7.9-2.fc43.x86_64 libevent-2.1.12-16.fc43.x86_64 libfdisk-2.41.1-17.fc43.x86_64 libffi-3.5.1-2.fc43.x86_64 libfsverity-1.6-3.fc43.x86_64 libgcc-15.2.1-4.fc43.x86_64 libgcrypt-1.11.1-2.fc43.x86_64 libgomp-15.2.1-4.fc43.x86_64 libgpg-error-1.55-2.fc43.x86_64 libidn2-2.3.8-2.fc43.x86_64 libksba-1.6.7-4.fc43.x86_64 liblastlog2-2.41.1-17.fc43.x86_64 libmount-2.41.1-17.fc43.x86_64 libnghttp2-1.66.0-2.fc43.x86_64 libpkgconf-2.3.0-3.fc43.x86_64 libpsl-0.21.5-6.fc43.x86_64 libselinux-3.9-5.fc43.x86_64 libsemanage-3.9-4.fc43.x86_64 libsepol-3.9-2.fc43.x86_64 libsmartcols-2.41.1-17.fc43.x86_64 libssh-0.11.3-1.fc43.x86_64 libssh-config-0.11.3-1.fc43.noarch libstdc++-15.2.1-4.fc43.x86_64 libtasn1-4.20.0-2.fc43.x86_64 libtool-ltdl-2.5.4-7.fc43.x86_64 libunistring-1.1-10.fc43.x86_64 libusb1-1.0.29-4.fc43.x86_64 libuuid-2.41.1-17.fc43.x86_64 libverto-0.3.2-11.fc43.x86_64 libxcrypt-4.5.2-1.fc43.x86_64 libxml2-2.12.10-5.fc43.x86_64 libzstd-1.5.7-2.fc43.x86_64 lua-libs-5.4.8-3.fc43.x86_64 lua-srpm-macros-1-16.fc43.noarch lz4-libs-1.10.0-3.fc43.x86_64 mpfr-4.2.2-2.fc43.x86_64 ncurses-base-6.5-7.20250614.fc43.noarch ncurses-libs-6.5-7.20250614.fc43.x86_64 nettle-3.10.1-2.fc43.x86_64 npth-1.8-3.fc43.x86_64 ocaml-srpm-macros-11-2.fc43.noarch openblas-srpm-macros-2-20.fc43.noarch openldap-2.6.10-4.fc43.x86_64 openssl-libs-3.5.4-1.fc43.x86_64 p11-kit-0.25.8-1.fc43.x86_64 p11-kit-trust-0.25.8-1.fc43.x86_64 package-notes-srpm-macros-0.5-14.fc43.noarch pam-libs-1.7.1-3.fc43.x86_64 patch-2.8-2.fc43.x86_64 pcre2-10.46-1.fc43.x86_64 pcre2-syntax-10.46-1.fc43.noarch perl-srpm-macros-1-60.fc43.noarch pkgconf-2.3.0-3.fc43.x86_64 pkgconf-m4-2.3.0-3.fc43.noarch pkgconf-pkg-config-2.3.0-3.fc43.x86_64 popt-1.19-9.fc43.x86_64 publicsuffix-list-dafsa-20250616-2.fc43.noarch pyproject-srpm-macros-1.18.5-1.fc43.noarch python-srpm-macros-3.14-5.fc43.noarch qt5-srpm-macros-5.15.18-1.fc43.noarch qt6-srpm-macros-6.10.0-1.fc43.noarch readline-8.3-2.fc43.x86_64 redhat-rpm-config-343-11.fc43.noarch rpm-6.0.0-1.fc43.x86_64 rpm-build-6.0.0-1.fc43.x86_64 rpm-build-libs-6.0.0-1.fc43.x86_64 rpm-libs-6.0.0-1.fc43.x86_64 rpm-sequoia-1.9.0-2.fc43.x86_64 rpm-sign-libs-6.0.0-1.fc43.x86_64 rust-srpm-macros-26.4-1.fc43.noarch sed-4.9-5.fc43.x86_64 setup-2.15.0-26.fc43.noarch shadow-utils-4.18.0-3.fc43.x86_64 sqlite-libs-3.50.2-2.fc43.x86_64 systemd-libs-258.2-1.fc43.x86_64 systemd-standalone-sysusers-258.2-1.fc43.x86_64 tar-1.35-6.fc43.x86_64 tpm2-tss-4.1.3-8.fc43.x86_64 tree-sitter-srpm-macros-0.4.2-1.fc43.noarch unzip-6.0-67.fc43.x86_64 util-linux-2.41.1-17.fc43.x86_64 util-linux-core-2.41.1-17.fc43.x86_64 which-2.23-3.fc43.x86_64 xxhash-libs-0.8.3-3.fc43.x86_64 xz-5.8.1-2.fc43.x86_64 xz-libs-5.8.1-2.fc43.x86_64 zig-srpm-macros-1-5.fc43.noarch zip-3.0-44.fc43.x86_64 zlib-ng-compat-2.2.5-2.fc43.x86_64 zstd-1.5.7-2.fc43.x86_64 Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --install packit bash INFO: mock.py version 6.5 starting (python version = 3.13.7, NVR = mock-6.5-1.fc42), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --install packit bash Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 6.5 INFO: Mock Version: 6.5 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: installing package(s): packit bash Updating and loading repositories: Additional repo copr_packit_packit_sta 100% | 126.5 KiB/s | 1.5 KiB | 00m00s fedora 100% | 212.3 KiB/s | 32.7 KiB | 00m00s updates 100% | 456.6 KiB/s | 31.5 KiB | 00m00s Repositories loaded. Package "bash-5.3.0-2.fc43.x86_64" is already installed. Package Arch Version Repository Size Installing: packit noarch 1.12.0.post1.dev18+gc39b0e7d-1.20251113130040419169.stable.18.gc39b0e7d.fc43 copr_packit_packit_stable 22.6 KiB Installing dependencies: abattis-cantarell-vf-fonts noarch 0.301-15.fc43 fedora 192.7 KiB authselect x86_64 1.6.2-1.fc43 fedora 198.2 KiB authselect-libs x86_64 1.6.2-1.fc43 fedora 886.0 KiB bodhi-client noarch 25.11.1-1.fc43 updates 278.2 KiB bubblewrap x86_64 0.11.0-2.fc43 fedora 135.0 KiB cairo x86_64 1.18.4-2.fc43 fedora 1.8 MiB cairo-gobject x86_64 1.18.4-2.fc43 fedora 31.1 KiB cracklib x86_64 2.9.11-8.fc43 fedora 226.4 KiB createrepo_c x86_64 1.2.1-3.fc43 fedora 190.5 KiB createrepo_c-libs x86_64 1.2.1-3.fc43 fedora 277.7 KiB dash x86_64 0.5.12-6.fc43 fedora 167.1 KiB dbus x86_64 1:1.16.0-4.fc43 fedora 0.0 B dbus-broker x86_64 37-2.fc43 fedora 387.2 KiB dbus-common noarch 1:1.16.0-4.fc43 fedora 11.2 KiB default-fonts-core-sans noarch 4.2-5.fc43 fedora 11.9 KiB desktop-file-utils x86_64 0.28-2.fc43 fedora 218.4 KiB devscripts-checkbashisms noarch 2.25.19-2.fc43 fedora 52.5 KiB distribution-gpg-keys noarch 1.114-1.fc43 fedora 924.2 KiB dnf-data noarch 4.24.0-1.fc43 updates 39.8 KiB drpm x86_64 0.5.2-8.fc42 fedora 131.4 KiB emacs-filesystem noarch 1:30.0-5.fc43 fedora 0.0 B enchant2 x86_64 2.8.12-2.fc43 fedora 205.8 KiB expat x86_64 2.7.2-1.fc43 fedora 298.6 KiB fakeroot x86_64 1.37.1-3.fc43 fedora 150.8 KiB fakeroot-libs x86_64 1.37.1-3.fc43 fedora 124.6 KiB fedpkg noarch 1.46-7.fc43 fedora 314.9 KiB fmt x86_64 11.2.0-3.fc43 fedora 266.8 KiB fontconfig x86_64 2.17.0-3.fc43 fedora 765.9 KiB fonts-filesystem noarch 1:2.0.5-23.fc43 fedora 0.0 B freetype x86_64 2.13.3-3.fc43 fedora 850.2 KiB fribidi x86_64 1.0.16-3.fc43 fedora 190.3 KiB gdbm x86_64 1:1.23-10.fc43 fedora 460.3 KiB gdk-pixbuf2 x86_64 2.44.4-1.fc43 updates 2.5 MiB git-core x86_64 2.51.1-1.fc43 updates 23.6 MiB glib2 x86_64 2.86.1-5.fc43 updates 14.8 MiB glycin-libs x86_64 2.0.4-1.fc43 updates 4.4 MiB glycin-loaders x86_64 2.0.4-1.fc43 updates 13.1 MiB google-noto-fonts-common noarch 20251101-2.fc43 updates 17.7 KiB google-noto-sans-vf-fonts noarch 20251101-2.fc43 updates 1.4 MiB graphite2 x86_64 1.3.14-19.fc43 fedora 191.8 KiB groff-base x86_64 1.23.0-10.fc43 fedora 3.8 MiB harfbuzz x86_64 11.5.1-1.fc43 fedora 2.8 MiB highway x86_64 1.2.0-5.fc42 fedora 4.4 MiB hunspell x86_64 1.7.2-10.fc43 fedora 1.3 MiB hunspell-en-US noarch 0.20201207-12.fc43 fedora 557.4 KiB hunspell-filesystem x86_64 1.7.2-10.fc43 fedora 0.0 B json-glib x86_64 1.10.8-1.fc43 fedora 592.3 KiB koji noarch 1.35.3-7.fc43 fedora 896.5 KiB krb5-pkinit x86_64 1.21.3-7.fc43 fedora 125.2 KiB krb5-workstation x86_64 1.21.3-7.fc43 fedora 2.5 MiB lcms2 x86_64 2.16-6.fc43 fedora 433.7 KiB less x86_64 679-2.fc43 fedora 406.1 KiB libX11 x86_64 1.8.12-1.fc43 fedora 1.3 MiB libX11-common noarch 1.8.12-1.fc43 fedora 1.2 MiB libXau x86_64 1.0.12-3.fc43 fedora 72.9 KiB libXext x86_64 1.3.6-4.fc43 fedora 90.0 KiB libXft x86_64 2.3.8-9.fc43 fedora 164.4 KiB libXrender x86_64 0.9.12-3.fc43 fedora 46.0 KiB libaom x86_64 3.13.1-1.fc43 fedora 5.0 MiB libappstream-glib x86_64 0.8.3-4.fc43 fedora 1.4 MiB libcbor x86_64 0.12.0-6.fc43 fedora 77.8 KiB libcomps x86_64 0.1.23-1.fc43 fedora 205.3 KiB libdatrie x86_64 0.2.13-12.fc43 fedora 53.8 KiB libdav1d x86_64 1.5.2-1.fc43 updates 1.7 MiB libdnf x86_64 0.75.0-1.fc43 updates 2.2 MiB libdnf5 x86_64 5.2.17.0-2.fc43 fedora 3.8 MiB libedit x86_64 3.1-57.20251016cvs.fc43 updates 240.2 KiB libfido2 x86_64 1.16.0-3.fc43 fedora 238.5 KiB libheif x86_64 1.20.2-6.fc43 fedora 1.6 MiB libjpeg-turbo x86_64 3.1.2-1.fc43 fedora 804.9 KiB libjxl x86_64 1:0.11.1-6.fc43 fedora 3.1 MiB libkadm5 x86_64 1.21.3-7.fc43 fedora 213.9 KiB libmodulemd x86_64 2.15.2-4.fc43 fedora 713.7 KiB libnsl2 x86_64 2.0.1-4.fc43 fedora 57.9 KiB libopenjph x86_64 0.22.0-2.fc43 fedora 466.2 KiB libpng x86_64 2:1.6.50-2.fc43 fedora 237.7 KiB libpwquality x86_64 1.4.5-14.fc43 fedora 409.2 KiB librepo x86_64 1.20.0-4.fc43 fedora 249.0 KiB librsvg2 x86_64 2.61.0-2.fc43 fedora 5.0 MiB libseccomp x86_64 2.6.0-2.fc43 fedora 224.9 KiB libsodium x86_64 1.0.20-6.fc43 fedora 389.0 KiB libsolv x86_64 0.7.35-1.fc43 updates 971.4 KiB libss x86_64 1.47.3-2.fc43 fedora 71.2 KiB libthai x86_64 0.1.29-11.fc43 fedora 783.4 KiB libtirpc x86_64 1.3.7-1.fc43 updates 200.4 KiB libuser x86_64 0.64-16.fc43 fedora 1.9 MiB libvmaf x86_64 3.0.0-4.fc43 fedora 827.0 KiB libwebp x86_64 1.6.0-2.fc43 fedora 956.6 KiB libxcb x86_64 1.17.0-6.fc43 fedora 1.1 MiB libxslt x86_64 1.1.43-5.fc43 fedora 460.1 KiB libyaml x86_64 0.2.5-17.fc43 fedora 134.6 KiB lzo x86_64 2.10-15.fc43 fedora 178.9 KiB mock noarch 6.5-1.fc43 updates 1.1 MiB mock-core-configs noarch 43.2-1.fc43 updates 392.2 KiB mock-filesystem noarch 6.5-1.fc43 updates 17.7 KiB mpdecimal x86_64 4.0.1-2.fc43 fedora 217.2 KiB ncurses x86_64 6.5-7.20250614.fc43 fedora 609.8 KiB noopenh264 x86_64 2.6.0-2.fc43 fedora 39.2 KiB openjpeg x86_64 2.5.4-1.fc43 fedora 456.3 KiB openssh x86_64 10.0p1-5.fc43 fedora 1.4 MiB openssh-clients x86_64 10.0p1-5.fc43 fedora 2.6 MiB osc noarch 1.22.0-465.2.1.fc43 updates 4.9 MiB pam x86_64 1.7.1-3.fc43 fedora 1.6 MiB pango x86_64 1.57.0-1.fc43 fedora 1.0 MiB perl-AutoLoader noarch 5.74-520.fc43 fedora 20.6 KiB perl-B x86_64 1.89-520.fc43 fedora 501.3 KiB perl-Carp noarch 1.54-520.fc43 fedora 46.6 KiB perl-Class-Struct noarch 0.68-520.fc43 fedora 25.4 KiB perl-Data-Dumper x86_64 2.191-521.fc43 fedora 115.6 KiB perl-Digest noarch 1.20-520.fc43 fedora 35.3 KiB perl-Digest-MD5 x86_64 2.59-520.fc43 fedora 59.7 KiB perl-DynaLoader x86_64 1.57-520.fc43 fedora 32.1 KiB perl-Encode x86_64 4:3.21-520.fc43 fedora 4.7 MiB perl-Errno x86_64 1.38-520.fc43 fedora 8.4 KiB perl-Exporter noarch 5.79-520.fc43 fedora 54.3 KiB perl-Fcntl x86_64 1.20-520.fc43 fedora 48.8 KiB perl-File-Basename noarch 2.86-520.fc43 fedora 14.0 KiB perl-File-Path noarch 2.18-520.fc43 fedora 63.5 KiB perl-File-Temp noarch 1:0.231.100-520.fc43 fedora 162.3 KiB perl-File-stat noarch 1.14-520.fc43 fedora 12.5 KiB perl-FileHandle noarch 2.05-520.fc43 fedora 9.4 KiB perl-Getopt-Long noarch 1:2.58-520.fc43 fedora 144.5 KiB perl-Getopt-Std noarch 1.14-520.fc43 fedora 11.2 KiB perl-HTTP-Tiny noarch 0.090-521.fc43 fedora 154.4 KiB perl-IO x86_64 1.55-520.fc43 fedora 147.4 KiB perl-IO-Socket-IP noarch 0.43-521.fc43 fedora 100.3 KiB perl-IO-Socket-SSL noarch 2.095-2.fc43 fedora 714.5 KiB perl-IPC-Open3 noarch 1.24-520.fc43 fedora 27.7 KiB perl-MIME-Base32 noarch 1.303-24.fc43 fedora 30.7 KiB perl-MIME-Base64 x86_64 3.16-520.fc43 fedora 42.0 KiB perl-Net-SSLeay x86_64 1.94-11.fc43 fedora 1.3 MiB perl-POSIX x86_64 2.23-520.fc43 fedora 231.4 KiB perl-PathTools x86_64 3.94-520.fc43 fedora 180.0 KiB perl-Pod-Escapes noarch 1:1.07-520.fc43 fedora 24.9 KiB perl-Pod-Perldoc noarch 3.28.01-521.fc43 fedora 163.7 KiB perl-Pod-Simple noarch 1:3.47-3.fc43 fedora 565.3 KiB perl-Pod-Usage noarch 4:2.05-520.fc43 fedora 86.3 KiB perl-Scalar-List-Utils x86_64 5:1.70-1.fc43 fedora 144.9 KiB perl-SelectSaver noarch 1.02-520.fc43 fedora 2.2 KiB perl-Socket x86_64 4:2.040-2.fc43 fedora 120.3 KiB perl-Storable x86_64 1:3.37-521.fc43 fedora 231.2 KiB perl-Symbol noarch 1.09-520.fc43 fedora 6.8 KiB perl-Term-ANSIColor noarch 5.01-521.fc43 fedora 97.5 KiB perl-Term-Cap noarch 1.18-520.fc43 fedora 29.3 KiB perl-Text-ParseWords noarch 3.31-520.fc43 fedora 13.6 KiB perl-Text-Tabs+Wrap noarch 2024.001-520.fc43 fedora 22.6 KiB perl-Time-Local noarch 2:1.350-520.fc43 fedora 69.0 KiB perl-URI noarch 5.34-2.fc43 updates 268.0 KiB perl-base noarch 2.27-520.fc43 fedora 12.6 KiB perl-constant noarch 1.33-521.fc43 fedora 26.2 KiB perl-if noarch 0.61.000-520.fc43 fedora 5.8 KiB perl-interpreter x86_64 4:5.42.0-520.fc43 fedora 118.6 KiB perl-libnet noarch 3.15-521.fc43 fedora 289.4 KiB perl-libs x86_64 4:5.42.0-520.fc43 fedora 11.5 MiB perl-locale noarch 1.13-520.fc43 fedora 6.1 KiB perl-mro x86_64 1.29-520.fc43 fedora 41.6 KiB perl-overload noarch 1.40-520.fc43 fedora 71.6 KiB perl-overloading noarch 0.02-520.fc43 fedora 4.9 KiB perl-parent noarch 1:0.244-520.fc43 fedora 10.3 KiB perl-podlators noarch 1:6.0.2-520.fc43 fedora 317.5 KiB perl-vars noarch 1.05-520.fc43 fedora 3.9 KiB pigz x86_64 2.8-7.fc43 fedora 163.0 KiB pixman x86_64 0.46.2-2.fc43 fedora 710.3 KiB procps-ng x86_64 4.0.4-7.fc43.1 updates 1.0 MiB python-pip-wheel noarch 25.1.1-18.fc43 fedora 1.2 MiB python3 x86_64 3.14.0-2.fc43 updates 28.9 KiB python3-GitPython noarch 3.1.45-3.fc43 fedora 2.0 MiB python3-annotated-types noarch 0.7.0-8.fc43 fedora 85.1 KiB python3-anyio noarch 4.8.0-7.fc43 fedora 1.2 MiB python3-argcomplete noarch 3.6.3-2.fc43 updates 325.3 KiB python3-authlib noarch 1.4.0-8.fc43 fedora 1.4 MiB python3-backoff noarch 2.2.1-13.fc43 fedora 107.5 KiB python3-bugzilla noarch 3.3.0-6.fc43 fedora 443.2 KiB python3-cachetools noarch 5.5.2-5.fc43 fedora 136.6 KiB python3-cccolutils x86_64 1.5-34.fc43 fedora 47.4 KiB python3-certifi noarch 2025.07.09-3.fc43 fedora 7.4 KiB python3-cffi x86_64 2.0.0-2.fc43 fedora 1.4 MiB python3-charset-normalizer noarch 3.4.3-3.fc43 fedora 355.7 KiB python3-click noarch 1:8.1.7-11.fc43 fedora 1.2 MiB python3-construct noarch 2.10.70-11.fc43 fedora 1.0 MiB python3-copr noarch 2.4-1.fc43 updates 245.5 KiB python3-cryptography x86_64 45.0.4-4.fc43 fedora 5.4 MiB python3-dateutil noarch 1:2.9.0.post0-6.fc43 fedora 877.5 KiB python3-decorator noarch 5.2.1-5.fc43 fedora 81.8 KiB python3-defusedxml noarch 0.7.1-22.fc43 fedora 197.6 KiB python3-deprecated noarch 1.3.1-1.fc43 updates 61.0 KiB python3-distro noarch 1.9.0-10.fc43 fedora 210.2 KiB python3-dnf noarch 4.24.0-1.fc43 updates 2.7 MiB python3-dotenv noarch 1.1.0-5.fc43 fedora 135.3 KiB python3-enchant noarch 3.2.2-23.fc43 fedora 395.1 KiB python3-fedora-distro-aliases noarch 1.8-1.fc43 updates 44.9 KiB python3-file-magic noarch 5.46-8.fc43 fedora 28.5 KiB python3-filelock noarch 3.15.4-10.fc43 fedora 97.0 KiB python3-gitdb noarch 4.0.11-6.fc43 fedora 508.9 KiB python3-gitlab noarch 7.0.0-1.fc43 updates 1.7 MiB python3-gnupg noarch 0.5.4-4.fc43 fedora 289.0 KiB python3-gobject-base x86_64 3.54.5-4.fc43 updates 1.5 MiB python3-gssapi x86_64 1.7.3-15.fc43 fedora 2.7 MiB python3-h11 noarch 0.16.0-5.fc43 fedora 279.9 KiB python3-hawkey x86_64 0.75.0-1.fc43 updates 295.6 KiB python3-httpcore noarch 1.0.9-5.fc43 fedora 853.9 KiB python3-httpx noarch 0.28.1-9.fc43 fedora 992.1 KiB python3-idna noarch 3.10-6.fc43 fedora 730.6 KiB python3-jinja2 noarch 3.1.6-6.fc43 fedora 3.1 MiB python3-jwt noarch 2.8.0-7.fc43 fedora 178.9 KiB python3-jwt+crypto noarch 2.8.0-7.fc43 fedora 5.4 KiB python3-koji noarch 1.35.3-7.fc43 fedora 2.2 MiB python3-krb5 x86_64 0.7.1-4.fc43 fedora 3.3 MiB python3-lazy-object-proxy x86_64 1.11.0-5.fc43 fedora 118.0 KiB python3-libcomps x86_64 0.1.23-1.fc43 fedora 139.4 KiB python3-libdnf x86_64 0.75.0-1.fc43 updates 3.7 MiB python3-libmodulemd x86_64 2.15.2-4.fc43 fedora 15.3 KiB python3-libs x86_64 3.14.0-2.fc43 updates 43.0 MiB python3-lxml x86_64 6.0.1-2.fc43 fedora 5.8 MiB python3-markupsafe x86_64 3.0.2-6.fc43 fedora 61.5 KiB python3-marshmallow noarch 3.25.0-6.fc43 fedora 602.8 KiB python3-munch noarch 4.0.0-6.fc43 fedora 61.3 KiB python3-ogr noarch 0.57.0-1.20251110133038348871.stable.0.gd8e61f4.fc43 copr_packit_packit_stable 948.8 KiB python3-openidc-client noarch 0.6.0^1.0e2ed81-7.fc43 fedora 75.6 KiB python3-opensuse-distro-aliases noarch 0.2.0-6.fc43 fedora 17.1 KiB python3-ordered-set noarch 4.1.0-25.fc43 fedora 51.5 KiB python3-packaging noarch 25.0-7.fc43 fedora 607.4 KiB python3-packit noarch 1.12.0.post1.dev18+gc39b0e7d-1.20251113130040419169.stable.18.gc39b0e7d.fc43 copr_packit_packit_stable 1.7 MiB python3-ply noarch 3.11-30.fc43 fedora 575.2 KiB python3-progressbar2 noarch 4.5.0-5.fc43 fedora 609.9 KiB python3-pybeam noarch 0.8-8.fc43 fedora 44.6 KiB python3-pycparser noarch 2.22-5.fc43 fedora 1.5 MiB python3-pycurl x86_64 7.45.6-5.fc43 updates 434.3 KiB python3-pydantic noarch 2.12.4-1.fc43 updates 5.1 MiB python3-pydantic-core x86_64 2.41.5-1.fc43 updates 5.5 MiB python3-pyforgejo noarch 2.0.4-5.fc43 fedora 7.1 MiB python3-pygithub noarch 2.7.0-3.fc43 fedora 4.8 MiB python3-pynacl x86_64 1.5.0-18.fc43 fedora 650.3 KiB python3-pyroute2 noarch 0.7.12-9.fc43 fedora 3.6 MiB python3-pyxdg noarch 0.27-19.fc43 updates 468.1 KiB python3-pyyaml x86_64 6.0.2-7.fc43 fedora 793.4 KiB python3-requests noarch 2.32.5-2.fc43 fedora 476.9 KiB python3-requests-gssapi noarch 1.4.0-1.fc43 updates 67.7 KiB python3-requests-kerberos noarch 0.15.0-6.fc43 fedora 65.7 KiB python3-requests-toolbelt noarch 1.0.0-14.fc43 fedora 299.4 KiB python3-rpkg noarch 1.68-8.fc43 fedora 1.1 MiB python3-rpm x86_64 6.0.0-1.fc43 fedora 179.3 KiB python3-rpmautospec noarch 0.8.3-2.fc43 fedora 453.2 KiB python3-rpmautospec-core noarch 0.1.5-8.fc43 fedora 11.3 KiB python3-ruamel-yaml noarch 0.18.16-1.fc43 updates 1.8 MiB python3-ruamel-yaml-clib x86_64 0.2.12-6.fc43 fedora 272.4 KiB python3-setuptools noarch 78.1.1-15.fc43 fedora 9.0 MiB python3-six noarch 1.17.0-7.fc43 fedora 118.0 KiB python3-smmap noarch 5.0.1-6.fc43 fedora 202.0 KiB python3-sniffio noarch 1.3.1-8.fc43 fedora 35.3 KiB python3-specfile noarch 0.37.1.post1.dev12+g43dbec6-1.20251118121304510680.stable.12.g43dbec6.fc43 copr_packit_packit_stable 636.3 KiB python3-spnego noarch 0.11.2-4.fc43 fedora 1.1 MiB python3-spnego+kerberos noarch 0.11.2-4.fc43 fedora 6.5 KiB python3-tabulate noarch 0.9.0-16.fc43 fedora 346.7 KiB python3-templated-dictionary noarch 1.6-5.fc43 fedora 45.7 KiB python3-tomli-w noarch 1.2.0-6.fc43 fedora 34.8 KiB python3-typing-extensions noarch 4.15.0-2.fc43 fedora 538.4 KiB python3-typing-inspection noarch 0.4.2-1.fc43 updates 91.9 KiB python3-urllib3 noarch 2.5.0-3.fc43 fedora 1.1 MiB python3-utils noarch 3.9.1-2.fc43 fedora 243.2 KiB python3-wrapt x86_64 1.17.1-6.fc43 fedora 199.0 KiB python3-zstandard x86_64 0.25.0-1.fc43 fedora 2.3 MiB rav1e-libs x86_64 0.7.1-8.fc43 fedora 3.0 MiB rpkg-common noarch 1.68-8.fc43 fedora 11.8 KiB rpmdevtools noarch 9.6-13.fc43 fedora 213.8 KiB rpmlint noarch 2.8.0-1.fc43 updates 1.3 MiB rpmlint-fedora-license-data noarch 1.73-1.fc43 updates 23.8 KiB rsync x86_64 3.4.1-4.fc43 fedora 777.1 KiB shared-mime-info x86_64 2.4-2.fc43 fedora 5.2 MiB svt-av1-libs x86_64 3.1.2-1.fc43 fedora 5.6 MiB systemd x86_64 258.2-1.fc43 updates 12.7 MiB systemd-container x86_64 258.2-1.fc43 updates 2.2 MiB systemd-pam x86_64 258.2-1.fc43 updates 1.2 MiB systemd-rpm-macros noarch 258.2-1.fc43 updates 8.5 KiB systemd-shared x86_64 258.2-1.fc43 updates 4.9 MiB tzdata noarch 2025b-3.fc43 fedora 1.6 MiB usermode x86_64 1.114-13.fc43 fedora 831.3 KiB xml-common noarch 0.6.3-67.fc43 fedora 78.4 KiB zchunk-libs x86_64 1.5.1-3.fc43 fedora 97.1 KiB Transaction Summary: Installing: 280 packages Total size of inbound packages is 96 MiB. Need to download 96 MiB. After this operation, 353 MiB extra will be used (install 353 MiB, remove 0 B). [ 1/280] packit-0:1.12.0.post1.dev18+g 100% | 2.8 MiB/s | 39.8 KiB | 00m00s [ 2/280] python3-packit-0:1.12.0.post1 100% | 28.8 MiB/s | 443.0 KiB | 00m00s [ 3/280] fedpkg-0:1.46-7.fc43.noarch 100% | 1.0 MiB/s | 117.3 KiB | 00m00s [ 4/280] python3-backoff-0:2.2.1-13.fc 100% | 1.4 MiB/s | 43.0 KiB | 00m00s [ 5/280] krb5-workstation-0:1.21.3-7.f 100% | 3.0 MiB/s | 419.0 KiB | 00m00s [ 6/280] python3-GitPython-0:3.1.45-3. 100% | 3.0 MiB/s | 423.7 KiB | 00m00s [ 7/280] python3-cachetools-0:5.5.2-5. 100% | 1.2 MiB/s | 39.6 KiB | 00m00s [ 8/280] python3-cccolutils-0:1.5-34.f 100% | 583.9 KiB/s | 21.0 KiB | 00m00s [ 9/280] python3-bugzilla-0:3.3.0-6.fc 100% | 2.6 MiB/s | 139.2 KiB | 00m00s [ 10/280] python3-gnupg-0:0.5.4-4.fc43. 100% | 2.7 MiB/s | 64.3 KiB | 00m00s [ 11/280] python3-click-1:8.1.7-11.fc43 100% | 6.5 MiB/s | 254.6 KiB | 00m00s [ 12/280] python3-lazy-object-proxy-0:1 100% | 1.4 MiB/s | 47.9 KiB | 00m00s [ 13/280] python3-marshmallow-0:3.25.0- 100% | 4.6 MiB/s | 149.3 KiB | 00m00s [ 14/280] python3-koji-0:1.35.3-7.fc43. 100% | 7.3 MiB/s | 432.9 KiB | 00m00s [ 15/280] python3-packaging-0:25.0-7.fc 100% | 9.3 MiB/s | 161.5 KiB | 00m00s [ 16/280] python3-munch-0:4.0.0-6.fc43. 100% | 883.6 KiB/s | 26.5 KiB | 00m00s [ 17/280] python3-opensuse-distro-alias 100% | 426.4 KiB/s | 16.2 KiB | 00m00s [ 18/280] python3-pyyaml-0:6.0.2-7.fc43 100% | 12.1 MiB/s | 236.4 KiB | 00m00s [ 19/280] python3-requests-0:2.32.5-2.f 100% | 8.2 MiB/s | 160.4 KiB | 00m00s [ 20/280] python3-rpkg-0:1.68-8.fc43.no 100% | 9.2 MiB/s | 245.9 KiB | 00m00s [ 21/280] python3-requests-kerberos-0:0 100% | 817.0 KiB/s | 28.6 KiB | 00m00s [ 22/280] python3-tabulate-0:0.9.0-16.f 100% | 2.2 MiB/s | 72.5 KiB | 00m00s [ 23/280] rpmdevtools-0:9.6-13.fc43.noa 100% | 5.4 MiB/s | 94.4 KiB | 00m00s [ 24/280] python3-distro-0:1.9.0-10.fc4 100% | 3.1 MiB/s | 47.9 KiB | 00m00s [ 25/280] rsync-0:3.4.1-4.fc43.x86_64 100% | 13.0 MiB/s | 425.4 KiB | 00m00s [ 26/280] koji-0:1.35.3-7.fc43.noarch 100% | 5.6 MiB/s | 266.1 KiB | 00m00s [ 27/280] python3-openidc-client-0:0.6. 100% | 891.6 KiB/s | 27.6 KiB | 00m00s [ 28/280] libkadm5-0:1.21.3-7.fc43.x86_ 100% | 4.6 MiB/s | 75.8 KiB | 00m00s [ 29/280] libss-0:1.47.3-2.fc43.x86_64 100% | 2.1 MiB/s | 32.2 KiB | 00m00s [ 30/280] krb5-pkinit-0:1.21.3-7.fc43.x 100% | 1.5 MiB/s | 60.2 KiB | 00m00s [ 31/280] python3-dateutil-1:2.9.0.post 100% | 15.3 MiB/s | 344.3 KiB | 00m00s [ 32/280] python3-gitdb-0:4.0.11-6.fc43 100% | 4.0 MiB/s | 145.6 KiB | 00m00s [ 33/280] python3-defusedxml-0:0.7.1-22 100% | 1.6 MiB/s | 59.1 KiB | 00m00s [ 34/280] python3-rpm-0:6.0.0-1.fc43.x8 100% | 4.6 MiB/s | 70.2 KiB | 00m00s [ 35/280] python3-six-0:1.17.0-7.fc43.n 100% | 2.6 MiB/s | 41.8 KiB | 00m00s [ 36/280] libyaml-0:0.2.5-17.fc43.x86_6 100% | 3.7 MiB/s | 60.1 KiB | 00m00s [ 37/280] python3-ordered-set-0:4.1.0-2 100% | 796.9 KiB/s | 24.7 KiB | 00m00s [ 38/280] python3-charset-normalizer-0: 100% | 6.7 MiB/s | 117.3 KiB | 00m00s [ 39/280] python3-idna-0:3.10-6.fc43.no 100% | 7.6 MiB/s | 124.1 KiB | 00m00s [ 40/280] python3-setuptools-0:78.1.1-1 100% | 38.8 MiB/s | 2.1 MiB | 00m00s [ 41/280] python3-urllib3-0:2.5.0-3.fc4 100% | 16.1 MiB/s | 297.5 KiB | 00m00s [ 42/280] python3-spnego+kerberos-0:0.1 100% | 299.6 KiB/s | 9.3 KiB | 00m00s [ 43/280] python3-spnego-0:0.11.2-4.fc4 100% | 10.3 MiB/s | 295.4 KiB | 00m00s [ 44/280] python3-cryptography-0:45.0.4 100% | 29.1 MiB/s | 1.5 MiB | 00m00s [ 45/280] python3-libmodulemd-0:2.15.2- 100% | 722.2 KiB/s | 14.4 KiB | 00m00s [ 46/280] emacs-filesystem-1:30.0-5.fc4 100% | 499.2 KiB/s | 7.5 KiB | 00m00s [ 47/280] python3-rpmautospec-0:0.8.3-2 100% | 6.0 MiB/s | 183.7 KiB | 00m00s [ 48/280] rpkg-common-0:1.68-8.fc43.noa 100% | 539.3 KiB/s | 18.3 KiB | 00m00s [ 49/280] fakeroot-0:1.37.1-3.fc43.x86_ 100% | 6.5 MiB/s | 100.1 KiB | 00m00s [ 50/280] python3-progressbar2-0:4.5.0- 100% | 9.4 MiB/s | 153.5 KiB | 00m00s [ 51/280] python3-libcomps-0:0.1.23-1.f 100% | 3.1 MiB/s | 48.2 KiB | 00m00s [ 52/280] tzdata-0:2025b-3.fc43.noarch 100% | 27.9 MiB/s | 713.9 KiB | 00m00s [ 53/280] python3-cffi-0:2.0.0-2.fc43.x 100% | 18.5 MiB/s | 321.3 KiB | 00m00s [ 54/280] python3-smmap-0:5.0.1-6.fc43. 100% | 2.1 MiB/s | 63.6 KiB | 00m00s [ 55/280] libmodulemd-0:2.15.2-4.fc43.x 100% | 14.3 MiB/s | 234.2 KiB | 00m00s [ 56/280] python3-rpmautospec-core-0:0. 100% | 1.0 MiB/s | 15.6 KiB | 00m00s [ 57/280] python3-krb5-0:0.7.1-4.fc43.x 100% | 13.6 MiB/s | 654.8 KiB | 00m00s [ 58/280] python3-utils-0:3.9.1-2.fc43. 100% | 5.3 MiB/s | 81.4 KiB | 00m00s [ 59/280] python3-gssapi-0:1.7.3-15.fc4 100% | 12.3 MiB/s | 655.9 KiB | 00m00s [ 60/280] libcomps-0:0.1.23-1.fc43.x86_ 100% | 5.0 MiB/s | 77.0 KiB | 00m00s [ 61/280] python3-pycparser-0:2.22-5.fc 100% | 16.7 MiB/s | 274.4 KiB | 00m00s [ 62/280] expat-0:2.7.2-1.fc43.x86_64 100% | 7.7 MiB/s | 118.9 KiB | 00m00s [ 63/280] python3-decorator-0:5.2.1-5.f 100% | 1.0 MiB/s | 32.0 KiB | 00m00s [ 64/280] python3-typing-extensions-0:4 100% | 4.2 MiB/s | 112.4 KiB | 00m00s [ 65/280] python3-ply-0:3.11-30.fc43.no 100% | 8.4 MiB/s | 136.8 KiB | 00m00s [ 66/280] mpdecimal-0:4.0.1-2.fc43.x86_ 100% | 6.3 MiB/s | 97.1 KiB | 00m00s [ 67/280] python-pip-wheel-0:25.1.1-18. 100% | 57.4 MiB/s | 1.2 MiB | 00m00s [ 68/280] python3-0:3.14.0-2.fc43.x86_6 100% | 120.9 KiB/s | 27.7 KiB | 00m00s [ 69/280] python3-argcomplete-0:3.6.3-2 100% | 309.9 KiB/s | 99.2 KiB | 00m00s [ 70/280] createrepo_c-0:1.2.1-3.fc43.x 100% | 2.7 MiB/s | 76.4 KiB | 00m00s [ 71/280] pigz-0:2.8-7.fc43.x86_64 100% | 6.2 MiB/s | 95.3 KiB | 00m00s [ 72/280] python3-jinja2-0:3.1.6-6.fc43 100% | 29.6 MiB/s | 515.8 KiB | 00m00s [ 73/280] python3-pyroute2-0:0.7.12-9.f 100% | 28.5 MiB/s | 1.0 MiB | 00m00s [ 74/280] mock-0:6.5-1.fc43.noarch 100% | 1.2 MiB/s | 328.8 KiB | 00m00s [ 75/280] python3-templated-dictionary- 100% | 584.6 KiB/s | 21.0 KiB | 00m00s [ 76/280] usermode-0:1.114-13.fc43.x86_ 100% | 4.8 MiB/s | 186.5 KiB | 00m00s [ 77/280] createrepo_c-libs-0:1.2.1-3.f 100% | 4.2 MiB/s | 111.0 KiB | 00m00s [ 78/280] mock-filesystem-0:6.5-1.fc43. 100% | 371.8 KiB/s | 20.4 KiB | 00m00s [ 79/280] python3-markupsafe-0:3.0.2-6. 100% | 2.1 MiB/s | 31.7 KiB | 00m00s [ 80/280] drpm-0:0.5.2-8.fc42.x86_64 100% | 1.9 MiB/s | 64.3 KiB | 00m00s [ 81/280] libuser-0:0.64-16.fc43.x86_64 100% | 8.3 MiB/s | 400.0 KiB | 00m00s [ 82/280] zchunk-libs-0:1.5.1-3.fc43.x8 100% | 3.3 MiB/s | 51.4 KiB | 00m00s [ 83/280] python3-pycurl-0:7.45.6-5.fc4 100% | 2.0 MiB/s | 152.8 KiB | 00m00s [ 84/280] dash-0:0.5.12-6.fc43.x86_64 100% | 2.6 MiB/s | 97.4 KiB | 00m00s [ 85/280] desktop-file-utils-0:0.28-2.f 100% | 2.6 MiB/s | 68.9 KiB | 00m00s [ 86/280] devscripts-checkbashisms-0:2. 100% | 854.6 KiB/s | 29.1 KiB | 00m00s [ 87/280] rpmlint-0:2.8.0-1.fc43.noarch 100% | 1.9 MiB/s | 365.0 KiB | 00m00s [ 88/280] python3-enchant-0:3.2.2-23.fc 100% | 3.3 MiB/s | 102.9 KiB | 00m00s [ 89/280] python3-pybeam-0:0.8-8.fc43.n 100% | 1.4 MiB/s | 31.5 KiB | 00m00s [ 90/280] python3-file-magic-0:5.46-8.f 100% | 613.8 KiB/s | 19.6 KiB | 00m00s [ 91/280] python3-zstandard-0:0.25.0-1. 100% | 16.5 MiB/s | 692.9 KiB | 00m00s [ 92/280] perl-File-Temp-1:0.231.100-52 100% | 3.8 MiB/s | 59.0 KiB | 00m00s [ 93/280] python3-libs-0:3.14.0-2.fc43. 100% | 10.9 MiB/s | 9.8 MiB | 00m01s [ 94/280] python3-tomli-w-0:1.2.0-6.fc4 100% | 326.7 KiB/s | 23.2 KiB | 00m00s [ 95/280] perl-Getopt-Long-1:2.58-520.f 100% | 4.1 MiB/s | 63.6 KiB | 00m00s [ 96/280] perl-interpreter-4:5.42.0-520 100% | 4.7 MiB/s | 72.4 KiB | 00m00s [ 97/280] perl-Carp-0:1.54-520.fc43.noa 100% | 1.9 MiB/s | 28.7 KiB | 00m00s [ 98/280] perl-Errno-0:1.38-520.fc43.x8 100% | 996.2 KiB/s | 14.9 KiB | 00m00s [ 99/280] perl-Exporter-0:5.79-520.fc43 100% | 2.0 MiB/s | 30.9 KiB | 00m00s [100/280] python3-construct-0:2.10.70-1 100% | 4.3 MiB/s | 160.2 KiB | 00m00s [101/280] perl-Fcntl-0:1.20-520.fc43.x8 100% | 1.9 MiB/s | 29.8 KiB | 00m00s [102/280] perl-File-Path-0:2.18-520.fc4 100% | 2.3 MiB/s | 35.1 KiB | 00m00s [103/280] perl-IO-0:1.55-520.fc43.x86_6 100% | 5.4 MiB/s | 82.2 KiB | 00m00s [104/280] perl-POSIX-0:2.23-520.fc43.x8 100% | 6.4 MiB/s | 97.8 KiB | 00m00s [105/280] perl-PathTools-0:3.94-520.fc4 100% | 5.7 MiB/s | 87.2 KiB | 00m00s [106/280] perl-Scalar-List-Utils-5:1.70 100% | 4.9 MiB/s | 75.0 KiB | 00m00s [107/280] perl-constant-0:1.33-521.fc43 100% | 1.5 MiB/s | 22.8 KiB | 00m00s [108/280] perl-overload-0:1.40-520.fc43 100% | 3.0 MiB/s | 45.6 KiB | 00m00s [109/280] perl-parent-1:0.244-520.fc43. 100% | 987.0 KiB/s | 14.8 KiB | 00m00s [110/280] perl-Pod-Usage-4:2.05-520.fc4 100% | 2.6 MiB/s | 40.5 KiB | 00m00s [111/280] perl-Text-ParseWords-0:3.31-5 100% | 1.1 MiB/s | 16.3 KiB | 00m00s [112/280] perl-base-0:2.27-520.fc43.noa 100% | 1.1 MiB/s | 16.2 KiB | 00m00s [113/280] perl-File-Basename-0:2.86-520 100% | 1.1 MiB/s | 17.2 KiB | 00m00s [114/280] perl-vars-0:1.05-520.fc43.noa 100% | 865.9 KiB/s | 13.0 KiB | 00m00s [115/280] perl-libs-4:5.42.0-520.fc43.x 100% | 77.5 MiB/s | 2.6 MiB | 00m00s [116/280] perl-File-stat-0:1.14-520.fc4 100% | 1.0 MiB/s | 17.1 KiB | 00m00s [117/280] perl-SelectSaver-0:1.02-520.f 100% | 781.5 KiB/s | 11.7 KiB | 00m00s [118/280] perl-Socket-4:2.040-2.fc43.x8 100% | 3.6 MiB/s | 54.9 KiB | 00m00s [119/280] perl-Symbol-0:1.09-520.fc43.n 100% | 946.9 KiB/s | 14.2 KiB | 00m00s [120/280] perl-locale-0:1.13-520.fc43.n 100% | 900.3 KiB/s | 13.5 KiB | 00m00s [121/280] perl-mro-0:1.29-520.fc43.x86_ 100% | 1.9 MiB/s | 29.9 KiB | 00m00s [122/280] perl-overloading-0:0.02-520.f 100% | 860.6 KiB/s | 12.9 KiB | 00m00s [123/280] perl-Pod-Perldoc-0:3.28.01-52 100% | 5.5 MiB/s | 84.3 KiB | 00m00s [124/280] perl-podlators-1:6.0.2-520.fc 100% | 8.4 MiB/s | 128.3 KiB | 00m00s [125/280] perl-DynaLoader-0:1.57-520.fc 100% | 1.7 MiB/s | 26.0 KiB | 00m00s [126/280] perl-Class-Struct-0:0.68-520. 100% | 1.4 MiB/s | 22.1 KiB | 00m00s [127/280] perl-HTTP-Tiny-0:0.090-521.fc 100% | 3.7 MiB/s | 56.3 KiB | 00m00s [128/280] perl-IPC-Open3-0:1.24-520.fc4 100% | 1.6 MiB/s | 23.9 KiB | 00m00s [129/280] groff-base-0:1.23.0-10.fc43.x 100% | 61.1 MiB/s | 1.1 MiB | 00m00s [130/280] perl-Term-ANSIColor-0:5.01-52 100% | 3.1 MiB/s | 47.6 KiB | 00m00s [131/280] perl-Pod-Simple-1:3.47-3.fc43 100% | 12.6 MiB/s | 219.9 KiB | 00m00s [132/280] perl-Term-Cap-0:1.18-520.fc43 100% | 1.4 MiB/s | 21.9 KiB | 00m00s [133/280] perl-IO-Socket-SSL-0:2.095-2. 100% | 14.1 MiB/s | 231.5 KiB | 00m00s [134/280] perl-MIME-Base64-0:3.16-520.f 100% | 1.8 MiB/s | 29.7 KiB | 00m00s [135/280] perl-Net-SSLeay-0:1.94-11.fc4 100% | 22.9 MiB/s | 374.8 KiB | 00m00s [136/280] perl-Time-Local-2:1.350-520.f 100% | 2.2 MiB/s | 34.4 KiB | 00m00s [137/280] perl-Pod-Escapes-1:1.07-520.f 100% | 1.3 MiB/s | 19.8 KiB | 00m00s [138/280] perl-Text-Tabs+Wrap-0:2024.00 100% | 1.4 MiB/s | 21.6 KiB | 00m00s [139/280] perl-if-0:0.61.000-520.fc43.n 100% | 933.6 KiB/s | 14.0 KiB | 00m00s [140/280] perl-IO-Socket-IP-0:0.43-521. 100% | 2.7 MiB/s | 42.1 KiB | 00m00s [141/280] ncurses-0:6.5-7.20250614.fc43 100% | 21.9 MiB/s | 426.2 KiB | 00m00s [142/280] perl-AutoLoader-0:5.74-520.fc 100% | 1.4 MiB/s | 21.2 KiB | 00m00s [143/280] enchant2-0:2.8.12-2.fc43.x86_ 100% | 3.2 MiB/s | 81.9 KiB | 00m00s [144/280] python3-requests-gssapi-0:1.4 100% | 645.6 KiB/s | 34.9 KiB | 00m00s [145/280] hunspell-en-US-0:0.20201207-1 100% | 5.5 MiB/s | 180.3 KiB | 00m00s [146/280] hunspell-0:1.7.2-10.fc43.x86_ 100% | 9.5 MiB/s | 488.2 KiB | 00m00s [147/280] hunspell-filesystem-0:1.7.2-1 100% | 244.2 KiB/s | 7.6 KiB | 00m00s [148/280] python3-gobject-base-0:3.54.5 100% | 3.0 MiB/s | 399.4 KiB | 00m00s [149/280] less-0:679-2.fc43.x86_64 100% | 12.7 MiB/s | 195.3 KiB | 00m00s [150/280] libfido2-0:1.16.0-3.fc43.x86_ 100% | 6.4 MiB/s | 98.5 KiB | 00m00s [151/280] openssh-clients-0:10.0p1-5.fc 100% | 31.7 MiB/s | 746.7 KiB | 00m00s [152/280] openssh-0:10.0p1-5.fc43.x86_6 100% | 20.7 MiB/s | 339.6 KiB | 00m00s [153/280] libcbor-0:0.12.0-6.fc43.x86_6 100% | 2.2 MiB/s | 33.5 KiB | 00m00s [154/280] perl-Getopt-Std-0:1.14-520.fc 100% | 1.0 MiB/s | 15.7 KiB | 00m00s [155/280] perl-Encode-4:3.21-520.fc43.x 100% | 58.4 MiB/s | 1.1 MiB | 00m00s [156/280] perl-Storable-1:3.37-521.fc43 100% | 6.4 MiB/s | 98.5 KiB | 00m00s [157/280] git-core-0:2.51.1-1.fc43.x86_ 100% | 41.8 MiB/s | 5.0 MiB | 00m00s [158/280] perl-Data-Dumper-0:2.191-521. 100% | 3.7 MiB/s | 56.3 KiB | 00m00s [159/280] perl-MIME-Base32-0:1.303-24.f 100% | 1.3 MiB/s | 20.4 KiB | 00m00s [160/280] perl-libnet-0:3.15-521.fc43.n 100% | 8.4 MiB/s | 128.3 KiB | 00m00s [161/280] perl-B-0:1.89-520.fc43.x86_64 100% | 10.8 MiB/s | 177.7 KiB | 00m00s [162/280] perl-Digest-MD5-0:2.59-520.fc 100% | 2.3 MiB/s | 35.8 KiB | 00m00s [163/280] perl-URI-0:5.34-2.fc43.noarch 100% | 2.3 MiB/s | 149.3 KiB | 00m00s [164/280] perl-FileHandle-0:2.05-520.fc 100% | 1.0 MiB/s | 15.5 KiB | 00m00s [165/280] perl-Digest-0:1.20-520.fc43.n 100% | 1.6 MiB/s | 24.8 KiB | 00m00s [166/280] libedit-0:3.1-57.20251016cvs. 100% | 1.7 MiB/s | 105.2 KiB | 00m00s [167/280] bodhi-client-0:25.11.1-1.fc43 100% | 1.5 MiB/s | 95.6 KiB | 00m00s [168/280] glib2-0:2.86.1-5.fc43.x86_64 100% | 43.2 MiB/s | 3.1 MiB | 00m00s [169/280] python3-ogr-0:0.57.0-1.202511 100% | 45.8 MiB/s | 234.4 KiB | 00m00s [170/280] fakeroot-libs-0:1.37.1-3.fc43 100% | 2.6 MiB/s | 39.2 KiB | 00m00s [171/280] python3-authlib-0:1.4.0-8.fc4 100% | 13.1 MiB/s | 497.1 KiB | 00m00s [172/280] python3-httpx-0:0.28.1-9.fc43 100% | 7.7 MiB/s | 213.7 KiB | 00m00s [173/280] python3-pyforgejo-0:2.0.4-5.f 100% | 17.3 MiB/s | 689.1 KiB | 00m00s [174/280] python3-pygithub-0:2.7.0-3.fc 100% | 15.7 MiB/s | 641.3 KiB | 00m00s [175/280] python3-anyio-0:4.8.0-7.fc43. 100% | 8.3 MiB/s | 271.1 KiB | 00m00s [176/280] python3-certifi-0:2025.07.09- 100% | 517.5 KiB/s | 15.0 KiB | 00m00s [177/280] python3-httpcore-0:1.0.9-5.fc 100% | 6.4 MiB/s | 157.5 KiB | 00m00s [178/280] python3-dotenv-0:1.1.0-5.fc43 100% | 2.4 MiB/s | 54.8 KiB | 00m00s [179/280] python3-jwt+crypto-0:2.8.0-7. 100% | 268.7 KiB/s | 8.9 KiB | 00m00s [180/280] python3-jwt-0:2.8.0-7.fc43.no 100% | 1.8 MiB/s | 70.2 KiB | 00m00s [181/280] python3-pynacl-0:1.5.0-18.fc4 100% | 4.5 MiB/s | 156.2 KiB | 00m00s [182/280] python3-sniffio-0:1.3.1-8.fc4 100% | 1.2 MiB/s | 27.5 KiB | 00m00s [183/280] libsodium-0:1.0.20-6.fc43.x86 100% | 10.7 MiB/s | 175.7 KiB | 00m00s [184/280] python3-specfile-0:0.37.1.pos 100% | 41.5 MiB/s | 169.8 KiB | 00m00s [185/280] python3-h11-0:0.16.0-5.fc43.n 100% | 3.0 MiB/s | 81.0 KiB | 00m00s [186/280] libxslt-0:1.1.43-5.fc43.x86_6 100% | 12.0 MiB/s | 184.4 KiB | 00m00s [187/280] python3-lxml-0:6.0.1-2.fc43.x 100% | 48.8 MiB/s | 1.6 MiB | 00m00s [188/280] python3-filelock-0:3.15.4-10. 100% | 1.3 MiB/s | 44.8 KiB | 00m00s [189/280] python3-copr-0:2.4-1.fc43.noa 100% | 1.7 MiB/s | 95.5 KiB | 00m00s [190/280] python3-requests-toolbelt-0:1 100% | 3.0 MiB/s | 118.6 KiB | 00m00s [191/280] python3-fedora-distro-aliases 100% | 539.9 KiB/s | 29.2 KiB | 00m00s [192/280] python3-deprecated-0:1.3.1-1. 100% | 489.0 KiB/s | 26.9 KiB | 00m00s [193/280] osc-0:1.22.0-465.2.1.fc43.noa 100% | 6.7 MiB/s | 1.1 MiB | 00m00s [194/280] python3-wrapt-0:1.17.1-6.fc43 100% | 2.1 MiB/s | 74.8 KiB | 00m00s [195/280] json-glib-0:1.10.8-1.fc43.x86 100% | 11.2 MiB/s | 172.6 KiB | 00m00s [196/280] libappstream-glib-0:0.8.3-4.f 100% | 9.0 MiB/s | 404.4 KiB | 00m00s [197/280] python3-gitlab-0:7.0.0-1.fc43 100% | 6.0 MiB/s | 344.5 KiB | 00m00s [198/280] python3-pyxdg-0:0.27-19.fc43. 100% | 2.3 MiB/s | 133.4 KiB | 00m00s [199/280] python3-ruamel-yaml-clib-0:0. 100% | 7.1 MiB/s | 108.7 KiB | 00m00s [200/280] rpmlint-fedora-license-data-0 100% | 562.7 KiB/s | 31.5 KiB | 00m00s [201/280] python3-ruamel-yaml-0:0.18.16 100% | 5.6 MiB/s | 322.2 KiB | 00m00s [202/280] distribution-gpg-keys-0:1.114 100% | 19.6 MiB/s | 724.2 KiB | 00m00s [203/280] mock-core-configs-0:43.2-1.fc 100% | 3.0 MiB/s | 180.5 KiB | 00m00s [204/280] dbus-1:1.16.0-4.fc43.x86_64 100% | 498.5 KiB/s | 7.5 KiB | 00m00s [205/280] procps-ng-0:4.0.4-7.fc43.1.x8 100% | 6.4 MiB/s | 364.4 KiB | 00m00s [206/280] libseccomp-0:2.6.0-2.fc43.x86 100% | 4.9 MiB/s | 75.7 KiB | 00m00s [207/280] systemd-pam-0:258.2-1.fc43.x8 100% | 6.2 MiB/s | 419.8 KiB | 00m00s [208/280] systemd-shared-0:258.2-1.fc43 100% | 27.8 MiB/s | 1.8 MiB | 00m00s [209/280] dbus-broker-0:37-2.fc43.x86_6 100% | 10.6 MiB/s | 173.8 KiB | 00m00s [210/280] dbus-common-1:1.16.0-4.fc43.n 100% | 945.0 KiB/s | 14.2 KiB | 00m00s [211/280] pam-0:1.7.1-3.fc43.x86_64 100% | 31.5 MiB/s | 548.7 KiB | 00m00s [212/280] authselect-0:1.6.2-1.fc43.x86 100% | 12.7 MiB/s | 195.4 KiB | 00m00s [213/280] libnsl2-0:2.0.1-4.fc43.x86_64 100% | 1.9 MiB/s | 29.4 KiB | 00m00s [214/280] libpwquality-0:1.4.5-14.fc43. 100% | 7.7 MiB/s | 118.0 KiB | 00m00s [215/280] systemd-container-0:258.2-1.f 100% | 10.7 MiB/s | 884.7 KiB | 00m00s [216/280] authselect-libs-0:1.6.2-1.fc4 100% | 15.2 MiB/s | 232.7 KiB | 00m00s [217/280] cracklib-0:2.9.11-8.fc43.x86_ 100% | 5.9 MiB/s | 91.4 KiB | 00m00s [218/280] python3-annotated-types-0:0.7 100% | 563.5 KiB/s | 31.6 KiB | 00m00s [219/280] python3-pydantic-0:2.12.4-1.f 100% | 9.2 MiB/s | 1.0 MiB | 00m00s [220/280] python3-pydantic-core-0:2.41. 100% | 27.5 MiB/s | 1.8 MiB | 00m00s [221/280] gdbm-1:1.23-10.fc43.x86_64 100% | 9.8 MiB/s | 150.8 KiB | 00m00s [222/280] python3-typing-inspection-0:0 100% | 621.0 KiB/s | 32.9 KiB | 00m00s [223/280] systemd-0:258.2-1.fc43.x86_64 100% | 11.0 MiB/s | 4.2 MiB | 00m00s [224/280] shared-mime-info-0:2.4-2.fc43 100% | 24.4 MiB/s | 399.7 KiB | 00m00s [225/280] libtirpc-0:1.3.7-1.fc43.x86_6 100% | 1.8 MiB/s | 95.3 KiB | 00m00s [226/280] gdk-pixbuf2-0:2.44.4-1.fc43.x 100% | 7.6 MiB/s | 484.9 KiB | 00m00s [227/280] dnf-data-0:4.24.0-1.fc43.noar 100% | 718.8 KiB/s | 38.1 KiB | 00m00s [228/280] python3-dnf-0:4.24.0-1.fc43.n 100% | 10.1 MiB/s | 639.4 KiB | 00m00s [229/280] python3-hawkey-0:0.75.0-1.fc4 100% | 1.9 MiB/s | 102.7 KiB | 00m00s [230/280] librepo-0:1.20.0-4.fc43.x86_6 100% | 6.6 MiB/s | 101.3 KiB | 00m00s [231/280] python3-libdnf-0:0.75.0-1.fc4 100% | 14.2 MiB/s | 844.7 KiB | 00m00s [232/280] libdnf-0:0.75.0-1.fc43.x86_64 100% | 11.3 MiB/s | 727.8 KiB | 00m00s [233/280] fontconfig-0:2.17.0-3.fc43.x8 100% | 16.6 MiB/s | 272.2 KiB | 00m00s [234/280] lcms2-0:2.16-6.fc43.x86_64 100% | 11.9 MiB/s | 182.8 KiB | 00m00s [235/280] libsolv-0:0.7.35-1.fc43.x86_6 100% | 7.3 MiB/s | 447.1 KiB | 00m00s [236/280] glycin-libs-0:2.0.4-1.fc43.x8 100% | 25.3 MiB/s | 1.6 MiB | 00m00s [237/280] default-fonts-core-sans-0:4.2 100% | 1.9 MiB/s | 29.9 KiB | 00m00s [238/280] fonts-filesystem-1:2.0.5-23.f 100% | 578.5 KiB/s | 8.7 KiB | 00m00s [239/280] freetype-0:2.13.3-3.fc43.x86_ 100% | 25.2 MiB/s | 412.1 KiB | 00m00s [240/280] xml-common-0:0.6.3-67.fc43.no 100% | 2.0 MiB/s | 31.0 KiB | 00m00s [241/280] bubblewrap-0:0.11.0-2.fc43.x8 100% | 4.3 MiB/s | 65.5 KiB | 00m00s [242/280] libheif-0:1.20.2-6.fc43.x86_6 100% | 35.3 MiB/s | 578.1 KiB | 00m00s [243/280] cairo-0:1.18.4-2.fc43.x86_64 100% | 39.6 MiB/s | 729.3 KiB | 00m00s [244/280] libjxl-1:0.11.1-6.fc43.x86_64 100% | 60.4 MiB/s | 1.1 MiB | 00m00s [245/280] librsvg2-0:2.61.0-2.fc43.x86_ 100% | 80.6 MiB/s | 1.9 MiB | 00m00s [246/280] abattis-cantarell-vf-fonts-0: 100% | 7.8 MiB/s | 120.1 KiB | 00m00s [247/280] glycin-loaders-0:2.0.4-1.fc43 100% | 24.4 MiB/s | 2.8 MiB | 00m00s [248/280] harfbuzz-0:11.5.1-1.fc43.x86_ 100% | 49.1 MiB/s | 1.1 MiB | 00m00s [249/280] libpng-2:1.6.50-2.fc43.x86_64 100% | 8.0 MiB/s | 123.0 KiB | 00m00s [250/280] libXext-0:1.3.6-4.fc43.x86_64 100% | 2.5 MiB/s | 39.1 KiB | 00m00s [251/280] libX11-0:1.8.12-1.fc43.x86_64 100% | 37.7 MiB/s | 655.6 KiB | 00m00s [252/280] libxcb-0:1.17.0-6.fc43.x86_64 100% | 14.5 MiB/s | 237.7 KiB | 00m00s [253/280] lzo-0:2.10-15.fc43.x86_64 100% | 4.5 MiB/s | 69.4 KiB | 00m00s [254/280] pixman-0:0.46.2-2.fc43.x86_64 100% | 17.9 MiB/s | 292.5 KiB | 00m00s [255/280] libXrender-0:0.9.12-3.fc43.x8 100% | 559.9 KiB/s | 26.9 KiB | 00m00s [256/280] libjpeg-turbo-0:3.1.2-1.fc43. 100% | 15.4 MiB/s | 236.8 KiB | 00m00s [257/280] libaom-0:3.13.1-1.fc43.x86_64 100% | 51.5 MiB/s | 1.9 MiB | 00m00s [258/280] libwebp-0:1.6.0-2.fc43.x86_64 100% | 19.8 MiB/s | 324.2 KiB | 00m00s [259/280] openjpeg-0:2.5.4-1.fc43.x86_6 100% | 12.5 MiB/s | 192.2 KiB | 00m00s [260/280] noopenh264-0:2.6.0-2.fc43.x86 100% | 741.5 KiB/s | 22.2 KiB | 00m00s [261/280] libopenjph-0:0.22.0-2.fc43.x8 100% | 2.8 MiB/s | 154.4 KiB | 00m00s [262/280] rav1e-libs-0:0.7.1-8.fc43.x86 100% | 54.4 MiB/s | 1.0 MiB | 00m00s [263/280] svt-av1-libs-0:3.1.2-1.fc43.x 100% | 79.8 MiB/s | 2.0 MiB | 00m00s [264/280] cairo-gobject-0:1.18.4-2.fc43 100% | 1.1 MiB/s | 16.9 KiB | 00m00s [265/280] pango-0:1.57.0-1.fc43.x86_64 100% | 21.6 MiB/s | 353.4 KiB | 00m00s [266/280] graphite2-0:1.3.14-19.fc43.x8 100% | 6.2 MiB/s | 95.6 KiB | 00m00s [267/280] libX11-common-0:1.8.12-1.fc43 100% | 11.5 MiB/s | 175.9 KiB | 00m00s [268/280] libXau-0:1.0.12-3.fc43.x86_64 100% | 2.2 MiB/s | 33.4 KiB | 00m00s [269/280] libvmaf-0:3.0.0-4.fc43.x86_64 100% | 12.8 MiB/s | 196.6 KiB | 00m00s [270/280] highway-0:1.2.0-5.fc42.x86_64 100% | 8.9 MiB/s | 625.6 KiB | 00m00s [271/280] fribidi-0:1.0.16-3.fc43.x86_6 100% | 3.5 MiB/s | 53.3 KiB | 00m00s [272/280] libXft-0:2.3.8-9.fc43.x86_64 100% | 4.7 MiB/s | 72.2 KiB | 00m00s [273/280] libthai-0:0.1.29-11.fc43.x86_ 100% | 10.8 MiB/s | 210.3 KiB | 00m00s [274/280] libdatrie-0:0.2.13-12.fc43.x8 100% | 2.1 MiB/s | 32.0 KiB | 00m00s [275/280] libdnf5-0:5.2.17.0-2.fc43.x86 100% | 60.5 MiB/s | 1.3 MiB | 00m00s [276/280] fmt-0:11.2.0-3.fc43.x86_64 100% | 6.1 MiB/s | 100.2 KiB | 00m00s [277/280] libdav1d-0:1.5.2-1.fc43.x86_6 100% | 9.7 MiB/s | 637.4 KiB | 00m00s [278/280] google-noto-fonts-common-0:20 100% | 326.7 KiB/s | 17.3 KiB | 00m00s [279/280] google-noto-sans-vf-fonts-0:2 100% | 10.5 MiB/s | 614.5 KiB | 00m00s [280/280] systemd-rpm-macros-0:258.2-1. 100% | 309.1 KiB/s | 16.4 KiB | 00m00s -------------------------------------------------------------------------------- [280/280] Total 100% | 26.4 MiB/s | 95.8 MiB | 00m04s Running transaction [ 1/282] Verify package files 100% | 851.0 B/s | 280.0 B | 00m00s [ 2/282] Prepare transaction 100% | 2.7 KiB/s | 280.0 B | 00m00s [ 3/282] Installing glib2-0:2.86.1-5.f 100% | 309.5 MiB/s | 14.9 MiB | 00m00s [ 4/282] Installing libseccomp-0:2.6.0 100% | 221.4 MiB/s | 226.8 KiB | 00m00s [ 5/282] Installing expat-0:2.7.2-1.fc 100% | 24.5 MiB/s | 300.7 KiB | 00m00s [ 6/282] Installing fonts-filesystem-1 100% | 0.0 B/s | 788.0 B | 00m00s [ 7/282] Installing zchunk-libs-0:1.5. 100% | 96.1 MiB/s | 98.5 KiB | 00m00s [ 8/282] Installing libsolv-0:0.7.35-1 100% | 316.8 MiB/s | 973.2 KiB | 00m00s [ 9/282] Installing libyaml-0:0.2.5-17 100% | 132.8 MiB/s | 136.0 KiB | 00m00s [ 10/282] Installing libmodulemd-0:2.15 100% | 53.8 MiB/s | 716.1 KiB | 00m00s [ 11/282] Installing librepo-0:1.20.0-4 100% | 244.4 MiB/s | 250.3 KiB | 00m00s [ 12/282] Installing libdnf-0:0.75.0-1. 100% | 317.5 MiB/s | 2.2 MiB | 00m00s [ 13/282] Installing systemd-shared-0:2 100% | 380.6 MiB/s | 4.9 MiB | 00m00s [ 14/282] Installing shared-mime-info-0 100% | 112.6 MiB/s | 2.6 MiB | 00m00s [ 15/282] Installing libdav1d-0:1.5.2-1 100% | 423.3 MiB/s | 1.7 MiB | 00m00s [ 16/282] Installing libpng-2:1.6.50-2. 100% | 233.4 MiB/s | 239.0 KiB | 00m00s [ 17/282] Installing libtirpc-0:1.3.7-1 100% | 197.7 MiB/s | 202.4 KiB | 00m00s [ 18/282] Installing hunspell-filesyste 100% | 75.8 KiB/s | 388.0 B | 00m00s [ 19/282] Installing mock-filesystem-0: 100% | 4.7 MiB/s | 19.1 KiB | 00m00s [ 20/282] Installing tzdata-0:2025b-3.f 100% | 70.1 MiB/s | 1.9 MiB | 00m00s [ 21/282] Installing emacs-filesystem-1 100% | 0.0 B/s | 544.0 B | 00m00s [ 22/282] Installing desktop-file-utils 100% | 18.1 MiB/s | 222.2 KiB | 00m00s [ 23/282] Installing hunspell-en-US-0:0 100% | 272.5 MiB/s | 558.1 KiB | 00m00s [ 24/282] Installing hunspell-0:1.7.2-1 100% | 84.7 MiB/s | 1.4 MiB | 00m00s [ 25/282] Installing enchant2-0:2.8.12- 100% | 17.0 MiB/s | 209.5 KiB | 00m00s [ 26/282] Installing libnsl2-0:2.0.1-4. 100% | 0.0 B/s | 59.0 KiB | 00m00s [ 27/282] Installing abattis-cantarell- 100% | 189.9 MiB/s | 194.4 KiB | 00m00s [ 28/282] Installing libcomps-0:0.1.23- 100% | 201.7 MiB/s | 206.6 KiB | 00m00s [ 29/282] Installing libuser-0:0.64-16. 100% | 106.2 MiB/s | 1.9 MiB | 00m00s [ 30/282] Installing json-glib-0:1.10.8 100% | 147.6 MiB/s | 604.4 KiB | 00m00s [ 31/282] Installing google-noto-fonts- 100% | 0.0 B/s | 18.5 KiB | 00m00s [ 32/282] Installing google-noto-sans-v 100% | 347.8 MiB/s | 1.4 MiB | 00m00s [ 33/282] Installing default-fonts-core 100% | 17.8 MiB/s | 18.2 KiB | 00m00s [ 34/282] Installing fmt-0:11.2.0-3.fc4 100% | 262.0 MiB/s | 268.3 KiB | 00m00s [ 35/282] Installing libdnf5-0:5.2.17.0 100% | 383.1 MiB/s | 3.8 MiB | 00m00s >>> [RPM] /etc/dnf/dnf.conf created as /etc/dnf/dnf.conf.rpmnew [ 36/282] Installing dnf-data-0:4.24.0- 100% | 40.8 MiB/s | 41.8 KiB | 00m00s [ 37/282] Installing libdatrie-0:0.2.13 100% | 0.0 B/s | 54.9 KiB | 00m00s [ 38/282] Installing libthai-0:0.1.29-1 100% | 383.4 MiB/s | 785.2 KiB | 00m00s [ 39/282] Installing fribidi-0:1.0.16-3 100% | 15.7 MiB/s | 192.8 KiB | 00m00s [ 40/282] Installing libvmaf-0:3.0.0-4. 100% | 404.5 MiB/s | 828.4 KiB | 00m00s [ 41/282] Installing libaom-0:3.13.1-1. 100% | 457.4 MiB/s | 5.0 MiB | 00m00s [ 42/282] Installing libXau-0:1.0.12-3. 100% | 72.7 MiB/s | 74.5 KiB | 00m00s [ 43/282] Installing libxcb-0:1.17.0-6. 100% | 270.0 MiB/s | 1.1 MiB | 00m00s [ 44/282] Installing libX11-common-0:1. 100% | 169.7 MiB/s | 1.2 MiB | 00m00s [ 45/282] Installing libX11-0:1.8.12-1. 100% | 427.2 MiB/s | 1.3 MiB | 00m00s [ 46/282] Installing libXrender-0:0.9.1 100% | 0.0 B/s | 47.3 KiB | 00m00s [ 47/282] Installing libXext-0:1.3.6-4. 100% | 89.1 MiB/s | 91.2 KiB | 00m00s [ 48/282] Installing graphite2-0:1.3.14 100% | 15.8 MiB/s | 193.9 KiB | 00m00s [ 49/282] Installing harfbuzz-0:11.5.1- 100% | 404.0 MiB/s | 2.8 MiB | 00m00s [ 50/282] Installing freetype-0:2.13.3- 100% | 277.3 MiB/s | 851.9 KiB | 00m00s [ 51/282] Installing highway-0:1.2.0-5. 100% | 544.3 MiB/s | 4.4 MiB | 00m00s [ 52/282] Installing libjxl-1:0.11.1-6. 100% | 436.1 MiB/s | 3.1 MiB | 00m00s [ 53/282] Installing svt-av1-libs-0:3.1 100% | 397.8 MiB/s | 5.6 MiB | 00m00s [ 54/282] Installing rav1e-libs-0:0.7.1 100% | 427.4 MiB/s | 3.0 MiB | 00m00s [ 55/282] Installing openjpeg-0:2.5.4-1 100% | 223.8 MiB/s | 458.2 KiB | 00m00s [ 56/282] Installing noopenh264-0:2.6.0 100% | 0.0 B/s | 40.7 KiB | 00m00s [ 57/282] Installing libwebp-0:1.6.0-2. 100% | 312.7 MiB/s | 960.7 KiB | 00m00s [ 58/282] Installing libopenjph-0:0.22. 100% | 456.3 MiB/s | 467.3 KiB | 00m00s [ 59/282] Installing libjpeg-turbo-0:3. 100% | 393.8 MiB/s | 806.6 KiB | 00m00s [ 60/282] Installing libheif-0:1.20.2-6 100% | 388.4 MiB/s | 1.6 MiB | 00m00s [ 61/282] Installing pixman-0:0.46.2-2. 100% | 347.4 MiB/s | 711.4 KiB | 00m00s [ 62/282] Installing lzo-0:2.10-15.fc43 100% | 176.3 MiB/s | 180.5 KiB | 00m00s [ 63/282] Installing bubblewrap-0:0.11. 100% | 8.4 MiB/s | 137.2 KiB | 00m00s [ 64/282] Installing xml-common-0:0.6.3 100% | 79.2 MiB/s | 81.1 KiB | 00m00s [ 65/282] Installing fontconfig-0:2.17. 100% | 761.0 KiB/s | 785.3 KiB | 00m01s [ 66/282] Installing cairo-0:1.18.4-2.f 100% | 354.4 MiB/s | 1.8 MiB | 00m00s [ 67/282] Installing cairo-gobject-0:1. 100% | 0.0 B/s | 32.0 KiB | 00m00s [ 68/282] Installing libXft-0:2.3.8-9.f 100% | 162.0 MiB/s | 165.9 KiB | 00m00s [ 69/282] Installing pango-0:1.57.0-1.f 100% | 66.1 MiB/s | 1.0 MiB | 00m00s [ 70/282] Installing lcms2-0:2.16-6.fc4 100% | 212.6 MiB/s | 435.3 KiB | 00m00s [ 71/282] Installing librsvg2-0:2.61.0- 100% | 384.5 MiB/s | 5.0 MiB | 00m00s [ 72/282] Installing glycin-loaders-0:2 100% | 505.5 MiB/s | 13.1 MiB | 00m00s [ 73/282] Installing glycin-libs-0:2.0. 100% | 442.0 MiB/s | 4.4 MiB | 00m00s [ 74/282] Installing gdk-pixbuf2-0:2.44 100% | 126.2 MiB/s | 2.5 MiB | 00m00s [ 75/282] Installing libappstream-glib- 100% | 87.8 MiB/s | 1.4 MiB | 00m00s [ 76/282] Installing gdbm-1:1.23-10.fc4 100% | 34.9 MiB/s | 465.2 KiB | 00m00s [ 77/282] Installing cracklib-0:2.9.11- 100% | 16.6 MiB/s | 237.7 KiB | 00m00s [ 78/282] Installing libpwquality-0:1.4 100% | 27.4 MiB/s | 421.6 KiB | 00m00s [ 79/282] Installing pam-0:1.7.1-3.fc43 100% | 80.1 MiB/s | 1.7 MiB | 00m00s [ 80/282] Installing usermode-0:1.114-1 100% | 54.9 MiB/s | 843.6 KiB | 00m00s [ 81/282] Installing authselect-libs-0: 100% | 58.7 MiB/s | 901.9 KiB | 00m00s >>> Running sysusers scriptlet: dbus-common-1:1.16.0-4.fc43.noarch >>> Finished sysusers scriptlet: dbus-common-1:1.16.0-4.fc43.noarch >>> Scriptlet output: >>> Creating group 'dbus' with GID 81. >>> Creating user 'dbus' (System Message Bus) with UID 81 and GID 81. >>> [ 82/282] Installing dbus-common-1:1.16 100% | 1.5 MiB/s | 13.6 KiB | 00m00s [ 83/282] Installing dbus-broker-0:37-2 100% | 21.1 MiB/s | 389.8 KiB | 00m00s [ 84/282] Installing dbus-1:1.16.0-4.fc 100% | 9.3 KiB/s | 124.0 B | 00m00s >>> Running sysusers scriptlet: systemd-0:258.2-1.fc43.x86_64 >>> Finished sysusers scriptlet: systemd-0:258.2-1.fc43.x86_64 >>> Scriptlet output: >>> Creating group 'systemd-journal' with GID 190. >>> >>> Running sysusers scriptlet: systemd-0:258.2-1.fc43.x86_64 >>> Finished sysusers scriptlet: systemd-0:258.2-1.fc43.x86_64 >>> Scriptlet output: >>> Creating group 'systemd-oom' with GID 999. >>> Creating user 'systemd-oom' (systemd Userspace OOM Killer) with UID 999 and >>> [ 85/282] Installing systemd-0:258.2-1. 100% | 99.6 MiB/s | 12.8 MiB | 00m00s [ 86/282] Installing systemd-pam-0:258. 100% | 289.6 MiB/s | 1.2 MiB | 00m00s [ 87/282] Installing systemd-container- 100% | 118.9 MiB/s | 2.3 MiB | 00m00s [ 88/282] Installing procps-ng-0:4.0.4- 100% | 67.4 MiB/s | 1.0 MiB | 00m00s [ 89/282] Installing distribution-gpg-k 100% | 98.8 MiB/s | 1.0 MiB | 00m00s [ 90/282] Installing libxslt-0:1.1.43-5 100% | 34.8 MiB/s | 463.2 KiB | 00m00s [ 91/282] Installing libsodium-0:1.0.20 100% | 381.0 MiB/s | 390.2 KiB | 00m00s [ 92/282] Installing fakeroot-libs-0:1. 100% | 123.0 MiB/s | 125.9 KiB | 00m00s [ 93/282] Installing fakeroot-0:1.37.1- 100% | 7.2 MiB/s | 155.4 KiB | 00m00s [ 94/282] Installing libedit-0:3.1-57.2 100% | 236.2 MiB/s | 241.9 KiB | 00m00s [ 95/282] Installing libcbor-0:0.12.0-6 100% | 77.3 MiB/s | 79.2 KiB | 00m00s [ 96/282] Installing libfido2-0:1.16.0- 100% | 234.4 MiB/s | 240.0 KiB | 00m00s [ 97/282] Installing openssh-0:10.0p1-5 100% | 92.8 MiB/s | 1.4 MiB | 00m00s [ 98/282] Installing openssh-clients-0: 100% | 84.1 MiB/s | 2.6 MiB | 00m00s [ 99/282] Installing less-0:679-2.fc43. 100% | 30.8 MiB/s | 409.4 KiB | 00m00s [100/282] Installing git-core-0:2.51.1- 100% | 394.7 MiB/s | 23.7 MiB | 00m00s [101/282] Installing ncurses-0:6.5-7.20 100% | 30.1 MiB/s | 616.4 KiB | 00m00s [102/282] Installing groff-base-0:1.23. 100% | 128.2 MiB/s | 3.8 MiB | 00m00s [103/282] Installing perl-Digest-0:1.20 100% | 36.2 MiB/s | 37.1 KiB | 00m00s [104/282] Installing perl-Digest-MD5-0: 100% | 60.1 MiB/s | 61.6 KiB | 00m00s [105/282] Installing perl-FileHandle-0: 100% | 0.0 B/s | 9.8 KiB | 00m00s [106/282] Installing perl-B-0:1.89-520. 100% | 246.4 MiB/s | 504.7 KiB | 00m00s [107/282] Installing perl-libnet-0:3.15 100% | 287.8 MiB/s | 294.7 KiB | 00m00s [108/282] Installing perl-Data-Dumper-0 100% | 114.8 MiB/s | 117.5 KiB | 00m00s [109/282] Installing perl-MIME-Base32-0 100% | 31.4 MiB/s | 32.2 KiB | 00m00s [110/282] Installing perl-URI-0:5.34-2. 100% | 137.6 MiB/s | 281.8 KiB | 00m00s [111/282] Installing perl-AutoLoader-0: 100% | 0.0 B/s | 21.0 KiB | 00m00s [112/282] Installing perl-IO-Socket-IP- 100% | 99.8 MiB/s | 102.2 KiB | 00m00s [113/282] Installing perl-IO-Socket-SSL 100% | 350.9 MiB/s | 718.6 KiB | 00m00s [114/282] Installing perl-Net-SSLeay-0: 100% | 271.7 MiB/s | 1.4 MiB | 00m00s [115/282] Installing perl-if-0:0.61.000 100% | 0.0 B/s | 6.2 KiB | 00m00s [116/282] Installing perl-Text-Tabs+Wra 100% | 0.0 B/s | 23.9 KiB | 00m00s [117/282] Installing perl-Pod-Escapes-1 100% | 0.0 B/s | 25.9 KiB | 00m00s [118/282] Installing perl-Time-Local-2: 100% | 0.0 B/s | 70.6 KiB | 00m00s [119/282] Installing perl-locale-0:1.13 100% | 0.0 B/s | 6.5 KiB | 00m00s [120/282] Installing perl-File-Path-0:2 100% | 0.0 B/s | 64.5 KiB | 00m00s [121/282] Installing perl-File-Temp-1:0 100% | 160.2 MiB/s | 164.1 KiB | 00m00s [122/282] Installing perl-HTTP-Tiny-0:0 100% | 152.8 MiB/s | 156.4 KiB | 00m00s [123/282] Installing perl-Pod-Simple-1: 100% | 280.7 MiB/s | 574.9 KiB | 00m00s [124/282] Installing perl-Term-Cap-0:1. 100% | 0.0 B/s | 30.6 KiB | 00m00s [125/282] Installing perl-Term-ANSIColo 100% | 96.9 MiB/s | 99.2 KiB | 00m00s [126/282] Installing perl-IPC-Open3-0:1 100% | 0.0 B/s | 28.5 KiB | 00m00s [127/282] Installing perl-Class-Struct- 100% | 0.0 B/s | 25.9 KiB | 00m00s [128/282] Installing perl-POSIX-0:2.23- 100% | 227.2 MiB/s | 232.6 KiB | 00m00s [129/282] Installing perl-Pod-Perldoc-0 100% | 12.7 MiB/s | 169.2 KiB | 00m00s [130/282] Installing perl-podlators-1:6 100% | 26.2 MiB/s | 321.4 KiB | 00m00s [131/282] Installing perl-File-stat-0:1 100% | 0.0 B/s | 13.1 KiB | 00m00s [132/282] Installing perl-Symbol-0:1.09 100% | 0.0 B/s | 7.3 KiB | 00m00s [133/282] Installing perl-SelectSaver-0 100% | 0.0 B/s | 2.6 KiB | 00m00s [134/282] Installing perl-Socket-4:2.04 100% | 119.4 MiB/s | 122.3 KiB | 00m00s [135/282] Installing perl-Pod-Usage-4:2 100% | 7.2 MiB/s | 87.9 KiB | 00m00s [136/282] Installing perl-IO-0:1.55-520 100% | 148.1 MiB/s | 151.7 KiB | 00m00s [137/282] Installing perl-overloading-0 100% | 0.0 B/s | 5.6 KiB | 00m00s [138/282] Installing perl-mro-0:1.29-52 100% | 0.0 B/s | 42.7 KiB | 00m00s [139/282] Installing perl-base-0:2.27-5 100% | 0.0 B/s | 13.0 KiB | 00m00s [140/282] Installing perl-Text-ParseWor 100% | 0.0 B/s | 14.6 KiB | 00m00s [141/282] Installing perl-Fcntl-0:1.20- 100% | 0.0 B/s | 49.9 KiB | 00m00s [142/282] Installing perl-Getopt-Long-1 100% | 143.8 MiB/s | 147.2 KiB | 00m00s [143/282] Installing perl-Storable-1:3. 100% | 227.4 MiB/s | 232.8 KiB | 00m00s [144/282] Installing perl-Getopt-Std-0: 100% | 0.0 B/s | 11.8 KiB | 00m00s [145/282] Installing perl-MIME-Base64-0 100% | 43.2 MiB/s | 44.3 KiB | 00m00s [146/282] Installing perl-overload-0:1. 100% | 0.0 B/s | 72.0 KiB | 00m00s [147/282] Installing perl-vars-0:1.05-5 100% | 0.0 B/s | 4.3 KiB | 00m00s [148/282] Installing perl-File-Basename 100% | 0.0 B/s | 14.6 KiB | 00m00s [149/282] Installing perl-parent-1:0.24 100% | 0.0 B/s | 11.0 KiB | 00m00s [150/282] Installing perl-constant-0:1. 100% | 0.0 B/s | 27.4 KiB | 00m00s [151/282] Installing perl-Scalar-List-U 100% | 36.3 MiB/s | 148.7 KiB | 00m00s [152/282] Installing perl-Errno-0:1.38- 100% | 0.0 B/s | 8.8 KiB | 00m00s [153/282] Installing perl-Encode-4:3.21 100% | 223.5 MiB/s | 4.7 MiB | 00m00s [154/282] Installing perl-DynaLoader-0: 100% | 0.0 B/s | 32.5 KiB | 00m00s [155/282] Installing perl-PathTools-0:3 100% | 180.2 MiB/s | 184.6 KiB | 00m00s [156/282] Installing perl-Exporter-0:5. 100% | 0.0 B/s | 55.6 KiB | 00m00s [157/282] Installing perl-Carp-0:1.54-5 100% | 23.3 MiB/s | 47.7 KiB | 00m00s [158/282] Installing perl-libs-4:5.42.0 100% | 323.5 MiB/s | 11.6 MiB | 00m00s [159/282] Installing perl-interpreter-4 100% | 10.7 MiB/s | 120.3 KiB | 00m00s [160/282] Installing devscripts-checkba 100% | 4.8 MiB/s | 53.8 KiB | 00m00s [161/282] Installing dash-0:0.5.12-6.fc 100% | 9.1 MiB/s | 168.3 KiB | 00m00s [162/282] Installing drpm-0:0.5.2-8.fc4 100% | 129.6 MiB/s | 132.7 KiB | 00m00s [163/282] Installing createrepo_c-libs- 100% | 272.3 MiB/s | 278.9 KiB | 00m00s [164/282] Installing createrepo_c-0:1.2 100% | 15.8 MiB/s | 194.4 KiB | 00m00s [165/282] Installing pigz-0:2.8-7.fc43. 100% | 13.4 MiB/s | 164.5 KiB | 00m00s [166/282] Installing python-pip-wheel-0 100% | 622.6 MiB/s | 1.2 MiB | 00m00s [167/282] Installing mpdecimal-0:4.0.1- 100% | 42.7 MiB/s | 218.8 KiB | 00m00s [168/282] Installing python3-libs-0:3.1 100% | 373.7 MiB/s | 43.3 MiB | 00m00s [169/282] Installing python3-0:3.14.0-2 100% | 2.5 MiB/s | 30.6 KiB | 00m00s [170/282] Installing python3-rpm-0:6.0. 100% | 178.7 MiB/s | 182.9 KiB | 00m00s [171/282] Installing python3-six-0:1.17 100% | 117.5 MiB/s | 120.3 KiB | 00m00s [172/282] Installing python3-typing-ext 100% | 264.0 MiB/s | 540.7 KiB | 00m00s [173/282] Installing python3-idna-0:3.1 100% | 359.9 MiB/s | 737.1 KiB | 00m00s [174/282] Installing python3-urllib3-0: 100% | 277.8 MiB/s | 1.1 MiB | 00m00s [175/282] Installing python3-packaging- 100% | 201.8 MiB/s | 619.9 KiB | 00m00s [176/282] Installing python3-pyyaml-0:6 100% | 262.8 MiB/s | 807.4 KiB | 00m00s [177/282] Installing python3-distro-0:1 100% | 17.5 MiB/s | 214.9 KiB | 00m00s [178/282] Installing python3-argcomplet 100% | 25.5 MiB/s | 339.1 KiB | 00m00s [179/282] Installing python3-backoff-0: 100% | 111.9 MiB/s | 114.6 KiB | 00m00s [180/282] Installing python3-cccolutils 100% | 48.5 MiB/s | 49.7 KiB | 00m00s [181/282] Installing python3-click-1:8. 100% | 234.0 MiB/s | 1.2 MiB | 00m00s [182/282] Installing python3-setuptools 100% | 279.4 MiB/s | 9.2 MiB | 00m00s [183/282] Installing python3-munch-0:4. 100% | 62.7 MiB/s | 64.2 KiB | 00m00s [184/282] Installing python3-libcomps-0 100% | 138.6 MiB/s | 141.9 KiB | 00m00s [185/282] Installing python3-certifi-0: 100% | 10.9 MiB/s | 11.2 KiB | 00m00s [186/282] Installing python3-jwt-0:2.8. 100% | 183.2 MiB/s | 187.6 KiB | 00m00s [187/282] Installing python3-ruamel-yam 100% | 268.3 MiB/s | 274.8 KiB | 00m00s [188/282] Installing python3-ruamel-yam 100% | 371.6 MiB/s | 1.9 MiB | 00m00s [189/282] Installing python3-libdnf-0:0 100% | 465.8 MiB/s | 3.7 MiB | 00m00s [190/282] Installing python3-hawkey-0:0 100% | 145.8 MiB/s | 298.5 KiB | 00m00s [191/282] Installing python3-dnf-0:4.24 100% | 138.0 MiB/s | 2.8 MiB | 00m00s [192/282] Installing python3-utils-0:3. 100% | 123.9 MiB/s | 253.8 KiB | 00m00s [193/282] Installing python3-progressba 100% | 46.8 MiB/s | 623.1 KiB | 00m00s [194/282] Installing python3-pydantic-c 100% | 420.0 MiB/s | 5.5 MiB | 00m00s [195/282] Installing python3-typing-ins 100% | 93.8 MiB/s | 96.0 KiB | 00m00s [196/282] Installing python3-dateutil-1 100% | 290.1 MiB/s | 891.1 KiB | 00m00s [197/282] Installing python3-construct- 100% | 334.1 MiB/s | 1.0 MiB | 00m00s [198/282] Installing python3-pybeam-0:0 100% | 49.9 MiB/s | 51.1 KiB | 00m00s [199/282] Installing python3-specfile-0 100% | 211.5 MiB/s | 649.8 KiB | 00m00s [200/282] Installing python3-cachetools 100% | 137.7 MiB/s | 141.0 KiB | 00m00s [201/282] Installing python3-gnupg-0:0. 100% | 284.7 MiB/s | 291.5 KiB | 00m00s [202/282] Installing python3-lazy-objec 100% | 121.7 MiB/s | 124.7 KiB | 00m00s [203/282] Installing python3-tabulate-0 100% | 28.5 MiB/s | 350.3 KiB | 00m00s [204/282] Installing python3-defusedxml 100% | 201.2 MiB/s | 206.0 KiB | 00m00s [205/282] Installing python3-ordered-se 100% | 53.1 MiB/s | 54.4 KiB | 00m00s [206/282] Installing python3-marshmallo 100% | 299.1 MiB/s | 612.5 KiB | 00m00s [207/282] Installing python3-charset-no 100% | 27.5 MiB/s | 365.8 KiB | 00m00s [208/282] Installing python3-requests-0 100% | 238.7 MiB/s | 488.9 KiB | 00m00s [209/282] Installing python3-bugzilla-0 100% | 221.6 MiB/s | 453.8 KiB | 00m00s [210/282] Installing rpmdevtools-0:9.6- 100% | 16.8 MiB/s | 223.8 KiB | 00m00s [211/282] Installing python3-requests-t 100% | 105.5 MiB/s | 324.0 KiB | 00m00s [212/282] Installing python3-gitlab-0:7 100% | 95.2 MiB/s | 1.7 MiB | 00m00s [213/282] Installing python3-opensuse-d 100% | 19.5 MiB/s | 20.0 KiB | 00m00s [214/282] Installing python3-openidc-cl 100% | 77.5 MiB/s | 79.3 KiB | 00m00s [215/282] Installing python3-fedora-dis 100% | 4.4 MiB/s | 49.0 KiB | 00m00s [216/282] Installing python3-smmap-0:5. 100% | 205.0 MiB/s | 209.9 KiB | 00m00s [217/282] Installing python3-gitdb-0:4. 100% | 171.1 MiB/s | 525.6 KiB | 00m00s [218/282] Installing python3-GitPython- 100% | 329.7 MiB/s | 2.0 MiB | 00m00s [219/282] Installing python3-krb5-0:0.7 100% | 420.8 MiB/s | 3.4 MiB | 00m00s [220/282] Installing python3-rpmautospe 100% | 13.7 MiB/s | 14.1 KiB | 00m00s [221/282] Installing python3-rpmautospe 100% | 118.8 MiB/s | 486.8 KiB | 00m00s [222/282] Installing python3-decorator- 100% | 82.5 MiB/s | 84.5 KiB | 00m00s [223/282] Installing python3-gssapi-0:1 100% | 338.0 MiB/s | 2.7 MiB | 00m00s [224/282] Installing python3-requests-g 100% | 71.2 MiB/s | 72.9 KiB | 00m00s [225/282] Installing python3-koji-0:1.3 100% | 445.7 MiB/s | 2.2 MiB | 00m00s [226/282] Installing koji-0:1.35.3-7.fc 100% | 60.3 MiB/s | 925.5 KiB | 00m00s [227/282] Installing python3-ply-0:3.11 100% | 283.4 MiB/s | 580.4 KiB | 00m00s [228/282] Installing python3-pycparser- 100% | 376.3 MiB/s | 1.5 MiB | 00m00s [229/282] Installing python3-cffi-0:2.0 100% | 273.8 MiB/s | 1.4 MiB | 00m00s [230/282] Installing python3-cryptograp 100% | 303.4 MiB/s | 5.5 MiB | 00m00s [231/282] Installing python3-spnego-0:0 100% | 75.9 MiB/s | 1.1 MiB | 00m00s [232/282] Installing python3-spnego+ker 100% | 0.0 B/s | 124.0 B | 00m00s [233/282] Installing python3-requests-k 100% | 34.2 MiB/s | 70.0 KiB | 00m00s [234/282] Installing python3-authlib-0: 100% | 120.9 MiB/s | 1.6 MiB | 00m00s [235/282] Installing bodhi-client-0:25. 100% | 23.0 MiB/s | 283.1 KiB | 00m00s [236/282] Installing python3-jwt+crypto 100% | 0.0 B/s | 124.0 B | 00m00s [237/282] Installing python3-pynacl-0:1 100% | 131.0 MiB/s | 670.6 KiB | 00m00s [238/282] Installing python3-pygithub-0 100% | 323.0 MiB/s | 4.8 MiB | 00m00s [239/282] Installing python3-pyroute2-0 100% | 127.8 MiB/s | 3.7 MiB | 00m00s [240/282] Installing python3-markupsafe 100% | 64.2 MiB/s | 65.8 KiB | 00m00s [241/282] Installing python3-jinja2-0:3 100% | 441.7 MiB/s | 3.1 MiB | 00m00s [242/282] Installing python3-templated- 100% | 47.2 MiB/s | 48.4 KiB | 00m00s [243/282] Installing mock-0:6.5-1.fc43. 100% | 69.4 MiB/s | 1.1 MiB | 00m00s [244/282] Installing mock-core-configs- 100% | 3.8 MiB/s | 462.2 KiB | 00m00s [245/282] Installing python3-pycurl-0:7 100% | 110.6 MiB/s | 452.9 KiB | 00m00s [246/282] Installing python3-enchant-0: 100% | 197.4 MiB/s | 404.3 KiB | 00m00s [247/282] Installing python3-file-magic 100% | 30.1 MiB/s | 30.8 KiB | 00m00s [248/282] Installing python3-tomli-w-0: 100% | 37.4 MiB/s | 38.3 KiB | 00m00s [249/282] Installing python3-zstandard- 100% | 382.7 MiB/s | 2.3 MiB | 00m00s [250/282] Installing python3-gobject-ba 100% | 304.8 MiB/s | 1.5 MiB | 00m00s [251/282] Installing python3-libmodulem 100% | 0.0 B/s | 16.3 KiB | 00m00s [252/282] Installing python3-dotenv-0:1 100% | 138.6 MiB/s | 141.9 KiB | 00m00s [253/282] Installing python3-sniffio-0: 100% | 40.0 MiB/s | 40.9 KiB | 00m00s [254/282] Installing python3-anyio-0:4. 100% | 314.3 MiB/s | 1.3 MiB | 00m00s [255/282] Installing python3-h11-0:0.16 100% | 140.6 MiB/s | 287.9 KiB | 00m00s [256/282] Installing python3-httpcore-0 100% | 284.6 MiB/s | 874.4 KiB | 00m00s [257/282] Installing python3-httpx-0:0. 100% | 246.0 MiB/s | 1.0 MiB | 00m00s [258/282] Installing python3-lxml-0:6.0 100% | 342.7 MiB/s | 5.8 MiB | 00m00s [259/282] Installing osc-0:1.22.0-465.2 100% | 172.3 MiB/s | 5.0 MiB | 00m00s [260/282] Installing python3-filelock-0 100% | 101.4 MiB/s | 103.9 KiB | 00m00s [261/282] Installing python3-copr-0:2.4 100% | 87.0 MiB/s | 267.4 KiB | 00m00s [262/282] Installing python3-wrapt-0:1. 100% | 201.2 MiB/s | 206.0 KiB | 00m00s [263/282] Installing python3-deprecated 100% | 63.6 MiB/s | 65.2 KiB | 00m00s [264/282] Installing python3-pyxdg-0:0. 100% | 233.3 MiB/s | 477.9 KiB | 00m00s [265/282] Installing rpmlint-0:2.8.0-1. 100% | 78.3 MiB/s | 1.3 MiB | 00m00s [266/282] Installing rpmlint-fedora-lic 100% | 0.0 B/s | 24.9 KiB | 00m00s [267/282] Installing python3-annotated- 100% | 86.2 MiB/s | 88.2 KiB | 00m00s [268/282] Installing python3-pydantic-0 100% | 270.1 MiB/s | 5.1 MiB | 00m00s [269/282] Installing python3-pyforgejo- 100% | 330.1 MiB/s | 7.3 MiB | 00m00s [270/282] Installing python3-ogr-0:0.57 100% | 194.3 MiB/s | 994.9 KiB | 00m00s [271/282] Installing rpkg-common-0:1.68 100% | 13.3 MiB/s | 13.6 KiB | 00m00s [272/282] Installing python3-rpkg-0:1.6 100% | 362.1 MiB/s | 1.1 MiB | 00m00s [273/282] Installing fedpkg-0:1.46-7.fc 100% | 24.2 MiB/s | 322.1 KiB | 00m00s [274/282] Installing libss-0:1.47.3-2.f 100% | 0.0 B/s | 72.3 KiB | 00m00s [275/282] Installing libkadm5-0:1.21.3- 100% | 210.9 MiB/s | 215.9 KiB | 00m00s [276/282] Installing krb5-pkinit-0:1.21 100% | 123.4 MiB/s | 126.3 KiB | 00m00s [277/282] Installing krb5-workstation-0 100% | 140.6 MiB/s | 2.5 MiB | 00m00s [278/282] Installing rsync-0:3.4.1-4.fc 100% | 54.6 MiB/s | 782.6 KiB | 00m00s [279/282] Installing python3-packit-0:1 100% | 242.7 MiB/s | 1.7 MiB | 00m00s [280/282] Installing packit-0:1.12.0.po 100% | 2.5 MiB/s | 27.8 KiB | 00m00s [281/282] Installing authselect-0:1.6.2 100% | 16.6 MiB/s | 204.1 KiB | 00m00s [282/282] Installing systemd-rpm-macros 100% | 27.6 KiB/s | 8.9 KiB | 00m00s Warning: skipped OpenPGP checks for 4 packages from repository: copr_packit_packit_stable Complete! INFO: Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyin /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/script /script INFO: mock.py version 6.5 starting (python version = 3.13.7, NVR = mock-6.5-1.fc42), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyin /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/script /script Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 6.5 INFO: Mock Version: 6.5 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: copying /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/script to /var/lib/mock/copr-custom-fedora-43-x86_64/root/script Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --chroot 'set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;' INFO: mock.py version 6.5 starting (python version = 3.13.7, NVR = mock-6.5-1.fc42), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --chroot 'set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;' Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 6.5 INFO: Mock Version: 6.5 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: Running in chroot: ['set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;'] Start: chroot ['set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;'] + chmod a+x /script + rm -rf /workdir + mkdir -p /workdir + chown mockbuild /workdir Finish: chroot ['set -ex; chmod a+x /script; rm -rf /workdir; mkdir -p /workdir; chown mockbuild /workdir;'] Finish: run INFO:__main__:running command: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --unpriv --chroot 'set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-14163 COPR_PACKAGE='"'"''"'"' COPR_RESULTDIR=/workdir /script' INFO: mock.py version 6.5 starting (python version = 3.13.7, NVR = mock-6.5-1.fc42), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --unpriv --chroot 'set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-14163 COPR_PACKAGE='"'"''"'"' COPR_RESULTDIR=/workdir /script' Start(bootstrap): init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish(bootstrap): init plugins Start: init plugins INFO: tmpfs initialized INFO: selinux enabled INFO: chroot_scan: initialized INFO: compress_logs: initialized Finish: init plugins INFO: Signal handler active Start: run Mock Version: 6.5 INFO: Mock Version: 6.5 Start(bootstrap): chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start(bootstrap): cleaning package manager metadata Finish(bootstrap): cleaning package manager metadata INFO: Package manager dnf5 detected and used (fallback) Finish(bootstrap): chroot init Start: chroot init INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root. INFO: calling preinit hooks INFO: enabled root cache INFO: enabled package manager cache Start: cleaning package manager metadata Finish: cleaning package manager metadata INFO: enabled HW Info plugin INFO: Package manager dnf5 detected and used (direct choice) Finish: chroot init INFO: Running in chroot: ["set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-14163 COPR_PACKAGE='' COPR_RESULTDIR=/workdir /script"] Start: chroot ["set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-14163 COPR_PACKAGE='' COPR_RESULTDIR=/workdir /script"] + cd /workdir + COPR_OWNER=packit + COPR_PROJECT=ComplianceAsCode-content-14163 + COPR_PACKAGE= + COPR_RESULTDIR=/workdir + /script /usr/lib/python3.14/site-packages/pyforgejo/core/pydantic_utilities.py:19: UserWarning: Core Pydantic V1 functionality isn't compatible with Python 3.14 or greater. from pydantic.v1.datetime_parse import ( # type: ignore # pyright: ignore[reportMissingImports] # Pydantic v2 2025-11-21 15:53:15.540 config.py DEBUG Loading user config from directory: /builddir/.config 2025-11-21 15:53:15.540 config.py DEBUG Trying to load user config from: /builddir/.config/packit.yml 2025-11-21 15:53:15.540 config.py DEBUG Trying to load user config from: /builddir/.config/packit.yaml 2025-11-21 15:53:15.540 config.py DEBUG Trying to load user config from: /builddir/.config/.packit.yaml 2025-11-21 15:53:15.540 config.py DEBUG Trying to load user config from: /builddir/.config/.packit.yml 2025-11-21 15:53:15.541 config.py DEBUG Loaded config: Config(debug='False', fas_user='None', keytab_path='None', kerberos_realm='FEDORAPROJECT.ORG', koji_build_command='koji build', pkg_tool='fedpkg', upstream_git_remote='None', command_handler='RunCommandType.local', command_handler_work_dir='/sandcastle', command_handler_pvc_env_var='SANDCASTLE_PVC', command_handler_image_reference='docker.io/usercont/sandcastle', command_handler_k8s_namespace='myproject', command_handler_pvc_volume_specs='[]', command_handler_storage_class='', appcode='', repository_cache='None', default_parse_time_macros='{}') 2025-11-21 15:53:15.541 logging.py DEBUG Logging set to DEBUG 2025-11-21 15:53:15.541 packit_base.py DEBUG Packit 1.12.0.post1.dev18+gc39b0e7d4 is being used. 2025-11-21 15:53:15.542 repo.py DEBUG Parsing git remote URL 'https://github.com/ComplianceAsCode/content' and converting it to https-like URL. 2025-11-21 15:53:15.542 repo.py DEBUG Provided input 'https://github.com/ComplianceAsCode/content' is an url. 2025-11-21 15:53:15.542 types.py DEBUG Input is a URL to a git repo: https://github.com/ComplianceAsCode/content 2025-11-21 15:53:15.542 local_project.py DEBUG Attributes requested: git_service, repo_name, namespace, full_name, working_dir, git_repo, git_project 2025-11-21 15:53:15.542 local_project.py DEBUG Attributes requested not to be calculated: 2025-11-21 15:53:15.542 local_project.py DEBUG Transitive dependencies: git_service => set(), repo_name => set(), namespace => set(), full_name => set(), working_dir => set(), git_repo => set(), git_project => set(), git_url => set() 2025-11-21 15:53:15.542 local_project.py DEBUG To-calculate set: {'git_service', 'repo_name', 'namespace', 'full_name', 'working_dir', 'git_repo', 'git_project'} 2025-11-21 15:53:15.542 local_project.py DEBUG Parsed namespace and repo name (ComplianceAsCode, content) from url 'https://github.com/ComplianceAsCode/content'. 2025-11-21 15:53:15.542 local_project.py DEBUG Parsed full repo name 'ComplianceAsCode/content'. 2025-11-21 15:53:15.542 repo.py INFO Cloning repo https://github.com/ComplianceAsCode/content -> /tmp/tmpswowaprq 2025-11-21 15:53:15.542 util.py DEBUG sys.platform='linux', git_executable='git' 2025-11-21 15:53:15.542 util.py DEBUG sys.platform='linux', git_executable='git' 2025-11-21 15:53:15.542 cmd.py INFO git clone -v --tags -- https://github.com/ComplianceAsCode/content /tmp/tmpswowaprq 2025-11-21 15:53:15.542 cmd.py DEBUG Popen(['git', 'clone', '-v', '--tags', '--', 'https://github.com/ComplianceAsCode/content', '/tmp/tmpswowaprq'], cwd=/workdir, stdin=None, shell=False, universal_newlines=True) 2025-11-21 15:53:22.196 base.py DEBUG Cmd(['git', 'clone', '-v', '--tags', '--', 'https://github.com/ComplianceAsCode/content', '/tmp/tmpswowaprq'])'s unused stdout: 2025-11-21 15:53:22.196 util.py DEBUG sys.platform='linux', git_executable='git' 2025-11-21 15:53:22.198 util.py DEBUG sys.platform='linux', git_executable='git' 2025-11-21 15:53:22.198 local_project.py DEBUG Parsed repo from url 'https://github.com/ComplianceAsCode/content'. 2025-11-21 15:53:22.198 local_project.py DEBUG Parsed working directory /tmp/tmpswowaprq from the repo . 2025-11-21 15:53:22.198 local_project.py DEBUG Arguments received in the init method of the LocalProject class: git_repo: working_dir: /tmp/tmpswowaprq ref: git_project: None git_service: None git_url: https://github.com/ComplianceAsCode/content full_name: ComplianceAsCode/content namespace: ComplianceAsCode repo_name: content offline: False refresh False remote: pr_id: 14163 cache: None merge_pr: True target_branch: master 2025-11-21 15:53:22.198 local_project.py INFO Checking out PR 14163. 2025-11-21 15:53:22.199 cmd.py INFO git fetch -v -- origin +refs/pull/14163/head:refs/remotes/origin/pr-changes/14163 2025-11-21 15:53:22.199 cmd.py DEBUG Popen(['git', 'fetch', '-v', '--', 'origin', '+refs/pull/14163/head:refs/remotes/origin/pr-changes/14163'], cwd=/tmp/tmpswowaprq, stdin=None, shell=False, universal_newlines=True) 2025-11-21 15:53:22.322 cmd.py INFO git cat-file --batch-check 2025-11-21 15:53:22.322 cmd.py DEBUG Popen(['git', 'cat-file', '--batch-check'], cwd=/tmp/tmpswowaprq, stdin=, shell=False, universal_newlines=False) 2025-11-21 15:53:22.323 cmd.py DEBUG Popen(['git', 'checkout', 'pr-changes/14163'], cwd=/tmp/tmpswowaprq, stdin=None, shell=False, universal_newlines=False) 2025-11-21 15:53:22.498 cmd.py INFO git checkout pr-changes/14163 -> 0; stdout: ''; stderr: 'Switched to branch 'pr-changes/14163'' 2025-11-21 15:53:22.499 cmd.py INFO git cat-file --batch 2025-11-21 15:53:22.499 cmd.py DEBUG Popen(['git', 'cat-file', '--batch'], cwd=/tmp/tmpswowaprq, stdin=, shell=False, universal_newlines=False) 2025-11-21 15:53:22.500 local_project.py INFO Checked out commit (6e3605d1) Fix Ansible remediation in network_sniffer_disabled 2025-11-21 15:53:22.500 local_project.py DEBUG Target branch: master 2025-11-21 15:53:22.501 cmd.py INFO git fetch -v -- origin +refs/heads/master:refs/remotes/origin/pr/14163 2025-11-21 15:53:22.501 cmd.py DEBUG Popen(['git', 'fetch', '-v', '--', 'origin', '+refs/heads/master:refs/remotes/origin/pr/14163'], cwd=/tmp/tmpswowaprq, stdin=None, shell=False, universal_newlines=True) 2025-11-21 15:53:22.553 remote.py DEBUG Fetch head lines do not match lines provided via progress information length of progress lines 2 should be equal to lines in FETCH_HEAD file 1 Will ignore extra progress lines or fetch head lines. 2025-11-21 15:53:22.553 remote.py DEBUG b"info lines: [' * [new branch] master -> origin/pr/14163', ' = [up to date] master -> origin/master']" 2025-11-21 15:53:22.553 remote.py DEBUG b'head info: ["88f00c931643d7d2b82bf1a422be43490ce9b301\\t\\tbranch \'master\' of https://github.com/ComplianceAsCode/content\\n"]' 2025-11-21 15:53:22.554 cmd.py DEBUG Popen(['git', 'checkout', 'master'], cwd=/tmp/tmpswowaprq, stdin=None, shell=False, universal_newlines=False) 2025-11-21 15:53:22.727 cmd.py INFO git checkout master -> 0; stdout: 'Your branch is up to date with 'origin/master'.'; stderr: 'Switched to branch 'master'' 2025-11-21 15:53:22.727 local_project.py INFO Merging (master) with commit: (88f00c93) Merge pull request #14157 from jan-cerny/master_fix_var_type 2025-11-21 15:53:22.727 cmd.py DEBUG Popen(['git', 'merge', 'pr-changes/14163'], cwd=/tmp/tmpswowaprq, stdin=None, shell=False, universal_newlines=False) 2025-11-21 15:53:23.078 cmd.py INFO git merge pr-changes/14163 -> 0; stdout: 'Merge made by the 'ort' strategy. .../guide/system/network/network_sniffer_disabled/ansible/shared.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)' 2025-11-21 15:53:23.079 cmd.py DEBUG Popen(['git', 'checkout', 'pr/14163'], cwd=/tmp/tmpswowaprq, stdin=None, shell=False, universal_newlines=False) 2025-11-21 15:53:23.104 cmd.py INFO git checkout pr/14163 -> 0; stdout: ''; stderr: 'Switched to branch 'pr/14163'' 2025-11-21 15:53:23.105 package_config.py DEBUG Local package config found: /tmp/tmpswowaprq/.packit.yaml 2025-11-21 15:53:23.111 package_config.py DEBUG Package config before loading: { "downstream_package_name": "scap-security-guide", "upstream_package_name": "scap-security-guide", "specfile_path": "scap-security-guide.spec", "actions": { "get-current-version": [ "bash utils/version.sh" ] }, "srpm_build_deps": [ "bash" ], "jobs": [ { "job": "copr_build", "trigger": "pull_request", "targets": [ "fedora-all-x86_64", "centos-stream-8-x86_64", "centos-stream-9-x86_64", "centos-stream-10-x86_64" ] }, { "job": "copr_build", "trigger": "commit", "targets": [ "fedora-all-x86_64", "centos-stream-8-x86_64", "centos-stream-9-x86_64", "centos-stream-10-x86_64" ], "branch": "gh-readonly-queue/.*" }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/static-checks", "tmt_plan": "/plans/contest/static-checks$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/rpmbuild-ctest-fedora", "tmt_plan": "/plans/contest/rpmbuild-ctest-fedora$", "targets": { "fedora-all": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/anssi_bp28_high", "tmt_plan": "/plans/contest/hardening/host-os/ansible/anssi_bp28_high$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/bsi", "tmt_plan": "/plans/contest/hardening/host-os/ansible/bsi$", "targets": { "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/ccn_advanced", "tmt_plan": "/plans/contest/hardening/host-os/ansible/ccn_advanced$", "targets": { "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/cis", "tmt_plan": "/plans/contest/hardening/host-os/ansible/cis$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/cis_server_l1", "tmt_plan": "/plans/contest/hardening/host-os/ansible/cis_server_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/cis_workstation_l1", "tmt_plan": "/plans/contest/hardening/host-os/ansible/cis_workstation_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/cis_workstation_l2", "tmt_plan": "/plans/contest/hardening/host-os/ansible/cis_workstation_l2$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/cui", "tmt_plan": "/plans/contest/hardening/host-os/ansible/cui$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/e8", "tmt_plan": "/plans/contest/hardening/host-os/ansible/e8$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/hipaa", "tmt_plan": "/plans/contest/hardening/host-os/ansible/hipaa$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/ism_o", "tmt_plan": "/plans/contest/hardening/host-os/ansible/ism_o$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/ism_o_top_secret", "tmt_plan": "/plans/contest/hardening/host-os/ansible/ism_o_top_secret$", "targets": { "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/ospp", "tmt_plan": "/plans/contest/hardening/host-os/ansible/ospp$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/pci-dss", "tmt_plan": "/plans/contest/hardening/host-os/ansible/pci-dss$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/ansible/stig", "tmt_plan": "/plans/contest/hardening/host-os/ansible/stig$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/anssi_bp28_high", "tmt_plan": "/plans/contest/hardening/host-os/oscap/anssi_bp28_high$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/bsi", "tmt_plan": "/plans/contest/hardening/host-os/oscap/bsi$", "targets": { "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/ccn_advanced", "tmt_plan": "/plans/contest/hardening/host-os/oscap/ccn_advanced$", "targets": { "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/cis", "tmt_plan": "/plans/contest/hardening/host-os/oscap/cis$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/cis_server_l1", "tmt_plan": "/plans/contest/hardening/host-os/oscap/cis_server_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/cis_workstation_l1", "tmt_plan": "/plans/contest/hardening/host-os/oscap/cis_workstation_l1$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/cis_workstation_l2", "tmt_plan": "/plans/contest/hardening/host-os/oscap/cis_workstation_l2$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/cui", "tmt_plan": "/plans/contest/hardening/host-os/oscap/cui$", "targets": { "centos-stream-8": {}, "centos-stream-9": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/e8", "tmt_plan": "/plans/contest/hardening/host-os/oscap/e8$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/hipaa", "tmt_plan": "/plans/contest/hardening/host-os/oscap/hipaa$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/ism_o", "tmt_plan": "/plans/contest/hardening/host-os/oscap/ism_o$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/ism_o_top_secret", "tmt_plan": "/plans/contest/hardening/host-os/oscap/ism_o_top_secret$", "targets": { "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/ospp", "tmt_plan": "/plans/contest/hardening/host-os/oscap/ospp$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/pci-dss", "tmt_plan": "/plans/contest/hardening/host-os/oscap/pci-dss$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "/hardening/host-os/oscap/stig", "tmt_plan": "/plans/contest/hardening/host-os/oscap/stig$", "targets": { "centos-stream-8": {}, "centos-stream-9": {}, "centos-stream-10": {} } }, { "job": "tests", "trigger": "pull_request", "fmf_path": "tests/tmt", "identifier": "fedora-cis", "tmt_plan": "/plans/fedora-cis$", "targets": { "fedora-all": {} } } ] } 2025-11-21 15:53:23.112 schema.py DEBUG Package config before pre-loading: {"downstream_package_name":"scap-security-guide","upstream_package_name":"scap-security-guide","specfile_path":"scap-security-guide.spec","actions":{"get-current-version":["bash utils/version.sh"]},"srpm_build_deps":["bash"],"jobs":[{"job":"copr_build","trigger":"pull_request","targets":["fedora-all-x86_64","centos-stream-8-x86_64","centos-stream-9-x86_64","centos-stream-10-x86_64"]},{"job":"copr_build","trigger":"commit","targets":["fedora-all-x86_64","centos-stream-8-x86_64","centos-stream-9-x86_64","centos-stream-10-x86_64"],"branch":"gh-readonly-queue/.*"},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/static-checks","tmt_plan":"/plans/contest/static-checks$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/rpmbuild-ctest-fedora","tmt_plan":"/plans/contest/rpmbuild-ctest-fedora$","targets":{"fedora-all":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/anssi_bp28_high","tmt_plan":"/plans/contest/hardening/host-os/ansible/anssi_bp28_high$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/bsi","tmt_plan":"/plans/contest/hardening/host-os/ansible/bsi$","targets":{"centos-stream-9":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/ccn_advanced","tmt_plan":"/plans/contest/hardening/host-os/ansible/ccn_advanced$","targets":{"centos-stream-9":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/cis","tmt_plan":"/plans/contest/hardening/host-os/ansible/cis$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/cis_server_l1","tmt_plan":"/plans/contest/hardening/host-os/ansible/cis_server_l1$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/cis_workstation_l1","tmt_plan":"/plans/contest/hardening/host-os/ansible/cis_workstation_l1$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/cis_workstation_l2","tmt_plan":"/plans/contest/hardening/host-os/ansible/cis_workstation_l2$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/cui","tmt_plan":"/plans/contest/hardening/host-os/ansible/cui$","targets":{"centos-stream-8":{},"centos-stream-9":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/e8","tmt_plan":"/plans/contest/hardening/host-os/ansible/e8$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/hipaa","tmt_plan":"/plans/contest/hardening/host-os/ansible/hipaa$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/ism_o","tmt_plan":"/plans/contest/hardening/host-os/ansible/ism_o$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/ism_o_top_secret","tmt_plan":"/plans/contest/hardening/host-os/ansible/ism_o_top_secret$","targets":{"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/ospp","tmt_plan":"/plans/contest/hardening/host-os/ansible/ospp$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/pci-dss","tmt_plan":"/plans/contest/hardening/host-os/ansible/pci-dss$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/ansible/stig","tmt_plan":"/plans/contest/hardening/host-os/ansible/stig$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/anssi_bp28_high","tmt_plan":"/plans/contest/hardening/host-os/oscap/anssi_bp28_high$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/bsi","tmt_plan":"/plans/contest/hardening/host-os/oscap/bsi$","targets":{"centos-stream-9":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/ccn_advanced","tmt_plan":"/plans/contest/hardening/host-os/oscap/ccn_advanced$","targets":{"centos-stream-9":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/cis","tmt_plan":"/plans/contest/hardening/host-os/oscap/cis$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/cis_server_l1","tmt_plan":"/plans/contest/hardening/host-os/oscap/cis_server_l1$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/cis_workstation_l1","tmt_plan":"/plans/contest/hardening/host-os/oscap/cis_workstation_l1$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/cis_workstation_l2","tmt_plan":"/plans/contest/hardening/host-os/oscap/cis_workstation_l2$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/cui","tmt_plan":"/plans/contest/hardening/host-os/oscap/cui$","targets":{"centos-stream-8":{},"centos-stream-9":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/e8","tmt_plan":"/plans/contest/hardening/host-os/oscap/e8$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/hipaa","tmt_plan":"/plans/contest/hardening/host-os/oscap/hipaa$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/ism_o","tmt_plan":"/plans/contest/hardening/host-os/oscap/ism_o$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/ism_o_top_secret","tmt_plan":"/plans/contest/hardening/host-os/oscap/ism_o_top_secret$","targets":{"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/ospp","tmt_plan":"/plans/contest/hardening/host-os/oscap/ospp$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/pci-dss","tmt_plan":"/plans/contest/hardening/host-os/oscap/pci-dss$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"/hardening/host-os/oscap/stig","tmt_plan":"/plans/contest/hardening/host-os/oscap/stig$","targets":{"centos-stream-8":{},"centos-stream-9":{},"centos-stream-10":{}}},{"job":"tests","trigger":"pull_request","fmf_path":"tests/tmt","identifier":"fedora-cis","tmt_plan":"/plans/fedora-cis$","targets":{"fedora-all":{}}}],"config_file_path":".packit.yaml"} 2025-11-21 15:53:23.121 utils.py DEBUG job_config_index: 0 2025-11-21 15:53:23.121 utils.py DEBUG Final package (job) config: JobConfig(type: JobType.copr_build, trigger: JobConfigTriggerType.pull_request, identifier: None, packages: ['scap-security-guide']) 2025-11-21 15:53:23.121 cmd.py DEBUG Popen(['git', 'remote', 'get-url', '--all', 'origin'], cwd=/tmp/tmpswowaprq, stdin=None, shell=False, universal_newlines=False) 2025-11-21 15:53:23.122 cmd.py INFO git remote get-url --all origin -> 0; stdout: 'https://github.com/ComplianceAsCode/content' 2025-11-21 15:53:23.123 utils.py DEBUG Input directory is an upstream repository. No suitable remote found. 2025-11-21 15:53:23.123 base_git.py DEBUG Command handler: RunCommandType.local 2025-11-21 15:53:23.123 api.py DEBUG Won't be doing kinit, no credentials provided. 2025-11-21 15:53:23.123 repo.py DEBUG Parsing git remote URL 'https://github.com/ComplianceAsCode/content' and converting it to https-like URL. 2025-11-21 15:53:23.123 repo.py DEBUG Provided input 'https://github.com/ComplianceAsCode/content' is an url. 2025-11-21 15:53:23.123 actions_handler.py DEBUG Running ActionName.post_upstream_clone hook. 2025-11-21 15:53:23.123 actions_handler.py DEBUG Running ActionName.post_upstream_clone. 2025-11-21 15:53:23.123 actions_handler.py DEBUG Running default implementation for ActionName.post_upstream_clone. 2025-11-21 15:53:23.141 upstream.py DEBUG No ref given or is not glob pattern 2025-11-21 15:53:23.141 actions_handler.py INFO Using user-defined script for ActionName.get_current_version: [['bash', 'utils/version.sh']] 2025-11-21 15:53:23.142 commands.py DEBUG Command: bash utils/version.sh 2025-11-21 15:53:23.149 logging.py INFO 0.1.80 2025-11-21 15:53:23.149 upstream.py DEBUG Version: 0.1.80 2025-11-21 15:53:23.149 upstream.py DEBUG Sanitized version: 0.1.80 2025-11-21 15:53:23.149 upstream.py DEBUG Name + version = scap-security-guide-0.1.80 2025-11-21 15:53:23.149 commands.py DEBUG Command: git archive --output scap-security-guide-0.1.80.tar.gz --prefix scap-security-guide-0.1.80/ HEAD 2025-11-21 15:53:23.982 cmd.py INFO git cat-file --batch-check 2025-11-21 15:53:23.982 cmd.py DEBUG Popen(['git', 'cat-file', '--batch-check'], cwd=/tmp/tmpswowaprq, stdin=, shell=False, universal_newlines=False) 2025-11-21 15:53:24.019 commands.py DEBUG Command: git describe --tags --long --match * 2025-11-21 15:53:24.192 logging.py DEBUG v0.1.61-18614-g5be14d47dd 2025-11-21 15:53:24.238 commands.py DEBUG Command: git describe --tags --long --match * 2025-11-21 15:53:24.408 logging.py DEBUG v0.1.61-18614-g5be14d47dd 2025-11-21 15:53:24.410 actions_handler.py DEBUG Running ActionName.fix_spec. 2025-11-21 15:53:24.410 actions_handler.py DEBUG Running default implementation for ActionName.fix_spec. 2025-11-21 15:53:24.431 actions_handler.py INFO Using user-defined script for ActionName.get_current_version: [['bash', 'utils/version.sh']] 2025-11-21 15:53:24.431 commands.py DEBUG Command: bash utils/version.sh 2025-11-21 15:53:24.438 logging.py INFO 0.1.80 2025-11-21 15:53:24.438 upstream.py DEBUG Trying to extract archive_root_dir from known archives 2025-11-21 15:53:24.439 upstream.py DEBUG Archive scap-security-guide-0.1.80.tar.gz is tar. 2025-11-21 15:53:24.869 upstream.py DEBUG Directory scap-security-guide-0.1.80 found in archive scap-security-guide-0.1.80.tar.gz 2025-11-21 15:53:24.893 upstream.py DEBUG We're about to get latest matching tag in the upstream repository /tmp/tmpswowaprq. 2025-11-21 15:53:24.893 commands.py DEBUG Command: git tag --list --sort=-creatordate --merged=master 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.61 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.60 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.59 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.58 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.48 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.47 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.46 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.45 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.44 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.43 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.42 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.41 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.40 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.39 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.38 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.37 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.36 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.35 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.34 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.33 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.32 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.31 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.30 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.29 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.28 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.27 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.26 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.25 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.24 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.23 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.22 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.21 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.20 2025-11-21 15:53:25.137 logging.py DEBUG v0.1.19 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-6 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-7 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-8 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-9 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-10 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-11 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-12 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-13 2025-11-21 15:53:25.137 logging.py DEBUG v0.1-14 2025-11-21 15:53:25.138 logging.py DEBUG v0.1-15 2025-11-21 15:53:25.138 logging.py DEBUG v0.1-16 2025-11-21 15:53:25.138 logging.py DEBUG v0.1.17 2025-11-21 15:53:25.138 logging.py DEBUG v0.1.18 2025-11-21 15:53:25.138 logging.py DEBUG v0.5.0-InitialDraft 2025-11-21 15:53:25.138 commands.py DEBUG Command: git log --no-merges --pretty=format:- %s (%an) v0.1.61..HEAD -- 2025-11-21 15:53:25.263 logging.py DEBUG - Fix Ansible remediation in network_sniffer_disabled (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - Fix XCCDF value type (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - Bump actions/checkout from 5.0.1 to 6.0.0 (dependabot[bot]) 2025-11-21 15:53:25.263 logging.py DEBUG - Add RHEL 10 to ./utils/ansible_playbook_to_role.py (Matthew Burket) 2025-11-21 15:53:25.263 logging.py DEBUG - update code owners for controls (Vojtech Polasek) 2025-11-21 15:53:25.263 logging.py DEBUG - Bump version to 0.1.80 (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - adjusting the accounts_root_gid_zero description (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - adjust the title name (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - updating ignored_emails, updating mailmap (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - Fix import for importlib.util (Matthew Burket) 2025-11-21 15:53:25.263 logging.py DEBUG - Remove mypy override for pkg_resources (Matthew Burket) 2025-11-21 15:53:25.263 logging.py DEBUG - Make version parsing more robust in ssg.Requirements (Matthew Burket) 2025-11-21 15:53:25.263 logging.py DEBUG - updating contributors list (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - Update rule has_nonlocal_mta for latest CIS (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - Add rule file_at_allow_exists to RHEL CIS profiles (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - automate control 5.3.3.2.5 in RHEL 9 CIS (Vojtech Polasek) 2025-11-21 15:53:25.263 logging.py DEBUG - addding escape sequence to ocil field (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - adding additional description to accounts_root_gid_zero (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - removing irrelevant notes from the controls (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - automate control 4.4.3.2.5 in RHEL 8 CIS (Vojtech Polasek) 2025-11-21 15:53:25.263 logging.py DEBUG - Replace pkg_resources.Requirement (Matthew Burket) 2025-11-21 15:53:25.263 logging.py DEBUG - Bump actions/checkout from 5.0.0 to 5.0.1 (dependabot[bot]) 2025-11-21 15:53:25.263 logging.py DEBUG - removing irrelevant comment (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - renaming test accounts_root_gid_zero (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - Fix weak MACs bits on RHEL 9 (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - fixed EOF (Jörgen Uhr) 2025-11-21 15:53:25.263 logging.py DEBUG - Remove mount command (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - fixing yamlint error (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - updating a note on FIPS mode (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - Update hipaa profile for OL9 (Armando Acosta) 2025-11-21 15:53:25.263 logging.py DEBUG - Update ccn profile for OL9 (Armando Acosta) 2025-11-21 15:53:25.263 logging.py DEBUG - Fix comment in OVAL criterion element (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - Improve idempotency of bash remediation (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - Add a simple example to template documentation (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - Fix aide periodic check remediation for sle15/sle16 (teacup-on-rockingchair) 2025-11-21 15:53:25.263 logging.py DEBUG - Add packages directive to test scenarios (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - Fix crypto policy settings in RHEL CIS profiles (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - removing extra whitespaces (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - service_systemd-journald_enabled: add specific test scenario (Vojtech Polasek) 2025-11-21 15:53:25.263 logging.py DEBUG - adding a note on FIPS compliance (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - Convert tab to spaces (teacup-on-rockingchair) 2025-11-21 15:53:25.263 logging.py DEBUG - Add aide rules and display_login_attempts to sle16 base profile (teacup-on-rockingchair) 2025-11-21 15:53:25.263 logging.py DEBUG - Add support of display_login_attempts for SLE16 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.263 logging.py DEBUG - Fix aide database file for sle16 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.263 logging.py DEBUG - removing \t separator from rsyslog_cron_logging playbook (Arden97) 2025-11-21 15:53:25.263 logging.py DEBUG - #14093 - script for checking iptable rules (xccdf_org.ssgproject.content_rule_set_loopback_traffic) (Jörgen Uhr) 2025-11-21 15:53:25.263 logging.py DEBUG - add correct platform and package declarations to wrong_value_stig_fail.sh (julius.ish) 2025-11-21 15:53:25.263 logging.py DEBUG - Add missing check for authselect in Ansible remediations (Jan Černý) 2025-11-21 15:53:25.263 logging.py DEBUG - sysctl_kernel_exec_shield: make applicable only on x86_64 (Vojtech Polasek) 2025-11-21 15:53:25.264 logging.py DEBUG - updating control status (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - fixing error for ol7 target (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - Drop unneeded empty lines (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Add remediation tags (Jan Černý) 2025-11-21 15:53:25.264 logging.py DEBUG - Add newline at the end of file (Jan Černý) 2025-11-21 15:53:25.264 logging.py DEBUG - Move rules from base profile to control file definition (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Add restrict_serial_port_logins base.profile (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Enhance restrict_serial_port_logins rule for sle16 (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Move rules from base profile to control file definition (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Configure use_authtok in RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.264 logging.py DEBUG - updating cce list (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - adding note to cis_rhel10 control file (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - adding groups_no_zero_gid_except_root to rhel9 (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - Add sle16 suport for some basic rules (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Make sle remediation for rsyslog_remote_loghost relevant for sle16 also (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - enable sle16 bool template for policycoreutils (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Drop standard profiles from this PR (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Move base sle16 control file to products specific directory (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Bump softprops/action-gh-release from 2.4.1 to 2.4.2 (dependabot[bot]) 2025-11-21 15:53:25.264 logging.py DEBUG - Break Base SLE16 control file into sections (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Mark controls and profiles as DRAFT for product sle16 (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Make product work with installed_OS_is_sle16 check (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Extend definition of installed_OS_is_vendor_supported with sle16 (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Fix typo (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Drop middle layer when defining anssi and pcidss profiles for sle16 (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Add skeleton implementation for PCI-DSS and ANSSI minimal profiles for SLES16 (teacup-on-rockingchair) 2025-11-21 15:53:25.264 logging.py DEBUG - Update Konflux references (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove draft of ospp profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove draft of e8 profile (Armando Acosta) 2025-11-21 15:53:25.264 logging.py DEBUG - removing extra new lines (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - adding new rules to cronie component (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - Update ism profile to OL8 (Armando Acosta) 2025-11-21 15:53:25.264 logging.py DEBUG - Update e8 profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.264 logging.py DEBUG - Update ospp profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.264 logging.py DEBUG - fix 'rule_title is undefined' error (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - updating bash macros for ensure_rsyslog_log_file_configuration rules (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - updating ansible remediations for ensure_rsyslog_log_file_configuration rules (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - CMP-3915: Update SCC variable to include new SCCs for 4.20 (Lance Bragstad) 2025-11-21 15:53:25.264 logging.py DEBUG - Add rule sshd_disable_forwarding to RHEL 8 and 9 CIS (Jan Černý) 2025-11-21 15:53:25.264 logging.py DEBUG - extend the bootc applicability platform to cover both online and offline state (Vojtech Polasek) 2025-11-21 15:53:25.264 logging.py DEBUG - moving macros to test-scenarios (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - adding rules for /etc/cron.yearly configuration (Arden97) 2025-11-21 15:53:25.264 logging.py DEBUG - replace double quotes with single quotes for banner regex instantiation (julius.ish) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove outdated code climate refs (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Fix type hint for policies in ControlsManager (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - fix pkg_resources (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Fix return type on ssg.profiles._get_extended_profile_path (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove unused typing imports (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Use dict/tuple literals (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Add better return type for ssg.variables._convert_defaultdict_to_dict (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Fix type for older python (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Add ssg to mypy tests (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Skip typing get for importlib.util seems type checker doesn't have info for it (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove return in finally in ssg/xml.py (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Add type to ssg.products.load_product_yaml (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Type clean up in load_module (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove Python 2 hack and add type hints to ssg.templates.load_module (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Just ignore the double assignment in ssg/ext/boolean/boolean.py (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Type clean up in ssg/ext/boolean/boolean.py (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove Python 2 hacks in ssg/ext/boolean/boolean.py (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Type clean up in ssg/variables.py (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove Python 2.6 hack for ET namespaces (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Add type hints for CCE_POOLS (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Add typing info for optional FileLinker attributes (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Fix mypy namedtuple naming convention errors (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Ignore yaml loader and dumper import errors (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Be honest about global variable hack for Jinja Enviroment (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Fix types for XCCDFEntity keys (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Fix typing syntax error in ssg/controls.py (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Move to shlex shell_quote (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove legacy import for urllib quote (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove this try catch for Queue as this a Python 2ism (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Remove unicode_func (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - cElementTree is long deprecated. (Matthew Burket) 2025-11-21 15:53:25.264 logging.py DEBUG - Update pci-dss profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.265 logging.py DEBUG - Update anssi profile (Armando Acosta) 2025-11-21 15:53:25.265 logging.py DEBUG - Use the right workflow name for the Compare DS job. (Gabriel Becker) 2025-11-21 15:53:25.265 logging.py DEBUG - Insert the option at the beginning of the file (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Remove the error on loading duplicate policies (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Update docs for per product control files (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Fix controlrefcheck test (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Add ADR for product specific controls (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Move RHEL 9 specific controls to the product specific directory (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Fix tests and other issues after the move to many controls directoies (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Make controls manager take a list of controls dir (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - add Ansible conditional (Vojtech Polasek) 2025-11-21 15:53:25.265 logging.py DEBUG - fixing typo in default_no_pass.fail.sh tests (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - removing RainerScript entries before rsyslog_remote_tls tests (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Create rule accounts_password_pam_pwhistory_enforce_for_root (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Add accounts_password_pam_maxsequence to RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Add pwquality to PAM in CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - adding macro for rsyslog_remote_loghost, regression test (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Create new rules for ownership of files and directories (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - replacing setup.sh with jinja macros (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - updating tests for rsyslog_encrypt_offload_defaultnetstreamdriver (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - updating tests for rsyslog_encrypt_offload_defaultnetstreamdriver (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - updating tests and remediation of rsyslog_cron_logging (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - multiline support for rsyslog_encrypt_offload_actionsendstreamdriverauthmode (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Add a new line at the end of file (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.7.3 to 4.7.4 (dependabot[bot]) 2025-11-21 15:53:25.265 logging.py DEBUG - Introduce rule audit_rules_continue_loading (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - change sed to correctly match '\\' (julius.ish) 2025-11-21 15:53:25.265 logging.py DEBUG - add correct Bash conditional (Vojtech Polasek) 2025-11-21 15:53:25.265 logging.py DEBUG - Remove audit_rules_kernel_module_loading_create from RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - modify the bootc check in shared/checks/oval in the same way (Vojtech Polasek) 2025-11-21 15:53:25.265 logging.py DEBUG - improve OVAL applicability check for bootc environment (Vojtech Polasek) 2025-11-21 15:53:25.265 logging.py DEBUG - Add audit rules to RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Change OVAL entity IDs to prevent build conflicts (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Add audit_rules_networkconfig_modification_networkmanager to CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Inroduce rules for audit watches (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Add audit watch for /etc/hosts (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Introduce rules for /etc/issue and /etc/issue.net (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Introduce separate rules for setdomainname and sethostname (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Prevent conflicts in OVAL IDs (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Remove hardcoded notes (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Parametrize rule grub2_audit_backlog_limit_argument (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - fix network_sniffer_disabled task when statement being string (hazerre) 2025-11-21 15:53:25.265 logging.py DEBUG - multiline support for rsyslog_encrypt_offload_defaultnetstreamdriver (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - minor regex fix in rsyslog_encrypt_offload_actionsendstreamdrivermode (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Remove auditd_data_retention_action_mail_acct from RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - multiline support for rsyslog_encrypt_offload_actionsendstreamdrivermode (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Improve description of sshd_disable_forwarding (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - add newline and fix a commit message (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Align RHEL 10 CIS requirement 2.1.20 (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Add a warning (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 6.0.0 to 6.0.1 (dependabot[bot]) 2025-11-21 15:53:25.265 logging.py DEBUG - fixing tests for rsyslog_cron_logging (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Fix linux disable network sniffer ansible syntax for sub interfaces (Hazerre) 2025-11-21 15:53:25.265 logging.py DEBUG - Add rules to RHEL 10 CIS 7.1.10 (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Align rule description with checks and remediations (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Add new rule sysctl_net_ipv4_conf_default_forwarding (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Change the audit log storage size in RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - fixing rainer_loging_regex (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Add journald_disable_forward_to_syslog to RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - multiline support in rsyslog_cron_logging (Arden97) 2025-11-21 15:53:25.265 logging.py DEBUG - Improve description and rationale (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Add rules to check sshd drop in permissions and ownership to 5.1.1 (Matthew Burket) 2025-11-21 15:53:25.265 logging.py DEBUG - Add service_systemd-journal-upload_enabled to RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Improve RHEL 10 CIS requirement 6.1.2 (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Align some sudo rules with RHEL 10 CIS Benchmark (Jan Černý) 2025-11-21 15:53:25.265 logging.py DEBUG - Fix spacing in bash if conditional (Watson Yuuma Sato) 2025-11-21 15:53:25.265 logging.py DEBUG - Remove all codecs.open (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Add all modules to ssg module docs (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Group system calls in audit_rules_kernel_module_loading template (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - replacing systemd_service with systemd in system_enabled_guard_var (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - Add warning to RHEL 10 STIG GUI to match RHEL 8 and 9 (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - rainer regex new line support (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - Align content with RHEL 10 CIS requirement 4.1.5 (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Prevent fail when .bash_history doesn't exist (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Add GUI to title for RHEL 10 GUI STIG (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Add file_permission_user_bash_history to RHEL 10 CIS (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Create new rule no_rhost_files (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Replacing systemd_service with systemd module in Ansible playbooks (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - Enable grub2 and libselinux rules for sle16 base profile (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Bump actions/download-artifact from 5 to 6 (dependabot[bot]) 2025-11-21 15:53:25.266 logging.py DEBUG - Bump actions/upload-artifact from 4.3.3 to 5.0.0 (dependabot[bot]) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix/enable grub2 arguments macros for sle16 (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix login_defs path for sle16 (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Configure package_libselinux for sle16 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Remove chromium (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - chore(KONFLUX-6210): fix and set name and cpe label for CO (Watson Yuuma Sato) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix rule accounts_passwords_pam_tally2_deny_root for SLE15 (svet-se) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix rule accounts_passwords_pam_tally2_unlock_time for SLE15 (svet-se) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix rule accounts_passwords_pam_tally2 for SLE15 (svet-se) 2025-11-21 15:53:25.266 logging.py DEBUG - Add SLES in os_linux (svet-se) 2025-11-21 15:53:25.266 logging.py DEBUG - Update jqfilter in routes rate limit rule to include all namespaces (Vincent Shen) 2025-11-21 15:53:25.266 logging.py DEBUG - Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 57d9107 (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.266 logging.py DEBUG - Update dependency compliance-trestle to v3.9.3 (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix product props for anolis* due to ol in product (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix other ol in product checks (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Update default regex for excluded namespaces in network policies and refine jqfilter in rate limit rule (Vincent Shen) 2025-11-21 15:53:25.266 logging.py DEBUG - Update opensuse cpes and add support for leap16 and tumbleweed (svet-se) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix ol in product in rule file_permissions_var_log_audit in remedation (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix ol in product in rule file_permissions_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Remove support for opensuse leap 42 (svet-se) 2025-11-21 15:53:25.266 logging.py DEBUG - Add version specific remediation for encryption type (Watson Yuuma Sato) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix typo in ocil (Watson Yuuma Sato) 2025-11-21 15:53:25.266 logging.py DEBUG - Update Konflux references (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.266 logging.py DEBUG - CMP-3589: Add variable for excluded namespaces in routes rate limit check (Vincent Shen) 2025-11-21 15:53:25.266 logging.py DEBUG - Switch to enforce (Alan Moore) 2025-11-21 15:53:25.266 logging.py DEBUG - Remove rules from OL9 ISM O per request (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - CMP-3540: Remove SDN proxy kubeconfig assertions from 4.17+ assertion files (Lance Bragstad) 2025-11-21 15:53:25.266 logging.py DEBUG - Enable remediation for file_groupownerships_var_log on jammy (Alan Moore) 2025-11-21 15:53:25.266 logging.py DEBUG - Adding specifications to the rule titles (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - Create templated test scenarios (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix acronyms (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Extract common code to a macro (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Create a new macro for descriptions (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Use template audit_rules_kernel_module_loading instead of static content (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Create new template audit_rules_kernel_module_loading (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - fixing rule naming confict (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - Add e8 rules to ism control so that references work (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - CMP-3540: Add new OpenShift CPEs (Lance Bragstad) 2025-11-21 15:53:25.266 logging.py DEBUG - Make Ansible in sysctl_kernel_core_pattern_empty_string idempotent (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Enable firewall variable Signed-off-by: Alan Moore (Alan Moore) 2025-11-21 15:53:25.266 logging.py DEBUG - updating cce identifiers (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - updating profile stability for cis (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - audit rules for hostname and NetworkManager to cis_rhel9 (Arden97) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix Ansible accounts_passwords_pam_faillock_dir in check mode (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - CMP-3580: Implement checks for unsupported API server configs (Lance Bragstad) 2025-11-21 15:53:25.266 logging.py DEBUG - Enable testing of bsi and ism_o_top_secret profiles on CentOS Stream (Matus Marhefka) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix duplicate word in rule description (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Update OL conditionals (Armando Acosta) 2025-11-21 15:53:25.266 logging.py DEBUG - improve test so that there is really no configuration (Vojtech Polasek) 2025-11-21 15:53:25.266 logging.py DEBUG - ensure_logrotate_activated: remediation inserts the interval at the begining of the file (Vojtech Polasek) 2025-11-21 15:53:25.266 logging.py DEBUG - Bump softprops/action-gh-release from 2.4.0 to 2.4.1 (dependabot[bot]) 2025-11-21 15:53:25.266 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.4.1 to 6.0.0 (dependabot[bot]) 2025-11-21 15:53:25.266 logging.py DEBUG - Fix check for installed OS SLE16 (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Mark control and profiles as DRAFT as SLE16 platform is still not finalized (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Add initial profile for SLE16 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Add SUSE SLE 16 platform to build procedure (teacup-on-rockingchair) 2025-11-21 15:53:25.266 logging.py DEBUG - Change the logical operator (Alan Moore) 2025-11-21 15:53:25.266 logging.py DEBUG - Update test scenario to make sure there are no compliant state. (Gabriel Becker) 2025-11-21 15:53:25.266 logging.py DEBUG - Make Ansible in sshd_lineinfile template idempotent (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Make Ansible in accounts_passwords_pam_faillock_dir idempotent (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Make Ansible in the sysctl template idempotent (Jan Černý) 2025-11-21 15:53:25.266 logging.py DEBUG - Add flake8-2020 to ruff (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Add T10 and PLE to Ruff (Matthew Burket) 2025-11-21 15:53:25.266 logging.py DEBUG - Clean up some old Python 2 hacks (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Remove old SSG_TARGET_OVAL_VERSION from CMakeLists.txt (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in account_password_selinux_faillock_dir idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Check if the NSS file exists, if not then run the update-crypto-policies (Gabriel Becker) 2025-11-21 15:53:25.267 logging.py DEBUG - Check if the config file is newer than the current crypto policy file. (Gabriel Becker) 2025-11-21 15:53:25.267 logging.py DEBUG - configure_crypto_policy ansible idempotency. (Gabriel Becker) 2025-11-21 15:53:25.267 logging.py DEBUG - Clean up apple_os folder refereneces (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Add DTZ to ruff (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible for harden_sshd_macs_opensshserver_conf_crypto_policy idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible for harden_sshd_ciphers_opensshserver_conf_crypto_policy idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible for harden_openssl_crypto_policy idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Fix tests for no_dirs_unowned_by_root (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in dconf_gnome_screensaver_lock_enabled idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in dconf_db_up_to_date idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Add changed_when and check_mode keys (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Bump softprops/action-gh-release from 2.3.4 to 2.4.0 (dependabot[bot]) 2025-11-21 15:53:25.267 logging.py DEBUG - Fixing whitespaces (Artem Denisov) 2025-11-21 15:53:25.267 logging.py DEBUG - adding condition for idempotency (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Add test scenario to cover case where user has nologin defined in usr. (Gabriel Becker) 2025-11-21 15:53:25.267 logging.py DEBUG - Debian 12 CIS L2 pam check fix (Stefano Libero) 2025-11-21 15:53:25.267 logging.py DEBUG - Remove Jinja from when statement (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Make rule enable_authselect as notapplicable in containers (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Detect non-existent PATH directories in RHEL 9 CIS (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - CMP-3182: Remove unnecessary 4.2.yml assertion files (Lance Bragstad) 2025-11-21 15:53:25.267 logging.py DEBUG - Bump version accordingly (Alan Moore) 2025-11-21 15:53:25.267 logging.py DEBUG - Correct the evr version to match Ubuntu archive (Alan Moore) 2025-11-21 15:53:25.267 logging.py DEBUG - updating profile stability data (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Bump softprops/action-gh-release from 2.3.3 to 2.3.4 (dependabot[bot]) 2025-11-21 15:53:25.267 logging.py DEBUG - Update OL8 profiles (Armando Acosta) 2025-11-21 15:53:25.267 logging.py DEBUG - Fix truthy values in OL9 hipaa profile (Edgar Aguilar) 2025-11-21 15:53:25.267 logging.py DEBUG - CMP-3540: Remove API server insecure port and gateway assertions (Lance Bragstad) 2025-11-21 15:53:25.267 logging.py DEBUG - CMP-3540: Remove OCP pre 4.9 tls and kubelet rule assertions (Lance Bragstad) 2025-11-21 15:53:25.267 logging.py DEBUG - CMP-3540: Remove api-server-tls-cipher-suites assertion from CIS assertion files (Lance Bragstad) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in dconf_ini_file idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in grub2_argument_absent template idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in firewalld_sshd_port_enabled idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Bump peter-evans/create-or-update-comment from 4.0.0 to 5.0.0 (dependabot[bot]) 2025-11-21 15:53:25.267 logging.py DEBUG - Build distributed sshd config checks for RHCOS4 (Watson Yuuma Sato) 2025-11-21 15:53:25.267 logging.py DEBUG - Update OL9 profiles (Edgar Aguilar) 2025-11-21 15:53:25.267 logging.py DEBUG - CMP-3553: Add Kubernetes SSHD fixes for EL9 RHCOS4 nodes (Watson Yuuma Sato) 2025-11-21 15:53:25.267 logging.py DEBUG - shared: macros: oval: Fix evr datatype for dpkg-based distros (Eduardo Barretto) 2025-11-21 15:53:25.267 logging.py DEBUG - Make sure ansible task is properly executed when no variable is defined. (Gabriel Becker) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in file_groupownership_system_commands_dirs idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Removing aide_periodic_cron_checking (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Fixes to support new aide-0.19.2-2.el9.x86_64 release (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - CMP-3630: Filter route protection rule by edge termination (Lance Bragstad) 2025-11-21 15:53:25.267 logging.py DEBUG - Move target_oval_version to product_properties (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Check if line is already in a file (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Fixing macro documentation, putting OVAL tests in loop (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Adding newline (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Testing /sbin/ path acception (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - refactoring oval, improving regex in remediation (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Minor style change (Artem Denisov) 2025-11-21 15:53:25.267 logging.py DEBUG - Adding add_sections() (Arden97) 2025-11-21 15:53:25.267 logging.py DEBUG - Update rhcos4 assertion files (Lance Bragstad) 2025-11-21 15:53:25.267 logging.py DEBUG - Update ocp4 assertion files (Lance Bragstad) 2025-11-21 15:53:25.267 logging.py DEBUG - Make Ansible in SELinux rules idempotent (Jan Černý) 2025-11-21 15:53:25.267 logging.py DEBUG - Fix macro 'create_interactive_users_list_object' to also ignore users having /usr/sbin/nologin shell (Renaud Métrich) 2025-11-21 15:53:25.267 logging.py DEBUG - Add macro for SSHD Kubernetes drop-in files (Watson Yuuma Sato) 2025-11-21 15:53:25.267 logging.py DEBUG - CMP-3617: Remove Include directive from RHEL8 node remediation (Watson Yuuma Sato) 2025-11-21 15:53:25.267 logging.py DEBUG - Limit MachineConfig to OCP 4.12 (Watson Yuuma Sato) 2025-11-21 15:53:25.267 logging.py DEBUG - Make current SSHD Kubernetes fixes 4.12 only (Watson Yuuma Sato) 2025-11-21 15:53:25.267 logging.py DEBUG - Update products/ol10/profiles/ism_o_secret.profile (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Ensure that all rules in ISM O profile are in the control file for RHEL (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Move ISM O references to the control file (Matthew Burket) 2025-11-21 15:53:25.267 logging.py DEBUG - Remove obsolete code from ensure redhat gpg keys remediations. (Gabriel Becker) 2025-11-21 15:53:25.267 logging.py DEBUG - Use correct property in ansible remediation. (Gabriel Becker) 2025-11-21 15:53:25.268 logging.py DEBUG - Make Ansible in file_etc_security_opasswd idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Make Ansible in GRUB rules idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Set owners for tests/assertions/ocp4 (Watson Yuuma Sato) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix aide_build_database (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Only run dconf when there is an actual change in previous tasks. (Gabriel Becker) 2025-11-21 15:53:25.268 logging.py DEBUG - Update OCP4 and RHCOS4 STIG reference files (Watson Yuuma Sato) 2025-11-21 15:53:25.268 logging.py DEBUG - Make Ansible file_existence template idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Align directory mode with RPM expectations (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Make Ansible in audit_rules_immutable idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Prevent Ansible errors in accounts_user_dot_user_ownership (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Create new value for var_password_hashing_algorithm (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Add new value for variables var_auditd_disk_full_action var_auditd_disk_error_action Assign the designated value (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Re-assign correct value to sshd macs and kex (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Make Ansible in fips_custom_stig_sub_policy idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Make Ansible in aide_build_database idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Rewrite Ansible remediation in accounts_user_dot_group_ownership (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Rewrite Ansible remediation in accounts_user_dot_user_ownership (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Unmask all avahi (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix _guard var for package_iptables_installed (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Enable pam-auth-update way for pwhistory (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Enable nouser sce for Ubuntu 22.04 (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Override tftp name for all Ubuntu (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Override the service name (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Use systemd to restart (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Rework Ansible remediation in accounts_umask_interactive_users (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Make postfix_client_configure_mail_alias_postmaster idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Make postfix_client_configure_mail_alias idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Enable registering outcome of ansible_set_config_file (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix grub2_uefi_password tests and shared/grub2 (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Assign value to var_accounts_maximum_age_login_defs (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix typos in the docs directory. (Gabriel Becker) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix typos in the linux_os directory. (Gabriel Becker) 2025-11-21 15:53:25.268 logging.py DEBUG - Make Ansible Tasks in GRUB rules idempotent (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Remove custom Ansible remediation from service_pcscd_enabled (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix #13823 (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to c943625 (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.268 logging.py DEBUG - simulating aide db instalation in new tests for consistency (Arden97) 2025-11-21 15:53:25.268 logging.py DEBUG - Adding tests to pass both path formats (Arden97) 2025-11-21 15:53:25.268 logging.py DEBUG - Match only filename of Aide database (Arden97) 2025-11-21 15:53:25.268 logging.py DEBUG - On RHEL for library dirs only check *.so files (Matthew Burket) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix references order (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix ol9 stig profile identation (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Update command to check the etcd encryption provider being used (xiyuan) 2025-11-21 15:53:25.268 logging.py DEBUG - Add auto-remediation for rule service_systemd-coredump_disabled (Xiaojie Yuan) 2025-11-21 15:53:25.268 logging.py DEBUG - Update OL stig profiles to new references (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Update OL9 V1R2 disa references (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Update OL8 V2R5 disa references (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Implement OL08-00-030645 STIG ID (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Update rule for OL08-00-040350 (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Fix bootc platform CPE OVAL check (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Changing regex for aide.db file to support absolute path (Arden97) 2025-11-21 15:53:25.268 logging.py DEBUG - Removing duplicated words in shared/applicability/ (Arden97) 2025-11-21 15:53:25.268 logging.py DEBUG - Update root_permissions_syslibrary_files to check .so files for OL8 (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Update file_permissions_library_dirs to check .so files for OL8 (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Update file_ownership_library_dirs to check .so files for OL8 (Armando Acosta) 2025-11-21 15:53:25.268 logging.py DEBUG - Removing a duplicate word (Arden97) 2025-11-21 15:53:25.268 logging.py DEBUG - Clarification in describe_module_disable macro (Arden97) 2025-11-21 15:53:25.268 logging.py DEBUG - Unify RHEL with Fedora (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Import ssg for CI sync-cac-oscal (Sophia Wang) 2025-11-21 15:53:25.268 logging.py DEBUG - Update Automatus workaround (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Update applicability checks for Fedora (Jan Černý) 2025-11-21 15:53:25.268 logging.py DEBUG - Improvements of accounts_umask_root remediation and test scenarios (Matus Marhefka) 2025-11-21 15:53:25.268 logging.py DEBUG - add a fedora-cis sanity test using Packit / Testing Farm (Jiri Jaburek) 2025-11-21 15:53:25.268 logging.py DEBUG - Generate up-to-date default profile (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Reorder SME (Alan Moore) 2025-11-21 15:53:25.268 logging.py DEBUG - Improve the CI sync-cac-oscal to exclude the test data (Sophia Wang) 2025-11-21 15:53:25.269 logging.py DEBUG - Supplement fix for pr#13884 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Replace v1 profiles with v2 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Put note about #11899 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Prettier (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Add note for 5.4.1.4 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Enable rule accounts_set_post_pw_existing (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Fix root_unlock_time value (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Undraft cis jammy v2 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Clean up (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Enable time sync rules (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Correct the title of 1.7.10 Enable 1.7.10 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Enable rule 1.1.1.6 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Correct 6.1.2 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Correct rule 6.3.3.19 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Correct 2.4.1.2 and 2.4.1.8 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Correct 2.2.6 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Correct 2.2.4 in cis v2 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Correct 2.1.4 in cis v2 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Update reference_uris in tests (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Delete trailing space (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Added draft version of Ubuntu 22.04 CIS v2 profiles Append _v2 as domain separator for non-breaking change for now (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Update rule description (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Fix the ext_variable usage (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Change applicability of some rules in containers and in Image Mode (Jan Černý) 2025-11-21 15:53:25.269 logging.py DEBUG - Update the CI for collect the updated files (Sophia Wang) 2025-11-21 15:53:25.269 logging.py DEBUG - Update CIS RHEL10 so it doesn't contain wrong statuses. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Align RHEL10 CIS crypt policies rules. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add RHEL10 CCE identifiers. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Update profile stability data. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Update RHEL10 CIS Control File. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Update RHEL10 CIS control file. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add more rules to the CIS RHEL10 control file. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Update stability test data. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Adjust more variables. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add more rules and variables to CIS RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add more rules and variables. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add more rules to CIS RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add new CIS RHEL10 variable. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Revert more rules and variables. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Process audit items. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add more rules and variable. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Enable package_pam_pwquality_installed back 5.3.1.3. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add variable back to CIS RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add variable back. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add missing rules to CIS RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add missing rule. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Update RHEL10 CIS profiles metadata. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Update RHEL 10 CIS profile stability data. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Add removed rules back to RHEL10 default profile and missing CCE. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Refresh CIS Control File for RHEL10 release 1.0. (Gabriel Becker) 2025-11-21 15:53:25.269 logging.py DEBUG - Fix the mapping between rule.title and rule.description for CI (Sophia Wang) 2025-11-21 15:53:25.269 logging.py DEBUG - Bump actions/create-github-app-token from 2.1.1 to 2.1.4 (dependabot[bot]) 2025-11-21 15:53:25.269 logging.py DEBUG - Drop attempt for automatic remediation for iptables rules in SLE15 (teacup-on-rockingchair) 2025-11-21 15:53:25.269 logging.py DEBUG - Make use of important warning about lack of automatic remediation for iptables rules (teacup-on-rockingchair) 2025-11-21 15:53:25.269 logging.py DEBUG - Make sure correct iptables package is used in SLE15 (teacup-on-rockingchair) 2025-11-21 15:53:25.269 logging.py DEBUG - Enable SCE checks for iptables in SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.269 logging.py DEBUG - Add sle15 support in OVAL pam_faillock macros. Behaviour similar to debian (teacup-on-rockingchair) 2025-11-21 15:53:25.269 logging.py DEBUG - Add sle15 related changes to bash pam_faillock macros (teacup-on-rockingchair) 2025-11-21 15:53:25.269 logging.py DEBUG - Add sle15 support in bash remediation for accounts_passwords_pam_faillock_deny_root (teacup-on-rockingchair) 2025-11-21 15:53:25.269 logging.py DEBUG - Update dependency compliance-trestle to v3.9.2 (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.269 logging.py DEBUG - CMP-3591: Suppress warnings about file-permissions-proxy-kubeconfig (Lance Bragstad) 2025-11-21 15:53:25.269 logging.py DEBUG - CMP-3230: Update assertions for PCI-DSS testing on ARM (Lance Bragstad) 2025-11-21 15:53:25.269 logging.py DEBUG - Remove xserver-common for Ubuntu2204 (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Enable applicability for Ubuntu (Alan Moore) 2025-11-21 15:53:25.269 logging.py DEBUG - Revert unlock time var change (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - CMP-3731: Deprecate OCP STIG V2R2 and add V2R3 (Lance Bragstad) 2025-11-21 15:53:25.270 logging.py DEBUG - Set applicability not ARM64 for SPO and CLO rules (Watson Yuuma Sato) 2025-11-21 15:53:25.270 logging.py DEBUG - Create a new var var_accounts_passwords_pam_faillock_root_unlock_time (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - Add one minute to var (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - CMP-3385: Update assertion files for 4.16 node scans (Lance Bragstad) 2025-11-21 15:53:25.270 logging.py DEBUG - Fix root_unlock_time value (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - kernel_module_vfat_disabled: limit to non-uefi (Dimitri John Ledkov) 2025-11-21 15:53:25.270 logging.py DEBUG - Fix CCEs order (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Update sle15 product stability data (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Add SLE15 CCE identifiers (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Remove rules from sle15 general profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Update rule SLES-15-600450015 status to pending (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Remove rule SLES-15-150750045 from sle15 general profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Update some rules status to pending in sle15 general profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Update rule SLES-15-600450120 in sle15 general profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Update rule SLES-15-600450120 in sle15 geenral profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Remove rule SLES-15-600450075 from sle15 general profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Update rule SLES-15-600450030 (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Add rule file_cron_allow_exists to SLE15 general profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - add rule Enable chrony (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Update sle15 general profile control file (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - format general_sle15.yml (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Create SLE15 general profile (svet-se) 2025-11-21 15:53:25.270 logging.py DEBUG - Ensure that all rules in RHEL ANSSI have references (Matthew Burket) 2025-11-21 15:53:25.270 logging.py DEBUG - Enable guard var for firewall rules (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - Enable guard var for time sync rules (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - Configure sast-snyk-check to upload reports to our org (Watson Yuuma Sato) 2025-11-21 15:53:25.270 logging.py DEBUG - Improve CI sync-cac-oscal when rule/var description/options change (Sophia Wang) 2025-11-21 15:53:25.270 logging.py DEBUG - fix 404 link for ovn-kubernetes (sluetze) 2025-11-21 15:53:25.270 logging.py DEBUG - Bump actions/github-script from 7.0.1 to 8.0.0 (dependabot[bot]) 2025-11-21 15:53:25.270 logging.py DEBUG - Bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot[bot]) 2025-11-21 15:53:25.270 logging.py DEBUG - fix error of CI sync-cac-oscal (Sophia Wang) 2025-11-21 15:53:25.270 logging.py DEBUG - Make sure ansible will beahve ok also in check_mode (teacup-on-rockingchair) 2025-11-21 15:53:25.270 logging.py DEBUG - Bump softprops/action-gh-release from 2.3.2 to 2.3.3 (dependabot[bot]) 2025-11-21 15:53:25.270 logging.py DEBUG - Add SRG to SSSD package and service rules (Matthew Burket) 2025-11-21 15:53:25.270 logging.py DEBUG - Add a warning for aide_rule_database (Jan Černý) 2025-11-21 15:53:25.270 logging.py DEBUG - Adds ansible remediation for file_ownership_var_log_audit_stig rule (teacup-on-rockingchair) 2025-11-21 15:53:25.270 logging.py DEBUG - Correct fixtext section to reflect actual behaviour (teacup-on-rockingchair) 2025-11-21 15:53:25.270 logging.py DEBUG - Add support for directory_permissions_var_log_audit rule in SLE15 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.270 logging.py DEBUG - Remove OCP STIG V2R1 (Lance Bragstad) 2025-11-21 15:53:25.270 logging.py DEBUG - public.cyber.mil -> www.cyber.mil (Matthew Burket) 2025-11-21 15:53:25.270 logging.py DEBUG - Fix ruff error in tests/test_product_stability.py (Matthew Burket) 2025-11-21 15:53:25.270 logging.py DEBUG - Add test for single pool (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - Add the github app token to CI sync-cac-oscal for getting pr (Sophia Wang) 2025-11-21 15:53:25.270 logging.py DEBUG - Update OCP STIG version (Lance Bragstad) 2025-11-21 15:53:25.270 logging.py DEBUG - Remove OCP STIG V1R1 (Lance Bragstad) 2025-11-21 15:53:25.270 logging.py DEBUG - Fix RHEL 10 / Fedora Link in NTP group (Matthew Burket) 2025-11-21 15:53:25.270 logging.py DEBUG - remove rolling profile to align to rhel defaults and prevent irritations (sluetze) 2025-11-21 15:53:25.270 logging.py DEBUG - remove rpm_verify_permissions to prevent conflicts (sluetze) 2025-11-21 15:53:25.270 logging.py DEBUG - fix grammar in documentation (vojtapolasek) 2025-11-21 15:53:25.270 logging.py DEBUG - document the new parameter in OVAL macro (vojtapolasek) 2025-11-21 15:53:25.270 logging.py DEBUG - docs: update auditd_lineinfile template docs and describe new parameters (vojtapolasek) 2025-11-21 15:53:25.270 logging.py DEBUG - auditd_freq: use new feature and specify data type of the variable (vojtapolasek) 2025-11-21 15:53:25.270 logging.py DEBUG - auditd_lineinfile template: allow specifying data type of the XCCDF variable (vojtapolasek) 2025-11-21 15:53:25.270 logging.py DEBUG - update OVAL auditd_lineinfile macro to support specifying data type of the variable (vojtapolasek) 2025-11-21 15:53:25.270 logging.py DEBUG - fips group: apply platform directly to rules and remove it from group.yml (vojtapolasek) 2025-11-21 15:53:25.270 logging.py DEBUG - Fix the conflicts of "Auto-generated PRs" in oscal-content (Sophia Wang) 2025-11-21 15:53:25.270 logging.py DEBUG - Remove committed code (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - Allow both root and syslog uid (Alan Moore) 2025-11-21 15:53:25.270 logging.py DEBUG - Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 232bd31 (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.271 logging.py DEBUG - Update OL8 STIG IDs (Armando Acosta) 2025-11-21 15:53:25.271 logging.py DEBUG - Update behavior for OL to support only new releases (Armando Acosta) 2025-11-21 15:53:25.271 logging.py DEBUG - Remove CIS version from OCP profile name (Lance Bragstad) 2025-11-21 15:53:25.271 logging.py DEBUG - Ansible: remediation use systemd instead of systemd_service (vojtapolasek) 2025-11-21 15:53:25.271 logging.py DEBUG - Do not unselect rules from RHCOS4 STIG profile (Watson Sato) 2025-11-21 15:53:25.271 logging.py DEBUG - Update STIG for RHEL 9 to allow for FIPS:STIG (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - CMP-3232: Build PCI-DSS profiles on aarch64 (Lance Bragstad) 2025-11-21 15:53:25.271 logging.py DEBUG - Rename cis_ocp_1_4_0 to cis_ocp_1_7_0 (Lance Bragstad) 2025-11-21 15:53:25.271 logging.py DEBUG - CMP-3714: Remove CIS OpenShift 1.5.0 Profiles (Lance Bragstad) 2025-11-21 15:53:25.271 logging.py DEBUG - CMP-3713: Remove CIS OpenShift 1.4.0 Profiles (Lance Bragstad) 2025-11-21 15:53:25.271 logging.py DEBUG - Remove trailing whitespace (Armando Acosta) 2025-11-21 15:53:25.271 logging.py DEBUG - RHEL 9 STIG: align login timeout with the STIG policy (vojtapolasek) 2025-11-21 15:53:25.271 logging.py DEBUG - Fix kernel_module_disabled (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Fix audit_rules_dac_modification_fchmodat (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update conditionals in audit_rules_dac_modification_fremovexattr for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update RHEL10 to include Fedora in conditionals for audit_rules_privileged_commands tests (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update RHEL10 to include Fedora in conditionals for audit_rules_privileged_commands (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update RHEL10 to include Fedora in conditionals for accounts_password_pam_pwquality_*_auth (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Add fedora and clean up conditional service_rngd_enabled (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Add Fedora to RHEL 10 conditionals in ntp group (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Add Fedora to RHEL 10 conditionals in audit_dac_actions group (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Add fchmodat2 for Fedora in audit_rules_dac_modification_fchmodat (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update macros for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update package name for install_smartcard_packages (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update platforms on use_pam_wheel_group_for_su for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update sysctl template for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update test platform in sshd_rekey_limit (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Clean up test filename in sshd_include_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Fix spell error in partition_for_dev_shm (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update test platform for no_files_unowned_by_user on Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update tests in no_empty_passwords for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update template kernel_module_disabled for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update test plaform for Fedora in grub2_password (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Adjust platforms for Fedora on file_group_ownership_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Add Fedora and RHEL to platforms for file_etc_security_opasswd (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update platform on Fedora for ensure_pam_wheel_group_empty (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update directory_permissions_var_log_audit for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update platforms for dir_perms_world_writable_sticky_bits (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update test platforms for Fedora on dconf_gnome_login_banner_text (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update no_db_files for rule dconf_db_up_to_date on RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Only list the url when it exists (Watson Sato) 2025-11-21 15:53:25.271 logging.py DEBUG - check for disabled root login, remove protocol2 check and add reasoning (sluetze) 2025-11-21 15:53:25.271 logging.py DEBUG - Increase the size of /boot as 512 MB seems to causing issues with newer distros (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update applicability in tests for configure_crypto_policy for RHEL and Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update bash platform for Fedora on auditd_data_disk_full_action (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update bash platform for Fedora on auditd_data_disk_error_action (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update aide_check_audit_tools for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Ensure that fedora works for aide_build_database (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Adjust tests and OVAL for accounts_root_gid_zero for Fedora (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update applicability for accounts_passwords_pam_faillock_deny_root (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Add fedora to accounts_password_set_max_life_existing Ansible Remedation (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Allow for rsa and ed25519 keys by default for install VM (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Update to Fedora 42 for install VM. (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Adjust test applicability for accounts_password_pam_pwhistory_remember_system_auth (Matthew Burket) 2025-11-21 15:53:25.271 logging.py DEBUG - Add cis nist time pool (Alan Moore) 2025-11-21 15:53:25.271 logging.py DEBUG - Add cis nist time servers (Alan Moore) 2025-11-21 15:53:25.271 logging.py DEBUG - add e2e assertion (sluetze) 2025-11-21 15:53:25.271 logging.py DEBUG - add CCE identifiers (sluetze) 2025-11-21 15:53:25.271 logging.py DEBUG - fix small typos and add randomize rules for ram (sluetze) 2025-11-21 15:53:25.272 logging.py DEBUG - minor changes in wording (sluetze) 2025-11-21 15:53:25.272 logging.py DEBUG - finalize ruleset of sys 1.1 and sys 1.3 (sluetze) 2025-11-21 15:53:25.272 logging.py DEBUG - initial setup (sluetze) 2025-11-21 15:53:25.272 logging.py DEBUG - Ensure that tests for account_password_pam_faillock_system_auth work on Fedora (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Ensure tests run for account_password_pam_faillock_password_auth (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - move ingress_controller_tls_cipher_suites to networking (sluetze) 2025-11-21 15:53:25.272 logging.py DEBUG - retire old tls cipher suites rules (sluetze) 2025-11-21 15:53:25.272 logging.py DEBUG - Only allow password set for root on Ubuntu 2204 (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Reorder 2.4.1.2 for cis_ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Pass rule if IPv6 is disabled on kernel (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix the delimiter of debian time source (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Bump to 0.1.79 (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Update product stability (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Drop audispd binary from default audit binaries for ol and ubuntu platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Make test more verbose just to see root cause of failure (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - update product stability definitions (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Use platform specific audit binaries (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Define platform specifc paths for audit binaries (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Update accounts_password template to check password-auth (Armando Acosta) 2025-11-21 15:53:25.272 logging.py DEBUG - Update accounts_password template test to check password-auth (Armando Acosta) 2025-11-21 15:53:25.272 logging.py DEBUG - Add platform conditional for OL8 (Armando Acosta) 2025-11-21 15:53:25.272 logging.py DEBUG - Update rule, oval & remediation files accounts_password_pam_retry for OL8 (Armando Acosta) 2025-11-21 15:53:25.272 logging.py DEBUG - Update test accounts_password_pam_retry for OL (Armando Acosta) 2025-11-21 15:53:25.272 logging.py DEBUG - Update accounts_password_pam_pwquality_retry for OL8 STIG (Armando Acosta) 2025-11-21 15:53:25.272 logging.py DEBUG - Update accounts_password_pam_pwquality_retry for OL9 STIG (Armando Acosta) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix broken unit test (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Add ruff to project and CI (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix shadowing of local_test_env (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix more error messages (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Remove useless f-strings (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix E741 (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix comparing directly to type() (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix comparing directly to False (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Remove useless variables (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Add noqa F841 for existing offenders (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Clean up whitespace (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Add file_group_ownership_var_log_audit to sle15 standard profile (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix error message in rewrite_section_value (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Update RHEL 9 STIG SCAP Content to V2R5 (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Update contributors file for 0.1.78 (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Update remedation for fips_custom_stig_sub_policy (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix mailmap and exclusions for contributors (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Update fips_custom_stig_sub_policy policy and rule files (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Adjust variables in fips_custom_stig_sub_policy (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Remove leftover args (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Add RHEL-09-654096 (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Clean up of fips_custom_stig_sub_policy (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Update RHEL 9 STIG to V2R5 (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Clean up rootfiles_configured (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Add new rule fips_custom_stig_sub_policy (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Remove empty "reference:" field (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Yamlfix (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix trailing space (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Add vars back (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Migrate v1 cis jammy and stig v2r3 profiles to control (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Add support for file_group_ownership_var_log_audit in SLE platform (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to e127e0e (red-hat-konflux-kflux-prd-rh02[bot]) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix indentation (teacup-on-rockingchair) 2025-11-21 15:53:25.272 logging.py DEBUG - Remove requirement SLEM-05-412030 from SLEM5 STIG profile (svet-se) 2025-11-21 15:53:25.272 logging.py DEBUG - Update SLEM5 DISA STIG manual to V1R2 (svet-se) 2025-11-21 15:53:25.272 logging.py DEBUG - Update SLEM5 STIG version to V1R2 (svet-se) 2025-11-21 15:53:25.272 logging.py DEBUG - Remove non stig duplicated rule (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Remove reference ids for Ubuntu jammy cis and stig controls (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - lint and prettier (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Create initial control file (Alan Moore) 2025-11-21 15:53:25.272 logging.py DEBUG - Move from public.cyber.mil to www.cyber.mil (Matthew Burket) 2025-11-21 15:53:25.272 logging.py DEBUG - Update SLE12 DISA STIG manual to V3R3 (svet-se) 2025-11-21 15:53:25.272 logging.py DEBUG - Update SLE12 STIG version to V3R3 (svet-se) 2025-11-21 15:53:25.272 logging.py DEBUG - Fix mount module name (Jan Černý) 2025-11-21 15:53:25.273 logging.py DEBUG - Add SLE15 stigid to rule audit_rules_var_spool_cron (svet-se) 2025-11-21 15:53:25.273 logging.py DEBUG - Add SLE15 stigid to rule audit_rules_etc_cron_d (svet-se) 2025-11-21 15:53:25.273 logging.py DEBUG - Add SLE15 CCE identifier to rule audit_rules_var_spool_cron (svet-se) 2025-11-21 15:53:25.273 logging.py DEBUG - Add SLE15 CCE identifier to rule audit_rules_etc_cron_d (svet-se) 2025-11-21 15:53:25.273 logging.py DEBUG - Add rules audit_rules_etc_cron_d and audit_rules_var_spool_cron to SLE15 STIG profile (svet-se) 2025-11-21 15:53:25.273 logging.py DEBUG - Update SLE15 DISA STIG manual to V2R5 (svet-se) 2025-11-21 15:53:25.273 logging.py DEBUG - Update SLE15 STIG version to V2R5 (svet-se) 2025-11-21 15:53:25.273 logging.py DEBUG - Fix sysctl module name (Jan Černý) 2025-11-21 15:53:25.273 logging.py DEBUG - Use FQCN in static checks (Jan Černý) 2025-11-21 15:53:25.273 logging.py DEBUG - Use FQCN in templates (Jan Černý) 2025-11-21 15:53:25.273 logging.py DEBUG - Update rules applicability in containers (Matus Marhefka) 2025-11-21 15:53:25.273 logging.py DEBUG - Add insights-runtime-extractor-scc to default regex list of variable (Anna-Koudelkova) 2025-11-21 15:53:25.273 logging.py DEBUG - Bump actions/checkout from 4.1.7 to 5.0.0 (dependabot[bot]) 2025-11-21 15:53:25.273 logging.py DEBUG - Bump actions/create-github-app-token from 2.1.0 to 2.1.1 (dependabot[bot]) 2025-11-21 15:53:25.273 logging.py DEBUG - Bump qltysh/qlty-action from 2.1.0 to 2.2.0 (dependabot[bot]) 2025-11-21 15:53:25.273 logging.py DEBUG - Use FQCN in Jinja macros (Jan Černý) 2025-11-21 15:53:25.273 logging.py DEBUG - Enable sle platform for rpm_verify_ownership rule (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - Set ipsec package name for sle15 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - Install package in the test scenario (Jan Černý) 2025-11-21 15:53:25.273 logging.py DEBUG - Add missing rules to RHEL 8 STIG stable profiles (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Add missing cces (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Update RHEL 8 STIG URL and formatting (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Update references based on #13774 (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_user_dot_group_ownership/tests/home_dirs_one_absent_group_ok.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - Bump actions/create-github-app-token from 2.0.6 to 2.1.0 (dependabot[bot]) 2025-11-21 15:53:25.273 logging.py DEBUG - Bump qltysh/qlty-action from 2.0.0 to 2.1.0 (dependabot[bot]) 2025-11-21 15:53:25.273 logging.py DEBUG - Fix tests for gid ownership (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - grammar fix (vojtapolasek) 2025-11-21 15:53:25.273 logging.py DEBUG - Add new rules to RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Update RHEL 8 STIG to v2r4 (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Use unique parameter for oval varaiable list so in case list of gids (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - For SLE platforms we do not have separate gid for new user (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - Use user ID from passwd entry to compare with uid variables (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - Enable for SLE bash remediation of file_permission_user_bash_history rule (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - Update kernel package name for wider applicability (Marcus Burghardt) 2025-11-21 15:53:25.273 logging.py DEBUG - Enable all_apparmor_profiles_enforced for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - Enable multi_platform_sle platforms for encrypt_partition oval check (teacup-on-rockingchair) 2025-11-21 15:53:25.273 logging.py DEBUG - release_helper: remove the release --tag option (vojtapolasek) 2025-11-21 15:53:25.273 logging.py DEBUG - minor modifications, mainly merging the "update the stable branch" section with the "release" section (vojtapolasek) 2025-11-21 15:53:25.273 logging.py DEBUG - Fix ssg get invalid jinja macros dir exception (axuan) 2025-11-21 15:53:25.273 logging.py DEBUG - update OVAL test for debian in file_ownerships_var_log (Alexandre Skrzyniarz) 2025-11-21 15:53:25.273 logging.py DEBUG - Fix ssg get incorrect profile variable value error (axuan) 2025-11-21 15:53:25.273 logging.py DEBUG - Improve SCE templated content for sebool. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - Remove environment bootc from SCE content. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - update the release_helper script (vojtapolasek) 2025-11-21 15:53:25.273 logging.py DEBUG - update documentation (vojtapolasek) 2025-11-21 15:53:25.273 logging.py DEBUG - Remove unrendered /n from SCE content. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - Update product stability with new app-srg-ctr URI (Watson Sato) 2025-11-21 15:53:25.273 logging.py DEBUG - Disambiguate APP-SRG and OCP STIGID (Watson Sato) 2025-11-21 15:53:25.273 logging.py DEBUG - Fix SCE jinja content. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - Enable SCE content on Fedora by default. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - Add SCE content for RPM verify rules. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - Remove ubuntu2004 product_stability test (Eduardo Barretto) 2025-11-21 15:53:25.273 logging.py DEBUG - Bump actions/download-artifact from 4 to 5 (dependabot[bot]) 2025-11-21 15:53:25.273 logging.py DEBUG - Bump qltysh/qlty-action from 1.1.1 to 2.0.0 (dependabot[bot]) 2025-11-21 15:53:25.273 logging.py DEBUG - Add new rule audit_rules_var_spool_cron (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Add new rule audit_rules_etc_cron_d (Matthew Burket) 2025-11-21 15:53:25.273 logging.py DEBUG - Add stigref file for RHCOS4 (Watson Sato) 2025-11-21 15:53:25.273 logging.py DEBUG - Update OL8 releases in account_password_pam_faillock_system/password_auth (Armando Acosta) 2025-11-21 15:53:25.273 logging.py DEBUG - Update SCE macros and docs. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - Improve OVAL checks for nss-altfiles (Jan Černý) 2025-11-21 15:53:25.273 logging.py DEBUG - RHEL8 Enable SCE content build by default. (Gabriel Becker) 2025-11-21 15:53:25.273 logging.py DEBUG - Improve SCE content to allow skipping rpm owned files. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - Add new parameter to SCE content to exclude certain directories from search. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - Add SCE jinja macro documentation. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - Add SCE content for rules that traverse wholefilesystem. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - Add RHEL platform to unit tests. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - Fix SCE jinja macro. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - Add nss-altfiles package as requirement to unit test. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - fix rule file_owner_var_log_syslog for debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - Remove remaining dependencies on installed_OS_is_FIPS_certified (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Fix ssg get_profiles_from_products function exception (axuan) 2025-11-21 15:53:25.274 logging.py DEBUG - update package_audit-audispd-plugins_installed for debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for auditd_data_retention_space_left_action (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for auditd_data_retention_max_log_file_action (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for auditd_data_retention_admin_space_left_action (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for auditd_data_disk_full_action (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for auditd_data_disk_error_action (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for audit_rules_suid_auid_privilege_function (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - Use UBI minimal instead of UBI micro (Lance Bragstad) 2025-11-21 15:53:25.274 logging.py DEBUG - Enable RHEL SCE content for rules that traverse whole filesystem. (Gabriel Becker) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for disable_users_coredumps (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - update debian bash remediation for kernel_module_disabled template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - update file_owner_var_log_syslog for debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation in kernel_module_disabled template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for systemd_journal_upload_server_tls (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable bash remediation for service_enabled template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for use_pam_wheel_group_for_su (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for ensure_pam_wheel_group_empty (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian bash remediation for no_empty_passwords_unix (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable bash remediation for accounts_password_set_max_life_existing (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable bash remediation for account_disable_post_pw_expiration (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - add debian support for set_password_hashing_algorithm_systemauth (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian remediation for accounts_password_pam_pwhistory_enforce_root (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - enable debian in aide_check_audit_tools remediation (Alexandre Skrzyniarz) 2025-11-21 15:53:25.274 logging.py DEBUG - Add the fedora to CI sync-cac-oscal (Sophia Wang) 2025-11-21 15:53:25.274 logging.py DEBUG - add kickstart file for bsi profile (sluetze) 2025-11-21 15:53:25.274 logging.py DEBUG - Update FQCN in ansible remediation (Armando Acosta) 2025-11-21 15:53:25.274 logging.py DEBUG - Align build of profiles with CPAAS (Watson Yuuma Sato) 2025-11-21 15:53:25.274 logging.py DEBUG - Add required labels to ship releases (Watson Yuuma Sato) 2025-11-21 15:53:25.274 logging.py DEBUG - Update oval and remediation files to support drop-in and string (Armando Acosta) 2025-11-21 15:53:25.274 logging.py DEBUG - Update tests to check drop-in disable_users_coredumps rule (Armando Acosta) 2025-11-21 15:53:25.274 logging.py DEBUG - SLE kernel package may be called kernel-default-base (teacup-on-rockingchair) 2025-11-21 15:53:25.274 logging.py DEBUG - docs: Define how to handle ADR PRs (Evgeny Kolesnikov) 2025-11-21 15:53:25.274 logging.py DEBUG - Make remeditaion more consistent working only with drop-in config files (teacup-on-rockingchair) 2025-11-21 15:53:25.274 logging.py DEBUG - Add support of slmicro6 for require_singleuser_auth (teacup-on-rockingchair) 2025-11-21 15:53:25.274 logging.py DEBUG - Add OL9 in oval to directory_permissions_var_log_audit rule (Armando Acosta) 2025-11-21 15:53:25.274 logging.py DEBUG - Remove out dated Code Climate badage (Matthew Burket) 2025-11-21 15:53:25.274 logging.py DEBUG - Prevent problems with single quotes (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Move service tasks to the beginning (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Reduce service_facts task (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Remove superfluous variable (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Add a tag (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Use a deep copy to prevent references in output YAML (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Add unit tests (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Move AnsibleSnippetsProcessor to ssg/ansible.py (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Process Ansible Playbook (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Set package name at build time (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Extend test scenario to RHEL 10 (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - remove remediation=none from new test scenarios (vojtapolasek) 2025-11-21 15:53:25.274 logging.py DEBUG - grub2_admin_username: make regex less strict regarding spaces and add test scenario (vojtapolasek) 2025-11-21 15:53:25.274 logging.py DEBUG - grub2_uefi_admin_username: make regex not so strict regarding spacesand add a test scenario (vojtapolasek) 2025-11-21 15:53:25.274 logging.py DEBUG - shared grub2 test script: add function which creates new Grub2 admin user with indentation added (vojtapolasek) 2025-11-21 15:53:25.274 logging.py DEBUG - selinux_not_disabled: do not use fixfile srelabel (vojtapolasek) 2025-11-21 15:53:25.274 logging.py DEBUG - selinux_state: do not use fixfiles relabel (vojtapolasek) 2025-11-21 15:53:25.274 logging.py DEBUG - Fix tests for rule grub2_pti_argument (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - Install package polkit-pkla-compat (Jan Černý) 2025-11-21 15:53:25.274 logging.py DEBUG - fix redundant spaces (vojtapolasek) 2025-11-21 15:53:25.274 logging.py DEBUG - Add trailing newline to ansible remediation (Armando Acosta) 2025-11-21 15:53:25.275 logging.py DEBUG - Update remediation and oval file to support drop-in (Armando Acosta) 2025-11-21 15:53:25.275 logging.py DEBUG - Include CIS reference in Fedora product info (Marcus Burghardt) 2025-11-21 15:53:25.275 logging.py DEBUG - Introduce CIS profiles for Fedora (Marcus Burghardt) 2025-11-21 15:53:25.275 logging.py DEBUG - Introduce CIS control file for Fedora (Marcus Burghardt) 2025-11-21 15:53:25.275 logging.py DEBUG - CI: fedora gating - collapse the multiline command (vojtapolasek) 2025-11-21 15:53:25.275 logging.py DEBUG - Add new tests to check drop-in (Armando Acosta) 2025-11-21 15:53:25.275 logging.py DEBUG - Remove the warning/error message (Alan Moore) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix sshd_rekey_limit test scenarios (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix yaml load in srg import (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - PY_OPENPYXL is needed for utils-import_disa_stig_sanity (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Add PY_OPENPYXL requirement for import_srg_spreadsheet-sanity (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Add openpyxl to test requirements (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix PEP8 issues in utils/srg_utils/__init__.py (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix circle import in srg_utils (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Add type hints for new methods in utils/srg_utils/__init__.py (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix missing replace_yaml_key in utils/srg_utils/__init__.py (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Only test import_srg_spreadsheet-sanity or 3.7 and newer (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix imports for utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Add sanity test for utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Enable ENABLE_PYTHON_COVERAGE for Fedora Gate (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Move to qlty code coverage (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix package name in service_cron_enabled (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Use template in grub2_nousb_argument (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Make sure oval service disable macro covers also not found definition (teacup-on-rockingchair) 2025-11-21 15:53:25.275 logging.py DEBUG - Customize file in CO Bundle to be nudged (Watson Yuuma Sato) 2025-11-21 15:53:25.275 logging.py DEBUG - Add LICENSE to CO content image (Watson Yuuma Sato) 2025-11-21 15:53:25.275 logging.py DEBUG - Enable hermetic build of content image (Watson Yuuma Sato) 2025-11-21 15:53:25.275 logging.py DEBUG - Customize pipeline (Watson Yuuma Sato) 2025-11-21 15:53:25.275 logging.py DEBUG - Change TS from fail to pass (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Ignore BSI RHEL 9 reformat (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Reformat BSI RHEL 9 control files (Matthew Burket) 2025-11-21 15:53:25.275 logging.py DEBUG - Use different quotes (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix rule auditd_freq (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Remove configure_crypto_policy (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - CPLYTM-916: expand internal function to pass yaml dict (Marcus Burghardt) 2025-11-21 15:53:25.275 logging.py DEBUG - Remove non-exist bin path (Alan Moore) 2025-11-21 15:53:25.275 logging.py DEBUG - Fix architecture dependent path (Miha Purg) 2025-11-21 15:53:25.275 logging.py DEBUG - fix block scalars (sluetze) 2025-11-21 15:53:25.275 logging.py DEBUG - Support banner with single quote (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - update debian13 product stability data (Alexandre Skrzyniarz) 2025-11-21 15:53:25.275 logging.py DEBUG - update debian12 product stability data (Alexandre Skrzyniarz) 2025-11-21 15:53:25.275 logging.py DEBUG - add CIS debian12 profiles (Alexandre Skrzyniarz) 2025-11-21 15:53:25.275 logging.py DEBUG - add debian12 CIS benchmark (Alexandre Skrzyniarz) 2025-11-21 15:53:25.275 logging.py DEBUG - add debian support for rule gnome_gdm_disable_xdmcp (Alexandre Skrzyniarz) 2025-11-21 15:53:25.275 logging.py DEBUG - Ensure tmout.sh and ssh_confirm.sh have correct permissions on creation (Miha Purg) 2025-11-21 15:53:25.275 logging.py DEBUG - add cces for rhel9 (sluetze) 2025-11-21 15:53:25.275 logging.py DEBUG - Disable asserts in Ansible check mode (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Prevent fail in check mode (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Ensure the audit rules file exists (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Prevent fail in check mode if the file doesn't exist (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Configure fapolicyd only if fapolicyd is installed (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Configure AIDE only if AIDE is installed (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Ensure AIDE configuration file exists (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Avoid errors in check mode in authselect tasks (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Check that the file exists (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Prevent using undefined variables (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Run some shell commands in check mode (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Do not fail the assert in check mode (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Ensure the SSHD config file exists (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - Prevent fail because of nonexistent file (Jan Černý) 2025-11-21 15:53:25.275 logging.py DEBUG - fix CCE definition (Marek Haičman) 2025-11-21 15:53:25.275 logging.py DEBUG - add bsi rhel9 profile (sluetze) 2025-11-21 15:53:25.275 logging.py DEBUG - RHEL 9 CIS: complete 6.3.3.5 (vojtapolasek) 2025-11-21 15:53:25.275 logging.py DEBUG - RHEL 9 CIS: add ensure_gpgcheck_never_disabled (vojtapolasek) 2025-11-21 15:53:25.276 logging.py DEBUG - make service_rngd_enabled applicable in RHEL 8.4 + in case kernel is not in FIPS mode (vojtapolasek) 2025-11-21 15:53:25.276 logging.py DEBUG - Update to drop in files (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - OPENSCAP-5940: Fix SCAPVal fail (Jan Černý) 2025-11-21 15:53:25.276 logging.py DEBUG - add common certs rule (sluetze) 2025-11-21 15:53:25.276 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.3.1 to 5.4.1 (dependabot[bot]) 2025-11-21 15:53:25.276 logging.py DEBUG - Update dependency compliance-trestle to v3.9.1 (red-hat-konflux[bot]) 2025-11-21 15:53:25.276 logging.py DEBUG - Update correct value from correct_value_multiple_includes test (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - Update macros from sshd remediations for OL (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - Update oval to check included files (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - Remove warning from tftp_uses_secure_mode_systemd rule (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - Add tests to tftp_uses_secure_mode_systemd (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - Add oval & remediations to tftp_uses_secure_mode_systemd (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - Update rule for STIG id OL09-00-002426 (Armando Acosta) 2025-11-21 15:53:25.276 logging.py DEBUG - Add the ability built more than one product with -DSSG_SRG_XLSX_EXPORT=ON (Matthew Burket) 2025-11-21 15:53:25.276 logging.py DEBUG - Clean tests in sshd_rekey_limit (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Update linux_os/guide/services/ssh/ssh_server/sshd_rekey_limit/oval/shared.xml (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Override template no_file test (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Disable symbolic test for non-Ubuntu distro (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Use default order in configure_gnutls_tls_crypto_policy (Jan Černý) 2025-11-21 15:53:25.276 logging.py DEBUG - Allow spaces around equal sign (Jan Černý) 2025-11-21 15:53:25.276 logging.py DEBUG - Define firewall var (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Ignore return code of find if dir not exist (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - switch to warning to pass more workflow tests (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - non_exec test only applucable on Ubuntu 24.04 (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Use valid flag (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Make uexec check Ubuntu24 only (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Never follow symbolic in tests Execute find in any "possible" directory Enable user execute perm which won't affect non-Ubuntu platforms tests but will invalidate tests if on Ubuntu platform (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Oval check for file with uexec (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Remove unnecessary useradd (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Add a test for gid < 1000 (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Update product stability data for OL9 (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Update OVAL dconf_gnome_screensaver_idle_delay (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Set sshd distributed to true in OL9 (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Update tests for sshd_rekey_limit (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Update OVAL for sshd_rekey_limit (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Red Hat Konflux kflux-prd-rh02 update compliance-operator-content-dev Signed-off-by: red-hat-konflux-kflux-prd-rh02 (red-hat-konflux-kflux-prd-rh02) 2025-11-21 15:53:25.276 logging.py DEBUG - Use gid_min for consistency (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Adjust description of file_permissions_sudo (Matthew Burket) 2025-11-21 15:53:25.276 logging.py DEBUG - Add Qlty (Matthew Burket) 2025-11-21 15:53:25.276 logging.py DEBUG - Set var_screensaver_lock_delay for OL9 (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Remove rule from OL09-00-001085 (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Add formatting PR to ignored rev list (Matthew Burket) 2025-11-21 15:53:25.276 logging.py DEBUG - Correct invalid multiline string indicator in yaml file (axuan) 2025-11-21 15:53:25.276 logging.py DEBUG - fix: change typo in mapped NIST control (Nathan Strahs) 2025-11-21 15:53:25.276 logging.py DEBUG - file_groupownership_system_commands_dirs test scenario: add group which is being used (vojtapolasek) 2025-11-21 15:53:25.276 logging.py DEBUG - Format control yaml files (axuan) 2025-11-21 15:53:25.276 logging.py DEBUG - Add step to sync-cac-oscal to squash multiple commits (Sophia Wang) 2025-11-21 15:53:25.276 logging.py DEBUG - Update linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/oval/shared.xml (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Ensure testing data is used by test_variables.py (Marcus Burghardt) 2025-11-21 15:53:25.276 logging.py DEBUG - Update unit test to check level inheritance (Marcus Burghardt) 2025-11-21 15:53:25.276 logging.py DEBUG - Simplify internal function to load control manager (Marcus Burghardt) 2025-11-21 15:53:25.276 logging.py DEBUG - Add test to disallow zero in screensaver_idle_delay (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Disallow 0 for screensaver_idle_delay (Edgar Aguilar) 2025-11-21 15:53:25.276 logging.py DEBUG - Refactor to reduce cognitive complexity (Marcus Burghardt) 2025-11-21 15:53:25.276 logging.py DEBUG - Fix level inheretance when processing profiles (Marcus Burghardt) 2025-11-21 15:53:25.276 logging.py DEBUG - add accounts_passwords_pam_faillock_deny_root to debian profiles (Alexandre Skrzyniarz) 2025-11-21 15:53:25.276 logging.py DEBUG - Drop /usr/libexec for Ubuntu (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Expand uid whitelist to uid_min (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Add symlink test (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Never follow symbolic links (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Exclude system group with gid < 1000 (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - Support drop-in files in coredump rules (Jan Černý) 2025-11-21 15:53:25.276 logging.py DEBUG - Disable template for Ubuntu 2404 (Alan Moore) 2025-11-21 15:53:25.276 logging.py DEBUG - add debian support for accounts_passwords_pam_faillock_deny_root (Alexandre Skrzyniarz) 2025-11-21 15:53:25.276 logging.py DEBUG - Move RHEL8 OSPP/CUI to control files. (Gabriel Becker) 2025-11-21 15:53:25.276 logging.py DEBUG - Update default profile for Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.277 logging.py DEBUG - Mark Ubuntu 24.04 STIG profile as V1R1 (Miha Purg) 2025-11-21 15:53:25.277 logging.py DEBUG - Adapt chronyd_specify_remote_server for Ubuntu 24.04 STIG (Miha Purg) 2025-11-21 15:53:25.277 logging.py DEBUG - Replace process_file_with_macros by process_file (Jan Černý) 2025-11-21 15:53:25.277 logging.py DEBUG - Ignore the dir since benchmark doesn't care (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Add more test cases (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Use supported gid opion to do less match (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Remove backslash (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Fix oval operation (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Adjust the desciption (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Replace open_and_macro_expand by open_and_expand (Jan Černý) 2025-11-21 15:53:25.277 logging.py DEBUG - Detail the description (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Apply all correct cases to all platform (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Do no comment (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Enable check_root_user on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.277 logging.py DEBUG - Add eol (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Regard all gid <= gid_min as system account and whitelist them (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Update profile to variable in banner_etc_issue_disa_dod_short test (Armando Acosta) 2025-11-21 15:53:25.277 logging.py DEBUG - Apply suggestions from code review (ericeberry) 2025-11-21 15:53:25.277 logging.py DEBUG - Update doc (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Set maxdepth to 1 if FILE_REGEX is true while RECURSIVE is false (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Restrict depth to 0 when recursive is false (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Doc update (Alan Moore) 2025-11-21 15:53:25.277 logging.py DEBUG - Add login_defs_path variable to stability tests (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Move login.defs path definition in product_properties (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Update reference of available SLMicro6 CCEs (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Enable AIDE rules (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Adopt more elegant way to edit ini config file for systemd_journal_upload_url (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Drop aide rules due to incompatability with slmicro6 for now - aide_scan_notification rule depends on sendmail to work, notifications are send via mail command, but for now it depends to sendmail tool, which is not present on slmicro6 - aide_build_database does not seem to be initialized correctly only by init aide command (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Make sure that opnessh-clients patch changes from /usr/lib/ssh to /usr/libexec/ssh is reflected in support for slmicro6 (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Fix CCE id for slmicro6 (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Drop non-crucial rules from general (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Grub2 pkg installed check for slmicro6 (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Drop non-functional/broken rules from the general profile for slmicro6 and fix reference (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Drop partition_for_var_log_audit from General profile for SLMicro 6 (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule chronyd_or_ntpd_set_maxpoll to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Fix authorized users for slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Move login_defs_path to use /usr/etc/login.defs for slmicro6 for set_password_hashing_algorithm_logindefs rule (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Add slmicro6 CCEs (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule file_permissions_local_var_log_messages to support slmicro (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule aide_build_database to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update var_accounts_authorized_local_users_regex (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update sysctl to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update describe_arpc to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update sysctl_kernel_ipv6_disable to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule security_patches_up_to_date to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule aide_build_database to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule installed_OS_is_vendor_supported to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule selinux_state to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule permissions_local_var_log to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule grub2_uefi_password to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule grub2_password to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule accounts_tmout to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule accounts_passwords_pam_faildelay_delay to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule file_groupowner_etc_issue tu support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule banner_etc_issue to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule sshd_use_approved_macs to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule sshd_use_approved_kex_ordered_stig to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update file_permissions_sshd_private_key to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule audit_rules_suid_privilege_function to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule audit_rules_unsuccessful_file_modification_rename to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update slmicro6 general profile (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule install_smartcard_packages to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Add CCEs for slmicro6 (teacup-on-rockingchair) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule aide_scan_notification to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule clean_components_post_updating to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update kernel_module_disabled template to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Remove rule smartcard_configure_cert_checking from slmicro6 general profile (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Update rule sshd_use_approved_kex_ordered_stig to support slmicro6 (svet-se) 2025-11-21 15:53:25.277 logging.py DEBUG - Assigned CCE numbers to SLEM 6 rules - part 4 (rchikov) 2025-11-21 15:53:25.277 logging.py DEBUG - Assigned CCE numbers to SLEM 6 rules - part 3 (rchikov) 2025-11-21 15:53:25.277 logging.py DEBUG - Assigned CCE numbers to SLEM 6 rules - part 2 (rchikov) 2025-11-21 15:53:25.278 logging.py DEBUG - Update rule encrypt_partitions to support slmicro6 (svet-se) 2025-11-21 15:53:25.278 logging.py DEBUG - Update oval feed url (svet-se) 2025-11-21 15:53:25.278 logging.py DEBUG - Update sysctl template to support slmicro6 (svet-se) 2025-11-21 15:53:25.278 logging.py DEBUG - Assigned CCE numbers to SLEM 6 rules - part 1 (rchikov) 2025-11-21 15:53:25.278 logging.py DEBUG - Added file with available CCE numbers for SLEM 6 (rchikov) 2025-11-21 15:53:25.278 logging.py DEBUG - Drop gnome_gdm_disable_unattended_automatic_login not relevant for slmicro6 (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add var_user_initialization_files_regex=all_dotfiles needed for accounts_user_dot_no_world_writable_programs rule (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Fix for audit_rules_enable_syscall_auditing ansible throws exception with global regex (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - /etc/login.defs replaced to /usr/etc/login.defs in OVAL, BASH, ANSIBLE and tests for slmicro6 (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add support for slmicro6 of accounts_authorized_local_users rule (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Fix display_login_attempts to match latest pam lastlog2 lib (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add feed url for security patches (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add fix for accounts_logon_fail_delay - /etc/login.defs moved to /usr/etc/login.defs (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Fix for no_empty_passwords: renamed slmicro5.yml to slmicro.yml should cover both and added slmicro6 to check all files in /etc/pam.d/* (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - accounts_have_homedir_login_defs: /etc/login.defs replaced to /usr/etc/login.defs (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Fix no_shelllogin_for_systemaccounts: /etc/login.defs replaced to /usr/etc/login.defs in OVAL check patch (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Exclude accounts_passwords_pam_tally2 rules (svet-se) 2025-11-21 15:53:25.278 logging.py DEBUG - Fixed small bugs. Updated few rules to support SLEM 6 (rchikov) 2025-11-21 15:53:25.278 logging.py DEBUG - Updated templates and rules to support SLEM6 (rchikov) 2025-11-21 15:53:25.278 logging.py DEBUG - Add oval check if installed OS is slmicro6 (svet-se) 2025-11-21 15:53:25.278 logging.py DEBUG - Add oval check installed OS is slmicro6 (svet-se) 2025-11-21 15:53:25.278 logging.py DEBUG - Rename standard profile to general (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Address review notes (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add ability to build for slmicro6 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add support for the installed os rule to support slmicro6 (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add definitions for support slmicro6 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.278 logging.py DEBUG - Add distributed config support for sshd_use_strong_macs (Alan Moore) 2025-11-21 15:53:25.278 logging.py DEBUG - Add distributed config support (Eric Berry) 2025-11-21 15:53:25.278 logging.py DEBUG - Add dropin tests for emergency service in OL (Edgar Aguilar) 2025-11-21 15:53:25.278 logging.py DEBUG - Add dropin option for emergency service in OL (Edgar Aguilar) 2025-11-21 15:53:25.278 logging.py DEBUG - Add tests for OL in require_singleuser_auth (Edgar Aguilar) 2025-11-21 15:53:25.278 logging.py DEBUG - Update ansible in require_singleuser_auth for OL (Edgar Aguilar) 2025-11-21 15:53:25.278 logging.py DEBUG - Add rule title in auditd mail acct ansible (Edgar Aguilar) 2025-11-21 15:53:25.278 logging.py DEBUG - Update tests in auditd_data_retention_action_mail_acct (Edgar Aguilar) 2025-11-21 15:53:25.278 logging.py DEBUG - Update automation in auditd_data_retention_action_mail_acct (Edgar Aguilar) 2025-11-21 15:53:25.278 logging.py DEBUG - add the content PR link to the auto-generated oscal PR comment (Sophia Wang) 2025-11-21 15:53:25.278 logging.py DEBUG - Include rule accounts_set_post_pw_existing for cis Ubnutu (Alan Moore) 2025-11-21 15:53:25.278 logging.py DEBUG - Workaround OpenSCAP issue for Image Mode (Jan Černý) 2025-11-21 15:53:25.278 logging.py DEBUG - doc: default_ingress_ca_replaced link to docs.openshift.com is out-of-date (Paul Bastide) 2025-11-21 15:53:25.278 logging.py DEBUG - Implement file_ownerships_var_log_landscape rule (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Implement file_groupownerships_var_log_landscape rule (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Add exclusion for landscape-client to file_ownerships_var_log (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Add exclusion for landscape-client to file_groupownerships_var_log (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Add RHEL 9, RHEL 10, ocp4, and Fedora to git blame ignore list (Matthew Burket) 2025-11-21 15:53:25.278 logging.py DEBUG - return if initial scan result is non applicable (Alan Moore) 2025-11-21 15:53:25.278 logging.py DEBUG - replace instances of grub-mkconfig with correct grub2-mkconfig (vojtapolasek) 2025-11-21 15:53:25.278 logging.py DEBUG - Remove stale files from file_owner_var_log_syslog (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Format fedora related yaml file (axuan) 2025-11-21 15:53:25.278 logging.py DEBUG - Disable bootc applicability checks on Ubuntu (Alan Moore) 2025-11-21 15:53:25.278 logging.py DEBUG - fix conditional check bash_bootc_build (Alan Moore) 2025-11-21 15:53:25.278 logging.py DEBUG - Disable symlink deference in file_owner ansible (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Fix file_groupowner template to only change invalid ownerships (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Disable symlink dereference in file_groupowner template (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Fix var reuse in file_groupowner template remediation (Miha Purg) 2025-11-21 15:53:25.278 logging.py DEBUG - Format ocp4 related yaml file (axuan) 2025-11-21 15:53:25.278 logging.py DEBUG - Remove duplicate levels key in control 10.3.2 (axuan) 2025-11-21 15:53:25.278 logging.py DEBUG - Format rhel10 related yaml file (axuan) 2025-11-21 15:53:25.278 logging.py DEBUG - Format rhel9 related yaml file (axuan) 2025-11-21 15:53:25.278 logging.py DEBUG - Update docs/manual/developer/03_creating_content.md (Alex Xuan) 2025-11-21 15:53:25.278 logging.py DEBUG - Adjust PSC for auditd_data_retention_space_left_percentage (Matthew Burket) 2025-11-21 15:53:25.278 logging.py DEBUG - Add OL9 to rsyslog_cron_logging tests (Armando Acosta) 2025-11-21 15:53:25.279 logging.py DEBUG - Fix file_owner template to only change invalid ownerships (Miha Purg) 2025-11-21 15:53:25.279 logging.py DEBUG - Disable symlink dereference in file_owner template (Miha Purg) 2025-11-21 15:53:25.279 logging.py DEBUG - Fix var reuse in file_owner template remediation (Miha Purg) 2025-11-21 15:53:25.279 logging.py DEBUG - Add .git-blame-ignore-revs (Matthew Burket) 2025-11-21 15:53:25.279 logging.py DEBUG - Fix chrony path (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Add Ubuntu into tests (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Check server directive only (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Add rule chronyd_configure_pool_and_server to check source (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Fix yamllint in cusp_fedora.yml (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - Include quotes in float-like ids (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - fix: Update some DoD verbiage in rules.yml to make it more organization agnostic (yungcero) 2025-11-21 15:53:25.279 logging.py DEBUG - Format rhel8 related yaml file (axuan) 2025-11-21 15:53:25.279 logging.py DEBUG - Add general control definition for slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Make sure sysctl ipv6 is applicable on platform basis (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Update decision and status (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - Add general control definition for disable rsync service rule (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Add general control definition for additional audit rules (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Make sure that slmicro5 is considered suse family so grub macros work (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Add slmicro5 support for grub configuration (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Make sure right file is used for grub config for sle platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Include marcusburghardt in rules without group (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - Add CCE for rsyncd disabled rule to slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Expand product specific control files CODEOWNERs (Matthew Burket) 2025-11-21 15:53:25.279 logging.py DEBUG - update sync-cac-oscal after renaming trestlebot to complyscribe (Sophia Wang) 2025-11-21 15:53:25.279 logging.py DEBUG - Remove jinja2 macro from var file (axuan) 2025-11-21 15:53:25.279 logging.py DEBUG - sshd_limit_user_access is missing the opening tag (Paul Bastide) 2025-11-21 15:53:25.279 logging.py DEBUG - Adjust the oval check not to match root lines with password set (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Add test case for: one correct one incorrect (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Add tests for prevent_direct_root_logins (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Add oval check for rule prevent_direct_root_logins (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Change platform of grub2_password (Jan Černý) 2025-11-21 15:53:25.279 logging.py DEBUG - update the trestlebot repo for sync_cac_oscal (Sophia Wang) 2025-11-21 15:53:25.279 logging.py DEBUG - check commits of existing branch for sync_cac_content (Sophia Wang) 2025-11-21 15:53:25.279 logging.py DEBUG - Enable audit configure rules for slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.279 logging.py DEBUG - Update permissions for OL9 to 0640 in sshd_private_key (Armando Acosta) 2025-11-21 15:53:25.279 logging.py DEBUG - Add OL9 to disable_ctrlaltdel_reboot tests (Armando Acosta) 2025-11-21 15:53:25.279 logging.py DEBUG - Enable ansible remediation for auditd_data_retention_space_left_action tests (Armando Acosta) 2025-11-21 15:53:25.279 logging.py DEBUG - Update products/debian13/profiles/anssi_bp28_high.profile (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.279 logging.py DEBUG - Update products/debian13/profiles/anssi_bp28_high.profile (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.279 logging.py DEBUG - Remove trailing spaces (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Remove non-ascii (Alan Moore) 2025-11-21 15:53:25.279 logging.py DEBUG - Update jinja2 related doc (axuan) 2025-11-21 15:53:25.279 logging.py DEBUG - Fix typo and improve summary in
(Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - Include documentation and hints for YAML linting (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - chore: fix yaml lint issues in sle profiles (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - chore: fix yaml lint issues in debian13 profile (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - chore: fix indentation in hipaa control file (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - chore: fix indentation in e8 control file (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - chore: fix indentation in anssi control file (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - FIx stig rule UBTU-24-700100 (Eric Berry) 2025-11-21 15:53:25.279 logging.py DEBUG - Remove leftover from ubuntu2004 (Eduardo Barretto) 2025-11-21 15:53:25.279 logging.py DEBUG - Remove excess dashes in Jinja 2 expression (Jan Černý) 2025-11-21 15:53:25.279 logging.py DEBUG - add anssi BP28 high profile to debian13 product (Alexandre Skrzyniarz) 2025-11-21 15:53:25.279 logging.py DEBUG - Remove unnecessary Jinja2 macro in HIPAA control file (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - Treat e8 exceptions for rhel in profiles (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - Remove unnecessary Jinja2 in e8 control file (Marcus Burghardt) 2025-11-21 15:53:25.279 logging.py DEBUG - Treat ANSSI exceptions for rhel in profiles (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Remove Jinja2 in ANSSI control file R62 (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Unselect rhel and ol rules in ANSSI profiles for sle (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Unselect rhel and ol rules in ANSSI profiles for debian (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Remove Jinja2 in ANSSI control file R32 (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Fix yamllint indentation errors (teacup-on-rockingchair) 2025-11-21 15:53:25.280 logging.py DEBUG - Change platform of GRUB 2 file rules (Jan Černý) 2025-11-21 15:53:25.280 logging.py DEBUG - Add missing profile stability data (Jan Černý) 2025-11-21 15:53:25.280 logging.py DEBUG - Move suse specific reference to product definition (teacup-on-rockingchair) 2025-11-21 15:53:25.280 logging.py DEBUG - improvement for sync-cac-oscal (Sophia Wang) 2025-11-21 15:53:25.280 logging.py DEBUG - Fized code review issues (Eric Berry) 2025-11-21 15:53:25.280 logging.py DEBUG - Update .github/workflows/ci_lint.yml (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Exclude temporary bind mount_point (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Fix GRUB 2 UEFI selections in RHEL 9 ANSSI profiles (Jan Černý) 2025-11-21 15:53:25.280 logging.py DEBUG - Update the prefix for rules used when generating components gh page. (Gabriel Becker) 2025-11-21 15:53:25.280 logging.py DEBUG - Include another related PR (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Enable ubuntu in oval (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Remove uefi/non-uefi from grub2 rules in case they do not need. (Gabriel Becker) 2025-11-21 15:53:25.280 logging.py DEBUG - Delete installed_OS_is_FIPS_certified or ssh(d) related rules (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Fix typo in title and description of the profile definition (teacup-on-rockingchair) 2025-11-21 15:53:25.280 logging.py DEBUG - docs: include ADR to define jinja2 boundaries (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Fix(OVAL): Correct variable reference in account_disable_inactivity_system_auth (yu410621) 2025-11-21 15:53:25.280 logging.py DEBUG - Make grep quiet to not repeat found files (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - ci: introduce yamllint check for controls and profiles (Marcus Burghardt) 2025-11-21 15:53:25.280 logging.py DEBUG - Fix(OVAL): Correct variable reference in account_disable_inactivity_password_auth (yu410621) 2025-11-21 15:53:25.280 logging.py DEBUG - Ubuntu 24.04 STIG rule UBTU-24-100860 (Eric Berry) 2025-11-21 15:53:25.280 logging.py DEBUG - Add var_timesync_service for rule package_chrony_installed (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Remove jinja2 from banner related var file (axuan) 2025-11-21 15:53:25.280 logging.py DEBUG - Add OL9 to xwindows_runlevel_target tests (Armando Acosta) 2025-11-21 15:53:25.280 logging.py DEBUG - Add pkg override (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Add test case for one correct the other wrong (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Implemnt ssh_client_use_approved_ciphers_ordered_stig (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Enable UBTU-24-100850 (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Update the scope of controls that can be synchronized with OSCAL (Sophia Wang) 2025-11-21 15:53:25.280 logging.py DEBUG - Use control file to define RHEL 8 HIPAA profile (Jan Černý) 2025-11-21 15:53:25.280 logging.py DEBUG - Add RHEL 8 HIPAA profile to stable profiles (Jan Černý) 2025-11-21 15:53:25.280 logging.py DEBUG - fix syntax error for sync_cac_oscal (Sophia Wang) 2025-11-21 15:53:25.280 logging.py DEBUG - Ubuntu 24.04 STIG 100860 (Eric Berry) 2025-11-21 15:53:25.280 logging.py DEBUG - Match the selection from the profile so tests pass. (Gabriel Becker) 2025-11-21 15:53:25.280 logging.py DEBUG - Update products/rhel8/profiles/e8.profile (Matthew Burket) 2025-11-21 15:53:25.280 logging.py DEBUG - Update products/rhel8/profiles/ism_o.profile (Matthew Burket) 2025-11-21 15:53:25.280 logging.py DEBUG - Mark as automated (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - mark as automated (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Comment out then remediate Delete ubuntu.sh (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Enable UBTU-24-900950 (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - add debian13 profile for ANSSI BP28 Enhanced (Alexandre Skrzyniarz) 2025-11-21 15:53:25.280 logging.py DEBUG - add debian13 support to file_permissions_etc_shadow (Alexandre Skrzyniarz) 2025-11-21 15:53:25.280 logging.py DEBUG - add debian13 support to file_permissions_etc_gshadow (Alexandre Skrzyniarz) 2025-11-21 15:53:25.280 logging.py DEBUG - add debian13 support to package_pam_apparmor_installed (Alexandre Skrzyniarz) 2025-11-21 15:53:25.280 logging.py DEBUG - add debian13 support to service_ntpd_enabled (Alexandre Skrzyniarz) 2025-11-21 15:53:25.280 logging.py DEBUG - add debian13 support to service_chronyd_enabled (Alexandre Skrzyniarz) 2025-11-21 15:53:25.280 logging.py DEBUG - Update OL10 profiles (Edgar Aguilar) 2025-11-21 15:53:25.280 logging.py DEBUG - Reduce token scope for Compare DS (Matthew Burket) 2025-11-21 15:53:25.280 logging.py DEBUG - Remove k8s GitHub Actions (Matthew Burket) 2025-11-21 15:53:25.280 logging.py DEBUG - Move e8 profile to control file in RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.280 logging.py DEBUG - Move RHEL 8 ISM O Profile to Control File (Matthew Burket) 2025-11-21 15:53:25.280 logging.py DEBUG - Fix(accounts_tmout): OVAL check incorrectly passes for TMOUT=0 (yu410621) 2025-11-21 15:53:25.280 logging.py DEBUG - Enable UBTU-24-200610 (Alan Moore) 2025-11-21 15:53:25.280 logging.py DEBUG - Use pam-auth-update for both remediation and tests (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Enable rule UBTU-24-400020 (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix the workflow error to get github appId (Sophia Wang) 2025-11-21 15:53:25.281 logging.py DEBUG - Bump softprops/action-gh-release from 2.3.0 to 2.3.2 (dependabot[bot]) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix PAM Unix Rounds in RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.281 logging.py DEBUG - Update linux_os/guide/system/permissions/partitions/mount_option_tmp_noexec/bash/debian13.sh (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.281 logging.py DEBUG - add debian13 anssi BP28 intermediary profile (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - update aide integrity rule for debian 13 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - add debian13 support for audit_rules_augenrules (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - add remediation for debian13 mount_option_tmp_noexec (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - add debian13 support in audit_rules_privileged_commands template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - Add quotes (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Update test data (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Modify the tests (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Override the bind pkg name for Ubuntu 22.04 and 24.04 (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Remove Ubuntu 16.04, 18.04 and 20.04 products (Evgeny Kolesnikov) 2025-11-21 15:53:25.281 logging.py DEBUG - Bump softprops/action-gh-release from 2.2.2 to 2.3.0 (dependabot[bot]) 2025-11-21 15:53:25.281 logging.py DEBUG - Move to using sha512 on RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.281 logging.py DEBUG - Add Debian 13 to CI (Matthew Burket) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix nightly build due to remote OVAL for Debian 13 (Matthew Burket) 2025-11-21 15:53:25.281 logging.py DEBUG - Enable UBTU-24-600010 (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Enable UBTU-24-600000 (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Enable UBTU-24-400030 (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Add owner and repos for creating token of sync-cac-to-oscal (Sophia Wang) 2025-11-21 15:53:25.281 logging.py DEBUG - Move SCE build option to CMakeLists.txt (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix a bug for syncing cac to oscal workflow (Sophia Wang) 2025-11-21 15:53:25.281 logging.py DEBUG - Update products/debian13/profiles/anssi_bp28_minimal.profile (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.281 logging.py DEBUG - Always use build_root in utils/create_scap_delta_tailoring.py (Matthew Burket) 2025-11-21 15:53:25.281 logging.py DEBUG - Pass build config to create_scap_delta_tailoring explictly (Matthew Burket) 2025-11-21 15:53:25.281 logging.py DEBUG - Remove duplicate STIG id OL09-00-001105 (Armando Acosta) 2025-11-21 15:53:25.281 logging.py DEBUG - Add warning to encrypt_partitions (Edgar Aguilar) 2025-11-21 15:53:25.281 logging.py DEBUG - Apply suggestions from code review (Edgar Aguilar) 2025-11-21 15:53:25.281 logging.py DEBUG - add minimal ANSSI BP28 profile for debian 13 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - add debian 13 support for rule accounts_password_pam_unix_rounds_password_auth (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - update libpwquality applicability check for debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - add debian13 support for rule package_pam_pwquality_installed (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - update ntp service and package rules for debian 13 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - update auditing service and package rules for debian 13 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - Remove remediation tag from a pass scenario (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Add OVAL for encrypt_partitions rule (Edgar Aguilar) 2025-11-21 15:53:25.281 logging.py DEBUG - Update path for OL9 in sysctl_kernel_exec_shield oval file (Armando Acosta) 2025-11-21 15:53:25.281 logging.py DEBUG - Remove duplicate STIG ID (Armando Acosta) 2025-11-21 15:53:25.281 logging.py DEBUG - Add tags to test scenarios in accounts_root_path_dirs_no_write (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Update linux_os/guide/system/permissions/partitions/mount_option_nodev_nonroot_local_partitions/oval/shared.xml (Evelyn) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix platform tag in test scenarios (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Create SLE Micro 5 General profile (svet-se) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix smartcard package name on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.281 logging.py DEBUG - Simplify get GitHub app token (Sophia Wang) 2025-11-21 15:53:25.281 logging.py DEBUG - Updated oval to include fs_type instead of fstype, to run the fs_type check under partition_state instead of partition_object, and to run the check as one statement w/ regex as opposed to individual lines for each fs (evie) 2025-11-21 15:53:25.281 logging.py DEBUG - Updated oval and bash shared files to match ansible for non-local fstype exclusions when adding nodev to local partitions (evie) 2025-11-21 15:53:25.281 logging.py DEBUG - Make RHEL9 OSPP and CUI to use OSPP Control file. (Gabriel Becker) 2025-11-21 15:53:25.281 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Improve reproducibility and stability (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Add CI to sync content updates to OSCAL content (Sophia Wang) 2025-11-21 15:53:25.281 logging.py DEBUG - Ensure parameter not added to pam files if faillock.conf not exists (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Added task to set excluded fstypes to keep remote partitions from being remounted with nodev when only local partitions are meant to be targeted (evie) 2025-11-21 15:53:25.281 logging.py DEBUG - Ubuntu 24.04 STIG Rule UBTU-24-300010 (Eric Berry) 2025-11-21 15:53:25.281 logging.py DEBUG - Seperate Compare DS build and compare steps (Matthew Burket) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix failing tests for sysctl_net_ipv4_conf_all_rp_filter (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix macro tests_init_faillock_vars (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Use custom YAML loader and custom Jinja environment (Jan Černý) 2025-11-21 15:53:25.281 logging.py DEBUG - Add var_password_hashing_min_rounds_login_defs to OL9 stig control (Armando Acosta) 2025-11-21 15:53:25.281 logging.py DEBUG - Polish rule tiltles (Alan Moore) 2025-11-21 15:53:25.281 logging.py DEBUG - Update products/debian13/CMakeLists.txt (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.281 logging.py DEBUG - add debian13 support (Alexandre Skrzyniarz) 2025-11-21 15:53:25.281 logging.py DEBUG - Fix typo (Miha Purg) 2025-11-21 15:53:25.282 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Use resolved product data to render macros in test scenarios (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Adjust format (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove unsupported algo from tests (Miha Purg) 2025-11-21 15:53:25.282 logging.py DEBUG - Extend sshd_use_strong_kex to use distributed configs (Miha Purg) 2025-11-21 15:53:25.282 logging.py DEBUG - Revert ansible of accounts_passwords_pam_faillock_silent (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Revert ansible macro regex (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Ansible regex update (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Oval ensure /etc/security/faillock.conf is not used together with pam files (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Change number to non-space with boundary (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Change literal space as regex space (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Do not match silent ooption (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Support authselect local(new) and minimal(old) profile via logical or (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Append authsucc option (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Oval match requisite too (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Fix faillock_silent tests (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Append authsucc option (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Follow the project style guide (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Use macro ansible_pam_faillock_parameter_value and bash_pam_faillock_parameter_value (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Enable ansible macro ansible_pam_faillock_enable for Ubuntu (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Add tests for sshd_use_strong_kex (Miha Purg) 2025-11-21 15:53:25.282 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.3.0 to 5.3.1 (dependabot[bot]) 2025-11-21 15:53:25.282 logging.py DEBUG - Add OL9 to accounts_password_pam_enforce_root oval file (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Update values for file_permissions_var_log_messages conditional (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Add var_sudo_timestamp_timeout=always_prompt to RHEL 9 and RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Add OL9 to accounts_password_pam_unix_rounds_* tests (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Update var_password_pam_unix_rounds for OL9 stig control (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Change RHEL 9 HIPAA profile to use control file (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Add profile stability for RHEL 9 HIPAA profile (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Fix platform in sysctl_net_ipv4_conf_all_rp_filter test (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Move ISM O RHEL 9 profile to a control file (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Add new test for OL value_2 (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove OL for value_2 test (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_rp_filter for OL (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Implement mount_option_tmp_noexec for slmicro5 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.282 logging.py DEBUG - update links to documentation regarding Bootc kernel arguments (vojtapolasek) 2025-11-21 15:53:25.282 logging.py DEBUG - update links to documentation regarding time synchronization (vojtapolasek) 2025-11-21 15:53:25.282 logging.py DEBUG - Bump docker/build-push-action from 6.17.0 to 6.18.0 (dependabot[bot]) 2025-11-21 15:53:25.282 logging.py DEBUG - Enable tests for OL9 in OL09-00-000262 (Edgar Aguilar) 2025-11-21 15:53:25.282 logging.py DEBUG - Update rule selection for OL09-00-000262 (Edgar Aguilar) 2025-11-21 15:53:25.282 logging.py DEBUG - Add OL9 to platform in ssh ciphers rule's bash (Edgar Aguilar) 2025-11-21 15:53:25.282 logging.py DEBUG - Update rule selection for OL09-00-000222 (Edgar Aguilar) 2025-11-21 15:53:25.282 logging.py DEBUG - Update test data (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove one-off (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Update Jinja macros (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Modify Python code to load Jinja macros only once (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Add a one-off script (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Rename macros in OVAL in harden_ssh_client_crypto_policy (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Change products to product (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Promote in_chrooted_environment to a macro (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove ubuntu2404 from conditionals in unused rules (Miha Purg) 2025-11-21 15:53:25.282 logging.py DEBUG - Add check_root_user for OL9 in audit_rules_dac_modification_* (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Refactoring based upon review comments (Kaushik Talathi) 2025-11-21 15:53:25.282 logging.py DEBUG - Updating the condition based on e2e tests results (Kaushik Talathi) 2025-11-21 15:53:25.282 logging.py DEBUG - Updating missing assertion for rule (Kaushik Talathi) 2025-11-21 15:53:25.282 logging.py DEBUG - Updating Assertions for Rule (Kaushik Talathi) 2025-11-21 15:53:25.282 logging.py DEBUG - CMP-2859: filter default ImageStream constructs from the samples operator and ClusterVersion (Kaushik Talathi) 2025-11-21 15:53:25.282 logging.py DEBUG - Add OL9 to auditd_audispd_syslog_plugin_activated tests (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Update invalid source URL for std_openeuler2203 benchmark (yu410621) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove file_owner_var_log_messages/bash/ubuntu.sh (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Add ISM O profile stability for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Update mount_option_home_nodev template for OL (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove authselect selections from RHEL 10 OSPP (Matus Marhefka) 2025-11-21 15:53:25.282 logging.py DEBUG - Update permissions in file_permissions_var_log_messages for OL9 (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Properly rename file_owner_var_log_messages bash remediation (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Adjust RHEL 9 e8 profile to match the existing one (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - bump version to 0.1.78 (vojtapolasek) 2025-11-21 15:53:25.282 logging.py DEBUG - Move RHEL 9 E8 profile to use the e8 control file (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - fix/rewrite bash remediation for chrony_set_nts (Jiri Jaburek) 2025-11-21 15:53:25.282 logging.py DEBUG - enable centos-stream-10 in Packit and on Testing Farm (Jiri Jaburek) 2025-11-21 15:53:25.282 logging.py DEBUG - do not package kickstarts in .spec on CentOS Stream >= 10 (Jiri Jaburek) 2025-11-21 15:53:25.282 logging.py DEBUG - Install latest ansible from pip instead of obsolete one (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - Install missing libdnf5 binding for ansible (Alan Moore) 2025-11-21 15:53:25.282 logging.py DEBUG - update the script which updates list of contriboturs (vojtapolasek) 2025-11-21 15:53:25.282 logging.py DEBUG - update contributors for 0.1.77 (vojtapolasek) 2025-11-21 15:53:25.282 logging.py DEBUG - Add OL9 to accounts_password tests (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Add OL9 to accounts_password template (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Update the rule to comply with the style guide (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove STIGID references for RHEL 8. (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Convert RHEL 8 STIG to Control file (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove CCI column code out to its own method (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Move RHEL 9 from STIG PSC (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Remove convert.py (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Improve profile stability test (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Mass change profile stability data format (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Add a script to extract selections from profile stability data (Jan Černý) 2025-11-21 15:53:25.282 logging.py DEBUG - Drop irrelevant rules for SLE platform (teacup-on-rockingchair) 2025-11-21 15:53:25.282 logging.py DEBUG - Ensure that CCI move from SRG and the SRGs for CTR are only exported for ocp4 (Matthew Burket) 2025-11-21 15:53:25.282 logging.py DEBUG - Add rpm_verify_crypto_policies to components (Armando Acosta) 2025-11-21 15:53:25.282 logging.py DEBUG - Add PSC for RHEL-09-215105 (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update FIPS PSC for RHEL 9 and RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update PSC for RHEL-09-651015 (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update PSC for RHEL-09-291020 (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update PSC for RHEL-09-255115 (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Clean up cron PSC (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL-09-255110 PSC (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL-09-255105 PSC (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL-09-255090 PSCC (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL-09-252020 PSC (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL-09-232045 PSC Content (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL-09-232040 PSC (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove deprecated rule from draft RHEL10 STIG. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Stop processing templated remediations by Jinja (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Bump docker/build-push-action from 6.16.0 to 6.17.0 (dependabot[bot]) 2025-11-21 15:53:25.283 logging.py DEBUG - Fix stable profiles for RHEL 9 and 10 STIG (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Add tests for rpm_verify_crypto_policies (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Select rule for OL09-00-000244 (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Implement rpm_verify_crypto_policies (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Update grub2_admin_username STIG PSC (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update oval harden_sshd_macs_opensshserver_conf_crypto_policy (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Fix tests harden_sshd_macs_opensshserver_conf_crypto_policy (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL 9 and RHEL 10 STIG profile stability (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Fix CCE for grub2_init_on_free (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - grub2_slub_debug_argument -> grub2_init_on_free on RHEL 9+ (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Add STIG PSC for selinux_context_elevation_for_sudo (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update select rules to RHEL 9 V2R4 content (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Add fips_crypto_policy_symlinks to components (Edgar Aguilar) 2025-11-21 15:53:25.283 logging.py DEBUG - Fix references order in fips_crypto_policy_symlinks (Edgar Aguilar) 2025-11-21 15:53:25.283 logging.py DEBUG - Update sshd_include_crypto_policy STIG policy file to latest version. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Add missing CCEs for RHEL10 SSH Harden Mac rules. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Fix RHEL9/10 STIG test data for stable profiles. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Added STIG source file for Harden SSHD Ciphers rule. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Add missing SSH hardening rules to RHEL9/10 STIG. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Update harden_sshd_macs_openssh_conf_crypto_policy STIG source file. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Move the Policy STIG source for sshd to the right place. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Update RHEL9 STIG with correct MAC config variables and rules. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - update rule descriptions and fix texts (vojtapolasek) 2025-11-21 15:53:25.283 logging.py DEBUG - update test scenarios (vojtapolasek) 2025-11-21 15:53:25.283 logging.py DEBUG - oval: check that the definitoin of superuser is followed by "export superusers" (vojtapolasek) 2025-11-21 15:53:25.283 logging.py DEBUG - add new test function which creates a superuser for Grub2 but does not export the variable (vojtapolasek) 2025-11-21 15:53:25.283 logging.py DEBUG - when changing grub2 user name on password on RHEL, use explicit grub2-mkconfig (vojtapolasek) 2025-11-21 15:53:25.283 logging.py DEBUG - dir_perms_world_writable_sticky_bits: add warning (vojtapolasek) 2025-11-21 15:53:25.283 logging.py DEBUG - Update instructions in profile stability test (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Add tests for fips_crypto_policy_symlinks (Edgar Aguilar) 2025-11-21 15:53:25.283 logging.py DEBUG - Select rule for OL09-00-000242 (Edgar Aguilar) 2025-11-21 15:53:25.283 logging.py DEBUG - Implement fips_crypto_policy_symlinks (Edgar Aguilar) 2025-11-21 15:53:25.283 logging.py DEBUG - Add missing RHEL 10 CCEs (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove sshd_use_strong_macs (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Add tests to harden_sshd_macs/ciphers.. for OL9 (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Implement OL09-00-000255 STIG id (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove package_rsh-server_removed from RHEL 8 (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove leftovers of configure_gnutls_tls_crypto_policy from products. (Gabriel Becker) 2025-11-21 15:53:25.283 logging.py DEBUG - Ensure no other files exist (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Fix CTest (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Add no remediation header to test scenarios (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Drop CIS reference IDs for SLE Micro platform (teacup-on-rockingchair) 2025-11-21 15:53:25.283 logging.py DEBUG - Drop CIS profile for SLE Micro platform as it was cancelled (teacup-on-rockingchair) 2025-11-21 15:53:25.283 logging.py DEBUG - Ubuntu 24.04 STIG Rule UBTU-24-300010 (Eric Berry) 2025-11-21 15:53:25.283 logging.py DEBUG - Fix tests for sshd_disable_compression (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove space (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Update tests' conf path (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Specify a specific value (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Update ansible filepath (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove all keys in /etc/rsyslog.d Comment out FileCreateMode in main conf if set incorrectly Write to 00-rsyslog_filecreatemode.confif not in main conf (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove rules from RHEL 9 profiles (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Update statos of OL09-00-900140 to supported (Edgar Aguilar) 2025-11-21 15:53:25.283 logging.py DEBUG - Stop adding list of contributors to thin data streams (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Enable rule 300024 (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Remove superfluous TSs from grub2_audit_backlog_limit_argument (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Mark test scenario with remediation header (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Konflux build pipeline service account migration for compliance-operator-content Signed-off-by: konflux (konflux) 2025-11-21 15:53:25.283 logging.py DEBUG - Implement OL09-00-900140 in OL9 stig (Edgar Aguilar) 2025-11-21 15:53:25.283 logging.py DEBUG - Ignore sed return code if file not exist (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Add OL09-00-000285 & OL09-00-000286 STIG ids (Armando Acosta) 2025-11-21 15:53:25.283 logging.py DEBUG - Avoid deleting all the conf under /etc/rsyslog.d (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Update with tests/test_product_stability.py (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Ansible: Switch to fqcn Remove extra space Remove extra single quote (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Cleanup tests (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Map crontabs to cron for Ubuntu (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Use JSON for storing resolved items (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Add JSON methods to XCCDFEntity (Jan Černý) 2025-11-21 15:53:25.283 logging.py DEBUG - Bump actions/setup-go from 5.4.0 to 5.5.0 (dependabot[bot]) 2025-11-21 15:53:25.283 logging.py DEBUG - Add rules for sshd drop in in SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Add rules for FIPS in RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Make the RHEL Automatus work with 10.1 (Matthew Burket) 2025-11-21 15:53:25.283 logging.py DEBUG - Update ansible (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Update tests (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Update oval for Ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Update the aide path for Ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Enable UBTU-24-100120 (Alan Moore) 2025-11-21 15:53:25.283 logging.py DEBUG - Ubuntu 24.04 STIG 400360 add sssd_enable_smartcards (Eric Berry) 2025-11-21 15:53:25.283 logging.py DEBUG - Ubuntu 24.04 STIG 400360 add sssd_enable_pam_services (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - Fixed status to automated (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - Ubuntu 24.04 SITG rule UBTU-24-400360 sssd_certification_path_trust_anchor (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - Ubuntu 24.04 STIG rule UBTU-24-200680 (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - Ubuntu 24.04 SITG rule UBTU-24-400360 sssd_certification_path_trust_anchor (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - Ubuntu 24.04 STIG rule UBTU-24-200680 (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - rhel10 ospp: remove package_scap-security-guide_installed (vojtapolasek) 2025-11-21 15:53:25.284 logging.py DEBUG - Update version in ol9 stig profile (Edgar Aguilar) 2025-11-21 15:53:25.284 logging.py DEBUG - Add OL09-00-002151 to ol9 STIG (Edgar Aguilar) 2025-11-21 15:53:25.284 logging.py DEBUG - Update tests for dconf_gnome_login_banner_text to run on ol9 (Edgar Aguilar) 2025-11-21 15:53:25.284 logging.py DEBUG - Add test for multiple facilities using the same priority one line (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Create more precise regex for oval (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Create folder if not exist (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Update desciption of rule rsyslog_remote_access_monitoring (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Enable STIG rule UBTU-24-200090 (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Revert reference files (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - audit_ospp_general_ppc64le: ppc64le architecture cannot contain 32 bit audit rules (vojtapolasek) 2025-11-21 15:53:25.284 logging.py DEBUG - Add missing CCEs for new rules to RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Update stable profiles (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add selinux_context_elevation_for_sudo to SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add rule firewalld-backend (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add missing sshd dropin config permissions / owner rules (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add fapolicy_default_deny to SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add a couple of rules to SRG-OS-000250-GPOS-00093 (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add logind_session_timeout to SRG-OS-000163-GPOS-00072 (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - In SRG GPOS set var_networkmanager_dns_mode to explicit_default (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add audit config file permission and ownership rules to RHEL 10 SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Fix template sudo_defaults_option (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Add filelist to desciption (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Add # platform (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Update TSs for no_nis_in_nsswitch (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Prevent empty lines in expanded test code (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Update dependency compliance-trestle to v3.9.0 (red-hat-konflux[bot]) 2025-11-21 15:53:25.284 logging.py DEBUG - RHEL 10 uses yescrypt (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - New rule set_password_hashing_yescrypt_cost_factor_logindefs (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove heretical statement about password encryption in set_password_hashing_min_rounds_logindefs (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Fix platform in test for grub2_password (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Add no remediation tag to test in sshd_use_approved_kex_ordered_stig (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Add no remediation tag to test in configure_openssl_tls_crypto_policy (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove obsolete rules from RHEL 8 profiles (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - drop irrelevant test that only raises false positives (teacup-on-rockingchair) 2025-11-21 15:53:25.284 logging.py DEBUG - Add PSC to tftp_uses_secure_mode_systemd (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add no remediation tag (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove service_rexec_disabled from RHEL 10 HIPAA (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Implement file_permissions_local_var_log for stig noble (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Enable rule UBTU-24-700010 (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Change platform to multi_platform_rhel (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - system-auth PSC should say system-auth (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove accounts_password_pam_unix_rounds_(password,system)_auth from SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add applicability (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Rewrite tests (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Rewrite oval (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Discard usage of template (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove enable_authselect from RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Update SRG-OS-000590-GPOS-00110 (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add rules for SRG-OS-000780-GPOS-00240 (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Format thin data streams (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Add sssd rules to RHEL 10 STIG stability (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add rules to SRG-OS-000705-GPOS-00150 (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add PSC for package_unbound_removed (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Adjust package name for vsftp checktext (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add Bash remediation for gnome_gdm_disable_guest_login on RHEL 10 (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Improve condition (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Fix ocsp spelling error (Eric Berry) 2025-11-21 15:53:25.284 logging.py DEBUG - Fix PEP8 in ssg/build_yaml.py (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add ol9 disa stig xccdf manual (Edgar Aguilar) 2025-11-21 15:53:25.284 logging.py DEBUG - Update ol9 cmake list (Edgar Aguilar) 2025-11-21 15:53:25.284 logging.py DEBUG - Update OL9 stig control (Edgar Aguilar) 2025-11-21 15:53:25.284 logging.py DEBUG - Fix sshd_set_idle_timeout for RHEL 10 (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove service_rsh_disabled from RHEL 10 HIPAA (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Enable installed_OS_is_vendor_supported for UBTU-24-700400 (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Refactor test_config (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Fix test_config support in build_tests (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Move function select_templated_tests (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Update the rule description (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Improve AlmaLinux OS support (Andrew Lukoshko) 2025-11-21 15:53:25.284 logging.py DEBUG - Disable wrong_runtime.fail.sh (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove service_rlogin_disabled from RHEL 10 HIPAA (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Implement stig rule UBTU-24-700400 (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Improve bash/ansible_ensure_pam_module_option macros (teacup-on-rockingchair) 2025-11-21 15:53:25.284 logging.py DEBUG - Add two new STIG IDs for RHEL 8 openssh ids (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Enable all backends (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Add packages applicability (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Enable rule UBTU-24-400370 (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Create tests for sssd_enable_user_cert (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Create rule sssd_enable_user_cert (Alan Moore) 2025-11-21 15:53:25.284 logging.py DEBUG - Add RHEL 10 to the list of supported systems (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Adjust some rules for latest tencentos4 (Sinong Chen) 2025-11-21 15:53:25.284 logging.py DEBUG - Update based on review in #13393 (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove empty references (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Update shared.yml (Evelyn) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove CCI from the code and docs (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Change platform of GNOME rules (Jan Černý) 2025-11-21 15:53:25.284 logging.py DEBUG - Replace accounts_password_pam_unix_remember with accounts_password_pam_pwhistory_remember for sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.284 logging.py DEBUG - Bump actions/setup-python from 5.5.0 to 5.6.0 (dependabot[bot]) 2025-11-21 15:53:25.284 logging.py DEBUG - Bump docker/build-push-action from 6.15.0 to 6.16.0 (dependabot[bot]) 2025-11-21 15:53:25.284 logging.py DEBUG - Remove disa/cci references from the project (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Updated ADR 0001 to be accepted (Matthew Burket) 2025-11-21 15:53:25.284 logging.py DEBUG - Add fips_crypto_subpolicy to RHEL 8 and RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add new rule fips_crypto_subpolicy (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - package_bind_removed: unify test scenarios (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - Update linux_os/guide/system/permissions/files/permissions_within_important_dirs/file_permissions_binary_dirs/ansible/shared.yml (Evelyn) 2025-11-21 15:53:25.285 logging.py DEBUG - Make sure latest ansible setup works on sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.285 logging.py DEBUG - dir_group_ownership_library_dirs: exclude test scenario (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - Adjust ubuntu fix for stig (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Exclude enable_authselect oval for Ubuntu too (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Set package name of libpwquality for Ubuntu (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Enable UBTU-24-300016 (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Enable rule UBTU-24-900960 (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix mdash in style guide (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix example ansible to follow the rest of the style guide (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Remove OpenShift CI from style guide CI issues. (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix example in removed rules (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update shared.yml (Evelyn) 2025-11-21 15:53:25.285 logging.py DEBUG - Add gawk to Fedora container files (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update shared.yml (Evelyn) 2025-11-21 15:53:25.285 logging.py DEBUG - Jinja condition includes all ubuntu (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix STIG RHEL 10 Profile stability (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Create common-auth if not exist (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Add test (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Adjust tests (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Use pam-auth-update to remediate (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Add gwak to all Fedora gating (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update ol8 stig benchmark (Edgar Aguilar) 2025-11-21 15:53:25.285 logging.py DEBUG - Align OL8 with DISA STIG V2R4 (Edgar Aguilar) 2025-11-21 15:53:25.285 logging.py DEBUG - Update references of OL8 STIG to v2r4 (Edgar Aguilar) 2025-11-21 15:53:25.285 logging.py DEBUG - Update rule selected for OL08-00-010423 (Edgar Aguilar) 2025-11-21 15:53:25.285 logging.py DEBUG - Update RHEL 10 STIG stablity (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add PSC for rootfiles_configured (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add PSC for package_cron_installed for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add PSC for package_cron_installed (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix file_groupowner_var_log_messages (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix up package_policycoreutils_installed PSC (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add PSC for auditd_data_retention_admin_space_left_percentage (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Remove audit_rules_privileged_commands_pt_chown from RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add PSC for file_groupowner_var_log_messages (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Enable rule UBTU-24-300017 (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - use no_remediation flag in a rule (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - file_owner template: add no_remediation option (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix audit_rules_suid_privilege_function for UBTU-24-200580 (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - package_sudo_installed: limit test scenarios (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - Apply rule audit_rules_suid_auid_privilege_function to Ubuntu (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Switch to audit_rules_suid_auid_privilege_function for cis ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Update generate_privileged_commands_rule.sh to exclude autofs (Evelyn) 2025-11-21 15:53:25.285 logging.py DEBUG - Update all_dirs_ok.pass.sh to exclude autofs (Evelyn) 2025-11-21 15:53:25.285 logging.py DEBUG - Update shared.sh to exclude autofs (Evelyn) 2025-11-21 15:53:25.285 logging.py DEBUG - Revert #13049 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update 10-ansible.jinja to exclude autofs (Evelyn) 2025-11-21 15:53:25.285 logging.py DEBUG - Add new test to harden_sshd_ciphers_opensshserver_conf_crypto_policy (Armando Acosta) 2025-11-21 15:53:25.285 logging.py DEBUG - Update oval harden_sshd_macs_opensshserver_conf_crypto_policy (Armando Acosta) 2025-11-21 15:53:25.285 logging.py DEBUG - Update remediations harden_sshd_macs_opensshserver_conf_crypto_policy (Armando Acosta) 2025-11-21 15:53:25.285 logging.py DEBUG - Update oval harden_sshd_ciphers_opensshserver_conf_crypto_policy (Armando Acosta) 2025-11-21 15:53:25.285 logging.py DEBUG - Update remediations harden_sshd_ciphers_opensshserver_conf_crypto_policy (Armando Acosta) 2025-11-21 15:53:25.285 logging.py DEBUG - Add tftpd_uses_secure_mode to RHEL 8 default profile (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update linux_os/guide/system/bootloader-grub2/grub2_init_on_free/rule.yml (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Introduce new rule audit_rules_dac_modification_fchmodat2 (Jan Černý) 2025-11-21 15:53:25.285 logging.py DEBUG - Enhance RHCOS checks to include CoreOS variant for 4.19 (Vincent Shen) 2025-11-21 15:53:25.285 logging.py DEBUG - Update text in sssd_enable_smartcards for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update to latest jdk (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Bump softprops/action-gh-release from 2.2.1 to 2.2.2 (dependabot[bot]) 2025-11-21 15:53:25.285 logging.py DEBUG - Add package_iprutils_removed to default profile (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Remove package_iprutils_removed as it is no longer in RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Reduce scope of SRG-OS-000095-GPOS-00049 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add package[pam] applicability to faillock_audit (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Delete pam configs after oam updated (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Prepend "tmp" to pam configs in tests (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Update RHEL 8 STIG to V2R3 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update stable profiles (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add missing cces (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Move RHEL-08-040350 to use systemd (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - RHEL-08-020102 and RHEL-08-020103 have been removed. (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Remove drop in files for sssd_offline_cred_expiration on RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add selinux_context_elevation_for_sudo to RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add new rule grub2_init_on_free for RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix issues found in #13358 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update CMakeLists.txt (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add configure_openssl_tls_crypto_policy to RHEL 10 default profile (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add mypy for tests/rule_removal.py and fix error (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix rule removal test for RHEl 10 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add rule removal to CI (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add docs for removed rules tests (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Fix ocp4 file groupowner template to allow group lookup in both /etc/group and /usr/lib/group (Vincent Shen) 2025-11-21 15:53:25.285 logging.py DEBUG - Add test removal test to build system (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add test for rule removal (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add recommendation about authselect (Jan Černý) 2025-11-21 15:53:25.285 logging.py DEBUG - Move rules that are not owned by pam (Jan Černý) 2025-11-21 15:53:25.285 logging.py DEBUG - Add a new rule for libnss-sss package (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Add kerberos_disable_no_keytab to RHEL 9 default (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Enable rule service_sssd_enabled for UBTU-24-100660 (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Set package applicability for rule service_sssd_enabled (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Set sssd package name for Ubuntu in applicability (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - Add a new rule for libpam-sss package (Alan Moore) 2025-11-21 15:53:25.285 logging.py DEBUG - RHEL STIG profiles: use sysctl_user_max_user_namespaces_no_remediation everywhere (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - sysctl_user_max_user_namespaces: remove STIG specific policy and stig references as it is no longer part of stig (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - add new rule sysctl_user_max_user_namespaces_no_remediation (vojtapolasek) 2025-11-21 15:53:25.285 logging.py DEBUG - Change the algorithm to yescript (Jan Černý) 2025-11-21 15:53:25.285 logging.py DEBUG - Improve description in accounts_passwords_pam_faillock_dir (Jan Černý) 2025-11-21 15:53:25.285 logging.py DEBUG - Add RHEL 9 cce to selinux_context_elevation_for_sudo (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update stable profiles for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Update RHEL 9 STIG to V2R4 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Remove RHEL-09-611205 from RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add RHEL-09-431016 for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Move timeout to 10 minutes in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Remove RHEL-09-232265 from RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.285 logging.py DEBUG - Add package_postfix_installed to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Promote cafile variable to product property (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Update platform (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Relax component assignment requirements (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Fix description in accounts_set_post_pw_existing (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Move rules from pam component (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Simplify the condition in which the template will be used or not (teacup-on-rockingchair) 2025-11-21 15:53:25.286 logging.py DEBUG - Rename the oval shared code to ubuntu24 specific one (teacup-on-rockingchair) 2025-11-21 15:53:25.286 logging.py DEBUG - Also add owners of the CODEOWNERS file (Matus Marhefka) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove rule enable_authselect from RHEL10 (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - add explicit variable definitions to relevant test scenarios (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - update documentation (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - systemd_mount_enabled template: enable mount in passing test scenario (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - selinux_all_devicefiles_labeled: tell test scenarios there are no remediations (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Improve match patterns in CODEOWNERS file (Matus Marhefka) 2025-11-21 15:53:25.286 logging.py DEBUG - Add ADR for remvoing CCIs (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Ensure single line of pam_unix exist during testing (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - conflict unix to avoid duplicate unix line (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Add ssg and tests to CODEOWNERs (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Only exclude FIO rules on ARM64 (Lance Bragstad) 2025-11-21 15:53:25.286 logging.py DEBUG - postfix_client_configure_mail_alias: adjust test scenario (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Update SLE15 STIG profile (svet-se) 2025-11-21 15:53:25.286 logging.py DEBUG - Update SLE15 DISA STIG manual to V2R4 (svet-se) 2025-11-21 15:53:25.286 logging.py DEBUG - Update SLE15 STIG version to V2R4 (svet-se) 2025-11-21 15:53:25.286 logging.py DEBUG - Make sure that the templated tests are ran first (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove _get_benchmark_cpes from build_tests (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Fix not-applicable tests in template pam_account_password_faillock (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Update CA file path (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - remove talk related rules from shared control files in case they are applied on rhel product (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - remove talk related packages from RHEL 9 profiles (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - remove talk related rules from RHEL 8 profiles (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - package_pam_pwquality_installed: add custom test scenarios (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - sudo_restrict_privilege_elevation_to_authorized: att missing tag to test scenario (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - network_configure_name_resolution: align test scenarios with state of remediation (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Mark wireless_disable_interfaces as notapplicable to containers (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Fix tests for accounts_tmout on Ubuntu (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Ignore the similar case in case there are legit option in future (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Update the pam configuration (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Add tar.gz file of the build data streams (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Update shared.yml (Evelyn) 2025-11-21 15:53:25.286 logging.py DEBUG - Move symlink filter out of loops in file owner and group owner template (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - accounts_authorized_local_users: align test scenario with remediation (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - sssd_enable_certmap: notify test scenario that there is no remediation (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Fix shellcheck warning (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Align template audit_rules_privileged_commands with DISA (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Define sshd MACs for Ubuntu 24.04 STIG and clean up tests (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Define sshd Ciphers for Ubuntu 24.04 STIG and clean up tests (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Define sshd kexalgorithm for Ubuntu 24.04 STIG (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Add sshd ciphers/macs/kex rules to Ubuntu 24.04 STIG controls (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Discard expanded match (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Match option exactly in bash remediation (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove all hash option in advance (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Add tests for pam-auth-update (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Flag commented parameter in oval (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Add ubuntu2404 to oval parameter-only check (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Use pam-auth-update to update the rounds value (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Add rule set_password_hashing_algorithm_auth_stig to pam components (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Implement rule set_password_hashing_algorithm_auth_stig (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Implement rule UBTU-24-400220 (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Add several rules and vars to Ubuntu 24.04 STIG (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Update docs/templates/template_reference.md (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - sysctl_kernel_modules_disabled: use new no_remediation option in the template (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - sysctl template: add new option no_remediation (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - build_product: add --render-test-scenarios option (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Update linux_os/guide/system/software/integrity/fips/enable_dracut_fips_module/tests/fips_dracut_module_missing.fail.sh (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove deprecated variables from Ubuntu STIGs (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Switch to using hardcoded sshd MACs in Ubuntu STIGs (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Switch to using hardcoded sshd ciphers in Ubuntu STIGs (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Fix accounts_passwords_pam_tally2 ansible (svet-se) 2025-11-21 15:53:25.286 logging.py DEBUG - Fix accounts_passwords_pam_tally2 bash (svet-se) 2025-11-21 15:53:25.286 logging.py DEBUG - Move file_owner to use filter to reduce the memory footprint (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Update group owner template to better use RAM (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - gid_passwd_group_same: test scenario does not expect remediation (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - enable_dracut_fips_module: test scenario: specify that there is no remediation for the rule (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - add custom test scenario which declares that the rule does not have remediation (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - allow the passing templated scenario, this is harmless (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - rewrite the test scenario so that the package gets removed only from RPM DB (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Set the path based on product (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - dir_system_commands_group_root_owned ansible: make it along the lines of Ansible remediation of dir_system_commands_root_owned (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - dir_system_commands_root_owned ansible: make it applicable for all products (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - bash remediations: make them applicable to all products (vojtapolasek) 2025-11-21 15:53:25.286 logging.py DEBUG - Align audit OSPP rules with audit upstream (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Define variables for Ubuntu 24.04 STIG (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Update OL10 ospp profile (Edgar Aguilar) 2025-11-21 15:53:25.286 logging.py DEBUG - Fix rule refinements removal (Edgar Aguilar) 2025-11-21 15:53:25.286 logging.py DEBUG - Move to ubuntu-22.04 from ubuntu-20.04 for gating jobs (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove Ubuntu 20.04 from gating (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Add missing HIPAA references (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Insert to beginning of file in Ubuntu (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Also delete sitg id in profile (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove UBTU-22-412015 in align with ubuntu 22.04 stig v2r3 (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove static content from rules (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Use more specific individual rules (Jan Černý) 2025-11-21 15:53:25.286 logging.py DEBUG - Add draft profile and control file for Ubuntu 24.04 STIG (Miha Purg) 2025-11-21 15:53:25.286 logging.py DEBUG - Update ospp profile (Edgar Aguilar) 2025-11-21 15:53:25.286 logging.py DEBUG - Update stig_gui profile (Edgar Aguilar) 2025-11-21 15:53:25.286 logging.py DEBUG - Update ol10 pci-dss profile (Edgar Aguilar) 2025-11-21 15:53:25.286 logging.py DEBUG - Update ol10 hipaa profile (Edgar Aguilar) 2025-11-21 15:53:25.286 logging.py DEBUG - Update ol10 anssi profiles (Edgar Aguilar) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove extranous test_config files (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Complete the tests of file_owner file_groupowner file_permissions Create dummy file for the mentioned three template tests (Alan Moore) 2025-11-21 15:53:25.286 logging.py DEBUG - Sort more products in CMakeLists.txt (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Replaced OR with lowercase or (Anna-Koudelkova) 2025-11-21 15:53:25.286 logging.py DEBUG - Update stable profile (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Move to socket for telnet on RHEL (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove package_ypserv_removed from RHEL 9 save the STIG (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove package_ypbind_removed from RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove package_xinetd_removed from RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove package_rsh_removed from RHEL as it so longer in RHEL (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove package_rsh-server_removed from RHEL profiles save the STIG (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Remove package_quagga_removed from RHEL 8, the package doesn't exist (Matthew Burket) 2025-11-21 15:53:25.286 logging.py DEBUG - Deny install the McAfee package as it will never be in any OSes base repos (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-54605: Set architecture in directory-access-var-log-audit remediation (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-54212: Adjust api-server-tls-cipher-suite to include 4.18 suites (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - Update audit rules for aarch64 (Vincent Shen) 2025-11-21 15:53:25.287 logging.py DEBUG - Update file_owner template to support multiple owners (Eric Berry) 2025-11-21 15:53:25.287 logging.py DEBUG - Add audit_rules_mac_modification_etc_selinux to the PCI DSS 4 control file (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Adjust products in build_product and CMake (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove some last remnants of the macOS product (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Update file_groupowner template to support multiple groups (Eric Berry) 2025-11-21 15:53:25.287 logging.py DEBUG - Implement file_groupowner2 template (Eric Berry) 2025-11-21 15:53:25.287 logging.py DEBUG - Initial Commit (Eric Berry) 2025-11-21 15:53:25.287 logging.py DEBUG - Add STIG PSC content for tftp (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove duplicate line in ssh_keys_passphrase_protected (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Adjust wording on fix text for system_booted_in_fips_mode (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add RHEL 10 package PSC content for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-53041: Add missing assertions for OVS rules (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - CMP-3264: Update TLS assertions in moderate, high, pci-dss (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-52885: Exclude FIO notification check on ARM64 (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - Adjust PSC check text for RHEL 10 on package_policycoreutils_installed (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - CMP-3277: Use consistent YAML formatting in OCP assertion files (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - Adjust permission to 0600 for file_permissions_etc_audit_rulesd (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix PEP8 issues for utils/srg_export/data.py (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Update k8s remediation for ARPC (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Update workshop documentation with instructions for Github Codespaces. (Gabriel Becker) 2025-11-21 15:53:25.287 logging.py DEBUG - Add devcontainers. (Gabriel Becker) 2025-11-21 15:53:25.287 logging.py DEBUG - rsyslog_remote_loghost: mention Rainer Script in description, ocil and other cases in rule.yml (vojtapolasek) 2025-11-21 15:53:25.287 logging.py DEBUG - add test scenario for rainerscript (vojtapolasek) 2025-11-21 15:53:25.287 logging.py DEBUG - rsyslog_remote_loghost: allow also Rainerscript syntax (vojtapolasek) 2025-11-21 15:53:25.287 logging.py DEBUG - Use template in audit_rules_mac_modification_usr_share (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-54486: Use platform instead of platforms (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove sysctl_user_max_user_namespaces from RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Adjust IA Control column for XLSX export (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Update IA Control data for V3R2 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix OCIL in audit_rules_sudoers_d (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Convert user account watches STIG PSC to modern audit (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Change sudo augenrules --load to auditd restart in STIG PSC (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-53041: Fix multi-platform support for OVS rules (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-54486: Ensure platform is set appropriately when filtering rules (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix rule package_apparmor_installed for SLE15 (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix SLE15 CIS Ensure AppArmor is installed (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - rsyslog_remote_loghost: use Jinja variable instead of repeating regex (vojtapolasek) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix nist_ocp4.yml profile whitespace (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - Move to my fork of sphinxcontrib.jinjadomain (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Use the sphinx built in napoleon (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Revert changes in k8s template (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Add file_groupowner_etc_chrony_keys specifci tests (teacup-on-rockingchair) 2025-11-21 15:53:25.287 logging.py DEBUG - Update instruction for rule ocp4-etcd-unique-ca (Xiaojie Yuan) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix ansible (Alan Moore) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove grub2_uefi_password from ANSSI intermediary in RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.287 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.2.0 to 5.3.0 (dependabot[bot]) 2025-11-21 15:53:25.287 logging.py DEBUG - Update dependency compliance-trestle to v3.8.1 (red-hat-konflux[bot]) 2025-11-21 15:53:25.287 logging.py DEBUG - Update OL9 hipaa profile (Armando Acosta) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix variables= for chronyd_configure_pool_and_server tests (Jiri Jaburek) 2025-11-21 15:53:25.287 logging.py DEBUG - Add /sbin/audisp-syslog to audit binary rules (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - remove scapval test from gating (vojtapolasek) 2025-11-21 15:53:25.287 logging.py DEBUG - Add missing perm_x to k8s remediation (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Update template audit_rules_privileged_commands (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Unify rule descriptions (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Update description in rule audit_rules_privileged_commands (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - OPENSCAP-4952: Use template in audit_rules_time_watch_localtime (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Support modern watches in audit_rules_sysadmin_actions (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Use audit_rules_watch template instead of audit_rules_usergroup_modification (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - fix file_groupowner oval check (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - fix file_groupowner_etc_chrony_keys oval check (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - fix file_groupowner_etc_chrony_keys oval check (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - reverse the fix to check the Automatus tests (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - fix file_groupowner oval check (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - Use template in audit_rules_sudoers_d (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix missing variable in a test scenario (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix the watch format in audit_rules_mac_modification_etc_selinux (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Add support for directories in audit_rules_watch (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Unify OCIL (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Switch audit_rules_sudoers to use a template (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Unify rule descriptions (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - fix file_groupowner_etc_chrony_keys oval check (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - fix file_groupowner_etc_chrony_keys oval check (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - napoleon is no longer needed, it is built in now. (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove from OL8 STIG not STIG related rules (Edgar Aguilar) 2025-11-21 15:53:25.287 logging.py DEBUG - Fix typo (Daniel Ruf) 2025-11-21 15:53:25.287 logging.py DEBUG - Add dnf-automatic_apply_updates to RHEL 10 stable profiles. (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add rules to SRG-OS-000785-GPOS-00250 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add rules to SRG-OS-000775-GPOS-00230 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Set SRG-OS-000745-GPOS-00210 to does not meet (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Set SRG-OS-000725-GPOS-00180 to inherently met (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Set SRG-OS-000720-GPOS-00170 to does not meet (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add rules to SRG-OS-000690-GPOS-00140 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Update SRG-OS-000590-GPOS-00110 to be NA (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add rules to SRG-OS-000439-GPOS-00195 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add rules to SRG-OS-000373-GPOS-00158 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add rules to SRG-OS-000373-GPOS-00157 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add rules to SRG-OS-000373-GPOS-00156 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove erroneous line in description (Miha Purg) 2025-11-21 15:53:25.287 logging.py DEBUG - Add tmux rules to default profile in RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add missing references (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - fix typo lapd-utils (Jan Fader) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove tmux rules from RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Update RHEL 10 STIG FIPS (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - OCPBUGS-54212: Update kubelet tls cipher rule to support new ciphers (Lance Bragstad) 2025-11-21 15:53:25.287 logging.py DEBUG - Update shared/templates/xinetd_service_disabled/ansible.template (teacup-on-rockingchair) 2025-11-21 15:53:25.287 logging.py DEBUG - Update shared/templates/xinetd_service_disabled/ansible.template (teacup-on-rockingchair) 2025-11-21 15:53:25.287 logging.py DEBUG - Add an empty line (Jan Černý) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove the 1.3.1 references for the OCP garbage collection rules (Xiaojie Yuan) 2025-11-21 15:53:25.287 logging.py DEBUG - fix double mknod in char_device_unlabeled_t.fail.sh (Jiri Jaburek) 2025-11-21 15:53:25.287 logging.py DEBUG - expect PATH entries not existing in accounts_root_path_* tests (Jiri Jaburek) 2025-11-21 15:53:25.287 logging.py DEBUG - Bump actions/setup-python from 5.4.0 to 5.5.0 (dependabot[bot]) 2025-11-21 15:53:25.287 logging.py DEBUG - Update SRG-OS-000480-GPOS-00230 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Update SRG-OS-000710-GPOS-00160 (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add product_properties to open_environment for build tests. (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove dnf-automatic rules from SLE12 ANSSI profiles (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - Remove dnf-automatic rules from SLE15 ANSSI profiles (svet-se) 2025-11-21 15:53:25.287 logging.py DEBUG - Update link for first ADR (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Use an admonition vs blockquote for the platforms deprecation. (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Note that `platforms` shouldn't be used in the style guide. (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add Architecture Decisions Records to rendered docs (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Add H1 and target for the first ADR (Matthew Burket) 2025-11-21 15:53:25.287 logging.py DEBUG - Revert changes in sed command (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - update systemd_dropin_configuration template documentation (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - systemd_dropin_configuration template: add new parameter to specify XCCDF variable used during remediation (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - macro oval_check_dropin_file: fix if conditional which was not taking effect (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - add parameters to already templated rules regarding previous commit which adds some parameters to the template (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - extend systemd_dropin_files template with more parameters which were set to some defaults in the past (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - macro oval_check_dropin_file: reorder criteria and enhance tests (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - add left out modificiation of object name so that it is consistent (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - networkmanager_dns_mode: switch to templated rule (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - change group regex so that it mathces only to the end of the line and ignores further matches (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - add more test scenarios (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - put test metadata on top of kernel_build_config/tests/pass* templates (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - remove check=none from test metadata (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - make the tests_init_faillock_vars macro preserve top test metadata (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - remove remediation= from all .pass.sh tests (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - always specify test metadata before test code (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - remove executable bit from all tests (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - have all tests start with a consistent #!/bin/bash shebang (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - standardize 'remediation' in tests (Jiri Jaburek) 2025-11-21 15:53:25.296 logging.py DEBUG - change rpm -q to dnf list (am-tux) 2025-11-21 15:53:25.296 logging.py DEBUG - Add arch filter to directory_access_var_log_audit (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Override the /etc/dpkg path-exclude option (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - add platform to rule harden_sshd_crypto_policy (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - oval macro: remove no longer used special case for sshd rules (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - We don't care about Windows (Evgeny Kolesnikov) 2025-11-21 15:53:25.296 logging.py DEBUG - selinux_policytype: exclude one more test which can cause problems (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - oval line_in_file macros: get rid of intermediate local variable (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - selinux_policytype: allow more templated tests (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - add two new parameters to the template to configure correct and wrong test value (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - switch the rule selinux_policytype to the newly modified template (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - switch the rule configure_usbguard_auditbackend to the newly modified template (vojtapolasek) 2025-11-21 15:53:25.296 logging.py DEBUG - update the key_value_pair_in_file to be able to use XCCDF variable instead of hardcoded value (Vojtech Polasek) 2025-11-21 15:53:25.296 logging.py DEBUG - modify the macro oval_check_config_file to be able to use XCCDF variable in the place of value (Vojtech Polasek) 2025-11-21 15:53:25.296 logging.py DEBUG - Update ssg/jinja.py (Marcus Meissner) 2025-11-21 15:53:25.296 logging.py DEBUG - build: use a formatting construct that can use an older python3 (Marcus Meissner) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix applicability for file_permissions_var_log on Ubuntu (Miha Purg) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix description in audit_rules_networkconfig_modification (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Update audit_rules_media_export (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Bump actions/setup-go from 5.3.0 to 5.4.0 (dependabot[bot]) 2025-11-21 15:53:25.296 logging.py DEBUG - Remove grub2_nousb_argument from RHEL10 HIPAA profile. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Update tests (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Use a fully qualified name (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Move the condition (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix OVAL metadata (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix Code Climate problems (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Remove /usr/libexec (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - Merge templates (Jan Černý) 2025-11-21 15:53:25.296 logging.py DEBUG - Include uid >= 100 to align with existing oval (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - Make dirs one line (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - Exclude users of uid < 100 (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - Make remediation applicable on Ubuntu (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - Exclude /usr/bin/at in check and remediation (Alan Moore) 2025-11-21 15:53:25.296 logging.py DEBUG - Update profile stability data for RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Update ANSSI in RHEL10 to remove unnecessary UEFI rule. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Update stable profiles data for RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Make sure there are no UEFI remnants to RHEL10 product. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Update OSPP Control file to remove UEFI password rule. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Update HIPAA content on RHEL9/10 to remove any UEFI rule. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Remove remnant of UEFI rules in RHEL9. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Remove remnant UEFI rules from the SRG_GPOS. (Gabriel Becker) 2025-11-21 15:53:25.296 logging.py DEBUG - Update sshd_oval_check for SLE12 (svet-se) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix sshd_oval_check for SLEM5 (svet-se) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix sshd_oval_check for SLE15 (svet-se) 2025-11-21 15:53:25.296 logging.py DEBUG - Fix sshd_oval_check for opensuse (svet-se) 2025-11-21 15:53:25.296 logging.py DEBUG - CMP-3264: Update OCP assertions for TLS rules (Lance Bragstad) 2025-11-21 15:53:25.296 logging.py DEBUG - Move governance to its own section (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Change audit watches for ARLE (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - OCPBUGS-52888: Support checking ovs db lock groups for ARM64 (Lance Bragstad) 2025-11-21 15:53:25.297 logging.py DEBUG - Revert argument name for file_existence template (Miha Purg) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix logind_session_timeout in anssi controls to apply only for rhel and ol (svet-se) 2025-11-21 15:53:25.297 logging.py DEBUG - Bump docker/login-action from 3.3.0 to 3.4.0 (dependabot[bot]) 2025-11-21 15:53:25.297 logging.py DEBUG - Drop timesync rules from default profile (teacup-on-rockingchair) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix package name for SLE15 for NFS server (teacup-on-rockingchair) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix package name for SLE15 for DHCP server (teacup-on-rockingchair) 2025-11-21 15:53:25.297 logging.py DEBUG - Change checks for rexec and rlogin to use xinetd specific template (teacup-on-rockingchair) 2025-11-21 15:53:25.297 logging.py DEBUG - Add template for xinetd service disable (teacup-on-rockingchair) 2025-11-21 15:53:25.297 logging.py DEBUG - Update shared.yml (bontreger) 2025-11-21 15:53:25.297 logging.py DEBUG - Update shared.yml (bontreger) 2025-11-21 15:53:25.297 logging.py DEBUG - Use fully qualified collection name for community.general.ini_file (bontreger) 2025-11-21 15:53:25.297 logging.py DEBUG - Add rule audit_rules_kernel_module_loading_create to default profile (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Disable symlink dereference in accounts_user_dot_user/group_ownership (Miha Purg) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove audit_rules_kernel_module_loading_create from RHEL 10 (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove Jinja2 macro from e8 control file (Marcus Burghardt) 2025-11-21 15:53:25.297 logging.py DEBUG - Treat RHEL 10 execptions for HIPAA in RHEL 10 profiles (Marcus Burghardt) 2025-11-21 15:53:25.297 logging.py DEBUG - Treat RHEL 10 execptions for PCI-DSS 10.3.4 in RHEL 10 profiles (Marcus Burghardt) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove Jinja2 from ANSSI control file in R69 (Marcus Burghardt) 2025-11-21 15:53:25.297 logging.py DEBUG - Add renameat2 syscall to audit rules (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove Jinja2 from ANSSI control file in R67 (Marcus Burghardt) 2025-11-21 15:53:25.297 logging.py DEBUG - Treat RHEL 10 execptions for ANSSI R73 in RHEL 10 profiles (Marcus Burghardt) 2025-11-21 15:53:25.297 logging.py DEBUG - fix accounts_password_pan_rety oval check for Debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.297 logging.py DEBUG - Update descriptions with 64bit architecture (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix components test (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - add bash and ansible conditionals to selinux platform (vojtapolasek) 2025-11-21 15:53:25.297 logging.py DEBUG - remove conditionals from the sebool template. (vojtapolasek) 2025-11-21 15:53:25.297 logging.py DEBUG - change platform for the selinux-booleans group (vojtapolasek) 2025-11-21 15:53:25.297 logging.py DEBUG - Build thin data streams alongside normal data stream (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Add new test to check rainerscript multiline (Armando Acosta) 2025-11-21 15:53:25.297 logging.py DEBUG - Update remediations to include OL condition and rainerscript multiline (Armando Acosta) 2025-11-21 15:53:25.297 logging.py DEBUG - Update oval regex to support multiline (Armando Acosta) 2025-11-21 15:53:25.297 logging.py DEBUG - Update assertions for new CIS rules in OCP 4.17 and 4.18 (Lance Bragstad) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove more macos contnet (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - The original uid was '104' which should represent syslog on Ubuntu focal and jammy Made the customized tests only applicable on Ubuntu to avoid unnecessary template test override for other distros (if there is any) (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Update tests for package_bind_removed (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Describe RHEL 9.6 situation (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Improve template documentation (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Allow multiple bind package names (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Allow list of packages in template package_removed (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Update Ubuntu 22.04 STIG to V2R3 (Miha Purg) 2025-11-21 15:53:25.297 logging.py DEBUG - Add CCI (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - OCPBUGS-52884: Exclude file integrity operator checks from ARM clusters (Lance Bragstad) 2025-11-21 15:53:25.297 logging.py DEBUG - Update owner macros to allow | between owners (Eric Berry) 2025-11-21 15:53:25.297 logging.py DEBUG - Improve platform processing in Automatus (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Add missing RHEL8 stig id to rootfiles_configured. (Gabriel Becker) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove example link from test scenarios (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Improve wording (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Formatting and complexity fixes build-scripts/build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Add Apple macOS 10.15 to content notes (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove macOS content (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - OCPBUGS-52295: Update testing assertions for partition-for-var-log (Lance Bragstad) 2025-11-21 15:53:25.297 logging.py DEBUG - Keep audit_rules_login_events in the RHEL9 datastream. (Gabriel Becker) 2025-11-21 15:53:25.297 logging.py DEBUG - Create dummy in case there is no file exist (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Introduce rule enable_gpgcheck_for_all_repositories (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Use socket disable template since it is relevant currently for telnet server for sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.297 logging.py DEBUG - Add required python module (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Improve formatting, logging, and comments in build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Ensure all test files are copied (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Improve the speed of build_tests (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Apply recommendations from code review in #13029 (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix bug in build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix PEP8 in build-tests (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Code Clean Up in build-tests (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix PEP8 issues (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Add docs for building tests (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Refactor and add logging to build-scripts/build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Clean up imports so build-scripts/build_tests.py works (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Move to using Python's built in chunking (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Undo import changes in ssg_test_suite (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Clean up build_tests (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Adjust how product CPEs are done (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Add build_tests to CMake (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Reorder and clean up build-scripts/build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Clean up build-scripts/build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Update to use multliprocessing on build-scripts/build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - build_tests now uses multiprocessing (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Clean up variable name and scopes in build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Formatting and Jinja process commmon.sh. (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Add template support to build-scripts/build_tests.py (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Builds local tests (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Align chronyd makestep value with Ubuntu STIGs (Miha Purg) 2025-11-21 15:53:25.297 logging.py DEBUG - Add mount[boot-efi] platform to mount_option_boot_efi_nosuid rule (Evgeny Kolesnikov) 2025-11-21 15:53:25.297 logging.py DEBUG - Make release helper work in UTC time (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Remove shadowing of datetime in release_helper. (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Add OCIL and fix text to rootfiles_configured (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix bug in rootfiles_configured bash remediation (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Update stable profile test data. (Gabriel Becker) 2025-11-21 15:53:25.297 logging.py DEBUG - Use fine granular rules for audit rules login events. (Gabriel Becker) 2025-11-21 15:53:25.297 logging.py DEBUG - Fail if the build causes empty OCIL (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Use fine granular rules for audit_rules_unsuccessful_file_modification (Gabriel Becker) 2025-11-21 15:53:25.297 logging.py DEBUG - Deprecate old STIG profile (Watson Sato) 2025-11-21 15:53:25.297 logging.py DEBUG - Deprecate OCP CIS 1.5 (Watson Sato) 2025-11-21 15:53:25.297 logging.py DEBUG - Update RHEL E8/ISM_O profiles to use fine granular audit rules. (Gabriel Becker) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix "components" (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Create user syslog if no exist (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Override the template tests (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Package rsyslog create the user syslog (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - modify rule.yaml files to change the parameter name of file_owner template from fileuid to uid_or_name (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - modify the oval for file_owner template (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - modify the preprocessing function of file_owner template (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - modify remediations for file_owner template (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - change the parameter name in template tests (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Update template documentation: change parameter fileuid of file_owner template to uid_or_name explain its behavior (Alan Moore) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix ansible platform for network_nmcli_permissions (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix shellcheck in rootfiles_configure (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Adjust rootfiles_configured (Matthew Burket) 2025-11-21 15:53:25.297 logging.py DEBUG - Fix accounts_password_pam_retry (Jan Černý) 2025-11-21 15:53:25.297 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Update release script based on new stabilization date (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Add tests for rule set_iptables_default_rule (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Disable remediation for rule set_iptables_default_rule on Ubuntu (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Don't revert to snapshot during deletion of snapshot (Jan Černý) 2025-11-21 15:53:25.298 logging.py DEBUG - Change wording of log message (Jan Černý) 2025-11-21 15:53:25.298 logging.py DEBUG - Adjust titles for SRG GPS to use {{{ full_name }}} in place of the os (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Add required to controlseval.py --product switch (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix dconf key for idle-delay lock (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Add references to rootfiles_configured (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Add rootfiles_configured to stable profiles (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Add rootfiles_configured to RHEL STIGs (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Add new rule rootfiles_configured (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Add Ubuntu 22.04 to the list of FIPS certified OS (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Move installed_OS_is_ubuntu* oval checks to correct location (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Update enable_authselect remediation on bootable containers (Matus Marhefka) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump docker/setup-qemu-action from 3.5.0 to 3.6.0 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Rebase patch and drop enable_dconf_user_profile rule for rhel 8 and 10 (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Set stable profiles for unit tests (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Add enable_dconf_user_profile to PCI-DSS profile (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Add enable_dconf_user_profile to HIPAA profile (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Update products stability data for rhel10 after rebase (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Display list of xwindow packages in better formatting (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Drop xwindows_packages var in file in favour of product setting (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Use rule name in ansible remediation task (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Drop file added by mistake (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Update products stability data (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Drop code duplication in favour of product variable (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Add per products ol7,sle12 and sle15 definition for xwindows_packages (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Create variable with default xwindows packages in relation to xwindows_remove_packages rule (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Drop xwindows_remove_packages from slmicro5 platform as irrelevant (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Specify platform specific packages for xwindows_packages rule (teacup-on-rockingchair) 2025-11-21 15:53:25.298 logging.py DEBUG - Add secureboot check to profile stability tests (shaneboulden) 2025-11-21 15:53:25.298 logging.py DEBUG - Add cce identifiers for secureboot (shaneboulden) 2025-11-21 15:53:25.298 logging.py DEBUG - Add secureboot check to ISM profile (shaneboulden) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix whitespace (shaneboulden) 2025-11-21 15:53:25.298 logging.py DEBUG - add a check for secure boot enabled (shaneboulden) 2025-11-21 15:53:25.298 logging.py DEBUG - Add new test to bash_sudo_remove_config (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Update bash_sudo_remove_config macro (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Update CLO install channel to 6.1 (Watson Sato) 2025-11-21 15:53:25.298 logging.py DEBUG - Update OCP 4 CIS 1.2.32 (Watson Sato) 2025-11-21 15:53:25.298 logging.py DEBUG - Adjust resource-requests rule assertsion for 4.18 (Watson Sato) 2025-11-21 15:53:25.298 logging.py DEBUG - Adjust 4.18 default tls-cipher-suites assertion (Watson Sato) 2025-11-21 15:53:25.298 logging.py DEBUG - Delete _pre_4_9 rules (Watson Sato) 2025-11-21 15:53:25.298 logging.py DEBUG - Adjust applicable OCP version (Watson Sato) 2025-11-21 15:53:25.298 logging.py DEBUG - Prefer unversioned python interpreter (Jan Černý) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump docker/setup-qemu-action from 3.4.0 to 3.5.0 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Make Delta tailoring for RHEL 8 only (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Move stablization to the third Monday of the second month (Matthew Burket) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Bug fix - version number changed from 1.5.0 to 1.7.0 (Anna-Koudelkova) 2025-11-21 15:53:25.298 logging.py DEBUG - Use correct Python version variable name (Jan Černý) 2025-11-21 15:53:25.298 logging.py DEBUG - Remove copied comments (Jan Černý) 2025-11-21 15:53:25.298 logging.py DEBUG - Add new product tencentos4 supporting (Sinong Chen) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump docker/metadata-action from 5.6.1 to 5.7.0 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump docker/build-push-action from 6.14.0 to 6.15.0 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix dconf key for idle-delay lock on Ubuntu (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Exclude symlinks in file_(group)ownerships_var_log rules (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix typos in file_ownerships_var_log (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Disable remediation for all_apparmor_profiles_in_enforce_complain_mode on Ubuntu (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump nick-fields/retry from 3.0.1 to 3.0.2 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Update references for profile stability tests (Benjamin Deering) 2025-11-21 15:53:25.298 logging.py DEBUG - Apply 1.1.1.8 to server_l1 to match the benchmark (Benjamin Deering) 2025-11-21 15:53:25.298 logging.py DEBUG - Update OL9 e8 profile (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Update OL9 ism_o profile (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Update OL9 ccn profile (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Update OL9 cui profile (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Update OL9 ospp profile (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Update OL9 anssi profile (Armando Acosta) 2025-11-21 15:53:25.298 logging.py DEBUG - Ensure specific version of Python (Jan Černý) 2025-11-21 15:53:25.298 logging.py DEBUG - Move status to accepted before merging (Marcus Burghardt) 2025-11-21 15:53:25.298 logging.py DEBUG - Change the order of filter in rule to match check and remediation (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - Specify the uid Reorder the position of the auid filter (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - Create new group for pkg inetutils-telnet (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Add filter (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - Reassign the rule to correct component (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - Correct the filters (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - add rhel10 product stability test (vojtapolasek) 2025-11-21 15:53:25.298 logging.py DEBUG - add profile stability test data for rhel10 product (vojtapolasek) 2025-11-21 15:53:25.298 logging.py DEBUG - correct the path on ubuntu (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - Add a new rule for actual telnet package (Alan Moore) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix file_owner_var_log_lastlog tests (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Update rules in default ubuntu2404 profile (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Rename var_log_sssd rules and align with CIS (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Rename var_log_gdm rules and align with CIS (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Add recursive search to file_groupowner_var_log_journal (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Set recursive flag in file_owner_var_log_journal (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Implement file_ownerships_var_log_apt (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Rename file_groupowner_var_log_apt and align with CIS (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix file_ownerships_var_log (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix file_groupownerships_var_log (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Add recursive flag and extend exclusions for var log permissions on ubuntu (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix permissions for shadow files on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Stop using deprecated CMake code (Jan Černý) 2025-11-21 15:53:25.298 logging.py DEBUG - Add conditionals to avoid overriding template on Ubuntu <= 22.04 (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Invert conditionals (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Fix metadata in *_var_log rules (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Make it explicit who are the expected approvers (Marcus Burghardt) 2025-11-21 15:53:25.298 logging.py DEBUG - Add checks for existence of user and group names (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Rename owner_local_var_log and groupowner_local_var_log (Miha Purg) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump docker/build-push-action from 6.13.0 to 6.14.0 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.1.0 to 5.2.0 (dependabot[bot]) 2025-11-21 15:53:25.298 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.7.2 to 4.7.3 (dependabot[bot]) 2025-11-21 15:53:25.299 logging.py DEBUG - Fix file_owner and file_groupowner tests (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - CIS Ubuntu 24.04 6.1.4.1 Ensure access to all logfiles has been configured (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_wbtmp (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_waagent (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_sssd (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_secure (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Update file_permissions_var_log_messages for CIS Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_localmessages (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_lastlog (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_gdm3 (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_gdm (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_cloud_init (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_auth (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_permissions_var_log_apt (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_owner_var_log_wbtmp (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_owner_var_log_waagent (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Update file_owner_var_log_syslog for CIS Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_owner_var_log_sssd (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_owner_var_log_secure (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Update file_owner_var_log_messages for CIS Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_owner_var_log_localmessages (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_owner_var_log_lastlog (Eric Berry) 2025-11-21 15:53:25.299 logging.py DEBUG - Implement file_owern_var_log_journal (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_owner_var_log_gdm3 (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_owner_var_log_gdm (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_owner_var_log_cloud_init (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_owner_var_log_auth (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_groupowner_var_log_wbtmp (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Update file_groupowner_var_log_syslog for CIS Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_groupowner_var_log_waagent (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_groupowner_var_log_sssd (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_groupowner_var_log_secure (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Update file_groupowner_var_log_messages for CIS Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement var_log_localmessages (Eric Berry) 2025-11-21 15:53:25.300 logging.py DEBUG - Implement file_groupowner_var_log_lastlog (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement file_groupowner_var_log_journal (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement file_groupowner_var_log_gdm3 (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement file_groupowner_var_log_gdm (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement file_groupowner_var_log_cloud_init (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement file_groupowner_var_log_auth (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Update permissions_local_var_log for CIS Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement owner_local_var_log (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement groupowner_local_var_log (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Implement file_groupowner_var_log_apt (Eric Berry) 2025-11-21 15:53:25.301 logging.py DEBUG - Add dependency in configure_crypto_policy rule to crypto-policies-scripts package for SLE platform (teacup-on-rockingchair) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix Kubernetes Test Content Parsing Workflow (Lance Bragstad) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove workaround for nfs-utils (Jan Černý) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove firewalld from required platforms on ubuntu (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Release Ubuntu 24.04 CIS v1.0.0 profiles (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Bump OCP/RHCOS DISA STIG version number (Lance Bragstad) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix jinja conditionals in sysctl test (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Bump nick-fields/retry from 3.0.0 to 3.0.1 (dependabot[bot]) 2025-11-21 15:53:25.301 logging.py DEBUG - OCPBUGS-49951 - Correct the CIS reference for rule ocp4-api-server-api-priority-flowschema-catch-all (Bhargavi Gudi) 2025-11-21 15:53:25.301 logging.py DEBUG - Set applicability for journald_disable_forward_to_syslog on ubuntu2404 (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Add systemd-journal-remote to package applicability (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix typo in service_disabled_guard_var comment (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Add applicability checks to rsyslog and journal rules on Ubuntu 2404 (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Add bash check to platform_service_disabled template (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Add rsyslog to service_disabled applicability check (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove newlines from dpkg-query showformat (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Add var_password_hashing_min_rounds_login_defs to SLE12 STIG profile (svet-se) 2025-11-21 15:53:25.301 logging.py DEBUG - Update SLE12 DISA STIG manual to V3R2 (svet-se) 2025-11-21 15:53:25.301 logging.py DEBUG - Update SLE12 STIG to V3R2 (svet-se) 2025-11-21 15:53:25.301 logging.py DEBUG - A typo fix (Šimon Lukašík) 2025-11-21 15:53:25.301 logging.py DEBUG - Add missing newline at end of chrony.conf (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - A typo fix (Šimon Lukašík) 2025-11-21 15:53:25.301 logging.py DEBUG - Update dependency compliance-trestle to v3.8.0 (red-hat-konflux[bot]) 2025-11-21 15:53:25.301 logging.py DEBUG - A typo fix (Šimon Lukašík) 2025-11-21 15:53:25.301 logging.py DEBUG - State that first ADR contain guidelines (Marcus Burghardt) 2025-11-21 15:53:25.301 logging.py DEBUG - MULTIARCH-4655: add test on line 76 (Paul Bastide) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix rule package_iptables-persistent_installed on Ubuntu 2404 (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix oval and remediations for journald-upload rules (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix bash_instantiate_variables jinja macro (Renaud Métrich) 2025-11-21 15:53:25.301 logging.py DEBUG - Deprecate OCP4 CIS v1.4.0 profiles (Watson Sato) 2025-11-21 15:53:25.301 logging.py DEBUG - Add tests for Profile status (Watson Sato) 2025-11-21 15:53:25.301 logging.py DEBUG - Add support for xccdf:status elements in profiles (Watson Sato) 2025-11-21 15:53:25.301 logging.py DEBUG - New branch for SYS 1.6.17 (lichtblaugue) 2025-11-21 15:53:25.301 logging.py DEBUG - Add SRG-OS-000373-GPOS-00156 (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Make stig not applicable for Ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Align file_groupownership_system_commands_dirs with Ubuntu STIGs (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - add test scenarios for rhel9 (vojtapolasek) 2025-11-21 15:53:25.301 logging.py DEBUG - add ol8 into if conditional (vojtapolasek) 2025-11-21 15:53:25.301 logging.py DEBUG - rhel9 stig: correct placement of harden_sshd_ciphers_opensshserver_conf_crypto_policy (vojtapolasek) 2025-11-21 15:53:25.301 logging.py DEBUG - modify OVAL to check for different config flie format on rhel8 (vojtapolasek) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove all set_grub_uefi_root in grub2_paswword (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - set env use jinja (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Use pipeline instead process substitution (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Use pipeline instead process substitution (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Use while loop (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Use while loop (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Match the rhel version >= 9.0 (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Rule: sshd_include_crypto_policy, drop remediations, improve OVAL (Evgeny Kolesnikov) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove stray end if (Jan Černý) 2025-11-21 15:53:25.301 logging.py DEBUG - Add a default profile for Ubuntu2404 to add all rules to the datastream (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Document adopted statuses for ADRs (Marcus Burghardt) 2025-11-21 15:53:25.301 logging.py DEBUG - Reword and provide more context (Marcus Burghardt) 2025-11-21 15:53:25.301 logging.py DEBUG - Introduce architecture decisions records (Marcus Burghardt) 2025-11-21 15:53:25.301 logging.py DEBUG - Update scripts in the creating content doc (Sun, Haoxiang) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix ansible (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix ansible (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Correct uid occurrence with gid (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Use find instead globbing (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Use find instead globbing (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix RHEL 8 GUI STIG description (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - added wait for mcp (sluetze) 2025-11-21 15:53:25.301 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A26 (sluetze) 2025-11-21 15:53:25.301 logging.py DEBUG - add rule to check for sandboxed containers config (sluetze) 2025-11-21 15:53:25.301 logging.py DEBUG - add rule to check for sandboxed containers (sluetze) 2025-11-21 15:53:25.301 logging.py DEBUG - Define the missing SYS_UID_ value in test (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Change link to NTP documentation (Evgeny Kolesnikov) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove RHEL 8 STIG reference from file_permission_user_init_files (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Wrap condition in curly braces (Jan Černý) 2025-11-21 15:53:25.301 logging.py DEBUG - Restart postfix instead of reload (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Add new profile for CIS OpenShift 1.7.0 (Watson Sato) 2025-11-21 15:53:25.301 logging.py DEBUG - Rule: sshd_include_crypto_policy, platform: not osbuild (Evgeny Kolesnikov) 2025-11-21 15:53:25.301 logging.py DEBUG - Clean up ufw sysctl.conf in all tests Created tests for ufw case (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Check & remediate /etc/ufw/sysctl.conf (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Call set_grub_uefi_root to override the grub path in tests (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - fix ansible remediation (vojtapolasek) 2025-11-21 15:53:25.301 logging.py DEBUG - replace wrong variable with the correct one (vojtapolasek) 2025-11-21 15:53:25.301 logging.py DEBUG - Should be functionally complete now as far as tests and checks go, need to work on profiles like STIG and standard next. (Simon John) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix ocp4_content to use aarch64 instead of arm64 (Lance Bragstad) 2025-11-21 15:53:25.301 logging.py DEBUG - Update PSC Content from RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix Grammar in STIG descriptions for RHEL (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Use pam-auth-update to create tests (Alan Moore) 2025-11-21 15:53:25.301 logging.py DEBUG - Add var_password_hashing_min_rounds_login_defs to SLE15 STIG profile (svet-se) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix grep commands (Jan Černý) 2025-11-21 15:53:25.301 logging.py DEBUG - Update SLE15 DISA STIG manual to V2R3 (svet-se) 2025-11-21 15:53:25.301 logging.py DEBUG - Update SLE15 STIG to V2R3 (svet-se) 2025-11-21 15:53:25.301 logging.py DEBUG - Bump docker/setup-qemu-action from 3.3.0 to 3.4.0 (dependabot[bot]) 2025-11-21 15:53:25.301 logging.py DEBUG - Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (dependabot[bot]) 2025-11-21 15:53:25.301 logging.py DEBUG - Update RHEL 10 STIG title (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove DRAFT from RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Update STIG description. (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Push arm64 k8scontent images on merge (Lance Bragstad) 2025-11-21 15:53:25.301 logging.py DEBUG - Change macro bash_bootc_build (Jan Černý) 2025-11-21 15:53:25.301 logging.py DEBUG - Add templated tests to tests/validate_automatus_metadata.py (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove the second enable_dracut_fips_module in enable_fips_mode (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix variable name in Ubuntu 22.04 CIS profiles (Miha Purg) 2025-11-21 15:53:25.301 logging.py DEBUG - Fix Automatus tests (Jan Černý) 2025-11-21 15:53:25.301 logging.py DEBUG - bump version to 0.1.77 (vojtapolasek) 2025-11-21 15:53:25.301 logging.py DEBUG - Remove rules from the RHEL 10 STIG that were removed in the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.301 logging.py DEBUG - Add removed rules to default profile (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Adapt audit_rules_suid_privilege_function for Ubuntu 24.04 CIS (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove RHEL-09-672035 and RHEL-09-672040 from RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Exclude enable_dracut_fips_module from bootc (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove rule SLES-12-010300 (svet-se) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove rule SLES-12-010599 (svet-se) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove rule SLES-12-010310 (svet-se) 2025-11-21 15:53:25.302 logging.py DEBUG - Adjust tmout to 10 minutes for SLES-12-010090 (svet-se) 2025-11-21 15:53:25.302 logging.py DEBUG - Update SLE12 DISA STIG manual to V3R1 (svet-se) 2025-11-21 15:53:25.302 logging.py DEBUG - Update SLE12 STIG to V3R1 (svet-se) 2025-11-21 15:53:25.302 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_pwquality_retry/policy/stig/shared.yml (vojtapolasek) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove enable_dracut_fips_module for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Apply feedback in #12946 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Adjust warnings for FIPS mode. (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Address feedback in #12946 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update FIPS rules for RHEL (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update enable_dracut_fips_module (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update enable_fips_mode (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - enhance the rule so that the value must be higher than 0 (vojtapolasek) 2025-11-21 15:53:25.302 logging.py DEBUG - add rule to rhel10 product as well (vojtapolasek) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove mentions of /usr/share/auditd/sample-rules (Evgeny Kolesnikov) 2025-11-21 15:53:25.302 logging.py DEBUG - add back removed rules to keep datastream consistent (vojtapolasek) 2025-11-21 15:53:25.302 logging.py DEBUG - Add new constant containing timestamp according to XCCDF standard. (Gabriel Becker) 2025-11-21 15:53:25.302 logging.py DEBUG - Use timestamp variable in the status field of the benchmark. (Gabriel Becker) 2025-11-21 15:53:25.302 logging.py DEBUG - Fix timestamps for data-stream composition. (Gabriel Becker) 2025-11-21 15:53:25.302 logging.py DEBUG - add rule to rhel9 stig profile (vojtapolasek) 2025-11-21 15:53:25.302 logging.py DEBUG - add new rule to check retry option only in /etc/security/pwquality.conf (vojtapolasek) 2025-11-21 15:53:25.302 logging.py DEBUG - Create a new rule no_empty_passwords_unix (Alan Moore) 2025-11-21 15:53:25.302 logging.py DEBUG - Add new rule instead of modifying existing one (Alan Moore) 2025-11-21 15:53:25.302 logging.py DEBUG - CMP-3121: Update OCP dockerfile to be arm64 aware (Lance Bragstad) 2025-11-21 15:53:25.302 logging.py DEBUG - CMP-3121: Build ocp4 content for arm64 (Lance Bragstad) 2025-11-21 15:53:25.302 logging.py DEBUG - Fix tests for root_path_no_dot on Ubuntu (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Fix processing platform key in SCE (Jan Černý) 2025-11-21 15:53:25.302 logging.py DEBUG - rule ordering: sshd_include_crypto_policy before all other sshd_* rules (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - update prose (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - update ansible remediation (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - update bash remediation (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - fix test scenarios which were throwing errors (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - Ensure mode in Ansible remedation (Jan Černý) 2025-11-21 15:53:25.302 logging.py DEBUG - Add comment in test scenario explaining the difference between products. (Gabriel Becker) 2025-11-21 15:53:25.302 logging.py DEBUG - Fix audit_rules_privileged_commands_unix2_chkpwd. (Gabriel Becker) 2025-11-21 15:53:25.302 logging.py DEBUG - Define var_user_initialization_files_regex on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Disable tests not applicable to Ubuntu (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Enable audit_rules_privileged_commands tests on Ubuntu (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Override OVAL for audit_rules_privileged_commands with SCE (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Override OVAL for no_files_unowned_by_user with SCE (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Override OVAL for file_permissions_ungroupowned with SCE (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Override OVAL for file_permissions_unauthorized_world_writable with SCE (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Rebased again, added some more policies, about 160 left to check in linux_os/guide/system/ (Simon John) 2025-11-21 15:53:25.302 logging.py DEBUG - Fixed some more merge conflicts when rebasing to master (Simon John) 2025-11-21 15:53:25.302 logging.py DEBUG - Some more work on profiles (Simon John) 2025-11-21 15:53:25.302 logging.py DEBUG - Fixed whitespace issue causing ctests to fail (Simon John) 2025-11-21 15:53:25.302 logging.py DEBUG - Ensured ensure_almalinux_gpgkey_installed is not found in non-AlmaLinux profiles by negating it (Simon John) 2025-11-21 15:53:25.302 logging.py DEBUG - Fixed some merge conflicts when rebasing to master again (Simon John) 2025-11-21 15:53:25.302 logging.py DEBUG - Rule: mount_option_boot_efi_nosuid, remove "uefi" platform (Evgeny Kolesnikov) 2025-11-21 15:53:25.302 logging.py DEBUG - Add package_ypbind_removed to e8 profile to OL8 (Armando Acosta) 2025-11-21 15:53:25.302 logging.py DEBUG - Update sssd_enable smartcards (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update bash remediation set_password_hashing_min_rounds_logindefs (Armando Acosta) 2025-11-21 15:53:25.302 logging.py DEBUG - Add variable value to OL8 stig profile (Armando Acosta) 2025-11-21 15:53:25.302 logging.py DEBUG - Fix rules checking '/etc/ssh/sshd_config.d/' (Jan Černý) 2025-11-21 15:53:25.302 logging.py DEBUG - Change authselect base profile for custom profiles (Marcus Burghardt) 2025-11-21 15:53:25.302 logging.py DEBUG - Only enforce valid profile (Alan Moore) 2025-11-21 15:53:25.302 logging.py DEBUG - Update CI and docs for SRG GPOS V3R2 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - change variables and align them with latest stig (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - remove no longer relevant rules (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - Extend screensaver_idle_delay to check if setting is locked (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Extend screensaver_lock_delay to check if setting is locked (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Add file_permissions_etc_audit_rulesd to RHEL 9 default profile (Matus Marhefka) 2025-11-21 15:53:25.302 logging.py DEBUG - ignore Konflux bots when collecting list of contributors (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - update list of contributors (Vojtech Polasek) 2025-11-21 15:53:25.302 logging.py DEBUG - MULTIARCH-4655: add rhcos4/ocp4 for disa-stig to build (Paul Bastide) 2025-11-21 15:53:25.302 logging.py DEBUG - Add SRG GPOS and CCI to package_tftp_removed (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Add SRG GPOS and CCI to tftp_uses_secure_mode_systemd (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Add SRG GPOS and CCI to audit_rules_privileged_commands_pkexec (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Add cci to file_permissions_cron_allow (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Add references to chrony_set_nts (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Add CCI to package_gdm_removed (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update to SRG GPOS V3R2 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Fix title in SRG-OS-000076-GPOS-00044 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Add SRG-OS-000373-GPOS-00158 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Add SRG-OS-000373-GPOS-00157 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update SRG-OS-000355-GPOS-00143 for SRG GPOS V3R2 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Removal SRG GPOS Controls based on V32 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update RHEL 9 STIG SCAP Content to V2R3 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update RHEL 8 STIG SCAP Contenet to V2R2 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove non-compliant MACs on Ubuntu (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Disable bootc applicability checks on Ubuntu (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Add missing rule to Ubuntu 24.04 CIS control 6.2.4.5 (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Move auditd file permission rules to auditing group to fix rule order (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Add missing packages to pam components file (Miha Purg) 2025-11-21 15:53:25.302 logging.py DEBUG - Remove xwindows_remove_packages from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.2 Ensure systemd-journal-upload authentication is configured (Eric Berry) 2025-11-21 15:53:25.302 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.2 Ensure systemd-journal-upload authentication is configured (Eric Berry) 2025-11-21 15:53:25.302 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.2 Ensure systemd-journal-upload authentication is configured (Eric Berry) 2025-11-21 15:53:25.302 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.2 Ensure systemd-journal-upload authentication is configured (Eric Berry) 2025-11-21 15:53:25.302 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.2 Ensure systemd-journal-upload authentication is configured (Eric Berry) 2025-11-21 15:53:25.302 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.2 Ensure systemd-journal-upload authentication is configured (Eric Berry) 2025-11-21 15:53:25.302 logging.py DEBUG - Add references to file_permissions_audit_configuration (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update RHEL 9 Stable Products (Matthew Burket) 2025-11-21 15:53:25.302 logging.py DEBUG - Update OL8 STIG reference file to V2R3 (Armando Acosta) 2025-11-21 15:53:25.302 logging.py DEBUG - Update OL8 V2R3 (Armando Acosta) 2025-11-21 15:53:25.303 logging.py DEBUG - Add missing rule to Ubuntu 24.04 CIS control 2.4.1.8 (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Add minimal Python version (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Add ubuntu platforms to auditd_data_disk_error_action remediation (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Re-add ubuntu platform to grub2_bootloader_argument template (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Override tests removing pam-runtime and pam-modules (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Add ansible header (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - Bump actions/setup-python from 5.3.0 to 5.4.0 (dependabot[bot]) 2025-11-21 15:53:25.303 logging.py DEBUG - Update RHEL 8 STIG reference file to V2R2 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update RHEL 8 V2R2 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update RHEL 9 STIG reference file to V2R3 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update rule for RHEL-09-653110 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Remove RHEL-09-652035 from the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Make accounts_password_pam_enforce_root also check drop in files (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update template accounts_password to use drop in files (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update password hashing round to 100,000 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Add usbguard_service_enabled for RHEL-09-291015 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update SSH MAC rules (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Add RHEL-09-255064 to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update variable sshd_approved_ciphers for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Add SSHD Drop In Permission rules (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Add rules for ssh drop in permissions and ownership (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update RHEL 9 STIG version (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Add RHEL-09-232103 and RHEL-09-232104 to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update check text for RHEL-09-231030 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Retitle RHEL-09-215105 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Renumber RHEL-09-672045 to RHEL-09-215105 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Renumber RHEL-09-672010 to RHEL-09-215100 (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Add RHEL-09-171011 to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Fix file endings and fix ansible - fix EOF warngins - replace executing of bash command from ansible with more standard approach using lineinfile (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - Add multi_platform_sle support in ansible remediation for chronyd_run_as_chrony_user (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - Make sure accounts_passwords_pam_tally2_deny_root rule doesn't conflict with accounts_passwords_pam_tally2 (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - Add ansible remediation for ensure_shadow_group_empty (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - This project no longer needs to support Python 2. (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Fix path to timesyncd.conf for sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - Fix file EOF (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - Add systemd check if it is running for systemctl start commands (teacup-on-rockingchair) 2025-11-21 15:53:25.303 logging.py DEBUG - Update mount_option_proc_hidepid test for OL9 (Armando Acosta) 2025-11-21 15:53:25.303 logging.py DEBUG - Add ol9 to var_mount_option_proc_hidepid (Armando Acosta) 2025-11-21 15:53:25.303 logging.py DEBUG - gdm package cannot be removed in stig_gui profile (Matus Marhefka) 2025-11-21 15:53:25.303 logging.py DEBUG - Rule: firewalld_sshd_port_enabled, OVAL: Do not check for zone assignment in network connections (Evgeny Kolesnikov) 2025-11-21 15:53:25.303 logging.py DEBUG - Fix package and service name overrides for Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.0.0 to 5.1.0 (dependabot[bot]) 2025-11-21 15:53:25.303 logging.py DEBUG - add negative check to exclude openshift from bootc check (sluetze) 2025-11-21 15:53:25.303 logging.py DEBUG - Use _guard_var templates for timesync services on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Use _guard_var templates for timesync packages on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Switch to selecting timesync with var_timesync_service on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Create new variable var_timesync_service (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Remove DISA-STIG OL9-214030 requirement (Armando Acosta) 2025-11-21 15:53:25.303 logging.py DEBUG - Add rules for installing pam-runtime and pam-modules to Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.303 logging.py DEBUG - Update RHEL 8 installed regex (Matthew Burket) 2025-11-21 15:53:25.303 logging.py DEBUG - Update audit_rules_sudoers_d to accept missing trailing slash. (Gabriel Becker) 2025-11-21 15:53:25.303 logging.py DEBUG - Add rule accounts_passwords_pam_faillock_root_unlock_time into cis control (Alan Moore) 2025-11-21 15:53:25.303 logging.py DEBUG - Update several controls for Ubuntu 24.04 CIS (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Update install_vm documentation with information about unr distros. (Gabriel Becker) 2025-11-21 15:53:25.325 logging.py DEBUG - Expand install_vm with default osinfo for unreleased distros. (Gabriel Becker) 2025-11-21 15:53:25.325 logging.py DEBUG - Remove package_nftables_removed from Ubuntu 24.04 CIS profile (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Define var_network_filtering_service for Ubuntu 24.04 CIS profiles (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Limit package_iptables_installed tests to rhel platforms (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Add tests for _guard_var templates (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Modify available options for var_network_filtering_service on Ubuntu (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Use new template for firewall package/service rules on Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Make _guard_var templates applicable to all platforms (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Bump docker/build-push-action from 6.12.0 to 6.13.0 (dependabot[bot]) 2025-11-21 15:53:25.325 logging.py DEBUG - Update dependency compliance-trestle to v3.7.0 (red-hat-konflux[bot]) 2025-11-21 15:53:25.325 logging.py DEBUG - Move to enable_fips_mode from grub2_enable_fips_mode in RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Adjust `kernel_module_disabled/missing_blacklist.fail.sh` (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Modernize xwindows_runlevel_target (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Move RHEL 10 to use package_gdm_removed over package_xorg-x11-server-common_removed (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Fix unit tests for NERC CIP update (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Move tests to use the correct ssh group based on the OS (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Fix NERC CIP Link (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - RHEL now checks no other users have primary group ID 0 (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Update pci-dss profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.325 logging.py DEBUG - Update stig_gui profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.325 logging.py DEBUG - Update stig profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.325 logging.py DEBUG - Update ism_o profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.325 logging.py DEBUG - Update cui profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.325 logging.py DEBUG - Update ospp profile for OL8 (Armando Acosta) 2025-11-21 15:53:25.325 logging.py DEBUG - Update anssi profiles for OL8 (Armando Acosta) 2025-11-21 15:53:25.325 logging.py DEBUG - Add oval and tests (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Add rule no_invalid_shell_accounts_unlocked (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Update tests for RHEL 10 on rule sssd_enable_smartcards (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Workaround package_nfs-utils_removed issue on bootable containers (Matus Marhefka) 2025-11-21 15:53:25.325 logging.py DEBUG - add rule fapolicy_default_deny to rhel9 stig (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - Fix metadata in firewall_single_service_active rule (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Add rule to ubuntu2404 CIS control 6.1.1.4 (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Add new rule logging_services_active (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Make coredump_disable_storage/coredumps_storage_none.pass work on RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Update logind_session_timeout/not_configured.fail to handle if the systemd config is not there (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Update sssd_enable_smartcards for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - Remove package_xinetd_removed from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.325 logging.py DEBUG - update prose (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - add test scenario (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - change oval so that only files within the home directory are checked (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - Fix dpkg package applicability check in bash (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Improve regex detection of the augenrules from systemd service file. (Gabriel Becker) 2025-11-21 15:53:25.325 logging.py DEBUG - rename OVAL tests and objects to fix name conflict (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - Add more tests for accounts_password_pam_unix_authtok (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Improve OVAL for accounts_password_pam_unix_authtok (Miha Purg) 2025-11-21 15:53:25.325 logging.py DEBUG - Ensure newline at the end of the file (Jan Černý) 2025-11-21 15:53:25.325 logging.py DEBUG - Bump NexusPHP/no-merge-commits from 2.1.0 to 2.2.1 (dependabot[bot]) 2025-11-21 15:53:25.325 logging.py DEBUG - Bump actions/setup-go from 5.2.0 to 5.3.0 (dependabot[bot]) 2025-11-21 15:53:25.325 logging.py DEBUG - Remove duplicate oval check (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - modify stig-specific prose (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - Implement 2.3.1.1 Ensure a single time synchronization daemon is in use Complete rules 2.3.2.2 and 2.3.3.3 (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Add "-Initial" replacement (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Fix imports (Jan Černý) 2025-11-21 15:53:25.325 logging.py DEBUG - Add rule service_chronyd_disabled and service_timesyncd_disabled Implement rule ntp_single_service_active (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Resolve Jinja in shared test content (Jan Černý) 2025-11-21 15:53:25.325 logging.py DEBUG - Support subdirectories in other_content (Jan Černý) 2025-11-21 15:53:25.325 logging.py DEBUG - Add rule accounts_password_pam_pwhistory_use_authtok (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Implement rule 5.3.3.3.3 Ensure pam_pwhistory includes use_authtok (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Implement rule 5.3.3.3.2 Ensure password history is enforced for the root user (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Add rule accounts_password_pam_pwhistory_enforce_root into ubuntu2404 cis control 5.3.3.3.2 (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Use RawTextHelpFormatter in the install_vm script when parsing args. (Gabriel Becker) 2025-11-21 15:53:25.325 logging.py DEBUG - require_singleuser_auth: update ocil and fixtext (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - Rewrite the remediation and tests of accounts_password_pam_pwhistory_remember to use pam-auth-update (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Set the cis recommend value (Alan Moore) 2025-11-21 15:53:25.325 logging.py DEBUG - Do not pass an empty string to shellcheck wrapper (Jan Černý) 2025-11-21 15:53:25.325 logging.py DEBUG - SSSD Service Enabled: Update test scenario to work on RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.325 logging.py DEBUG - update ansible remediation (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - update tests (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - require_singleuser_auth bash: update remediation to reset Execstart (Vojtech Polasek) 2025-11-21 15:53:25.325 logging.py DEBUG - require_singleuser_auth check rewrite (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - Use dedicated_ssh_keyowner variable in test scenarios. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - Select enable_dracut_fips_module in RHEL 9 ISM_O profile (Matus Marhefka) 2025-11-21 15:53:25.326 logging.py DEBUG - macro bash_ensure_ini_config: escape slashes in sed commands (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - Add kickstart remediation to service_kdump_disabled (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Authselect profile minimal is now called local in RHEL10. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - install_vm: Add default osinfo for RHEL distro. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - modify ansible remediation to use the variable (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix file_permissions_etc_audit_rulesd in Image Mode (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Change shellcheck tests (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Add AlmaLinux 9 to CI (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix CIS reference URI for AlmaLinux 9 (David du Colombier) 2025-11-21 15:53:25.326 logging.py DEBUG - Enable correct OVAL criteria for RHEL9/RHEL10 in file_ownership_var_log_audit_stig. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - change control files to add the new rule (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - add new rule to replace audit_rules_mac_modification (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix RHEL 8 CIS reference on Ensure noexec option set on /var/tmp partition (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix typo in service sssd enabled rule. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - Add a script to ensure coredump configuration file exists. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - Add -Initial line without use_authtok for pwhistory configuration (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - Switch to new rules for mac modifications on Ubuntu 24.04 CIS (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Add new rules to replace audit_rules_mac_modification on Ubuntu (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix broken links in CO rules (Watson Sato) 2025-11-21 15:53:25.326 logging.py DEBUG - Remove GitPod from README (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - disable_ctrlaltdel_burstaction: make sure config file exists. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - Add ol platform for missing audit rules (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Update jinja conditionals with ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Add custom test scenario dconf_gnome_lock_screen_on_smartcard_removal. (Gabriel Becker) 2025-11-21 15:53:25.326 logging.py DEBUG - Add accounts_root_path_dirs_no_write root_path_all_dirs root_path_no_dot no_dirs_unowned_by_root to cis ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - Implement rule root_path_all_dirs (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - Implement no_dirs_unowned_by_root (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - Remove GitPod comment from CTF workflow (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix RHEL 10 ISM profile fails in Image Mode (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Add rule to ubuntu24.04 cis control 5.4.3.1 (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Add new rule no_nologin_in_shells (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Bump docker/build-push-action from 6.11.0 to 6.12.0 (dependabot[bot]) 2025-11-21 15:53:25.326 logging.py DEBUG - Update stig profile (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Avoid systemd in container environment (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - Use macro to generate oval listen port parts (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - Add oval check logic for has_nonlocal_mta to also check port 465 587 (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - Add variable var_postfix_inet_interfaces into Ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.326 logging.py DEBUG - modify and extend tests (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - change bash remediation to use the variable (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - rewrite OVAL check to use the variable (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - use variable in rule.yaml (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - add new variable expressing ninimum number of password hashing rounds in /etc/login.defs (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - Add rules to ubuntu2404 CIS control 4.1.1 (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Implement firewall_single_service_active (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Quote negated bash conditionals (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Remove type hints due to Python2 support (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix auditd rule to watch apparmor instead of selinux on Ubuntu (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - rhel9 stig_gui: add rule back, it stays informational and does no harm (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - rhel9 stig: make rule syscl_user_max_user_namespaces not scored and informational (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - Ensure correct and consistent package name (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix failing file_permissions_crontab (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Introduce ospp profile for ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Introduce stig profiles for ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Introduce pci-dss profile for ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Introduce ism profiles for ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Introduce hipaa profile for ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Introduce e8 profile for ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Update anssi profiles for ol10 (Edgar Aguilar) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix test issues (Eric Berry) 2025-11-21 15:53:25.326 logging.py DEBUG - Attempt to fix pam_unix authtok failure test (Eric Berry) 2025-11-21 15:53:25.326 logging.py DEBUG - Attempting to fix Ubuntu 24.04 5.3.3.4.4 remdiation on server (Eric Berry) 2025-11-21 15:53:25.326 logging.py DEBUG - Ubuntu 24.04 5.3.3.4.4 Ensure pam_unix includes use_authtok (Eric Berry) 2025-11-21 15:53:25.326 logging.py DEBUG - Ubuntu 24.04 5.3.3.4.4 Ensure pam_unix includes use_authtok (Eric Berry) 2025-11-21 15:53:25.326 logging.py DEBUG - Ubuntu 24.04 5.3.3.4.4 Ensure pam_unix includes use_authtok (Eric Berry) 2025-11-21 15:53:25.326 logging.py DEBUG - Excluded the requirement for the almalinux gpgkey from the RHEL 10 profile (Simon John) 2025-11-21 15:53:25.326 logging.py DEBUG - Fixed truthiness in hipaa profile (Simon John) 2025-11-21 15:53:25.326 logging.py DEBUG - Removed bullseye - was added for my own interest (Simon John) 2025-11-21 15:53:25.326 logging.py DEBUG - Added PCI-DSS 4.0.1 to almalinux9 product (Simon John) 2025-11-21 15:53:25.326 logging.py DEBUG - Added HIPAA profile for AlmaLinux 9 (Simon John) 2025-11-21 15:53:25.326 logging.py DEBUG - AlmaLinux OS 9 as a new product with just a CIS benchmark profile, flattened (Simon John) 2025-11-21 15:53:25.326 logging.py DEBUG - Replace original CCEs in test files (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - Cleanup test_profiles.py after changes (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - Review and clean example files (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - modify test_profiles.py to use mocked content dir (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - add test data mocking the content (Vojtech Polasek) 2025-11-21 15:53:25.326 logging.py DEBUG - Remove unnecessary print from development phase (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - Update enable_fips_mode for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.326 logging.py DEBUG - Workaround failing pip install pcre2 (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Bump NexusPHP/no-merge-commits (dependabot[bot]) 2025-11-21 15:53:25.326 logging.py DEBUG - Update Test Platforms for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - Allow to expand macros from external integrations (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - Create function to expand yaml using macros from a dir (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - Add warning for RHEL 10 in sssd_enable_smartcards (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - create public cloud hardening profile for SLE Micro5 (svet-se) 2025-11-21 15:53:25.326 logging.py DEBUG - Make it flexible to load project jinja2 macros (Marcus Burghardt) 2025-11-21 15:53:25.326 logging.py DEBUG - Fix the bash conditional for checking system architecture (Miha Purg) 2025-11-21 15:53:25.326 logging.py DEBUG - Mark /boot rules as not applicable in bootable containers (Jan Černý) 2025-11-21 15:53:25.326 logging.py DEBUG - Ensure mode for audit files is audit in ansible_audit_auditctl_add_syscall_rule (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - Add workflow to ensure no merge commits are included (Matthew Burket) 2025-11-21 15:53:25.326 logging.py DEBUG - Use pam-auth-update in tests (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add fail test for accounts_root_gid_zero (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - use xargs in correct_value.pass.sh (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add rule 5.4.2.2 Ensure root is the only GID 0 account (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Improve accounts_root_gid_zero test (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add oval check for no other user has primary group 0 (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix small typo in comment (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Revert "Make sure nullok is removed to avoid pam-auth keeping the original parameters" (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix architecture applicability (Miha Purg) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix typo in gpgkey (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Revert "Remove the additional Priority line" (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix nullok_present.fail.sh of no_empty_passwords (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Remove the additional Priority line (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Make sure nullok is removed to avoid pam-auth keeping the original parameters (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add package applicability of pam (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add no_empty_passwords rule to ubuntu2404 cis control 5.3.3.4.1 (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Align with benchmark value (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.1.2 Ensure password unlock time is configured (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add # packages = pam Add commented value fail and missing pam_faillock fail (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement accounts_passwords_pam_faillock_enabled (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Ubuntu 24.04 5.3.2.2 Ensure pam_faillock module is enabled (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add # packages = pam (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Avoid manual modification to common-password in tests (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Oval excludes character # (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Regex improvement in remediation (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Check the pam_unix.so in oval (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.4.2 Ensure pam_unix does not include remember (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add accounts_password_pam_unix_no_remember rule to ubuntu2404 cis control 5.3.3.4.2 (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Minor typo fix (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Remove RHEL-08-020220 and RHEL-08-020221 from the RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Bump docker/build-push-action from 6.10.0 to 6.11.0 (dependabot[bot]) 2025-11-21 15:53:25.327 logging.py DEBUG - Bump docker/setup-qemu-action from 3.2.0 to 3.3.0 (dependabot[bot]) 2025-11-21 15:53:25.327 logging.py DEBUG - Introduce generic function to get variables properties (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Create a cache for variables yaml (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix compatibility issue with types (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Include product title in profiles objects (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Break the _process_controls to improve readability (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Minor updates in alignment to project style guide (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Bump softprops/action-gh-release from 2.2.0 to 2.2.1 (dependabot[bot]) 2025-11-21 15:53:25.327 logging.py DEBUG - Since OpenSCAP 1.4.1 was been released bump the Windows version (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Mandate the pyopenssl version (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix TypeError since profiles have no selections (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Include unit tests for new external function (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Skip the confirmation (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Allow more efficient to process variables (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Include function to allow sorted selections (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix criteria to process controls rules (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix the ctest of python-unit-utils/oscal by bumping the compliance-trestle version in requirement (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Introduce functions to process profiles selections (Marcus Burghardt) 2025-11-21 15:53:25.327 logging.py DEBUG - Change comments (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Update file_permissions_unauthorized_world_writable (Matus Marhefka) 2025-11-21 15:53:25.327 logging.py DEBUG - Use nss-altfiles in file_groupowner_etc_chrony_keys (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Adjust ansible_audit_augenrules_add_syscall_rule to 600 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Update accounts_password_pam_retry for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix bash remedation for set_password_hashing_algorithm_systemauth (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - RHEL 10 STIG should use yescrypt (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - RHEL 10 ISM O control should use yescrypt (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Update set_password_hashing_algorithm_systemauth for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Update set_password_hashing_algorithm_passwordauth for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Rename oscap-bootc to oscap-im (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Adjusted rules for BSI APP.4.4.A19 according to review (Benjamin Ruland) 2025-11-21 15:53:25.327 logging.py DEBUG - Adjusted rules for BSI APP.4.4.A19 according to review (Benjamin Ruland) 2025-11-21 15:53:25.327 logging.py DEBUG - Apply suggestions from code review for BSI APP.4.4.A19 (Benjamin R) 2025-11-21 15:53:25.327 logging.py DEBUG - Removed auto-associated BSI references in newly created rules (Benjamin Ruland) 2025-11-21 15:53:25.327 logging.py DEBUG - Defined notes and created new rules for BSI APP.4.4.A19 (Benjamin Ruland) 2025-11-21 15:53:25.327 logging.py DEBUG - Red Hat Konflux update compliance-operator-content Signed-off-by: red-hat-konflux (red-hat-konflux) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix more (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix the _rule_id and var access in template.py (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.1.1 Ensure password failed attempts lockout is configured (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add Containerfile for building OCP content in Konflux (Lance Bragstad) 2025-11-21 15:53:25.327 logging.py DEBUG - Adjust 4.13 pci-dss-node assertion (Watson Sato) 2025-11-21 15:53:25.327 logging.py DEBUG - Add missing OSPP references (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Enable OSPP profile in RHEL 10 (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Refactor: extract function (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - fix reg error in 10-bash.jinjia (xcfxr) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.4.3 Ensure pam_unix includes a strong password hashing algorithm (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.2.8 Ensure password quality is enforced for the root user (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix ensure_redhat_gpgkey_installed on RHEL 10 (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix missing return value in a function (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Change the default value of environment (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Change condition (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Split function (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Introduce 'environment' header key to SCE checks (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 (dependabot[bot]) 2025-11-21 15:53:25.327 logging.py DEBUG - Improve audit_rules_privileged_commands (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Fix grub2-tools setup & dependencies in grub2 template tests (teacup-on-rockingchair) 2025-11-21 15:53:25.327 logging.py DEBUG - Update test product stability for ol9 (Armando Acosta) 2025-11-21 15:53:25.327 logging.py DEBUG - Add ccn profile (Armando Acosta) 2025-11-21 15:53:25.327 logging.py DEBUG - Update set_password_hashing_algorithm_passwordauth for RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Ensure audit rules.d are set 0600 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Remove service_chronyd_or_ntpd_enabled from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - SSH host keys don't exist at bootable container build time (Matus Marhefka) 2025-11-21 15:53:25.327 logging.py DEBUG - Adjust journald rules for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Add 5 to var_password_pam_unix_rounds (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Move the 5.3.3.2.4 into right place (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.2.3 Ensure password complexity is configured (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Align the test of accounts_password_pam_enforcing with upstream (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add enforcing variable (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement 5.3.3.2.7 Ensure password quality checking is enforced (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.2.6 Ensure password dictionary check is enabled (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.2.1 Ensure password number of changed characters is configured (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Prevent false negative results (Jan Černý) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.2.2 Ensure minimum password length is configured (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Implement rule 5.3.3.2.4 Ensure password same consecutive characters is configured (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Rename title (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Use yescript in RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Update RHEL 10 keys (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Adjust line breaks in file_permissions_audit_binaries (Matthew Burket) 2025-11-21 15:53:25.327 logging.py DEBUG - Make sure to enable pwquality module on Ubuntu when do ansible remediation (Alan Moore) 2025-11-21 15:53:25.327 logging.py DEBUG - Add macro ansible_check_pam_auth_update_presence (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add macro ansible_pam_pwquality_enable (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add macro ansible_apply_pam_auth_update_changes (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Update linux_os/guide/system/software/system-tools/package_gssproxy_removed/rule.yml (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Adjust to regex for building scap delta tailoring files (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Rename oval into Ubuntu specific Remove debain check (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Fix mistake done in PR #12714 (Eduardo Barretto) 2025-11-21 15:53:25.328 logging.py DEBUG - fix two reproducible build issues (Marcus Meissner) 2025-11-21 15:53:25.328 logging.py DEBUG - fixed spo-install.yaml (Rutvik) 2025-11-21 15:53:25.328 logging.py DEBUG - Adjust wording in kerberos_disable_no_keytab (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - New rule package_pcsc-lite-ccid_installed (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Remove force_opensc_card_drivers from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Adjust permissions on file_permissions_var_log_messages to 0600 (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Adjust file_permissions_etc_audit_rulesd to 0600 (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Exclude autrace and audispd on RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Add format (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add platform[pam] (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 5.3.2.1 Ensure pam_unix module is enabled (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 1.3.1.1 Ensure AppArmor is installed (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 2.4.2.1 Ensure at is retricted to authorized users (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 3.1.3 Ensure bluetooth services are not in use (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Correct the config_file name (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Use template parameter (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement bash_pam_pwhistory_enable macro (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rule to ubuntu2404 cis control 5.3.2.3 (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule accounts_password_pam_pwquality_enabled (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Apply bash_pam_pwquality_enable before parameter remediation for template accounts_password (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule 5.3.3.2.5 Ensure password maximum sequential characters is configured (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add systemd as requirement for aide_periodic_checking_systemd_timer (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Rename title (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rule to ubuntu2404 cis control 5.3.2.4 (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule 5.3.2.4 Ensure pam_pwhistory module is enabled (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rules to ubuntu2404 CIS control 6.3.2 (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Add ubuntu specific check and remediation for aide_periodic_checking_systemd_timer (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Bump docker/setup-buildx-action from 3.7.1 to 3.8.0 (dependabot[bot]) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 5.1.15 Ensure sshd MACs are configured (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 1.3.1.1 Ensure AppArmor is installed (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 5.1.12 Ensure sshd KexAlgorithms is configured (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Fix to prevent oscap crashing on ubuntu (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Add replace flag (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Update package_gssproxy_removed based on feedback (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Fix para position (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Delete unix configuration after the common-password updated by pam-auth-update to avoid the not applicable case of bash_pam_unix_enable macro (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Use $() substitution instead of `` (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Check the existance and md5sum of unix configuration (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Stick to default configuration shipped by Ubuntu Avoid removing nullok (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Only change password* section of configuration (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Use {{{ pam_file }}} as file path (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add word boundary for hash algorithm (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Fix more test (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Make oval of set_password_hashing_algorithm_systemauth to also exclude the comment out hash (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Use pam-auth-update to fix the set_password_hashing_algorithm_systemauth tests (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Use pam-auth-update to fix the accounts_password_pam_unix_remember test (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Use bash variable instead of jinja variable (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - correct the pam-auth-update conf path (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Use pam-auth-update to remediate the pam_unix related rules (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Create bash_pam_unix_enable macro (Alan Moore) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rules to ubuntu2404 CIS control 5.4.2.3 (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule groups_no_zero_gid_except_root (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rules to ubuntu2404 CIS control 6.2.3.8 (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule audit_rules_usergroup_modification_pamd (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule audit_rules_usergroup_modification_pam_conf (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule audit_rules_usergroup_modification_nsswitch_conf (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rules to ubuntu2404 CIS control 6.2.3.5 (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Refactor ubuntu oval for audit_rules_networkconfig_modification (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Create auxiliary function to setup test files (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rules to ubuntu2404 CIS control 5.4.2.6 (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule accounts_umask_root (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 5.1.9 Ensure sshd GSSAPIAuthentication is disabled (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 5.1.8 Ensure sshd DisableForwarding is enabled (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 2.4.2.1 Ensure at is retricted to authorized users (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Fix compatibility issues with older python versions (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Update Python unit tests after removing function (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Unify functions to collect variable options (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Simplify function by changing default (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Rename id to profile_id to avoid conflicts (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Include unit tests for exposed functions in variables.py (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Minor updates related to style guide (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Minor update to make paths easier to be read (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Extend ssg with functions to manage variables (Marcus Burghardt) 2025-11-21 15:53:25.328 logging.py DEBUG - Adjust system_booted_in_fips_mode prose based on new OVAL check (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Add rules to ubuntu2404 CIS control 7.2.10 (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Fix tests for file_permission_user_init_files (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Implement rule file_permission_user_bash_history (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Remove unused parameter missing_file_pass from rules and docs (Miha Purg) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 5.1.8 Ensure sshd DisableForwarding is enabled (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 2.4.2.1 Ensure at is restricted to authorized users (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 2.4.2.1 Ensure at is restricted to authorized users (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Remove Old Kernel Config options from RHEL 10 ANSSI (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Remove old kernel modules from RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Remove grub2_kernel_trust_cpu_rng from kernel component (Matthew Burket) 2025-11-21 15:53:25.328 logging.py DEBUG - Update rule.yml (ericeberry) 2025-11-21 15:53:25.328 logging.py DEBUG - Ubuntu 24.04 2.4.2.1 Ensure at is restricted to authorized users (Eric Berry) 2025-11-21 15:53:25.328 logging.py DEBUG - Add kernel-uek for OL in system_with_kernel CPE (Edgar Aguilar) 2025-11-21 15:53:25.328 logging.py DEBUG - Replace machine with more relevant system_with_kernel platform (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Simplify template removing obsolete oval < 5.11 version support (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Update shared/templates/package_installed_guard_var/ansible.template (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Update shared/templates/service_enabled_guard_var/ansible.template (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Update shared/templates/package_removed_guard_var/ansible.template (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Invert the logic for variable dependency for service disabled rules (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Package removed template guarded is with inverted logic (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Fix bash template to produce shellcheck compliant code (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Installing firewalld package on SLE only if active firewall technology is set to be firewalld (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Enable firewalld service on SLE only if active firewall technology is set to be firewalld (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Removing package on SLE makes sense only if active firewall technology is set to be nftables or iptables (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Disable firewalld service on SLE only if active firewall technology is set to be nftables or iptables (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Enable iptables service on SLE only if active firewall technology is set to be iptables (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Installing iptables package on SLE only if active firewall technology is set to be iptables (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Removing nftable package on SLE makes sense only if active firewall technology is set to be firewalld or iptables (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Disable nftable service on SLE only if active firewall technology is set to be firewalld or iptables (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Enable nftable service on SLE only if active firewall technology is set to be nftables (teacup-on-rockingchair) 2025-11-21 15:53:25.328 logging.py DEBUG - Templates for pkg installed/removed and svc enabled/disabled, guarded by ext varaiable (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Set relevant values for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Add variable to set default firewall technology used (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Add oval macro to check external variable vs expected value (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Improve regular expression (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Allow the OCP trigger test profiles to comment PRs (Watson Sato) 2025-11-21 15:53:25.329 logging.py DEBUG - Update rule description (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Improve regular expressions (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Optimize platform expressions in bootloader-grub2 group (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Create a product property for bootable containers (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Improve grub2_bootloader_argument for IM (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Bump softprops/action-gh-release from 2.1.0 to 2.2.0 (dependabot[bot]) 2025-11-21 15:53:25.329 logging.py DEBUG - Bump actions/setup-go from 5.1.0 to 5.2.0 (dependabot[bot]) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 5.4.2.4 Ensure root account access is controlled (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix platforms used in pam_account_password_faillock ansible remediation (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Remove is_fips_mode_enabled from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Updated system_booted_in_fips_mode based on reviewer feedback (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Change platform in Mail Server Software group (Matus Marhefka) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix broken test in pam_account_password_faillock (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix tests for template pam_account_password_faillock (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix lower bound variable in accounts_passwords_pam_faillock_deny (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Improve template pam_account_password_faillock (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 2.2.6 Ensure ftp client is not installed (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 2.1.1 Ensure autofs services are not in use (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 1.3.1.1 Ensure AppArmor is installed (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 1.1.2.2.1 Ensure /dev/shm is a separate partition (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - New rule package_unbound_removed (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.3 Ensure systemd-journal-upload is enabled (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Remove prefer_64bit_os from RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Remove no_rsh_trust_files from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 5.4.2.4 Ensure root account access is controlled (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Add RHEL 10 CCI to grub2_enable_fips_mode (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix FIPS verison in system_boot_in_fips_mode description (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Override pkgname for ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add rules to several ubuntu2404 CIS controls (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add rules to several ubuntu2404 CIS controls (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add rules to ubuntu2404 CIS control 7.1.10 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Implement rules for /etc/security/opasswd permissions (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix issue created on rebase (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Enable slmicro5 platform for CIS profile (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Add changes to support CIS for slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Add CIS profile scaffold support for SL Micro5 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 1.1.1.6 Ensure overlayfs kernel module is not available (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 1.1.1.3 Ensure hfs kernel module is not available (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 1.1.1.5 Ensure jffs2 kernel module is not available (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 1.1.1.4 Ensure hfsplus kernel module is not available (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 1.1.1.2 Ensure freevxfs kernel module is not available (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.3 Ensure systemd-journal-upload is enabled (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - remove the rule also from srg_gpos control files (Vojtech Polasek) 2025-11-21 15:53:25.329 logging.py DEBUG - Fixing rule checks for CMP-3034 (Rutvik) 2025-11-21 15:53:25.329 logging.py DEBUG - Enable bash remediation template for slmicro platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.329 logging.py DEBUG - Ubuntu 24.04 6.1.2.1.3 Ensure systemd-journal-upload is enabled (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Add stig default tailoring to OL8 (Edgar Aguilar) 2025-11-21 15:53:25.329 logging.py DEBUG - Update delta tailoring script (Edgar Aguilar) 2025-11-21 15:53:25.329 logging.py DEBUG - Remove duplicated configuration (Alan Moore) 2025-11-21 15:53:25.329 logging.py DEBUG - Only delete the default pwquality config file (Alan Moore) 2025-11-21 15:53:25.329 logging.py DEBUG - ensure_logrotate_activated: Check timers.target.wants as well (Watson Sato) 2025-11-21 15:53:25.329 logging.py DEBUG - Add 'required' check in oval Add correct os into applicable platform Update the ubuntu oval to pass on both required and requisite Remove the check for authsucc since preauth can clear the count too Implement individual tests for pam_faillock_{deny, unlock_time, interval} (Alan Moore) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix sshd_set_maxstartups tests (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add python3-apt to ubuntu2404 dockerfile to enable ansible remediations (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - fix: usr: restore petalinux detection, remove offending embedded quotes (Stephen L Arnold) 2025-11-21 15:53:25.329 logging.py DEBUG - audit_immutable_login_uids: remove stig-specific content (Vojtech Polasek) 2025-11-21 15:53:25.329 logging.py DEBUG - Add grub2_enable_fips_mode to RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Add new rule system_boot_in_fips_mode (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Add rule to ubuntu2404 CIS control 6.1.2.2 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add new rule journald_disable_forward_to_syslog (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Improve regex in sudo_defaults_option oval (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add a CCI number (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix audit access rules in ISM_O (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Update profile stability test (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix missing SRG (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix CentOS Stream 10 applicability check (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Extend tests for sshd_set_maxstartups (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add rules to ubuntu2404 CIS control 5.1.18 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Extend tests for sshd_set_max_auth_tries (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add rules and vars to ubuntu2404 CIS control 5.1.16 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add rules for ubuntu2404 control 4.4.3.4 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add tests for ip6tables_rules_for_open_ports (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix sce for ip6tables_rules_for_open_ports (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.7.1 to 4.7.2 (dependabot[bot]) 2025-11-21 15:53:25.329 logging.py DEBUG - Adding oval changes (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Testing additional tests (Eric Berry) 2025-11-21 15:53:25.329 logging.py DEBUG - Change applicability of RPM verification rules (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - Improve rule file_permssions_crontab (Jan Černý) 2025-11-21 15:53:25.329 logging.py DEBUG - As suggested all scc rules added (lichtblaugue) 2025-11-21 15:53:25.329 logging.py DEBUG - Remove OL7 from CI (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Add ubuntu2404 to GitHub Actions (Matthew Burket) 2025-11-21 15:53:25.329 logging.py DEBUG - Adjust 4.12 pci-dss-node assertion (Watson Sato) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix set_ipv6_loopback_traffic SCE for ubuntu2404 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - add missing new lines (Vojtech Polasek) 2025-11-21 15:53:25.329 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2025-11-21 15:53:25.329 logging.py DEBUG - Update ubuntu2404 CIS control 4.4.3.2 (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Add tests to rule set_ipv6_loopback_traffic (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - Fix set_ip6tables_default_rule for ubuntu (Miha Purg) 2025-11-21 15:53:25.329 logging.py DEBUG - document possibility of installing ssg module with pip (Vojtech Polasek) 2025-11-21 15:53:25.329 logging.py DEBUG - Update tests of accounts_password_pam_retry (Alan Moore) 2025-11-21 15:53:25.329 logging.py DEBUG - Use the new macro to update the accounts_password_pam_retry remediation (Alan Moore) 2025-11-21 15:53:25.329 logging.py DEBUG - Create bash_pam_pwquality_parameter_value macro (Alan Moore) 2025-11-21 15:53:25.330 logging.py DEBUG - Create bash_pam_pwquality_enable macro (Alan Moore) 2025-11-21 15:53:25.330 logging.py DEBUG - Ubuntu: enable pam_faillock.so via pam-auth-update (Alan Moore) 2025-11-21 15:53:25.330 logging.py DEBUG - Pip point the data stream for automatus ubuntu2404 (Alan Moore) 2025-11-21 15:53:25.330 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.9 to 4.7.1 (dependabot[bot]) 2025-11-21 15:53:25.330 logging.py DEBUG - Add rsyslog package applicability to ensure_rsyslog_log_file_configuration group (Matus Marhefka) 2025-11-21 15:53:25.330 logging.py DEBUG - Add rsyslog to templated package applicability platforms (Matus Marhefka) 2025-11-21 15:53:25.330 logging.py DEBUG - Revert "Remove Ubuntu oval and remediation for nftables_rules_permanent" (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update 5.4.1.4 set_password_hashing_algorithm_logindefs for Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ensure_logrotate_activated for image mode (Jan Černý) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 4.3.8 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Remove Ubuntu oval and remediation for nftables_rules_permanent (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.330 logging.py DEBUG - Introduce a condition on /etc/nsswitch.conf (Jan Černý) 2025-11-21 15:53:25.330 logging.py DEBUG - Improve error message (Jan Černý) 2025-11-21 15:53:25.330 logging.py DEBUG - Bump docker/build-push-action from 6.9.0 to 6.10.0 (dependabot[bot]) 2025-11-21 15:53:25.330 logging.py DEBUG - Ubuntu 24.04 5.4.1.5 account_disable_post_pw_expiration 45 days (Eric Berry) 2025-11-21 15:53:25.330 logging.py DEBUG - Update 5.4.1.4 set_password_hashing_algorithm_logindefs for Ubuntu 24.04 (Eric Berry) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix tests for chronyd_configure_pool_and_server (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 control 2.3.3.1 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add ubuntu ntp servers (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - initial version using setuptools and custom git_describe_command (Vojtech Polasek) 2025-11-21 15:53:25.330 logging.py DEBUG - Add ubuntu2404 to gate workflow (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add automatus workflow for ubuntu2404 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix tests for service_timesyncd_configured (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.3.2.1 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add ubuntu ntp servers (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add OCP/RHCOS assertion files for 4.18 (Lance Bragstad) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.3 and fix var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add new rule service_dhcpd6_disabled (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add service_dnsmasq_disabled to bind component (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update firewalld_loopback_traffic_trusted for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.330 logging.py DEBUG - Update firewalld_loopback_traffic_restricted for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.330 logging.py DEBUG - Adjust OVAL for directory_permissions_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.330 logging.py DEBUG - Add Ubuntu Maintainers as CODEOWNERS for 24.04 CIS (Matthew Burket) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix ubuntu test variables in dconf rule (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Minor updates after review (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ssg/build_yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.9 and add var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.8 and add var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.7 and add var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.6 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.4 and add var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.20 and add var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.19 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.17 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.16 and add var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.15 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.14 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.13 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.12 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.11 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.10 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.2 and add var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.18 and fix var overrides (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add new rule service_nginx_disabled (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update ubuntu2404 CIS control 2.1.5 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add new rule service_dnsmasq_disabled (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Bump docker/metadata-action from 5.5.1 to 5.6.1 (dependabot[bot]) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix typo in profile name (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix ubuntu tests (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix dconf rules for Ubuntu 24.04 CIS (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Remove rule disable_ctrlaltdel_burstaction from Ubuntu STIG profiles (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Switch to CIS-specific banner rules for Ubuntu 24.04 CIS (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Add rule sysctl_kernel_yama_ptrace_scope to Ubuntu 24.04 CIS (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Fix hardcoded value for testing oval references (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Update oval_feed_url for Ubuntu (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Added dockerfile for Ubuntu 24.04 (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Remove methods information from classes docstrings (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Remove methods information from classes docstrings (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Remove docstrings in some __init__ functions (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Added draft version of Ubuntu 24.04 CIS profiles (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Added Ubuntu 24.04 product (Miha Purg) 2025-11-21 15:53:25.330 logging.py DEBUG - Include Docstrings for missing function (Marcus Burghardt) 2025-11-21 15:53:25.330 logging.py DEBUG - Add ubuntu2404 product to conditional statements (Miha Purg) 2025-11-21 15:53:25.350 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Include docstrings for ssg/build_yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix only_zones_configured test (Matus Marhefka) 2025-11-21 15:53:25.350 logging.py DEBUG - Update firewalld_sshd_port_enabled for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix file_permissions_unauthorized_suid (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and create docstrings for ssg/yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and create docstrings for ssg/xml.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix display_login_attempts (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and create docstrings for ssg/xccdf.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review comments and create docstrings for ssg/utils.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and create docstrings for ssg/templates.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review docstrings for ssg/shims.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and update docstrings for ssg/rules.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and update docstrings for ssg/rule_yaml.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and update docstrings for ssg/rule_dir_stats.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Create docstrings for ssg/requirement_specs.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Create docstrings for ssg/products.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix sssd_enable_smartcards (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Create docstrings for ssg/parse_oval.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and update docstrings for ssg/oval.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and create docstrings for ssg/jinja.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix file_permissions_unauthorized_sgid (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Review comments and create docstrings for ssg/id_translate.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review comments and create docstrings for ssg/fixes.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Create docstrings for ssg/environment.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Create docstrings for ssg/controls.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Create docstrings for ssg/contributors.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Include docstrings for ssg/components.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.9 to 2.1.0 (dependabot[bot]) 2025-11-21 15:53:25.350 logging.py DEBUG - Adjust remediated result as well (Watson Sato) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix RHEL 9 Version (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Adjust resource-requests-quota 4.17 assertion (Watson Sato) 2025-11-21 15:53:25.350 logging.py DEBUG - Adjust rule assertions after group platform change (Watson Sato) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix SC2156 (warning) from shellcheck (Alan Moore) 2025-11-21 15:53:25.350 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.8 to 4.6.9 (dependabot[bot]) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix RH references for OL (Armando Acosta) 2025-11-21 15:53:25.350 logging.py DEBUG - Review docstrings for ssg/checks.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Remove the aa-teardown tests (Alan Moore) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix apparmor tests (Miha Purg) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix apparmor_complain rule to not load disabled profiles (Miha Purg) 2025-11-21 15:53:25.350 logging.py DEBUG - Remove sle too (Alan Moore) 2025-11-21 15:53:25.350 logging.py DEBUG - Add package[apparmor] back (wqian) 2025-11-21 15:53:25.350 logging.py DEBUG - Remove platform: Ubuntu (wqian) 2025-11-21 15:53:25.350 logging.py DEBUG - Change platform into machine to avoid container test (wqian) 2025-11-21 15:53:25.350 logging.py DEBUG - Remove unnecessary platforms (wqian) 2025-11-21 15:53:25.350 logging.py DEBUG - Add platform and packages (wqian) 2025-11-21 15:53:25.350 logging.py DEBUG - Load all the profile if not loaded for Ubuntu without change the mode of loaded profiles (wqian) 2025-11-21 15:53:25.350 logging.py DEBUG - Review and create docstrings for ssg/cce.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Review docstrings for ssg/boolean_expression.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - Include docstrings for ssg/ansible.py (Marcus Burghardt) 2025-11-21 15:53:25.350 logging.py DEBUG - remove sshd_use_priv_separation from hipaa control file (Vojtech Polasek) 2025-11-21 15:53:25.350 logging.py DEBUG - Recover default profiles in OL8 & 9 (Edgar Aguilar) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix Ansible check one Automatus Sanity (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Adjust test for incorrect_owner.fail.sh in file_owner template (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Remove package_quagga_removed no longer in RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - fix accounts_users_home_files_permissions to handle symlinks properly (Alexandre Skrzyniarz) 2025-11-21 15:53:25.350 logging.py DEBUG - update audit_ospp_general_ppc64le with the latest content from upstream (Vojtech Polasek) 2025-11-21 15:53:25.350 logging.py DEBUG - update audit_ospp_general_aarch64 with the latest content from upstream (Vojtech Polasek) 2025-11-21 15:53:25.350 logging.py DEBUG - update audit_ospp_general rule audit content to match latest content (Vojtech Polasek) 2025-11-21 15:53:25.350 logging.py DEBUG - Change platform in dnf-automatic rules (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - fix accounts_users_home_files_ownership bash remediation to handle symlinks properly (Alexandre Skrzyniarz) 2025-11-21 15:53:25.350 logging.py DEBUG - fix accounts_users_home_files_groupownership bash remediation to handle symlinks properly (Alexandre Skrzyniarz) 2025-11-21 15:53:25.350 logging.py DEBUG - Update rule description (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - fix system_with_kernel applicability for debian derived operating systems (Alexandre Skrzyniarz) 2025-11-21 15:53:25.350 logging.py DEBUG - Update chronyd rules for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.350 logging.py DEBUG - Add new test scenarios (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Add support for /usr/lib/group (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Exclude the /sysroot directory (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix comparing timezone and non-timezone timestamps (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Adding suggested changes to SYS.1.6.A15 (lichtblaugue) 2025-11-21 15:53:25.350 logging.py DEBUG - Check for multiple occurrences (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Add support for multiple values in sysctlval parameter (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Refactor to prevent code duplication (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Simplify flags (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Simplify template (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Adapt sysctl template for bootable containers (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Update tasks names & fix conditional (Armando Acosta) 2025-11-21 15:53:25.350 logging.py DEBUG - Bump to 0.1.76 (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Update file_permissions_etc_chrony_keys to 640 (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Update contributors for 0.1.75 (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Update rsyslog_cron_logging for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.350 logging.py DEBUG - Update networkmanager_dns_mode for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.350 logging.py DEBUG - Add rules removed from RHEL8 profiles back to datastream (Milan Lysonek) 2025-11-21 15:53:25.350 logging.py DEBUG - Add rules removed from RHEL8 profiles back to datastream (Milan Lysonek) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix test_ds_sce.py (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Move data stream component references (Jan Černý) 2025-11-21 15:53:25.350 logging.py DEBUG - Update RHEL 8 STIG due to rule removal (Matthew Burket) 2025-11-21 15:53:25.350 logging.py DEBUG - Update sshd_include_crypto_policy ansible comments (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Remove rules no longer in the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update sshd_include_crypto_policy and sshd_include_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Adjust RHEL 9 STIG for RHEL-09-255055 (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add new rule sshd_include_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Adjust time to 10 minutes for RHEL-09-412035 (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add new rule file_sshd_50_redhat_exists (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Adjust RHEL-09-255055 rule selection to better follow the STIG (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update RHEL 9 STIG SCAP Content (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add platform for postfix_server_relay (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update RHEL 9 STIG Manual File (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_defined/ansible/shared.yml (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Skip dynamic uids in account accounts_user_interactive_home_directory_defined (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add dynamic_uid_min and dynamic_uid_max to product properties (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Move platform to group.yml (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Move platform to group.yml (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix tests (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Update test_xccdf_values_in_ds.sh to account for Bash variables (Matus Marhefka) 2025-11-21 15:53:25.351 logging.py DEBUG - Update SLES-15-030680 check and fix (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Adjust tmout to 10 minutes for SLES-15-010130 (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Update SLE15 DISA STIG manual to V2R2 (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Update SLE15 STIG to V2R2 (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix ShellCheck problem (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Change platform for rules related to partitions (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Change platform in xwindows_runlevel_target (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Bump thollander/actions-comment-pull-request from 3.0.0 to 3.0.1 (dependabot[bot]) 2025-11-21 15:53:25.351 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.0.0.pre.rc02 to 5 (dependabot[bot]) 2025-11-21 15:53:25.351 logging.py DEBUG - Update sebool template for bootable containers (Matus Marhefka) 2025-11-21 15:53:25.351 logging.py DEBUG - Update Fedora in install_vm to F41 (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.8 to 2.0.9 (dependabot[bot]) 2025-11-21 15:53:25.351 logging.py DEBUG - Add python3-setuptools to install guide in docs (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add setuptools to Automatus sanity (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add setuptools to ocp4 build (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add setuptools python package to Fedora (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Remove not applicable rules for OL9 (Edgar Aguilar) 2025-11-21 15:53:25.351 logging.py DEBUG - Remove not applicable rules for OL8 (Edgar Aguilar) 2025-11-21 15:53:25.351 logging.py DEBUG - BSI SYS.1.6.A21 - Changed to manual (Benjamin Ruland) 2025-11-21 15:53:25.351 logging.py DEBUG - Defined notes for BSI SYS.1.6.A22 and A23 (Benjamin Ruland) 2025-11-21 15:53:25.351 logging.py DEBUG - Adjusted rules for BSI APP.4.4.A18 according to review (Benjamin Ruland) 2025-11-21 15:53:25.351 logging.py DEBUG - Add manual rule for appropriate network policies (Benjamin Ruland) 2025-11-21 15:53:25.351 logging.py DEBUG - Defined notes and rules for BSI APP.4.4.A18 (Benjamin Ruland) 2025-11-21 15:53:25.351 logging.py DEBUG - Improve Benchmark detection in Automatus (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Directly source test config for testable profiles (Watson Sato) 2025-11-21 15:53:25.351 logging.py DEBUG - Just test on latest OCP for now (Watson Sato) 2025-11-21 15:53:25.351 logging.py DEBUG - Update RHEL 8 versions in test stability (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update STIG version for RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update RHEL 8 SCAP XCCDF file for V2R1 (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update RHEL 8 STIG to V2R1 (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update audit_rules_suid_privilege_function to use ExecStart instead of ExecStartPost. (Gabriel Becker) 2025-11-21 15:53:25.351 logging.py DEBUG - Adjust timeout for RHEL-08-020035 (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add `and not runtime_kernel_fips_enabled` to package_rng-tools_installed (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update XCCDF Manual for RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Filter out profiles that are not tested by Prow (Watson Sato) 2025-11-21 15:53:25.351 logging.py DEBUG - Remediate AIDE check in SLE via settings in crontab file (teacup-on-rockingchair) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix bug with register ansible variable causing exception (teacup-on-rockingchair) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix maxpoll remediatian also for cases when maxpoll is negative (teacup-on-rockingchair) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix system_with_kernel.yml ending (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Update status of SLEM-05-653060 to manual (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Update status of SLEM-05-211015 to manual (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix check_id: system_with_kernel to support SLE (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Add rule accounts_tmout to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.351 logging.py DEBUG - Update docs to reflect correct usage of the product field (teacup-on-rockingchair) 2025-11-21 15:53:25.351 logging.py DEBUG - Add workflow to start Prow tests when relevant (Watson Sato) 2025-11-21 15:53:25.351 logging.py DEBUG - Add new test to cover multiple users (Armando Acosta) 2025-11-21 15:53:25.351 logging.py DEBUG - Add ansible remediation to mount_option_home template (Armando Acosta) 2025-11-21 15:53:25.351 logging.py DEBUG - Update OL7 STIG profile version (Edgar Aguilar) 2025-11-21 15:53:25.351 logging.py DEBUG - Update OL7 STIG xccdf manual (Edgar Aguilar) 2025-11-21 15:53:25.351 logging.py DEBUG - Align OL7 STIG with V3R1 from DISA (Edgar Aguilar) 2025-11-21 15:53:25.351 logging.py DEBUG - Update OL8 STIG profile version (Edgar Aguilar) 2025-11-21 15:53:25.351 logging.py DEBUG - Update OL8 STIG xccdf manual (Edgar Aguilar) 2025-11-21 15:53:25.351 logging.py DEBUG - Prefix bootc macro names with bash (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Bump actions/setup-python from 5.2.0 to 5.3.0 (dependabot[bot]) 2025-11-21 15:53:25.351 logging.py DEBUG - Bump actions/setup-go from 5.0.2 to 5.1.0 (dependabot[bot]) 2025-11-21 15:53:25.351 logging.py DEBUG - Explicitly state FindOpenSCAP cmake so it loads before it's used. (Gabriel Becker) 2025-11-21 15:53:25.351 logging.py DEBUG - add python3 package in test_suite-ubuntu2204 container (Alexandre Skrzyniarz) 2025-11-21 15:53:25.351 logging.py DEBUG - add python3-apt package in test_suite-debian12 container (Alexandre Skrzyniarz) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix "unknown predicate `-L'" (Alan Moore) 2025-11-21 15:53:25.351 logging.py DEBUG - Update shared/applicability/bootc.yml (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Set conflict between two rules. (Gabriel Becker) 2025-11-21 15:53:25.351 logging.py DEBUG - Remove sshd_enable_warning_banner_net from HIPAA control file. (Gabriel Becker) 2025-11-21 15:53:25.351 logging.py DEBUG - Fix file path inconsistencies in accounts_umask_etc_bashrc (Alexandre Skrzyniarz) 2025-11-21 15:53:25.351 logging.py DEBUG - remove no longer used macro (Vojtech Polasek) 2025-11-21 15:53:25.351 logging.py DEBUG - switch to sshd_oval_check macro (Vojtech Polasek) 2025-11-21 15:53:25.351 logging.py DEBUG - Update require_singleuser_auth OVAL checks (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Change meeting IDs to prevent ID collisions (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Prevent matching other immutable platforms (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Introduce new CPE platform for bootable containers (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Add special conditions for bootable containers (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Build SCE on RHEL (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Unify location of the SCE option (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Build SCE by default for RHEL 9 and 10 (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - rules for allowed_registries added (lichtblaugue) 2025-11-21 15:53:25.351 logging.py DEBUG - Update require_emergency_target_auth and require_singleuser_auth (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Add tests for drop ins to require_singleuser_auth and require_emergency_target_auth (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update require_singleuser_auth for RHEL (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update require_emergency_target_auth for RHEL (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Update to file_permissions_etc_chrony_keys (Matthew Burket) 2025-11-21 15:53:25.351 logging.py DEBUG - Remove unnecessary apparmor-utils pkg (Alan Moore) 2025-11-21 15:53:25.351 logging.py DEBUG - Stop SCAP content validation if not necessary (Jan Černý) 2025-11-21 15:53:25.351 logging.py DEBUG - Mark in the control the remediation should be run manual for this one as it depends on specific external variables (teacup-on-rockingchair) 2025-11-21 15:53:25.351 logging.py DEBUG - Update shared/templates/service_enabled/bash.template (teacup-on-rockingchair) 2025-11-21 15:53:25.351 logging.py DEBUG - Update linux_os/guide/system/logging/journald/systemd_journal_upload_server_tls/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.351 logging.py DEBUG - Update linux_os/guide/system/logging/journald/systemd_journal_upload_url/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Update linux_os/guide/system/logging/journald/service_systemd-journal-upload_enabled/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Update linux_os/guide/system/logging/journald/service_systemd-journal-upload_enabled/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Assign rules to relevant components (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Add journal remote upload rules and drop trailing whitespaces (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Assign CCE ids for journal rules in slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Add rules to support remote offload of journal logs (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Add service enable bash remediation support for slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.352 logging.py DEBUG - Move the additional packages into Dockerfile (wqian) 2025-11-21 15:53:25.352 logging.py DEBUG - Update remedation for firewalld_sshd_port_enabled (Matthew Burket) 2025-11-21 15:53:25.352 logging.py DEBUG - Update OSCAL content in shared/references/oscal (Mab879) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platforms of accounts group rules (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Remove shebang from bash remediations (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change CPE platform in rule package_rng-tools_installed (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change CPE platform in package_sudo_installed (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platforms in rules in endpoint_security_software group (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platforms in rules in restrictions group (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platforms of mounting permissions rules (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platforms of files permissions group rules (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platforms of network group rules (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Add SCE check to timer_enabled template (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Add SCE check to socket_disabled template (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix inventory_test_kernel_installed for SLE (svet-se) 2025-11-21 15:53:25.352 logging.py DEBUG - Disable sysctl_kernel_modules_disabled Ansible remediation. (Milan Lysonek) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix the check condition of container (wqian) 2025-11-21 15:53:25.352 logging.py DEBUG - MULTIARCH-4655: add support for DISA-STIG on Power (Paul Bastide) 2025-11-21 15:53:25.352 logging.py DEBUG - Adjust rule file for firewalld_sshd_port_enabled (Matthew Burket) 2025-11-21 15:53:25.352 logging.py DEBUG - Remove CPE platform from some SSSD rules (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platform of sssd-ldap rules (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Change platform of service enabled or disabled rules (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Rename package to dnf (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Initial setup for rule SYS.1.6.A16 (lichtblaugue) 2025-11-21 15:53:25.352 logging.py DEBUG - Adding manual rule configure_network_bandwidth (lichtblaugue) 2025-11-21 15:53:25.352 logging.py DEBUG - Add rule security_patches_up_to_date to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix PEP8 issues in tests/validate_automatus_metadata.py (Matthew Burket) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix invalid platforms in tests (Matthew Burket) 2025-11-21 15:53:25.352 logging.py DEBUG - Update tests/validate_automatus_metadata.py to check platforms (Matthew Burket) 2025-11-21 15:53:25.352 logging.py DEBUG - Add RHEL 10 to Jinja if statements in firewalld_sshd_port_enabled (Matthew Burket) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix thin data streams with SCE (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "aide" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "fips" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "mcafee_endpoint_security_software" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "selinux" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "network-uncommon" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "network_host_parameters" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "network_host_and_router_parameters" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "network-firewalld" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "logging" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Update Ubuntu STIG 20.04 version to V1R12 (Miha Purg) 2025-11-21 15:53:25.352 logging.py DEBUG - Remove duplicate rules in Ubuntu 20.04 STIG (Miha Purg) 2025-11-21 15:53:25.352 logging.py DEBUG - Align text in smartcard_pam_enabled with STIG 20.04 V1R12 (Miha Purg) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "kernel_build_config" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "accounts-physical" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Add rule chronyd_or_ntpd_set_maxpoll to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.352 logging.py DEBUG - Add rule chronyd_or_ntpd_specify_remote_server to components (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "usbguard" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "ssh" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "rng" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "inetd_and_xinetd" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "ntp" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "nfs_and_rpc" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "kerberos" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "fapolicyd" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "cron_and_at" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Add bootc templates for package templates (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Introduce new remediation type bootc (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Set "auditing" group platform to system_with_kernel (Jan Černý) 2025-11-21 15:53:25.352 logging.py DEBUG - Update reference for compliance-trestle (Marcus Burghardt) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix rule description typo (Watson Sato) 2025-11-21 15:53:25.352 logging.py DEBUG - Update URLs to point to loggin.openshift.io docs (Watson Sato) 2025-11-21 15:53:25.352 logging.py DEBUG - Update URL to point to latest CLO 6.0 docs (Watson Sato) 2025-11-21 15:53:25.352 logging.py DEBUG - Remove from e8 not applicable rules (Edgar Aguilar) 2025-11-21 15:53:25.352 logging.py DEBUG - Add ism profile to OL8 (Edgar Aguilar) 2025-11-21 15:53:25.352 logging.py DEBUG - Fix uses_tls filter for logging.openshift.io api (Watson Sato) 2025-11-21 15:53:25.352 logging.py DEBUG - fix removed sentence (sluetze) 2025-11-21 15:53:25.352 logging.py DEBUG - Update various rule assertion (Watson Sato) 2025-11-21 15:53:25.352 logging.py DEBUG - Ensure ocp_version variable has no wrapping quotes (Watson Sato) 2025-11-21 15:53:25.352 logging.py DEBUG - Update OSCAL content in shared/references/oscal (Mab879) 2025-11-21 15:53:25.352 logging.py DEBUG - Bump thollander/actions-comment-pull-request from 2.5.0 to 3.0.0 (dependabot[bot]) 2025-11-21 15:53:25.353 logging.py DEBUG - Add tests to accounts_users_home_files_*ownership (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - This rule can occasionally result inconsistent (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - Update test data (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - cluster_logging_operator_exists now handles two APIs (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - audit_log_forwarding_webhook now handles two APIs (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - audit_log_forwarding_uses_tls now handles two APIs (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - audit_log_forwarding_enabled now handles two APIs (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - Update channel from which CLO is intalled (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - Fix result after remediation for cni-conf permissions (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - Fix typo in assertion rule id (Watson Sato) 2025-11-21 15:53:25.353 logging.py DEBUG - Fix bug in bash_restrict_permissions_home_directories (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Update accounts_users_home_files_ownership Remedations (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Update accounts_users_home_files_groupownership Remedations (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Update restrict_permissions_home_directories macros (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Add RHEL platform to teestts in aide_verify_ext_attributes (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Add RHEL platform to teestts in aide_verify_acls (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Add newline at end of file (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Add a simple test for the SCEBuilder class (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Replace type() with isinstance() (teacup-on-rockingchair) 2025-11-21 15:53:25.353 logging.py DEBUG - add network separation rule to A14 (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Add oscal-update-* branch to required GitHub Actions (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Update Jinja for package_rsync_removed for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - First Version for BSI SYS.1.6.A15 (lichtblaugue) 2025-11-21 15:53:25.353 logging.py DEBUG - Rename option (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - add Control for section 2 (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - add testcase for egress ip (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - add rule to check for egress ip assignable nodes (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Extend `--remove-machine-only` Automatus option (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Change platform of no_empty_passwords (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Add the system_with_kernel CPE platform (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - [ubuntu] Set the default behaviour of AppArmor to enforce (wqian) 2025-11-21 15:53:25.353 logging.py DEBUG - Set proper package name for service_cron_enabled (Milan Lysonek) 2025-11-21 15:53:25.353 logging.py DEBUG - Move rpm verify rules to use --restore (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - add section numbering (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Fix cron service name for RHEL distros (Milan Lysonek) 2025-11-21 15:53:25.353 logging.py DEBUG - Bump docker/setup-buildx-action from 3.7.0 to 3.7.1 (dependabot[bot]) 2025-11-21 15:53:25.353 logging.py DEBUG - Move package_rear_installed to related rules in e8 (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove package_dhcp_removed from all RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Create CIS rules for login banners (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Defined notes for BSI SYS.1.6.A24 and A25 (Benjamin Ruland) 2025-11-21 15:53:25.353 logging.py DEBUG - Defined notes for BSI SYS.1.6.A10,11 and APP.4.4.A12 (Benjamin Ruland) 2025-11-21 15:53:25.353 logging.py DEBUG - Rename cron package to cronie for RHEL10 product (Milan Lysonek) 2025-11-21 15:53:25.353 logging.py DEBUG - Refined controls for BSI APP.4.4.A17 according to review (Benjamin Ruland) 2025-11-21 15:53:25.353 logging.py DEBUG - Added note changes from review for BSI APP.4.4.A17 (Benjamin Ruland) 2025-11-21 15:53:25.353 logging.py DEBUG - Defined notes and rules for BSI APP.4.4.A17 (Benjamin Ruland) 2025-11-21 15:53:25.353 logging.py DEBUG - Bump docker/setup-buildx-action from 3.6.1 to 3.7.0 (dependabot[bot]) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove enable_dracut_fips_module from RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Update e8 crypto policy to default_policy (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - In RHEL 10 CIS move to default_policy for crypto policy (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Add package_kea_removed to ANSSI and CIS profiles for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Add new rule package_kea_removed (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Consider the option policy product to remain None (teacup-on-rockingchair) 2025-11-21 15:53:25.353 logging.py DEBUG - Add OL into jinja conditionals (Armando Acosta) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove gnome_gdm_disable_xdmcp from RHEL 10 CIS (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove dconf_gnome_remote_access_* from RHEL 10 HIPAA (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Update install_smartcard_packages for RHEL10 (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove package_talk-server_removed from RHEL 10 ANSSI (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove rng-tools packages as they are no longer needed (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove ypserv from RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove ypbind rules from RHEL10 (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A21 (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A20 (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A19 (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - fix duplicate reference (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - add missing identifier and fix indentation (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Add rules and controls for APP.4.4.A14 (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - fix wrapping (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A18 (sluetze) 2025-11-21 15:53:25.353 logging.py DEBUG - Fix issue with ambiguity of control product and partial match of product names vs product specific controls (teacup-on-rockingchair) 2025-11-21 15:53:25.353 logging.py DEBUG - modify profile stability data (Vojtech Polasek) 2025-11-21 15:53:25.353 logging.py DEBUG - add one rule and a note to cis control file (Vojtech Polasek) 2025-11-21 15:53:25.353 logging.py DEBUG - Remove sendmail from RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - RHEL 9 STIG: change var_networkmanager_dns_mode to "default" (Vojtech Polasek) 2025-11-21 15:53:25.353 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - RHEL 10 ISM_O: add back enable_fips_mode rule (Vojtech Polasek) 2025-11-21 15:53:25.353 logging.py DEBUG - Bump docker/build-push-action from 6.7.0 to 6.9.0 (dependabot[bot]) 2025-11-21 15:53:25.353 logging.py DEBUG - Add CCI to package_postfix_installed (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Update tftp_uses_secure_mode_systemd based on feedback #12436 (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - New rule tftp_uses_secure_mode_systemd (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Adjust tests based on feedback in #12433 (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Add SCE check to service_disabled template (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Document SCE in service_enabled template docs (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Add agent_mfetpd_running and package_mcafeetp_installed back to RHEL9 benchmark (Milan Lysonek) 2025-11-21 15:53:25.353 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.4 to 4.6.8 (dependabot[bot]) 2025-11-21 15:53:25.353 logging.py DEBUG - Add hipaa reference to sshd_use_directory_configuration (Matthew Burket) 2025-11-21 15:53:25.353 logging.py DEBUG - Extract method _find_content_dirs (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Move variable local_env_yaml (Jan Černý) 2025-11-21 15:53:25.353 logging.py DEBUG - Extract method _build_rule (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Extract method dump_metadata (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Update PCI-DSS profiles for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update title and description in requirement 12.9.1 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update title of requirement 12.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Increment title in requirement 11.3.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Minor update in title of requirement 9.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update title in requirement 8.4.3 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update title of requirement 8.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Replace account by ID in requirement 8.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update description of requirement 6.4.3 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update description in requrement 6.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Simplify description of requirement 5.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update description of requirement 3.5.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Simplify code (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Move build_templated_sce_check (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove missing references ctest (Milan Lysonek) 2025-11-21 15:53:25.354 logging.py DEBUG - Extract method _build_static_sce_check (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Update requirement 3.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Convert function to a class (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Replace retained by stored in 3.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Update PCI-DSS version in control file (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove unused code (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Move daemon.* to /var/log/messages (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - add aide_conf_path in debian12 product (Alexandre Skrzyniarz) 2025-11-21 15:53:25.354 logging.py DEBUG - update documentation for Debian case in service_chronyd_or_ntpd_enabled rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.354 logging.py DEBUG - add Debian support for service_chronyd_enabled (Alexandre Skrzyniarz) 2025-11-21 15:53:25.354 logging.py DEBUG - add Debian support for aide_verify_ext_attributes (Alexandre Skrzyniarz) 2025-11-21 15:53:25.354 logging.py DEBUG - add Debian support for aide_verify_acls (Alexandre Skrzyniarz) 2025-11-21 15:53:25.354 logging.py DEBUG - update password length requirements for ism_o secret and top secret levels (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - add value 17 to xccdf variables configuring minimum password length (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Update CCI for configure_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Update CCIs for dconf_gnome_disable_autorun (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove RHEL-09-211025 from the STIG (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Rename Fedora TF job to make it more accurate (Milan Lysonek) 2025-11-21 15:53:25.354 logging.py DEBUG - Prevent matching multiple test plans via tmt_plan regex EOL check (Milan Lysonek) 2025-11-21 15:53:25.354 logging.py DEBUG - Introduce /static-checks CI also for all Fedora versions (Milan Lysonek) 2025-11-21 15:53:25.354 logging.py DEBUG - Minor wording fixes in comments (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove unused variable included_checks_count (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Extract build_templated_sce_check (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Extract method _add_ocil_check_element (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Extract method _add_oval_check_element (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Extract method _add_sce_check_element (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Allow rules to have both SCE and OVAL (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Fix broken code (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Add SCE check to service_enabled template (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - Rework jinja condition in bash script (teacup-on-rockingchair) 2025-11-21 15:53:25.354 logging.py DEBUG - Add new rule chrony_set_nts (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Move /etc/chrony.keys to root:chrony (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Use /proc/sys/crypto/fips_enabled everywhere in enable_fips_modes (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - modify test scenarios of grub2_argument template so that cases when XCCDF variable is used is are handled properly (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Revert "Add tools used for updating CCIs" (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Add tools used for updating CCIs (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Update rule CCI from RHEL 9 STIG V2R1 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Update DISA CCI numbers for RHEL V2R1 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove duplicated tests (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Fix the assumption of OVAL check (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Use template for sshd_set_maxstartups (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Make test scenarios more robust (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove hard-coded values (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Also consider SSH drop-in files (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - Minor improvements for readability (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - exclude some problematic rules from ism_o rhel10 profiles (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - enable Ansible remediation for rhel10 product (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Update rule description (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - OCP4 fix CI assertion (Vincent Shen) 2025-11-21 15:53:25.354 logging.py DEBUG - Disable enable_dracut_fips_module check for FIPS (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Added a file to support SLE Micro (rchikov) 2025-11-21 15:53:25.354 logging.py DEBUG - Updated 6 rules to support SLE Micro (rchikov) 2025-11-21 15:53:25.354 logging.py DEBUG - Ensure that audit rules are ready for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Minor update to default CIS banner (Marcus Burghardt) 2025-11-21 15:53:25.354 logging.py DEBUG - The /etc/system-fips file was depcreated in RHEL 9. (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Update conflicts for sysctl_kernel_core_pattern on RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Add CPE platforms to auditing rules (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - modify test scenarios to use the new common.sh script efficiently (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Adjust zipl_bls_entries_option template remedation to allow RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - rewrite the common.sh helper script (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - grub2_vsyscall_argument should only be applicable to x86_64 (Matus Marhefka) 2025-11-21 15:53:25.354 logging.py DEBUG - modify the RHEL 10 profile so that it is greenafter remediation (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.3 to 7.0.5 (dependabot[bot]) 2025-11-21 15:53:25.354 logging.py DEBUG - OCP4: Fix resource quota (Vincent Shen) 2025-11-21 15:53:25.354 logging.py DEBUG - Bring bash version in-sync with Ansible (Dmitry Makovey) 2025-11-21 15:53:25.354 logging.py DEBUG - Update rationale for chronyd_server_directive (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove ineffective flag "-L" for chown (wqian) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove ineffective flag "-L" for chgrp (wqian) 2025-11-21 15:53:25.354 logging.py DEBUG - rename or remove test scenarios of grub2_audit_argument rule (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Update rule dir_ownership_library_dirs in sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule dir_group_ownership_library_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule root_permissions_syslibrary_files to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule file_ownership_library_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule file_permissions_library_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule dir_permissions_library_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule accounts_passwords_pam_tally2 to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule banner_etc_issue to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule dir_permissions_binary_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - Add rule sshd_enable_warning_banner to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.354 logging.py DEBUG - add new product kylinserver10 supporting (zhaoyun) 2025-11-21 15:53:25.354 logging.py DEBUG - Move snmpd_no_rwusers to use systemctl for restart (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - dnf erase -> dnf remove (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Move snmpd_use_newer_protocol to use systemctl for restart (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Update snmpd_not_default_password to use systemctl (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove sshd_allow_only_protocol2 from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Don't autoremove packages on dnf package uninstall (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove zipl_vsyscall_argument from OSPP control file. (Gabriel Becker) 2025-11-21 15:53:25.354 logging.py DEBUG - Add new version of conntrols file for SYS.1.6.A14 (lichtblaugue) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove excess quotes (Jan Černý) 2025-11-21 15:53:25.354 logging.py DEBUG - exclude more sssd related rules as they are being modified right now (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.2 to 7.0.3 (dependabot[bot]) 2025-11-21 15:53:25.354 logging.py DEBUG - Change directory_permissions_etc_iptables to 700 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Add package install instructions to package_tmux_installed (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove configure_bashrc_exec_tmux from RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Fix jq filters for resource request limits (Watson Sato) 2025-11-21 15:53:25.354 logging.py DEBUG - Fix typo in rule id (Watson Sato) 2025-11-21 15:53:25.354 logging.py DEBUG - product_stability: Add avahi and dconf to platform_package_overrides (wqian) 2025-11-21 15:53:25.354 logging.py DEBUG - product.yml: Add avahi and dconf to platform_package_overrides (wqian) 2025-11-21 15:53:25.354 logging.py DEBUG - Update assertions for kubelet-client-cert|key rules (Lance Bragstad) 2025-11-21 15:53:25.354 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.1 to 7.0.2 (dependabot[bot]) 2025-11-21 15:53:25.354 logging.py DEBUG - Add missing CCEs for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Update RHEL 9 STIG Stable Profiles (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove rules longer in the RHEL 9 STIG as V2R1 (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove package_MFEhiplsm_installed from RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - Update selections for RHEL 10 STIG (Matthew Burket) 2025-11-21 15:53:25.354 logging.py DEBUG - remove rule accounts_password_pam_retry from rhel10 profiles (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - revise other test scenarios of grub2_argument template (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - add test scenarios testing newly introduced OVAL tests (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - modify the oval of grub2_argument template so that it is aligned with argument parsing in RHEL 8 (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - Remove test.profile from OCP4 profiles (Lance Bragstad) 2025-11-21 15:53:25.354 logging.py DEBUG - merge JInja booleans for checking of referenced options in /boot/loader/entries and options in grubenv (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - ad missing cces to rules (Vojtech Polasek) 2025-11-21 15:53:25.354 logging.py DEBUG - remove override of password hashing algorithm (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - rhel10: remove special dedicated group owning ssh keys (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - perform modifications specific to rhel10 product (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - modify Aide config directive for RHEL 10 (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - Update assertions for 4.14 cni conf permissions (Watson Sato) 2025-11-21 15:53:25.355 logging.py DEBUG - Update assertions for 4.15 cni conf permissions (Watson Sato) 2025-11-21 15:53:25.355 logging.py DEBUG - PCI-DSS-4-0: update cipher suite ingress controller assertion (Watson Sato) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule aide_scan_notification to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Update the cce-slmicro5-avail for rule aide_periodic_checking_systemd_timer (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule aide_periodic_checking_systemd_timer to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Remove rule aide_periodic_cron_checking from sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule smartcard_pam_enabled to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule package_audit-audispd-plugins_installed to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Final adjustments to the OSPP control file based on RHEL9. (Gabriel Becker) 2025-11-21 15:53:25.355 logging.py DEBUG - Update OSPP reference for audit according to version 4.3. (Gabriel Becker) 2025-11-21 15:53:25.355 logging.py DEBUG - Add missing OSPP RHEL10 rules. (Gabriel Becker) 2025-11-21 15:53:25.355 logging.py DEBUG - Remove ospp references from rules that are not present in RHEL9 OSPP. (Gabriel Becker) 2025-11-21 15:53:25.355 logging.py DEBUG - Remove rules from RHEL10 OSPP profile that are not present in RHEL9. (Gabriel Becker) 2025-11-21 15:53:25.355 logging.py DEBUG - Fix e2e manual remediation for resource quota (Vincent Shen) 2025-11-21 15:53:25.355 logging.py DEBUG - CMP-2400: exclusion of the namespace for rule ocp4-resource-requests-quota-per-project (Vincent Shen) 2025-11-21 15:53:25.355 logging.py DEBUG - Bump peter-evans/create-pull-request from 7.0.0 to 7.0.1 (dependabot[bot]) 2025-11-21 15:53:25.355 logging.py DEBUG - Update RHEL 9 STIG to V2R1 (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Improve Import DISA STIG (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Update STIG Policy files based on RHEL 9 STIG V2R1 (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - CMP-2196: Update instructions for ingresscontroller TLS ciphers (Lance Bragstad) 2025-11-21 15:53:25.355 logging.py DEBUG - Update RHEL 9 STIG reference file to V2R1 (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Fix utils/import_disa_stig.py (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Move vuln_discussion to vuldiscussion (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Remove script utils/clean_up_psc.py (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Add script to move vuln_discussion to vuldiscussion (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Update assertions for api-server-kubelet-client-cert|key rule (Lance Bragstad) 2025-11-21 15:53:25.355 logging.py DEBUG - OCPBUGS-304: exclude rhacs-operator namespace from resource limit rules (Vincent Shen) 2025-11-21 15:53:25.355 logging.py DEBUG - align mentions of auditd.service within the auditing group description (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule file_permissions_ungroupowned to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule no_files_unowned_by_user to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule partition_for_var to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule partition_for_home to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule dir_perms_world_writable_system_owned_group to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule mount_option_noexec_remote_filesystems to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule mount_option_nosuid_remote_filesystems to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule mount_option_nosuid_removable_partitions to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule mount_option_home_nosuid to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule accounts_user_dot_no_world_writable_programs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - Add rule accounts_user_home_paths_only to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.355 logging.py DEBUG - remove setup of augenrules-like environment in audit_rules_privileged_commands template (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios for audit_rules_usergroup_modification (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios of audit_rules_session_events (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios of audit_rules_networkconfig_modification (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios of audit_rules_mac_modification_usr_share (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios for rule audit_rules_mac_modification (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios of audit_rules_immutable (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios for rule audit_rules_privileged_commands_modprobe (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align rule audit_rules_privileged_commands (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align rule audit_rules_kernel_module_loading (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios for audit_rules_unsuccessful_file_modification (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align test scenarios for directory_access_var_log_audit (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align template audit_rules_watch (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align template audit_rules_usergroup_modification (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align rule audit_rules_login_events_faillock (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - modify template of audit_login_events (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - align tests for audit_rules_privileged_commands template (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - add new macro file for test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - modify the check which checks if augenrules is used (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - modify the OVAL check which checks if auditctl is used to load rules (Vojtech Polasek) 2025-11-21 15:53:25.355 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.1.0 to 7.0.0 (dependabot[bot]) 2025-11-21 15:53:25.355 logging.py DEBUG - Update assertions for ingress controller TLS check (Lance Bragstad) 2025-11-21 15:53:25.355 logging.py DEBUG - Update assertions for PCI-DSS profile (Lance Bragstad) 2025-11-21 15:53:25.355 logging.py DEBUG - Update ssg/build_derivatives to avoid duplication (Armando Acosta) 2025-11-21 15:53:25.355 logging.py DEBUG - Fix issues found in review of #12348 (Matthew Burket) 2025-11-21 15:53:25.355 logging.py DEBUG - Added remediation and tests for the rule permissions_local_var_log_audit (rchikov) 2025-11-21 15:53:25.355 logging.py DEBUG - Add new version of conntrols file for SYS.1.6.A12 and SYS.1.6.A13- now based on master branch (lichtblaugue) 2025-11-21 15:53:25.355 logging.py DEBUG - Updated rules to support SLE Micro (rchikov) 2025-11-21 15:53:25.355 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.3 to 4.6.4 (dependabot[bot]) 2025-11-21 15:53:25.377 logging.py DEBUG - Update rule.yml (Rumen) 2025-11-21 15:53:25.378 logging.py DEBUG - Updates related to the rule permissions_local_var_log_audit (rchikov) 2025-11-21 15:53:25.378 logging.py DEBUG - Hide CJIS profile for OL8 (Edgar Aguilar) 2025-11-21 15:53:25.378 logging.py DEBUG - fix typo (sluetze) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule sysctl_kernel_modules_disabled to unselect_rules_list (Vojtech Polasek) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule partition_for_var_log_audit to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule sudo_restrict_privilege_elevation_to_authorized to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule is_fips_mode_enabled to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule kernel_module_usb-storage_disabled to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule account_temp_expire_date to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule account_emergency_admin to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule account_unique_id to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule grub2_uefi_password to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule grub2_password to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule accounts_passwords_pam_tally2 to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule accounts_password_all_shadowed_sha512 to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Updated packages related to openssh to support slem (rchikov) 2025-11-21 15:53:25.378 logging.py DEBUG - Bump actions/setup-python from 5.1.1 to 5.2.0 (dependabot[bot]) 2025-11-21 15:53:25.378 logging.py DEBUG - Fix CI for XLSX RHEL9 build (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Should fix #12349 (Nicolas SAID) 2025-11-21 15:53:25.378 logging.py DEBUG - Clean up titles in new SRG control files from V3R1 (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rules to SRG-OS-000730-GPOS-00190 (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rules to SRG-OS-000755-GPOS-00220 (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Fix up package_install_sudo PSC content (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Add package_dnf-automatic_installed to SRG-OS-000805-GPOS-00260.yml (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Add dnf-automatic_apply_updates to SRG-OS-000805-GPOS-00260 (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Update SRG GPOS to V3R1 (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Remove in the project that SRG GPSO V3R1 removed (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Add new controls from SRG GPOS V3R1 (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Update titles for upgrade to SRG GPOS to V3R1 (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Fix double sshd_disable_empty_passwords in controls/hipaa.yml (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Update profile stability references for pci-dss (Marcus Burghardt) 2025-11-21 15:53:25.378 logging.py DEBUG - Remove exclusion for rules already compatible with RHEL 10 (Marcus Burghardt) 2025-11-21 15:53:25.378 logging.py DEBUG - Remove ip6tables rule from pcidss RHEL 10 (Marcus Burghardt) 2025-11-21 15:53:25.378 logging.py DEBUG - Confirm rules not applicable to RHEL 10 (Marcus Burghardt) 2025-11-21 15:53:25.378 logging.py DEBUG - Clean comments based on RHEL 9 (Marcus Burghardt) 2025-11-21 15:53:25.378 logging.py DEBUG - Inform correct hashing algorithm for pcidss rhel10 (Marcus Burghardt) 2025-11-21 15:53:25.378 logging.py DEBUG - Include authselect variable in pcidss control file (Marcus Burghardt) 2025-11-21 15:53:25.378 logging.py DEBUG - Update OL9 ism_o profile comment (Edgar Aguilar) 2025-11-21 15:53:25.378 logging.py DEBUG - Update comments in OL9 ISM profile (Edgar Aguilar) 2025-11-21 15:53:25.378 logging.py DEBUG - Update ism control (Edgar Aguilar) 2025-11-21 15:53:25.378 logging.py DEBUG - Create ism profile for OL9 (Edgar Aguilar) 2025-11-21 15:53:25.378 logging.py DEBUG - Remove sshd_set_keepalive_0 from RHEL 10 control file (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Add variables to HIPAA control (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Allow kerb5 Auth for RHEL 10 HIPAA (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Remove SSH 2 Config From RHEL 10 HIPAA (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Exclude auditd_audispd_syslog_plugin_activated from RHEL 10 HIPAA (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Exclude more package rules for RHEL 10 HIPAA (Matthew Burket) 2025-11-21 15:53:25.378 logging.py DEBUG - Add test for imports of 'all' controls (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Import OCP4 CIS rather than extending it (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Add the references to the selected rules (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Expand control processing to 'all' key (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Update PCI-DSS platform profile filters (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Update version-less PCI-DSS profile to v4.0 (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Add pcidss4 reference to OCP4 control (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Remove ocp4 rule from rhel control (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Update of the rule encrypt_partitions to support SLEM (rchikov) 2025-11-21 15:53:25.378 logging.py DEBUG - etcd_unique_ca: update assertion file (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - security-profile-operator-exists: update assertion (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Add PCI-DSS v4.0 assertion files (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Enable these rules on OCP 4.17 (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Align CCE availability (teacup-on-rockingchair) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_usergroup_modification_opasswd to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_usergroup_modification_shadow to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_usergroup_modification_group to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Fix SLEM-05-654175 (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_dac_modification_umount2 to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_dac_modification to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_dac_modification_fchmod to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_dac_modification_lchown to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - add rule audit_rules_dac_modification_fremovexattr to slmicro5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Update installed_OS_is_rhel8 (Armando Acosta) 2025-11-21 15:53:25.378 logging.py DEBUG - Update installed_OS_is_rhel9 (Armando Acosta) 2025-11-21 15:53:25.378 logging.py DEBUG - Add test to ensure_oracle_gpgkey_installed (Armando Acosta) 2025-11-21 15:53:25.378 logging.py DEBUG - Align with PR#12331 (teacup-on-rockingchair) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule package_telnet-server_removed to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule package_audit_installed to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule vlock_installed to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule gnome_gdm_disable_unattended_automatic_login to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule accounts_umask_etc_login_defs to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule network_sniffer_disabled to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule file_permissions_sshd_private_key to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule pam_disable_automatic_configuration to SLE Micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - chronyd_or_ntpd_specify_remote_server: update assertion results (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Remove template option (Jan Černý) 2025-11-21 15:53:25.378 logging.py DEBUG - etcd_unique_ca: updated assertion results (Watson Sato) 2025-11-21 15:53:25.378 logging.py DEBUG - Update cce-slmicro5-avail.txt (Rumen) 2025-11-21 15:53:25.378 logging.py DEBUG - Updated rules based on template service_disabled to support slem (rchikov) 2025-11-21 15:53:25.378 logging.py DEBUG - Updated rules based on template service_enabled to support SLEM (rchikov) 2025-11-21 15:53:25.378 logging.py DEBUG - Update oval file to include OL9 (Armando Acosta) 2025-11-21 15:53:25.378 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.378 logging.py DEBUG - Updated 10 rules to support SLE Micro (rchikov) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule sudoers_validate_passwd 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule accounts_no_uid_except_zero to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule sudoers_default_includedir to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule no_shelllogin_for_systemaccounts to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule accounts_authorized_local_users to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule display_login_attempts to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Add rule cracklib_accounts_password_pam_retry to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.378 logging.py DEBUG - Bump paambaati/codeclimate-action from 8.0.0 to 9.0.0 (dependabot[bot]) 2025-11-21 15:53:25.378 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.378 logging.py DEBUG - Update oval condition to include OL7 & OL9 (Armando Acosta) 2025-11-21 15:53:25.379 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.379 logging.py DEBUG - Update tests (Armando Acosta) 2025-11-21 15:53:25.379 logging.py DEBUG - Update ansible remediation to include OL9 (Armando Acosta) 2025-11-21 15:53:25.379 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule audit_rules_session_events_btmp to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule audit_rules_session_events_wtmp to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule audit_rules_session_events_utmp to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix remediation subscription name (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - etcd_unique-ca: Adapt CA bundle cert path for 4.17 (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - Add OCP4 STIG V2R1 profile (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - use sshd_keep_alive in debian standard profile (Alexandre Skrzyniarz) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix spo-install metadata indentation (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix manual remediation for SPO rule (Lance Bragstad) 2025-11-21 15:53:25.379 logging.py DEBUG - add firewalld rule (sluetze) 2025-11-21 15:53:25.379 logging.py DEBUG - add manual policy to check for podLifetime (sluetze) 2025-11-21 15:53:25.379 logging.py DEBUG - add check for the mode (sluetze) 2025-11-21 15:53:25.379 logging.py DEBUG - Add reference file for OCP4 STIG V2R1 (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - Add forgotten e2e manual remediation (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - fix filter and entity_check as suggested (sluetze) 2025-11-21 15:53:25.379 logging.py DEBUG - Assign SLmicro 5 CCE ids for the added rules (teacup-on-rockingchair) 2025-11-21 15:53:25.379 logging.py DEBUG - Add some missing stig related rules to slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule wireless_disable_interfaces to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule aide_build_database to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule package_aide_installed to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule aide_check_audit_tools to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule dir_system_commands_group_root_owned to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule file_groupownership_system_commands_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule dir_system_commands_root_owned to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule file_ownership_binary_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule file_permissions_binary_dirs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule permissions_local_audit_binaries to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule accounts_password_set_max_life_existing to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule accounts_maximum_age_login_defs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule accounts_password_set_min_life_existing to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule accounts_minimum_age_login_defs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule set_password_hashing_min_rounds_logindefs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix rule install_smartcard_packages (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule install_smartcard_packages to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule set_password_hashing_algorithm_systemauth to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule smartcard_configure_ca to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule auditd_data_disk_full_action to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule postfix_client_configure_mail_alias to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule auditd_data_retention_action_mail_acct to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Added manual and updated version in the stig profile. (Eric Berry) 2025-11-21 15:53:25.379 logging.py DEBUG - Add insensitive option to ansible_lineinfile macro (yunimoo) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule clean_components_post_updating to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sssd_offline_cred_expiration to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sssd_memcache_timeout to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule smartcard_configure_cert_checking to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sudo_require_reauthentication to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sudo_remove_no_authenticate to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sudo_remove_nopasswd to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sudo_require_authentication to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add ansible remediation for audispd plugin UBTU-20-010216 (yunimoo) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix chronyd remote server filepath dir regex (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - update ssg_test_suite to add debian case (Alexandre Skrzyniarz) 2025-11-21 15:53:25.379 logging.py DEBUG - add debian12 automatus workflow (Alexandre Skrzyniarz) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sshd_use_approved_kex_ordered_stig to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule file_permissions_local_var_log_messages to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sshd_set_keepalive to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule dir_perms_world_writable_sticky_bits to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Update 10-oval.jinja macro to support SLE Micro 5 (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sshd_set_idle_timeout to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sshd_use_approved_macs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule sshd_use_approved_macs_ordered_stig to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule set_password_hashing_algorithm_logindefs to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule account_disable_post_pw_expiration to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule file_etc_security_opasswd to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Update ensure_gpgcheck_globally_activated sle micro5 cce number (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule ensure_gpgcheck_globally_activated to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule aide_periodic_cron_checking to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule auditd_data_retention_space_left_action to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule auditd_data_retention_space_left_percentage to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule auditd_audispd_configure_remote_server to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule auditd_audispd_encrypt_sent_records to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rule audit_rules_suid_privilege_function to sle micro 5 stig profile (svet-se) 2025-11-21 15:53:25.379 logging.py DEBUG - Update grub2_slub_debug_argument for OL8 (Edgar Aguilar) 2025-11-21 15:53:25.379 logging.py DEBUG - Add test to grub2_bootloader_argument (Edgar Aguilar) 2025-11-21 15:53:25.379 logging.py DEBUG - Add is_substring to grub2_bootloader_argument (Edgar Aguilar) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix "unknown predicate `-L'" Avoid potential conflict flag of -H and -L (wqian) 2025-11-21 15:53:25.379 logging.py DEBUG - Add FIO notification enabled to Req 11.5.2 (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - Add rooutes_protected_by_tls to Req 4.2.1 (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - Add kubelet tls ingresscontroller rule to CIS benchmarks (Lance Bragstad) 2025-11-21 15:53:25.379 logging.py DEBUG - Update ciphers in ingress controller remediation (Lance Bragstad) 2025-11-21 15:53:25.379 logging.py DEBUG - Update TLS ciphers for ingress controller rule (Lance Bragstad) 2025-11-21 15:53:25.379 logging.py DEBUG - OCP4: deprecating api_server_api_priority_gate_enabled and api_server_insecure_port (Vincent Shen) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix Windows for OpenSCAP 1.4.0 release (Matthew Burket) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix validation with OpenSCAP 1.4 (Matthew Burket) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix build error in non Ubuntu builds (Eric Berry) 2025-11-21 15:53:25.379 logging.py DEBUG - Update rule assertion for CNI config permissions (Lance Bragstad) 2025-11-21 15:53:25.379 logging.py DEBUG - convert sshd_set_idle_timeout partially to templated rule (Vojtech Polasek) 2025-11-21 15:53:25.379 logging.py DEBUG - Bump docker/build-push-action from 6.6.1 to 6.7.0 (dependabot[bot]) 2025-11-21 15:53:25.379 logging.py DEBUG - Ubuntu 22.04 STIG V2R1 changes (Eric Berry) 2025-11-21 15:53:25.379 logging.py DEBUG - convert sshd_use_priv_separation to templated rule (Vojtech Polasek) 2025-11-21 15:53:25.379 logging.py DEBUG - OCP4 STIG: Drop duplicate audit rules file deletion (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - OCP4 STIG: Drop duplicate audit rules (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - OCP4 STIG: Remove duplicate usergroup audit rule (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - partially convert sshd_set_max_sessions to templated rule (Vojtech Polasek) 2025-11-21 15:53:25.379 logging.py DEBUG - partially convert sshd_set_max_auth_tries to templated rule (Vojtech Polasek) 2025-11-21 15:53:25.379 logging.py DEBUG - Fix typo (Watson Sato) 2025-11-21 15:53:25.379 logging.py DEBUG - partially convert sshd_set_login_grace_timeout to templated rule (Vojtech Polasek) 2025-11-21 15:53:25.379 logging.py DEBUG - modify correct and incorrect value in test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - Fix typo in oval of rule installed_OS_is_FIPS_certified (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - OCPBUGS-38314: Update OCIL permissions to be consistent with check (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - Remove the example test file (wqian) 2025-11-21 15:53:25.380 logging.py DEBUG - Create OL10 product (Edgar Aguilar) 2025-11-21 15:53:25.380 logging.py DEBUG - convert sshd_disable_rhosts_rsa to templated rule (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - convert sshd_disable_compression to templated rule (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - convert rule sshd_allow_only_protocol2 to template (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - Add slmicro5 OS as FIPS certified (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule audit_rules_kernel_module_loading_finit to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule audit_rules_kernel_module_loading_delete to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule audit_rules_sysadmin_actions to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sshd_use_approved_ciphers to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sshd_use_approved_ciphers_ordered_stig to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule accounts_max_concurrent_login_sessions to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule audit_rules_unsuccessful_file_modification_rename to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule audit_rules_unsuccessful_file_modification_open to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule audit_rules_login_events_lastlog to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule audit_rules_login_events_tallylog to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule file_permissions_sshd_pub_key to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Fix rule dir_permissions_library_dirs title format (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule permissions_local_var_log to sle micro5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - remove rule_id template parameter from rremaining rules (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - apply suggestions provided by Codeclimate (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - modify oval_line_in_file_macros so that the variable is declared independently of the OVAL state. (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - do not specify rule_id as a template parameter. (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - template.py: prevent specification of value and xccdf_variable at the same time (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - document new parameters for the sshd_oval_check macro (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - update the documentation of sshd_lineinfile template. (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - add the datatype parameter to all rules templated with sshd_lineinfile template (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - convert an example rule to templated one; sshd_set_keepalive (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - update test scenarios so that they consider XCCDF variable (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - modify the sshd_lineinfile ansible template to handle variables (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - bash macro set_config_file: essentially allow the value to be an integer as well (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - update sshd_lineinfile bash template (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - modify sshd_lineinfile OVAL template so that it uses XCCDF variable if supplied (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - create new oval macro for lineinfile state which uses XCCDF variable (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - extend template.py of sshd_lineinfile (Vojtech Polasek) 2025-11-21 15:53:25.380 logging.py DEBUG - Extend mount_option_nodev_nonroot_local_partitions (Jan Černý) 2025-11-21 15:53:25.380 logging.py DEBUG - Remove old and broken tldp.org link (Matthew Burket) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2463: Requirement 11.6 is not applicable (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2463: Requirment 11.5 is partial (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2463: Requirement 11.4 is not applicable (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2463: Requirement 11.3 is not applicable (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2463: Requirement 11.2 is not applicable (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2463: Requirement 11.1 is not applicable (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - Bump docker/build-push-action from 6.5.0 to 6.6.1 (dependabot[bot]) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.10 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.9 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.8 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.7 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.6 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.5 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.4 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.3 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.2 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - OpenShift: Update PCI-DSS Requirement 12.1 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - 10.2.2: Collect request bodies for audit (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - Add RHCOS rule to ensure chronyd is running (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rules to watch kube audit log directories (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - Fix issues and typos (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.380 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 5.0.0.pre.rc01 to 5 (dependabot[bot]) 2025-11-21 15:53:25.380 logging.py DEBUG - OCP4: Optimize trusted ca remediation (Vincent Shen) 2025-11-21 15:53:25.380 logging.py DEBUG - Manually build openscap (wqian) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2462: Requirement 10.7 is partial (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2462: Requirement 10.6 is supported (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2462: Requirement 10.5 is supported (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2462: Requirement 10.4 manual or not applicable (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2462: Requirement 10.3 is partially met (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2462: Requirement 10.2 is inherently met (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - CMP-2462: Requirement 10.1 is not applicable (Watson Sato) 2025-11-21 15:53:25.380 logging.py DEBUG - update rule to select all namespaces (sluetze) 2025-11-21 15:53:25.380 logging.py DEBUG - Fix accounts_password_pam_unix_remember tests (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Remove SLES-15-020250 (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Remove SLES-15-020240 (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Remove SLES-15-010001 (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Update DISA STIG manual for SLE15 V2R1 (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Update SLE15 STIG to V2R1 (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Switch to Ubuntu rule (wqian) 2025-11-21 15:53:25.380 logging.py DEBUG - Rule change trigger for workflow (wqian) 2025-11-21 15:53:25.380 logging.py DEBUG - Append CPE_name (wqian) 2025-11-21 15:53:25.380 logging.py DEBUG - Fix podman build (wqian) 2025-11-21 15:53:25.380 logging.py DEBUG - Update usb guard rules for RHCOS4 moderate CI (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - Add OCP and RHCOS assertion files for 4.17 (Lance Bragstad) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_default_forwarding to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_all_forwarding to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv4_ip_forward to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_all_send_redirects to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_default_send_redirects to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_default_accept_redirects to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_all_accept_redirects to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_default_accept_redirects to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_all_accept_redirects to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_default_accept_source_route to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.380 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_default_accept_source_route to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Add rule sysctl_net_ipv6_conf_all_accept_source_route to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Add rule sysctl_net_ipv4_conf_all_accept_source_route to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Add rule sysctl_kernel_randomize_va_space to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Add rule sysctl_kernel_kptr_restrict to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Add rule sysctl_net_ipv4_tcp_syncookies to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update sysctl template to support slmicro5 product (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Add rule sysctl_kernel_dmesg_restrict to slmicro 5 stig profile (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - updated rule to select all namespaces and look for at least one (sluetze) 2025-11-21 15:53:25.381 logging.py DEBUG - Build empty OVAL (Jan Černý) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix references section in the workshop artificial rule data. (Gabriel Becker) 2025-11-21 15:53:25.381 logging.py DEBUG - firewalld_sshd_port_enabled add zone to all connections (Milan Lysonek) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix quote in bash remediation (Armando Acosta) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix title of var_networkmanager_dns_mode. (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - update debian12 product stability data (Alexandre Skrzyniarz) 2025-11-21 15:53:25.381 logging.py DEBUG - fix regex in sysctl template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.381 logging.py DEBUG - update debian anssi profiles (Alexandre Skrzyniarz) 2025-11-21 15:53:25.381 logging.py DEBUG - update chronyd_specify_remote_server for debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.381 logging.py DEBUG - Add UOS removal to docs (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Change namespace of cluster-kube-descheduler-operator to default value (lichtblaugue) 2025-11-21 15:53:25.381 logging.py DEBUG - Align available CCEs for slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Add to slmicro5 STIG pam pwhistory remember rule (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Review kickstart file for test_suite (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Simplify strings formats (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Simplify error function (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Optimize script output (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Simplify handle of ssh pub_key (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Simplify handle of urls (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Remove centos7 and include rhel10 (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Include osinfo option in install_vm.py script (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Password encryption with yescrypt in RHEL 10 (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Review CIS requirements and rules for RHEL 10 (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix CCE ids availability (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Remove more UOS references from the project (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Add STIG rules for slmicro5 covering lib dirs root ownership (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Update platform value to include OL (Armando Acosta) 2025-11-21 15:53:25.381 logging.py DEBUG - Add platforms back to Automatus Sanity Template Test (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Consolidate ASCS RHEL profiles lastlog via sshd (Marek Haicman) 2025-11-21 15:53:25.381 logging.py DEBUG - Remove uos20 (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Generate a temp certificate for OCP4 Trusted CA remediation (Lance Bragstad) 2025-11-21 15:53:25.381 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A9 (sluetze) 2025-11-21 15:53:25.381 logging.py DEBUG - Minor update to output milestone information (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Update status for CIS 1.2.31 (Lance Bragstad) 2025-11-21 15:53:25.381 logging.py DEBUG - Add package_rng-tools_installed to Fedora OSPP profile (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Add the RHEL9 platform and warnings to RHEL10 for service_rngd_enabled (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Remove installed_OS_is_FIPS_certified from sshd_use_approved_ciphers (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Align release date calculation with documentation (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Review and update the duration section (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Include a section for fixed bugs in changelog (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 (dependabot[bot]) 2025-11-21 15:53:25.381 logging.py DEBUG - Bump to 0.1.75 (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Order platform applicability directive alphabetically (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix stigid@slmicro5 references (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_sudo to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_su to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_pam_timestamp_check to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_usermod to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_execution_rm to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_execution_chcon to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_execution_chacl to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_execution_setfacl to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_execution_chmod to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_kmod to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_modprobe to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_rmmod to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_insmod to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update rule audit_rules_privileged_commands_ssh_agent to support slmicro5 (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update stig_slmicro5.yml format (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Update docs/manual/developer/10_stabilization_phase.md (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Update SUSE Linux Enterprise Micro 5 product name (svet-se) 2025-11-21 15:53:25.381 logging.py DEBUG - Clarify stabilization dates process for more predictability (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Update products/rhel10/profiles/ospp.profile (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Move bash_coredump_config_set to ini file macro (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Update default profile to not break tailoring files (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Update RHEL 8 STIG SCAP Content to V1R13 (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix OSPP RHEL 10 description (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Include CCE for RHEL 10 in service_cups_disabled (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix description of rule (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Add OCP4 4.21 PCI-DSS assertion files (Watson Sato) 2025-11-21 15:53:25.381 logging.py DEBUG - Make CIS requirements for services more flexible (Marcus Burghardt) 2025-11-21 15:53:25.381 logging.py DEBUG - Disable Kickstart remediation in partition_for_boot (Jan Černý) 2025-11-21 15:53:25.381 logging.py DEBUG - Bump mikepenz/release-changelog-builder-action from 4.2.2 to 5 (dependabot[bot]) 2025-11-21 15:53:25.381 logging.py DEBUG - fix spacing (sluetze) 2025-11-21 15:53:25.381 logging.py DEBUG - Avoid duplicated fix (wqian) 2025-11-21 15:53:25.381 logging.py DEBUG - Directly modify the configuration Align with STIG Avoid override the whole configuration (wqian) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix insert_before on bash_coredump_config_set (Matthew Burket) 2025-11-21 15:53:25.381 logging.py DEBUG - Add accounts_passwords_pam_tally2_file rule for default pam_tally2 tally directory STIG requirement (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Assign accounts_passwords_pam_tally2_file_selinux to pam component (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Fix description of rule (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Drop allocated CCEs from availabiility list (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Add to STIG for slmicro5 rules for audit of selinux commands (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Add package_audit-audispd-plugins_installed rule for slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Add selinux basic support rules for slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Add slmicro5 rule package_policycoreutils_installed (teacup-on-rockingchair) 2025-11-21 15:53:25.381 logging.py DEBUG - Add some user account related DISA STIG rules for SLE Micro 5.x platform (teacup-on-rockingchair) 2025-11-21 15:53:25.382 logging.py DEBUG - Update Contributors for v0.1.74 (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Update Mail Map for 0.1.74 (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Add draft status to all RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Disable OSPP Profile for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 (dependabot[bot]) 2025-11-21 15:53:25.382 logging.py DEBUG - Bump docker/login-action from 3.2.0 to 3.3.0 (dependabot[bot]) 2025-11-21 15:53:25.382 logging.py DEBUG - Bump docker/setup-qemu-action from 3.1.0 to 3.2.0 (dependabot[bot]) 2025-11-21 15:53:25.382 logging.py DEBUG - Ensure that Coredump remediations use the ini file format (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Add new test for Coredump (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Remove DEBIAN12 ./build_product (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Bump docker/build-push-action from 6.4.1 to 6.5.0 (dependabot[bot]) 2025-11-21 15:53:25.382 logging.py DEBUG - fix xccdf_variable substitution with dotnotation (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - OSPP profile, use Logind session timeout feature instead of tmux. (Gabriel Becker) 2025-11-21 15:53:25.382 logging.py DEBUG - Remove the excluded_files in file_groupowner (wqian) 2025-11-21 15:53:25.382 logging.py DEBUG - Add profile assertion files on OCP 4.12 (Watson Sato) 2025-11-21 15:53:25.382 logging.py DEBUG - Fix audit_rules_privileged_commands_ssh_keysign slmicro5 CCE id (teacup-on-rockingchair) 2025-11-21 15:53:25.382 logging.py DEBUG - Drop trailing whitespaces (teacup-on-rockingchair) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated 10 rules to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Add ssh rules to relevent requirements of the STIG spec (teacup-on-rockingchair) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Set SSH Daemon LogLevel to VERBOSE' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Enable SSH Print Last Log' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Enable SSH Warning Banner' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Enable Use of Strict Mode Checking' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Do Not Allow SSH Environment Options' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Disable X11 Forwarding' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Disable SSH Support for User Known Hosts' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Disable SSH Root Login' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Disable SSH Access via Empty Passwords' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Updated rule 'Record Events that Modify User/Group Information - /etc/passwd' to support SLE Micro 5 (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Adjust bash template groupfile_owner to follow symlinks (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Update references disa stig ol8 (Armando Acosta) 2025-11-21 15:53:25.382 logging.py DEBUG - Update stig profile version to v2r1 for ol8 (Armando Acosta) 2025-11-21 15:53:25.382 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.382 logging.py DEBUG - Disable service_enabled templated test for service_bluetooth_disabled (Milan Lysonek) 2025-11-21 15:53:25.382 logging.py DEBUG - Fix Debian 12 CI (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Fix Fedora 43 in Fedora product (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Debian 10 Removal to content notes (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Update rules since Debian 10 was removed (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Update Gating for Debian 10 Removal (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Update build and tests system for Debian 10 removal (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Update docs and Gitpod for Debian 10 removal (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Clean up Debian 10 in shared (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Remove Debian 10 Product (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Update product stability for Fedora (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Add rule into components (wqian) 2025-11-21 15:53:25.382 logging.py DEBUG - Remove the excluded_files (wqian) 2025-11-21 15:53:25.382 logging.py DEBUG - Correct the platform detect As the cis rule indicates: remove iptables-persistent if ufw is installed (wqian) 2025-11-21 15:53:25.382 logging.py DEBUG - bsi_app_4.4 update references and rebase (ermeratos) 2025-11-21 15:53:25.382 logging.py DEBUG - bsi_app_4_4_a21 update (ermeratos) 2025-11-21 15:53:25.382 logging.py DEBUG - bsi_app_4_4_a21 final edit (ermeratos) 2025-11-21 15:53:25.382 logging.py DEBUG - bsi_app_4_4_a21 update (ermeratos) 2025-11-21 15:53:25.382 logging.py DEBUG - bsi_app_4_4_A21 (ermeratos) 2025-11-21 15:53:25.382 logging.py DEBUG - Added SLEM CCE numbers (rchikov) 2025-11-21 15:53:25.382 logging.py DEBUG - Add through Fedora 45 for Fedora CPEs (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Fix components for libdnf-plugin-subscription-manager (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - In RHEL 10 package_{,lib}dnf-plugin-subscription-manager_installe (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - New rule package_libdnf-plugin-subscription-manager_installed (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - CMP-2460: Restrict IdP configurations (Watson Sato) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A8 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A7 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Default the module line to /bin/false in describe_module_disable (wqian) 2025-11-21 15:53:25.382 logging.py DEBUG - Default the module line to /bin/false in ocil_module_disable (wqian) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A6 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Resolve Code Climate problems (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Kickstart remediation to 'grub2_bootloader_argument' template (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Simplify the mount kickstart template (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Add newline (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Kickstart remediation to 'mount' template (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Kickstart remediation for templated rules (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Introduce new remediation type: Kickstart (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Add Notes and Controls for SYS.1.6.A5 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.7 to 2.0.8 (dependabot[bot]) 2025-11-21 15:53:25.382 logging.py DEBUG - Move to Default crypto policy for RHEL10 (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Add a minimum cluster stability timeout for OpenShift e2e remediation (Lance Bragstad) 2025-11-21 15:53:25.382 logging.py DEBUG - switch to automatic reference system (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A4 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A3 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A2 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Defined notes and rules for BSI SYS.1.6.A1 (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - add automatic referencing (sluetze) 2025-11-21 15:53:25.382 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.6 to 2.0.7 (dependabot[bot]) 2025-11-21 15:53:25.382 logging.py DEBUG - Bump docker/build-push-action from 6.4.0 to 6.4.1 (dependabot[bot]) 2025-11-21 15:53:25.382 logging.py DEBUG - Create file if it doesn't exist for coredump rules (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Exclude package_screen_installed from RHEL 10 OSPP (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - Include new variable in individual profiles (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Include new variable in control files (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Create test scenario for passwords not recently changed (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Improve the OVAL logic in accounts_password_last_change_is_in_past (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Changed_when to false (namoyer10) 2025-11-21 15:53:25.382 logging.py DEBUG - Improve regex in Bash and Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Improve test scenarios for hashing algorithm in PAM files (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Add necessary dependency (wqian) 2025-11-21 15:53:25.382 logging.py DEBUG - Minor updates in Jinja2 conditions (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Add rule sshd_use_approved_ciphers back to RHEL 9 data stream (Jan Černý) 2025-11-21 15:53:25.382 logging.py DEBUG - Fix typos and Title Case for Ansible tasks names (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Honour the no_quotes paramter of oval_check_dropin_file macro (teacup-on-rockingchair) 2025-11-21 15:53:25.382 logging.py DEBUG - Allow multiple control files to add same ref type (Watson Sato) 2025-11-21 15:53:25.382 logging.py DEBUG - utils-build_control_from_reference_sanity now only runs on 3.7+ (Matthew Burket) 2025-11-21 15:53:25.382 logging.py DEBUG - CMP-2461: Requirement 9 is not applicable (Watson Sato) 2025-11-21 15:53:25.382 logging.py DEBUG - Review and update set_password_hashing_algorithm_libuserconf (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Review of set_password_hashing_algorithm_logindefs (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Update set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Update description in set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Include general warning regarding multiple options (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Update Ansible remedition in alignment to Bash (Marcus Burghardt) 2025-11-21 15:53:25.382 logging.py DEBUG - Update Bash remediation to use variable (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Include test scenario script for multiple options (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Update existing test scenario scripts with variable (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Update OVAL check to use variable value (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Improve OVAL readability in set_password_hashing_algorithm_systemauth (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Review and update rule description (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Introduce a new variable for pam_unix.so hashing option (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Simplify use of ansible_ensure_pam_module_option macro (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - grub2_bootloader_argument template: make more test scenarios applicable to RHEL 10 (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - disable anssi R45 in RHEL profiles (Alexandre Skrzyniarz) 2025-11-21 15:53:25.383 logging.py DEBUG - update debian12 anssi profiles (Alexandre Skrzyniarz) 2025-11-21 15:53:25.383 logging.py DEBUG - add rules in anssi-BP-28 R45 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.383 logging.py DEBUG - Bump docker/build-push-action from 6.3.0 to 6.4.0 (dependabot[bot]) 2025-11-21 15:53:25.383 logging.py DEBUG - templates: add rhel10 to conditional macros where rhel9 is mentioned (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - Update docs/templates/template_reference.md (vojtapolasek) 2025-11-21 15:53:25.383 logging.py DEBUG - Add pre requisite rules for Req 8.2 and 8.3 (Watson Sato) 2025-11-21 15:53:25.383 logging.py DEBUG - Fix typos and review comments (Watson Sato) 2025-11-21 15:53:25.383 logging.py DEBUG - update test scenarios to not preserve previous file content (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - Ansible: update regex which checks for the section (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - Add changed_when line for awk command to allow for idempotency when no results are found. (Nathan Moyer) 2025-11-21 15:53:25.383 logging.py DEBUG - change the file name used in remediations (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - Fix broken OVAL metadata (Jan Černý) 2025-11-21 15:53:25.383 logging.py DEBUG - Minimal profile will be removed in future authselect versions (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Align authselect profile in test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Bump actions/setup-python from 5.1.0 to 5.1.1 (dependabot[bot]) 2025-11-21 15:53:25.383 logging.py DEBUG - Remove sshd_use_approved_ciphers from RHEL 9 & 10 Profiles (Matthew Burket) 2025-11-21 15:53:25.383 logging.py DEBUG - Move CS8 file to new name (Matthew Burket) 2025-11-21 15:53:25.383 logging.py DEBUG - Fix file name for UBI testing (Matthew Burket) 2025-11-21 15:53:25.383 logging.py DEBUG - CMP-2460: Requirement 8.6 is supported (Watson Sato) 2025-11-21 15:53:25.383 logging.py DEBUG - CMP-2460: Reqs 8.4 and 8.5 are not applicable (Watson Sato) 2025-11-21 15:53:25.383 logging.py DEBUG - CMP-2460: Requirement 8.3 is not applicable (Watson Sato) 2025-11-21 15:53:25.383 logging.py DEBUG - CMP-2460: Requirement 8.2 is automated (Watson Sato) 2025-11-21 15:53:25.383 logging.py DEBUG - Bump actions/setup-go from 5.0.1 to 5.0.2 (dependabot[bot]) 2025-11-21 15:53:25.383 logging.py DEBUG - Fix installed_OS_is_slmicro5.xml ending (svet-se) 2025-11-21 15:53:25.383 logging.py DEBUG - Fix installed_OS_is_slmicro5.xml ending (svet-se) 2025-11-21 15:53:25.383 logging.py DEBUG - Fix Kernel Runtime Parameter IPv6 Check for SLE Micro 5 (svet-se) 2025-11-21 15:53:25.383 logging.py DEBUG - Update SLE Micro 5 stig.profile SMEs (svet-se) 2025-11-21 15:53:25.383 logging.py DEBUG - Fix installed_OS_is_slmicro5 check (svet-se) 2025-11-21 15:53:25.383 logging.py DEBUG - Update SLE Micro 5 product cpes (svet-se) 2025-11-21 15:53:25.383 logging.py DEBUG - Update SLE Micro 5 product name (svet-se) 2025-11-21 15:53:25.383 logging.py DEBUG - Move OL7 to its own file and set ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION (Matthew Burket) 2025-11-21 15:53:25.383 logging.py DEBUG - CMP-2460: Requirement 8.1 is not applicable (Watson Sato) 2025-11-21 15:53:25.383 logging.py DEBUG - Ansible macro for PAM more robust for variables (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - modify the Ansible remediation so that Jinja is not evaluated in the when conditional (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - add documentation for systemd_dropin_configuration template (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - remove the component field from the template instantiation because it is actually not used by the template (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - honor the no_quotes parameter also when remediating (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - update Ansible remediation of the template to be aligned with Bash (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - macro bash_ensure_ini_config: do not put space around equals sign (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - honor the section of the systemd file also in tests and rules (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - systemd_dropin_configuration bash: rewrite using already existing macro (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - systemd_dropin_congiruation template OVAL: honor the section of the systemd config file (Vojtech Polasek) 2025-11-21 15:53:25.383 logging.py DEBUG - Minor fix in arguments for macro (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Update register names to be more robust (Marcus Burghardt) 2025-11-21 15:53:25.383 logging.py DEBUG - Bash macros for PAM more flexible to variables (Marcus Burghardt) 2025-11-21 15:53:25.401 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.402 logging.py DEBUG - Update STIG profile assertion files (Watson Sato) 2025-11-21 15:53:25.402 logging.py DEBUG - Address code review comments from #12110 (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix bash_package_installed macro dkpg-query will return "not-installed" for uninstalled pkg which also passes the grep pattern match (wqian) 2025-11-21 15:53:25.402 logging.py DEBUG - Ensure firewalld is installed for CCN profiles (Milan Lysonek) 2025-11-21 15:53:25.402 logging.py DEBUG - Enable CCN Advanced profile test in CI (Milan Lysonek) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove security_patches_up_to_date from RHEL 10 profiles (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Clean up Red Hat CCE file (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove security_patches_up_to_date from RHEL 10 ANSSI (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Add RHEL 10 cce to packge_screen_installed (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Ensure that RHEL 10 has CCEs (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove the CCEs that OCP4 is using (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Expand the cce_avail_check to ocp4 (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.6.1 to 4.6.3 (dependabot[bot]) 2025-11-21 15:53:25.402 logging.py DEBUG - Update bash remediation to fix bug (Armando Acosta) 2025-11-21 15:53:25.402 logging.py DEBUG - Add DISA STIG to the title of the profile (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (dependabot[bot]) 2025-11-21 15:53:25.402 logging.py DEBUG - Change default hashing algorithm in ANSSI profiles for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.402 logging.py DEBUG - Bump docker/setup-qemu-action from 3.0.0 to 3.1.0 (dependabot[bot]) 2025-11-21 15:53:25.402 logging.py DEBUG - Bump docker/build-push-action from 6.2.0 to 6.3.0 (dependabot[bot]) 2025-11-21 15:53:25.402 logging.py DEBUG - Add rhcos4 to k8scontent #12123 (Paul Bastide) 2025-11-21 15:53:25.402 logging.py DEBUG - Product name changed from susemicro5 to slmicro5 in cmake products also (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - Improve style not going beyond 100 chars (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - Improve identity provider timeout polling (Lance Bragstad) 2025-11-21 15:53:25.402 logging.py DEBUG - Product name changed from susemicro5 to slmicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - remove logind_session_timeout from RHEL 10 stig_gui profile (Vojtech Polasek) 2025-11-21 15:53:25.402 logging.py DEBUG - remove logind_session_timeout from RHEL 9 stig_gui profile (Vojtech Polasek) 2025-11-21 15:53:25.402 logging.py DEBUG - remove logind_session_timeout from RHEL 8 stig_gui profile (Vojtech Polasek) 2025-11-21 15:53:25.402 logging.py DEBUG - Bump docker/build-push-action from 6.0.1 to 6.2.0 (dependabot[bot]) 2025-11-21 15:53:25.402 logging.py DEBUG - Bump actions/github-script (dependabot[bot]) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix Dockerfile location for ubi8 test (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix CCE conflict for package_nginx_removed (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Sorting subkeys fixing also needs to use humnan sorting (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove security_patches_up_to_date from the SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Add CCEs to RHEL 10 rules (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Clean up components from removed rules (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove service_irqbalance_enabled (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove no_hesiod_in_nsswitch (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove service_cgconfig_disabled (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove service_messagebus_disabled (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove service_cgred_disabled (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove rule service_smartd_disabled (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix code climate issues in utils/find_unused_rules.py (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Add docs for utils/find_unused_rules.py (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Add script to list rules taht are not used in any data stream (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Add manual DISA STIG for susemicro5 as reference (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - Rename slemicro to susemicro5 (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - Add rule installed_OS_is_vendor_supported (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - Add skeleton for product support SLE Micro OS (teacup-on-rockingchair) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix test_oval.py due to RHEL 7 removal (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Clean up testing OVAL since RHEL7 is gone (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Update kickstarts for Automatus since RHEL 7 is gone (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove RHEL7 OVAL files (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - RHEL7 -> RHEL9 in testing bash fix (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Clean up testing rules metadata (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Move product unit tests to RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Automatus docs to use RHEL9 (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Clean up tests/stable_profile_ids.py due to RHEL 7 removal (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Clean up missed RHEL 7 conditionals (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove RHEL7 profile stability tests (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix ocil text of rule ensure_rtc_utc_configuration (wqian) 2025-11-21 15:53:25.402 logging.py DEBUG - Re-enable runtime check on network related sysctls (Watson Sato) 2025-11-21 15:53:25.402 logging.py DEBUG - Do not run package_audit-libs_installed removal test scenarios (Milan Lysonek) 2025-11-21 15:53:25.402 logging.py DEBUG - Add option to build per rule playbook via build_product script (Milan Lysonek) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove id test from test_platform_from_text_complex_expression (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Convert test_platform_from_text_complex_expression to use features of the expression (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Convert test_platform_from_text_complex_expression to use features of the expression (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove compliance-trestle (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - In F41+ it appears that lxml needs libxml2 and libxslt devel packages (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Use registry.fedoraproject.org/fedora:rawhide for rawhide test (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Add UBI8 Dockerfile and use in place of CS8 in Automatus testing (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove CentOS Stream 8 Test Suite Dockerfile (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Use correct crypto policy in CIS test scenario (Milan Lysonek) 2025-11-21 15:53:25.402 logging.py DEBUG - Fixing rule tile for CMP-2485 (Rutvik) 2025-11-21 15:53:25.402 logging.py DEBUG - Add set_nftables_table to default RHEL 9 profile (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Update profile assertion files (Watson Sato) 2025-11-21 15:53:25.402 logging.py DEBUG - OCPBUGS-33945: select required SSHD timeout rule (Watson Sato) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix PEP8 issue in build-scripts/enable_derivatives.py (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove installed_OS_is_rhel7 (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Update shared conditionals for RHEL 7 removal (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove RHEL 7 from install_vm (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Clean up more vars for RHEL 7 removal (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove RHEL7 from more jinja conditionals (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - RHEL 7 is no longer valid or playbook to role (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove SL7 (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Fix OL7 Workflow (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove unused RHEL 7 constants (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Update platforms in docs and workshops (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Adjust platforms in shared tests for RHEL 7 removal (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove more RHEL 7 platforms in linux_os (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove RHEL 7 only tests (Matthew Burket) 2025-11-21 15:53:25.402 logging.py DEBUG - Remove RHEL 7 from platforms key in linux_os (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Convert RHEL 7 to -> RHEL 10 in test_matches_platform.py (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove test_simple_multiple_benchmark_cpes (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Fix test_rule.py for ssg_test_suite (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL7 install command from Automatus (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove empty identifiers (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Assert the rhel7 is no longer in the project (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL7 from controleval_metrics (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL7 from cce_avail_check test (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL7 from Jinja expressions in linux_os (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Clean up ANSSI control (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Update templates for removal of RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Clean up workshops (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - rhel7 -> rhel9 in help text in build-scripts (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Clean up Gitpod for RHEL 7 Removal (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - CODEOWNERS Clean Up for RHEL7 Removal (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL7 from ssg/constants.py (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Document RHEL 7 Removal in the Content Notes (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Documentation clean up for RHEL 7 Removal (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL 7 Product Stability (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL 7 control file (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL 7 from shared files (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove rhel 7 identifiers and references (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL 7 From CI (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Remove RHEL 7 product (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - Ensure rules in rhel9 datastream (Marcus Burghardt) 2025-11-21 15:53:25.403 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.403 logging.py DEBUG - OCPBUGS-33948: Clairfy encryption ciphers available for use in OpenShift (Lance Bragstad) 2025-11-21 15:53:25.403 logging.py DEBUG - Add package header with usbguard value (Armando Acosta) 2025-11-21 15:53:25.403 logging.py DEBUG - Add ansible remediation (Armando Acosta) 2025-11-21 15:53:25.403 logging.py DEBUG - CMP-2458: Fix typos (Watson Sato) 2025-11-21 15:53:25.403 logging.py DEBUG - CMP-2459: Requiremtn 7.3 is inherently met (Watson Sato) 2025-11-21 15:53:25.403 logging.py DEBUG - CMP-2459: Requirement 7.2 is inherently met (Watson Sato) 2025-11-21 15:53:25.403 logging.py DEBUG - fix cis_al2023.yml and its manual settings (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Fix typos (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - address additional syntax settings (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - fix syntaxt and CIS content errors (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Replace cis_al2023.yml with a previous version - Rename CIS 2 profile file - Add build/.gitkeep back - Remove AL2023 from building derivates (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - fix and test on al2023 / add minor changes (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - bring cis_al2023.yml back (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Fix indentation/sorting issues (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Revert "remove not needed controls from cis profiles - fix chronyd conf by pointing to aws servers" (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - fix conflicts (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Fix os version check/name on AL2023 (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Add AL2023 product (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - remove not needed controls from cis profiles - fix chronyd conf by pointing to aws servers (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Update linux_os/guide/system/software/updating/ensure_amazon_gpgkey_installed/ansible/shared.yml (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - fix a typo in cis_server_l1.profile (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - fix a typo in cis.profile (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - Add aws fingerprint and fix ensure_amazon_gpgkey_installed (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Complete al2023 setup (add components, controls, linux_os) (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Fix os version check/name on AL2023 (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Build al2023 sle and fedora (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Build al2023 on centos, sle and fedora (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Fix al2023 faling test on CPE validation (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - Add al2023 to gate_fedora.yml - fix a merge conflict (Mirco Santori) 2025-11-21 15:53:25.403 logging.py DEBUG - fix merge conflicts (hipponix) 2025-11-21 15:53:25.403 logging.py DEBUG - fixing e2e assertions (Rutvik) 2025-11-21 15:53:25.403 logging.py DEBUG - CMP-2459: Requirement 7.1 is not applicable (Watson Sato) 2025-11-21 15:53:25.403 logging.py DEBUG - OCPBUGS-32551: swap token inactivity timeout rule (Watson Sato) 2025-11-21 15:53:25.403 logging.py DEBUG - updating platform check and tests (Rutvik) 2025-11-21 15:53:25.403 logging.py DEBUG - OCPBUGS-17828 Improve ocp4-cis-scc-limit-container-allowed-capabilities instructions (Vincent Shen) 2025-11-21 15:53:25.403 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_crl/tests/missing_crl.fail.sh (Matthew Burket) 2025-11-21 15:53:25.403 logging.py DEBUG - fix cces (Vojtech Polasek) 2025-11-21 15:53:25.403 logging.py DEBUG - add file_permission_user_init_files_root and associated variable to RHEL 8 STIG profile (Vojtech Polasek) 2025-11-21 15:53:25.403 logging.py DEBUG - Improve OVAL readability (Marcus Burghardt) 2025-11-21 15:53:25.403 logging.py DEBUG - Pin GitHub actions using frizbee (Jakub Hrozek) 2025-11-21 15:53:25.403 logging.py DEBUG - Adding OCP4 multi-arch support (Vincent Shen) 2025-11-21 15:53:25.403 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.5 to 2.0.6 (dependabot[bot]) 2025-11-21 15:53:25.403 logging.py DEBUG - Install dependency "xmllint" package (wqian) 2025-11-21 15:53:25.403 logging.py DEBUG - CMP-2458: Requirement 6.5 is not applicable (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - CMP-2458: Requiremnt 6.4 is partially supported (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - CMP-2458: Requirement 6.3 is inherently met (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - CMP-2458: Requirement 3.1 (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - CPM-2458: Requirement 6.2 is not applicable (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - CPM-2458: Requirement 6.1 is not applicable (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - Create dconf db directory for local profile (wqian) 2025-11-21 15:53:25.404 logging.py DEBUG - Adjust conflicting requirements (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - Adjust conflicting requirements (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - Minor changes in wording (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - Add tls_cipher_suite, drop etcd cihper rule (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - Adjust PCI-DSS 4.2.1 (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - CMP-2456: Requirement 4.2 is partial (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - CMP-2456: Requirement 4.1 is not applicable (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (dependabot[bot]) 2025-11-21 15:53:25.404 logging.py DEBUG - OCPBUGS-35765: bios-enable-execution-restrictions should be excluded for ppc64le (Paul Bastide) 2025-11-21 15:53:25.404 logging.py DEBUG - Introduce CIS draft profiles for RHEL10 (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - Introduce CIS draft control file for RHEL10 (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - Remove unnecessary flags/options (wqian) 2025-11-21 15:53:25.404 logging.py DEBUG - Update CIS profiles descriptions for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - Bump docker/build-push-action from 5 to 6 (dependabot[bot]) 2025-11-21 15:53:25.404 logging.py DEBUG - Update comment to reference the correct Jira (Lance Bragstad) 2025-11-21 15:53:25.404 logging.py DEBUG - fixing whitespaces in warning section (Rutvik) 2025-11-21 15:53:25.404 logging.py DEBUG - adding warning section (Rutvik) 2025-11-21 15:53:25.404 logging.py DEBUG - coreos_kernel_options: update entries file path (Watson Sato) 2025-11-21 15:53:25.404 logging.py DEBUG - Add tests/validate_automatus_metadata.py to mypy testing (Matthew Burket) 2025-11-21 15:53:25.404 logging.py DEBUG - Clean up Code Climate Issues (Matthew Burket) 2025-11-21 15:53:25.404 logging.py DEBUG - Open the full path for tests/validate_automatus_metadata.py (Matthew Burket) 2025-11-21 15:53:25.404 logging.py DEBUG - Only run validate_automatus_metadata on Python 3.9+ (Matthew Burket) 2025-11-21 15:53:25.404 logging.py DEBUG - Fix findings from validate_automatus_metadata (Matthew Burket) 2025-11-21 15:53:25.404 logging.py DEBUG - Add validate_automatus_metadata to ctest (Matthew Burket) 2025-11-21 15:53:25.404 logging.py DEBUG - Added validate_automatus_metadata (Matthew Burket) 2025-11-21 15:53:25.404 logging.py DEBUG - modifying rule content and selection criteria (Rutvik) 2025-11-21 15:53:25.404 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - Include CCEs in rules selected by CIS RHEL9 v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - Update version in control file (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 7.2 Local User and Group Settings (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 7.1 System File Permissions (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.4 Configure auditd File Access (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.3 Configure auditd Rules (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.2 Configure Data Retention (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.3.1 Configure auditd Service (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.4 Configure Logfiles (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.3 Configure rsyslog (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.2 Configure journald (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.2.1 Configure systemd-journal-remote (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.2.1 Configure systemd-journald service (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 6.1 Configure Integrity Checking (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.4.3 Configure user default environment (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.4.2 Configure root and system accounts and environment (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.4.1 Configure shadow password suite parameters (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.4 Configure pam_unix module (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.3 Configure pam_pwhistory module (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.2 Configure pam_pwquality module (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.3.1 Configure pam_faillock module (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.2 Configure authselect (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.3.1 Configure PAM software packages (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.2 Configure privilege escalation (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 5.1 Configure SSH Server (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4 Host Based Firewall - Cleanup (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4.3 Configure NFTables (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4.2 Configure FirewallD (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 4.1 Configure a firewall utility (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 3.3 Configure Network Kernel Parameters (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 3.2 Configure Network Kernel Modules (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 3.1 Configure Network Devices (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2 - Services - Cleanup (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.4.2 Configure at (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.4.1 Configure cron (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.3 Configure Time Synchronization (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.2 Configure Client Services (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 2.1 Configure Server Services (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1 - Initial Setup - Cleanup (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.8 Configure GNOME Display Manager (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.7 Configure Command Line Warning Banners (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.6 Configure system wide crypto policy (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.5 Configure Additional Process Hardening (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.4 Configure Bootloader (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.3.1 Configure SELinux (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.2.2 Configure Package Updates (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.2.1 Configure Package Repositories (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1 Cleanup (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.7 Configure /var/log/audit (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.6 Configure /var/log (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.5 Configure /var/tmp (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.4 Configure /var (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.3 Configure /home (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.2 Configure /dev/shm (Marcus Burghardt) 2025-11-21 15:53:25.404 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.2.1 Configure /tmp (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - CIS RHEL9 v2.0.0 - 1.1.1 Configure Filesystem Kernel Modules (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Ensure code consistency by using aide_conf_path var (wqian) 2025-11-21 15:53:25.405 logging.py DEBUG - Revert "OCP4: Support multi-arch content image" (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove CentOS 7 from Packit building and testing (Milan Lysonek) 2025-11-21 15:53:25.405 logging.py DEBUG - CPM-2457: Requirement 5.4 is not applicable (Watson Sato) 2025-11-21 15:53:25.405 logging.py DEBUG - CPM-2457: Requirement 5.2 and 5.3 are not automated (Watson Sato) 2025-11-21 15:53:25.405 logging.py DEBUG - CMP-2457: Requirement 5.1 is not applicable (Watson Sato) 2025-11-21 15:53:25.405 logging.py DEBUG - Bump paambaati/codeclimate-action from 6.0.0 to 8.0.0 (dependabot[bot]) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix permissions for dconf db on Ubuntu (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - Rename ubuntu workflow Build directly without container (wqian) 2025-11-21 15:53:25.405 logging.py DEBUG - Add ubuntu workflow (wqian) 2025-11-21 15:53:25.405 logging.py DEBUG - platforms -> platform in test metadata (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - add default to helptext (sluetze) 2025-11-21 15:53:25.405 logging.py DEBUG - OCP4: Support multi-arch content image (Vincent Shen) 2025-11-21 15:53:25.405 logging.py DEBUG - Update shared/macros/10-kubernetes.jinja (Vincent Shen) 2025-11-21 15:53:25.405 logging.py DEBUG - fix the if statement (svet-se) 2025-11-21 15:53:25.405 logging.py DEBUG - Test if SCE is supported by OpenSCAP (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Mark some scenarios as specific to SCE (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Set correct permissions in macro bash_enable_dconf_user_profile (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - Modify ubuntu remediation for dconf_gnome_banner_enabled (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - Include product property in profile class (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove duplicate product (wqian) 2025-11-21 15:53:25.405 logging.py DEBUG - Rename PCI DSS profile to match other rhel versions (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix tagret permissions on /etc/shadow- for SLE15/SLE12 (svet-se) 2025-11-21 15:53:25.405 logging.py DEBUG - Update product stability for openembedded (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - add identifiers to rules. (sluetze) 2025-11-21 15:53:25.405 logging.py DEBUG - Ensure that products are build during CI (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove ubuntu2004 from ubuntu 22.04 testing (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Add ubuntu 16.04 and 18.04 to Ubuntu 20.04 testing (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Add debian12 to Debian testing (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Reduce the products build on OpenSUSE (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Reduce the products build on SLE15 (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Enable RHEL 10 on RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - add general_network_separation manual rule (sluetze) 2025-11-21 15:53:25.405 logging.py DEBUG - Make the behavior of chronyd_sync_clock rule more consistent Previous template lineinfile usage will append the configuration even when there is an existing line. Use key_value_pair_in_file to make sure its behavior. (wqian) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix banner_etc_issue_net (wqian) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove enable_dconf_user_profile from ubuntu 22.04 stig profile (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix dconf_gdm_dir on OL9 (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Aling find regextype in file templates (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix regex also for groupownership and permissions (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Update Profile names for RHEL 10 ISM O (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Align Bash remediation to Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Specify change condition to commands (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Title Case in Ansible Tasks names (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Improve Ansible remediation for enable_authselect (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Enable dconf profiles in bash remediations of dconf rules (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - Move remediation logic for enabling dconf profiles to macro (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - Specify regextype for find command (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Bump docker/login-action from 3.1.0 to 3.2.0 (dependabot[bot]) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix regex in file_ownership_audit_configuration (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix issue with python executable (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Add missing variables to ISM O control file (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove 0586 from ISM O control file as it no longer exists (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Create three profiles for ISM O on RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Add OL9 to OS FIPS certified (Armando Acosta) 2025-11-21 15:53:25.405 logging.py DEBUG - Adjust variables in product OL9 (Armando Acosta) 2025-11-21 15:53:25.405 logging.py DEBUG - Adjust jinja conditional in sssd_offline_cred_expiration (Armando Acosta) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove unnecesary rules in the control stig_ol9.yml (Armando Acosta) 2025-11-21 15:53:25.405 logging.py DEBUG - Update is_remote_feed check for Debian 12 (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Update Debian 12 product stability (Matthew Burket) 2025-11-21 15:53:25.405 logging.py DEBUG - Add documentation for --all (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Rename flag --used-rules to --rules (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Improve help text and flag name (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove zero counts if flag --not-used is not provided (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Include to count not used rules and components (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Add flag --not-used (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix banner_etc_issue_net Initialize the banner variable (wqian) 2025-11-21 15:53:25.405 logging.py DEBUG - Add packages header to the test scenarios (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Ensure the directories are set up (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Move find_python_modules calls after find_program (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix ordering issues (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Review and improve readability of output messages (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Group calls to find dependencies (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Move includes to the beginning (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Move some CMake tests to the beginning (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Group similar variables (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Minor updates in comments (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Use correct name of RainerScript (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Improve test scenario (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - openembedded product: add the missing table transforms (Steve Arnold) 2025-11-21 15:53:25.405 logging.py DEBUG - add support for OE product variant "harden" distro from meta-hardening (Steve Arnold) 2025-11-21 15:53:25.405 logging.py DEBUG - scap-security-guide: add Petalinux support (Steve Arnold) 2025-11-21 15:53:25.405 logging.py DEBUG - Update rule description with Rainer script syntax (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Extract regexes to variables (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Extract regexes to variables (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Update rule description with Rainer script syntax (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Bump version after release (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Update rule description with the Rainer script syntax (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Extract regexes to a variable (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Extract legaxy regex (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Add .conf extension to the configuration files (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Extract regex to a Jinja variable (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Add GH Action to check if there is a change in Ansible shell module usage (Milan Lysonek) 2025-11-21 15:53:25.405 logging.py DEBUG - Create the control file stig_ol9.yml (Armando Acosta) 2025-11-21 15:53:25.405 logging.py DEBUG - Ensure a default option for var_accounts_authorized_local_users_regex.var (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Ensure default value in var_removable_partition.var (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Convert list to dict (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Simplify the dictionary for variables (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Extend the Profile class in profile_tool (Marcus Burghardt) 2025-11-21 15:53:25.405 logging.py DEBUG - Mark platform specific test scenarios (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - OCPBUGS-1316: Add missing variable reference to rules (Vincent Shen) 2025-11-21 15:53:25.405 logging.py DEBUG - set variable to interactive (sluetze) 2025-11-21 15:53:25.405 logging.py DEBUG - add identifiers to rules (sluetze) 2025-11-21 15:53:25.405 logging.py DEBUG - Add Description for APP.4.4.A16 (sluetze) 2025-11-21 15:53:25.405 logging.py DEBUG - Skip default profiles (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Update flag help message (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix missing parents levels (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Add new flag to documentation (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Add used rules of component (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Add flag --used-rules (Jan Rodak) 2025-11-21 15:53:25.405 logging.py DEBUG - Exclude talk-server install test scenario as the package is not available (Milan Lysonek) 2025-11-21 15:53:25.405 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - OCP4: Increase retry wait time for OCP parsing action (Vincent Shen) 2025-11-21 15:53:25.405 logging.py DEBUG - --- updated-dependencies: - dependency-name: JamesIves/github-pages-deploy-action dependency-type: direct:production update-type: version-update:semver-patch ... (dependabot[bot]) 2025-11-21 15:53:25.405 logging.py DEBUG - Add Rainer script support to rsyslog_encrypt_offload_defaultnetstreamdriver (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Add Rainer script support to rsyslog_encrypt_offload_actionsendstreamdrivermode (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Add Rainer script support to rsyslog_encrypt_offload_actionsendstreamdriverauthmode (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - Add Rainer script support to rule rsyslog_cron_logging (Jan Černý) 2025-11-21 15:53:25.405 logging.py DEBUG - To fix CMP-2548 (Rutvik) 2025-11-21 15:53:25.405 logging.py DEBUG - Update titles on Ubuntu STIG profiles and remove comments (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - Remove outdated STIG ID references (Miha Purg) 2025-11-21 15:53:25.405 logging.py DEBUG - factorise code in pam_account_password_unix_remember (Alexandre Skrzyniarz) 2025-11-21 15:53:25.405 logging.py DEBUG - rewrite accounts_passwords_pam_faillock_deny rule to use pam_account_password_faillock template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.405 logging.py DEBUG - add an account_password_pam_faillock template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.405 logging.py DEBUG - Add subscription file for ROSA installs (Lance Bragstad) 2025-11-21 15:53:25.406 logging.py DEBUG - Fixed e2e assertions for network policy rule (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - Add whitelist var reference in Rule instruction (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - Update applications/openshift/networking/var_network_policies_namespaces_whitelist_regex.var (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - Update applications/openshift/networking/var_network_policies_namespaces_whitelist_regex.var (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2543: Implement whitelist for configure-network-policies-namespaces (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - OCP4: Fix content datastream workflow (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - Add SCE check for ufw_rate_limit (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Ensure that security_patches_up_to_date is not built with remediations wrt Red Hat products (Vojtech Polasek) 2025-11-21 15:53:25.406 logging.py DEBUG - Add RHEL 10 ISM O Profile (Matthew Burket) 2025-11-21 15:53:25.406 logging.py DEBUG - Add ISM O Control File (Matthew Burket) 2025-11-21 15:53:25.406 logging.py DEBUG - Align Ansible remediation with Bash equivalent (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Remove test scenario for incorrect table (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Insert the rule into ubuntu 2004 stig profile (alanmcanonical) 2025-11-21 15:53:25.406 logging.py DEBUG - Update test scenarios headers (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Include test scenario scripts for set_nftables_table (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Make Bash remediation more precise (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Update rule description with additional information (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Add RHEL 10 excludes for e8 (Matthew Burket) 2025-11-21 15:53:25.406 logging.py DEBUG - Dissolve function upgrade_to_scap_13 (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Move function call (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Remove option to build SCAP 1.2 from compose_ds.py (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Remove option to build SCAP 1.2 data streams (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix ShellCheck problems (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Update chronyd_or_ntpd_set_maxpoll (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Disable remediation for smartcard_pam_enabled on Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add a new line (alanmcanonical) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix Ubuntu tests for sshd_use_approved_kex_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu OVAL for sshd_use_approved_kex_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu bash remediation for sshd_use_approved_kex_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix approved key exchange algorithms for Ubuntu 22.04 STIG (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Address reviewer comments in #11915 (Matthew Burket) 2025-11-21 15:53:25.406 logging.py DEBUG - Check ufw is active Only check whether the ufw is active after ufw service is enable instead of configuring the ufw. (alanmcanonical) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu ansible remediation for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu OVAL for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu ansible remediation for sshd_use_approved_macs_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu bash remediation for sshd_use_approved_macs_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu OVAL for sshd_use_approved_macs_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu bash remediation for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix Ubuntu tests for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu text for sshd_use_approved_ciphers_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Define sshd_approved_ciphers variable in Ubuntu STIG profiles (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - add when conditional to remediation of sssd_enable_pam_service (Vojtech Polasek) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix Ubuntu tests for sshd_use_approved_macs_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify Ubuntu text for sshd_use_approved_macs_ordered_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - add accounts_password_set_max_life_root to unselect_rules_list (Vojtech Polasek) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix zipl_bootmap_is_up_to_date (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Define sshd_approved_macs variable in Ubuntu STIG profiles (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - add rule configure_firewalld_ports to the rhel9 default profile (Vojtech Polasek) 2025-11-21 15:53:25.406 logging.py DEBUG - Add RHEL 10 e8 Profile (Matthew Burket) 2025-11-21 15:53:25.406 logging.py DEBUG - Add e8 control file (Matthew Burket) 2025-11-21 15:53:25.406 logging.py DEBUG - Deselect incompatible rules for the RHEL 10 HIPAA profile (Matthew Burket) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix file-permissions-var-log-kube-audit assertion (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - OCP4: Fix e2e ci assertions (Vincent Shen) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix missing package in tests (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Align audit_xattr rules with Ubuntu 22.04 STIG (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix missing variable for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Achieve consistent file and directory permissions for /var/log/journal and /run/log/journal Set the appropriate permissions to the files and directories (alanmcanonical) 2025-11-21 15:53:25.406 logging.py DEBUG - OCPBUGS-31510: change the analysis to not include ImageStreamTag (Paul Bastide) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix rule name in Ubuntu 22.04 STIG profile (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix issue with regex (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix rule name in Ubuntu 22.04 STIG profile (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add new rule 'install_endpoint_security_software' (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Improve error handling when loading yaml stream (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Disable check for 'auditd_audispd_configure_sufficiently_large_partition' on Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add missing rule package_pam_pwquality to Ubuntu 22.04 CIS profile (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.4 to 2.0.5 (dependabot[bot]) 2025-11-21 15:53:25.406 logging.py DEBUG - Update shared/templates/service_disabled/ansible.template (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Remove STIG ID from unused rule (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add new rule file_permissions_var_log_audit_stig (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Minor updates regarding extra spaces (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Include test scenarios for boolean values (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Support all boolean values in dnf.conf (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Similar style fixes also for service_enabled (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Minor fixes only related to style (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix typos in notes for ocp4 controls (Donald Hunter) 2025-11-21 15:53:25.406 logging.py DEBUG - Add rule file_permissions_etc_audit_rules to Ubuntu 22.04 STIG profile (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add rule file_permissions_etc_audit_rules (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Update products stability data (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix HTML tags in rule description (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Add new test scenarios (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix Ansible in chronyd_or_ntpd_set_maxpoll (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Define path for chrony.d configuration directory (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Prioritize chronyd_specify_remote_server (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix rule dconf_gnome_banner_enabled on Ubuntu (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix ubuntu tests for dconf_gnome_banner_enabled (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify rule file_owner_system_journal (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - make Ansible remediation of zipl_bootmap_is_up_to_date available in all products (Vojtech Polasek) 2025-11-21 15:53:25.406 logging.py DEBUG - Modify rule file_groupowner_system_journal (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Adjust text and typos (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix tests for sssd_offline_cred_expiration for Ubuntu (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add rule file_permissions_journalctl (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Include test scenario for multiple partitions (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Requirement 3.7 is not applicable (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Requirement 3.6 is inherently met (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Requirement 3.5 is partially applicable (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Requirement 3.4 is not applicable (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - Add new rules package_ntp_removed, package_timesyncd_removed (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add rule file_groupowner_journalctl (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Requirement 3.3 is not applicable (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - Enable dconf gdm/user profiles in Ubuntu profiles (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Remove unused data definitions (Marcus Burghardt) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Requirement 3.2 is not applicable (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - CMP-2455: Requirement 3.1 isnot applicable (Watson Sato) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix accounts_umask_etc_bashrc (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix package name for libpam-pkcs11 on Ubuntu (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Fix 11910: re-allow '/bin/false' as valid login shell on Ubuntu and SLES (Marco Fortina) 2025-11-21 15:53:25.406 logging.py DEBUG - Populate _rule_id virtual template parameter in Automatus (Jan Černý) 2025-11-21 15:53:25.406 logging.py DEBUG - Add new rule audit_rules_var_log_journal (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Add rule dir_groupowner_system_journal (Miha Purg) 2025-11-21 15:53:25.406 logging.py DEBUG - Update shared/templates/audit_rules_usergroup_modification/bash.template (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - Update shared/templates/audit_rules_privileged_commands/bash.template (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - Update shared/templates/accounts_password/bash.template (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - Update shared/templates/accounts_password/ansible.template (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_algorithm_logindefs/bash/shared.sh (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/bash/shared.sh (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/bash/shared.sh (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/bash/shared.sh (Alexandre SKRZYNIARZ) 2025-11-21 15:53:25.406 logging.py DEBUG - update debian12 anssi high profile (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update debian12 anssi enhanced profile (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - enable bash remediation for debian12 in audit_rules_usergroup_modification (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - activate bash remediation for debian12 in audit_rules_privileged_commands_rmmod (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - activate bash remediation for debian12 in audit_rules_privileged_commands_modprobe (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - activate bash remediation for debian12 in audit_rules_privileged_commands_insmod (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update debian12 anssi intermediary profile (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - add audit_rules_privileged_commands_sudo for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update anssi bp28 minimal profile for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update package_pam_pwquality_installed for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update set_password_hashing_algorithm_logindefs for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update accounts_password templates for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update bash_enable_pam_faillock_directly_in_pam_files macro for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - add oval_feed_url in debian 12 product and update security_patches_up_to_date rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.406 logging.py DEBUG - update accounts_password_pam_unix_rounds_password_auth for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - update accounts_password_set_max_life_root for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - update accounts_password_pam_retry rule for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - update accounts_passwords_pam_faillock_unlock_time rule for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - update accounts_passwords_pam_faillock_interval rule for Debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - update accounts_passwords_pam_faillock_deny for debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - update accounts_password_pam_unix_remember for Debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - update package_ypbind_removed rule for debian12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.407 logging.py DEBUG - Add reference_type and product to control schema (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - JSON files should be 4 spaces (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Recollect facts in mount_option_nodev_nonroot_local_partitions (Jan Černý) 2025-11-21 15:53:25.407 logging.py DEBUG - Add titles for OSPP control file (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Improve macros readability and description (Marcus Burghardt) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix text in rule file_groupowner_ovs_conf_db_lock (Watson Sato) 2025-11-21 15:53:25.407 logging.py DEBUG - OCP Update variable filter to consider go_template (Vincent Shen) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix pam files used in macro bash_pam_faillock_parameter_value Remove unusued file /etc/pam.d/password-auth Fix tests (alanmcanonical) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix failing test on Ubuntu (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Redefine ssh service name for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Redefine gdm package name for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Redefine /var/log group owner for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Redefine apparmor package name for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Redefine opensc package name for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Redefine pam_pkcs11 package name for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Redefine vlock package name for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix EOF (alanmcanonical) 2025-11-21 15:53:25.407 logging.py DEBUG - Add RHEL 10 HIPAA profile (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Initial HIPAA Control File (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix errors in utils/build_control_from_reference.py (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix Component Mapping Issue for Audit Rule (alanmcanonical) 2025-11-21 15:53:25.407 logging.py DEBUG - Add rule file_group_ownership_var_log_audit_stig (alanmcanonical) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix utils/build_control_from_reference.py mypy in CI (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Update DISA STIG manual for SLE15 V1R13 (svet-se) 2025-11-21 15:53:25.407 logging.py DEBUG - Update SLE15 STIG to V1R13 (svet-se) 2025-11-21 15:53:25.407 logging.py DEBUG - Apply suggestions from review in #11916. (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Add Ubuntu tests for auditd_audispd_configure_remote_server (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix case-sensitive regex in auditd_audispd_configure_remote_server (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix audisp config path and package name on Ubuntu (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Add rule file_owner_journalctl (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Revert changes to no_empty_passwords for Ubuntu (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix pwquality package name for Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Revert PR 11816 (Marcus Burghardt) 2025-11-21 15:53:25.407 logging.py DEBUG - Add RHEL 10 OSPP Draft Profile (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Initial OSPP Control File (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Add docs for build_control_from_reference.py (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Add tests for build_control_from_reference.py (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Add script to create a control from a given reference (Matthew Burket) 2025-11-21 15:53:25.407 logging.py DEBUG - Add rule dir_owner_system_journal (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix kdump service name on Ubuntu 22.04 (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Add rule set_password_hashing_algorithm_systemauth to Ubuntu STIG profile (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix rule set_password_hashing_algorithm_systemauth on Ubuntu (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix value syntax for rule dconf_gnome_disable_ctrlaltdel_reboot (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Fix rule enable_dconf_user_profile on Ubuntu (Miha Purg) 2025-11-21 15:53:25.407 logging.py DEBUG - Add tests for enable_dconf_user_profiles (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Allow using custom key in audit_rules_watch template (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Add additional criteria to audit_rules_watch template (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Add Ubuntu tests for set_password_hashing_algorithm_systemauth (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix OVAL for rule apt_conf_disallow_unauthenticated (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Add tests for rule apt_conf_disallow_unauthenticated (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix dirs in sysctl template for Ubuntu 20.04/22.04 (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Add and modify rules file/dir_permissions_system_journal (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Bump paambaati/codeclimate-action from 5.0.0 to 6.0.0 (dependabot[bot]) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix ansible lint for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.426 logging.py DEBUG - Add rhcos4-high-4.16 assertion file (Vincent Shen) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix #11902 (Marco Fortina) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix test for template file_groupowner (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix test for template file_owner (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix test for template file_permissions (Miha Purg) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix CI result (Vincent Shen) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix #11898 issue (Marco Fortina) 2025-11-21 15:53:25.426 logging.py DEBUG - Add ol8 to FIPS certified oVAL list (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Update ol8 pci-dss profile (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Add tests to network_nmcli_permissions (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Add ansible to ol9 in network_nmcli_permissions (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Update platform for ol in timer_logrotate_enabled (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Add tests to ol in chronyd_run_as_chrony_user (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Add ansible to ol in chronyd_run_as_chrony_user (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Update ol9 pci-dss profile (Edgar Aguilar) 2025-11-21 15:53:25.426 logging.py DEBUG - Fix #11895 issue (Marco Fortina) 2025-11-21 15:53:25.426 logging.py DEBUG - RHCOS add assertion files (Vincent Shen) 2025-11-21 15:53:25.426 logging.py DEBUG - OCP remove redudent result_after_remediation (Vincent Shen) 2025-11-21 15:53:25.426 logging.py DEBUG - Add ocp4 assertion files for ocp4.15, ocp4.15 and ocp4.16 (Vincent Shen) 2025-11-21 15:53:25.426 logging.py DEBUG - Add 4.14 assertion files (Vincent Shen) 2025-11-21 15:53:25.427 logging.py DEBUG - Add more 4.13 assertion files (Vincent Shen) 2025-11-21 15:53:25.427 logging.py DEBUG - Cleanup newlines and rhcos assertion file name (Lance Bragstad) 2025-11-21 15:53:25.427 logging.py DEBUG - OCP4: use new assertion formate for OCP CI (Vincent Shen) 2025-11-21 15:53:25.427 logging.py DEBUG - Align wireless_disable_interfaces with Ubuntu 22.04 STIG (Miha Purg) 2025-11-21 15:53:25.427 logging.py DEBUG - Add docs how to build thin ds (Jan Rodak) 2025-11-21 15:53:25.427 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Update R38 notes (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Restrict the list of accepted shells to avoid user login (Marcus Burghardt) 2025-11-21 15:53:25.427 logging.py DEBUG - Add back rules once shipped in RHCOS4 Benchmark (Watson Sato) 2025-11-21 15:53:25.427 logging.py DEBUG - Return condition to test firewalld service state (Marcus Burghardt) 2025-11-21 15:53:25.427 logging.py DEBUG - Include test scenarios for service state (Marcus Burghardt) 2025-11-21 15:53:25.427 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (dependabot[bot]) 2025-11-21 15:53:25.427 logging.py DEBUG - Add RHEL 10 to SRG Mapping Table Action (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix stricter permissions test for file_permission (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add RHEL9 CCE for sudo_dedicated_group (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Move R38 to automated status (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Allow sudo_dedicated_group in RHEL9 and RHEL10 ANSSI profiles (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Don't allow stricter permissions on file_permissions_sudo (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Try 4110 for file_permissions_sudo (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - OCP4: Add container_security_operator_exists to PCIDSS profile (Vincent Shen) 2025-11-21 15:53:25.427 logging.py DEBUG - update profile stability test data (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - set the var_user_initialization_files_regex to all_dotfiles (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - update list of contributors before releasing 0.1.73 (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix content_diff when a rule is removed (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Align rule encrypt_partitions with Ubuntu 22.04 STIG (Miha Purg) 2025-11-21 15:53:25.427 logging.py DEBUG - Add variables from profiles (Jan Rodak) 2025-11-21 15:53:25.427 logging.py DEBUG - Update stig version in ol8 profiles (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Update OL8 STIG reference (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Align chronyd_sync_clock to Ubuntu 22.04 STIG (Miha Purg) 2025-11-21 15:53:25.427 logging.py DEBUG - exclude /static-checks/diff TMT tests (Jiri Jaburek) 2025-11-21 15:53:25.427 logging.py DEBUG - Update RHEL 9 STIG to V1R3 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Remove RHEL-09-255070 from RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add initial RHEL 10 PCI DSS profile (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add unit test for get_not_included_components() (Jan Rodak) 2025-11-21 15:53:25.427 logging.py DEBUG - Adding variable filtering (Jan Rodak) 2025-11-21 15:53:25.427 logging.py DEBUG - Add XML validation test (Jan Rodak) 2025-11-21 15:53:25.427 logging.py DEBUG - Update RHEL 8 STIG to V1R14 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix Bash remediation of firewalld-based rules in offline mode (Evgeny Kolesnikov) 2025-11-21 15:53:25.427 logging.py DEBUG - Add assertion file for RHCOS4 E8 profile tests on 4.13 (Lance Bragstad) 2025-11-21 15:53:25.427 logging.py DEBUG - remove adjusts from tmt-plans (Jiri Jaburek) 2025-11-21 15:53:25.427 logging.py DEBUG - disable CentOS Stream Testing Farm tests for ccn_advanced (Jiri Jaburek) 2025-11-21 15:53:25.427 logging.py DEBUG - CMP-2454: Mark Requirement 2.3 as not applicable (Watson Sato) 2025-11-21 15:53:25.427 logging.py DEBUG - CMP-2454: Implement and justify Requirement 2.2 (Watson Sato) 2025-11-21 15:53:25.427 logging.py DEBUG - CMP-2454: Mark Requirement 2.1 as not applicable (Watson Sato) 2025-11-21 15:53:25.427 logging.py DEBUG - add TMT plans for all RHEL / CentOS Stream profiles (Jiri Jaburek) 2025-11-21 15:53:25.427 logging.py DEBUG - remove TMT plan summaries (Jiri Jaburek) 2025-11-21 15:53:25.427 logging.py DEBUG - split out TMT plans to separate Packit jobs (Jiri Jaburek) 2025-11-21 15:53:25.427 logging.py DEBUG - Align OVN e2e results with fixed platform check (Watson Sato) 2025-11-21 15:53:25.427 logging.py DEBUG - Adjust OCP OVN platform check (Watson Sato) 2025-11-21 15:53:25.427 logging.py DEBUG - update profile stability tests (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - add rules for APP.4.4.A15 (sluetze) 2025-11-21 15:53:25.427 logging.py DEBUG - Improve title of CCN profiles for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.427 logging.py DEBUG - set instances of var_sshd_set_keepalive to 1 in RHEL 8 and 9 profiles (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix SCE check for iptables_open_ports (Miha Purg) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix SCE checks for iptables_loopback_traffic (Miha Purg) 2025-11-21 15:53:25.427 logging.py DEBUG - Move auditing group (Jan Černý) 2025-11-21 15:53:25.427 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.3 to 6.0.4 (dependabot[bot]) 2025-11-21 15:53:25.427 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.5.0 to 4.6.0 (dependabot[bot]) 2025-11-21 15:53:25.427 logging.py DEBUG - ol9 remove xinetd rules (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - ol9 anssi add kernel_config rules (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Update ol9 ospp profile (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - add autoapplyremediation rule for APP.4.4.A13 (sluetze) 2025-11-21 15:53:25.427 logging.py DEBUG - fix regex (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - Align var_accounts_tmout to Ubuntu 22.04 STIG V1R1 (Miha Purg) 2025-11-21 15:53:25.427 logging.py DEBUG - add test scenario (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix broken exception message (Jan Černý) 2025-11-21 15:53:25.427 logging.py DEBUG - accounts_umask_etc_bashrc: modify regex to capture also instances of umask which are not at the begining of line (Vojtech Polasek) 2025-11-21 15:53:25.427 logging.py DEBUG - ol8 hipaa remove sshd_use_priv_separation (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - ol8 e8 add authselect rule (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - ol8 cjis delete password_minlen_login_defs var (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - ol8 anssi add kernel_config rules (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Update tests in auditd_name_format (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - ol8 stig update var_auditd_name_format (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Add enable_authselect to ol8 stig (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Update rule to cover OL08-00-010100 (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Update rule for OL08-00-010200 (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Update rule to cover OL08-00-030122 (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - ol8 stig remove rule (Edgar Aguilar) 2025-11-21 15:53:25.427 logging.py DEBUG - Initial draft version of STIG V1R1 profile for Ubuntu 22.04 LTS (Miha Purg) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix rule mount_option_nodev_nonroot_local_partitions Bash remediation (Evgeny Kolesnikov) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix a case where the motd check would consider an empty file valid. (Gabriel Becker) 2025-11-21 15:53:25.427 logging.py DEBUG - Remove OVAL version restrictions from auditd_audispd_configure_sufficiently_large_partition (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Set SRG-OS-000480-GPOS-00230 to does not meet (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add rmmod and modprobe auditing to SRG-OS-000477-GPOS-00222 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add audit_rules_privileged_commands_rmmod to SRG-OS-000471-GPOS-00216 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add AIDE to SRG-OS-000445-GPOS-00199 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Ensure that ensure_oracle_gpgkey_installed is only for OL products in srg_gpos (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Move all variables for SRG-OS-GPOS-000343-00134 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add accounts_tmout to SRG-OS-000279-GPOS-00109 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Clean up title for SRG-OS-000276-GPOS-00106 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Update title for wireless_disable_interfaces (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Remove extraous text from SRG-OS-000228-GPOS-00088 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Update SRG-OS-000191-GPOS-00080 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Clean up SRG-OS-000163-GPOS-00072 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Fix SRG-OS-000095-GPOS-00049 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add group_unique to SRG-OS-000-121-GPOS-00062 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Clean up the ocil in group_unique_id (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Move configure_opensc_card_drivers around in SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add firewalld_sshd_port_enabled to SRG-OS-000096-GPOS-00050 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Update SRG-OS-000095-GPOS-00049 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Move SRG-OS-000080-GPOS-00048 to use account_temp_expire_date (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add tftp and telnet-server removed to SRG-OS-000074-GPOS-00042 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Remove atm and cramfs from SRG-OS-000095-GPOS-00049 (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Update SSH version to 9.6 in SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Pull account_emergency_expire_date from SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.427 logging.py DEBUG - Add status to does not meet from SRG-OS-000191-GPOS-00080 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add sudo and su auditing to SRG-OS-000064-GPOS-00033 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Remove account_unique_id from SRG-OS-000042-GPOS-00020 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Update SRG-OS-000037-GPOS-00015 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add configure_tmux_lock_keybinding to SRG-OS-000030-GPOS-00011 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Remove account_emergency_expire_date from SRG-OS-000002-GPOS-00002 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add Inital RHEL 10 STIG Profile (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - add rules for app.4.4.a13 section1 (sluetze) 2025-11-21 15:53:25.428 logging.py DEBUG - add namespace parameter for cluster-test (sluetze) 2025-11-21 15:53:25.428 logging.py DEBUG - Rule had incorrect CRD reference rule.yml (Paul Bastide) 2025-11-21 15:53:25.428 logging.py DEBUG - Fix super overcomplicated regex (Marcus Burghardt) 2025-11-21 15:53:25.428 logging.py DEBUG - Include test scenario for quoted path (Marcus Burghardt) 2025-11-21 15:53:25.428 logging.py DEBUG - Update OCP test assertions (Lance Bragstad) 2025-11-21 15:53:25.428 logging.py DEBUG - Fix dconf package name for Ubuntu (Miha Purg) 2025-11-21 15:53:25.428 logging.py DEBUG - Removed the RHEL <8.5 restriction from sshd_set_idle_timeout (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Update task to check if line is already present (Marcus Burghardt) 2025-11-21 15:53:25.428 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 (dependabot[bot]) 2025-11-21 15:53:25.428 logging.py DEBUG - Add forgotten definition used in service disabled (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Replace package based platform limitation from platform service (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Make package installation for iptables and nftables mutually exclusive (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Set the requires to sshd_set_keepalive on sshd_set_idle_timeout (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Prevent removing existing entries (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - exclude the html-links test from /static-checks (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - sort lists of components after removing of excluded ones (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - ensure that before profile is output as XCCDF, it does not include any unwanted components (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - add function profile.remove_components_not_included (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - generate TMT HTML reports when running under Testing Farm (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - Improve regex to ignore files not used for logs (Marcus Burghardt) 2025-11-21 15:53:25.428 logging.py DEBUG - Include test scenario for exceptions (Marcus Burghardt) 2025-11-21 15:53:25.428 logging.py DEBUG - remove fedora-latest-stable from Packit tests (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - put .fmf under tests/tmt-plans to avoid a long prefix (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - rename tests/fmf-plans/ to tests/tmt-plans/ (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - consolidate all fmf-plans under main.fmf (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - Stop using FQMN for ini_file (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - replace fmf-plans/base with Contest's /static-checks (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - Prevent matching entries in other sections than [sssd] (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Add test scenario for conf.d directory (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Fix unused variables (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Improve regex (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Add rule title to Ansible Tasks (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - replace dead links for the chronyd project (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - Use a filtered benchmark for multiple profiles (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Get a filtered benchmark for multiple profiles (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Update references for product stability (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Drop retired PCI-DSS 3.2.1 for sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Platform package override for passwd in SUSE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Add RHEL 10 install commands to Automatus (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add Ansible remediation to sssd_enable_pam_services (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Add PyGitHub to test-requirements.txt (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Defined notes and rules for APP.4.4.A7 (sluetze) 2025-11-21 15:53:25.428 logging.py DEBUG - Defined notes and rules for control BSI APP.4.4.A6 (sluetze) 2025-11-21 15:53:25.428 logging.py DEBUG - RHEL 8: unify documentation within kickstart files (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - RHEL9: unify documentation within kickstart files (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - Update ANSSI R38 Status (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Update SMEs for RHEL 10 ANSSI (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - update cryptopolicy used in CUI profile to fips (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - Fix for OVAL in grub2_bootloader_argument on Ubuntu (Miha Purg) 2025-11-21 15:53:25.428 logging.py DEBUG - Add Ubuntu tests for grub2_bootloader_argument template (Miha Purg) 2025-11-21 15:53:25.428 logging.py DEBUG - Fix ANSSI Ansible fmf test plan (Milan Lysonek) 2025-11-21 15:53:25.428 logging.py DEBUG - OCPBUGS-31510: change the analysis to not include ImageStreamTag (Paul Bastide) 2025-11-21 15:53:25.428 logging.py DEBUG - Update SSHD Line in File Template for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add RHEL 10 ANSSI Profiles (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Update requirement status (Marcus Burghardt) 2025-11-21 15:53:25.428 logging.py DEBUG - use failed_when:false for Ansible register: checks (Jiri Jaburek) 2025-11-21 15:53:25.428 logging.py DEBUG - remove Bash and Ansible conditionals from the nfs_mount_defined CPE (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - Fix ansible_ini_file_set (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - OCP4: Add rule to check ACS sensor deployed (Vincent Shen) 2025-11-21 15:53:25.428 logging.py DEBUG - OCP4: Drop not-arch from file_permissions_cni_conf (Vincent Shen) 2025-11-21 15:53:25.428 logging.py DEBUG - Add Ansible Remediations (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Do not require existence of /var/tmp/tmp-inst (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Add ignore_spaces to Ansible remediation for networkmanager_dns_mode (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add workflow for thin ds test (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Add test for thin ds (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - OCP4: Fix rules with both platform and platforms (Vincent Shen) 2025-11-21 15:53:25.428 logging.py DEBUG - drop no longer applicable test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - add platforms to relevant rules (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - stop checking for nonexistence of nfs mount within the template oval for mount_option_remote_filesystems (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - add new applicability platform nfs_mount_defined (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - Refined tests for new OpenShift rules based on review: accounts_no_(cluster)rolebindings_default_service_account (Benjamin Ruland) 2025-11-21 15:53:25.428 logging.py DEBUG - Clean up check_eof (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add root user to interactive users (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Add tests for utils/ansible_playbook_to_role.py (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - remove incorrect closing bracket from the Grubby argument (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - Make sure to gather package facts in context of aide_check_audit_tools rule (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Add var_accounts_tmout variable definition for PCI profile (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Fix ansible remediations run in check mode (teacup-on-rockingchair) 2025-11-21 15:53:25.428 logging.py DEBUG - Add docs for ./utils/ansible_playbook_to_role.py (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Clean up utils/ansible_playbook_to_role.py (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Improve args for utils/ansible_playbook_to_role.py (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Improve import error messages in utils/ansible_playbook_to_role.py (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Update profile stability for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add RHEL 9 CCE to configure_tmux_lock_keybinding (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add all RHELs to the tests for configure_tmux_lock_keybinding (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add configure_tmux_lock_keybinding back to RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Align networkmanager_dns_mode to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - configure correct package name for service_sssd_enabled rule (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - CMP-2471: Disable rules on s390x (Vincent Shen) 2025-11-21 15:53:25.428 logging.py DEBUG - Enforce explicit setting in password-auth (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Enforce explicit setting in system-auth (Jan Černý) 2025-11-21 15:53:25.428 logging.py DEBUG - Update links for Ansible role (Marcus Burghardt) 2025-11-21 15:53:25.428 logging.py DEBUG - Chnage metric to count of profile insted count of rules (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - update profile stability test (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - use the new variable in RHEL 9 STIG profiles (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - add new xccdf variable to sshd_approved_ciphers relevant to RHEL 9 STIG (Vojtech Polasek) 2025-11-21 15:53:25.428 logging.py DEBUG - OCPBUGS-13589: Remove sysctl file check rule from STIG profile (Lance Bragstad) 2025-11-21 15:53:25.428 logging.py DEBUG - Move to use main branch and 1.4.0 for building on Windows (Matthew Burket) 2025-11-21 15:53:25.428 logging.py DEBUG - Add documentation (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Implement product filter (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Add parameter products to most used components sub command (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Add parameter products to most used rules sub command (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Use defaultdict for results (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Reduce duplication of output generation code (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - Process products that support components (Jan Rodak) 2025-11-21 15:53:25.428 logging.py DEBUG - trivial: Update link to audit profile documentation link (Lance Bragstad) 2025-11-21 15:53:25.428 logging.py DEBUG - CMP-2375: Implement a new rule for checking audit logging is enabled (Lance Bragstad) 2025-11-21 15:53:25.429 logging.py DEBUG - Add documentation (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Revert "Fix grep for fedora and sle15" (Ross Murphy) 2025-11-21 15:53:25.429 logging.py DEBUG - Implement most used components command (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Rename sort function (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Create command line entry point (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Disallow spaces in SSSD certificate_verification option (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix grep for fedora and sle15 (Ross Murphy) 2025-11-21 15:53:25.429 logging.py DEBUG - Stabilize resolved profiles (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix handling of grub.d configs in grub2_bootloader_argument (Miha Purg) 2025-11-21 15:53:25.429 logging.py DEBUG - CMP-2453: Update Requirement 1.5 (Lance Bragstad) 2025-11-21 15:53:25.429 logging.py DEBUG - CMP-2453: Update Requirement 1.4 (Lance Bragstad) 2025-11-21 15:53:25.429 logging.py DEBUG - Add aide_build_database to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Add aide_build_database to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - CMP-2453: Update Requirement 1.3 (Lance Bragstad) 2025-11-21 15:53:25.429 logging.py DEBUG - CMP-2453: Update Requirement 1.2 (Lance Bragstad) 2025-11-21 15:53:25.429 logging.py DEBUG - CMP-2453: Mark Requirement 1.1 as not applicable (Lance Bragstad) 2025-11-21 15:53:25.429 logging.py DEBUG - Add rule audit_rules_networkconfig_modification_network_scripts (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - Add new template audit_rules_watch (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - OCP4: Add workflow to test ocp content (Vincent Shen) 2025-11-21 15:53:25.429 logging.py DEBUG - Update references for stig_gui profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.429 logging.py DEBUG - Unselect sysctl_user_max_user_namespaces for stig_gui (Marcus Burghardt) 2025-11-21 15:53:25.429 logging.py DEBUG - add warning to service_sssd_enabled (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - fix assignment to components (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - consider nss-pam-ldapd in requirement r67 (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add platform to ldap_client_tls_cacertpath (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add rhel9 cces to newly added rules (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - change the OVAL for sssd-ldap platform (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - extend notes and add rules for ANSSI R67 requirement related to RHEL systems (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - Update 01-general.jinja (CoreyCook8) 2025-11-21 15:53:25.429 logging.py DEBUG - Delete linux_os/guide/system/permissions/mounting/service_autofs_disabled/kubernetes directory (CoreyCook8) 2025-11-21 15:53:25.429 logging.py DEBUG - Delete linux_os/guide/system/accounts/accounts-physical/service_debug-shell_disabled/kubernetes directory (CoreyCook8) 2025-11-21 15:53:25.429 logging.py DEBUG - Add configure_bind_crypto_policy to bind component (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Update profile stability for RHEL-09-653050 (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Add bind page applicability to configure_bind_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Add bind package applicability (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - tests/fmf-plans: Match end of string in test selection (Milan Lysonek) 2025-11-21 15:53:25.429 logging.py DEBUG - Move common discover and execute plan parts to main.fmf plan (Milan Lysonek) 2025-11-21 15:53:25.429 logging.py DEBUG - Add base fmf test plan with configurations (Milan Lysonek) 2025-11-21 15:53:25.429 logging.py DEBUG - Run Contest test instead of Fedora project beakerlib tests (Milan Lysonek) 2025-11-21 15:53:25.429 logging.py DEBUG - Adjust action for auditd_data_retention_admin_space_left_action on RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Defined notes and rules for control BSI APP.4.4.A5 (sluetze) 2025-11-21 15:53:25.429 logging.py DEBUG - add manual etcd backup rule (sluetze) 2025-11-21 15:53:25.429 logging.py DEBUG - Addes some new tests (rchikov) 2025-11-21 15:53:25.429 logging.py DEBUG - Align securetty_root_login_console_only remediations with OVAL/rule description (Milan Lysonek) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix OVAL check and remediations to work also with the deny=NUMBER setting (teacup-on-rockingchair) 2025-11-21 15:53:25.429 logging.py DEBUG - ubuntu2204: cis_level1_workstation: Add missing !package_cups_removed (Eduardo Barretto) 2025-11-21 15:53:25.429 logging.py DEBUG - Remove cnss from product stability (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Remove CNSS reference from SSG_REF_URIS (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix AIDE PATH Product Stability of OpenSUSE (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Generate formatted derivates (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Add CPE OVAL for new CPE platforms (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Create functions to insert new CPE OVAL definitions (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Create getter for linked CPE OVAL (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Use namesapces from constants (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Turn off the reference element in CPE OVAL (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Reduce duplication (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix CPE OVAL references (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Add CPE dict and CPE OVAL to final thin DS (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Add generation of CPE dict and CPE OVAL for thin DS (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix bug when parameter is not present (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Add filtration of CPE to generation of CPE dict XML (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Add filtration of OVAL document (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Get used IDs of CPE OVAL definitions (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Disable generation of not used cpe platform (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - Get used and not used cpe platforms (Jan Rodak) 2025-11-21 15:53:25.429 logging.py DEBUG - use grep in if statement for crypto policy remediations (Ross Murphy) 2025-11-21 15:53:25.429 logging.py DEBUG - use grep in if statement for crypto policy remediations (Ross Murphy) 2025-11-21 15:53:25.429 logging.py DEBUG - Update shared.xml (Rumen) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix of bugs from tests (rchikov) 2025-11-21 15:53:25.429 logging.py DEBUG - Bugs fixes (rchikov) 2025-11-21 15:53:25.429 logging.py DEBUG - trivial: fix linting issue (Lance Bragstad) 2025-11-21 15:53:25.429 logging.py DEBUG - Bump docker/login-action from 3.0.0 to 3.1.0 (dependabot[bot]) 2025-11-21 15:53:25.429 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: tests: Make tests work (Eduardo Barretto) 2025-11-21 15:53:25.429 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Fix OVAL logic (Eduardo Barretto) 2025-11-21 15:53:25.429 logging.py DEBUG - Correction in oval part ensure_gpgcheck_globally_activated (rchikov) 2025-11-21 15:53:25.429 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.1 to 6.0.2 (dependabot[bot]) 2025-11-21 15:53:25.429 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.3 to 2.0.4 (dependabot[bot]) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix SCE finding XPath to allow nesting with OCILs (Alexander Scheel) 2025-11-21 15:53:25.429 logging.py DEBUG - Modified definition of path to aide in opensuse (rchikov) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix Ansible systemd module name (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - Update notes in ANSSI R3 (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - Make Blueprint for service_disabled template to mask services (Evgeny Kolesnikov) 2025-11-21 15:53:25.429 logging.py DEBUG - mention the relevant log file in the message (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2025-11-21 15:53:25.429 logging.py DEBUG - Apply suggestions from code review (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - pam_options ansible template dry-run fix (teacup-on-rockingchair) 2025-11-21 15:53:25.429 logging.py DEBUG - accounts_passwords_pam_tally2_deny_root fix (teacup-on-rockingchair) 2025-11-21 15:53:25.429 logging.py DEBUG - Bump softprops/action-gh-release from 2.0.2 to 2.0.3 (dependabot[bot]) 2025-11-21 15:53:25.429 logging.py DEBUG - Update RHEL 9 SCAP references to V1R1 (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix bash remediation for sysctl template (Miha Purg) 2025-11-21 15:53:25.429 logging.py DEBUG - extend automatus error message (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - update requirement R69 in ANSSI control file (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add test scenarios to rule no_hesiod_in_nsswitch (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add oval to rule no_hesiod_in_nsswitch (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add new rule no_hesiod_in_nsswitch (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add tests for rule no_nis_in_nsswitch (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add oval check for no_nis_in_nsswitch (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - add rule no_nis_in_nsswitch (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - Add ocil prefix to the macro name (Jan Černý) 2025-11-21 15:53:25.429 logging.py DEBUG - Correction in SLE15 stig profile file (rchikov) 2025-11-21 15:53:25.429 logging.py DEBUG - Bump softprops/action-gh-release from 0.1.15 to 2.0.2 (dependabot[bot]) 2025-11-21 15:53:25.429 logging.py DEBUG - add the components test to quick tests (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - gen_rendered_policiy_index.py: read compiled control files, not the original ones (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - store the "policy" key in complied control files (Vojtech Polasek) 2025-11-21 15:53:25.429 logging.py DEBUG - Fix deperation warning in ssg/build_derivatives.py (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Corrections in aide_periodic_cron_checking and aide_scan_notification - SUSE products (rchikov) 2025-11-21 15:53:25.429 logging.py DEBUG - Update bootlaoder STIG content (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Update sysctl_user_max_user_namespaces (Matthew Burket) 2025-11-21 15:53:25.429 logging.py DEBUG - Update SELinux Section STIG Content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Update Logging Section STIG Content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Update Network Section STIG Content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Update permissions group STIG content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Update Audit STIG Content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Update product stability data: remaining products (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Update product_stability data: ocp4 and rhcos4 (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Add container-platform SRG URI (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - OCP4 and RHCOS4 have their own STIGID URI (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Remove outdated comments (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Rename function load_oval to process_cpe_oval (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Pass to functions specific arguments instead args (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Remove identifier prefix argument (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Rename shorthandfile to xccdfFile (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Use base name of file (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Use format string (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Remove unused ID checks and translations (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Translation of IDs to valid OVAL IDs (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Decompose CPE OVAL and CPE dictionary generation (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Use OVAL object model to generate linked CPE OVAL (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Format argument parsing (Jan Rodak) 2025-11-21 15:53:25.430 logging.py DEBUG - Stop requiring the directory (Jan Černý) 2025-11-21 15:53:25.430 logging.py DEBUG - Add docs for the systemd_mount_enabled template (Jan Černý) 2025-11-21 15:53:25.430 logging.py DEBUG - Create new rule systemd_tmp_mount_enabled (Jan Černý) 2025-11-21 15:53:25.430 logging.py DEBUG - Add SLE cce-ids to newly added mcaffee rules (teacup-on-rockingchair) 2025-11-21 15:53:25.430 logging.py DEBUG - Update profile stability for pci-dss (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Add package_firewalld_installed to PCI-DSS profile (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - OCPBUGS-28797: Clarify banner instructions for RHCOS nodes (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - Update Services STIG Content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Update Software STIG Content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Update Accounts STIG Content (Matthew Burket) 2025-11-21 15:53:25.430 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A1 (sluetze) 2025-11-21 15:53:25.430 logging.py DEBUG - add manual rule to check application to namespace assignment (sluetze) 2025-11-21 15:53:25.430 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A3 (sluetze) 2025-11-21 15:53:25.430 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A2 (sluetze) 2025-11-21 15:53:25.430 logging.py DEBUG - Small changes in the ansible part of the template service_disabled (rchikov) 2025-11-21 15:53:25.430 logging.py DEBUG - Create new template systemd_mount_enabled (Jan Černý) 2025-11-21 15:53:25.430 logging.py DEBUG - Updates in ansible part from service_dsabled template (rchikov) 2025-11-21 15:53:25.430 logging.py DEBUG - Be more strict on the captured exception (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-000820 status is manual (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-000770 status is manual (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-000690 is still pending (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-000500 status is manual (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-000440 status is automated (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-00430 and CNTR-OS-00460 are not applicable (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-000390 status is manual (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - CNTR-OS-000380 status is manual (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - OCP4 STIG: Add spacing between the controls (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Move SRG rules from control to the ocp4 profile (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Do not use raise from (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Refactor functions too complex for code climate (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Manually add rules to keep rule selection stable (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Avoid adding duplicate rules to a control (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Identify and avoid duplicate references (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Switch to the stig_ocp4 control file (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Add a second product in the STIG OCP4 (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Add generated stig control file for OCP4 (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Leverage reference assingment from control file (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Grab the STIG version from the Benchmark (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Parse an SRG control file for matching rules (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Move creation of env_yaml to main func (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - SRG-APP-000516-CTR-001325 is not applicable (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Add refence file for OCP4 STIG V1R1 (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Simplify output of ip link show command (Marcus Burghardt) 2025-11-21 15:53:25.430 logging.py DEBUG - Merge Rule References for BSI profile (Benjamin Ruland) 2025-11-21 15:53:25.430 logging.py DEBUG - New Rules for BSI APP.4.4.A9 and APP.4.4.A11 added (Benjamin Ruland) 2025-11-21 15:53:25.430 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A8 to A11 (Benjamin Ruland) 2025-11-21 15:53:25.430 logging.py DEBUG - Update SLES Stig IDs (teacup-on-rockingchair) 2025-11-21 15:53:25.430 logging.py DEBUG - Enable ansible remediation in SLE for dconf_gnome_session_idle_user_locks (teacup-on-rockingchair) 2025-11-21 15:53:25.430 logging.py DEBUG - Fix tests packages header (teacup-on-rockingchair) 2025-11-21 15:53:25.430 logging.py DEBUG - fix rule not applicable for rules checking login-defs (Stephen L Arnold) 2025-11-21 15:53:25.430 logging.py DEBUG - swap bash umask rules from default to align with minimal image installs (Steve Arnold) 2025-11-21 15:53:25.430 logging.py DEBUG - openembedded profile cleanup, add expanded profile (Steve Arnold) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Add new profiles for OpenShift PCI-DSS version 4.0.0 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for appendix (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 12 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 11 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 10 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 9 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 8 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 7 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 6 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 5 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 4 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 3 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 2 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 1 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - Remove Kubernetes remediation for service_debug-shell_disabled (Vincent Shen) 2025-11-21 15:53:25.430 logging.py DEBUG - OCPBUGS-28242: Fix remediation for service_debug-shell_disabled (Vincent Shen) 2025-11-21 15:53:25.430 logging.py DEBUG - CMP-2247: Add a new profile for CIS OpenShift 1.5.0 (Lance Bragstad) 2025-11-21 15:53:25.430 logging.py DEBUG - change status of ANSSI R29 to automated (Vojtech Polasek) 2025-11-21 15:53:25.430 logging.py DEBUG - update R36 in ANSSI (Vojtech Polasek) 2025-11-21 15:53:25.430 logging.py DEBUG - update description of the "automated" status for control files (Vojtech Polasek) 2025-11-21 15:53:25.430 logging.py DEBUG - Changes in template service_disabled - ansible part (rchikov) 2025-11-21 15:53:25.430 logging.py DEBUG - Update github workflows PR runs (Vincent Shen) 2025-11-21 15:53:25.430 logging.py DEBUG - k8s content image: Comment the commit used (Watson Sato) 2025-11-21 15:53:25.430 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2025-11-21 15:53:25.430 logging.py DEBUG - k8s content images: Don't tag PR images as latest (Watson Sato) 2025-11-21 15:53:25.431 logging.py DEBUG - Refactor CMake macros (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Do not reformat XCCDF if not needed (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Improve XCCDF output format (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Update controls/anssi.yml (vojtapolasek) 2025-11-21 15:53:25.431 logging.py DEBUG - Update ANSSI requirement R29 (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Include RHEL9 CCE for file_permissions_systemmap (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - New templated rule file_groupowner_systemmap (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - New templated rule file_owner_systemmap (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Ensure proper test scenarios for templated rule (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Remove local OVAL in favor of template (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Update file_permissions_systemmap rule (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Do not reformat OCIL if not needed (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Use indent for OCIL if possible (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - update notes of the R36 requirement for ANSSI (Vojtech Polasek) 2025-11-21 15:53:25.431 logging.py DEBUG - Do not reformat if not needed (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Indent using 2 spaces (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Stop pretty formatting unlinked OVALs (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - profile_tool.py: Fix traceback in sub command (Watson Sato) 2025-11-21 15:53:25.431 logging.py DEBUG - Revert "Add scripts to Update SRG" (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Add scripts to Update SRG (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Update SRG GPOS Control to v2r7 (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix python2 support (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Update docuentation (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add processing of controlfiles (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix invalid number usage in oauth variable (Lance Bragstad) 2025-11-21 15:53:25.431 logging.py DEBUG - Add profile collected from controll files (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Unselect R29 rules not applicable for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Update ANSSI R29 (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Change command line arguments (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add test (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add documentation for a new script capability (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add calculation of most used rules (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add getter of profiles stats (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add subcommand with arguments (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Update ANSSI R36 requirement (Marcus Burghardt) 2025-11-21 15:53:25.431 logging.py DEBUG - Bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 (dependabot[bot]) 2025-11-21 15:53:25.431 logging.py DEBUG - extend the explanation why ANSSI R52 requirement is manual (Vojtech Polasek) 2025-11-21 15:53:25.431 logging.py DEBUG - Add Base STIG Profile for RHEL 10 (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Add RHEL10 to CI (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Human sort the sections in fix_rules (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Update DISA Import Based on Reviewer Commnets (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Add RHEL 10 Product (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Image Pruner Rule has inconsistent ocil text (Paul Bastide) 2025-11-21 15:53:25.431 logging.py DEBUG - Add RHEL 9 to Ansible Gating (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix search not included components (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add env_yaml to xccdf as xml (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add filtering of groups and rules to build of XCCDF benchamrk (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Rework Group xml generation (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Change abroach for generation of thin ds (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Rework build of benchmark xml (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Batch generation of OVAL (Jan Rodak) 2025-11-21 15:53:25.431 logging.py DEBUG - Add platform machine to systctl.d rules (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Unify variable selection in CIS controls (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Extend the stable-profiles test (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - add manual rules to APP.4.4.A4 (sluetze) 2025-11-21 15:53:25.431 logging.py DEBUG - add referencing method (sluetze) 2025-11-21 15:53:25.431 logging.py DEBUG - add referencing method (sluetze) 2025-11-21 15:53:25.431 logging.py DEBUG - add references for bsi.app.4.4.a4+a3 (sluetze) 2025-11-21 15:53:25.431 logging.py DEBUG - fix bsi rhcos4 versioning and control usage (sluetze) 2025-11-21 15:53:25.431 logging.py DEBUG - added versioned profiles (sluetze) 2025-11-21 15:53:25.431 logging.py DEBUG - kick off sys 1.6. profile (sluetze) 2025-11-21 15:53:25.431 logging.py DEBUG - OCP4: use utf-8 as default xml encoding (Vincent Shen) 2025-11-21 15:53:25.431 logging.py DEBUG - Add docs for ./utils/import_disa_stig.py (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Move srg_utils to a module so the openpyxl is only included as needed (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Change permissions of /etc/ipsec.d (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix grub2_bootloader_argument to check /etc/default/grub.d on Ubuntu (Miha Purg) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix ubuntu tests in template grub2_bootloader_argument (Miha Purg) 2025-11-21 15:53:25.431 logging.py DEBUG - Add new reference stats to HTML stats (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix CI issues with utils/srg_utils.py (Matthew Burket) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix nologin_ignored tests for rules using create_local_interactive_users_object (Miha Purg) 2025-11-21 15:53:25.431 logging.py DEBUG - Remove intermediary dictionary (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Reduce count of ctor parameters (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Remove superfluous variable (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2025-11-21 15:53:25.431 logging.py DEBUG - Clean up utils/srg_utils.py (Matthew Burket) 2025-11-21 15:53:25.432 logging.py DEBUG - Add tests for utils/import_disa_stig.py (Matthew Burket) 2025-11-21 15:53:25.432 logging.py DEBUG - Add script to import DISA STIG XML to PSC (Matthew Burket) 2025-11-21 15:53:25.432 logging.py DEBUG - Factor out common methods in utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.432 logging.py DEBUG - Add get_all_controls_dict to policy (Matthew Burket) 2025-11-21 15:53:25.432 logging.py DEBUG - OCP4: add api_server_api_priority_v1_flowschema_catch_all (Vincent Shen) 2025-11-21 15:53:25.432 logging.py DEBUG - Use correct directory permissions (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Refactor: Extract function get_cis_uri (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Fix TypeError in get_implemented_stigs (svet-se) 2025-11-21 15:53:25.432 logging.py DEBUG - Check PCI-DSS references in RHEL7 (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Check PCI-DSS references in RHEL8 (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Extend test missing-references-ssg-rhel9-ds.xml (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Add ability to check "stigid" references in rules (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Unify options naming (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Remove unused variable (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Reconcile stig_ns variable (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Remove dead code (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Remove disa-stigs-uri from XSLT (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Disable build of OCIL for thin DS (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Fix getting relevant benchmarks for a product (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Add XML declaration (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Deal with empty OVAL and OCIL components (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Add compose of multiple ds (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Enable component generation per profile (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Generates components per profile (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Prepare for generation benchmark per profile (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Add test to verify missing PCIDSS references (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Add test to verify missing CCN references (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Format long lines (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Create profile per rule (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Add entrypoints to the build_product script (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Rework build_xccdf.py (Jan Rodak) 2025-11-21 15:53:25.432 logging.py DEBUG - Test missing references in RHEL 9 (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Account for non-existent 'build' dir in build_product (Jiri Jaburek) 2025-11-21 15:53:25.432 logging.py DEBUG - Adding ocp4.14 ocp4.15 to applicable ocp rules (Vincent Shen) 2025-11-21 15:53:25.432 logging.py DEBUG - OCP4: Fix OCP version regex (Vincent Shen) 2025-11-21 15:53:25.432 logging.py DEBUG - Remove token from thollander's action parameters (Watson Sato) 2025-11-21 15:53:25.432 logging.py DEBUG - Remove used CCEs from pool (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Use correct permissions in /etc/sysctl.d (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Improve ANSSI references (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Flush automatus test logs before outputting results (Jiri Jaburek) 2025-11-21 15:53:25.432 logging.py DEBUG - Rename run command var name assignemnt (Watson Sato) 2025-11-21 15:53:25.432 logging.py DEBUG - Fix step id and output reference (Watson Sato) 2025-11-21 15:53:25.432 logging.py DEBUG - Use variable for remediation of rule (Watson Sato) 2025-11-21 15:53:25.432 logging.py DEBUG - Use correct permissions for /etc/sudoers.d (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Fix rule for accounts_authorized_local_users in SLE15 (teacup-on-rockingchair) 2025-11-21 15:53:25.432 logging.py DEBUG - Update linux_os/guide/system/apparmor/all_apparmor_profiles_in_enforce_complain_mode/tests/correct_all_apparmor_profiles_in_complain.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.432 logging.py DEBUG - Disable remediation for accounts_umask_interactive_users on Ubuntu (Miha Purg) 2025-11-21 15:53:25.432 logging.py DEBUG - Update DISA STIG manual for SLE12 V2R13 (svet-se) 2025-11-21 15:53:25.432 logging.py DEBUG - Update SLE12 STIG version (svet-se) 2025-11-21 15:53:25.432 logging.py DEBUG - Update DISA STIG manual for SLE15 V1R12 (svet-se) 2025-11-21 15:53:25.432 logging.py DEBUG - Update SLE15 STIG version (svet-se) 2025-11-21 15:53:25.432 logging.py DEBUG - Add missing CCEs (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Assign rules to components (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Clarify files and directories (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Create rule directory_permissions_etc_iptables (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Create rule directory_owner_etc_iptables (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Create rule directory_groupowner_etc_iptables (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Create rule file_permissions_etc_sudoers (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Create rule file_owner_etc_sudoers (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Create rule file_groupowner_etc_sudoers (Jan Černý) 2025-11-21 15:53:25.432 logging.py DEBUG - Create rule file_permissions_etc_ipsec_secrets (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_owner_etc_ipsec_secrets (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_groupowner_etc_ipsec_secrets (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_permissions_etc_ipsec_conf (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_owner_etc_ipsec_conf (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_groupowner_etc_ipsec_conf (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_permissions_etc_chrony_keys (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_owner_etc_chrony_keys (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_groupowner_etc_chrony_keys (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_permissions_etc_crypttab (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_owner_etc_crypttab (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_groupowner_etc_crypttab (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_permissions_etc_sudoersd (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_owner_etc_sudoersd (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_groupowner_etc_sudoersd (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_permissions_etc_sysctld (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_owner_etc_sysctld (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_groupowner_etc_sysctld (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_permissions_etc_nftables (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_owner_etc_nftables (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_groupowner_etc_nftables (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_permissions_etc_ipsecd (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_owner_etc_ipsecd (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_groupowner_etc_ipsecd (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_permissions_etc_sestatus_conf (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_groupowner_etc_sestatus_conf (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule file_owner_etc_sestatus_conf (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_permissions_etc_selinux (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_groupowner_etc_selinux (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Create rule directory_owner_etc_selinux (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add missing rules to ANSSI R50 (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add RHEL 9 CCEs (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add new rule file_permissions_sudo (Matthew Burket) 2025-11-21 15:53:25.455 logging.py DEBUG - Fix reviewer comments in #11590 (Matthew Burket) 2025-11-21 15:53:25.455 logging.py DEBUG - Hide profiles not in good shape for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.455 logging.py DEBUG - Remove references test (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Remove empty references keys from rules (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Use controls to generate RHEL 9 STIG references (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Use control file to generate PCI DSS 4 references (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Use controls to generate CCN references (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add stigrefs after references from controls (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Code climate fix for tests/cces-removed.py (Matthew Burket) 2025-11-21 15:53:25.455 logging.py DEBUG - Add new test cces-removed.py (Matthew Burket) 2025-11-21 15:53:25.455 logging.py DEBUG - Fix OVAL macro create_local_interactive_users_object (Miha Purg) 2025-11-21 15:53:25.455 logging.py DEBUG - Extend kernel_config_default_mmap_min_addr to aarch64 (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Fix title (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add platform to kernel_config_unmap_kernel_at_el0 (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add platform to kernel_config_modify_ldt_syscall (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add platform to kernel_config_ia32_emulation (Jan Černý) 2025-11-21 15:53:25.455 logging.py DEBUG - Add platform to kernel_config_page_table_isolation (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Add platform to kernel_config_randomize_memory (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Specify platform of kernel_config_default_mmap_min_addr (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Add a new platform x86_64_arch (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Upsert image comment instead of creating new one (Watson Sato) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix empty pull reference number (Watson Sato) 2025-11-21 15:53:25.456 logging.py DEBUG - build_ds_container.py: Enable container image push (Watson Sato) 2025-11-21 15:53:25.456 logging.py DEBUG - Update sudo_dedicated_group (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix description for auditd_max_log_file_action (Miha Purg) 2025-11-21 15:53:25.456 logging.py DEBUG - OCP: Fix e2e remediation for container_security_operator_exists (Vincent Shen) 2025-11-21 15:53:25.456 logging.py DEBUG - OCPBUGS-18331: Include sshd config directories in remediation template (Lance Bragstad) 2025-11-21 15:53:25.456 logging.py DEBUG - Update utils/ansible_playbook_to_role.py (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Update STIG references for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - Map SRG to chronyd_specify_remote_server (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - Include chronyd_specify_remote_server in STIG profiles (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - Include option for stig in var_multiple_time_servers (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - HIPAA profile for SLE 15 - update (rchikov) 2025-11-21 15:53:25.456 logging.py DEBUG - Improve Milestone description when created (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - Include simple function to get github username (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - Update the release cadence function (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - Document API Token scopes for release_helper (Marcus Burghardt) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix regex in sssd_offline_cred_expiration (Edgar Aguilar) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix spacing in ANSSI Control File (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Update ANSSI R68 (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Add 11 rounds to var_password_pam_unix_rounds (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Format outputing XCCDF xml (Jan Rodak) 2025-11-21 15:53:25.456 logging.py DEBUG - Reduce OCIL XML according to selected rules (Jan Rodak) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix rule audit_rules_networkconfig_modification for Ubuntu (Miha Purg) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix ubuntu tests for audit_rules_networkconfig_modification (Miha Purg) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix rule description for audit_rules_networkconfig_modification (Miha Purg) 2025-11-21 15:53:25.456 logging.py DEBUG - Bump docker/setup-qemu-action from 2 to 3 (dependabot[bot]) 2025-11-21 15:53:25.456 logging.py DEBUG - Bump docker/metadata-action from 4 to 5 (dependabot[bot]) 2025-11-21 15:53:25.456 logging.py DEBUG - Update ANSSI R71 (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Minor fixes after removal of prodtype (Evgeny Kolesnikov) 2025-11-21 15:53:25.456 logging.py DEBUG - sysctl template: allow skipping of runtime checks (Watson Sato) 2025-11-21 15:53:25.456 logging.py DEBUG - Set status for ANSSI R79 to partial (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Add a note to ANSSI R23 (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Update ANSSI R32 (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Replace bogus 'prodtype' with 'product' in Jinja expressions (Evgeny Kolesnikov) 2025-11-21 15:53:25.456 logging.py DEBUG - Remove all references to prodtype (Docs) (Evgeny Kolesnikov) 2025-11-21 15:53:25.456 logging.py DEBUG - Remove all references to prodtype (Code and Tests) (Evgeny Kolesnikov) 2025-11-21 15:53:25.456 logging.py DEBUG - Update ANSSI R40 (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Add a new rule accounts_password_set_max_life_root (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - RHEL 9 STIG: replace configure_bashrc_exec_tmux with configure_bashrc_tmux (Vojtech Polasek) 2025-11-21 15:53:25.456 logging.py DEBUG - Revert "Remove 'exec' from configure_bashrc_exec_tmux" (Vojtech Polasek) 2025-11-21 15:53:25.456 logging.py DEBUG - Defined notes and rules for control BSI APP4.4.A10 (Benjamin Ruland) 2025-11-21 15:53:25.456 logging.py DEBUG - Change password minimal lenght (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Update a comment (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Update utils/ansible_playbook_to_role.py (Dan Clark) 2025-11-21 15:53:25.456 logging.py DEBUG - Use controls to assign ANSSI references (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Prevent conflicts in references (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Bump docker/setup-buildx-action from 2 to 3 (dependabot[bot]) 2025-11-21 15:53:25.456 logging.py DEBUG - Remove disabling_ipv6_autoconfig rule (Jan Rodak) 2025-11-21 15:53:25.456 logging.py DEBUG - Red Hat product security is on the path of deprecating the OVAL CVE feed (Evgeny Kolesnikov) 2025-11-21 15:53:25.456 logging.py DEBUG - Remove one-off script remove_references.sh (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Reword and extend documentation (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - CMP-2366: Update service_autofs_disabled default e2e result (Lance Bragstad) 2025-11-21 15:53:25.456 logging.py DEBUG - OCP4: Fix pr image workflow (Vincent Shen) 2025-11-21 15:53:25.456 logging.py DEBUG - CMP-2372: Remove info override for virtual syscall rules (Lance Bragstad) 2025-11-21 15:53:25.456 logging.py DEBUG - CMP-2365: Fix check for rotating kubelet server certificates (Lance Bragstad) 2025-11-21 15:53:25.456 logging.py DEBUG - Update entities/common.py to use CDumper (Matthew Burket) 2025-11-21 15:53:25.456 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Add documentation (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Solve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Remove CIS references from rules (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Add a unit test (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Remove refcheck test for CIS profiles (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Use references from control files (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Add a one-off script to remove references (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Add references from control files to rules (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Extend control file schema to support references (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Represent references as lists internally (Jan Černý) 2025-11-21 15:53:25.456 logging.py DEBUG - Make tests apparmor platform dependent (teacup-on-rockingchair) 2025-11-21 15:53:25.456 logging.py DEBUG - Make sure pattern matching includes subexpressions (teacup-on-rockingchair) 2025-11-21 15:53:25.456 logging.py DEBUG - Updates to support rhel9 role conversion and using main as the primary branch instead of master (Dan Clark) 2025-11-21 15:53:25.456 logging.py DEBUG - Update oval rule with improved variable declarations and rule naming (teacup-on-rockingchair) 2025-11-21 15:53:25.456 logging.py DEBUG - Add OVAL check for apparmor profile rules (teacup-on-rockingchair) 2025-11-21 15:53:25.457 logging.py DEBUG - Add platform dependency for the apparmor profiles rule (teacup-on-rockingchair) 2025-11-21 15:53:25.457 logging.py DEBUG - Enable apparmor package installed rule for SLE15 (teacup-on-rockingchair) 2025-11-21 15:53:25.457 logging.py DEBUG - Define apparmor package platform (teacup-on-rockingchair) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix Ansible compatibility with sysctl module (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - remove /dev/shm partition definition from RHEL 7 kickstarts (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - remove /dev/shm partition definition from RHEL 9 kickstarts (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - Add tests to OL8 sssd rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Update OL8 sssd rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix ubuntu remediation for pam_faildelay (Miha Purg) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix step reference to output and set-output (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - Update audit_ospp_general_ppc64le (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update audit_ospp_general_aarch64 (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - set indent to 4 (sluetze) 2025-11-21 15:53:25.457 logging.py DEBUG - Remove restrictions in sshd_use_approved_ciphers remediation (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - fix regex in Ansible remediation of configure_ssh_crypto_policy (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - Parametrize rule oauth token maxage rules (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - Adjust kube remediation to urlencoding (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - SRG-APP-000141-CTR-000315: allow hid and hub (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - OCP4 STIG: select rule for audit backlog limit (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - OCP4 STIG: Enable SRG-APP-000141-CTR-000315 rules (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - OCP4 STIG: select rule to audit pt_chown binary (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - OCP4 STIG: audit for unsuccessful deletion (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - OCP4 STIG: add rule for accessTokenMaxAgeSeconds (Watson Sato) 2025-11-21 15:53:25.457 logging.py DEBUG - Minor alignment in CIS test scenario for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Bump peter-evans/create-pull-request from 5.0.2 to 6.0.0 (dependabot[bot]) 2025-11-21 15:53:25.457 logging.py DEBUG - Update audit_ospp_general (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Remove BuildRequire /usr/bin/python3 from spec (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix STIG Version for RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update references for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Update crypto_policy test scenario for CIS RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Align logind_session_timeout value with RHEL9 STIG (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Align logind_session_timeout value with RHEL8 STIG (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Make additional check if selinux is actually enabled (teacup-on-rockingchair) 2025-11-21 15:53:25.457 logging.py DEBUG - Bump actions/github-script from 6 to 7 (dependabot[bot]) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix tests on sssd-ldap (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix shellcheck warning on find command (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Add tests to sssd-ldap rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Update sssd-ldap rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Update one existing test scenario to accept /bin/false (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Default the module line to /bin/false in Kubernetes (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Default the module line to /bin/false in Bash (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Add a warning to sshd_limit_user_access (Jan Černý) 2025-11-21 15:53:25.457 logging.py DEBUG - Update CIS RHEL8 requirements related to crypto (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Include more specific rules to CIS RHEL9 5.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Include more specific rules to CIS RHEL8 4.4.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Update CIS RHEL7 requirement 3.4.4.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - remove prodtype from add_kubernetes_rule (sluetze) 2025-11-21 15:53:25.457 logging.py DEBUG - Remove option `--add-product-to-fips-certified` (Jan Černý) 2025-11-21 15:53:25.457 logging.py DEBUG - Use `--remove-fips-certified` in CI (Jan Černý) 2025-11-21 15:53:25.457 logging.py DEBUG - Add option '--remove-fips-certified' (Jan Černý) 2025-11-21 15:53:25.457 logging.py DEBUG - Improve github workflow for building OCP PR image (Vincent Shen) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix OVAL identation in faillock rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Update oval in faillock enable rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Set OL8 STIG id in faillock rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Add tests to faillock rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Update OL08-00-020025 & OL08-00-020026 assignment (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Add automation to faillock rules (Edgar Aguilar) 2025-11-21 15:53:25.457 logging.py DEBUG - Bump master version to 0.1.73 (Marcus Burghardt) 2025-11-21 15:53:25.457 logging.py DEBUG - Alibaba Cloud Linux 3 CIS Benchmark has stopped receiving updates and has entered the End-of-Life (EOL) maintenance stage. As a result, the Alibaba Cloud Linux 3 CIS-related profile and its associated references will be removed. (Yuqing Yang) 2025-11-21 15:53:25.457 logging.py DEBUG - Alibaba Cloud Linux 2 CIS Benchmark has stopped receiving updates and has entered the End-of-Life (EOL) maintenance stage. As a result, the Alibaba Cloud Linux 2 CIS-related profile and its associated references will be removed. (Yuqing Yang) 2025-11-21 15:53:25.457 logging.py DEBUG - remove prodtype (steven.y.gui) 2025-11-21 15:53:25.457 logging.py DEBUG - Remove prodtype from rule schema (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update CIS profiles descriptions (Jan Černý) 2025-11-21 15:53:25.457 logging.py DEBUG - Move to /bin/false in wireless_disable_interface (Miha Purg) 2025-11-21 15:53:25.457 logging.py DEBUG - add tests for cis profile and auditd_data_retention_admin_space_left_action (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - auditd_data_retention_admin_space_left_action - allow multiple config values (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - update RHEL 8 section 5.2.2.4 (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - update RHEL 7 section 5.2.2.4 (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - update RHEL 8 CIS section 5.2.2.3 (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - switch RHEL 7 CIS control 1.7.1 to automated (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - add rhel8 prodtype to package_dnsmasq_removed (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - align RHEL 7 CIS with RHEL 8 CIS WRT logging (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - add rhel7 prodtype to file_permissions_at_allow (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - add missing rhel7 prodtype to file_groupowner_at_allow (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - update RHEL 8 CIS section 1.2.2 (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - update RHEL 7 CIS section 1.7.5 (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - update RHEL 7 section 1.7.4 (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - add rhel7 prodtype to audit_rules_execution_setfacl (Vojtech Polasek) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix remediation for smartcard_pam_enabled (Miha Purg) 2025-11-21 15:53:25.457 logging.py DEBUG - Convert prodtype fields into default profiles (Evgeny Kolesnikov) 2025-11-21 15:53:25.457 logging.py DEBUG - Small CI fixes (Evgeny Kolesnikov) 2025-11-21 15:53:25.457 logging.py DEBUG - Remove no_new_global_applicable_rules test (Evgeny Kolesnikov) 2025-11-21 15:53:25.457 logging.py DEBUG - Clean up product properties and shared platforms (Evgeny Kolesnikov) 2025-11-21 15:53:25.457 logging.py DEBUG - Build CPEs for all products that share the guide directory (Evgeny Kolesnikov) 2025-11-21 15:53:25.457 logging.py DEBUG - Filter out unused OVAL components from oval_unlinked.xml when composing final XCCDF document (Evgeny Kolesnikov) 2025-11-21 15:53:25.457 logging.py DEBUG - Ignore prodtype when building Benchmark and include only rules that are part of a Profile (Evgeny Kolesnikov) 2025-11-21 15:53:25.457 logging.py DEBUG - Bump peter-evans/find-comment from 2 to 3 (dependabot[bot]) 2025-11-21 15:53:25.457 logging.py DEBUG - Bump peter-evans/create-or-update-comment from 3 to 4 (dependabot[bot]) 2025-11-21 15:53:25.457 logging.py DEBUG - Update RHEL 8 PCI DSS stability (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Fix more review issues on CIS RHEL 8 section 3 (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Add missing CCE to rules (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Remove CIS@rhel8 reference from set_firewalld_default_zone (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update RHEL 8 CIS Section 3 based on reviewer comments (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update RHEL 8 CIS 3.1.3 (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Adjust title for 3.4.2.4 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Adjust title for 3.3.10 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Add rules to Ensure host based firewall loopback traffic is configured for RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update rule file references for RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Remove unused section 3 controls for RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.4.2.5 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.4.2.4 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.4.2.3 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.4.2.2 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.4.2.1 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.4.1.2 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.4.1.1 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.3.11 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.3.10 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.3.9 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.457 logging.py DEBUG - Update section 3.3.8 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.3.7 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.3.6 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.3.5 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.3.4 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.3.3 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.3.2 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.3.1 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.2.4 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.2.3 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.2.2 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.2.1 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.1.3 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.1.2 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update section 3.1.1 RHEL 8 CIS (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Fix ubuntu tests for faillock rules (Miha Purg) 2025-11-21 15:53:25.458 logging.py DEBUG - Fix pam_faillock remediation macro for ubuntu (Miha Purg) 2025-11-21 15:53:25.458 logging.py DEBUG - Fix position of faillock-preauth module in pam (Miha Purg) 2025-11-21 15:53:25.458 logging.py DEBUG - Update version number for RHEL 9 STIG V1R2 (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update DISA files for RHEL 9 STIG V1R2 (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Clean up policy for audit_rules_dac_modification_umount (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Remove extraneous autrace in aide_files (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Remove 'exec' from configure_bashrc_exec_tmux (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - service_rngd_enabled is only non-FIPS system in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Ensure that var_sshd_set_keepalive is set to 1 in the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update linux_os/guide/services/sssd/sssd-ldap/sssd_ldap_configure_tls_ca/rule.yml (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update pci-dss reference for profile stability test (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update contributors list for v0.1.72 release (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Move CIS RHEL8 5.2.3.5 to partial (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 4.5.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Include note in CIS RHEL8 4.4.3.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Enable sshd_use_strong_macs for RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Enable sshd_use_strong_kex for RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Include explicit variable for CIS RHEL8 4.2.6 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Make CIS RHEL8 4.2.1 partial (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Make CIS RHEL8 4.1.2.1 partial (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - remove the task which deletes artifacts from automatus GH workflows (Vojtech Polasek) 2025-11-21 15:53:25.458 logging.py DEBUG - Update SRG GPOS file references to v2r7 (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Add package install to tests for sssd_ldap_configure_tls_reqcert (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update pci-dss reference for profile stability test (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - OCPBUGS-20015: Add remediation for RHCOS banners (Lance Bragstad) 2025-11-21 15:53:25.458 logging.py DEBUG - Update SRG GPOS to V2R7 (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update RHEL 8 STIG version (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update DISA files for RHEL 8 STIG V1R13 (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Allow sssd_offline_cred_expiration to be configed in drop in dirs (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update RHEL 7 STIG version (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update DISA files for RHEL 7 STIG V3R14 (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Add warning to sssd_ldap_configure_tls_ca (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Remove sssd_ldap_configure_tls_ca_dir from RHEL 7 STIG (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Allow sssd_ldap_configure_tls_reqcert to be in drop files as well (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Allow sssd_ldap_start_tls to be in drop files as well (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Move to /bin/false for disabling kernel modules (Matthew Burket) 2025-11-21 15:53:25.458 logging.py DEBUG - Update ol stig references (Edgar Aguilar) 2025-11-21 15:53:25.458 logging.py DEBUG - Small fixes in references (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Include missing CCE for RHEL8 in aide_use_fips_hashes (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 5.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Enable rules for RHEL8 CIS (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 5.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 5.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 5.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 5.12.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.1.3 and 5.1.4 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 sections 5.1.3 and 5.1.4 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 5.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 5.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 5.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Remove CIS RHEL8 references from rules in dropped requirements (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Reviewed policy changelog about section 4 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.5.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.5.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Enable ensure_root_password_configured to rhel8 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.5.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.5.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.5.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.5.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.4.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rule related to CIS RHEL8 4.4.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.4.2.1 and 4.4.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.4.1 and 4.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.3 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update rules related to CIS RHEL8 4.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Update CIS RHEL8 section 4.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.458 logging.py DEBUG - Add /etc/shells rules to CIS control 6.1.9 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Improve CIS 6.2.11 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Change RHEL 7 CIS 6.2.11 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Update control status (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Update control status (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Update control status (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Add dir_perms_world_writable_sticky_bits to 6.1.11 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Update control status (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Update control status (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Remove leftover sections (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Align CIS 6.2.11 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Align CIS 6.2.10 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Align CIS 6.2.9 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Align CIS 6.2.8 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Align CIS 6.2.7 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Align CIS 6.2.6 (Jan Černý) 2025-11-21 15:53:25.458 logging.py DEBUG - Align CIS 6.2.5 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.2.4 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.14 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.13 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.12 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.11 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.10 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.9 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.8 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.6 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.4 and 6.1.5 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.3 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.2 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Align CIS 6.1.1 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Fix regex for pam_wheel.so line with use_uid (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Remove unnecessary space at the beginning (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Just minor update in the line format (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Include note in CIS RHEL7 4.5.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update selection in CIS RHEL7 4.5.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Fix rule section in CIS RHEL7 4.2.15 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Review usage of sudo_require_reauthentication (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Review sshd_approved_ciphers.var (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update requirements status after review (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Fix wrong reference (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 version in header (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update var_password_pam_remember for CIS RHEL7 4.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Removed CIS RHEL7 references in dropped rules (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.5.3 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.5.3 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Enable ensure_root_password_configured to rhel7 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.5.1 and 4.5.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.5.1 and 4.5.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.4.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Enable accounts_password_pam_dictcheck to rhel7 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.4.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.4.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Enable rhel7 in rules required by CIS RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.3 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.3 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rules related to CIS RHEL7 4.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - Update CIS RHEL7 section 4.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.459 logging.py DEBUG - remove cis reference from xwindows_remove_packages (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.20 to set correct runlevel (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update refernce in related rule of 2.2.3 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - include reference also in related rule for 2.2.2 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - change status of 2.2.1 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - modify profile stability test of RHEL 8 PCI-DSS (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - remove CIS references in rules which were removed from the profile (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - remove control 2.4 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.3.5 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.3.3 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.3.2 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.3.1 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.22 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.21 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.20 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.19 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.18 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.17 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.16 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.15 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.14 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.13 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.12 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.11 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.10 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.9 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.8 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.7 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.6 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.5 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.4 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.3 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.2 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.2.1 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.1.3 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update control 2.1.2 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - update section 2.1.1 (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - Change status of a control (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Add rules to RHEL 8 CIS 6.1.10 (Matthew Burket) 2025-11-21 15:53:25.459 logging.py DEBUG - Add rule file_owner_backup_etc_shells (Matthew Burket) 2025-11-21 15:53:25.459 logging.py DEBUG - Add new rule file_groupowner_etc_shells (Matthew Burket) 2025-11-21 15:53:25.459 logging.py DEBUG - Add new rule file_permissions_etc_shells (Matthew Burket) 2025-11-21 15:53:25.459 logging.py DEBUG - change how xwindows is disabled in CIS profile (Vojtech Polasek) 2025-11-21 15:53:25.459 logging.py DEBUG - Add a CCE (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Update control title (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Add rules rsyslog_files_* to CIS 5.1.4 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Update rule references for 5.1.3 (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Fix the control status (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Fix the control status (Jan Černý) 2025-11-21 15:53:25.459 logging.py DEBUG - Fix the control status (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - change the sysctl module fqcn for rhel7 product (Vojtech Polasek) 2025-11-21 15:53:25.460 logging.py DEBUG - Allow tests/test_product_stability.py to be executed. (Matthew Burket) 2025-11-21 15:53:25.460 logging.py DEBUG - Fix OpenEmbedded name in test stability (Matthew Burket) 2025-11-21 15:53:25.460 logging.py DEBUG - Add missing CCEs (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Fix indentation (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Remove leftover sections (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.11 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.10 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.9 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.8 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.7 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.6 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.5 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.2.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.14 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.13 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.12 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.11 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.10 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.9 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.8 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.7 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.6 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.5 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 6.1.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Fix OVAL in auditd_data_retention_space_left_action (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Fix remediation in auditd_data_retention_space_left_action (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Fix leftover section (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Update control status (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Remove leftovers (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.3.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.3.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.10 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.9 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.8 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.7 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.6 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.5 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.4.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.21 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.20 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.19 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.18 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.17 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.16 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.15 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.14 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.13 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.12 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.11 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.10 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.9 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.8 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.7 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.6 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.5 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.3.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.2.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.2.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.2.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.2.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.1.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.1.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.1.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.2.1.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.6 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.5 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.1.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.1.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.1.2 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.2.1.1 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Remove obsolete section (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.1.7 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.1.6 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.1.5 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.1.4 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.1.3 (Jan Černý) 2025-11-21 15:53:25.460 logging.py DEBUG - Align CIS 5.1.1.2 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 5.1.1.1 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - update sles oval feed url (svet-se) 2025-11-21 15:53:25.461 logging.py DEBUG - remove the control containing service_autofs_disabled from section 1 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - remove cis references from dropped rules (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - remove control 2.4 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - add control 2.3.5 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.3.3 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.3.2 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.3.1 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.22 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.21 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.20 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.19 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.18 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.17 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.16 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.15 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.14 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.13 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.12 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.11 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.10 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.9 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update section 2.2.8 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.7 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.6 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.5 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.4 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update section 2.2.3 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.2 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.2.1 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update control 2.1.3 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - update 2.1.2 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - control 2.1.1 (Vojtech Polasek) 2025-11-21 15:53:25.461 logging.py DEBUG - fix package_iptables_installed (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update titles in section 1.1 for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Fix up section 1.1.1 for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Fix mount_option_home_nosuid references (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - fixup! Add RHEL 7 CIS reference to 1.1.2.7.4 (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update RHEL 7 Section 1 references (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update CIS reference for kernel_module_hfs_disabled (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS reference to mount_option_var_nosuid (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS reference to mount_option_var_log_audit_nosuid (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS reference for sysctl_kernel_yama_ptrace_scope (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS reference mount_option_var_log_audit_nodev (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS references to dconf_gnome_screensaver_idle_delay (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS reference to selinux_not_disabled (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add selinux_not_disabled to RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL7 CIS reference for mount_option_var_log_nodev (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS reference to 1.1.2.7.4 (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL7 CIS reference to dconf_gnome_disable_autorun (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Add RHEL 7 CIS reference to mount_option_var_log_noexec (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update references on mount_option_var_log_nosuid for RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update dconf_gnome_disable_automount_open references for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update references on dconf_gnome_screensaver_user_locks for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update dconf_gnome_disable_automount references for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update references for mount_option_var_nodev RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update mount_option_home_nosuid RHEL 7 CIS references (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update section 1.7 for RHEL 7 CIS Control (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Remove section 1.9 as it was moved up to 1.2.5 (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Remove 1.2.5 from the RHEL 7 Benchmark (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update section 1.6 RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update section 1.5 RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Remove prelink removed rule from RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Remove NX rule has it is no longer in the RHEL 7 Benchmark (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update Section 1.4 for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update Section 1.3 for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update Section 1.2 for RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Remove "removable media partitions mount rules from RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update RHEL 7 CIS /var/log/audit (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - RHEL 7 CIS Update /var/log section (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - RHEL 7 CIS Update /var/tmp section (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update CIS for RHEL 7 /var section (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update section for /home checks RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update section for /dev/shm checks RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update section for /tmp checks RHEL 7 CIS (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update Section 1.1 of RHEL 7 CIS Control (Matthew Burket) 2025-11-21 15:53:25.461 logging.py DEBUG - Update OL8 STIG id references (Edgar Aguilar) 2025-11-21 15:53:25.461 logging.py DEBUG - Update .github/workflows/k8s-content-pr.yaml (Vincent Shen) 2025-11-21 15:53:25.461 logging.py DEBUG - Update .github/workflows/k8s-content-pr.yaml (Vincent Shen) 2025-11-21 15:53:25.461 logging.py DEBUG - Mark control 3.4.4.2.6 as partial (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Fix configure_bashrc_exec_tmux missing parentheses (BenGui) 2025-11-21 15:53:25.461 logging.py DEBUG - Add a missing CCE (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Add a missing header (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Fix a missing reference (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Sort references in service_bluetooth_disabled (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Remove section 3.5 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.3.6 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.3.5 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.3.4 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.3.3 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.3.2 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.3.1 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.2.6 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Fix references issues detected in tests (Marcus Burghardt) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.2.5 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.2.4 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.2.3 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.2.2 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.2.1 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.4.1.1 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.9 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.8 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.7 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.6 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.5 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Add group.yml file for firewalld_deactivation rules (teacup-on-rockingchair) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.4 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.3 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.2 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Update rules related to CIS RHEL8 1.8 (Marcus Burghardt) 2025-11-21 15:53:25.461 logging.py DEBUG - Update CIS RHEL8 section 1.8 (Marcus Burghardt) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.3.1 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.2.4 (Jan Černý) 2025-11-21 15:53:25.461 logging.py DEBUG - Align CIS 3.4.2.3 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.4.2.2 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.4.2.1 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.4.1.2 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.4.1.1 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.11 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.10 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.9 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.8 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.7 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.6 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.5 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.4 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.3 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.2 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.3.1 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.2.4 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.2.3 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.2.2 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.2.1 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.1.3 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.7 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update rule related to CIS RHEL8 1.6 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.6 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.1.2 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Align CIS 3.1.1 (Jan Černý) 2025-11-21 15:53:25.462 logging.py DEBUG - Update rules related to CIS RHEL8 1.5 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.5 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update rules related to CIS RHEL8 1.4 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.4 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update rules related to CIS RHEL8 1.3 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.3 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update rules related to CIS RHEL8 1.2 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.2 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Remove dropped filesystem requiremens from CIS RHEL8 1 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update rules related to CIS RHEL8 1.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update rules related to CIS RHEL8 1.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Fix import problem (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS RHEL8 section 1.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Update CIS version in RHEL8 control file (Marcus Burghardt) 2025-11-21 15:53:25.462 logging.py DEBUG - Remove unnessary conditionals (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Move import to top of file (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Fix typo (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Rename functions (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Format via black tool (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Move command processing to separate files (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Decompose statistics generation in html (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Separate commands to functions (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Separate subparsers to functions (Jan Rodak) 2025-11-21 15:53:25.462 logging.py DEBUG - Update k8s action to build image on new PR (Vincent Shen) 2025-11-21 15:53:25.462 logging.py DEBUG - add missing ocil part (Vojtech Polasek) 2025-11-21 15:53:25.462 logging.py DEBUG - align the audit line with remediations and check (Vojtech Polasek) 2025-11-21 15:53:25.462 logging.py DEBUG - add explaining comment to mount_option bash template (Vojtech Polasek) 2025-11-21 15:53:25.487 logging.py DEBUG - Create the cron.allow file with correct permissions (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Add optional parameters to file_existence template (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Update product_stability test data with BSI reference (Benjamin Ruland) 2025-11-21 15:53:25.487 logging.py DEBUG - Define notes and rules for BSI APP.4.4.A12 (Benjamin Ruland) 2025-11-21 15:53:25.487 logging.py DEBUG - add bsi constant (sluetze) 2025-11-21 15:53:25.487 logging.py DEBUG - Add new rule file_cron_allow_exists (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Add a note to the description (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Allow using declare keyword (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - xccdf_org.ssgproject.content_rule_accounts_tmout: replace 'declare' by 'typeset' (Renaud Métrich) 2025-11-21 15:53:25.487 logging.py DEBUG - Removes shebang from files that are not directly executed (Jennifer Power) 2025-11-21 15:53:25.487 logging.py DEBUG - Support drop-in config in journald rules on RHEL (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Add ocp platforms to some eks shared OVALs (Evgeny Kolesnikov) 2025-11-21 15:53:25.487 logging.py DEBUG - Do not change comments by remediations (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Allow spaces in rule sudo_custom_logfile (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Move install_mcafee_hbss shared OVAL to the install_hids rule (Evgeny Kolesnikov) 2025-11-21 15:53:25.487 logging.py DEBUG - fix invalid level (Vojtech Polasek) 2025-11-21 15:53:25.487 logging.py DEBUG - add tests for the function validating policy levels (Vojtech Polasek) 2025-11-21 15:53:25.487 logging.py DEBUG - add function validating policy levels (Vojtech Polasek) 2025-11-21 15:53:25.487 logging.py DEBUG - ensure that loaded Policy class has always list of levels (Vojtech Polasek) 2025-11-21 15:53:25.487 logging.py DEBUG - Do not check for yum on dnf systems (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Consider checking for iptables service only if we don't have firewalld service enabled (teacup-on-rockingchair) 2025-11-21 15:53:25.487 logging.py DEBUG - Add support to disable wifi interfaces via wicked (teacup-on-rockingchair) 2025-11-21 15:53:25.487 logging.py DEBUG - remove spaces for code check (steven.y.gui) 2025-11-21 15:53:25.487 logging.py DEBUG - Updates tools_and_utilities.md based on code review feedback (Jennifer Power) 2025-11-21 15:53:25.487 logging.py DEBUG - Add zlib1g-dev to debain 10 CI deps (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - Add libxml2 and libxslt dev packages to Debian 10 CI (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - fix ctest fail (steven.y.gui) 2025-11-21 15:53:25.487 logging.py DEBUG - fix compilation errors (steven.y.gui) 2025-11-21 15:53:25.487 logging.py DEBUG - remove openeuler and modified rule ids (steven.y.gui) 2025-11-21 15:53:25.487 logging.py DEBUG - Add reference title mapping (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Fix a duplication of the code ID 3.5.2.1 (rchikov) 2025-11-21 15:53:25.487 logging.py DEBUG - add new product openeuler supporting (steven.y.gui) 2025-11-21 15:53:25.487 logging.py DEBUG - Update Install VM to use Fedora 39 (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - Fix levels in CIS OCP 1.4.0 (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - Fail load a control if the level is a string (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - Remove unused imports from tests/unit/ssg-module/test_controls.py (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - Fix type hints in utils/render_all_policies.py (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - Add Windows CI (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - We should raise NotImplementedError (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - Fix Ansible in rule ensure_redhat_gpgkey_installed (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Update GitHub Artifacts Action Steps to v4 (Matthew Burket) 2025-11-21 15:53:25.487 logging.py DEBUG - fix: better with absolute path (Whidix) 2025-11-21 15:53:25.487 logging.py DEBUG - fix: service_timesyncd_configured (Whidix) 2025-11-21 15:53:25.487 logging.py DEBUG - Ignore none as possible root dir (Commandcracker) 2025-11-21 15:53:25.487 logging.py DEBUG - Use correct HTML element for inline code (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Bump geekyeggo/delete-artifact from 2 to 4 (dependabot[bot]) 2025-11-21 15:53:25.487 logging.py DEBUG - adapt styling (Commandcracker) 2025-11-21 15:53:25.487 logging.py DEBUG - Use XSLT_PREFIX (Commandcracker) 2025-11-21 15:53:25.487 logging.py DEBUG - Find xccdf-guide.xsl by pssible openscap root dirs (adds Windows support) (Commandcracker) 2025-11-21 15:53:25.487 logging.py DEBUG - Account for division by zero (Commandcracker) 2025-11-21 15:53:25.487 logging.py DEBUG - Find xccdf_1.1_to_1.2.xsl on Windows (Commandcracker) 2025-11-21 15:53:25.487 logging.py DEBUG - move bsi os checks into os profile (sluetze) 2025-11-21 15:53:25.487 logging.py DEBUG - split bsi profile into node and not node (sluetze) 2025-11-21 15:53:25.487 logging.py DEBUG - Added OCP4 Profile and Controls for BSI APP.4.4 (ermeratos) 2025-11-21 15:53:25.487 logging.py DEBUG - Finish rename to Automatus (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Fix broken formatting (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Update test-check-eof for smoke test (Jan Černý) 2025-11-21 15:53:25.487 logging.py DEBUG - Add anolis23/anolis8 support for pci-dss compliance. (YuQing.Yang) 2025-11-21 15:53:25.487 logging.py DEBUG - Add alinux2/alinux3 support for pci-dss compliance. (YuQing.Yang) 2025-11-21 15:53:25.487 logging.py DEBUG - Remove unnecessary overwrite of the init function (Jan Rodak) 2025-11-21 15:53:25.487 logging.py DEBUG - Add invoke parent's init function (Jan Rodak) 2025-11-21 15:53:25.487 logging.py DEBUG - Fix value of sshd_strong_kex variable on Ubuntu (David du Colombier) 2025-11-21 15:53:25.487 logging.py DEBUG - Rename inconsistent shared OVAL IDs (Oracle Linux) (Evgeny Kolesnikov) 2025-11-21 15:53:25.487 logging.py DEBUG - add template path prefix with environment override (Stephen L Arnold) 2025-11-21 15:53:25.487 logging.py DEBUG - configure_bashrc_tmux: escape braces within regex (Vojtech Polasek) 2025-11-21 15:53:25.487 logging.py DEBUG - configure_bashrc_exec_tmux: escape braces within regex (Vojtech Polasek) 2025-11-21 15:53:25.487 logging.py DEBUG - Minor update in default ini file name (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Revert "Amend: Update e2e results for OVS-related checks" (Vincent Shen) 2025-11-21 15:53:25.488 logging.py DEBUG - Revert "Update e2e results for OVS-related checks" (Vincent Shen) 2025-11-21 15:53:25.488 logging.py DEBUG - Revert "OCPBUGS-11932: Disable checks for Open vSwitch on NSX cluster" (Vincent Shen) 2025-11-21 15:53:25.488 logging.py DEBUG - add high ANSSI-BP-028 profile for Debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - add enhanced ANSSI-BP-028 profile for Debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable package_pam_apparmor_installed for Debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable grub2_enable_apparmor for Debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable package_apparmor_installed for Debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable apparmor_configured for Debian (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable all_apparmor_profiles_enforced for Debian12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian ansible remediation in audit_rules_session_events (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian ansible remediation audit_rules_privileged_commands (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian ansible remediation in audit_rules_kernel_module_loading_init (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian ansible remediation in audit_rules_kernel_module_loading_finit (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian ansible remediation in audit_rules_kernel_module_loading_delete (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - escape pipefail for debian in rsyslog_logfiles_attributes_modify (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - Remove bogus specifier from audit_rules_privileged_commands_unix2_chkpwd rule's template (Evgeny Kolesnikov) 2025-11-21 15:53:25.488 logging.py DEBUG - Fix duplicate OVAL ids (gpgkey package, GDM login) (Evgeny Kolesnikov) 2025-11-21 15:53:25.488 logging.py DEBUG - Add STIG Tables for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Add CCE-ID for SLE-15 for iptables_default_forward (Christian Hagenest) 2025-11-21 15:53:25.488 logging.py DEBUG - Add CCE-ID for SLE-12 for require_singleuser_auth (Christian Hagenest) 2025-11-21 15:53:25.488 logging.py DEBUG - Fixes update-oscal.yml to remove env context from matrix variables (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Add missing group.yml (Jan Černý) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_time_rules (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_session_events (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_networkconfig_modification (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_immutable (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_sysadmin_actions (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_time_clock_settime (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_time_adjtimex (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_login_events (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_uncuccessful_file_modification (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_file_deletion_events template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian remediation in audit_rules_dac_modification template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable osrelease strings ending with -amd64 to pass prefer_64bit_os check (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - Add ANSSI-BP-028 intermediary profile for Debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian 12 ansible remediation for accounts_maximum_age_login_defs rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable Debian remediation for sshd_set_keepalive rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable Debian bash remediation for sysctl template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - add debian remediation support in grub2_bootloader_argument template and related macros (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - fix package name for debian 12 in service_auditd_enabled rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable debian 12 in aide_build_database rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable bash remediation for Debian in package_installed template (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - enable remediation for Debian in postfix client rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - change defaut root mail alias in postfix client rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - Add ANSSI-BP-028 minimal profile for Debian 12 (Alexandre Skrzyniarz) 2025-11-21 15:53:25.488 logging.py DEBUG - Updates yaml files to comply to YAML styleguide requirements (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Updates installed dependencies on nightly_build.yml and release.yaml (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Updates requirements.txt and test-requirements.txt with lxml-stubs and requests (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Adds information about the OSCAL utilities to the developer docs (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Updates OscalStatus mappings and adds unit tests (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Updates response handling to always add the status prop to the implemented requirement (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Adds ControlSelector for extensible control response selection logic (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Adds rule and parameter transformation in OSCAL props and set parameters (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Adds a separate helper class for OSCAL profile processing (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Add type hints and mypy tests for utils/oscal (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Adds control responses by status and adds status property (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Updates requirements.txt with compliance-trestle and updates test configuration (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Adds unit tests for the handle_response function (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Adds initial OSCAL component definition generation (Jennifer Power) 2025-11-21 15:53:25.488 logging.py DEBUG - Correction of step descriptions (Jan Rodak) 2025-11-21 15:53:25.488 logging.py DEBUG - Typo in product.yml (Håvard) 2025-11-21 15:53:25.488 logging.py DEBUG - Sort shared/applicability/package.yml (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Add snmpd package platform to service_snmpd_disabled (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Add autofs package platform to service_autofs_disabled (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Remove rlogin rules from RHEL9 HIPAA profile (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Add avahi package platform to service_avahi-daemon_disabled (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Remove xinetd rules from HIPAA and e8 profiles on RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Add package telnet-server platform to service_telnet_disabled (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Add squid package platform to service_squid_disabled (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Add blueprint remedation for enable_fips_mode (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Implementation of some additional changes in ansible (rchikov) 2025-11-21 15:53:25.488 logging.py DEBUG - Update ANSSI profile description and SME for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Update ANSSI profile description and SME for RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Update ANSSI profile description and SME for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Fix url to ANSSI policy in control file (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Fix shellcheck in accounts_polyinstantiated_*tmp (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Turn off blueprint remediation for mount_option_dev_shm_* (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Remove remediations from partition_for_dev_shm (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Remove not osbuild from enable_pam_namespace (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Remove not os_build from accounts_polyinstantiated_*tmp (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Remove not osbuild from selinux-booleans group (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Make some improvements to bash remediation template (teacup-on-rockingchair) 2025-11-21 15:53:25.488 logging.py DEBUG - Add e2e test for audit_rules_login_events_faillock (Lance Bragstad) 2025-11-21 15:53:25.488 logging.py DEBUG - Removed unnecessary platform definitions in tests (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Use the rule id for the path in Kubernetes remediation (Watson Sato) 2025-11-21 15:53:25.488 logging.py DEBUG - audit_rule_login_events: handle path_is_variable in Kubernetes remediation (Watson Sato) 2025-11-21 15:53:25.488 logging.py DEBUG - Add Gate tests back to master (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Bump actions/setup-python from 4 to 5 (dependabot[bot]) 2025-11-21 15:53:25.488 logging.py DEBUG - Update shared/templates/sebool/ansible.template (Rumen) 2025-11-21 15:53:25.488 logging.py DEBUG - Update test scenario to test file hashes (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - remove irrelevant rules from rhel8 and rhel9 pci-dss profile (Vojtech Polasek) 2025-11-21 15:53:25.488 logging.py DEBUG - add warnings to package_*_removed rules (Vojtech Polasek) 2025-11-21 15:53:25.488 logging.py DEBUG - Update Ubuntu STIG-20-010072 (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Add ubuntu to rule faillock_silent and fix tests (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Add ubuntu to faillock_audit rule and fix tests (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Fix for ubuntu OVALs for rules faillock_deny and faillock_interval (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Minor fix in OVAL and version bump (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Refactor ubuntu OVAL in accounts_passwords_pam_faillock_unlock_time (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Fix ubuntu OVAL for accounts_passwords_pam_faillock_unlock_time (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Fix missing platforms in tests and add ubuntu to faillock rules (Miha Purg) 2025-11-21 15:53:25.488 logging.py DEBUG - Implementation of proposed changes (rchikov) 2025-11-21 15:53:25.488 logging.py DEBUG - Add package_firewalld_installed to RHEL 9 CIS (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Show etcd's encryption's status more clearly (Watson Sato) 2025-11-21 15:53:25.488 logging.py DEBUG - Move section to bottom of document (Jan Rodak) 2025-11-21 15:53:25.488 logging.py DEBUG - Turn off blueprint for package_MFEhiplsm_installed (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Update DISA STIG versions in SLE STIG profiles (Christian Hagenest) 2025-11-21 15:53:25.488 logging.py DEBUG - Update DISA STIG for SLES 15 to V1 R11 (Christian Hagenest) 2025-11-21 15:53:25.488 logging.py DEBUG - remove the rule from rhel8 pci-dss profile (Vojtech Polasek) 2025-11-21 15:53:25.488 logging.py DEBUG - remove the rule from the rhel7 pci-dss profile (Vojtech Polasek) 2025-11-21 15:53:25.488 logging.py DEBUG - add warning to rule timer_logrotate_enabled (Vojtech Polasek) 2025-11-21 15:53:25.488 logging.py DEBUG - Show rhel article in warning only to rhel products (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Show rhel article in warning only to rhel products (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Show rhel article in warning only to rhel products (Marcus Burghardt) 2025-11-21 15:53:25.488 logging.py DEBUG - Make sure required ansible steps are not skipped (teacup-on-rockingchair) 2025-11-21 15:53:25.488 logging.py DEBUG - Ensure that normal UEFI does not use secure boot in install_vm.py (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - Fix Secureboot Installs (Matthew Burket) 2025-11-21 15:53:25.488 logging.py DEBUG - remove rule service_ntpd_enabled from rhel8 and rhel9 pci-dss profiles (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - add warning to rule service_ntpd_enabled that the service does not exist on some products (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix style guide (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - remove stigid from rule passwd_system-auth_substack (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - replace audit_immutable_login_uids with audit_rules_immutable_login_uids in rhel9 stig (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - remove stigid from rule no longer selected in RHEL 8 STIG (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - Add documentation of the actual steps that OVAL content goes through during build (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL in no_files_unowned_by_user (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in no_files_unowned_by_user (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix test scenario comment in alignment to the commands (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL in dir_perms_world_writable_sticky_bits (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in dir_perms_world_writable_sticky_bits (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL in dir_perms_world_writable_system_owned (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in dir_perms_world_writable_system_owned (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve Bash in file_permissions_unauthorized_world_writable (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL in file_permissions_unauthorized_world_writable (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in file_permissions_unauthorized_world_writable (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL in file_permissions_unauthorized_sgid (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in file_permissions_unauthorized_sgid (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Adopt new macro in file_permissions_unauthorized_suid (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL check to not collect same objects twice (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve OVAL readability in file_permissions_unauthorized_suid (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Update file_permissions_unauthorized_suid description (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Include warning in file_permissions_ungroupowned (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Update file_permissions_ungroupowned description (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Adopt new macro in file_permissions_ungroupowned (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Introduce OVAL macro to map local mount points (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL in file_permissions_ungroupowned (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve OVAL readability in file_permissions_ungroupowned (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improved OVAL readability in rpm_verify_permissions (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in rpm_verify_permissions (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Refactor OVAL in rpm_verify_ownership (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in rpm_verify_ownership (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Add ansible remediation for ubuntu for rule accounts_password_pam_unix_remember (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - Minor improvements in Ansible remediation for rpm_verify_hashes (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Minor improvements in Bash remediation for rpm_verify_hashes (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improved OVAL readability in rpm_verify_hashes (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Improve rule description in rpm_verify_hashes (Marcus Burghardt) 2025-11-21 15:53:25.489 logging.py DEBUG - Updates the PR body message in update-oscal.yml (Jennifer Power) 2025-11-21 15:53:25.489 logging.py DEBUG - Converts the README under shared/references/oscal to Markdown (Jennifer Power) 2025-11-21 15:53:25.489 logging.py DEBUG - Minor formatting for CMake section (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Add CMakeLint requirement to CMake section (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Add GitHub Actions section to style guide (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix wording in PR section (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Updates update-oscal to use variables for references in the repositories (Jennifer Power) 2025-11-21 15:53:25.489 logging.py DEBUG - OCPBUGS-8041: Remove info override for vsyscall kernerl argument (Lance Bragstad) 2025-11-21 15:53:25.489 logging.py DEBUG - Amend: Update e2e results for OVS-related checks (Vincent Shen) 2025-11-21 15:53:25.489 logging.py DEBUG - Added few ubuntu tests for `accounts_password_pam_unix_remember` (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - Change template for 'aide_disable_silentreports' (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - Fixed tests for aide_disable_silentreports (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - Added comment for UBTU-20-010451 (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - Remove trailing whitespaces (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - add aide_disable_silentreports rule for UBTU-20-010437 (Dexter Le) 2025-11-21 15:53:25.489 logging.py DEBUG - OCP4: Add option to deploy profile without upstrem prefix (Vincent Shen) 2025-11-21 15:53:25.489 logging.py DEBUG - Add more type hints for methods in check_eof script (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Exclude mypy_cache from check_eof (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix ShellCheck in secure_boot_enabled (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix quoting for runtime_kernel_fips_enabled CPE check (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - remove explicit remediations, check and tests from templated rule audit_rules_privileged_commands_kmod (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - remove explicit remediations, check and tests from templated rule audit_rules_privileged_commands_kmod (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - Remove all contributors file (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Move ansible_sudo_remove_config to FQCN (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Add docs for ansible_sudo_remove_config (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix wrong_value test in sudo_require_authentication (Matthew Burket) 2025-11-21 15:53:25.489 logging.py DEBUG - Add profile aliases for OpenShift versioned profiles (Lance Bragstad) 2025-11-21 15:53:25.489 logging.py DEBUG - Bump JamesIves/github-pages-deploy-action from 4.4.3 to 4.5.0 (dependabot[bot]) 2025-11-21 15:53:25.489 logging.py DEBUG - Update Oracle Linux anssi profiles (Edgar Aguilar) 2025-11-21 15:53:25.489 logging.py DEBUG - Update OL8 stig selection for OL08-00-040259 (Edgar Aguilar) 2025-11-21 15:53:25.489 logging.py DEBUG - remove calls to exit from Bash remediations (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - OCP4: Fix e2e result on CIS kube file permission issues (Vincent Shen) 2025-11-21 15:53:25.489 logging.py DEBUG - bump version to 0.1.72 (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - Fixed auditd package name (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix audit key check in audit_rules_privileged_commands_fdisk (Miha Purg) 2025-11-21 15:53:25.489 logging.py DEBUG - update list of contributors before 0.1.71 release (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_base_chain/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.489 logging.py DEBUG - Disable the build of OVAL intermediate files (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - Fix FutureWarning: The behavior of this method will change in future versions. (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - Add test (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - Add parameter for generation of OVAL document for each rule (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - Implement generation of OVAL documents for each rule (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - Generate a subset of an OVAL document according to the OVALDefinitionReference class (Jan Rodak) 2025-11-21 15:53:25.489 logging.py DEBUG - Revert "Created test cases covering /etc/audit/rules.d/privileged.rules and /etc/audit/audit.rules" (rchikov) 2025-11-21 15:53:25.489 logging.py DEBUG - Revert "Additional changes into ansible part" (rchikov) 2025-11-21 15:53:25.489 logging.py DEBUG - Revert "Modification of ansible part and test files, 2 additional tests added" (rchikov) 2025-11-21 15:53:25.489 logging.py DEBUG - add multi_platform_ubuntu to sshd_lineinfile/tests (Paul Roche) 2025-11-21 15:53:25.489 logging.py DEBUG - enable sshd_distributed_config for ubuntu2004 (Paul Roche) 2025-11-21 15:53:25.489 logging.py DEBUG - enable sshd_distributed_config for ubuntu2204 (Paul Roche) 2025-11-21 15:53:25.489 logging.py DEBUG - Update grub2_mitigation_argument texts (Edgar Aguilar) 2025-11-21 15:53:25.489 logging.py DEBUG - add suggested rules to warnings (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - fix ugly grammar from previous PR (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - remove rules not relevant to rhel7 from pcidss profile (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - add rhel7 prodtype to rules related to loopback traffic (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - add rhel7 prodtype to package_audit-audispd-plugins_installed (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - add rhel7 prodtype to service_ntp_enabled (Vojtech Polasek) 2025-11-21 15:53:25.489 logging.py DEBUG - Return empty list when parameter is not found (Watson Sato) 2025-11-21 15:53:25.489 logging.py DEBUG - Add check if to continue with ansible task (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix attribute in reference element of OVAL definition (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - display warning for service_ntp_enabled also for sle15 (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - Add Ubuntu to audit_rules_kernel_module_loading tests (Miha Purg) 2025-11-21 15:53:25.490 logging.py DEBUG - audit_rules_privileged_commands_ssh_keysign: Fix ssh-keysign path for Ubuntu 22.04 (Eduardo Barretto) 2025-11-21 15:53:25.490 logging.py DEBUG - modify rhel8 and rhel9 pci-dss profiles to exclude rules which do not apply (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - add back prodtype to set_loopback_traffic (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - add back prodtypes to set_ipv6_loopback_traffic (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - add prodtype and warning to package-audit-audispd-plugins_installed (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - add back prodtype and warning to service_ntp_enabled (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - return prodtype to ntpd_specify_remote_server (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - return prodtype to ntpd_specify_multiple_servers (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - Add an ID translation test for the OVAL object model (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - Remove not applicable tests (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - Report an empty OVAL definition title or description (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - Adapt OVALlinker for OVAL object model (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - Add a method for OVAL object model translation (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - Add translate_id method to OVAL object model (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - add the rule to profile stability test (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - add enable_authselect rule to pci-dss control file (Vojtech Polasek) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix kernel_module_disabled template for Ubuntu (Miha Purg) 2025-11-21 15:53:25.490 logging.py DEBUG - Removed broken test for kernel_module_disabled (Miha Purg) 2025-11-21 15:53:25.490 logging.py DEBUG - Add check if SELinux is enabled in bash sebool remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Update e2e results for OVS-related checks (Lance Bragstad) 2025-11-21 15:53:25.490 logging.py DEBUG - OCPBUGS-11932: Disable checks for Open vSwitch on NSX cluster (Vincent Shen) 2025-11-21 15:53:25.490 logging.py DEBUG - fix: incorporates PR feedback on update-vendor.yml and directory location (Jennifer Power) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix EOF in .github/pull_request_template.md (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Added .github to EOF checker (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - feat(action): adds directory and action for vendor dir (Jennifer Power) 2025-11-21 15:53:25.490 logging.py DEBUG - Reordered rules in stig profile (Miha Purg) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix and modify UBTU-20-010463 (no_empty_passwords) (Miha Purg) 2025-11-21 15:53:25.490 logging.py DEBUG - Update pcidss reference for rhel8 profile stability test (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Exclude rpm_verify_permissions in pcidss profiles for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Remove old ubuntu versions from package_audit-audispd-plugins_installed (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Exclude rule in pci-dss profile for rhel9 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Complement pcidss_4 requirement 10.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Apdate style of sudo_require_reauthentication (Edgar Aguilar) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix wording around remove merge commits in style guide (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Add PR title rule to the style guide (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Override the tests for audit_rules_privileged_commands_kmod (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Enable remediations for audit_rules_privileged_commands_kmod on all platforms (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Add some more comments for Ansible lint (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Update Ansible Lint Config (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Per the style guide make the prodtype now required in JSON schema. (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Bump OL7 STIG version to V2R13 (Edgar Aguilar) 2025-11-21 15:53:25.490 logging.py DEBUG - Bump OL8 STIG version to V1R8 (Edgar Aguilar) 2025-11-21 15:53:25.490 logging.py DEBUG - Add test to sudo_require_reauthentication (Edgar Aguilar) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix edge case in sudo_require_reauthentication (Edgar Aguilar) 2025-11-21 15:53:25.490 logging.py DEBUG - Update DISA STIG for SLES 12 to V2 R12 (Christian Hagenest) 2025-11-21 15:53:25.490 logging.py DEBUG - Change to multi_platform_ubuntu (Miha Purg) 2025-11-21 15:53:25.490 logging.py DEBUG - Add ubuntu product to audit_rules_kernel_odule_loading_delete tests (Miha Purg) 2025-11-21 15:53:25.490 logging.py DEBUG - Include rhv4 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Update grub2_mitigation_argument (Edgar Aguilar) 2025-11-21 15:53:25.490 logging.py DEBUG - Include ol8 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Include ol8 in prodtype for service_ntpd_enabled (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Include rhcos4 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Include rhel9 in prodtype for directory_access_var_log_audit (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Update pcidss reference for rhel8 profile stability test (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Include rhel8 in prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Include rhel8 in prodtype for service_ntpd_enabled (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Include rhel cces in ntpd_specify_multiple_servers (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Define prodtype for ntpd_specify_remote_server (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Define prodtype for ntpd_specify_multiple_servers (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Define prodtype for NTP service rules (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Define prodtype for set_loopback_traffic (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Define prodtype for package_audit-audispd-plugins_installed (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Define prodtype for set_ipv6_loopback_traffic (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Add log option to stcript ./build_product (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - fix kernel_config_security_writable_hooks rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.490 logging.py DEBUG - fix kernel_config_security_dmesg_restrict rule (Alexandre Skrzyniarz) 2025-11-21 15:53:25.490 logging.py DEBUG - Add awk support in sle15 containers so can run tests involving awk processing (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix accounts_set_post_pw_existing awk expression (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix name for stig_srg_mapping_test (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Add alternatives to mandatory keys (Watson Sato) 2025-11-21 15:53:25.490 logging.py DEBUG - Update PCI-DSS profile for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Update PCI-DSS profile for RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Update PCI-DSS profile for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Add docs for tests/stig_srg_mapping.py (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Add SRG Mapping test to ctest (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Add test to ensure that rules in a STIG profile have an SRG reference (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Make sure required step is not skipped (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix code climate issues in no_new_global_applicable_rules.py (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Clean up and add types to no_new_global_applicable_rules.py (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Add forgotten patch for custom timesyncd configuration files directory is setup for test environment (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Define prodtype for directory_access_var_log_audit (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Include related_rule for pcidss_4 requirement 10.6.3 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Update pcidss_4 requirement 10.6.2 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Complement pcidss_4 requirement 10.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Update pcidss_4 requirement 10.2.1.4 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Remove duplicated rule in pcidss_4 10.6.3 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Complement pcidss_4 requirement 10.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Improve pcidss_4 requirement 10.2.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Complement pcidss_4 requirement 10.7.2 (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Enable PCI-DSS in test-farm tests (Marcus Burghardt) 2025-11-21 15:53:25.490 logging.py DEBUG - Add SRG id to file_owner_grub2_cfg for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Remove new line (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - Enable debug loging in CMAKE (Jan Rodak) 2025-11-21 15:53:25.490 logging.py DEBUG - Add docs for `utils/no_new_global_applicable_rules.py` (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Make prodtype required on all new rules in the style guide (Matthew Burket) 2025-11-21 15:53:25.490 logging.py DEBUG - Drop service_timesyncd_configured from CIS SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix ansible SLES cis remediations in check mode (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Make sure custom timesyncd configuration files directory is setup for test environment (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Drop superfluous condition (teacup-on-rockingchair) 2025-11-21 15:53:25.490 logging.py DEBUG - Fix by mistake overwritten comment (teacup-on-rockingchair) 2025-11-21 15:53:25.491 logging.py DEBUG - Remove smart-quotes in pcidss_4.yml (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Update status of parent pcidss_4 requirements (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Complement few pcidss_4 requirement 6.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Move dconf_db_up_to_date rule in pcidss_4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Add missing SLE15 CCE id for package_libselinux_installed rule (teacup-on-rockingchair) 2025-11-21 15:53:25.491 logging.py DEBUG - Include rhv4 in no_password_auth_for_systemaccounts (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Complement few pcidss_4 requirements (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Include prodtype in rules without SLE cce (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Fix typo and improved wording (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Complement pcidss_4 requirement 8.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Quote pcidss_4 ids that might be seen as float (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Complement pcidss_4 requirement 3.3.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.6 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A3.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A2.1.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A2.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A2.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A1.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A1.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A1.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement A1.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.7 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.6 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.10.1 and 12.10.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.9 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.8.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.7 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.6 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.3.4. (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.3.3. (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.3.2. (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 12.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.6 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.5.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.5.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 11.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Include option in var_password_pam_tally2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.7.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.7.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.7.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.6.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.6.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.6.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.5.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.4.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.3.1 and 10.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.7 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.6 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Fix small indentation issue in 10.2.1.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 10.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Fix typo in pcidss_4 reference in 3 rules (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.7 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.6 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 9.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Fix typo in description key of 8.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.6.3 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.6.2 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.6.1 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.5 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.4 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.11 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.10 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.9 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.8 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.7 (Marcus Burghardt) 2025-11-21 15:53:25.491 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.6 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.5 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.8 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.7 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.6 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.5 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 8.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.6 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.5 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 7.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.6 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.5 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.4 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.5.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.4.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.492 logging.py DEBUG - Review and update pcidss_4 requirement 6.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.5 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.4 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.2 and 5.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 5.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 4.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 4.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.7.8 and 3.7.9 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Include pcidss_4 missing requirement 3.7.7 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.7.1 to 3.7.6 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.6.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.6.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.6.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.5.1.3 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.5.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.5.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.4 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.511 logging.py DEBUG - Review and update pcidss_4 requirement 3.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 3.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 3.2 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 3.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.3 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.7 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.6 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.5 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 2.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.5.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Change 1.4.2 and 1.4.3 from automated to partial (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.5 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.4 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.3 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.2 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.4.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.3.3 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.3.2 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.3.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.8 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.7 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.6 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Include pcidss_4 missing requirement 1.2.5 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.4 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.3 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.2 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.2.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.1.2 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Review and update pcidss_4 requirement 1.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Update pcidss_4 control file header (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Improve stability of timesyncd based remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.512 logging.py DEBUG - Reformat combine_ovals.py with black tool (Jan Rodak) 2025-11-21 15:53:25.512 logging.py DEBUG - Fix comparation of object in python2 (Jan Rodak) 2025-11-21 15:53:25.512 logging.py DEBUG - Modify tests to use the new OVAL bulder (Jan Rodak) 2025-11-21 15:53:25.512 logging.py DEBUG - Modify combine_ovals.py to use the new OVAL bulder (Jan Rodak) 2025-11-21 15:53:25.512 logging.py DEBUG - Modify the OVAL builder to use the OVAL object model (Jan Rodak) 2025-11-21 15:53:25.512 logging.py DEBUG - Fix CI job after Fedora 39 release (Jan Černý) 2025-11-21 15:53:25.512 logging.py DEBUG - Modification of ansible part and test files, 2 additional tests added (rchikov) 2025-11-21 15:53:25.512 logging.py DEBUG - Add new script to ensure that no new rules don't have a prodtype (Matthew Burket) 2025-11-21 15:53:25.512 logging.py DEBUG - Update the RHEL8 STIG profile stability data (Simon THOBY) 2025-11-21 15:53:25.512 logging.py DEBUG - Fix multiple STIG IDs for RHEL8 (THOBY Simon) 2025-11-21 15:53:25.512 logging.py DEBUG - Switch set_firewalld_default_zone to a 'lineinfile' template (Simon THOBY) 2025-11-21 15:53:25.512 logging.py DEBUG - Add a warning to rule service_rngd_enabled (Jan Černý) 2025-11-21 15:53:25.512 logging.py DEBUG - Extend OVAL filters to exclude dracut temp files (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Include test scenario for dracut temp files (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Minor update to remove extra empty line (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Include test scenario for extra rules (Marcus Burghardt) 2025-11-21 15:53:25.512 logging.py DEBUG - Changes into template sebool - bash part (rchikov) 2025-11-21 15:53:25.512 logging.py DEBUG - Changes into template sebool - ansible part (rchikov) 2025-11-21 15:53:25.512 logging.py DEBUG - remove duplicated multi_platform_sle in bash.template (Whidix) 2025-11-21 15:53:25.512 logging.py DEBUG - Remove warning from kubelet rule. (Thomas Montague) 2025-11-21 15:53:25.512 logging.py DEBUG - Add var_networkmanager_dns_mode to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.512 logging.py DEBUG - Restore CRONTAB and CRONDIRS variables needed for non-SLE solution (teacup-on-rockingchair) 2025-11-21 15:53:25.512 logging.py DEBUG - Additional changes into ansible part (rchikov) 2025-11-21 15:53:25.512 logging.py DEBUG - Fix docs for utils.add_kubernetes_rule (Matthew Burket) 2025-11-21 15:53:25.512 logging.py DEBUG - Add Stabilization phase document reference to Release process doc (Milan Lysonek) 2025-11-21 15:53:25.512 logging.py DEBUG - Add stabilization phase description to developers guide (Milan Lysonek) 2025-11-21 15:53:25.512 logging.py DEBUG - Add optional product argument (Jan Rodak) 2025-11-21 15:53:25.512 logging.py DEBUG - Add tests (Jan Rodak) 2025-11-21 15:53:25.512 logging.py DEBUG - Add validation of referenced OVAL components (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Use GITHUB_SHA instead (Thomas Montague) 2025-11-21 15:53:25.513 logging.py DEBUG - Use recommended Github reference name for image tag. (Thomas Montague) 2025-11-21 15:53:25.513 logging.py DEBUG - Move jqfilter parameter to common parser (Watson Sato) 2025-11-21 15:53:25.513 logging.py DEBUG - Update RHEL 9 STIG IDs based on feedback (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - remove sle15 from package_samba_common_installed (Whidix) 2025-11-21 15:53:25.513 logging.py DEBUG - Rename script to add_kuberentes_rule.py (Watson Sato) 2025-11-21 15:53:25.513 logging.py DEBUG - Add support for rules with jqfilters (Watson Sato) 2025-11-21 15:53:25.513 logging.py DEBUG - Create rules in a more yaml friendly approach (Watson Sato) 2025-11-21 15:53:25.513 logging.py DEBUG - Remove references to CIS/STIG benchmarks, since Debian 12 has not been released. (Paul Rensing) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix rsyslog file test - use Jinja variable for group name (Paul Rensing) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix test of gshadow - should fix most Debian versions (Paul Rensing) 2025-11-21 15:53:25.513 logging.py DEBUG - Some templates which need Debian12 listed (Paul Rensing) 2025-11-21 15:53:25.513 logging.py DEBUG - Copy Debian11 product to Debian12 (Paul Rensing) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix rule mapping for RHEL-09-213075 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix rule mapping for RHEL-09-271030 and RHEL-09-271035 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Update rule mapping for RHEL-09-654180 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Add aide_scan_notification to RHEL-09-651015 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Corrections for rsyslog_logfiles_attributes PR #2 (Miha Purg) 2025-11-21 15:53:25.513 logging.py DEBUG - Add RHEL 9 regex for var_accounts_authorized_local_users_regex (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix formatting in the RHEL 9 STIG Control File (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Ensure RHEL 9 STIG version is in all right places (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Added missing variables to ubuntu profiles (Miha Purg) 2025-11-21 15:53:25.513 logging.py DEBUG - Corrections for rsyslog_logfiles_attributes PR (Miha Purg) 2025-11-21 15:53:25.513 logging.py DEBUG - Modified ensure_rsyslog_log_file_conf OVAL to allow user/groupnames (Miha Purg) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix for rsyslog_logfiles_attributes remediation for ubuntu (Miha Purg) 2025-11-21 15:53:25.513 logging.py DEBUG - Added ubuntu to tests for rule 'rsyslog_logfiles_attributes_modify' (Miha Purg) 2025-11-21 15:53:25.513 logging.py DEBUG - Don't hard code the wheel group in selinux_context_elevation_for_sudo (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Move selinux_context_elevation_for_sudo tests to all platforms (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Update RHEL7 STIG profiles to V3R13. (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Move RHEL 9 STIG Refchecker back to the macro (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Update on RHEL 9 STIG based on code review (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Add Unit tests (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix missing tag of affected element child (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Inherit features from OVAL container to OVAL document (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Create OVAL shorthand class (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Create OVAL container class (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Create class for stroing references of OVAL definitions (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Update tests (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Add logging and fix imports (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Update info about generator in genereted OVAL document (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Add methods for obtaining references (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Add a method to the OVAL definition that checks if the Affected in Metadata field is not empty (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - Add a method to the OVAL Definition that checks if it is applicable to the product (Jan Rodak) 2025-11-21 15:53:25.513 logging.py DEBUG - update link to ISO27001:2013 standard (Vojtech Polasek) 2025-11-21 15:53:25.513 logging.py DEBUG - update links to RHEL 8 and 9 chrony documentation (Vojtech Polasek) 2025-11-21 15:53:25.513 logging.py DEBUG - Update RHEL 7 DISA SCAP content to V3R13 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Update RHEL 7 STIG content to V3R13 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Update RHEL 8 STIG profiles (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Update RHEL 8 DISA SCAP Content (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Update RHEL 8 STIG Manual (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Pull service_rngd_enabled from the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Move RHEL-09-672030 to configure_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Pull rpm_verify_hashes from RHEL-09-214030 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Add a better Error Message For Undefined Identifier Types (Jan Černý) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix rpm python package SLE15 Automatus docker file (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Adopt gpasswd command for Bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.513 logging.py DEBUG - Remove warning about missing remediation (Marcus Burghardt) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix test scenarios for fapolicy_default_deny (Marcus Burghardt) 2025-11-21 15:53:25.513 logging.py DEBUG - Create Ansible remediation for fapolicy_default_deny (Marcus Burghardt) 2025-11-21 15:53:25.513 logging.py DEBUG - Create bash remediation for fapolicy_default_deny (Marcus Burghardt) 2025-11-21 15:53:25.513 logging.py DEBUG - Fix Codeclimate issues (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Remove add_stigid_from_csv (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Updated rule selection for RHEL-09-271090 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Adjust rule for RHEL-09-253075 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Add rule for RHEL-09-252040 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Add rule for RHEL-09-232235 (Matthew Burket) 2025-11-21 15:53:25.513 logging.py DEBUG - Add rule for RHEL-09-232230 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add rule for RHEL-09-252020 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Adjust rule for RHEL-09-213040 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Adjust rule for RHEL-09-212040 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add rule for RHEL-09-211025 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add more rules for RHEL-09-654025 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add more rules for RHEL-09-412020 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add more rules for RHEL-09-654015 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add more rules for RHEL-09-654020 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add rule for RHEL-09-654080 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add more rules for RHEL-09-654070 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add more rules for RHEL-09-654065 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Exclude enable_authselect from the refcheck on RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Update controlrefcheck script for STIGIDs (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add STIGID to cro file_owner_* rules (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add second RHEL 9 STIG for configure_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix mix up with STIG IDs for RHEL 9 on /var/log mount opts (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix STIGID for package_s-nail_installed in RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add RHEL 9 STIG manual (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add STIG ID to file_audit_tools_group_ownership (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix rule assignment for RHEL-09-231150 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Ensure that spacing is correct for all controls in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add rules for RHEL-09-232230 in the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add rules for RHEL-09-232225 in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add package_s-nail_installed to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix var_auditd_max_log_file_action (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add var_sssd_certificate_verification_digest_function for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add var_accounts_maximum_age_login_defs vars for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix var_accounts_authorized_local_users_regex (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add var for chronyd_or_ntpd_set_maxpoll to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix Needed rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Update RHEL 9 STIG FIPS rule (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add enable_authselect rule to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add password vars for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add failock vars for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add sshd_idle_timeout_value var to RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add SELinux vars for the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add PAM variables (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add umask variable (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add rekey variables (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add tests for RHEL 9 STIG control file (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Format add variables for the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add RHEL 9 STIGID for service_debug-shell_disabled (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix RHEL 9 STIG ID for RHEL-09-215060 (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Move the RHEL 9 STIG to the RHEL 9 STIG Control File (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add the RHEL 9 STIG Control File (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add RHEL 9 STIG IDs (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Improve the import script. (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - First draft of utils/add_stigid_from_csv.py (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Also remove groupmems from test scenario script (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Remove groupmems from Bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Fixed broken bash remediation for 'set_nftables_loopback_traffic' (Miha Purg) 2025-11-21 15:53:25.514 logging.py DEBUG - Minor fix for pam_faillock regex on Ubuntu (5.4.2) (Miha Purg) 2025-11-21 15:53:25.514 logging.py DEBUG - Add more information on the SLE15 approach to the aidecheck notifications (teacup-on-rockingchair) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix bash remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.514 logging.py DEBUG - Add SLE15 specific remediation for aide check notification (teacup-on-rockingchair) 2025-11-21 15:53:25.514 logging.py DEBUG - Add checks that allow notification to be implemented via systemd unit (teacup-on-rockingchair) 2025-11-21 15:53:25.514 logging.py DEBUG - Make sure to use aide_periodic_checking_systemd_timer for sle15 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.514 logging.py DEBUG - Update OVAL in sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix typos (Jan Černý) 2025-11-21 15:53:25.514 logging.py DEBUG - Corrections in bash/ansible remedition of the rule audit_rules_privileged_commands_kmod (rchikov) 2025-11-21 15:53:25.514 logging.py DEBUG - Avoid duplicate loading of component files (Jan Černý) 2025-11-21 15:53:25.514 logging.py DEBUG - Review use_pam_wheel_group_for_su description (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Rephrase the rule description and include warning (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Include fixtext section (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Improve Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Simplify bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Simplify test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Using an empty value for group has no effect (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Refactored OVAL to make it simpler and more efficient (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Updates about style and comments on OVAL (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - update sle15 test data (svet-se) 2025-11-21 15:53:25.514 logging.py DEBUG - remove unused code (Šimon Lukašík) 2025-11-21 15:53:25.514 logging.py DEBUG - Add cron.deny owner rules to srg_gpos control (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add new rule file_groupowner_cron_deny (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add new rule file_owner_cron_deny (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Minor updates in rule description (Marcus Burghardt) 2025-11-21 15:53:25.514 logging.py DEBUG - Exlcude timer_logrotate_enabled from the RHEL8 and RHEL9 anssi profiles (Matthew Burket) 2025-11-21 15:53:25.514 logging.py DEBUG - Add package requirement for auditctl tests (teacup-on-rockingchair) 2025-11-21 15:53:25.514 logging.py DEBUG - Fix rule title for networkmanager_dns_mode (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - nftables: sce: Same principle of commit 3d87ab8 (Eduardo Barretto) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix Ansible variable name in networkmanager_dns_mode (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add a platform for timer_logrotate_enabled on RHEL products (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add timer_logrotate_enabled back to RHEL 7 and RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - remove some unnecessary imports (Šimon Lukašík) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix privileged commands not concating gathered lists (Mackemania) 2025-11-21 15:53:25.515 logging.py DEBUG - install python-rpm package so to be able to run some ansible tests (svet-se) 2025-11-21 15:53:25.515 logging.py DEBUG - override crontabs package (svet-se) 2025-11-21 15:53:25.515 logging.py DEBUG - Created test cases covering /etc/audit/rules.d/privileged.rules and /etc/audit/audit.rules (rchikov) 2025-11-21 15:53:25.515 logging.py DEBUG - Add how to run unit tests via ctest (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Add Documentation about tox unit tests (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Disable flake8 (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - A fix into ansible part of the rule audit_rules_suid_privilege_function (rchikov) 2025-11-21 15:53:25.515 logging.py DEBUG - Bump version for 0.1.71 (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - fix sle remediation to unmask logrotate timer service (svet-se) 2025-11-21 15:53:25.515 logging.py DEBUG - Select the var_accounts_passwords_pam_faillock_dir=run in RHEL7 profiles. (Gabriel Becker) 2025-11-21 15:53:25.515 logging.py DEBUG - A change in ansible remediation part (rchikov) 2025-11-21 15:53:25.515 logging.py DEBUG - Add merge group trigger to required jobs (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Ensure that NetworkManger is relaoded after networkmanager_dns_mode (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add var and profiles to the editorconfig file (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add networkmanager_dns_mode to SRG GPOS Control (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add new rule networkmanager_dns_mode (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix add_reference_elements sad path (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Update Contributors for v0.1.70 (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Small changes in bash and ansible fixes of the rule aide_build_database (rchikov) 2025-11-21 15:53:25.515 logging.py DEBUG - Add JSON schmea for controls (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add JSON schema for variables (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add version metadata to the OCP PCI-DSS profile (Lance Bragstad) 2025-11-21 15:53:25.515 logging.py DEBUG - Version FedRAMP high and moderate profiles for OpenShift (Lance Bragstad) 2025-11-21 15:53:25.515 logging.py DEBUG - Add version for OCP STIG (Lance Bragstad) 2025-11-21 15:53:25.515 logging.py DEBUG - Add version for OCP CIS (Lance Bragstad) 2025-11-21 15:53:25.515 logging.py DEBUG - Update test on sshd_lineinfile (Edgar Aguilar) 2025-11-21 15:53:25.515 logging.py DEBUG - Update ansible in sshd_lineinfile (Edgar Aguilar) 2025-11-21 15:53:25.515 logging.py DEBUG - Add ansible remediation for root group owner of audit for UBTU-20-010124 (Dexter Le) 2025-11-21 15:53:25.515 logging.py DEBUG - Use shared remediations for non-template applicable OS's (Dexter Le) 2025-11-21 15:53:25.515 logging.py DEBUG - Update Mailmap (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Update ansible in sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2025-11-21 15:53:25.515 logging.py DEBUG - Update Packit (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Skipp tests that behave strangely in python2 (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Add unit test execution with coverage for ssg module and flake8 for project (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix datetime for older Python (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove old build documentation before build (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove a test that doesn't test anything (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Ignore coverage files (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - [utils/create_scap_delta_tailoring.py] Fix case where the profile was not found (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - str are not bools (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Move to datetime.datetime.now(datetime.UTC) (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add package_s-nail_installed to SRG GPOS control (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add rule package_s-nail_installed (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Add capability to create node rules (Watson Sato) 2025-11-21 15:53:25.515 logging.py DEBUG - Add libvirt-dev to read the docs apt packages (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - fix lint errors (Vojtech Polasek) 2025-11-21 15:53:25.515 logging.py DEBUG - Disable sysctl_kernel_yama_ptrace_scope rule for sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.515 logging.py DEBUG - Add SELinux as platform (teacup-on-rockingchair) 2025-11-21 15:53:25.515 logging.py DEBUG - Resolve Code Climate problem (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Add a unit test (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Fail build if controls contain invalid rule IDs (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix broken profile resolution (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Add accounts_users_own_home_directories to Ubuntu 22.04 (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Add missing prodtypes (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix broken autoprodtyper tool (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix invalid rule ID (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Add sysctl_kernel_exec_shield to OL 9 (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Add kerberos_disable_no_keytab to OL 9 (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Add package_python3-abrt-addon_removed to OL 8 (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove audit_rules_privileged_commands_pt_chown from Fedora OSPP (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove rules from SLE15 standard profile (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Add missing prodtypes to rule package_iptables_installed (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove locking_out_password_attempts from profiles (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove rule service_zebra_disabled from RHEL 9 HIPAA profile (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove service_rexec_disabled from RHEL 9 HIPAA profile (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Remove rule service_zebra_disabled from RHEL 9 E8 profile (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix rule ID (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - ubuntu2004: cis_level1_server: Add missing nftables_base_chain variables (Eduardo Barretto) 2025-11-21 15:53:25.515 logging.py DEBUG - ubuntu2204: cis_level1_server: Add missing nftables_base_chain variables (Eduardo Barretto) 2025-11-21 15:53:25.515 logging.py DEBUG - set_nftables_loopback_traffic: bash: Improve bash and store ruleset (Eduardo Barretto) 2025-11-21 15:53:25.515 logging.py DEBUG - nftables_rules_permanent: Add Ubuntu specific bash and OVAL and drop SCE (Eduardo Barretto) 2025-11-21 15:53:25.515 logging.py DEBUG - nftables: sce: Improve scripts to avoid text being recognized (Eduardo Barretto) 2025-11-21 15:53:25.515 logging.py DEBUG - Build OCP STIG profiles by default (Watson Sato) 2025-11-21 15:53:25.515 logging.py DEBUG - Update developer page with tox method for building sphinx docs (Stephen L Arnold) 2025-11-21 15:53:25.515 logging.py DEBUG - Move master to use merge groups (Matthew Burket) 2025-11-21 15:53:25.515 logging.py DEBUG - Make new functions more readable (Marcus Burghardt) 2025-11-21 15:53:25.515 logging.py DEBUG - Rename a variable (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Convert derivative name to original product ID (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Refactor: Extract function (Jan Černý) 2025-11-21 15:53:25.515 logging.py DEBUG - Export controls content metrics to Prometheus (Marcus Burghardt) 2025-11-21 15:53:25.515 logging.py DEBUG - Update package_audit-libs_installed rule.yml (Whidix) 2025-11-21 15:53:25.515 logging.py DEBUG - Extend controleval.py to show rules and variables (Marcus Burghardt) 2025-11-21 15:53:25.515 logging.py DEBUG - Include rules list for each control (Marcus Burghardt) 2025-11-21 15:53:25.515 logging.py DEBUG - remove forgotten no longer used function (Vojtech Polasek) 2025-11-21 15:53:25.515 logging.py DEBUG - rework applicability check of test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.515 logging.py DEBUG - Add shorthand with variable and state (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix attrubite with namespaces (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix misleading code (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Separate tag and namespace (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Move constant from ssg/oval_object_model/general.py to ssg/constants.py (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Fix Code climate and python2 support (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Create tests for load and store of an OVAL document (Jan Rodak) 2025-11-21 15:53:25.515 logging.py DEBUG - Rename OVALEndPoint to OVAL Entity (Jan Rodak) 2025-11-21 15:53:25.516 logging.py DEBUG - Add object of OVAL document (Jan Rodak) 2025-11-21 15:53:25.516 logging.py DEBUG - Add object reprezentation of OVAL entities (Jan Rodak) 2025-11-21 15:53:25.516 logging.py DEBUG - Add general utilities for OVAL object model (Jan Rodak) 2025-11-21 15:53:25.516 logging.py DEBUG - Unify file saving (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Remove unused logging (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - accounts_umask_etc_bashrc: ansible: Fix bashrc path for Ubuntu (Eduardo Barretto) 2025-11-21 15:53:25.516 logging.py DEBUG - Enable ansible and bash remediation for sssd for UBTU-20-010441 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Add Ubuntu ansible remediation and shorten shared ansible for UBTU-20-010450 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Change how example ROLE_LIST are formatted (Watson Sato) 2025-11-21 15:53:25.516 logging.py DEBUG - Remove dnf5 from Rawhide job (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix OrderedDict definition (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Bump paambaati/codeclimate-action from 4.0.0 to 5.0.0 (dependabot[bot]) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix Ansible Tasks order (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Remove the rule accounts_passwords_pam_faillock_interval from SLE profiles (rchikov) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix path for aide to /etc/aide/aide.conf for UBTU-20-010205 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - [utils/create-stig-overlay.py] Marked the output flag as required (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - [utils/create-stig-overlay.py] raw_input -> input (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Use fromJSON function to expand rules from CTF (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - Simplify ansible remediation of auditd_name_format. (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix ansible remediation style. (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - Make sure value none is double quoted in variables. (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - Add warning to auditd_name_format. (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - Select STIG variable for auditd_name_format in STIG profiles. (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - Make auditd_name_format accept multiple valid values. (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - Add variable support to configure_auditd_data_retention rule. (Gabriel Becker) 2025-11-21 15:53:25.516 logging.py DEBUG - fix ssh-keysign path for UBTU-20-010141 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Add UBTU-20-010463 to ensure system does not allow accounts configured with blank or null pass (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Add dependabot (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Revert actions/checkout to v3 on CentOS 7 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix UBTU-20-010179 to use proper parameters and key (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Enable ansible remediation for MACs SSH UBTU-20-010043 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Add UBTU-20-010461 to ensure kernel module usb-storage is blacklisted and disabled (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Refactor logic and fix ocil for UBTU-20-010033 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix ansible for accounts_umask_interactive_users (Edgar Aguilar) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix UBTU-20-10450 STIG (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Update changelog to use new format (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Update mikepenz/release-changelog-builder-action@v3 to v4 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Update actions/checkout@v{2,3} to actions/checkout@v4 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Update notiz-dev/github-action-json-property from 0.1.0 to 0.2.0 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Update actions/upload-artifact from 2 to 3 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Update JamesIves/github-pages-deploy-action from 4.3.3 to 4.4.3 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Update geekyeggo/delete-artifact to v2 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Add support for xccdf_variable (Watson Sato) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix Automatus traceback (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Use var_accounts_passwords_pam_faillock_dir in audit_rules_login_events (Jan Černý) 2025-11-21 15:53:25.516 logging.py DEBUG - Add rules for GRUB2 permissions to standard profile (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Add file owner and group owner rules for auth files to standard (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Add gid_passwd_group_same to standard profile (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Add service_auditd_enabled to standard (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - Add file permission for /etc/{group,passwd,shadow} (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - fix delete_module for UBTU-20-010181 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - add sphinxcontrib-apidoc to docs build, test sphinx with tox file (Stephen L Arnold) 2025-11-21 15:53:25.516 logging.py DEBUG - Update bash for accounts_umask_etc_profile (Edgar Aguilar) 2025-11-21 15:53:25.516 logging.py DEBUG - Add test to accounts_umask_interactive_users (Edgar Aguilar) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix bash for accounts_umask_interactive_users (Edgar Aguilar) 2025-11-21 15:53:25.516 logging.py DEBUG - Remove DRAFT wording for OpenShift STIG (Lance Bragstad) 2025-11-21 15:53:25.516 logging.py DEBUG - api_server_encryption_provider_cipher rule.yml has bad jsonpath (Paul Bastide) 2025-11-21 15:53:25.516 logging.py DEBUG - Update Ubuntu 20.04 DISA Manual STIG to v1r9 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Replace shell command with find for chrony.conf files on UBTU-20-010435 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Add rsyslog ansible remediation for UBTU-20-010403 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Add remediation and OVAL for UBTU-20-010297 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Fix path and add ansible remediation UBTU-20-010298 (Dexter Le) 2025-11-21 15:53:25.516 logging.py DEBUG - Updates based reviewer feedback in #11076 (Matthew Burket) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro bash_firefox_cfg_setting (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: ansible_pkg_conditional: use basic types (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro ocil_firefox_config (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro fixtext_audit_rules_comman (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro kubernetes_machine_config_file_with_required_value (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro kubernetes_machineconfig_auditd_config_with_required_value (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro ansible_etc_profile_set (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro body_of_warning_about_dependent_rule (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro bash_perform_audit_rules_privileged_commands_remediation (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro kernel_build_config_ocil (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro kernel_build_config_warning (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: join_list: use full type (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: create_system_accounts_list_object: param/type format (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: machine_volume_encrypted: extra } in ocil (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: openshift_cluster_setting/doc: type change (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: openshift_filtered_cluster_setting: typing (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: oval_argument_value_in_line_test: set value really optional (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: oval_line_in_file_state: change multi_value is boolean (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification: use full type (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_chown: duplicate macro definition (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: ocil_firewalld_*_access: either service or port+proto (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: describe_firewalld_prevent: rename and simplify (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: describe_firewalld_allow: split either service or proto (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: harden_ssh_client_crypto_policy: multi_value is boolean (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: jinja: remove unused macro bash_firefox_js_setting (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: audit_syscalls_rule: key is optional (Markus Linnala) 2025-11-21 15:53:25.516 logging.py DEBUG - fix: ansible_set_config_file: escape_regex not used (Markus Linnala) 2025-11-21 15:53:25.517 logging.py DEBUG - style: jinja: ws cleanum in macro body (Markus Linnala) 2025-11-21 15:53:25.517 logging.py DEBUG - style: jinja macros: add/remove newlines (Markus Linnala) 2025-11-21 15:53:25.517 logging.py DEBUG - style: jinja macros: no 2 consecutive emtpy lines (Markus Linnala) 2025-11-21 15:53:25.517 logging.py DEBUG - change: style_guide: use python typing types (Markus Linnala) 2025-11-21 15:53:25.517 logging.py DEBUG - Fix excluded_files and recursive for UBTU-20-010416 (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Fix UBTU-20-010267 and deprecate STIGs (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Deprecate UBTU-20-010180 (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Remove override-true-all-profile-* tests (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Expand docs for STIG spreadsheets (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Generate metrics file in build folder (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Add UBTU-20-010044 to existing ansible remediation (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Fix UBTU-20-010449 ansible remediation to proper path and substitution (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Add UBTU-20-010401 to restrict kernel message buffer (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Add UBTU-20-010462 to lock accounts without passwords (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Add UBTU-20-010181 for generating audit record for unsuccessful attempts to delete_module syscall (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - fix naming for UBTU-20-010430 (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - Ensure prometheus-client module is installed (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Update generate_html_pages.sh to include policies metrics (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Include task to generate policies metrics (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - sshd_use_approved_kex_ordered_stig: tests: Fix logic in correct_scrambled (Eduardo Barretto) 2025-11-21 15:53:25.517 logging.py DEBUG - sshd_use_approved_kex_ordered_stig: tests: Fix typo in correct_scrambled (Eduardo Barretto) 2025-11-21 15:53:25.517 logging.py DEBUG - Add UBTU-20-010045 for enforcing proper kex exchange algorithms (Dexter Le) 2025-11-21 15:53:25.517 logging.py DEBUG - sshd_use_approved_kex_ordered_stig: oval: Fix regex and improve comment (Eduardo Barretto) 2025-11-21 15:53:25.517 logging.py DEBUG - Include conditional ctest for prometheus metrics (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Minor comment update in requirements.txt (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Remove prometheus functions from controleval.py (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Introduce the controleval_metrics.py (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Make the output to stdout as default (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Update requirements.txt for prometheus in controleval.py (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Abbreviate controls_manager to ctrls_mgr (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Minor type hints updates in new functions (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Create functions to create prometheus registry (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Create functions to collect prometheus metrics (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Define new subcmd for Prometheus metrics (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Simplify main function (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Fix minor typo (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - sshd_use_strong_kex: Fix OVAL variable comment (Eduardo Barretto) 2025-11-21 15:53:25.517 logging.py DEBUG - Include new options in var_accounts_minimum_age_login_defs (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Include python3-pip in Ubuntu dependencies (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Include warning about missing OVAL check (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Remove wrong OVAL check (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Fix Gate Test on Fedora Rawhide (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Ensure Python dependencies in Gate tests (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Enable lograte timer check on RHCOS4 (Watson Sato) 2025-11-21 15:53:25.517 logging.py DEBUG - Align bash and Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Simulate interaction for pkcs11-switch command (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - scap-security-guide: Add Poky support (Armin Kuster) 2025-11-21 15:53:25.517 logging.py DEBUG - Use correct build_ds_container script (Watson Sato) 2025-11-21 15:53:25.517 logging.py DEBUG - Add SCAPVal to stabilize task (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Remove unused code (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - update link to English version of ANSSI guide (Vojtech Polasek) 2025-11-21 15:53:25.517 logging.py DEBUG - Use lxml in the publication GitHub job (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Add mount platform to mount_option_var_nosuid (Eduardo Barretto) 2025-11-21 15:53:25.517 logging.py DEBUG - Add a faster alternative for generating HTML guides (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Do not coment settings in /usr/lib/sysctl.d/* (teacup-on-rockingchair) 2025-11-21 15:53:25.517 logging.py DEBUG - add platforms to appropriate audit rules to exclude them from aarch64 architecture (Vojtech Polasek) 2025-11-21 15:53:25.517 logging.py DEBUG - Add a test for pcre2 compatibility (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Resolve CodeClimate issue (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Do not use textwrap module (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Update platforms in test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Small alignment in jinja conditional syntax (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Make control more flexible in remediation (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Make verbiage in rule description more flexible (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Use generate_profile_remediations.py during build (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Extend generate_bash_scripts.py to build Ansible (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Convert code to a class (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Update tests for audit login events faillock (Mackemania) 2025-11-21 15:53:25.517 logging.py DEBUG - Optimize KubeletConfig rules (Vincent Shen) 2025-11-21 15:53:25.517 logging.py DEBUG - Aling Bash and Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Update Bash remediation to use better macro (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Update regex reference for new sshd_config line (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Change rule to use variable when auditing faillock (Mackemania) 2025-11-21 15:53:25.517 logging.py DEBUG - Minor OVAL improvements in sshd_disable_compression (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Improve the remediation header (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Add executable permission (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - iptables_ruleset_modifications: depend on iptables being installed (Craig Andrews) 2025-11-21 15:53:25.517 logging.py DEBUG - Resolve CodeClimate problems (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Build profile bash scripts differently (Jan Černý) 2025-11-21 15:53:25.517 logging.py DEBUG - Update no_legacy_plus_entries_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Update no_legacy_plus_entries_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Include rule warnings about possible corner cases (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - New Ansible macro to configure pam_lastlog.so (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Update test scenario scripts in alignment to Bash changes (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - New Bash macro to configure pam_lastlog.so (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Fix Ansible macros used for PAM (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Make sure cis reference is interpreted as string (teacup-on-rockingchair) 2025-11-21 15:53:25.517 logging.py DEBUG - Update no_legacy_plus_entries_etc_group (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Update enable_fips_mode to follow the style guide (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Change enable_fips_mode to multi_platform_all (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Add Ansible remediation for directory_group_ownership_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Add missing CIS references for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.517 logging.py DEBUG - Update control value (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Add product as parameter when building profile reports (teacup-on-rockingchair) 2025-11-21 15:53:25.517 logging.py DEBUG - Add new tests for auditd_configure_rules/directory_ownership_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Update after_match value (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Remove extra blank lines from remediation (Marcus Burghardt) 2025-11-21 15:53:25.517 logging.py DEBUG - Add Ansible remediation for directory_ownership_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.517 logging.py DEBUG - Update CMakeLists.txt (akuster) 2025-11-21 15:53:25.518 logging.py DEBUG - Update CMakeLists.txt (akuster) 2025-11-21 15:53:25.518 logging.py DEBUG - Update CMakeLists.txt (akuster) 2025-11-21 15:53:25.518 logging.py DEBUG - Grant packages permissions to k8s-content workflow (Watson Sato) 2025-11-21 15:53:25.518 logging.py DEBUG - Allow the workflow to write (Watson Sato) 2025-11-21 15:53:25.518 logging.py DEBUG - Add tmux platform to tmux related rules. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - do not produce output when using grep command (Vojtech Polasek) 2025-11-21 15:53:25.518 logging.py DEBUG - Assign RHEL-08-020332 to no_empty_passwords. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Assign RHEL-08-020014 to accounts_passwords_pam_faillock_unlock_time. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Assign RHEL-08-020018 to accounts_passwords_pam_faillock_silent. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Assign more STIG ids to accounts_passwords_pam_faillock_dir. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Restrict accounts_passwords_pam_faillock_audit to RHEL>=8.2. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Restrict accounts_passwords_pam_faillock_deny_root to RHEL>=8.2. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Assign RHEL-08-020028 to account_password_selinux_faillock_dir. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Assign RHEL8 STIG id to service_rngd_enabled. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Update the STIG overlay creation to support multiple STIG ids per rule. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - It's not possible to select the default selector. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Do not use default selector as it results in an OpenSCAP error. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Drop template section for rule in sle context (teacup-on-rockingchair) 2025-11-21 15:53:25.518 logging.py DEBUG - Fix accounts_passwords_pam_tally2_unlock_time OVAL check (teacup-on-rockingchair) 2025-11-21 15:53:25.518 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/package_nftables_removed/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.518 logging.py DEBUG - add test scenario (Vojtech Polasek) 2025-11-21 15:53:25.518 logging.py DEBUG - improve regexp capturing mount point from fstab (Vojtech Polasek) 2025-11-21 15:53:25.518 logging.py DEBUG - Fix ansible remediation of configure_ssh_crypto_policy. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Improved indentation in the new macros (teacup-on-rockingchair) 2025-11-21 15:53:25.518 logging.py DEBUG - Update SCAPVAL docs (Matthew Burket) 2025-11-21 15:53:25.518 logging.py DEBUG - Improve Consistency of Headings in 5_tools_and_utilities.md (Matthew Burket) 2025-11-21 15:53:25.518 logging.py DEBUG - Correct up-to-date in docs (Matthew Burket) 2025-11-21 15:53:25.518 logging.py DEBUG - Github -> GitHub in docs (Matthew Burket) 2025-11-21 15:53:25.518 logging.py DEBUG - s.a. to i.e. or e.g. in docs (Matthew Burket) 2025-11-21 15:53:25.518 logging.py DEBUG - add rules enabling audit to ANSSI control file (Vojtech Polasek) 2025-11-21 15:53:25.518 logging.py DEBUG - add anssi references to rules (Vojtech Polasek) 2025-11-21 15:53:25.518 logging.py DEBUG - Implementation of the correction proposed (rchikov) 2025-11-21 15:53:25.518 logging.py DEBUG - Update fixtext to represent correct file of disabled module. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Fix title variable expansion in ansible remediation. (Gabriel Becker) 2025-11-21 15:53:25.518 logging.py DEBUG - Add a HTML link to XCCDF Values (Jan Černý) 2025-11-21 15:53:25.518 logging.py DEBUG - Clean up some cis references that are in rules not used in such (Eduardo Barretto) 2025-11-21 15:53:25.518 logging.py DEBUG - no_empty_passwords: Remove cis@ubuntu2204 (Eduardo Barretto) 2025-11-21 15:53:25.518 logging.py DEBUG - ubuntu2204: cis_level1_server: Add no_forward_files (Eduardo Barretto) 2025-11-21 15:53:25.518 logging.py DEBUG - ubuntu: cis_level1_server: Fix CIS ID for mount_option_home_nosuid (Eduardo Barretto) 2025-11-21 15:53:25.518 logging.py DEBUG - pam_faillock: Fix issue in OVAL regex check for Ubuntu after improvement (Eduardo Barretto) 2025-11-21 15:53:25.518 logging.py DEBUG - Update kernel_build_config templated scenarios to work in container env (Matus Marhefka) 2025-11-21 15:53:25.518 logging.py DEBUG - remove sebool_secure_mode_insmod from RHEL ANSSI high (Vojtech Polasek) 2025-11-21 15:53:25.518 logging.py DEBUG - Fix platform limitation for all sle and error in shebang (teacup-on-rockingchair) 2025-11-21 15:53:25.518 logging.py DEBUG - Remove "not available" message (Jan Černý) 2025-11-21 15:53:25.518 logging.py DEBUG - Refine platform requirement from package to service for improved flexibility (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Reuse macro for service disabled checks (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Add rule and template for service disabled cpe check (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Rework platform requirements to check for service firewalld disabled (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Express more accurate per package platform limitation for firewall rules (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove unused import (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Add warning to network_configure_name_resolution (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - remove rules not relevant to RHEL 9 from STIG profile (Vojtech Polasek) 2025-11-21 15:53:25.537 logging.py DEBUG - Add RHEL as platform in su pam wheel group remidiation (Mackemania) 2025-11-21 15:53:25.537 logging.py DEBUG - Improve rendering controls to HTML (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - OCPBUGS-11696: Update encryption type to support 4.13 deployments (Lance Bragstad) 2025-11-21 15:53:25.537 logging.py DEBUG - Fix kernel config name typo in rule kernel_config_slab_freelist_random (Matus Marhefka) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove rule from OCP CIS v.1.4.0 (Watson Sato) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove duplicate builds for GitHub Actions (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Add tests to cover cases of missing/commented GRUB_CMDLINE_LINUX cfg (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Drop trailing whitespaces (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove test "validate-parse-platform" (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Improve template macros for grub command line (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Drop irrelevant return statement in bash remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.537 logging.py DEBUG - Fix namespace when checking the hosted clusters (Watson Sato) 2025-11-21 15:53:25.537 logging.py DEBUG - Update docs for yamlpath (Matthew Burket) 2025-11-21 15:53:25.537 logging.py DEBUG - Remvoe YAML path from test-requirements.txt (Matthew Burket) 2025-11-21 15:53:25.537 logging.py DEBUG - Update metadata of OSPP profile in RHEL8/9. (Gabriel Becker) 2025-11-21 15:53:25.537 logging.py DEBUG - test_machine_only_rules: allow multiple whitespaces within Ansible conditional (Vojtech Polasek) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove yamlpath from CMakeLists.txt (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove reference files used by file_block_removed_and_added test (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove scripts used for file_block_removed_and_added tests (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove the file_block_removed_and_added test (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - OCPBUGS-7455: Hide API warning messages (Vincent Shen) 2025-11-21 15:53:25.537 logging.py DEBUG - OCPBUGS-17216: Update rotate certificates check for OCP 4.14 (Lance Bragstad) 2025-11-21 15:53:25.537 logging.py DEBUG - Update test scenario scripts in alignment to the check (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Update Ansible remediation in alignment to the check (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Update bash remediation in alignment to the check (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Simplify display_login_attempts check (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Reduce the number of times we build all of the products in CI (Matthew Burket) 2025-11-21 15:53:25.537 logging.py DEBUG - OCPBUGS-10508: Add quotes around SCC audit procedure (Lance Bragstad) 2025-11-21 15:53:25.537 logging.py DEBUG - Update the rule text to align with the checks (Watson Sato) 2025-11-21 15:53:25.537 logging.py DEBUG - Fix remediation of sssd_enable_smartcards (Edgar Aguilar) 2025-11-21 15:53:25.537 logging.py DEBUG - Add test to sshd_lineinfile template (Edgar Aguilar) 2025-11-21 15:53:25.537 logging.py DEBUG - Fix regex in bash_sshd_remediation macro (Edgar Aguilar) 2025-11-21 15:53:25.537 logging.py DEBUG - Update rule description of display_login_attempts (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Add CCN profile refchecks tests for RHEL 9. (Matthew Burket) 2025-11-21 15:53:25.537 logging.py DEBUG - Add CIS refchecks tests for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.537 logging.py DEBUG - Unify tests that use fix_rules.py (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Add "test_all" subcommand (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Refactor fix_rules.py (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Update reference for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Update sshd_approved_ciphers value for RHEL9 STIG Draft (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Update sshd_approved_ciphers value for RHEL8 STIG (Marcus Burghardt) 2025-11-21 15:53:25.537 logging.py DEBUG - Keep the rule's e2e result aligned with CI version (Watson Sato) 2025-11-21 15:53:25.537 logging.py DEBUG - Add additional rules from CIS Level 1 to SAP hardening profile (sampsone) 2025-11-21 15:53:25.537 logging.py DEBUG - Check for etcd pod specification in /etc/kubernetes/manifests (Watson Sato) 2025-11-21 15:53:25.537 logging.py DEBUG - Change "[DRAFT]" to DRAFT in draft profiles (Matthew Burket) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove kernel cmdline check (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Skip OVAL schematron validation in CI (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Remove CTest test "parse affected' (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Check for presence of "affected" element (Jan Černý) 2025-11-21 15:53:25.537 logging.py DEBUG - Update tests in ssh ciphers rule (Edgar Aguilar) 2025-11-21 15:53:25.537 logging.py DEBUG - Update OL8 STIG sshd_approved_ciphers (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Update tests in ssh macs rule (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Update OL8 STIG sshd_approved_macs (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Use parameter value in ansible lineinfile macro. (Gabriel Becker) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix service_httpd_disabled rule (Whidix) 2025-11-21 15:53:25.538 logging.py DEBUG - Improve Ansible remediation for dir_perms_world_writable_sticky_bits (Marcus Burghardt) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix whitespace issue in build system guide (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Add compile_product.py to the docs (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix Rawhide Python Install (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Split base building requirements into a new file (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Add manifest as a dependence for zipfile (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Update default event creation limit to 50 (Watson Sato) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix package name in components mapping (Marcus Burghardt) 2025-11-21 15:53:25.538 logging.py DEBUG - Update package name in rule description (Marcus Burghardt) 2025-11-21 15:53:25.538 logging.py DEBUG - Update CCN A.25.SEC-RHEL1 and A.25.SEC-RHEL2 (Marcus Burghardt) 2025-11-21 15:53:25.538 logging.py DEBUG - Enable package_cryptsetup-luks_installed for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.538 logging.py DEBUG - Remove tests from templated rule (Marcus Burghardt) 2025-11-21 15:53:25.538 logging.py DEBUG - Include test scenarios for timer_enabled template (Marcus Burghardt) 2025-11-21 15:53:25.538 logging.py DEBUG - Add Oracle Linux 9 as supported platform (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/system/logging/log_rotation/timer_logrotate_enabled/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Remove rules that cannot be applied during image build (Robert Schweikert) 2025-11-21 15:53:25.538 logging.py DEBUG - Add prodtype clause to limit rule to platforms with logrotate.timer defined (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Add manifests to zipfile target (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix STIG version for RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Move to setting the variable value in harden_sshd_macs_opensshserver_conf_crypto_policy tests (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Create new option for SSHD MAC (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Update RHEL 8 Profile Stability (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Add service_rngd_enabled to the RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Update comment for RHEL-08-040060 (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - The STIG now reflects that SSHD KeepAlive settings are for network issues (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Add RHEL-08-020035 to the RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Add note for RHEL-08-010471 that its not applicable for RHEL 8.4+ (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Update harden_sshd_macs_opensshserver_conf_crypto_policy for RHEL-08-010290 (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Update RHEL8 STIG to V1R11 (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix shellcheck errors in bash template (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Add SRG to login_session_timeout (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Update chrony docs url (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Remove CIS reference from image policy webhook rule (Lance Bragstad) 2025-11-21 15:53:25.538 logging.py DEBUG - Remove protect kernel default and sysctl rules from CIS (Lance Bragstad) 2025-11-21 15:53:25.538 logging.py DEBUG - Reduce cyclomatic complexity in Profile.to_xml_element (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - minor typo fix: add missing comma (Šimon Lukašík) 2025-11-21 15:53:25.538 logging.py DEBUG - Add profile version tests (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - default_result is pass on these sysctl rules (Watson Sato) 2025-11-21 15:53:25.538 logging.py DEBUG - sysctl_kernel_kptr_restrict is PASS by default (Watson Sato) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix STIG versions for RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix STIG versions for RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Add platform logrotate clause for logrotate related rules (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Modifications in the rules' definitions (rchikov) 2025-11-21 15:53:25.538 logging.py DEBUG - Correction in oval part (rchikov) 2025-11-21 15:53:25.538 logging.py DEBUG - Added prodtypes to package_logrotate_installed and timer_logrotate_enabled (rchikov) 2025-11-21 15:53:25.538 logging.py DEBUG - Added missing CCE numbers to the rules package_logrotate_installed and timer_logrotate_enabled (rchikov) 2025-11-21 15:53:25.538 logging.py DEBUG - Changes in SLE 12/15 profiles to support logrotate service (rchikov) 2025-11-21 15:53:25.538 logging.py DEBUG - use jinja conditionals to specify a package which provides systemd-coredump.socket (Vojtech Polasek) 2025-11-21 15:53:25.538 logging.py DEBUG - OL7 DISA STIG v2r12 update (Federico Ramirez) 2025-11-21 15:53:25.538 logging.py DEBUG - Update applicability of rule for OL8 (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Add kernel_uek platform (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Add secureboot platform (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Add rule logind_session_timeout to OL8 STIG (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Update platform of service_rngd_enabled for OL8 (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Create runtime_kernel_fips_enabled cpe (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - Update OL8 STIG to V1R7 (Edgar Aguilar) 2025-11-21 15:53:25.538 logging.py DEBUG - accounts_umask_etc_bashrc: depend on bash being installed (Craig Andrews) 2025-11-21 15:53:25.538 logging.py DEBUG - Add version to profile to xml test data (Matthew Burket) 2025-11-21 15:53:25.538 logging.py DEBUG - Align comment with code (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/empty_config.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/dropin_config.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/bash/shared.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/timesyncd_config.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/no_fallback.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/empty_config.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Drop redundant checks for timesyncd enabled (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Drop redundant criterion (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Drop irrelevant commit (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/dropin_config.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/timesyncd_config.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/tests/no_distance_config.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/bash/shared.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Drop redundant oval check for timesyncd enabled (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Add service_timesyncd_root_distance_configured to systemd component (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Improve service_timesyncd_configured tests naming (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Add implementation of service_timesyncd_root_distance_configured rule (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Extract root distance check and remediation in separate rule (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Reuse timesyncd enabled from service_timesyncd_enabled (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Move tests to the right place in the project structure (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Improve code style working with bash arrays (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Implement bash remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Rebase and map timesyncd_configured to systemd component (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Fix rule description (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Update linux_os/guide/services/ntp/service_timesyncd_configured/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Improve the oval checks and remediations and add tests (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Add rule service_timesyncd_configured to CIS SLE profiles (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Add SLE CCE ids for service_timesyncd_configured rule (teacup-on-rockingchair) 2025-11-21 15:53:25.538 logging.py DEBUG - Add definition of service_timesyncd_configured rule (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Refactor and simplify test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Remove unnecessary tasks from Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Refactor Ansible remediation in no_user_host_based_files (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Adopt new Ansible macro in no_host_based_files (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Adopt new Ansible macro in dir_perms_world_writable_root_owned (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Include Ansible macro to create list of local paths (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Improve OVAL comments for better readability (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - add new parameter packagename (Vojtech Polasek) 2025-11-21 15:53:25.539 logging.py DEBUG - Update shared/macros/10-warning.jinja (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Align the parameters ordering in OVAL objects (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Update components mapping for service_rpcbind_disabled (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - More robust jinja product condition (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Fix missing EOFs (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Add aide_periodic_checking_systemd_timer to aide component (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Rename the macro flag for more intuitive (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update shared/macros/10-warning.jinja (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update shared/macros/10-warning.jinja (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Better OVAL comments language (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Utilise systemd_dropin_configuration template for journald configuration rules (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Add directory_permissions_var_log_audit to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.539 logging.py DEBUG - Add dconf_gnome_login_banner_text back to the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.539 logging.py DEBUG - Add version to profile in the datastream (Matthew Burket) 2025-11-21 15:53:25.539 logging.py DEBUG - no_rsh_trust_files: depend on rsh-server being installed (Craig Andrews) 2025-11-21 15:53:25.539 logging.py DEBUG - Fix association of nfs-utils package with rpcbind service (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Add template for systemd module dropin configuration (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Fix bash array loop (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Add journald configuration droping remediations (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - add template documentation (Vojtech Polasek) 2025-11-21 15:53:25.539 logging.py DEBUG - use the new template with socket_systemd-journal-remote_disabled (Vojtech Polasek) 2025-11-21 15:53:25.539 logging.py DEBUG - service_systemd-coredump_disabled: use new template, the rule is about masking a socket (Vojtech Polasek) 2025-11-21 15:53:25.539 logging.py DEBUG - add a new template socket_disabled (Vojtech Polasek) 2025-11-21 15:53:25.539 logging.py DEBUG - Include RHEL indentifiers in timer_logrotate_enabled (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Include RHEL indentifiers in package_logrotate_installed (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Update CIS RHEL8 control file regarding logrotate rules (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Include CIS RHEL9 reference for logrotate related rules (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Update CIS reference for RHEL7 in logrotate rules (Marcus Burghardt) 2025-11-21 15:53:25.539 logging.py DEBUG - Drop warning_rule_deprecated_cause macro (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/services/ftp/ftp_configure_vsftpd/ftp_present_banner/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Drop redundant package platform requirement in test (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Rename rule's oval,ansible and bash so they can be generic (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Add package aide definition (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Improve ansible remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/tests/aide_not_installed.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/oval/sle15.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/bash/sle15.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/sle15.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/sle15.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - For SLE15 use aide_periodic_checking_systemd_timer (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Add new CCE references for aide_periodic_checking_systemd_timer (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Extract from aide_periodic_cron_checking separate rule for systemd timer (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Wrap some lines to fit in the 99 chars rule (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Add remediations for aide_periodic_cron_checking via systemd (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - Add option to verify the periodic check also through systemd timer (teacup-on-rockingchair) 2025-11-21 15:53:25.539 logging.py DEBUG - A correction in the rule pam_disable_automatic_configuration (rchikov) 2025-11-21 15:53:25.540 logging.py DEBUG - remove duplicate oval state (Vojtech Polasek) 2025-11-21 15:53:25.540 logging.py DEBUG - rewrite criteria in OVAL (Vojtech Polasek) 2025-11-21 15:53:25.540 logging.py DEBUG - shared: templates: file_permissions: fix ansible find regex parameter (Eduardo Barretto) 2025-11-21 15:53:25.540 logging.py DEBUG - Use explicit empty value for oval_test_package_installed's EVR parameter (teacup-on-rockingchair) 2025-11-21 15:53:25.540 logging.py DEBUG - SLE15 selinux policy directories depend on separate packages (teacup-on-rockingchair) 2025-11-21 15:53:25.540 logging.py DEBUG - add OVAL tests to test for fips=1 in /boot/loader/entries and in kernel command line (Vojtech Polasek) 2025-11-21 15:53:25.540 logging.py DEBUG - Update RHEL 7 STIG profile to V3R12 (Matthew Burket) 2025-11-21 15:53:25.540 logging.py DEBUG - Update RHEL 7 STIG references to V3R12 (Matthew Burket) 2025-11-21 15:53:25.540 logging.py DEBUG - Sanitize lines for clean YAML output when generating profiles (Lance Bragstad) 2025-11-21 15:53:25.540 logging.py DEBUG - Corrections related to audit_rules_sysadmin_actions and adaptation of the rule sudo_log_events for usage in SLE 12/15 (rchikov) 2025-11-21 15:53:25.540 logging.py DEBUG - Fix in audit_rules_systadmin_actions and new rule audit_rules_sysadmin_scope (rchikov) 2025-11-21 15:53:25.540 logging.py DEBUG - Implementation of the recommended changes (rchikov) 2025-11-21 15:53:25.540 logging.py DEBUG - Fix into the rule sysctl_kernel_randomize_va_space (rchikov) 2025-11-21 15:53:25.540 logging.py DEBUG - Update controls to parse and validate the new fields (Matthew Burket) 2025-11-21 15:53:25.540 logging.py DEBUG - Refactor Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - Minor updates in rule description to improve readability (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - Replace shell module by command module (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - change hardcoded value to variable (Vojtech Polasek) 2025-11-21 15:53:25.540 logging.py DEBUG - Include warning in uefi group regarding vfat file systems (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - Allow 0700 permission for UEFI files (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - shared: templates: file_permissions: ansible: Improve handling of (Eduardo Barretto) 2025-11-21 15:53:25.540 logging.py DEBUG - Add warning_rule_deprecated_cause macro (teacup-on-rockingchair) 2025-11-21 15:53:25.540 logging.py DEBUG - Update platform on rule about nx cpu flag (Edgar Aguilar) 2025-11-21 15:53:25.540 logging.py DEBUG - Fix Kubernetes remediation of audit_create_failed (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - Fix Kubernetes remediation of audit_access_failed (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - Use distributed product properties in Automatus (Jan Černý) 2025-11-21 15:53:25.540 logging.py DEBUG - Implement rules for CIS OCP Section 1.4 (Lance Bragstad) 2025-11-21 15:53:25.540 logging.py DEBUG - Remove rules from the RHEL9 STIG profile (Matěj Týč) 2025-11-21 15:53:25.540 logging.py DEBUG - CIS: Additional rules for already covered controls (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - CIS: Use the automated rule for checking kube scheduler permissions (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - CIS: Use the correct rule for 1.1.3 (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000506-CTR-001290: OpenShift must generate audit records when concurrent logons from different workstations and systems occur. (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000505-CTR-001285: OpenShift audit records must record user access start and end times. (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000504-CTR-001280: Red Hat Enterprise Linux CoreOS (RHCOS) must be configured to audit the loading and unloading of dynamic kernel modules (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000503-CTR-001275: OpenShift must generate audit records when successful/unsuccessful attempts to delete security objects occur (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000501-CTR-001265,SRG-APP-000502-CTR-001270: OpenShift must generate audit records when successful/unsuccessful attempts to delete security objects occur (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000499-CTR-001255: audit records when successful/unsuccessful attempts to delete privileges occur. (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - OCP4 STIG: audit records when successful/unsuccessful attempts to modify security objects occur. (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000495-CTR-001235: audit records when successful/unsuccessful attempts to modify privileges occur (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000121-CTR-000255: Covered by the audit_immutable_login_uids rule (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000119-CTR-000245 and SRG-APP-000120-CTR-000250: Covered by the audit_rules_immutable rule (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000116-CTR-000235: Needs chrony and NTP servers to be set (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - RHCOS STIG: Cover controls that need auditd.conf to be set (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - OCP4 STIG: Add the service_auditd_enabled rule to ensure that auditing is enabled at runtime (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - SRG-APP-000092-CTR-000165: Add the RHCOS4 rule coreos_audit_option to make sure auditing is on at system startup (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - AU-12(c): OpenShift must generate audit records when successful/unsuccessful attempts to access privileges occur. (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - Fix Kubernetes remediation for audit_ospp_general (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - Add Kubernetes remediation for audit_rules_dac_modification_umount (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - Fix Kubernetes remediation of audit_immutable_login_uids (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - Remove superseded script compare_disa_xml.py (Watson Sato) 2025-11-21 15:53:25.540 logging.py DEBUG - Update CIS profiles to use control files (Lance Bragstad) 2025-11-21 15:53:25.540 logging.py DEBUG - Fix run_scapval.py Python 2 syntax errors (Matthew Burket) 2025-11-21 15:53:25.540 logging.py DEBUG - Make CCN references more flexible (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - Remove tickets from CIS control files (Lance Bragstad) 2025-11-21 15:53:25.540 logging.py DEBUG - update version to 0.1.70 (Vojtech Polasek) 2025-11-21 15:53:25.540 logging.py DEBUG - Port over etcd encryption rule from CIS 1.3 controls (Jakub Hrozek) 2025-11-21 15:53:25.540 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - Create rhel9 kickstart file for CCN Advanced (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - Create rhel9 kickstart file for CCN Intermediate (Marcus Burghardt) 2025-11-21 15:53:25.540 logging.py DEBUG - Create rhel9 kickstart file for CCN Basic (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Resolve confusing comment (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Move CCN reference_uri to RHEL9 only (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - A change into sudoers_validate_passwd (rchikov) 2025-11-21 15:53:25.541 logging.py DEBUG - Update reference for product stability test (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Create RHEL9 profiles for CCN in its three levels (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Update constants to include CCN profiles (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - 0640 permission in permissions_local_var_log should only apply to files (cueball23) 2025-11-21 15:53:25.541 logging.py DEBUG - Include option used in CCN Policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix the informed variable option (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Include option used in CCN Policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Include CCN reference in special rules (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.30.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Partially cover A.25.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Partially cover A.25.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.23.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.19.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.15.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.11.SEC-RHEL12 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.11.SEC-RHEL9 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.11.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.11.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.11.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.11.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Drop irrelevant rules from STIG profile (teacup-on-rockingchair) 2025-11-21 15:53:25.541 logging.py DEBUG - Make sure sssd.conf files have 0600 permissions mode. (Gabriel Becker) 2025-11-21 15:53:25.541 logging.py DEBUG - Update SLE12 STIG reference to V2R10 (teacup-on-rockingchair) 2025-11-21 15:53:25.541 logging.py DEBUG - Add missing ANSSI and HIPAA references for SLES (teacup-on-rockingchair) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix STIG SLE12 references (teacup-on-rockingchair) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.11.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.6.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.8.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.8.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.8.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.6.SEC-RHEL5 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.6.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.6.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.6.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.6.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.5.SEC-RHEL8 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.5.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.5.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.5.SEC-RHEL5 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.5.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.5.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.5.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Partially cover A.3.SEC-RHEL10 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.3.SEC-RHEL9 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix small typo (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.3.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.3.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.3.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.3.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.3.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Complete A.3.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt) 2025-11-21 15:53:25.541 logging.py DEBUG - Add missing STIG references for SLE (teacup-on-rockingchair) 2025-11-21 15:53:25.541 logging.py DEBUG - Update SLE15 STIG reference to V1R10 (teacup-on-rockingchair) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix invalid levels key in section 5 (Lance Bragstad) 2025-11-21 15:53:25.541 logging.py DEBUG - Remove a parameter (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Add documentation of macro (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Extract macro (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Check password inactivity only for local users (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Use macro in OVAL (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Extract macro (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Check password warning age only for local users (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Check password minimal age only for local users (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Extract code to a macro (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Check password max age only for local users (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Add an explanatory comment (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in accounts_users_home_files_ownership (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in file_ownership_home_directories (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in file_groupownership_home_directories (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in file_permissions_home_directories (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in accounts_user_dot_user_ownership (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in accounts_umask_interactive_users (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in accounts_users_home_files_permissions (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in accounts_user_dot_group_ownership (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Change OVAL in accounts_users_home_files_groupownership (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Refactor OVAL code (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix a wrong data type (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Check only local users home directories (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Add a small test scenario to prevent quoting issues (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Prevent quoting issues in rule firewalld-backend (Jan Černý) 2025-11-21 15:53:25.541 logging.py DEBUG - Modifications which support installation of bats and ShellCheck on SLE15 (rchikov) 2025-11-21 15:53:25.541 logging.py DEBUG - Update .github/workflows/automatus-sle15.yaml (Gabriel Becker) 2025-11-21 15:53:25.541 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2025-11-21 15:53:25.541 logging.py DEBUG - Added automatus-sle15.ymal and modifiied gate.yaml and test_suite-sle15 files (rchikov) 2025-11-21 15:53:25.541 logging.py DEBUG - Update Dockerfiles/test_suite-sle15 (Rumen) 2025-11-21 15:53:25.541 logging.py DEBUG - Delete sshd_config (Rumen) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix test_suite_sle15 (rchikov) 2025-11-21 15:53:25.541 logging.py DEBUG - Files relates to SLES 15 SP 3 test container - podman (rumch-se) 2025-11-21 15:53:25.541 logging.py DEBUG - Add support for multiple STIG id assignments. (Gabriel Becker) 2025-11-21 15:53:25.541 logging.py DEBUG - Implement rules for CIS OCP Section 5.5 (Lance Bragstad) 2025-11-21 15:53:25.541 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2025-11-21 15:53:25.541 logging.py DEBUG - align behavior of Ansible remediation to Bash remediation (Vojtech Polasek) 2025-11-21 15:53:25.541 logging.py DEBUG - update bash remediation to align with OVAL check (Vojtech Polasek) 2025-11-21 15:53:25.541 logging.py DEBUG - align Bash remediation with rule description (Vojtech Polasek) 2025-11-21 15:53:25.541 logging.py DEBUG - align Ansible remediation with the rule description (Vojtech Polasek) 2025-11-21 15:53:25.541 logging.py DEBUG - update list of contributors (Vojtech Polasek) 2025-11-21 15:53:25.541 logging.py DEBUG - Add rule to verify protection of profiling data (Lance Bragstad) 2025-11-21 15:53:25.541 logging.py DEBUG - Allow verify_references.py to identify RH OVALv2 feed IDs as remote (Evgeny Kolesnikov) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix invalid yaml in CIS OCP section 5 (Lance Bragstad) 2025-11-21 15:53:25.541 logging.py DEBUG - Update product stability for RHEL OVAL (Matthew Burket) 2025-11-21 15:53:25.541 logging.py DEBUG - Move to OVAL V2 URL for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.541 logging.py DEBUG - Move to OVAL V2 URL for RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.541 logging.py DEBUG - Move to OVAL V2 URL for RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.541 logging.py DEBUG - Fix invalid yaml in CIS section 4 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 1.2 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 1.1 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Ensure Title Case as defined in the Style Guide (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Update docs/manual/developer/03_creating_content.md (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Add ansible RHEL9 STIG profile to testing farm. (Gabriel Becker) 2025-11-21 15:53:25.542 logging.py DEBUG - Ignore errors on enable_fips_mode ansible remediation when checking FIPS mode. (Gabriel Becker) 2025-11-21 15:53:25.542 logging.py DEBUG - Revert accounts_authorized_local_users to SLES only. (Gabriel Becker) 2025-11-21 15:53:25.542 logging.py DEBUG - Set platform all for rules that are selected in RHEL9 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.542 logging.py DEBUG - Remove unnecessary state check in test (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Improve OVAL readability (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Refactor Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Minor improvements in wording and readability (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Improve readability in Bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 5.4 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 5.3 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 5.2 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 5.1 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 4.2 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 4.1 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 3 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Remove unnecessary comments about policy sections (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Fix invalid YAML in OCP CIS control file (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Don't wrap titles in control files (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Fix `levels` key in general_profile script (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Define ipv6 platform in group of ipv6 settings rules (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Include an OVAL template for ipv6 applicability (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Include applicability definition for ipv6 (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Fix account_emergency_expire_date subkeys order (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Fix Profile stability for RHEL8 (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Deprecate account_emergency_expire_date (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Remove deprecated rules from control file (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Move to account_temp_expire_date in RHEL 7 STIG (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Move to account_temp_expire_date in the RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add package_mailx_installed to the RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add ensure_redhat_gpgkey_installed to the RHEL 8 STIG (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Update to RHEL 8 V1R10 (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - accounts_passwords_pam_faillock_unlock_time: show XCCDF variable in the description (Vojtech Polasek) 2025-11-21 15:53:25.542 logging.py DEBUG - account_password_selinux_faillock_dir: show XCCDF variable in the description (Vojtech Polasek) 2025-11-21 15:53:25.542 logging.py DEBUG - rule accounts_passwords_pam_faillock_interval: show XCCDF variable in the description (Vojtech Polasek) 2025-11-21 15:53:25.542 logging.py DEBUG - accounts_pam_faillock_deny: mention XCCDF variables in the rule description (Vojtech Polasek) 2025-11-21 15:53:25.542 logging.py DEBUG - Include related_rules in A.24.SEC-RHEL2 (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Include notes in pending requirements (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Translate the original titles to english (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Include candidate rules for most requirements (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Initial control file for CCN-STIC-610A22 (Marcus Burghardt) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 5.7 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Update RHEL 7 GUI profile to V3R11 (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - SRG-APP-000029-CTR-000085: Audit execution of all setuid and setgid binaries on RHCOS4 (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - OCP4 STIG: SRG-APP-000343-CTR-000780 and SRG-APP-000381-CTR-000905 are covered by audit_rules_suid_privilege_function (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - Update OL8 hipaa profile (Edgar Aguilar) 2025-11-21 15:53:25.542 logging.py DEBUG - Move RHEL-07-010271 to account_temp_expire_date (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add RHEL7 CCE to package_mailx_installed (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add package_mailx_installed to RHEL 7 STIG (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add dconf_gnome_disable_user_list to RHEL 7 STIG (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Select ensure_redhat_gpgkey_installed in RHEL7 STIG (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Update to RHEL 7 STIG to version V3R11 (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 2 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Implement rules for CIS OCP Section 1.3 (Lance Bragstad) 2025-11-21 15:53:25.542 logging.py DEBUG - Stop using "imp" module (Jan Černý) 2025-11-21 15:53:25.542 logging.py DEBUG - Add a test for rule journald_compress (Jan Černý) 2025-11-21 15:53:25.542 logging.py DEBUG - Add a test for rule journald_storage (Jan Černý) 2025-11-21 15:53:25.542 logging.py DEBUG - Add docs for SCAPVal testing (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Move Stabilization to use ctest based scapval (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add SCAPVal test to product build (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add SCAPVal configuration options to root CMake (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add the ability to the run_scapval script to scan one file (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add audit_rules_login_events_faillock to RHEL 8 STIG (Jan Černý) 2025-11-21 15:53:25.542 logging.py DEBUG - .github/workflows/gate.yaml:Add anolis8 product. (rain-Qing) 2025-11-21 15:53:25.542 logging.py DEBUG - Remove dead code in ssg/control.py (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Fix control file found by new check (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add test for importing a control dict with unsupported keys (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Add check for unsupported keys in control files (Matthew Burket) 2025-11-21 15:53:25.542 logging.py DEBUG - Switch from "use_pam_wheel_for_su" to "use_pam_wheel_group_for_su" for RHEL 8 and 9 (Kacper) 2025-11-21 15:53:25.542 logging.py DEBUG - ocp4: Add missing test YAML manifests (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - Don't use the obsolete filegid attribute, use gid_or_name instead (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - Modify the auditd_configure_rules rule to check for permissions 600 on RHCOS, too (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - OCP4: SRG-APP-000118-CTR-000240: Audit and pod logs files ownership and permission (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - scap-security-guide: add openembedded distro support (Armin Kuster) 2025-11-21 15:53:25.542 logging.py DEBUG - Set accounts-physical as machine only (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - Use prefer-controls in GH actions that generate OCP4 STIG exports (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - Amend several RHCOS controls to include a check and a fix (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - create_srg_export: Add a command-line flag to prefer check and fix from the control over rules (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - Set package_rng-tools_installed as machine only (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - service_apport_disabled: depend on apport being installed (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - ensure_pam_wheel_group_empty: depend on pam being installed (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - use_pam_wheel_group_for_su: depend on pam being installed (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - Set ensure_root_password_configured as machine only (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - Set package_iptables_installed as machine only (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - Set package_nftables_installed as machine only (Craig Andrews) 2025-11-21 15:53:25.542 logging.py DEBUG - SRG-APP-000450-CTR-001105: Add two related RHCOS rules (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - products/anolis23: supports Anolis OS 23 (rain-Qing) 2025-11-21 15:53:25.542 logging.py DEBUG - SRG-APP-000243-CTR-000600: Covered with kernel arguments and sysctls (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - Update rule description to include also drop-in option configuration (teacup-on-rockingchair) 2025-11-21 15:53:25.542 logging.py DEBUG - SRG-APP-000439-CTR-001080: This is a manual rule (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - SRG-APP-000233-CTR-000585: Covered by ensuring SELinux is enabled (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - SRG-APP-000211-CTR-000530: A manual rule to check that root and core are the only users (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - OCP4: Fix instructions of scc_limit_container_allowed_capabilities (Jakub Hrozek) 2025-11-21 15:53:25.542 logging.py DEBUG - Update linux_os/guide/system/permissions/restrictions/coredumps/coredump_disable_storage/tests/coredumps_storage_none_dropin.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.542 logging.py DEBUG - Add profile as sshd_strong_macs to stable profile (teacup-on-rockingchair) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix OL9 stability oval url (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix OL8 stability oval url (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix OL7 stability oval url (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_home_grpquota (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_home_nodev (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_home_nosuid (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_home_usrquota (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_opt_nosuid (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_srv_nosuid (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_log_audit_nodev (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_log_audit_noexec (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_log_audit_nosuid (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_log_nodev (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_log_noexec (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_log_nosuid (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_nodev (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add mount platform to mount_option_var_noexec (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Add new missing mount platforms (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Remove quotes from journald config parameters (Mackemania) 2025-11-21 15:53:25.543 logging.py DEBUG - Extract method to fix Codeclimate (Jan Černý) 2025-11-21 15:53:25.543 logging.py DEBUG - Reduce code complexity (Jan Černý) 2025-11-21 15:53:25.543 logging.py DEBUG - Add a missing None in function definition (Jan Černý) 2025-11-21 15:53:25.543 logging.py DEBUG - Add support for diffing the values (Jan Černý) 2025-11-21 15:53:25.543 logging.py DEBUG - Refactor: split differences from printing (Jan Černý) 2025-11-21 15:53:25.543 logging.py DEBUG - Introduce a script to compare ComplianceAsCode versions (Jan Černý) 2025-11-21 15:53:25.543 logging.py DEBUG - OCP4: Remove the CIS 1.3 controls completely (Jakub Hrozek) 2025-11-21 15:53:25.543 logging.py DEBUG - Update ol9 oval_feed_url (Edgar Aguilar) 2025-11-21 15:53:25.543 logging.py DEBUG - Update ol8 oval_feed_url (Edgar Aguilar) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix selection of var_multiple_time_servers for OL7 (Edgar Aguilar) 2025-11-21 15:53:25.543 logging.py DEBUG - Update ol7 oval_feed_url (Edgar Aguilar) 2025-11-21 15:53:25.543 logging.py DEBUG - Remove outdated comment from OCP4 CIS profile (Lance Bragstad) 2025-11-21 15:53:25.543 logging.py DEBUG - Add ol8 & ol9 products in prodtype of rule (Edgar Aguilar) 2025-11-21 15:53:25.543 logging.py DEBUG - Add rule selinux_state to OL8 anssi enhanced (Edgar Aguilar) 2025-11-21 15:53:25.543 logging.py DEBUG - Update OL8 cjis profile (Edgar Aguilar) 2025-11-21 15:53:25.543 logging.py DEBUG - Update function and variables related to check_fact_ref (Marcus Burghardt) 2025-11-21 15:53:25.543 logging.py DEBUG - Allow populating one content type by more means (Matej Tyc) 2025-11-21 15:53:25.543 logging.py DEBUG - Defer creation of the manifest (Matej Tyc) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix the grub update executable for SLE15 (Matej Tyc) 2025-11-21 15:53:25.543 logging.py DEBUG - Remove irrelevant selections from compiled controls (Matej Tyc) 2025-11-21 15:53:25.543 logging.py DEBUG - Revert "fix: aide/remediations: add crontabs" (Eduardo Barretto) 2025-11-21 15:53:25.543 logging.py DEBUG - Introduce rule platform names and profile values (Matej Tyc) 2025-11-21 15:53:25.543 logging.py DEBUG - Add build of a JSON manifest file to the build process (Matej Tyc) 2025-11-21 15:53:25.543 logging.py DEBUG - Introduce a script summarizing contents to json (Matěj Týč) 2025-11-21 15:53:25.543 logging.py DEBUG - Add missing headings (Matej Tyc) 2025-11-21 15:53:25.543 logging.py DEBUG - Improve the language and readability (Matěj Týč) 2025-11-21 15:53:25.543 logging.py DEBUG - Modification of the rule ensure_pam_wheel_group_empty (rchikov) 2025-11-21 15:53:25.543 logging.py DEBUG - Move to file_owner test for template Automatus test (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix grep for Automatus sanity (Matthew Burket) 2025-11-21 15:53:25.543 logging.py DEBUG - OCP4: SRG-APP-000142-CTR-000325: No longer Does Not Meet (Jakub Hrozek) 2025-11-21 15:53:25.543 logging.py DEBUG - Minor update in alignment to Style Guide (Marcus Burghardt) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix desired attribute for check-fact-ref element (Marcus Burghardt) 2025-11-21 15:53:25.543 logging.py DEBUG - Fix searched string for cpe platform elements (Marcus Burghardt) 2025-11-21 15:53:25.561 logging.py DEBUG - Add a section guiding through the process of rule divergence (Matěj Týč) 2025-11-21 15:53:25.561 logging.py DEBUG - Small correction in bash part (rchikov) 2025-11-21 15:53:25.561 logging.py DEBUG - utils: Add SRG to NIST control mapping for the OCP4 STIG (Jakub Hrozek) 2025-11-21 15:53:25.561 logging.py DEBUG - Update rule.yml (Rumen) 2025-11-21 15:53:25.561 logging.py DEBUG - A small correction in bash part of the rule (rchikov) 2025-11-21 15:53:25.561 logging.py DEBUG - Updates of the rule use_pam_wheel_group_for_su (rchikov) 2025-11-21 15:53:25.561 logging.py DEBUG - Fix ectd rule e2e failures (Vincent Shen) 2025-11-21 15:53:25.561 logging.py DEBUG - macros: bash: Fix shellcheck warning (Eduardo Barretto) 2025-11-21 15:53:25.561 logging.py DEBUG - Add data about nested controls to the compiled controls (Matěj Týč) 2025-11-21 15:53:25.561 logging.py DEBUG - Rename wrong varaible in test (Markus Mathiason) 2025-11-21 15:53:25.561 logging.py DEBUG - macros: bash: pam_faillock: Improve bash to consider different (Eduardo Barretto) 2025-11-21 15:53:25.561 logging.py DEBUG - Drop FIPS references from oval definition (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - set_ufw_loopback_traffic: sce: Fix logic in script (Eduardo Barretto) 2025-11-21 15:53:25.561 logging.py DEBUG - wireless_disable_interfaces: bash: Improve Ubuntu remediation (Eduardo Barretto) 2025-11-21 15:53:25.561 logging.py DEBUG - macros: bash: Avoid matching comments in fstab macros (Eduardo Barretto) 2025-11-21 15:53:25.561 logging.py DEBUG - Update test cases to match jinja macro order (Mackemania) 2025-11-21 15:53:25.561 logging.py DEBUG - Change file_groupowner template parameter after rebase (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - Add sshd_strong_macs variable (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - Add empty line at the end of file (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - Too much stripping breaks the code (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - Drop extra whitespaces from jinja macros (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - For SLE15 check drop-in files instead of symlink (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - SLES15 use dropin configuration for issue banner (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 4 (Lance Bragstad) 2025-11-21 15:53:25.561 logging.py DEBUG - Generate OpenShift CIS 1.4.0 Section 5 (Lance Bragstad) 2025-11-21 15:53:25.561 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 3 (Lance Bragstad) 2025-11-21 15:53:25.561 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 2 (Lance Bragstad) 2025-11-21 15:53:25.561 logging.py DEBUG - Generate CIS OpenShift 1.4.0 Section 1 (Lance Bragstad) 2025-11-21 15:53:25.561 logging.py DEBUG - Move the most important links to a better place (Jan Černý) 2025-11-21 15:53:25.561 logging.py DEBUG - Add platform package clause for firewalld related rules (teacup-on-rockingchair) 2025-11-21 15:53:25.561 logging.py DEBUG - file_groupownership_ssh_private_key: exclude templated test scenario (Vojtech Polasek) 2025-11-21 15:53:25.561 logging.py DEBUG - file_groupownership_ssh_private_key: make sure that the group ssh_keys exists before using it in test scenario (Vojtech Polasek) 2025-11-21 15:53:25.561 logging.py DEBUG - Remove component SuSEfirewall2 (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Clarify descriptions in rule text (Mackemania) 2025-11-21 15:53:25.561 logging.py DEBUG - Update name of rule to remove benchmark coupling (Mackemania) 2025-11-21 15:53:25.561 logging.py DEBUG - Add PR number for why RHEL-08-010471 is not covered (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add accounts_password_minlen_login_defs (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add CCE for RHEL 8 to sssd_has_trust_anchor (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add RHEL 8 CCE to disallow_bypass_password_sudo (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Update profile stability (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Fix STIG ID for RHEL 8.2+ accounts_passwords_pam_faillock_interval (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add a rule for RHEL-08-010385 to the RHEL8 STIG (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add a rule for RHEL-08-010121 to the RHEL8 STIG (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add a rule for RHEL-08-010090 to the RHEL8 STIG (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add RHEL8 STIGID to accounts_password_minlen_login_defs (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add RHEL8 STIGID to no_empty_passwords_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Move to RHEL 8.2+ STIGID in accounts_passwords_pam_faillock_deny_root (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Move to RHEL 8.2+ STIGID in accounts_passwords_pam_faillock_unlock_time (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add RHEL8 STIGID to disallow_bypass_password_sudo (Matthew Burket) 2025-11-21 15:53:25.561 logging.py DEBUG - Add RHEL8 to the sssd_has_trust_anchor prodtype (Matthew Burket) 2025-11-21 15:53:25.562 logging.py DEBUG - Document nesting of controls by references (Matej Tyc) 2025-11-21 15:53:25.562 logging.py DEBUG - Improve code style (Matej Tyc) 2025-11-21 15:53:25.562 logging.py DEBUG - Expand subcontrols handling (Matej Tyc) 2025-11-21 15:53:25.562 logging.py DEBUG - Use existing functionality for controls I/O (Matej Tyc) 2025-11-21 15:53:25.562 logging.py DEBUG - Restructure the control unit test of controls (Matej Tyc) 2025-11-21 15:53:25.562 logging.py DEBUG - Store rendered control files. (Gabriel Becker) 2025-11-21 15:53:25.562 logging.py DEBUG - Change case title (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Rename variable (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Add typing hints (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Use --root argument (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Use long variable names (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Create a wrapper function (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Add utility to render components in HTML (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Use the changelog property in Component class (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Unify template rendering functions (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Update of anssi profile for SLE 12/15 (rchikov) 2025-11-21 15:53:25.562 logging.py DEBUG - Add platform package clause for firewalld related rules (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - Add platform package definitions for firewalld and iptables (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - fix srg (svet-se) 2025-11-21 15:53:25.562 logging.py DEBUG - SRG-APP-000141-CTR-000315: Covered by disabling SSH and locking down USB (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - SRG-APP-000185-CTR-000490: Covered by disabling SSH (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - Add bash and ansible relevant remediations' changes (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - Handle different ssh strong macs list for different platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - SRG-APP-000148-CTR-000335,SRG-APP-000190-CTR-000500: Covered by sshd_disable_root_login (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - Add modified audit suid privilege function rule for CIS (Mackemania) 2025-11-21 15:53:25.562 logging.py DEBUG - Add small test to cover drop-in pass configuration (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - For SLE platforms put remedy in drop-in (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - For SLE platforms put remedy in drop-in (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - Add modified version of oval_check_config_file (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - Updated fix_rules to use product class (Matej Tyc) 2025-11-21 15:53:25.562 logging.py DEBUG - split too long lines in template.py (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_user_interactive_home_directory_defined/bash/shared.sh (Marcus Burghardt) 2025-11-21 15:53:25.562 logging.py DEBUG - OCP4: Remove obsolete rule scheduler_no_bind_address (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - Improve error message (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Removal of package_libreswan_installed from SLE 12/15 profiles (rchikov) 2025-11-21 15:53:25.562 logging.py DEBUG - Fix attribute for args root (Dexter Le) 2025-11-21 15:53:25.562 logging.py DEBUG - use multi_platform_ubuntu (Dexter Le) 2025-11-21 15:53:25.562 logging.py DEBUG - Add components_root to example stability (Matthew Burket) 2025-11-21 15:53:25.562 logging.py DEBUG - add rules UBTU-20-010045 (Dexter Le) 2025-11-21 15:53:25.562 logging.py DEBUG - Fix traceback in release helper (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Fix grub2 remediation instructions (Henry Finucane) 2025-11-21 15:53:25.562 logging.py DEBUG - Add couple of tests for new bash jinja macro (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - Rework jinja macro to use [[:blank:]] instead of \> (teacup-on-rockingchair) 2025-11-21 15:53:25.562 logging.py DEBUG - add overriding test scenario to file_groupownership_sshd_pub_key rule (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - update missing_file_test test scenarios of file_groupownership and file_owner template (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - fix test scenarios for file_(groupownership|owner|permissions) template (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - extract duplicated function from file_(owner|groupowner|permissions) templates into shared module (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - modify the oval for file_groupownership template (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - modify the preprocessing function of file_groupownership template (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - modify remediations for file_groupownership template (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - change the parameter name in template tests (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - modify rule.yaml files to change the parameter name of file_groupownership template from filegid to gid_or_name (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - update template documentation (Vojtech Polasek) 2025-11-21 15:53:25.562 logging.py DEBUG - Change double underscore to a single underscore (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Add graphs to represent the life cycle of controls file. (Gabriel Becker) 2025-11-21 15:53:25.562 logging.py DEBUG - Add a Playbook name to Ansible Playbooks (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - add-rules sles-15-010418 sles-12-010498 (svet-se) 2025-11-21 15:53:25.562 logging.py DEBUG - Polish OVAL in sysctl template (Edgar Aguilar) 2025-11-21 15:53:25.562 logging.py DEBUG - Fix CodeClimate problem (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - controls/srg_ctr.yaml: Remove the controls section to make SRG export happy (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - RHCOS4 STIG: AC-2(4),AU-12(c): Controls covered with audit_rules_sysadmin_actions and audit_rules_usergroup_modification (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - profiles: Add a stub STIG RHCOS4 profile (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - OCP4: Move the var_openshift_audit_profile variable from srg_ctr.yml to the OCP4 STIG profile (Jakub Hrozek) 2025-11-21 15:53:25.562 logging.py DEBUG - Remove a space (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Fix a traceback (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Replace must by should (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Create template testing plugins (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Make the parameters required (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Add components to resolved rules (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Replace double underscore by single underscore (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Update example product.yml in Developer's guide (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Assign rule package_iptables-services_removed to a component (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Simplify function test_platform (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Extract function (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Allow products to specify the components directory (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Use ssg.components module in _load_components (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Avoid many return statements (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Reduce amount of parameters (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Reduce complexity of main function (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Fix CodeClimate PEP8 problem (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Extract method (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - Add a unit test for the ssg.components module (Jan Černý) 2025-11-21 15:53:25.562 logging.py DEBUG - remove env_yaml (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Add a test for components based on groups (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Add test for component based on platforms (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Add a simple test for component consistency (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Enforce component mapping (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Assign network_implement_access_control to firewalld component (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Add fail test to sysctl template (Edgar Aguilar) 2025-11-21 15:53:25.563 logging.py DEBUG - Improve ansible remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.563 logging.py DEBUG - Add jinja bash macro to comment out config setting (teacup-on-rockingchair) 2025-11-21 15:53:25.563 logging.py DEBUG - A fix in macro sshd_oval_check (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - A fix in the rule sshd_set_keepalive (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Add RHEL 7 CCE to selinux_confine_to_least_privilege (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Add RHEL 7 CCE to disallow_bypass_password_sudo (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Revert macro usage in zipl rules (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Add support for loading Jinja without the product context (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Simplify aide rules by leveraging product properties (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Consolidate grub rules (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Guard product test references, not products (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Expand the product stability test to autofix reference data (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Add product families (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix the current product properties (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Move grub paths to product properties (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Start using product properties for ID numbers (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Introduce minor text improvements (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Add selinux_confine_to_least_privilege to RHEL 7 STIG (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Add disallow_bypass_password_sudo to RHEL 7 STIG (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Add no_empty_passwords_etc_shadow to RHEL 7 STIG (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - SRG-APP-000158-CTR-000390: Add supporting evidence to an Inherently Met rule (Jakub Hrozek) 2025-11-21 15:53:25.563 logging.py DEBUG - SRG-APP-000090-CTR-000155: No longer Does not Meet, but instead covered by setting the OCP audit profile (Jakub Hrozek) 2025-11-21 15:53:25.563 logging.py DEBUG - OCP4: Update instructions of scc/scc_limit_container_allowed_capabilities (Jakub Hrozek) 2025-11-21 15:53:25.563 logging.py DEBUG - Update CIS control file for RHEL7 and RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Include rule to remove iptables-services package (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Updating control_response (pending) to prevent test failure (Rutvik) 2025-11-21 15:53:25.563 logging.py DEBUG - Updating control_response for control id 1.3.1 (Rutvik) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix CMakelint (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix a cmake linting error (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Remove the deployment section (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Address reviewer feedback (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Integrate manpage with CMake better (Matej Tyc) 2025-11-21 15:53:25.563 logging.py DEBUG - Update reference for product stability test (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Change of anssi recommendation for the rule mount_option_home_nosuid (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Pretty minor fix in product title (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - OCP4 Add the suppresse warning tag (Vincent Shen) 2025-11-21 15:53:25.563 logging.py DEBUG - Align notes in nftables supported requirements (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 3.5.3.1.2 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 3.5.1.3 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 3.5.3.1.1 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 3.5.2.1 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 5.7 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Update the CIS 5.5.4 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 3.5.1.4 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 5.5.1.2 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 5.5.1.1 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 4.1.1.1 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 5.5.2 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Typo correction in CIS profile for SLE 12 (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Add sanity test for Automatus in CMake (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Add Automatus Sanity tests (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Add testing profile for Fedora (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 5.4.2 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Complete the CIS 4.1.15 requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Replace legacy parameter in CIS RHEL7 control file (Marcus Burghardt) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix in ansible part of the rule audit_rules_kernel_module_loading (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Add requirements files for python dependencies (Lance Bragstad) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix of rule sudo_dedicated_group for sle 12/15 (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Reduce the test install_vm to Python 3 (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Add a sanity test of install_vm.py (Jan Černý) 2025-11-21 15:53:25.563 logging.py DEBUG - Fixes in 1.3.1 GC rules with updated doc links and completing control_response (rutvik23) 2025-11-21 15:53:25.563 logging.py DEBUG - Update ansible.template (Rumen) 2025-11-21 15:53:25.563 logging.py DEBUG - Implementation of proposed corrections (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Add warning to rsyslog_remote_tls_cacert (Matthew Burket) 2025-11-21 15:53:25.563 logging.py DEBUG - OCP4: Fix group ownerships checks (Jakub Hrozek) 2025-11-21 15:53:25.563 logging.py DEBUG - Changes in SLE 12/15 profiles related to time_sync services (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Add rsyslog_remote_loghost droping remediations (teacup-on-rockingchair) 2025-11-21 15:53:25.563 logging.py DEBUG - Do not replace character in compare-ds job. (Gabriel Becker) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix in SLE 12/15 rule accounts_passwords_pam_tally2_unlock_time (rchikov) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix Ansible fatal error from configure_tmux_lock_keybinding (Milan Lysonek) 2025-11-21 15:53:25.563 logging.py DEBUG - Add remediations for rule network_sniffer_disabled (Federico Ramirez) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix title case in ansible tasks name (Edgar Aguilar) 2025-11-21 15:53:25.563 logging.py DEBUG - Fix var_firewalld_default_zone_filename datatype (Matthew Burket) 2025-11-21 15:53:25.564 logging.py DEBUG - fix ansible kex_algos_regex (svet-se) 2025-11-21 15:53:25.564 logging.py DEBUG - Some SLE 12/15 fixes related to the rule accounts_passwords_pam_tally2 (rchikov) 2025-11-21 15:53:25.564 logging.py DEBUG - Change git to git-core (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - OCP: Add CPE for HyperShift Hosted cluster (Vincent Shen) 2025-11-21 15:53:25.564 logging.py DEBUG - Add remediation headers in rule (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Add tests for network_implement_access_control (Federico Ramirez) 2025-11-21 15:53:25.564 logging.py DEBUG - Harden bash in file_permission_user_init_files (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Polish OVAL in file_permission_user_init_files (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Fix install_vm.py on older versions of Python (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Add git to dependencies of the stabilize workflow (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Document packages key (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Fix the current product properties (Matej Tyc) 2025-11-21 15:53:25.564 logging.py DEBUG - Implement limitations of defining product properties (Matej Tyc) 2025-11-21 15:53:25.564 logging.py DEBUG - Fix loading of product yaml to utilities (Matej Tyc) 2025-11-21 15:53:25.564 logging.py DEBUG - Document product properties (Matej Tyc) 2025-11-21 15:53:25.564 logging.py DEBUG - Add support for properties into the build script (Matej Tyc) 2025-11-21 15:53:25.564 logging.py DEBUG - Introduce input hierarchy to the product class (Matej Tyc) 2025-11-21 15:53:25.564 logging.py DEBUG - Allow product to update itself from directories (Matej Tyc) 2025-11-21 15:53:25.564 logging.py DEBUG - Bump version to 0.1.69 (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Update contributors for version 0.1.68 (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - update rule sles-12-030250 (svet-se) 2025-11-21 15:53:25.564 logging.py DEBUG - Add changelog key to the components YAML (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - fix oval check (svet-se) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: use grep -E instead of deprecated egrep (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: accounts_user_interactive_home_directory_defined: use nobody_gid (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - bugfix: accounts_user_interactive_home_directory_defined: use gid_min with groups (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: nobody_uid: use it in ansible too (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: nobody_uid: use it (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: ssg_test_suite: warning when rule not in benchmark (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: file_groupownership_system_commands_dirs: use gid_min (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: no_password_auth_for_systemaccounts: use uid_min (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: interactive_users tests: actually use uid_min (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: uid_min: use it in various cases (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: uid_min: use it in audit auid checks, out jinja macro (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: uid_min: use it in audit auid checks, in jinja macro (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: accounts_user_interactive_home_directory_defined: typo (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: cmake: do not quote \$ when using variable value (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - change: cmake: use list APPEND (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: cmake: ssg_build_sds: make REFERENCES_CHECK_PROFILE_LIST actually a list (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - fix: cmake: symbolic DEPENDS also files in COMMANDS (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - bugfix: cmake: use files as output, not directories (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - bugfix: cmake: custom targets should not be quoted (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - bugfix: cmake: ssg_build_derivative_product: create DERIVATIVE elements (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - style: cmake: ssg_build_html_ref_tables use upcase for foreach variable (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - style: cmake: silence other issues (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - style: cmake: add missing include(FindPackageHandleStandardArgs) (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - style: cmake: remove extra newlines (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - change: cmake: style use only up to 2 empty lines (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - style: cmake: use indent 4 (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - change: cmake: change style to set indent 4 (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - style: cmake: drop extra spaces with commands (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - change: cmake: change style to not use extra spaces with commands (Markus Linnala) 2025-11-21 15:53:25.564 logging.py DEBUG - Add OVAL for network_implement_access_control (Federico Ramirez) 2025-11-21 15:53:25.564 logging.py DEBUG - Implement network_implement_access_control rule (Federico Ramirez) 2025-11-21 15:53:25.564 logging.py DEBUG - add rules sles-15-040450 sles-12-030270 (svet-se) 2025-11-21 15:53:25.564 logging.py DEBUG - Document components feature (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Remove a one-off tool for semi-automated component assignment (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Add initial component-rule mapping (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Add a one-off tool for semi-automated component assignment (Jan Černý) 2025-11-21 15:53:25.564 logging.py DEBUG - Implementation of proposed changes (rchikov) 2025-11-21 15:53:25.564 logging.py DEBUG - Removal of extra spaces (rchikov) 2025-11-21 15:53:25.564 logging.py DEBUG - Add two tests to sysctl template (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Update sysctl template OVAL (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Add tests to file_permission_user_init_files (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Add remediation to file_permission_user_init_files (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Add OVAL to file_permission_user_init_files (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Use complete names in ansible modules (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Update shared/macros/10-bash.jinja (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Simple test to avoid service restart if unnecessary (Marcus Burghardt) 2025-11-21 15:53:25.564 logging.py DEBUG - Fix Automatus Fedora (Matthew Burket) 2025-11-21 15:53:25.564 logging.py DEBUG - Align the Ansible remediation with Bash (Marcus Burghardt) 2025-11-21 15:53:25.564 logging.py DEBUG - applying changes to control_response, rule.yml and rebase (rutvik23) 2025-11-21 15:53:25.564 logging.py DEBUG - Update pass aging rules to not ignore empty pass (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Sync OL8 stig profile with stigids in rules (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Sync OL7 stig profile with stigids in rules (Edgar Aguilar) 2025-11-21 15:53:25.564 logging.py DEBUG - Fix template not found error in Automatus (Matthew Burket) 2025-11-21 15:53:25.564 logging.py DEBUG - Include firewalld option in var_nftables_table.var (Marcus Burghardt) 2025-11-21 15:53:25.564 logging.py DEBUG - Update CIS requirement about nftables table (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update CIS requirement about nftables base chains (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include Ansible remediation for rsyslog_nolisten (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include Bash remediation for rsyslog_nolisten (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update rule description to include RainerScript (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Extend OVAL in rsyslog_nolisten rule to use RainerScript (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update CIS requirement for system accounts (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update test scenario scripts to remediate (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include Ansible remediation to fix system accounts shell (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include Bash remediation to fix system accounts shell (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update no_shelllogin_for_systemaccounts rule description (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include rule in CIS profile for RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Update rule description (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include Ansible remediation to lock system accounts (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include test scenarios for system accounts with password (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include Bash remediation to lock system accounts (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Create OVAL to check systemaccounts with password (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Include OVAL macro to create systemaccounts list (Marcus Burghardt) 2025-11-21 15:53:25.565 logging.py DEBUG - Remove ids from dedicated_ssh_keyowner in the product stability (Matthew Burket) 2025-11-21 15:53:25.565 logging.py DEBUG - style: install_vm: split big main in smaller parts (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: install_vm: handle SUDO_USER only when needed (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - style: virt_install: minor style changes (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: install_vm: handle per distro using dicts (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - add rules sles-15-010375 sles-12-010375 (svet-se) 2025-11-21 15:53:25.565 logging.py DEBUG - Cosmetic refactoring (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - Only consider a product when the products/$product/product.yml exists. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - Use jinja templates to render the policies page. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - Use add_custom_command instead of creating a custom target. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - Upload artifacts in case the event is a pull request. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - Fix codeclimate issues. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - Add rendered policies page to published html gh pages. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - Add CMake target render-policies to render all policies available. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - add rules sles-15-010420 sles-12-010500 (svet-se) 2025-11-21 15:53:25.565 logging.py DEBUG - Use specific name in private key groups instead of gid. (Gabriel Becker) 2025-11-21 15:53:25.565 logging.py DEBUG - add rules sles-15-010419 sles-12-010499 (svet-se) 2025-11-21 15:53:25.565 logging.py DEBUG - Refactor the test scripts (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - add rule aide_scan_notification for sle 15 (svet-se) 2025-11-21 15:53:25.565 logging.py DEBUG - SRG-APP-000390-CTR-000930 is now not applicable (Jakub Hrozek) 2025-11-21 15:53:25.565 logging.py DEBUG - SRG-APP-000266-CTR-000625: Inherently met SRG Was missing status justification (Jakub Hrozek) 2025-11-21 15:53:25.565 logging.py DEBUG - SRG-APP-000441-CTR-001090,SRG-APP-000442-CTR-001095: Add justification to a rule that's inherently met (Jakub Hrozek) 2025-11-21 15:53:25.565 logging.py DEBUG - OCP4 STIG: Several RBAC related controls are no longer Inherently Met, let's use a manual rule to cut duplication (Jakub Hrozek) 2025-11-21 15:53:25.565 logging.py DEBUG - Make the scapval waiving easier to update (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - Add eks platforms to some ocp shared OVAL (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - Extract parts of the stab tests into a function (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - Reuse code between profile stab and product stab tests (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - change task names to title case (Vojtech Polasek) 2025-11-21 15:53:25.565 logging.py DEBUG - Add support for exclusion of properties from stab test (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - Populate product stability data with all products (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - Rename rule from chronyd_configures_time_sources to chronyd_configure_pool_and_server (rchikov) 2025-11-21 15:53:25.565 logging.py DEBUG - style: install_vm: print infosection intelligently (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: install_vm: use specific err function to handle errors (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: install_vm: use shlex when printing command (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - style: install_vm: create virt-install as list (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - style: install_vm: use explicit number in format (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: install_vm.py: use subprocess with command as list (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - Introduce a product yaml stability test (Matej Tyc) 2025-11-21 15:53:25.565 logging.py DEBUG - Change of variable settings for PCI DSS (rchikov) 2025-11-21 15:53:25.565 logging.py DEBUG - style: install_vm: sort other imports (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - style: automatus: sort other imports (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - style: ssg_test_suite: sort other imports (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: oval_line_in_file_object/doc: missing_parameter_pass is bool (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: oval_metadata/doc: affected_platforms is list[str] (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_chown: type name (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: ocil_firewalld_allow_access/doc: port is str (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: ocil_firefox_config/doc: add hint about accepted values for value (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: update_etc_default_grub_manually_absent/doc: add type (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: update_etc_default_grub_manually/doc: add types (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: systemd_ocil_timer_enabled/doc: fix parameter name (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: set_config_file/doc: add types, add missing argument (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: openshift_cluster_setting_kubeletconfig/doc: bad doc (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: grub2_bootloader_argument_absent_remediation/doc: fix type format (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: grub2_bootloader_argument_remediation/doc: fix type format (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: grub_command/doc: arguments/types (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: fix_openshift_logging_rbac/doc: add type (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: die/doc: add types (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: create_interactive_users_list_object/doc: param/type must start line (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: warning_rule_deprecated_by/doc: add types (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: warning_ovirt_rule_notapplicable/doc: add type (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: srg_requirement_directory_group_owner/doc: fix name in doc (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: oval_line_in_file_criterion/doc: fix parameters (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: oval_check_dconf_ini_file/doc: fix types and add missing argument (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: oval_argument_value_in_line/doc: fix types (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: oval_auditd_config/doc: fix types (Markus Linnala) 2025-11-21 15:53:25.565 logging.py DEBUG - fix: oval_grub_config/doc: fix type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: oval_file_contents/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: oval_check_shell_file/doc: use jinja type names, fix type name (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: oval_check_config_file/doc: bool type as bool (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ocil_clause_file_group_owner/doc: fix parameter name in doc (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ocil_cluster_logging_rbac_review/doc: fix types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_service_enabled/doc: parameter name (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_service_disabled/doc: parameter name (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_socket_disabled/doc: parameter name (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_file_group_owner/doc: parameter name (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_audit_rules_file_deletion_events/doc: fix type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_chmod/doc: fix type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_audit_rules_dac_modification_attr: fix types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification/doc: fix types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification_o_creat/doc: fix type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write/doc: fix type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_audit_rules_unsuccessful_file_modification_rule_order/doc: fix type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: fixtext_sshd_lineinfile/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_shell_file_set/doc: argument types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_fix_audit_syscall_rule/doc: fix names, add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_get_version_os_linux/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_compare_version_os_linux/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_os_linux_conditional/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_remove_pam_module_option_configuration/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_pam_module_configuration/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_remove_pam_module_option/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_pam_module_option/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_pam_module_line/doc: add types, fix format (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_ini_config/doc: add types, fix format (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_chromium_pol_setting/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_pkg_conditional_dpkg/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_compare_version_dpkg/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_get_dpkg_package_version/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_pkg_conditional_rpm/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_compare_version/doc: add types, fix sphinx format (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_pkg_conditional_compare/doc: add types, fix sphinx format (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_get_rpm_package_version/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_pkg_conditional/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_mount_option_for_vfstype/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_replace_or_append/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_file_contents/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_pam_faillock_parameter_value/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_pam_pwhistory_parameter_value/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_apply_authselect_changes/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_there_are_servers_in_ntp_compatible_config_file/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_firefox_cfg_setting/doc: add types, add missing params (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_firefox_js_setting/doc: add types, add missing param (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_fix_audit_watch_rule/doc: add types, move right place (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_perform_audit_rules_privileged_commands_remediation/doc: add types, move right place (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_service_command/doc: add types, indent (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_pam_variables_and_authselect_profile/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_provide_pam_module_options/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_pam_module_options/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_mount_option_in_fstab/doc: param must start line, add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_ensure_nl_at_eof/doc: param must start line, add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: bash_pam_pwhistory_enable/doc: param must start line, add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_grub2_bootloader_argument_absent/doc: fix type format (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_grub2_bootloader_argument/doc: fix type format (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_instantiate_variables/doc: fix format (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_remove_pam_module_option_configuration/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_ensure_pam_module_configuration/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_ensure_pam_facts_and_authselect_profile/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_remove_pam_module_option/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_ensure_pam_module_option/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_ensure_pam_module_line/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_pam_faillock_parameter_value/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_pam_pwhistory_parameter_value/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_pam_pwhistory_enable/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_apply_authselect_changes/doc: add type (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_pkg_conditional/doc: add types (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_audit_auditctl_add_syscall_rule/doc: add types, fix name/order (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - fix: ansible_audit_augenrules_add_syscall_rule/doc: add types, fix name (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - style: jinja macros: add/remove newlines (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - style: jinja: ws cleanup (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - bugfix: bash_ensure_mount_option_for_vfstype: fix parameter name (Markus Linnala) 2025-11-21 15:53:25.566 logging.py DEBUG - Update audit_rules_suid_privilege_function tests (Edgar Aguilar) 2025-11-21 15:53:25.566 logging.py DEBUG - Update audit_rules_suid_privilege_function for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.566 logging.py DEBUG - Fix tests in sshd_lineinfile template (Edgar Aguilar) 2025-11-21 15:53:25.566 logging.py DEBUG - modify regexp in bash remediation of chronyd_specify_remote_server (Vojtech Polasek) 2025-11-21 15:53:25.566 logging.py DEBUG - Fix problem with sshd_strong_kex default selector (teacup-on-rockingchair) 2025-11-21 15:53:25.566 logging.py DEBUG - Update set-output commands (Matthew Burket) 2025-11-21 15:53:25.566 logging.py DEBUG - Address Gate test issue on empty string (Edgar Aguilar) 2025-11-21 15:53:25.566 logging.py DEBUG - Add Ubuntu SCE checks for iptables rules (Eduardo Barretto) 2025-11-21 15:53:25.566 logging.py DEBUG - ubuntu2204: cis_level1_server: Set nftables as default firewall (Eduardo Barretto) 2025-11-21 15:53:25.566 logging.py DEBUG - Add platform to iptables rules (Eduardo Barretto) 2025-11-21 15:53:25.566 logging.py DEBUG - Add platform to UFW rules (Eduardo Barretto) 2025-11-21 15:53:25.566 logging.py DEBUG - Add platform to nftables rules (Eduardo Barretto) 2025-11-21 15:53:25.566 logging.py DEBUG - applicability: Add nftables and ufw to package applicability (Eduardo Barretto) 2025-11-21 15:53:25.566 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_nftables_base_chain (Eduardo Barretto) 2025-11-21 15:53:25.566 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_nftables_base_chain (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - set_nftables_base_chain: sce: Simplify check so we don't run same (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - set_nftables_base_chain: Add ubuntu prodtype and cis references (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule nftables_ensure_default_deny_policy (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule nftables_ensure_default_deny_policy (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - nftables_ensure_default_deny_policy: Add ubuntu SCE check (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - nftables_ensure_default_deny_policy: Add ubuntu prodtype and cis references (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_nftables_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_nftables_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - set_nftables_loopback_traffic: Add ubuntu SCE check (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - set_nftables_loopback_traffic: Add ubuntu prodtype and cis references (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule nftables_rules_permanent (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - ubuntu2004: cis_level_1_server: Add rule nftables_rules_permanent (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: execute_tests: handle older versions (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - change: bash_replace_or_append: drop logic about symlinks (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: bash_replace_or_append: use bash_ensure_nl_at_eof (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - feature: bash: add bash_ensure_nl_at_eof (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - improve: test_bash_replace_or_append: more tests (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: test_set_config_file: use bats features (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: test_set_config_file: add test name prefix (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: bash_os_linux_conditional: use bats features (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: test_bash_replace_or_append: use bats features (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: test_bash_ensure_ini_config: use bats features (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - style: test_bash_ensure_ini_config (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - style: test_set_config_file.bats.jinja: indent, drop tabs (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: bats tests: add set -pu (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - feature: unit/bash/execute_tests: allow to enable bats features (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - Make sure the directory exists before saving the rendered policy file. (Gabriel Becker) 2025-11-21 15:53:25.567 logging.py DEBUG - add ansible remediation to rule configure_bashrc_exec_tmux (Vojtech Polasek) 2025-11-21 15:53:25.567 logging.py DEBUG - Use selections attribute from controls instead of rules. (Gabriel Becker) 2025-11-21 15:53:25.567 logging.py DEBUG - nftables_rules_permanent: Add Ubuntu SCE check (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - nftables_rules_permanent: Add Ubuntu prodtypes and cis references (Eduardo Barretto) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: ssg_test_suite.get_product_context: fake Product (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - Update Add Product guide (Matthew Burket) 2025-11-21 15:53:25.567 logging.py DEBUG - Reloval of ubuntu os support from the rule (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - Improve the structure of cmake macros (Matej Tyc) 2025-11-21 15:53:25.567 logging.py DEBUG - Rename SLE 12/15 rule and change package name (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - Replace grep command with ansible find (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: aide_string: drop nl at end (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - Add warning for remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Fix Bash heredoc (Matthew Burket) 2025-11-21 15:53:25.567 logging.py DEBUG - SLE 12/15 profile updates (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - Include aide_check_audit_tools rule in CIS for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/selinux/selinux_not_disabled/oval/shared.xml (Marcus Burghardt) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_deny_root/rule.yml (Rumen) 2025-11-21 15:53:25.567 logging.py DEBUG - Ensure that we correctly stated the version for action-gh-release (Matthew Burket) 2025-11-21 15:53:25.567 logging.py DEBUG - Update Code Climate (Matthew Burket) 2025-11-21 15:53:25.567 logging.py DEBUG - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.567 logging.py DEBUG - Introduce selinux_not_disabled rule (Marcus Burghardt) 2025-11-21 15:53:25.567 logging.py DEBUG - New rule ensure_chrony_is_configured (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_base_chain/sce/shared.sh (Rumen) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update rule.yml to be relvant for sle15 only for now (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/oval/sle15.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/tests/valid_config_file_handle_lo.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/bash/shared.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - Update CIS control file for RHEL9 regarding lo traffic (Marcus Burghardt) 2025-11-21 15:53:25.567 logging.py DEBUG - Introduce the firewalld_loopback_traffic_restricted rule (Marcus Burghardt) 2025-11-21 15:53:25.567 logging.py DEBUG - Introduce firewalld_loopback_traffic_trusted rule (Marcus Burghardt) 2025-11-21 15:53:25.567 logging.py DEBUG - Fix issue when adding fstab entries with iso9660 (Edgar Aguilar) 2025-11-21 15:53:25.567 logging.py DEBUG - fix: ensure_fedora_gpgkey_installed/bash: use bash_package_install (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - Fix tests applicablity for ol8 product (Edgar Aguilar) 2025-11-21 15:53:25.567 logging.py DEBUG - Update OL9 jinja conditionals from RHEL9 ones (Edgar Aguilar) 2025-11-21 15:53:25.567 logging.py DEBUG - Update jinja conditionals that apply to OL8 (Edgar Aguilar) 2025-11-21 15:53:25.567 logging.py DEBUG - Update jinja conditionals that apply to any ol (Edgar Aguilar) 2025-11-21 15:53:25.567 logging.py DEBUG - Remove use of mstksg/get-package in actions (Matthew Burket) 2025-11-21 15:53:25.567 logging.py DEBUG - Streamline compile_all (Matej Tyc) 2025-11-21 15:53:25.567 logging.py DEBUG - Update actions/download-artifact (Matthew Burket) 2025-11-21 15:53:25.567 logging.py DEBUG - Update comment actions (Matthew Burket) 2025-11-21 15:53:25.567 logging.py DEBUG - Fixes in SLE 12/15 rule accounts_passwords_pam_tally2_deny_root (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - Fix in SLE 12/15 rule sshd_use_approved_macs (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - Fix in the SLE 12/15 rule sshd_use_strong_kex (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - bugfix: dir_perms_world_writable_root_owned: do not modify files under /proc (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - Fix in sshd_use_approved_ciphers (rchikov) 2025-11-21 15:53:25.567 logging.py DEBUG - Add oval check and tests (teacup-on-rockingchair) 2025-11-21 15:53:25.567 logging.py DEBUG - style: install_vm (Markus Linnala) 2025-11-21 15:53:25.567 logging.py DEBUG - feature: install_vm: add --disk-unsafe (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - fix: install_vm: show defaults in --help (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - fix: install_vm: allow other start dir than tests (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - bugfix: aide_periodic_cron_checking: jinja expansion (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - bugfix: package_libselinux_installed: custom-package-removed.fail.sh: need to set releasever (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - bugfix: install_vm: support biosboot (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - bugfix: configure_etc_hosts_deny/tests/file_missing.fail.sh: typo (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - fix: ensure_logrotate_activated/bash: quote #! with '', avoid history expansion (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - bugfix: packages: delim is comma (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - fix: ssg_test_suite/oscap send_files_remote: drop, is unused (Markus Linnala) 2025-11-21 15:53:25.568 logging.py DEBUG - fix: sysctl: remove unnecessary tests/shared/sysctl.sh (Markus Linnala) 2025-11-21 15:53:25.584 logging.py DEBUG - Fix title case of rule (teacup-on-rockingchair) 2025-11-21 15:53:25.585 logging.py DEBUG - Fix ansible style titles and FQCN of tasks (teacup-on-rockingchair) 2025-11-21 15:53:25.585 logging.py DEBUG - Fix rule name in control (teacup-on-rockingchair) 2025-11-21 15:53:25.585 logging.py DEBUG - Optimize sysctl checks to use ansible sysctl module (teacup-on-rockingchair) 2025-11-21 15:53:25.585 logging.py DEBUG - Replace non-existing command create with insert (teacup-on-rockingchair) 2025-11-21 15:53:25.585 logging.py DEBUG - Assign CCE-ID SLE15 set_nftables_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.585 logging.py DEBUG - fix ocil for set_nftables_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.585 logging.py DEBUG - add newlines (Christian Hagenest) 2025-11-21 15:53:25.585 logging.py DEBUG - fix ansible syntax error (Christian Hagenest) 2025-11-21 15:53:25.585 logging.py DEBUG - move ocil_clauses between iptables rules (Christian Hagenest) 2025-11-21 15:53:25.585 logging.py DEBUG - New Rule nftable loopback traffic (Christian Hagenest) 2025-11-21 15:53:25.585 logging.py DEBUG - bugfix: aide_scan_notificatio/tests: ensure crontabs/chronie (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - bugfix: aide_check_audit_tools: Ensure no suffix prefix (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - bugfix: auditd_offload_logs/tests: ensure crontabs installed (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - bugfix: file_permissions_cron_allow/tests: ensure crontabs installed (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - bugfix: file_cron_deny_not_exist/tests: ensure crontabs installed (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: aide_periodic_cron_checking/tests: use bash_package_remove (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - bugfix: aide_periodic_cron_checking/tests: ensure packages are installed (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: aide/remediations: add crontabs (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: chronyd_or_ntpd_set_maxpoll/tests: use bash_package_remove (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: snmpd_not_default_password/tests: use bash_package_remove (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: configure_bind_crypto_policy/tests: use bash_package_remove (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: configure_libreswan_crypto_policy/tests: use bash_package_remove (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: snmpd_not_default_password/tests: use packages feature to install packages (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: smartcard_configure_cert_checking/bash: use bash_package_install to install required packages (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: accounts_polyinstantiated_var_tmp: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: accounts_polyinstantiated_tmp: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: build_profiler: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: sysctl: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: rsyslog_cron_logging/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: dir_system_commands_root_owned/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: accounts_users_home_files_permissions/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: file_ownership_library_dirs/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: sudo_require_authentication/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: sudo_remove_nopasswd/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: sudo_remove_no_authenticate/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: accounts_umask_interactive_users/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: file_group_ownership_var_log_audit/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: directory_permissions_var_log_audit/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: auditd_data_disk_full_action/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: auditd_data_disk_error_action/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: rsyslog_encrypt_offload_defaultnetstreamdriver/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: rsyslog_encrypt_offload_actionsendstreamdrivermode/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: rsyslog_encrypt_offload_actionsendstreamdriverauthmode/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: dir_system_commands_group_root_owned/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: sssd_enable_pam_services/bash: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: dir_perms_world_writable_system_owned_group/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: dir_perms_world_writable_system_owned/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: dir_perms_world_writable_sticky_bits/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: dir_perms_world_writable_root_owned/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: rsyslog_remote_tls/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: directory_group_ownership_var_log_audit/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: account_password_selinux_faillock_dir/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: usbguard_allow_hid_and_hub/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: file_permissions_library_dirs/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - fix: mount_option_nodev_nonroot_local_partitions/tests: use mkdir -p (Markus Linnala) 2025-11-21 15:53:25.585 logging.py DEBUG - Update CIS control file for RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Include missing CIS reference for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Update CIS control files for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Introduce file_groupownership_sshd_pub_key rule (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Introduce file_ownership_sshd_pub_key rule (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Update CIS control files for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Introduce file_groupownership_sshd_private_key rule (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Include id attribute to dedicated_ssh_keyowner (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Remove unnecessary blank lines in templates (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Introduce file_ownership_sshd_private_key rule (Marcus Burghardt) 2025-11-21 15:53:25.585 logging.py DEBUG - Quote octal value informed to mode option (Marcus Burghardt) 2025-11-21 15:53:25.586 logging.py DEBUG - Rename test scenario scripts and include tests (Marcus Burghardt) 2025-11-21 15:53:25.586 logging.py DEBUG - Minor changes into variables and ansible (rchikov) 2025-11-21 15:53:25.586 logging.py DEBUG - Fixes of cron package/service for SLE 12/15 (rchikov) 2025-11-21 15:53:25.586 logging.py DEBUG - Ensure that doctext blocks end with a blank line (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - Fix up some warnings in walk_rules (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - Fix link to developer docs in docs README (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - Remove utils/find_shadowed_files.py from docs (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - Update Heading Issues (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - Remove utils/count_oval_objects.py from docs (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - Python2 compatibility (Matej Tyc) 2025-11-21 15:53:25.586 logging.py DEBUG - Changes in profiles (rchikov) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: another instance of multi-tennant (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: another instance of httpasswd (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - Upgrade to changelog v3 (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - Update add product guide (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: typos in documentation (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: typos in controls (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: copied truncated text from CIS EKS benchmark (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: typos in controls/srg_gpos (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: more status_justification misspellings (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: typos in srg_ctr (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: fixed typos in label status_justfication (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - fix: typos in openshift content (Gene Gotimer) 2025-11-21 15:53:25.586 logging.py DEBUG - Use a dictionary as the env_yaml argument (Matej Tyc) 2025-11-21 15:53:25.586 logging.py DEBUG - Make the product class usable by the build system (Matej Tyc) 2025-11-21 15:53:25.586 logging.py DEBUG - Make product dict an object (Matej Tyc) 2025-11-21 15:53:25.586 logging.py DEBUG - Prepare for the concept of compiled products (Matej Tyc) 2025-11-21 15:53:25.586 logging.py DEBUG - refactor ansible and use FQCN (svet-se) 2025-11-21 15:53:25.586 logging.py DEBUG - update rule sles-15-040250 (svet-se) 2025-11-21 15:53:25.586 logging.py DEBUG - Use actions/checkout@v3 (Matthew Burket) 2025-11-21 15:53:25.586 logging.py DEBUG - fix letter cases, remove abandoned rule, fix rule 7.1 description and add vars (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Update cusp_firefox.yml (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Update cusp_fedora.yml (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Update controls/cusp_fedora.yml (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Update controls/cusp_fedora.yml (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Remove trailing space (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Remove rules that disable ip forwarding due to hardening of VM guests (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Fix order of fedora prodtype in rules (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Remove mount option rules due to inconsistencies, fix remediation platforms (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Remove rules based on testing the profile (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Fix controls yaml (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Add Firefox controls, remove duplicate rules in fedora controls (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - remove rule references (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - remove superfluous rule (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - fix control file and add fedora prodtype to rules (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Fix firefox rule, create new cusp_firefox profile and update rule 6.1 to reflect (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Fix YAML errors (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - test - enable fedora product build with cusp_fedora profile (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Add CaC rule to rule 6.1, add rules 6.2, 7.1, 7.2 (Jiri Odehnal) 2025-11-21 15:53:25.586 logging.py DEBUG - Add placeholder for rule 6.1 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 5.2 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 5.1 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Fix rule 3.10 title (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 3.10 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rules to 4.3 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 4.3 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 4.2 and update 3.5 to audit sudo config (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 4.1 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add journald rule to 3.6 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 3.6 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 3.9 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Update cusp_fedora.yml (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 3.8 (j-ode) 2025-11-21 15:53:25.586 logging.py DEBUG - Add rule 3.7 (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Add rule 3.6 (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Remove misplaced rule in 3.4 (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Add new rule to ensure gnome-software is installed and add it to cusp_fedora controls (Jiri Odehnal) 2025-11-21 15:53:25.587 logging.py DEBUG - Add rule 3.4 (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix rule 3.3 status (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Add rule 3.2 and 3.3 (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Add rule 3.1 (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Add section 2. System installation (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Rename policy to security policy (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Rename profile to policy (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Add rules to section 1 (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Create cup_fedora controls file (j-ode) 2025-11-21 15:53:25.587 logging.py DEBUG - Set permissions mode 640 in rsyslog_files_permissions for every product. (Gabriel Becker) 2025-11-21 15:53:25.587 logging.py DEBUG - Remove deadcode (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Improve indentation in oval definitions (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix read the docs build (Matthew Burket) 2025-11-21 15:53:25.587 logging.py DEBUG - Corrections in bash and ansible (rchikov) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix: many misspellings, typos (Gene Gotimer) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix: grammar- mismatched tense (Gene Gotimer) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix: another misspelled word, adminstrator (Gene Gotimer) 2025-11-21 15:53:25.587 logging.py DEBUG - fix: Fix misspelled word infrastruture #10530 (Gene Gotimer) 2025-11-21 15:53:25.587 logging.py DEBUG - Add CCE reference for SLE15 (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Remove duplicate IDs (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Add newline at eof (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Add Jinja variable to OS-based path in results (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Update Path config with macros (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix pkg names in macro (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Update descriptions for rsyslog-gnutls to account for sle packages (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Revert rsyslog-gnutls changes (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Remove duplicate macro and fix variable names (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix typos (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix syntax error and banner mixup. (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Update all CIS Control files with new banner cfg (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Update rule calls to comply to current cis req (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Create separate rule for sle rsyslog-gnutls pkg. (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Add sle prodtype and refences to faillog rule (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Update command paths for sle products (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Update mode of /etc/shadow for sles os (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Separate variables for banners This allows a separate regex for each file. (Nico Truzzolino) 2025-11-21 15:53:25.587 logging.py DEBUG - Drop of some rules from SLE 12/15 profiles (rchikov) 2025-11-21 15:53:25.587 logging.py DEBUG - Implement a tool for parsing profiles and outputing rules (Lance Bragstad) 2025-11-21 15:53:25.587 logging.py DEBUG - Make sure rule is valid for sle only (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Add no remediation tag (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix title to follow title case rule (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Rule renamed to shorter (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Test added (rchikov) 2025-11-21 15:53:25.587 logging.py DEBUG - feature: template_reference: add jinja filter documentations (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - style: template_reference (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - Added SCE check (rchikov) 2025-11-21 15:53:25.587 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix nftables rules titles title-case (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - make scap-security-guide.spec support RHEL too (Jiri Jaburek) 2025-11-21 15:53:25.587 logging.py DEBUG - feature: jinja: add quote, shell quoting (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - style: jinja filters: sort (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - OCP add variable to define HyperShift namespace prefix (Vincent Shen) 2025-11-21 15:53:25.587 logging.py DEBUG - OCP4 NIST: Fix typo in rule selection (Jakub Hrozek) 2025-11-21 15:53:25.587 logging.py DEBUG - OCP4 CIS: Add control file response for 1.2.33 and 1.2.34 (Jakub Hrozek) 2025-11-21 15:53:25.587 logging.py DEBUG - Use opening parenthesis in the switch case condition. (Gabriel Becker) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix in service_autofs_disabled - ansible (rchikov) 2025-11-21 15:53:25.587 logging.py DEBUG - Update rule to pass if no interactive users (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - Rename var_nftable_master_config_file (teacup-on-rockingchair) 2025-11-21 15:53:25.587 logging.py DEBUG - bugfix: mount_option: handle commented lines (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - Update CIS OCP 1.3.0 profile details (Lance Bragstad) 2025-11-21 15:53:25.587 logging.py DEBUG - change: use fedora 38 as builder (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - change: install_vm: use Fedora 38 (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - change: fedora 38 released (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - fix: ensure_fedora_gpgkey_installed: add rawhide and future in help (Markus Linnala) 2025-11-21 15:53:25.587 logging.py DEBUG - Add Kickstarts to the changelog (Matthew Burket) 2025-11-21 15:53:25.587 logging.py DEBUG - Update netrc requirement in CIS for RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Style Guide alignment: one sentence per line (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Apply suggestions from code review (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix in ansible part of the rule (rchikov) 2025-11-21 15:53:25.587 logging.py DEBUG - Add control file for OCP 1.3.0 (Lance Bragstad) 2025-11-21 15:53:25.587 logging.py DEBUG - Fix title in package_mailx_installed (Edgar Aguilar) 2025-11-21 15:53:25.587 logging.py DEBUG - Add package_mailx_installed to OL7 STIG (Edgar Aguilar) 2025-11-21 15:53:25.587 logging.py DEBUG - Add rule package_mailx_installed (Edgar Aguilar) 2025-11-21 15:53:25.587 logging.py DEBUG - add python3 to the list of build dependencies for RHEL-8+ (Jiri Jaburek) 2025-11-21 15:53:25.587 logging.py DEBUG - Update release documentation about release_helper (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Implementation of proposed changes in ansible (rchikov) 2025-11-21 15:53:25.587 logging.py DEBUG - Including missing line in the rule description (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Update 4.1.3.19 CIS requirement for RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - New audit rule for query_module kernel module (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Enable rule for RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Style Guide alignment (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Ansible tasks names in Title Case (Marcus Burghardt) 2025-11-21 15:53:25.587 logging.py DEBUG - Add SCE check (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Dropping irrelevant file (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Revert 3.5.3.2.3 requirement status to manual (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Revert 3.5.2.2 status to manual (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Use propper rule naming (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifications/set_iptables_outband_n_established_connections_configured/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix indentation in fixtext section (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifications/set_iptables_outband_n_established_connections_configured/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix indentation (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifications/set_iptables_outband_n_established_connections_configured/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Add couple of tests to illustrate target behaviour (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix duplicate reference key (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Add reference to set_iptables_outband_n_established_connections_configured rule in CIS SLE controls (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Add rule to define CIS requirements for ensuring iptables outbound and established connections are configured (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Allocate CCE ids for the set_iptables_outband_n_established_connections_configured rule (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - unify logvol naming in RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - add required partitions to CIS server/workstation l1 RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - remove wrong temporary password disablement in pci-dss RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - fix broken bootloader passwords in RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - use keyboard --vckeymap in RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - remove default --append arguments from RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - remove --location=mbr from RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix uefi cpe bash condition The condition should look for a directory and it looks for a file (Edgar Aguilar) 2025-11-21 15:53:25.588 logging.py DEBUG - remove unnecessary --pesize from RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - install RHEL stig_gui kickstarts with 'Server with GUI' packages (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - remove @Base from RHEL kickstarts (Jiri Jaburek) 2025-11-21 15:53:25.588 logging.py DEBUG - Update accounts_password_pam_retry yaml (Federico Ramirez) 2025-11-21 15:53:25.588 logging.py DEBUG - Bump OL7 STIG version to v2r11 (Federico Ramirez) 2025-11-21 15:53:25.588 logging.py DEBUG - Add ensure_oracle_gpgkey_installed to OL8 STIG (Edgar Aguilar) 2025-11-21 15:53:25.588 logging.py DEBUG - Update OL07-00-010271 requirement (Federico Ramirez) 2025-11-21 15:53:25.588 logging.py DEBUG - Bump OL8 STIG version to V1R6 (Edgar Aguilar) 2025-11-21 15:53:25.588 logging.py DEBUG - Implement OL07-00-010063 (Federico Ramirez) 2025-11-21 15:53:25.588 logging.py DEBUG - Implement OL07-00-010019 (Federico Ramirez) 2025-11-21 15:53:25.588 logging.py DEBUG - Add remediation none header (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - SLE add ability to configure emergency via dropin (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Link api_server_encryption_provider_cipher with CIS 2.8 (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix EOF test (Matthew Burket) 2025-11-21 15:53:25.588 logging.py DEBUG - Update rule description to consider /etc/profile.d (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Update CIS requirement status for umask requirement (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Update Ansible remediation to consider /etc/profile.d (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Update Bash remediation to consider /etc/profile.d (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Set service_nftables_enabled as machine only (Watson Sato) 2025-11-21 15:53:25.588 logging.py DEBUG - Update test scenarios and include /etc/profile.d (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Extend OVAL check to consider /etc/profile.d dir (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Update CIS RHEL9 control file for 4.1.4.5 (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Include file_permissions_audit_configuration rule (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - OCPBUGS-11334: OCP4: Fix instructions for rules that set the kubelet related sysctls (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - OCP4: Use the sysctl probe when checking kubelet sysctls (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - Update ansible in mount_option_remote_filesystems (Edgar Aguilar) 2025-11-21 15:53:25.588 logging.py DEBUG - Update tests in mount_option_remote_filesystems (Edgar Aguilar) 2025-11-21 15:53:25.588 logging.py DEBUG - Update ansible in mount_option_remote_filesystems (Edgar Aguilar) 2025-11-21 15:53:25.588 logging.py DEBUG - OCP4: Add rules for SRG-APP-000456-CTR-001125 (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - Deletion of 2 tests (rchikov) 2025-11-21 15:53:25.588 logging.py DEBUG - OCPBUGS-7307: Remove templating from OCIL in alert_receiver_configured (Lance Bragstad) 2025-11-21 15:53:25.588 logging.py DEBUG - Use F38 for Ansible lint test (Matthew Burket) 2025-11-21 15:53:25.588 logging.py DEBUG - Expand the list of rules skiped by Ansible lint (Matthew Burket) 2025-11-21 15:53:25.588 logging.py DEBUG - Revert ansible lint gating job to Fedora 37. (Gabriel Becker) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix unused variable in shell script (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Modify SLE remediation for ensure_logrotate_activated (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - accounts_password_pam_unix_remember: bash: Improve ubuntu remediation (Eduardo Barretto) 2025-11-21 15:53:25.588 logging.py DEBUG - Ubuntu move from pam_pwhistory_remember to pam_unix_remember (Eduardo Barretto) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix logic for the release step (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Do not treat pull requests and issues differently (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix missing argument in update_milestone() (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Fix missing argument in get_version_milestone() (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Update utils/release_helper.py (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Include required argument to milestone.edit (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Remove unexpected data from datetime string (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Expand use home directory if present in file path (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Format simplification for functions that print stats (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Rename functions for better readability (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Improve communication messages (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Improve a little bit get_release_end_message function (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Remove function which is no longer used (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Increase robustness in functions that use local files (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Simplified main function with a dictionary (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Improve error handling for session creation (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Update utils/release_helper.py (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Move the bump_version option to release_prep (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Some improvements regarding readability (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Improvements based on the CodeClimate report (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - Introduce the release_helper.py script (Marcus Burghardt) 2025-11-21 15:53:25.588 logging.py DEBUG - sshd_limit_user_acess: tests: Fix typo (Eduardo Barretto) 2025-11-21 15:53:25.588 logging.py DEBUG - Ensure all control files end with a new line (Matthew Burket) 2025-11-21 15:53:25.588 logging.py DEBUG - Add control files to check_eof script (Matthew Burket) 2025-11-21 15:53:25.588 logging.py DEBUG - Add sysctl disable_ipv6 rule to CIS 3.1.1 (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Allow dot in VERSION_ID (Jan Černý) 2025-11-21 15:53:25.588 logging.py DEBUG - Code Climate changed in check_eof (Matthew Burket) 2025-11-21 15:53:25.588 logging.py DEBUG - OCP4: New rule image_pruner_active covers SRG-APP-000454-CTR-001110 and SRG-APP-000454-CTR-001115 (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - OCP4: CO related rules resolve three SRGs in SI-6 (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - OCP4: Add a new rule scansettings_have_schedule (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - OCP4: STIG does not mandate FIO to be installed (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - SRG-APP-000474-CTR-001180: Is does not meet (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - OCP4: Check for scansettingbinding, not compliancesuite (Jakub Hrozek) 2025-11-21 15:53:25.588 logging.py DEBUG - Add test scenario vs port number 22 when sshd (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Use proto list also in criteria definition (teacup-on-rockingchair) 2025-11-21 15:53:25.588 logging.py DEBUG - Use jinja to shorten the OVAL (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Reorder vars,objects,states for better readability (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - add warning explaining the change (Vojtech Polasek) 2025-11-21 15:53:25.589 logging.py DEBUG - ignore the /proc and its subdirectories when checking / remediating the rule (Vojtech Polasek) 2025-11-21 15:53:25.589 logging.py DEBUG - fix tests errors (svet-se) 2025-11-21 15:53:25.589 logging.py DEBUG - Improve oval indentation (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix XLXS test (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - FIx New EOF Issues (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix final file EOF (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Ignore /tests/data/utils/ in check_eof (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update tests/CMakeLists.txt (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add test folder to check EOF (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix more files without newlines at the end (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add exclusion for files in the check_eof script (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add more extensions for check_eof (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update check_eof based on PR feedback. (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Only run test-check-eof on Python 3 (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix type hints in utils/check_eof.py (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Ensure that all files in the repo end with a newline (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add docs for utils/check_eof.py (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add test for ensure that files end with a new file (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add mypy test for utils/check_eof (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update docs for adding mypy to tests (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - UUpdate mypy tests to use a macro (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add script to fix new line at end of files (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update CIS requirement for SSH access limit (Marcus Burghardt) 2025-11-21 15:53:25.589 logging.py DEBUG - sshd_limit_user_access: tests: Add empty variable tests (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - sshd_limit_user_access: oval: Improve code style (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - Use versioned expressions for OS checks (Jan Černý) 2025-11-21 15:53:25.589 logging.py DEBUG - OCP4: Don't limit prometheus rules to 500 (Jakub Hrozek) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix CMakelint errors (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Add CMakelint test (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix iterator of path_exists items (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix small states boolean value (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Use alternative approach to get interactive users (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Make the test for access mode more explicit (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix state id thanks to @marcusburghardt for the help (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix rule definitions and warnings to more clear (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Wrap lines in oval check definition (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/bash/shared.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Set rule prodtype sle platforms only (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Drop dead code from bash remediation and some double quote to prevent globbing and word splitting. (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Assign CCE SLE ids for accounts_users_netrc_file_permissions rule (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Add implementation for accounts_users_netrc_file_permissions (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - The expat package provides xmlwf which is not being used anymore. (Gabriel Becker) 2025-11-21 15:53:25.589 logging.py DEBUG - Add CMake rules to style guide (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update strategy shall be one of the given values (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update strategy in remediation to include combination (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update warning types to include all types of the XCCDF specification (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Update controls docs (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule sshd_limit_user_access (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule sshd_limit_user_access (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - sshd_limit_user_access: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - sshd_limit_user_access: Add OVAL (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - sshd_limit_user_access: Update rule description (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - Update shared.xml (Rumen) 2025-11-21 15:53:25.589 logging.py DEBUG - Update in OVAL regexp , updates in tests (rchikov) 2025-11-21 15:53:25.589 logging.py DEBUG - Simplify OVAL for rule aide_build_database (Jan Černý) 2025-11-21 15:53:25.589 logging.py DEBUG - remove trailing spaces (svet-se) 2025-11-21 15:53:25.589 logging.py DEBUG - Revert 06d377c4f5a6b3327959b498d40318c9465f0e17. (Gabriel Becker) 2025-11-21 15:53:25.589 logging.py DEBUG - update rule sles 15-010340 and file_permissions template (svet-se) 2025-11-21 15:53:25.589 logging.py DEBUG - OCPBUGS 7816: Fix remediation for sshd-set-loglevel-info (Vincent Shen) 2025-11-21 15:53:25.589 logging.py DEBUG - ubuntu2204: cis_level2_workstation: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - ubuntu2204: cis_level2_server: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - ubuntu2004: cis_level2_workstation: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - ubuntu2004: cis_level2_server: Add rule all_apparmor_profiles_enforced (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: bash: Add Ubuntu bits (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Add Ubuntu bits to (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - all_apparmor_profiles_enforced: Add SCE check (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - all_apparmor_profiles_enforced: bash: Add Ubuntu bits (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - all_apparmor_profiles_enforced: Add Ubuntu bits to description (Eduardo Barretto) 2025-11-21 15:53:25.589 logging.py DEBUG - Updates in bash and ansible remediation (rchikov) 2025-11-21 15:53:25.589 logging.py DEBUG - Test to trigger automatus. (Gabriel Becker) 2025-11-21 15:53:25.589 logging.py DEBUG - Add --no-remove-machine-only to runs of AutoMatus in gating. (Gabriel Becker) 2025-11-21 15:53:25.589 logging.py DEBUG - Add option to keep machine platforms in test_rule_in_container.sh. (Gabriel Becker) 2025-11-21 15:53:25.589 logging.py DEBUG - Add OVAL check for nftables_ensure_default_deny_policy rule (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Add nftables_ensure_default_deny_policy to CIS SLE15 control (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - Add rule definition for nftables default deny policy (teacup-on-rockingchair) 2025-11-21 15:53:25.589 logging.py DEBUG - SRG-APP-000456-CTR-001130 is not applicable (Jakub Hrozek) 2025-11-21 15:53:25.589 logging.py DEBUG - SRG-APP-000447-CTR-001100: This control is inherently met (Jakub Hrozek) 2025-11-21 15:53:25.589 logging.py DEBUG - Add mount[var-tmp] platform to mount_option_var_tmp_bind (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - No remediation warning for fapolicy_default_deny (Milan Lysonek) 2025-11-21 15:53:25.589 logging.py DEBUG - Revert package version enforcing for xmldiff in CI. (Gabriel Becker) 2025-11-21 15:53:25.589 logging.py DEBUG - Include rule_title in Ansible tasks names (Marcus Burghardt) 2025-11-21 15:53:25.589 logging.py DEBUG - Fix change in Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.589 logging.py DEBUG - Update OL9 stig_gui (Edgar Aguilar) 2025-11-21 15:53:25.589 logging.py DEBUG - Move template platform_mount to use cpe-oval from oval (Matthew Burket) 2025-11-21 15:53:25.589 logging.py DEBUG - Missing wrong_value_2.fail.sh test added (rchikov) 2025-11-21 15:53:25.589 logging.py DEBUG - Optimizations in bash and ansible parts (rchikov) 2025-11-21 15:53:25.589 logging.py DEBUG - Update of ansible part (rchikov) 2025-11-21 15:53:25.589 logging.py DEBUG - templates/mount_option: Switch mount Ansible remediation module's state back to 'mounted' (Evgeny Kolesnikov) 2025-11-21 15:53:25.589 logging.py DEBUG - permissions/partitions: Add mount[] platform to mount_option_tmp* and mount_option_var_tmp* rules (Evgeny Kolesnikov) 2025-11-21 15:53:25.589 logging.py DEBUG - shared/applicability: Replace partition-tmp and partition-var-tmp with a new templated platform mount[] (Evgeny Kolesnikov) 2025-11-21 15:53:25.589 logging.py DEBUG - Revert change in test scenario script (Marcus Burghardt) 2025-11-21 15:53:25.589 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_rules_permanent/ansible/sle15.yml (Marcus Burghardt) 2025-11-21 15:53:25.589 logging.py DEBUG - Enable SCE check in set_nftables_table for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.589 logging.py DEBUG - Enable set_nftables_table rule for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.589 logging.py DEBUG - Ensure the passwd package during the tests (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Add support for comma-separated version expressions (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable ensure_root_password_configured for RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Fix change in enable_authselect Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Fix tasks in ansible_sssd_ldap_config (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Fix authselect check task (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Add documentation for the os_linux platform (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Support versions in the os_linux platform (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Add a warning to AutoMatus (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_root_password_configure: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule ensure_root_password_configured (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule ensure_root_password_configured (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_root_password_configured: Add OVAL check (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Add new rule ensure_root_password_configured (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable service_nftables_enabled for RHEL7 and RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable ensure_shadow_group_empty for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable bash remediation for all platforms (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - OCPBUGS-10473: Adds instructions to several OCP rules (Jakub Hrozek) 2025-11-21 15:53:25.590 logging.py DEBUG - Mitigate xmldiff package upgrade problem. (Gabriel Becker) 2025-11-21 15:53:25.590 logging.py DEBUG - Import default sysctl file from constants.py (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Update rule description about block devices (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Extend unit test data by a CPE OVAL component (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Add a simple unit test for the XMLContent class (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Add RHEL platforms to rsyslog_logging_configured (Matthew Burket) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: oval: Improve criteria comment (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: bash: Remove non-remediation line (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Ensure /etc/cron.daily exists (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Fix data stream component parsing (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Update documentation on sysctl template (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Add sysctl_remediate_drop_in_file to ansible fix (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Use sysctl_remediate_drop_in_file property (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Use jinja2 filter replace instead of bash (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Simplify a bit the rules (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Update OL9 STIG profile (Edgar Aguilar) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_avahi_removed (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_avahi_removed (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - package_avahi_removed: Add ubuntu prodtypes, cis references and pkgname (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: tests: Add test for no_shadow_group and (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: oval: Change logic in case of no shadow group (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2204: Move from approved_macs to strong_macs (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2204: Move from approved_ciphers to strong_ciphers (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Update ssg/constants.py (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Improve wording in OVAL comments (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Increase regular expression flexibility (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Remove check of the "new" AIDE database (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Remove confused test scenario (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - revert cce changes (svet-se) 2025-11-21 15:53:25.590 logging.py DEBUG - OCP4 STIG: Consolidate duplicate rules for SRG-APP-000429-CTR-001060, add policy file (Jakub Hrozek) 2025-11-21 15:53:25.590 logging.py DEBUG - Drop state_tcp/udp_listening_inet_ports filter (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable ip6tables_rules_for_open_ports for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable iptables_rules_for_open_ports for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Update RHEL7 CIS controlfile for iptables policies (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable iptables and ip6tables rules for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Fix reference id to pcidss4 as intended (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Add missing rules to PCIDSS-v4 (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Add to pcidss4 profile ntp and timesyncd rules (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Drop requirement id from title string (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Drop Req prefix from pcidss4 reference ids (teacup-on-rockingchair) 2025-11-21 15:53:25.590 logging.py DEBUG - Update CIS control files for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable has_nonlocal_mta rule for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Corrections in bash parts (rchikov) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Introduce option to var_user_initialization_files_regex (Federico Ramirez) 2025-11-21 15:53:25.590 logging.py DEBUG - Test scenarios for dot_no_world_writable_programs (Federico Ramirez) 2025-11-21 15:53:25.590 logging.py DEBUG - Update dot_no_world_writable_programs OVAL (Federico Ramirez) 2025-11-21 15:53:25.590 logging.py DEBUG - Update var_user_initialization_files_regex.var (Federico Ramirez) 2025-11-21 15:53:25.590 logging.py DEBUG - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Enable service_nftables_disabled for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - var_pam_wheel_group_for_su: Fix title (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Some additional corrections (rchikov) 2025-11-21 15:53:25.590 logging.py DEBUG - has_nonlocal_mta: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Update ANSSI version for OL products (Watson Sato) 2025-11-21 15:53:25.590 logging.py DEBUG - Explicitly set SELinux type (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - Update in bash part (rchikov) 2025-11-21 15:53:25.590 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/var_nftables_base_chain_priorities.var (Rumen) 2025-11-21 15:53:25.590 logging.py DEBUG - Small correction (rchikov) 2025-11-21 15:53:25.590 logging.py DEBUG - Small corrections (rchikov) 2025-11-21 15:53:25.590 logging.py DEBUG - Update CTF to its new home in the ComplianceAsCode org (Matthew Burket) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_pam_wheel_group_empty: bash: Fix bash shellcheck (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - use_pam_wheel_for_su: Remove ubuntu prodtypes and references (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2004: cis_level1_server: Add pam wheel rules (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ubuntu2204: cis_level1_server: Add pam wheel rules (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_pam_wheel_group_empty: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_pam_wheel_group_empty: Add OVAL check (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_pam_wheel_group_empty: Add bash remediation (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Add rule ensure_pam_wheel_group_empty (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - use_pam_wheel_group_for_su: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - use_pam_wheel_group_for_su: Add OVAL check (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - use_pam_wheel_group_for_su: Add bash remediation (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Add rule use_pam_wheel_group_for_su (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Add variable var_pam_wheel_group_for_su (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Include test scenarios for RHEL7 and CIS (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Set sshd_strong_kex variable in CIS RHEL7 control (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Complete 5.3.15 requirement for CIS RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.590 logging.py DEBUG - Remove unused imports (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - delete rule SLES-15-040280 (svet-se) 2025-11-21 15:53:25.590 logging.py DEBUG - Remove unused variables (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: bash: Improve remediation (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: oval: Improve check (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Add CPE OVAL to the checklist catalog (Jan Černý) 2025-11-21 15:53:25.590 logging.py DEBUG - OCPBUGS-8347: Disable the check for scheduler's bind-address option, the option was removed from newer kuber versions (Jakub Hrozek) 2025-11-21 15:53:25.590 logging.py DEBUG - Disable logrotate timer in ensure_logrotate_activated tests (Matthew Burket) 2025-11-21 15:53:25.590 logging.py DEBUG - OCP: Disable rules for HyperShift (Vincent Shen) 2025-11-21 15:53:25.590 logging.py DEBUG - ensure_shadow_group_empty: Add OVAL check (Eduardo Barretto) 2025-11-21 15:53:25.590 logging.py DEBUG - Bump version for 0.1.68 (Matthew Burket) 2025-11-21 15:53:25.590 logging.py DEBUG - OCP4 STIG: Cover SRG-APP-000246-CTR-000605 and SRG-APP-000435-CTR-001070 (Jakub Hrozek) 2025-11-21 15:53:25.590 logging.py DEBUG - OCP4 STIG: SRG-APP-000190-CTR-000500 is covered by setting the OAuth client timeout (Jakub Hrozek) 2025-11-21 15:53:25.590 logging.py DEBUG - Remove redundant platforms from partitions/mount_option_* rules (Evgeny Kolesnikov) 2025-11-21 15:53:25.590 logging.py DEBUG - Add check for /etc/fstab entries in mount_option template (Evgeny Kolesnikov) 2025-11-21 15:53:25.591 logging.py DEBUG - SLE improve kernel module disabled rule (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Use drop in file for sysctl variables for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - fix: ctest: test_assert_reference_unique.py handle pytest v2.7 (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - fix: ctest: skip test_assert_reference_unique.py if not py3 (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - Add missing rules for pcidss v4 control file (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Fix reference key naming (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Drop reference wrongly added during rebase (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Fix rule names (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Extract rules from SLE15 profile to PCI-DSS v4 control file (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Use PCI-DSS v4 control file as base for the profile (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Add support for PCI DSS v4 refernce support (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Add PCI-DSS v4 relevant requirement ids as references (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Fix status from pending to partial where needed (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - Add PCI DSS v4 control (teacup-on-rockingchair) 2025-11-21 15:53:25.591 logging.py DEBUG - fix: ctest: unique-cces: only if PYTHON_VERSION_MAJOR GREATER > 2 (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - bugfix: ctest: only run test-generate_contributors if .git exists (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - fix: ctest: only run respective ssg_controlrefcheck_test tests if product is enabled (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - style: rsyslog_logfiles_attributes_modify/ansible: split long line (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - style: no_user_host_based_files/ansible: drop unnecessary block (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - style: no_host_based_files/ansible: drop unnecessary block (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - style: no_rsh_trust_files/ansible: drop unnecessary block (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - style: ansible: Rule names to start with upcase (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - style: grub2_bootloader_argument_absent: split long result_authselect_present rules (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - fix: grub2_bootloader_argument_absent: simplify result_authselect_present rules (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - bugfix: set_ipv6_loopback_traffic/ansible: when is jinja2 already (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - bugfix: service_pcscd_enabled/ansible: service does not have masked parameter (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - bugfix: usbguard_generate_policy/ansible: service does not have masked parameter (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - bugfix: service_chronyd_or_ntpd_enabled/ansible: service does not have masked parameter (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - bugfix: service_enabled/ansible: service does not have masked parameter (Markus Linnala) 2025-11-21 15:53:25.591 logging.py DEBUG - change: accounts_root_path_dirs_no_write/ansible: it is run as root (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: use_kerberos_security_all_exports/ansible: do not ignore_errors (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: service_chronyd_or_ntpd_enabled: do not ignore_errors (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: ansible: do not use ignore_errors w/ grep (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: ansible_check_authselect_integrity: use rc, not ignore_errors (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: service_disabled/ansible: use failed_when instead of ignore_errors (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - bugfix: enable_authselect/tests/remediable.fail.sh: Allow testing under podman (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: enable_authselect/ansible: use failed_when instead of ignore_errors (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - fix: ansible build_profile_remediations: add and use remove_too_many_blank_lines (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - fix: ansible build_profile_remediations: tidy end of file (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - fix: ansible_playbook_check: shellcheck fixes (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: assert_reference_unique: convert to python (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - bugfix: ansible-lint: ensure ctest jobs can be run parallel (Markus Linnala) 2025-11-21 15:53:25.609 logging.py DEBUG - change: yamllint: increase line length to 170 (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: yamllint: require document-start as checked documents have it (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: yamllint: allow consistent indentation (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - change: ansible-lint_config silence non-fixable issues (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: ansible-lint: mark all files as playbooks (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: ssg_test_suite: RuleResult __eq__ (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: display_login_attempts: bad product comparison against ubuntu (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - OCPBUGS-8358: enable_fips_mode: Make it clear that RHCOS can't be FIPS-enabled post-install (Jakub Hrozek) 2025-11-21 15:53:25.610 logging.py DEBUG - style: dconf_db_up_to_date: use [] when comparing multiple products (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: jinja: use product in when comparing multiple products, not or clause (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: security_patches_up_to_date: avoid product comparison when not needed (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: permissions_important_account_files: use in product style when comparing products (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: log_rotation: bad ubuntu product names (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: package_xorg-x11-server-common_removed: simplify products (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - ubuntu2004: cis_level2_workstation: Add rule package_cups_removed (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - ubuntu2204: cis_level2_workstation: Add rule package_cups_removed (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule has_nonlocal_mta (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule has_nonlocal_mta (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - has_nonlocal_mta: Add OVAL (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - Add rule has_nonlocal_mta (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - postfix_network_listening_disabled: Restart postfix service (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_nfs-kernel-server_removed (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_nfs-kernel-server_removed (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - Add rule package_nfs-kernel-server_removed (Eduardo Barretto) 2025-11-21 15:53:25.610 logging.py DEBUG - RHCOS4: Updated rule for rhel9 based RHCOS (Vincent Shen) 2025-11-21 15:53:25.610 logging.py DEBUG - Update Contributors for v0.1.67 (Matthew Burket) 2025-11-21 15:53:25.610 logging.py DEBUG - Update mailmap for v0.1.67 (Matthew Burket) 2025-11-21 15:53:25.610 logging.py DEBUG - Remove references from rules that not selected (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Add references to rules configureing IPv6 stack (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Don't disable IPv6 stack, but configure it instead (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - change ANSSI versions for SLE products (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - update ANSSI version for RHEL products (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - ANSSI control file is no longer draft (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - add enable_authselect rule to anssi control file (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - make location of rule title consistent in the file and with other control files (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - fix typos in the control file (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - add anssi references to rules (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - add missing CCEs to rules used in ANSSI profiles (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - fix duplicate CCE (Vojtech Polasek) 2025-11-21 15:53:25.610 logging.py DEBUG - Set as planned Recommendations that need update (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update various Recommendations (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update R39 - sudo configuration (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update the hardening level of the recommendations (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Remove eliminated recommendations (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Fix grub2 mds variable and value (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update analysis of R6 recommendation (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Fix typo on RNG confidence (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update documentations status to manual (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update status of requirements (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update AIDE seal requirement (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Upddate R78 as automated (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update rules for R8 (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update status of a few requirements (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Select audit rules for R76 (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Select rules for kernel compile config (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Select sysctl rules for R12 (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Move hidepid out of selected rules (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update R8 with new rules (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update R1 (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update R9 with new rules (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Select sysctl rule for R13 (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update R14 with sysctl rules (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update R40 with rule for sudo timestamp_tmeout (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update R28 with rule for hidepid=2 (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update status of remaining items (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Set status supported for items we can implement (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Fix requirement levels (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Add CCEs to rules reference in ANSSI (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Add and remove ANSSI references in rules (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Update ANSSI-BP-028 to DRAFT v2.0 (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - style: utils: use "not in" (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - style: build-scripts/verify_references.py: use "not in" (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - style: tests/unit/ssg_test_suite/test_matches_platform.py: use "is" to compare to truthy (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - style: utils/add_platform_rule.py: compare None using is (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: tests/unit/ssg-module/test_build_remediations.py: unused variable (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: utils/srg_audit.py: no need to use format string (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: utils/ansible_playbook_to_role.py: simplify platform_version (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - fix: tests: drop unused format params (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: automatus: help string: rule testing is supported by openscap (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: utils/ansible_playbook_to_role.py: add missing import UnknownObjectException (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: ssg/content_diff.py: add missing idref as parameter (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: ssg/entities/profile_base.py: add missing import CPEDoesNotExist (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: tests/ssg_test_suite/log.py: mixup with format and sys.stderr (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: ssg/xml: drop duplicate definition of get_test_action_ref_element (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix: ssg/build_yaml: there is not xccdf v1.2.4, but v1.2 (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix/change: ssg/escape_regex: do not escape "," (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - bugfix/change: ssg etc: improve and use mkdir_p (Markus Linnala) 2025-11-21 15:53:25.610 logging.py DEBUG - Improve the UX of remediation macros (Matej Tyc) 2025-11-21 15:53:25.610 logging.py DEBUG - Improve version sanity check (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Clarify the usage of epoch in the documentation (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add a BATS test for bash_compare_version (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Change macro bash_compare_version (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Remove a local location (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Improve text consistency (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Explain versions caveat in the documentation (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add support for epoch in platform package (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Introduce a macro that is rpm-agnostic (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Recommend to not use package platforms (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Remove release part of the version string (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Support only numeric versions (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Check package release for RPM packages (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Fix quoting problems (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add a simpler example of the bash_pkg_conditional use (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Remove duplicate code (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Remove the dist part of the version from the test (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Split macro bash_compare_version_rpm (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add documentation for package CPE platform (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add a description of algortihm (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Remove dependency on real-world RPM packages (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Improve test names (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add BATS tests for bash_pkg_conditional_rpm macro (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add Ansible statement for package version checking (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Add Bash conditional for package version checking (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Stop raising an exception (Jan Černý) 2025-11-21 15:53:25.610 logging.py DEBUG - Align rhel7 dracut-fips-aesni remediations (Watson Sato) 2025-11-21 15:53:25.610 logging.py DEBUG - Regexp matches multiple lines (nnerdmann) 2025-11-21 15:53:25.611 logging.py DEBUG - fix loops within ansible template for rsyslog_files (Vojtech Polasek) 2025-11-21 15:53:25.611 logging.py DEBUG - Remove package_avahi_removed from RHEL 9 CIS Level 2 (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Remove package_avahi-autoipd_removed from RHEL 9 CIS (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP change CatalogSource used to deploy CO (Vincent Shen) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP change CatalogSource used to deploy CO (Vincent Shen) 2025-11-21 15:53:25.611 logging.py DEBUG - change: ssg/build_ovals.py: fail if OVAL definition ID does not match rule ID (Markus Linnala) 2025-11-21 15:53:25.611 logging.py DEBUG - bugfix: sysctl_crypto_fips_enabled: rhcos4: fix definition name to match rule name (Markus Linnala) 2025-11-21 15:53:25.611 logging.py DEBUG - SRG-APP-000414-CTR-001010 is completely manual (Jakub Hrozek) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Make timesyncd default ntp service (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2004: cis_level1_server: Add ntp related rules (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ntp: Add ubuntu2004 platform and fix cis references (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - service_chrony_enabled: Alter platform to package chrony (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - service_ntp_enabled: Add platform package ntp (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - service_timesyncd_enabled: Add platform not package chrony and ntp (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - service_timesyncd_enabled: Add packagename@ubuntu2204 (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - Add url for ism in constants (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP optimize rule for hypershift (Vincent Shen) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP4 STIG: SRG-APP-000243-CTR-000595 is covered with manual SCC rules as well (Jakub Hrozek) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP4 STIG: SRG-APP-000386-CTR-000920 is inherently met (Jakub Hrozek) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP4 STIG: SRG-APP-000384-CTR-000915 is covered by CVO (Jakub Hrozek) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP4 STIG: SRG-APP-000383-CTR-000910 is inherently met (Jakub Hrozek) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP4 STIG: SRG-APP-000142-CTR-000330 is implemented via several manual rules (Jakub Hrozek) 2025-11-21 15:53:25.611 logging.py DEBUG - OCP4 STIG: SRG-APP-000141-CTR-000320: Fix typo in attribute (Jakub Hrozek) 2025-11-21 15:53:25.611 logging.py DEBUG - sshd_use_strong_kex: oval: Remove fips check (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule sshd_use_strong_kex (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - sshd_use_strong_kex: oval: Make comments more generic (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - sshd_use_strong_kex: Add ubuntu2204 prodtype and cis reference (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - installed_OS_is_ubuntu*: Improve title and description (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level2_workstation: Fix title and description (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Fix typo in rule name (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule all_apparmor_profiles_in_enforce_complain_mode (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule all_apparmor_profiles_in_enforce_complain_mode (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Add SCE check (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: bash: Add ubuntu (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - all_apparmor_profiles_in_enforce_complain_mode: Add ubuntu prodtypes and (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - sudo_add_use_pty: depend on sudo being installed (Craig Andrews) 2025-11-21 15:53:25.611 logging.py DEBUG - make rule accounts_password_last_change_is_in_past not applicable to containers (Vojtech Polasek) 2025-11-21 15:53:25.611 logging.py DEBUG - Remove VMM reference from unit tests (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Add /dev/shm to CIS Server Level 2 Kickstart on RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Add /dev/shm to RHEL 9 CIS Workstation Level 1 kickstart (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Add /dev/shm to RHEL 9 CIS Server Level 1 kickstart (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Add /dev/shm to RHEL 9 CIS Server Level 2 kickstart (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Add /dev/shm to RHEL 7 CIS Workstation Level 2 kickstart (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Add /dev/shm to RHEL 7 CIS Workstation Level 1 kickstart (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Add /dev/shm to RHEL 7 CIS Server Level 1 kickstart (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Fix CCE URI (Jan Černý) 2025-11-21 15:53:25.611 logging.py DEBUG - Corrections in the rule.yml (rchikov) 2025-11-21 15:53:25.611 logging.py DEBUG - Remove vsrg reference from rules (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - From vmmsrg from documentation and test data (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Remove vmmsrg references from rules (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - Corrections in bash, ansible and variables (rchikov) 2025-11-21 15:53:25.611 logging.py DEBUG - Optimize loop through protocol families (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Add tests if no service listens we consider it pass (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/nftables_rules_permanent/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Modify oval rule on missing/incorrect config to return fail (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/wrong.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/correct.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/correct.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/ensure_firewall_rules_for_open_ports/tests/common.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.611 logging.py DEBUG - Update ansible in file_permissions_binary_dirs (Edgar Aguilar) 2025-11-21 15:53:25.611 logging.py DEBUG - Add SCE flag to ubuntu2204 gate (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - cmake: Make test-ds-sce run for both ubuntu2004 and ubuntu2204 (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_nftables_table (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_nftables_table (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - set_nftables_table: sce: Add sce auditing script (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - set_nftables_table: bash: Add ubuntu platform (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - set_nftables_table: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule service_nftables_enabled (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule service_nftables_enabled (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - service_nftables_enabled: Add ubuntu prodtype and cis references (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - Include warning for NM Keyfiles in RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Include RHEL reference for CIS firewalld zone rule (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Update RHEL CIS requirement for privileged commands (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Improve Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Remove systemctl restart command in test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Improve OVAL check regarding eligible partitions (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Update bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Review and update test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Ensure perm filter is considered in regex (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Introduce variable for rule regex (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Update the rule description and references (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Improve audit_privileged_commands OVAL readability (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Include Ansible remediation for rsyslog_filecreatemode (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Enable rsyslog_filecreatemode rule for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Small fix in Bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.611 logging.py DEBUG - Use check-fact-ref in platform element (Jan Černý) 2025-11-21 15:53:25.611 logging.py DEBUG - sudo_custom_logfile: depend on sudo being installed (Craig Andrews) 2025-11-21 15:53:25.611 logging.py DEBUG - coredump_disable_storage: depend on systemd being installed (Craig Andrews) 2025-11-21 15:53:25.611 logging.py DEBUG - coredump_disable_backtraces: depend on systemd being installed (Craig Andrews) 2025-11-21 15:53:25.611 logging.py DEBUG - Add srg to account_passwords_pam_faillock_dir (Matthew Burket) 2025-11-21 15:53:25.611 logging.py DEBUG - sudo_require_reauthentication: depend on sudo being installed (Craig Andrews) 2025-11-21 15:53:25.611 logging.py DEBUG - use_pam_wheel_for_su: depend on pam being installed (Craig Andrews) 2025-11-21 15:53:25.611 logging.py DEBUG - aide_build_database: ansible: Add ubuntu bits (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule accounts_password_last_change_is_in_past (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule accounts_password_last_change_is_in_past (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - accounts_password_last_change_is_in_past: Add cis@ubuntu references (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule banner_etc_motd (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule banner_etc_motd (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - banner_etc_motd: bash: Add ubuntu platform (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - banner_etc_motd: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2025-11-21 15:53:25.611 logging.py DEBUG - Remove of OVAL part (rchikov) 2025-11-21 15:53:25.611 logging.py DEBUG - New SLE 12/15 rule all_apparmor_profiles_in_enforce_complain_mode which covers CIS recommendation (rchikov) 2025-11-21 15:53:25.612 logging.py DEBUG - Remove OVAL part (rchikov) 2025-11-21 15:53:25.612 logging.py DEBUG - A new rule as a part of CIS profile for SLE 12/15 - all_apparmor_profiles_enforced (rchikov) 2025-11-21 15:53:25.612 logging.py DEBUG - Add package_ftp_removed rule (cortesana) 2025-11-21 15:53:25.612 logging.py DEBUG - vlock_installed: apply only to platform machine (Craig Andrews) 2025-11-21 15:53:25.612 logging.py DEBUG - package_pam_pwquality_installed: depend on pam being installed (Craig Andrews) 2025-11-21 15:53:25.612 logging.py DEBUG - accounts_passwords_pam_tally2: depend on pam being installed (Craig Andrews) 2025-11-21 15:53:25.612 logging.py DEBUG - accounts_passwords_pam_faildelay_delay: depend on pam (Craig Andrews) 2025-11-21 15:53:25.612 logging.py DEBUG - apparmor: apply only to platform machine (Craig Andrews) 2025-11-21 15:53:25.612 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_cyrus-imapd_removed (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_cyrus-imapd_removed (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - package_cyrus-imapd_removed: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule package_nginx_removed (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule package_nginx_removed (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - package_nginx_removed: Add ubuntu prodtypes and cis references (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - OCP4 STIG: Fix status of SRG-APP-000360-CTR-000815 (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - nist_rhcos4: Fix typo in rule name (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - Add /dev/shm to CIS Workstation Level 2 Kickstart on RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: bash: Improve remediation (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - Add package_dnsmasq_removed rule (cortesana) 2025-11-21 15:53:25.612 logging.py DEBUG - Update pam_pwquality requirements in CIS (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Update CIS RHEL control files regarging nginx (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Introduce rule to remove nginx package (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Introduce rule to remove cyrus-imapd package (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: oval: Improve comments (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: Improve ocil_clause (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: bash: Make it multi_platform_all (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: tests: Remove platform (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: oval: Simplify tests (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_files_permissions: Remove reference cis@ubuntu2004 (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule rsyslog_filecreatemode (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule rsyslog_filecreatemode (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: Add OVAL audit (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - rsyslog_filecreatemode: Add bash remediation (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - Add new rule rsyslog_filecreatemode (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - SRG-APP-000243-CTR-000600 is completely manual (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - OCP4 STIG: SRG-APP-000431-CTR-001065 is inherently met (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - OCP4 STIG: Two SRGs that relate to SC-24 are inherently met (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - Enable sshd_enable_warning_banner_net for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Fix conditional in bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Introduce Ansible remediation for journal-remote socket (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Enable systemd-journal-remote rule for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Corrections in the rule package_openldap-clients_removed (rchikov) 2025-11-21 15:53:25.612 logging.py DEBUG - Enable rule for RHEL and update CIS controlfiles (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Update remediations in alignment to OVAL (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Align test scenarios to the OVAL updates (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Increase robustness of OVAL check (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Small change in rule.yml (rchikov) 2025-11-21 15:53:25.612 logging.py DEBUG - Disable SLE platforms for password_quality-based rules (teacup-on-rockingchair) 2025-11-21 15:53:25.612 logging.py DEBUG - Small corrections in package_dhcp_client_removed (rchikov) 2025-11-21 15:53:25.612 logging.py DEBUG - Changes in rule.yml (rchikov) 2025-11-21 15:53:25.612 logging.py DEBUG - Fix package names for some SUSE packages (teacup-on-rockingchair) 2025-11-21 15:53:25.612 logging.py DEBUG - Add in ANSSI control cracklib_accounts_password_ rules (teacup-on-rockingchair) 2025-11-21 15:53:25.612 logging.py DEBUG - Drop extra pam_pwquality rules we have in CIS SLE controls (teacup-on-rockingchair) 2025-11-21 15:53:25.612 logging.py DEBUG - Fix automatus on Python 3.6 (Matthew Burket) 2025-11-21 15:53:25.612 logging.py DEBUG - OCP4 STIG: SRG-APP-000092-CTR-000165,SRG-APP-000111-CTR-000220 are covered by two existing rules (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - Complete the 6.2.14 CIS requirement for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Enable no_forward_files rule for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Update requirements for .netrc in RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.612 logging.py DEBUG - Adjust fixtext in accounts_password_pam_pwhistory_remember_password_auth (Matthew Burket) 2025-11-21 15:53:25.612 logging.py DEBUG - OCP4 STIG: SRGs related to NIST CM-11 are inherently met (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - OCP4 STIG: SRG-APP-000039-CTR-000110 is resolved by project_config_and_template_network_policy (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - OCP4: Add a new rule project_config_and_template_network_policy (Jakub Hrozek) 2025-11-21 15:53:25.612 logging.py DEBUG - socket_systemd-journal-remote_disabled: bash: Remove package install (Eduardo Barretto) 2025-11-21 15:53:25.612 logging.py DEBUG - socket_systemd-journal-remote_disabled: Fix prodtype position (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Update references for no_empty_passwords rule (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - Enable no_empty_passwords_etc_shadow rule for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - Small corrections (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - Resolve issues found in review of #10185 (Matthew Burket) 2025-11-21 15:53:25.613 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.613 logging.py DEBUG - Correction in rule package_openldap-servers_removed (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - socket_systemd-journal-remote_disabled: bash: Move away from bash macro (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - socket_systemd-journal-remote_disabled: Add prodtype and alter ocil and (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - macros: fixtext: Add fixtext_socket_disabled macro (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - socket_systemd-journal-remote_disabled: Add tests (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - macros: bash: reset-failed services only if they are in failed state (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - macros: fixtext: Fix indentation or build fails (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Rename rule to socket_systemd-journal-remote_disabled (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - service_systemd-journal-remote_disabled: Add OVAL (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - service_systemd-journal-remote_disabled: Add bash remediation (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - service_systemd-journal-remote_disabled: Remove template (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - service_systemd-journal-remote_disabled: Fix fixtext field (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - service_systemd-journal-remote_disabled: Improve Note (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule service_systemd-journal-remote_disabled (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Add rule service_systemd-journal-remote_disabled (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Update password hashing algorithm CIS requirement (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - New rule package_dhcp_client_removed (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - Update docs/manual/developer/01_introduction.md (Matthew Burket) 2025-11-21 15:53:25.613 logging.py DEBUG - Update CIS requirement for RHEL products (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - Improve test scenatio scripts (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - Update remediation to ignore users without password (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - Increase robustness of OVAL check (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - Enable accounts_set_post_pw_existing rule for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.613 logging.py DEBUG - Replacement of > with -gt in if statements (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - Changes in bash remediation for accounts_password_set_max_life_existing and accounts_password_set_min_life_existing (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP: Optimize HyperShift Support (Vincent Shen) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP4 fix kubelet_enable_protect_kernel_defaults (Vincent Shen) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP4: New rule: container_security_operator_exists covers SRG-APP-000516-CTR-001335, remove all the other references to this control (Jakub Hrozek) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP4 STIG: Remove references to SRG-APP-000516-CTR-001330, the rule is inherently met (Jakub Hrozek) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP4 STIG: SRG-APP-000516-CTR-000790: Add mitigation and status justification to a Does Not Meet control (Jakub Hrozek) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP4 STIG: Add status justification and artifact description to two rules covering IA-11 (Jakub Hrozek) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP4 STIG: Add status justification to two SRGs related to the IA-5 control family (Jakub Hrozek) 2025-11-21 15:53:25.613 logging.py DEBUG - Rule description was changed (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - OCP4 STIG: Add status justification to SRG-APP-000178-CTR-000470, covering IA-6 (Jakub Hrozek) 2025-11-21 15:53:25.613 logging.py DEBUG - set_ufw_loopback_Traffica: Add Ubuntu prodtype (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Assignment of SLE 12/15 CCE codes for rule security_patches_up_to_date (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_ufw_default_rule (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_ufw_default_rule (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - set_ufw_default_rule: Add sce check (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Add new rule set_ufw_default_rule (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_ufw_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_ufw_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - set_ufw_loopback_traffic: Add sce check (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - set_ufw_loopback_traffic: Add bash (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Add new rule set_ufw_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule ufw_rules_for_open_ports (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ufw_rules_for_open_ports: Add sce check (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Add new rule ufw_rules_for_open_ports (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rules iptables_rules_for_open_ports (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - ip6tables_rules_for_open_ports: Add sce check (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Add new rule ip6tables_rules_for_open_ports (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - iptables_rules_for_open_ports: Add sce check (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Add new rule iptables_rules_for_open_ports (Eduardo Barretto) 2025-11-21 15:53:25.613 logging.py DEBUG - Removal of $ from some parts in rule.yml (rchikov) 2025-11-21 15:53:25.613 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_password_hashing_algorithm_logindefs (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - set_password_hashing_algorithm_logindefs: bash: Add ubuntu platform (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - set_password_hashing_algorithm_logindefs: Adjust description to get (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - set_password_hashing_algorithm_logindefs: Add ubuntu2204 prodtype and (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - var_password_hashing_algorithm: Add yescrypt option (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP: Add OCP 4.13 support for applicable rules (Vincent Shen) 2025-11-21 15:53:25.614 logging.py DEBUG - package_iptables-persistent_removed: Fix typo in package name (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - wireless_disable_interfaces: Add ubuntu specific bash (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - ubuntu2204: product: Fix oval feed name and add NetworkManager to (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - New tests added (rchikov) 2025-11-21 15:53:25.614 logging.py DEBUG - Corrections in rule.yml (rchikov) 2025-11-21 15:53:25.614 logging.py DEBUG - Small corrections in bash and ansible code (rchikov) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: The majority of controls related to CM-5 are inherently met (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000131-CTR-000285 is configurable with reject_unsigned_images_by_default (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - Replace login_defs platform by package platform (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Increase the robustness of OVAL check (Marcus Burghardt) 2025-11-21 15:53:25.614 logging.py DEBUG - Fix in USBGuard rules' platform (cortesana) 2025-11-21 15:53:25.614 logging.py DEBUG - Disable FIPS-related rule group for 'osbuild' platform (Evgeny Kolesnikov) 2025-11-21 15:53:25.614 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule service_chronyd_enabled (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule service_chronyd_enabled (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - service_chronyd_or_ntpd_enabled: Remove Ubuntu cis references (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - service_chronyd_enabled: Add Ubuntu cis references (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule rsyslog_nolisten (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - rsyslog_nolisten: Add cis@ubuntu2204 reference (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule permissions_local_var_log (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - Include test scenario for no password users (Marcus Burghardt) 2025-11-21 15:53:25.614 logging.py DEBUG - Include rule for checking password last change in RHEL (Marcus Burghardt) 2025-11-21 15:53:25.614 logging.py DEBUG - permissions_local_var_log: Add cis@ubuntu2204 reference (Eduardo Barretto) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: Remove audit_profile_set from rules: in controls where it's only related and will be covered by RHCOS checks later (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000380-CTR-000900 is Inherently Met; add justification (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000375-CTR-000870 is Inherently Met; add justification (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000374-CTR-000865 is Inherently Met; add justification (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000181-CTR-000485 is Inherently Met; add justification (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000118-CTR-000240: Add justification to a Does Not Meet control (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000090-CTR-000155: Add justification to a Does Not Meet control (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000121-CTR-000255, SRG-APP-000122-CTR-000260 and RG-APP-000123-CTR-000265 are covered by manual rules (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000089-CTR-000150 and SRG-APP-000101-CTR-000205 are covered by setting the proper audit log (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000069-CTR-000125 is a manual rule (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4: oauth_login_template_set: Add an e2e test (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000068-CTR-000120: Convert the replies to per-rule policy files (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4: Add a new rule oauth_provider_selection_set (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - Corrections in rule (rchikov) 2025-11-21 15:53:25.614 logging.py DEBUG - add cap_system_chroot capability to podman container when running automatus in container mode (Vojtech Polasek) 2025-11-21 15:53:25.614 logging.py DEBUG - Fix broken CI (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - New tests added (rchikov) 2025-11-21 15:53:25.614 logging.py DEBUG - Update CIS RHEL requirements for log files permissions (Marcus Burghardt) 2025-11-21 15:53:25.614 logging.py DEBUG - Follow alphabetical order in prodtype clause (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - Forgot to update description (sampsone) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: Cover SRG-APP-000359-CTR-000810 and SRG-APP-000360-CTR-000815 (AU-5) (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - correction in oval - regexp and tests (rchikov) 2025-11-21 15:53:25.614 logging.py DEBUG - Include partition_for_dev_shm in CIS RHEL7 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: SRG-APP-000126-CTR-000275 is covered by FIPS and using TLS for log forwarding (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - Make sure all CIS SLE 1.10 rules are built (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - Remove nonexistent directories from CMake (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Move CPE OVALs (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Move remaining applicability checks to shared (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Build CPE OVAL separately (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Change language type for OVAL templates (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Introduce new template language type CPE-OVAL (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Prevent creating empty element (Jan Černý) 2025-11-21 15:53:25.614 logging.py DEBUG - Drop file added by mistake (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - Enable package_gdm_removed for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - Add gdm-related rules to CIS controls for sle12 and sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - OCP4 STIG: Clean up the usage of fips_mode_enabled_on_all_nodes (Jakub Hrozek) 2025-11-21 15:53:25.614 logging.py DEBUG - Fix CIS req ids to be explicitely declared as strings (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - Add CIS SLE reference ids in the rule (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - Add SLE platform to dconf_gnome_disable_user_list rule (teacup-on-rockingchair) 2025-11-21 15:53:25.614 logging.py DEBUG - Update CIS SLE12 reference requirement id (teacup-on-rockingchair) 2025-11-21 15:53:25.615 logging.py DEBUG - Set product variable for dconf gdm subdir for SLE products (teacup-on-rockingchair) 2025-11-21 15:53:25.615 logging.py DEBUG - OCP4 STIG: SRG-APP-000290-CTR-000670: Inherently met, add status justification (Jakub Hrozek) 2025-11-21 15:53:25.615 logging.py DEBUG - OCP4 STIG: SRG-APP-000109-CTR-000215 is Does Not Meet despite having a rule (Jakub Hrozek) 2025-11-21 15:53:25.615 logging.py DEBUG - A correction in description (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - Remove CIS RHEL references from service_avahi-daemon_disabled (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Remove api_server_audit_log_maxsize remediation (Lance Bragstad) 2025-11-21 15:53:25.615 logging.py DEBUG - Update CIS RHEL control files for avahi rules (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Enable avahi related rules to RHEL products (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - OCP4 STIG: Cover SRG-APP-000297-CTR-000705 with a new rule oauth_logout_url_set (Jakub Hrozek) 2025-11-21 15:53:25.615 logging.py DEBUG - A correction in regex in OVAL (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - a correction in OVAL part (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - postfix_prevent_unrestricted_relay: allow whitespaces and no comma for 'smtpd_client_restrictions' value (Renaud Métrich) 2025-11-21 15:53:25.615 logging.py DEBUG - Update OVAL lines to satisfy the Style Guide (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update remediation platform for audit_mac_modification (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update RHEL CIS controlfiles for mac_modification (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Limit the rule to SLE platforms only (teacup-on-rockingchair) 2025-11-21 15:53:25.615 logging.py DEBUG - Update linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_logging_configured/rule.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.615 logging.py DEBUG - Use values instead of variables in tests (teacup-on-rockingchair) 2025-11-21 15:53:25.615 logging.py DEBUG - SUSE: fix rule package_dhcp_removed (sampsone) 2025-11-21 15:53:25.615 logging.py DEBUG - RHCOS4: Temporarily disable selinux_confinement_of_daemons to work around kubelet bug (Jakub Hrozek) 2025-11-21 15:53:25.615 logging.py DEBUG - Use integer comparison for api_server_audit_log_maxsize (Lance Bragstad) 2025-11-21 15:53:25.615 logging.py DEBUG - Creates comments informing the dictionary structure (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - update the Ubuntu products (Thomas Sjögren) 2025-11-21 15:53:25.615 logging.py DEBUG - New SLE 12/15 rule audit_rules_mac_modification_usr_share (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - CIS numbers for SLE 12/15 rule audit_rules_login_events_tallylog (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - OCP4 fix version dection for OCP (Vincent Shen) 2025-11-21 15:53:25.615 logging.py DEBUG - New SLE 15 rule set_nftables_base_chain (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - A coorecting checkig for sudo package (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - Introduce commit messages style guidelines (Federico Ramirez) 2025-11-21 15:53:25.615 logging.py DEBUG - In the user guide upgrade to RHEL 9 from RHEL 6 (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix typo in dev guide around product removal (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Ensure that the old .adoc files are consistent with each other (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update no_forward_files to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_umask_interactive_users to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update file_permissions_home_dirs to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_user_dot_group_ownership to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_user_dot_user_ownership to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_user_interactive_home_directory_exists to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_user_interactive_home_directory_defined to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_users_home_files_permissions to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_users_home_files_groupownership to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update accounts_users_home_files_ownership to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update file_permissions_home_directories to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update file_groupownership_home_directories to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Update file_ownership_home_directories to use OVAL macro (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Include macro to create interactive users object (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix broken link to statistics page. (Gabriel Becker) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix in sudo_require_reauthentication (rchikov) 2025-11-21 15:53:25.615 logging.py DEBUG - Add deprecation notice to docs/manual/user_guide.adoc (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Convert the user guide to markdown and read the docs (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update rules for RHEL 9 SIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update test scenarios for accounts_password_last_change_is_in_past (Marcus Burghardt) 2025-11-21 15:53:25.615 logging.py DEBUG - Add implementation for rsyslog_logging_configured rule (teacup-on-rockingchair) 2025-11-21 15:53:25.615 logging.py DEBUG - Update bios_enable_execution_restrictions PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update harden_sshd_macs_openssh_conf_crypto_policy PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update rsyslog_nolisten PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Minor change to grub2_audit_backlog_limit_argument (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update no_shelllogin_for_systemaccounts PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Minor fix in grub2_admin_username PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Adjust MACs for RHEL 9 STIG in SSHD (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Add check text for accounts_password_pam_unix_rounds-* (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Ensure that < and > HTML encoding have a semicolon (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix accounts_passwords_pam_faillock_unlock_time PSC content (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update vuldiscussion in ssh_keys_passphrase_protected for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update checktext for accounts_umask_interactive_users in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Add checktext to kernel_module_sctp_disabled for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update harden_sshd_ciphers_openssh_conf_crypto_policy PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update harden_sshd_ciphers_openssh_conf_crypto_policy PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update harden_sshd_ciphers_opensshserver_conf_crypto_policy PSC for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update ensure_redhat_gpgkey_installed PSC for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Update PSC file_permissions_sshd_private_key for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - check -> checktext in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix RHEL 9 to full_name in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Add check text to package_audispd-plugins_installed (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Move audit_rules_login_events_faillock to use /var/log/faillock (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix fix -> fixtext package_nss-tools_installed (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Clean up sysctl_net_ipv4_icmp_echo_ignore_broadcasts (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix up kernel_module_sctp_disabled (Matthew Burket) 2025-11-21 15:53:25.615 logging.py DEBUG - Fix file_groupowner_grub2_cfg to be group owner (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add PSC content for package_audispd-plugins_installed (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add PSC content for kernel_module_sctp_disabled (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add two rules to SRG-OS-000021-GPOS-00005 for the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Always use aide_periodic_cron_checking for the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add package_nss-tools_installed to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Fix `>` to `>` for audit rules in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update configure_crypto_policy for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Minor fix on configure_openssl_tls_crypto_policy for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add package_audispd-plugins_installed to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add accounts_password_pam_unix_rounds_* rules to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add kernel_module_sctp_disabled to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Add RHEL 9 specific content for installed_OS_is_vendor_supported (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - More update to network_configure_name_resolution for PSC (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Remove extraneous text from grub2_password for PSC (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update dconf_gnome_disable_ctrlaltdel_reboot for poliy specific content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update file_groupowner_grub2_cfg to use group-owner in PSC (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update auditd_audispd_configure_sufficiently_large_partition policy specific content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Fix up accounts_user_interactive_home_directory_defined for policy specifc content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update SSH crypto rules in policy specific content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Clean up security_patches_up_to_date for policy specifc content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update accounts_password_set_min_life_existing to use passwd (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update rules about unauthorized accounts in policy specific content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Fix small errors in account_emergency_expire_date policy specifc content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Fix capitalization in accounts_passwords_pam_faillock_unlock_time for PSC (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update crypto policy for policy specific content (Matthew Burket) 2025-11-21 15:53:25.616 logging.py DEBUG - Update kernel module disabling product specific content for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Escape < and > in product specific content (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Update SSH key permissions for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Remove variables from product specific content (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - RHEL 9 STIG Import Whitespace Changes (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Style rules to use Title Case in Ansible tasks names (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - Update docs/manual/developer/04_style_guide.md (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - Include consideration about explicit parameters (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - Make it easier to indetify ansible-lint is a link (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - Style rule for Ansible Native YAML Syntax (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - Style rules for Ansible booleans values (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - Style rules for Ansible tasks names (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - Style rules for Ansible modules usage (Marcus Burghardt) 2025-11-21 15:53:25.635 logging.py DEBUG - products/alinux3: fix some missing rules in the cis profile. (YiLin.Li) 2025-11-21 15:53:25.635 logging.py DEBUG - Use bash variables properly in tests (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - products/alinux2: fix some missing rules in the cis profile. (YiLin.Li) 2025-11-21 15:53:25.635 logging.py DEBUG - Fix platform specification in the remediation scripts for bash and ansible (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Code style improvements (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - add newlines to files without them (Shane Siebken) 2025-11-21 15:53:25.635 logging.py DEBUG - Update utils/srg_diff.py based on reviewer feedback (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Correction (rchikov) 2025-11-21 15:53:25.635 logging.py DEBUG - Fixes in sysctl template (rchikov) 2025-11-21 15:53:25.635 logging.py DEBUG - align stability tests (Vojtech Polasek) 2025-11-21 15:53:25.635 logging.py DEBUG - remove rule logind_session_timeout from profiles (Vojtech Polasek) 2025-11-21 15:53:25.635 logging.py DEBUG - Add rule to the CIS profile (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Allocate CCE for the nftables_rules_permanent rule (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Update linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml (Jan Černý) 2025-11-21 15:53:25.635 logging.py DEBUG - Add SLE15 based implementation of nftables_rules_permanent rule (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Always clean lines (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Ensure that < and > in utils/srg_diff.py are handled correctly (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Shorten rule title (Jan Černý) 2025-11-21 15:53:25.635 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/all_password_change_time_in_past.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/user_password_change_time_in_future.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Add 1 more CIS SLE reference to remove nftables rule (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - OCP4 STIG: Mark SRG-APP-000560-CTR-001340 with three existing controls (Jakub Hrozek) 2025-11-21 15:53:25.635 logging.py DEBUG - update ubuntu 2004 cis level 1 server (Shane Siebken) 2025-11-21 15:53:25.635 logging.py DEBUG - Move authconfig_config_files_symlinks rule (Federico Ramirez) 2025-11-21 15:53:25.635 logging.py DEBUG - OCP4 STIG: SRG-APP-000342-CTR-000775 is covered by two manual rules (Jakub Hrozek) 2025-11-21 15:53:25.635 logging.py DEBUG - Update installed_OS_is_sle15.xml (rumch-se) 2025-11-21 15:53:25.635 logging.py DEBUG - Fixes of errors (rchikov) 2025-11-21 15:53:25.635 logging.py DEBUG - OCP4 STIG: SRG-APP-000340-CTR-000770 is a manual rule (Jakub Hrozek) 2025-11-21 15:53:25.635 logging.py DEBUG - Small fixes (rchikov) 2025-11-21 15:53:25.635 logging.py DEBUG - Update OCP4 for HyperShift for better user experience (Vincent Shen) 2025-11-21 15:53:25.635 logging.py DEBUG - OCP4 Modify etcd encryption check rule for hypershift (Vincent Shen) 2025-11-21 15:53:25.635 logging.py DEBUG - Rename remediations to ol instead of shared (Edgar Aguilar) 2025-11-21 15:53:25.635 logging.py DEBUG - Add extra line to shadow file to make tests pass (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Revert --stdin passwd option not available on suse (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Make running tests in special container env pass (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Add variable declaration that contains the shadow file output (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Add more descriptive fixtext and warnign for automatic remediation absence (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Fix comment to be more accurate since we are comparing days not accurate timestamps (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/user_password_change_time_in_future.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/accounts_password_last_change_is_in_past/tests/user_password_change_time_in_future.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Style fixes (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Fix copy-paste error referencing to another rule state (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Remove from available list the CCE ids for accounts_password_last_change_is_in_past rule (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Rework OVAL rule to check time difference between now and last change date of shadow entry (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Add basic tests for accounts_password_last_change_is_in_past (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - OVAL changes for accounts_password_last_change_is_in_past rule (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Simplify ocil clause in rule (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Add accounts_password_last_change_is_in_past rule to CIS profiles (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Initial implementation for rule checking if last password change is in the past (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Add back osrelease parameter check (teacup-on-rockingchair) 2025-11-21 15:53:25.635 logging.py DEBUG - Sort references in ssh_keys_passphrase_protected (Matthew Burket) 2025-11-21 15:53:25.635 logging.py DEBUG - Move SRG-OS-000067-GPOS-00035 to use ssh_keys_passphrase_protected (Matthew Burket) 2025-11-21 15:53:25.636 logging.py DEBUG - Implementation of proposed corrections (rchikov) 2025-11-21 15:53:25.636 logging.py DEBUG - Use distributed configuration in tests (Jan Černý) 2025-11-21 15:53:25.636 logging.py DEBUG - Update profile stability tests for STIG (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Minor update in baseline for STIG stability test (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Added support for new SUSE product SLE HPC (rchikov) 2025-11-21 15:53:25.636 logging.py DEBUG - Add a simple unit test for ssg/build_ovals.py (Jan Černý) 2025-11-21 15:53:25.636 logging.py DEBUG - Update warning about pwhistory feature in authselect (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Update variable value in SRG-OS-000077-GPOS-00045 (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Update variable value for RHEL8 STIG (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Update variable value for CIS RHEL8 and RHEL9 (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Introduce variable values with two values for RHEL (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Add condition if kernel package arch is 64 then instead matching kernel release name (teacup-on-rockingchair) 2025-11-21 15:53:25.636 logging.py DEBUG - Add srg to ssh_keys_passphrase_protected (Matthew Burket) 2025-11-21 15:53:25.636 logging.py DEBUG - Fixes related to SLE 12/15 for the rules set_min/max_life_existing (rchikov) 2025-11-21 15:53:25.636 logging.py DEBUG - Minor change (rchikov) 2025-11-21 15:53:25.636 logging.py DEBUG - Minor updates (rchikov) 2025-11-21 15:53:25.636 logging.py DEBUG - Added a new rule accounts_password_set_warn_age_existing (rchikov) 2025-11-21 15:53:25.636 logging.py DEBUG - Added rule partition_for_dev_shm (rchikov) 2025-11-21 15:53:25.636 logging.py DEBUG - Link sshd_use_strong_kex rule to PCI_DSSv4 2.2.7 requirement (teacup-on-rockingchair) 2025-11-21 15:53:25.636 logging.py DEBUG - Enable SCE integrity checks for RHEL8 (Simon THOBY) 2025-11-21 15:53:25.636 logging.py DEBUG - Simplify definition of xml object for ssh service (Watson Sato) 2025-11-21 15:53:25.636 logging.py DEBUG - fix capitalization of "ol" and "os" (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - change applicability of rule package_rear_installed (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add new platform and OVAL check checking if OL >= 9.0 (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add new platform and OVAL check checking if RHEL <= 8.4 (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add new platform and OVAL check checking if RHEL >= 9.0 (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add OVAL inventory check checking if installed system is OL (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - Change custom zones check in reaction to OpenSCAP change (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Improved formulations (Matěj Týč) 2025-11-21 15:53:25.636 logging.py DEBUG - Add authconfig_config_files_symlinks to RHEL7 stig (Federico Ramirez) 2025-11-21 15:53:25.636 logging.py DEBUG - Add missing remediation warning to authconfig rule (Federico Ramirez) 2025-11-21 15:53:25.636 logging.py DEBUG - Introduce rule authconfig_config_files_symlinks (Federico Ramirez) 2025-11-21 15:53:25.636 logging.py DEBUG - Apply suggestions from code review (Edgar Aguilar) 2025-11-21 15:53:25.636 logging.py DEBUG - Update sebool_secure_mode_insmod OL remediations (Edgar Aguilar) 2025-11-21 15:53:25.636 logging.py DEBUG - add locked user to /etc/shadow (Thomas Sjögren) 2025-11-21 15:53:25.636 logging.py DEBUG - Add a template for reporting misalignment (Matej Tyc) 2025-11-21 15:53:25.636 logging.py DEBUG - Move to Code Climate for PEP 8 (Matthew Burket) 2025-11-21 15:53:25.636 logging.py DEBUG - rename exclusion (Thomas Sjögren) 2025-11-21 15:53:25.636 logging.py DEBUG - add exclude filter (Thomas Sjögren) 2025-11-21 15:53:25.636 logging.py DEBUG - update levels of some rules in RHEL8 CIS (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - Improve rule description in rsyslog_files_permissions (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Include specific test scenario for 0640 permission (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Fix typo in test scenario script name (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Remove unnecessary conditions from runtime in Bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - support locked account with hash present (Thomas Sjögren) 2025-11-21 15:53:25.636 logging.py DEBUG - remove the stig policy file (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - remove respective references from the rule (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - remove the rule from RHEL8 STIG profile (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - remove the rule from STIG RHEL9 profile (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/ansible.template (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Disable rpcbind instead of removing the package (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - remove incorrectly assigned srg from package_aide_installed (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add missing srg to aide_build_database rule (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - Remove l1_workstation from 2.2.4 requirement in RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - apply the platform only in context of RHEL products (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/logind_session_timeout/rule.yml (vojtapolasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add rule to ANSSI profiles (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add rule to RHEL8 RHT-CCP profile (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - update RHEL8 PCI-DSS profile (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add rule to RHEL8 OSPP profile (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add rule to RHEL8 CJIS profile (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - update references of rule logind_session_timeout (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - make rule sshd_idle_timeout applicable on RHEL <= 8.5 (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - apply platforms to logind_session_timeout rule (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add platform checking that RHEL == 9.0 (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add platform which is applicable if RHEL <= 8.5 (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add platform checking that RHEL >= 8.7 (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - add definition checking that installed os is RHEL (Vojtech Polasek) 2025-11-21 15:53:25.636 logging.py DEBUG - Bump version to 0.1.67 (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Remove check of /var/log/dmesg from OVAL (Matej Tyc) 2025-11-21 15:53:25.636 logging.py DEBUG - Remove command path discovery with which (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP: Automated apiserver tls checks (Vincent Shen) 2025-11-21 15:53:25.636 logging.py DEBUG - Add comment to sshd bash macro (Edgar Aguilar) 2025-11-21 15:53:25.636 logging.py DEBUG - Update linux_os/guide/system/network/network-nftables/var_nftables_table.var (rumch-se) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: routes_protected_by_tls pertains to SRG-APP-000441-CTR-001090 and SRG-APP-000442-CTR-001095, not SRG-APP-000441-CTR-001090 (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: Remove configure_network_policies and configure_network_policies_namespaces from controls that are not resolved by these rules (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: SRG-APP-000645-CTR-001410: Fix rules, add artifact_description and status_justification (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: SRG-APP-000142-CTR-000325: Remove spurious rule, add mitigation and status_justification (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: SRG-APP-000141-CTR-000320: Fix rules, add check and fix, fix status (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: SRG-APP-000141-CTR-000315: Add artifact description and justification, remove spurious rule (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: SRG-APP-000038-CTR-000105: Move metadata to the policy file, select the correct rules (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - Update Rawhide before use (Matthew Burket) 2025-11-21 15:53:25.636 logging.py DEBUG - fips_mode_enabled_on_all_nodes: Remove SRG-APP-000014-CTR-000035 from SRG controls since the rule is only related to SRG-APP-000014-CTR-000035 (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - SRG-APP-000014-CTR-000035: Is now automated (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - SRG-APP-000014-CTR-000035: Move the fix and check into policy files (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: Add artifact description to SRG-APP-000033 (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: Add status justification and related_rules to not_applicable rules solved by IDP (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: SRG-APP-00050{3,5,6}: Not applicable rules, solved by IDP (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: IDP related rules only resolve SRG-APP-000023-CTR-000055, the other controls are related (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - OCP4 STIG: SRG-APP-000023-CTR-000055: Move metadata to control files (Jakub Hrozek) 2025-11-21 15:53:25.636 logging.py DEBUG - Extend the regex to match log files (Marcus Burghardt) 2025-11-21 15:53:25.636 logging.py DEBUG - Update rsyslog_files_permissions rule to use template (Marcus Burghardt) 2025-11-21 15:53:25.637 logging.py DEBUG - Test scenarios cleanup for rsyslog_files_permissions (Marcus Burghardt) 2025-11-21 15:53:25.637 logging.py DEBUG - Extend rsyslog template to assess and remediate file permissions (Marcus Burghardt) 2025-11-21 15:53:25.637 logging.py DEBUG - Extend test scenario scripts to test file permissions (Marcus Burghardt) 2025-11-21 15:53:25.637 logging.py DEBUG - Fix Ansible remediation to read multiline include (Marcus Burghardt) 2025-11-21 15:53:25.637 logging.py DEBUG - Renamed test scenario scripts in alignment to their contents (Marcus Burghardt) 2025-11-21 15:53:25.637 logging.py DEBUG - Minor improvements in OVAL comments and readability (Marcus Burghardt) 2025-11-21 15:53:25.637 logging.py DEBUG - OCP4: Change default values for kubeletconfig garbage collection rules (Vincent Shen) 2025-11-21 15:53:25.637 logging.py DEBUG - Add sub folders of utils to code climate (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Remove count_oval_objects as it broken (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - OCP4: configure_network_policies: fix typo (Jakub Hrozek) 2025-11-21 15:53:25.637 logging.py DEBUG - Two SLE 12/15 rules related to avahi package (rchikov) 2025-11-21 15:53:25.637 logging.py DEBUG - Some corrections (rchikov) 2025-11-21 15:53:25.637 logging.py DEBUG - Some text corrections (rchikov) 2025-11-21 15:53:25.637 logging.py DEBUG - Move 'not osbuild' platform for enable_pam_namespace into the existing platform field (Evgeny Kolesnikov) 2025-11-21 15:53:25.637 logging.py DEBUG - OCP4 STIG: Related rule should not reference SRG-APP-000014-CTR-000040 (Jakub Hrozek) 2025-11-21 15:53:25.637 logging.py DEBUG - OCP4 STIG: Move metadata of SRG-APP-000014-CTR-000040 to rule policy files (Jakub Hrozek) 2025-11-21 15:53:25.637 logging.py DEBUG - OCP4 STIG: SRG-APP-000014-CTR-000040 is now automated (Jakub Hrozek) 2025-11-21 15:53:25.637 logging.py DEBUG - New SLE 15 rule set_nftables_table (rchikov) 2025-11-21 15:53:25.637 logging.py DEBUG - Create the test user/group (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Fix regex in OVAL, Ansible and Bash remediations (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update tests in configure_tmux_lock_keybinding (Edgar Aguilar) 2025-11-21 15:53:25.637 logging.py DEBUG - Update configure_tmux_lock_keybinding (Edgar Aguilar) 2025-11-21 15:53:25.637 logging.py DEBUG - Update bashrc tmux rule in OL8 (Edgar Aguilar) 2025-11-21 15:53:25.637 logging.py DEBUG - Add missing-remediation warning (Federico Ramirez) 2025-11-21 15:53:25.637 logging.py DEBUG - Add tests to sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2025-11-21 15:53:25.637 logging.py DEBUG - Add docs for utils/controlrefcheck.py (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Adjust utils/controlrefcheck.py based on reviewer comments (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Remove duplicate rule_object check in utils/controlrefcheck.py (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Clean up utils/controlrefcheck.py (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - In controlrefcheck don't error on nonexistent rules (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Fix RHEL 8 issues for controlrefchecker (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Fix issues for controlrefchecker for RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Fix the issues for the RHEL 9 controlrefchecker (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Add controlrefchecker to CTest (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - Add utils/controlrefcheck.py (Matthew Burket) 2025-11-21 15:53:25.637 logging.py DEBUG - packages_iptables-persistent_removed: Fix typo (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - Add tests to cover cases where RainerScript is used to define target log file (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Introduce rule sshd_use_approved_kex_ordered_stig (Edgar Aguilar) 2025-11-21 15:53:25.637 logging.py DEBUG - Update sshd_disable_compression applicability (Federico Ramirez) 2025-11-21 15:53:25.637 logging.py DEBUG - Introduce CPE for OL7 older than 7.4 (Federico Ramirez) 2025-11-21 15:53:25.637 logging.py DEBUG - Update audit failure mode for OL7 (Federico Ramirez) 2025-11-21 15:53:25.637 logging.py DEBUG - Add sysctl_kernel_dmesg_restric rule to OL7 stig (Federico Ramirez) 2025-11-21 15:53:25.637 logging.py DEBUG - OL7 STIG v2r10 update (Federico Ramirez) 2025-11-21 15:53:25.637 logging.py DEBUG - Bump version of OL8 STIG to V1R5 (Edgar Aguilar) 2025-11-21 15:53:25.637 logging.py DEBUG - assign ntp_configure_restrictions to SLE12 (Christian Hagenest) 2025-11-21 15:53:25.637 logging.py DEBUG - service_iptables_enabled: Remove Ubuntu CIS references (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_iptables-persistent_removed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_iptables-persistent_removed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - Add rule packages_iptables-persistent_removed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2004: cis_level1_server: Add set_ipv6_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2204: cis_level1_server: Add rule set_ipv6_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - set_ipv6_loopback_traffic: remediation: Add Ubuntu platform (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - set_ipv6_loopback_traffic: Add Ubuntu CIS references (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule set_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2204: cis_level1_server: Add set_loopback_traffic (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - set_loopback_traffic: remediation: Add ubuntu platform (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - set_loopback_traffic: Add Ubuntu CIS references and adjust description (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2204: cis_level1_server: Add set_ip6tables_default_rule (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2204: cis_level1_server: Add set_iptables_default_rule (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_iptables-persistent_installed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_iptables-persistent_installed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - Add rule package_iptables-persistent_installed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_ufw_removed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_ufw_removed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - Add rule package_ufw_removed (Eduardo Barretto) 2025-11-21 15:53:25.637 logging.py DEBUG - Add a CTest test for shorthand_to_oval.py (Jan Černý) 2025-11-21 15:53:25.637 logging.py DEBUG - Drop a test temporary file committed by mistake (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - nist_ocp4: Fix rule references (Jakub Hrozek) 2025-11-21 15:53:25.637 logging.py DEBUG - nist_ocp4: Fix nonexistent rule name (Jakub Hrozek) 2025-11-21 15:53:25.637 logging.py DEBUG - Inhibit ShellCheck warning for osbuild platform (Evgeny Kolesnikov) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_root_IncludeConfig_is_other.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/oval.template (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/is_root.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/is_other.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_multiline_is_root.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_root_IncludeConfig_is_root.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_root.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_other.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/IncludeConfig_is_root.pass.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/IncludeConfig_is_other.fail.sh (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Minor change (rchikov) 2025-11-21 15:53:25.637 logging.py DEBUG - Small syntax corrections (rchikov) 2025-11-21 15:53:25.637 logging.py DEBUG - Fix shell remediation argument passing (teacup-on-rockingchair) 2025-11-21 15:53:25.637 logging.py DEBUG - Add 'not osbuild' platform to polyinstantiated and selinux-boolean rules (Evgeny Kolesnikov) 2025-11-21 15:53:25.638 logging.py DEBUG - OCP4 STIG: Add status justification to SRG-APP-000033 (Jakub Hrozek) 2025-11-21 15:53:25.638 logging.py DEBUG - Update contributors list for v0.1.66 release (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - New SLE 15 rule set_nftables_new_connections (rchikov) 2025-11-21 15:53:25.638 logging.py DEBUG - accounts_passwords_pam_tally2: ansible: Move to (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - RHEL-08-010100: create a new rule ssh_keys_passphrase_protected (THOBY Simon) 2025-11-21 15:53:25.638 logging.py DEBUG - New SLE 15 rule service_nftables_enabled (rchikov) 2025-11-21 15:53:25.638 logging.py DEBUG - update rule title (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_bashrc_tmux/rule.yml (vojtapolasek) 2025-11-21 15:53:25.638 logging.py DEBUG - move two rules to higher level in cis_rhel8 (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - New SLE 15 rule ensure_iptables_are_flushed (rchikov) 2025-11-21 15:53:25.638 logging.py DEBUG - Remove set_iptables_default_rule CCEs from available lists (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add cce id for SLES platform to set_iptables_default_rule (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2204: cis_level1_server: Add (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - Add rule package_systemd-journal-remote_installed (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2204: cis_level2_server: Add rule audit_sudo_log_events (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - audit_sudo_log_events: Add cis@ubuntu2204 reference (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2204: cis_level2: Add rule audit_rules_suid_privilege_function (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - audit_rules_suid_privilege_function: Update cis@ubuntu2204 reference (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2004: cis_level2_server: Add missing variables (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2204: cis_level2_server: Add missing variables (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - Remove ubunt2204 prodtype from rules not being used (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - Refactor and promote function to a class (Jan Černý) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2204: cis_level1_server: Add service_nftables_disabled (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2004: cis_level1_server: Add service_nftables_disabled (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - service_nftables_disabled: Add ubuntu platform and CIS references (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - Enable bash&ansible remediations for all platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2204: cis_level1_server: Add packages_nftables_removed (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - ubuntu2004: cis_level1_server: Add packages_nftables_removed (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - package_nftables_removed: Add ubuntu platforms and CIS references (Eduardo Barretto) 2025-11-21 15:53:25.638 logging.py DEBUG - Change sshd_disable_compression applicability (Jan Černý) 2025-11-21 15:53:25.638 logging.py DEBUG - swap rules in RHEL 8 STIG profile (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - add tests (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - add Ansible remediation (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - add Bash remediation (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - add OVAL check (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - create new rule (Vojtech Polasek) 2025-11-21 15:53:25.638 logging.py DEBUG - Make benchmark inclusion optional (Jan Černý) 2025-11-21 15:53:25.638 logging.py DEBUG - Split code into 2 functions (Jan Černý) 2025-11-21 15:53:25.638 logging.py DEBUG - Include RHEL7 and RHEL9 in sysctl_net_ipv4_conf_all_forwarding (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - OCP4 PCI-DSS: Fix non-existent rule name (Jakub Hrozek) 2025-11-21 15:53:25.638 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algorithm/set_password_hashing_algorithm_systemauth/rule.yml (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - Remove rule for SSHD Compresion from RHEL8 STIG (Watson Sato) 2025-11-21 15:53:25.638 logging.py DEBUG - Update linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - Drop parameter variable use template values instead (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Wrap lines in oval template and fixed a bug with matching aribitary file paths not only log targets (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add implementation for rsyslog_logging_configured rule (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Update shared/templates/rsyslog_logfiles_attributes_modify/oval.template (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Set the attribute values as part of the template (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Set the attribute values as part of the template (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Simplify OVAL template naming ids and references (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Move tests and oval from rsyslog_files_groupownership and rsyslog_files_ownership to rsyslog_logfiles_attributes_modify teamplate (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Drop extra empty line (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Fix ansible template tasks naming (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Use complete name of ansible modules (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Fix unbalanced jinja brackets and identation (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Adjust bash template to produce scripts without shellcheck warnings (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add missing newline at the end of the file (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Replace shell find command with ansible find module (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add rsyskig owner and group variables to sle12 profiles (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Rework rsyslog_logfiles_attributes_modify template to use more generic approach, not depending on low-level commands (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Use set_fact to aggregate outputs of two tasks (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add double quotes to prevent globbing and word splitting (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add Check for RainerScript action log format in rsyslog configuration - check for RainerScript format, which might be also multiline so grep regex is a bit curly - extract possibly multiline action omfile expressions - extract and match only "logfile" expression (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add remediations for rsyslog_files_groupownership and rsyslog_files_ownership (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Add template to set parameters of log files from rsyslog (teacup-on-rockingchair) 2025-11-21 15:53:25.638 logging.py DEBUG - Remove sshd_disable_compression from OL8 & RHEL8 (Edgar Aguilar) 2025-11-21 15:53:25.638 logging.py DEBUG - Remove rules related to UEFI path (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - Remove aide_use_fips_hashes from controlfile (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - Included missing references (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - Add aide_build_database to STIG in OL and RHEL (Edgar Aguilar) 2025-11-21 15:53:25.638 logging.py DEBUG - Update policy for ssh host key permissions (Edgar Aguilar) 2025-11-21 15:53:25.638 logging.py DEBUG - Update reference for profile stability tests (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - Include rule for new controlfile in CODEOWNERS (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - New rule for SLE 15 set_firewalld_appropriate_zone (rchikov) 2025-11-21 15:53:25.638 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.638 logging.py DEBUG - New rule for SLE 15 unnecessary_firewalld_services_ports_disabled (rchikov) 2025-11-21 15:53:25.638 logging.py DEBUG - Update RHEL9 CIS profiles (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - Reviewed all pending requirements (Marcus Burghardt) 2025-11-21 15:53:25.638 logging.py DEBUG - A new SLE 12/15 rule ensure_package_repositories_are_configured/ (rchikov) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in System Maintainance related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in AAA related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - New rule SLE 12/15 ensure_GPG_keys_are_configured (rchikov) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in Logging related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in Network Config related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in client services related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Refactor function expand_shorthand (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in Special Services related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in NTP related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include 4 rules in the stig profile for RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Update stigid for RHEL8 in accounts_passwords_pam_faillock_deny (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include STIG for RHEL in accounts_passwords_pam_faillock_silent (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in GDM related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in banners related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in SELinux related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in process hardening related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in fs integrity related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in software updates related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in bootloader related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include CIS RHEL9 reference in partition related rules (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Add osbuild platform (Evgeny Kolesnikov) 2025-11-21 15:53:25.639 logging.py DEBUG - Using the Ansible shell actions is needed in package_prelink_remove (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Document utils/shorthand_to_oval.py (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - Introduce utils/shorthand_to_oval.py (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - Move method and promote it (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - New CIS RHEL9 control file (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Update rule selections in RHEL 7 STIG (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - cce-ids for sysctl_net...log_martians (Christian Hagenest) 2025-11-21 15:53:25.639 logging.py DEBUG - Correct variable description (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - Use only single textfilecontent54_state (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - Update RHEL7 STIG to V3R10 (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R10 (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R10 (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Update RHEL8 STIG to V1R9 (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R8 (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R9 (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Select rule in RHEL8 STIG profile (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Add rule for tmux lock-session keybinding (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Change hardocded string with variable of strong kex algorithms (teacup-on-rockingchair) 2025-11-21 15:53:25.639 logging.py DEBUG - Add account_emergency_expire_date to OL7 stig (Federico Ramirez) 2025-11-21 15:53:25.639 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_prelink_remove to profile (Eduardo Barretto) 2025-11-21 15:53:25.639 logging.py DEBUG - ubuntu2204: cis_level1_server Add package_prelink_removed to profile (Eduardo Barretto) 2025-11-21 15:53:25.639 logging.py DEBUG - package_prelink_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2025-11-21 15:53:25.639 logging.py DEBUG - Remove ubuntu2204 and ubuntu2004 from disable_prelink (Eduardo Barretto) 2025-11-21 15:53:25.639 logging.py DEBUG - fix bash remediation (Vojtech Polasek) 2025-11-21 15:53:25.639 logging.py DEBUG - add rule to profile (Vojtech Polasek) 2025-11-21 15:53:25.639 logging.py DEBUG - add Ansible remediation (Vojtech Polasek) 2025-11-21 15:53:25.639 logging.py DEBUG - add OVAL check (Vojtech Polasek) 2025-11-21 15:53:25.639 logging.py DEBUG - add Bash remediation (Vojtech Polasek) 2025-11-21 15:53:25.639 logging.py DEBUG - add tests (Vojtech Polasek) 2025-11-21 15:53:25.639 logging.py DEBUG - add new rule definition (Vojtech Polasek) 2025-11-21 15:53:25.639 logging.py DEBUG - Parametrize rule "audit_rules_system_shutdown" (Jan Černý) 2025-11-21 15:53:25.639 logging.py DEBUG - Added 2 rules for SLE 15 related to nftables (rchikov) 2025-11-21 15:53:25.639 logging.py DEBUG - Use variable instead of hardcoded list of algorithms (teacup-on-rockingchair) 2025-11-21 15:53:25.639 logging.py DEBUG - Redo DisaStatus.from_string method (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Move SRG Export data to a new file (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Add CTests for all formats of the SRG Export script (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Rename export Python files for SRG Export (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Move convert_srg_export_* files to its own module (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - create_srg_export.py: Map NOT_APPLICABLE (Jakub Hrozek) 2025-11-21 15:53:25.639 logging.py DEBUG - Only restore prelinked binaries if prelinked is installed (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - build_product script: enable SCE checks for ubuntu20.04 (Simon THOBY) 2025-11-21 15:53:25.639 logging.py DEBUG - build scripts: introduce a test for SCE checks (Simon THOBY) 2025-11-21 15:53:25.639 logging.py DEBUG - Add package_prelink_removed to RHEL 7 CIS profile (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Create new rule package_prelink_removed (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Remove utils/find_shadowed_files.py (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - Remove xccdf2csv-stig.py (Matthew Burket) 2025-11-21 15:53:25.639 logging.py DEBUG - accounts_passwords_pam_tally2: bash: Move to (Eduardo Barretto) 2025-11-21 15:53:25.639 logging.py DEBUG - Add link to using Chrony to configure NTP (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Fix broken link for Fedora NTP docs (Watson Sato) 2025-11-21 15:53:25.639 logging.py DEBUG - Include rule for CIS RHEL8 2.2.19 requirement (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Reviewed requirements in pending status (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Update requirements about user passwords and sessions (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Update status and rule rule for CIS RHEL8 5.3.7 requirement (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include rule for CIS RHEL8 5.3.7 requirement (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Update SSH related requirements (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Remove unnecessary comments from cis_rhel8 controlfile (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Small updates about rsyslog requirements (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.18 requirement (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.17 requirement (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.16 requirement (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.15 requirement (Marcus Burghardt) 2025-11-21 15:53:25.639 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.4 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.3 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include rule for CIS RHEL8 4.1.3.2 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include rule for CIS RHEL8 3.4.2.1 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include rule for CIS RHEL8 2.2.20 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include rule for CIS RHEL8 2.2.6 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include rule for CIS RHEL8 2.2.5 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include rule for CIS RHEL7/RHEL8 2.2.4 requirement (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include related rule for CIS RHEL7 1.9 (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Update CIS requirement to remove gdm package (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_rpcbind_removed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_rpcbind_removed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - package_rpcbind_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - package_rpcbind_removed: Fix some typo leftovers (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - try to fix too complex function get_stripped_conditionals (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - remove definition_location line from test platform (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - reword exception message (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - Don't test ANSSI-BP-028 on CentOS 7 (Milan Lysonek) 2025-11-21 15:53:25.640 logging.py DEBUG - Spec file python2 build requirements for CentOS 7 (Milan Lysonek) 2025-11-21 15:53:25.640 logging.py DEBUG - Define distro where EPEL7 will be tested (Milan Lysonek) 2025-11-21 15:53:25.640 logging.py DEBUG - Extend spec file for CentOS 7 (Milan Lysonek) 2025-11-21 15:53:25.640 logging.py DEBUG - Enable TF on CentOS 7 (Milan Lysonek) 2025-11-21 15:53:25.640 logging.py DEBUG - Do COPR build for CentOS 7 and for EPEL 7 (Milan Lysonek) 2025-11-21 15:53:25.640 logging.py DEBUG - Typo corrections in the name of the rule (rchikov) 2025-11-21 15:53:25.640 logging.py DEBUG - Update package name for RHEL in package_rsync_removed (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Use variable containing strong KEX algorithms for remediations (teacup-on-rockingchair) 2025-11-21 15:53:25.640 logging.py DEBUG - Add ansible remediation for sshd_use_strong_kex rule (teacup-on-rockingchair) 2025-11-21 15:53:25.640 logging.py DEBUG - Add sshd_use_strong_kex to CIS SLE profiles (teacup-on-rockingchair) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_nftables_installed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_nftables_installed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - package_nftables_installed: Add Ubuntu platform and CIS references (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_rsync_removed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_rsync_removed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - package_rsync_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2004: cis_level1_server: Add package_cups_removed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - ubuntu2204: cis_level1_server: Add package_cups_removed (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - package_cups_removed: Add Ubuntu platforms and CIS references (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - Fix the service_telnet_disabled rule (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Added a new SLE 12/15's rule package_rcpbind_removed (rchikov) 2025-11-21 15:53:25.640 logging.py DEBUG - Fix accounts_password template for OL (Matthew Burket) 2025-11-21 15:53:25.640 logging.py DEBUG - decrease complexity of get_stripped_conditionals function (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - Include RHEL products in audit_sudo_log_events (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include RHEL products in package_nftables_installed (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Include RHEL products in package_rsync_removed (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - fix a typo (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - update outdated mention of shadow-utils platform (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - update documentation explaining the change (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - add test and new testing platform (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - Include RHEL products in package_cups_removed (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - wip test (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - prevent content build if usage of certain platform defiinitions would cause inconsistency between OVAL and remediations (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - Include ANSSI reference on pam_pwhistory rules (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - Update rules to limit password reuse (Marcus Burghardt) 2025-11-21 15:53:25.640 logging.py DEBUG - extend tests for version_to_evr (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - remove no longer valid tests (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - remove no longer used functions which were used for parsing of version to evr (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - change method for parsing of version to evr (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - Added a new rule package_tcp_wrappers_removed (rchikov) 2025-11-21 15:53:25.640 logging.py DEBUG - Fix OCP rule routes_protected_by_tls (Vincent Shen) 2025-11-21 15:53:25.640 logging.py DEBUG - Add tests to sshd_lineinfile for relative paths (Edgar Aguilar) 2025-11-21 15:53:25.640 logging.py DEBUG - Handle relative paths in sshd_config include (Edgar Aguilar) 2025-11-21 15:53:25.640 logging.py DEBUG - Bump fedora version in Dockerfiles to 37 (Jakub Hrozek) 2025-11-21 15:53:25.640 logging.py DEBUG - Fix a few isssues in test-compare-disa-xml (Matthew Burket) 2025-11-21 15:53:25.640 logging.py DEBUG - remove blank line and not used "register" statements from Ansible remediation (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2025-11-21 15:53:25.640 logging.py DEBUG - change method to clear a list to be compatible with Python 2 (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - Small corrections related to 3 rules (rchikov) 2025-11-21 15:53:25.640 logging.py DEBUG - Assign CCE ids for sle sshd_use_strong_kex rule (teacup-on-rockingchair) 2025-11-21 15:53:25.640 logging.py DEBUG - Add initial implementation of sshd_use_strong_kex rule (teacup-on-rockingchair) 2025-11-21 15:53:25.640 logging.py DEBUG - Fixes for review notes (teacup-on-rockingchair) 2025-11-21 15:53:25.640 logging.py DEBUG - build support: when SCE support is enabled, include the SCE scripts in the output datastream (THOBY Simon) 2025-11-21 15:53:25.640 logging.py DEBUG - build support: prefix the variables in SCE scripts with 'xccdf_org.ssgproject.content_value_' (THOBY Simon) 2025-11-21 15:53:25.640 logging.py DEBUG - build support: ignore empty CPE directories (needed for SCE generation) (THOBY Simon) 2025-11-21 15:53:25.640 logging.py DEBUG - Add sanity tests for compare_disa_xml.py (Matthew Burket) 2025-11-21 15:53:25.640 logging.py DEBUG - Add rule to OL7 stig profile (Federico Ramirez) 2025-11-21 15:53:25.640 logging.py DEBUG - accounts_password_set_max_life_existing: tests: Attempt to unify the (Eduardo Barretto) 2025-11-21 15:53:25.640 logging.py DEBUG - update tests (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - rewrite bash remediation (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - rewrite ansible remediation to pass tests (Vojtech Polasek) 2025-11-21 15:53:25.640 logging.py DEBUG - enable test scenarios which test remediations (Vojtech Polasek) 2025-11-21 15:53:25.641 logging.py DEBUG - use full module names in remediation (Vojtech Polasek) 2025-11-21 15:53:25.641 logging.py DEBUG - add few tests which test also files within /etc/rsyslog.d directory (Vojtech Polasek) 2025-11-21 15:53:25.641 logging.py DEBUG - rewrite the remediation so that it does not use shell commands anymore (Vojtech Polasek) 2025-11-21 15:53:25.641 logging.py DEBUG - Produce an understanable error (Matej Tyc) 2025-11-21 15:53:25.641 logging.py DEBUG - accounts_password_set_min_life_existing: tests: Attempt to unite the (Eduardo Barretto) 2025-11-21 15:53:25.641 logging.py DEBUG - accounts_password_set_min_life_existing: tests: Add dummy password to (Eduardo Barretto) 2025-11-21 15:53:25.641 logging.py DEBUG - accounts_password_set_max_life_existing: tests: Add dummy password to (Eduardo Barretto) 2025-11-21 15:53:25.641 logging.py DEBUG - Update control flag in test scenario scripts for rhel7 cis (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Optimize conditional in bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Remove unnecessary grep from test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Update _no_removeable_media tests (Federico Ramirez) 2025-11-21 15:53:25.641 logging.py DEBUG - Update _no_removeable_media rules (Federico Ramirez) 2025-11-21 15:53:25.641 logging.py DEBUG - Add two new rules to Ansible lint (Matthew Burket) 2025-11-21 15:53:25.641 logging.py DEBUG - Minor indentation adjustments (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Add test to accounts_password for OL (Edgar Aguilar) 2025-11-21 15:53:25.641 logging.py DEBUG - Update accounts_password for OL (Edgar Aguilar) 2025-11-21 15:53:25.641 logging.py DEBUG - accounts_password_set_min_life_existing: oval: Improve regex and filter (Eduardo Barretto) 2025-11-21 15:53:25.641 logging.py DEBUG - accounts_password_set_max_life_existing: tests: Fix var name (Eduardo Barretto) 2025-11-21 15:53:25.641 logging.py DEBUG - accounts_password_set_max_life_existing: oval: Improve regex and filter (Eduardo Barretto) 2025-11-21 15:53:25.641 logging.py DEBUG - Remove the CODEOWNERS for RHEL 8 STIG control (Matthew Burket) 2025-11-21 15:53:25.641 logging.py DEBUG - Remove RHEL 8 STIG Control (Matthew Burket) 2025-11-21 15:53:25.641 logging.py DEBUG - fix: service_disabled/tests: handle socket actication services (Markus Linnala) 2025-11-21 15:53:25.641 logging.py DEBUG - Add Ubuntu 22.04 to gating (Matthew Burket) 2025-11-21 15:53:25.641 logging.py DEBUG - Lower case the file for EXPLICIT_BUILD_TARGETS in build_product (Matthew Burket) 2025-11-21 15:53:25.641 logging.py DEBUG - Update stig profile references for stability tests (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Align parameter name in Ansible macro for pam_pwhistory (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Fixed unnecessary extra parameter in macro (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Update STIG related description to use variable (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Update pam_pwhistory control flag variable for STIG (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Update pam_pwhistory control flag variable for CIS (Marcus Burghardt) 2025-11-21 15:53:25.641 logging.py DEBUG - Use condition based on packaging system name (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for zypper platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for yum platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for usbguard platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for tmux platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for tfpt-server platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for systemd platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for sudo platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for sssd platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for postfix platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for polkit platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for pam platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for ntp platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for nss-pam-ldapd platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for net-snmp platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for libuser platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for gdm platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for chrony platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Use templated platform for audit platform (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Prevent broken build with Python 2 (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Modify bash_pkg_conditional (Jan Černý) 2025-11-21 15:53:25.641 logging.py DEBUG - Add missing rules to OL7 stig (Federico Ramirez) 2025-11-21 15:53:25.641 logging.py DEBUG - Bump OL7 stig profile version to v2r9 (Federico Ramirez) 2025-11-21 15:53:25.641 logging.py DEBUG - ubuntu2204: cis_level1_server: Add grub2_enable_apparmor rule (Eduardo Barretto) 2025-11-21 15:53:25.641 logging.py DEBUG - ubuntu2004: cis_level1_server: Add rule grub2_enable_apparmor (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - grub2_enable_apparmor: oval: Add audit (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - grub2_enable_apparmor: bash: Add remediation (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - ubuntu: Add new CIS rule grub2_enable_apparmor (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - Install NetworkManager as part of wireless_disable_interfaces remediation (Milan Lysonek) 2025-11-21 15:53:25.659 logging.py DEBUG - WIP: feature: add faillock_path (Markus Linnala) 2025-11-21 15:53:25.659 logging.py DEBUG - fixing bootloader password (Jindrich Skacel) 2025-11-21 15:53:25.659 logging.py DEBUG - Added a new rule accounts_set_post_pw_existing (rchikov) 2025-11-21 15:53:25.659 logging.py DEBUG - Improve Bash macro name and description (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Fix Jinja condition in macro for pam_faillock (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Added a new SLE 15 rule package_nftables_installed (rchikov) 2025-11-21 15:53:25.659 logging.py DEBUG - add correct cce id (denknorr) 2025-11-21 15:53:25.659 logging.py DEBUG - Define srpm_build_deps in packit configuration (Matus Marhefka) 2025-11-21 15:53:25.659 logging.py DEBUG - Added a new rule package_audit-libs_installed (rchikov) 2025-11-21 15:53:25.659 logging.py DEBUG - CMP-1389 : Update titles of API server tlsSecurityProfile rules (Bharath B) 2025-11-21 15:53:25.659 logging.py DEBUG - Improve conditional criteria in Ansible task (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update rule description in aligment to OVAL and remediation (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update rule description in aligment to OVAL and remediation (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update the test scenario scripts to cover new scenarios (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update Ansible remediation to use new macros (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update Bash remediation to use new macros (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update the test scenario scripts to cover new scenarios (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update Ansible remediation to use new macros (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update Bash remediation to use new macros (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update Ansible remediation to use new macros (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Include Ansible macros for pam_pwhistory.so (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update the test scenario scripts to cover new scenarios (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Update Bash remediation to use new macros (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Include Bash macros for pam_pwhistory.so (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Rename Blacklist to Disabled in profile selections (Watson Sato) 2025-11-21 15:53:25.659 logging.py DEBUG - Remove usage of whitelist in check comments (Watson Sato) 2025-11-21 15:53:25.659 logging.py DEBUG - SLE 12/15 CIS profile updates (rchikov) 2025-11-21 15:53:25.659 logging.py DEBUG - Rename PROFILE_ID_BLACKLIST to PROFILE_ID_SKIPLIST (Watson Sato) 2025-11-21 15:53:25.659 logging.py DEBUG - ansible_playbook_to_role.py: Rename whitelist to allowlist (Watson Sato) 2025-11-21 15:53:25.659 logging.py DEBUG - test platform with invalid argument (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - raise anexception if invalid argument to templated platform is supplied (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - Small corrections related to 3 rules (rchikov) 2025-11-21 15:53:25.659 logging.py DEBUG - Modifications into files (rchikov) 2025-11-21 15:53:25.659 logging.py DEBUG - Fix failure test to actually create netrc file in user's home dir (teacup-on-rockingchair) 2025-11-21 15:53:25.659 logging.py DEBUG - Fix failure test to actually create forward file in user's home dir (teacup-on-rockingchair) 2025-11-21 15:53:25.659 logging.py DEBUG - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - Style guide alignment (Marcus Burghardt) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_min_life_existing: Add consistency by moving from (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_max_life_existing: test: Improve tests (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_max_life_existing: oval: Change existence check to (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_max_life_existing: Fix ansible to avoid system (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_max_life_existing: Fix OVAL to avoid system (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_max_life_existing: Fix bash to avoid system (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_min_life_existing: test: Improve incorrect_min_pass_age.fail.sh (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_min_life_existing: oval: Change existence check to (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_min_life_existing: Fix ansible to avoid system (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_min_life_existing: Fix OVAL to avoid system (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - accounts_password_set_min_life_existing: Fix bash to avoid system (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - Fix CIS SLEs requirement id in sshd_set_keepalive (teacup-on-rockingchair) 2025-11-21 15:53:25.659 logging.py DEBUG - Add no_forward_files rule to CIS SLE profiles (teacup-on-rockingchair) 2025-11-21 15:53:25.659 logging.py DEBUG - Assign CCE SLE ids for no_forward_files rule (teacup-on-rockingchair) 2025-11-21 15:53:25.659 logging.py DEBUG - Add rule to Ensure no users have .forward files (teacup-on-rockingchair) 2025-11-21 15:53:25.659 logging.py DEBUG - Assign SLE CCE ids and CIS references to no_netrc_files rule (teacup-on-rockingchair) 2025-11-21 15:53:25.659 logging.py DEBUG - make the os_linux unversioned (so far) (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - add new parametrized platform os_linux (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - ensure that platforms update their conditionals after respective CPE items update their templated conditionals (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - save templated remediations into CPE items (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - change meaning of function build_lang_for_templatable (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - add conditional setter to CPEItem (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - always store the xml representation of platform as string (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - add a new function to platforms which collects conditionals from associated CPE items (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - modify the function which resolves and adds new CPE items based on parameters passed to platform (Vojtech Polasek) 2025-11-21 15:53:25.659 logging.py DEBUG - Update rule.yml (Bharath B) 2025-11-21 15:53:25.659 logging.py DEBUG - Update rule.yml (Bharath B) 2025-11-21 15:53:25.659 logging.py DEBUG - Update rule.yml (Bharath B) 2025-11-21 15:53:25.659 logging.py DEBUG - aide_periodic_cron_checking: oval: ubuntu: Improve regexes (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - aide_periodic_cron_checking: bash: ubuntu: Improve regex (Eduardo Barretto) 2025-11-21 15:53:25.659 logging.py DEBUG - Bump OL8 STIG version to V1R4 (Edgar Aguilar) 2025-11-21 15:53:25.659 logging.py DEBUG - Handle polyinstantiated directories/mount points (Edgar Aguilar) 2025-11-21 15:53:25.659 logging.py DEBUG - Documentation: Describe versioned platforms/CPE entities. (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - CPE AL: Allow version specifiers only for CPEs that explicitly support them (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Drop RHEL 7 CIS reference also after a tip from @yuumasato :bow: (teacup-on-rockingchair) 2025-11-21 15:53:25.660 logging.py DEBUG - accounts_umask_etc_bashrc: Fix tests for ubuntu (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - accounts_passwords_pam_faillock_unlock_time: Add Ubuntu specific OVAL (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - accounts_passwords_pam_faillock_interval: Add Ubuntu specific OVAL (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - accounts_passwords_pam_faillock_deny: Add ubuntu specific OVAL (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - macros: bash: faillock: Add Ubuntu specific case (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Add new value to var_accounts_passwords_pam_faillock_deny.var (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - sshd_approved_*.var: Add cis_ubuntu value (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - accounts_tmout: Add ubuntu specific bash (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - chronyd_run_as_chrony_user: Add ubuntu specific bash (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - chronyd_run_as_chrony_user: Add ubuntu specific tests (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Add platforms to chronyd_run_as_chrony_user tests (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix some rules bash for ubuntu2204 (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix some rules OVAL files for ubuntu2204 (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix some rules descriptions and ocil for ubuntu2204 (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Remove ubuntu2204 prodtype and cis reference from some rules (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Add some ubuntu2204 specific template vars (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level2_server: Add platform to bash remediations (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level1_server: Add platform to bash remediations (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: product.yml: Add avahi and dconf to (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: product.yml: Update grub2_uefi_boot_path (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: product.yml: Fix title (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level2_server: Add cis references (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level1_server: Add cis references (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level2_server: Add prodtype to rules (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level1_server: Add prodtype to rules (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level2_worstation: Update profile (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level1_workstation: Update profile (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level2_server: Update profile (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - ubuntu2204: cis_level1_server: Update profile (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Satisfy CodeClimate (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.660 logging.py DEBUG - Added a new rule service_firewalld_disabled (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix references and add CCE ids for backup_etc_gshadow related rules (teacup-on-rockingchair) 2025-11-21 15:53:25.660 logging.py DEBUG - Drop CIS reference in no_legacy_plus_entries_etc_group rule for SLE15 (teacup-on-rockingchair) 2025-11-21 15:53:25.660 logging.py DEBUG - Add note about Koji scratch builds (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - Add section about Fedora updates (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - CPE AL: Polish the implementation (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Update ISM and E8 profile SMEs (shaneboulden) 2025-11-21 15:53:25.660 logging.py DEBUG - Update sshd_lineinfile template tests (Edgar Aguilar) 2025-11-21 15:53:25.660 logging.py DEBUG - Update macros related to sshd configuration files (Edgar Aguilar) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix varible in ctest for srg-export-rhel9 (Matthew Burket) 2025-11-21 15:53:25.660 logging.py DEBUG - Added a new rule package_cups_removed (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Add support for intermediary version of setuptools to requirements_specs.py (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - CCE / CIS numbers for SLE 12/15 rules which belong to CIS group Initial setup (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Add RHEL9 product to `srg-export-rhel9` and `srg-diff-rhel9` (Matthew Burket) 2025-11-21 15:53:25.660 logging.py DEBUG - Move to using PYTHON_VERSION_MAJOR (Matthew Burket) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix typo. (Gabriel Becker) 2025-11-21 15:53:25.660 logging.py DEBUG - Ensure all notes use the same markdown format (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Documentation about Fedora Packages (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Include links for release and examples for cleanup (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Include -vX.Y.Z suffix where stabilization branch is mentioned (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Include references in Checklist section (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Add new Ubuntu-exclusive OVAL rule (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Enhancement to aide_build_database Ubuntu script (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - accounts_user_dot_group_ownership: Improve OVAL to avoid nobody group (Eduardo Barretto) 2025-11-21 15:53:25.660 logging.py DEBUG - Use CPEItem id_ for templated CPEs (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Refactor boolean_expressions.py (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Refactor test_utils.py (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - CPE AL: Introduce version specifiers support (Evgeny Kolesnikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix var_firewalld_active_zones var type to match object type (teacup-on-rockingchair) 2025-11-21 15:53:25.660 logging.py DEBUG - Modifications in files with available CCE numbers for SLE 12/15 (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - CCE and CIS numbers assignments for SLE 12/15 rules which belong to user and group settings (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Document the Stabilization prefix in PRs (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Provide reference of message in Github Discussion (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Update reference PR to be aligned to the given example (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Update the step related to contributors list (Marcus Burghardt) 2025-11-21 15:53:25.660 logging.py DEBUG - Correction of files with available CCE numbers for SLE12/15 (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - CCE / CIS numbers assigment to SLE 12/15 rules (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Select new audispd rules in RHEL7 STIG profile (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - Changes into files with CCE codes available (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.660 logging.py DEBUG - CCE and CIS codes for SLE 12/15 rules which belong to CIS group 5.2 configure ssh server (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Improve rule definition (teacup-on-rockingchair) 2025-11-21 15:53:25.660 logging.py DEBUG - Add two simple tests for the new rule (teacup-on-rockingchair) 2025-11-21 15:53:25.660 logging.py DEBUG - Update sudo_require_reauthentication (Federico Ramirez) 2025-11-21 15:53:25.660 logging.py DEBUG - Update OL7 kmod audit rule (Federico Ramirez) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix and improve rule descriptions (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - Rename template to key_value_pair_in_file (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - removed unavailable cce-ids for sles (Christian Hagenest) 2025-11-21 15:53:25.660 logging.py DEBUG - Ensure the test scenarios are successful (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - SLE 12/15 CCE and CIS numbers for the CIS group job schedulers (rchikov) 2025-11-21 15:53:25.660 logging.py DEBUG - Parametrize /etc/bashrc check with Jinja variable (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - Build all profiles on all CentOS and CentOS Streams (Milan Lysonek) 2025-11-21 15:53:25.660 logging.py DEBUG - Make definition of textfilecontent54_object clearer (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - Use param_value_in_file template to configure audispd daemon (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - Add new template param_value_in_file (Watson Sato) 2025-11-21 15:53:25.660 logging.py DEBUG - Fix file name for CIS SLE15 control file in CODEOWNERS (Matthew Burket) 2025-11-21 15:53:25.660 logging.py DEBUG - fix bash syntax for set_ipv6_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.660 logging.py DEBUG - really add newline to bash set_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.660 logging.py DEBUG - CIS + CCEID SLES service_iptables_enabled (Christian Hagenest) 2025-11-21 15:53:25.660 logging.py DEBUG - SLES CIS-ID sysctl_net_ipv6_conf_default_accept_ra (Christian Hagenest) 2025-11-21 15:53:25.660 logging.py DEBUG - CCE-IDs SLE sysctl_net_ipv6_conf_all_accept_ra (Christian Hagenest) 2025-11-21 15:53:25.660 logging.py DEBUG - Add CIS Nrs for set_ip6tables_default_rule sles (Christian Hagenest) 2025-11-21 15:53:25.660 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.660 logging.py DEBUG - add newline to ansible remed for loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - add newline at end of ipv6 loopback remed (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - add ipv6 enabled check to ansible f ipv6 loopback (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - Add check for ipv6-disable to ipv6_loopback bash (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - Update CIS Nr for set_ipv6_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - Modifications in rule and profile to cover CIS requirment 3.5.3.1.3 (rchikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Added a new rule package_firewalld_removed (rchikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Changing a few harcoded OS names for full_name (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - bash remed for set_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - ansible remed for set_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - add ansible remed for set_ipv6_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - Migrate package_dracut-fips_installed to template (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - add bash remediation to set_ipv6_loopback_traffic (Christian Hagenest) 2025-11-21 15:53:25.661 logging.py DEBUG - Wait for storage to finish writes (Matej Tyc) 2025-11-21 15:53:25.661 logging.py DEBUG - Added a new SLE 12/15 rule package_rsync_removed (rchikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix oval check warning for comparing int vs string (teacup-on-rockingchair) 2025-11-21 15:53:25.661 logging.py DEBUG - Status is partial automated can be partially ;) (teacup-on-rockingchair) 2025-11-21 15:53:25.661 logging.py DEBUG - Add ensure_firewall_rules_exist_for_all_open_ports rule to SLE15 CIS and PCIDSS profile (teacup-on-rockingchair) 2025-11-21 15:53:25.661 logging.py DEBUG - Add rule definition on firewalling open ports (teacup-on-rockingchair) 2025-11-21 15:53:25.661 logging.py DEBUG - Corrections related to SLE 12/15 CIS profiles (rchikov) 2025-11-21 15:53:25.661 logging.py DEBUG - incorporated comment (Bharath B) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix typing import in create_srg_export.py (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix the file param in rule_dir_json (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Add tests to package_dracut-fips-aesni_installed (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - Add tests to grub2_enable_fips_mode (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - Add refcheck test for RHEL 7 and RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix message in refchecker.py (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Make refchecker use full paths (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Add OL7 to the /etc/bashrc conditional (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix refchecker (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - update ocp identifiers in the rules (Bharath B) 2025-11-21 15:53:25.661 logging.py DEBUG - CMP-1389: SRG-APP-000014-CTR-000040: Needs an automated rule to check Kubelet tlsSecurityProfile (Bharath B) 2025-11-21 15:53:25.661 logging.py DEBUG - Remove ids, and add cis quotes (anivan-suse) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix CCE-ID (anivan-suse) 2025-11-21 15:53:25.661 logging.py DEBUG - cis change (anivan-suse) 2025-11-21 15:53:25.661 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.661 logging.py DEBUG - SLE 12/15 CCE/CIS codes added and CIS codes updated (rchikov) 2025-11-21 15:53:25.661 logging.py DEBUG - The test-controleval tests should use test files (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Improve the arguments for Ansible command module (Marcus Burghardt) 2025-11-21 15:53:25.661 logging.py DEBUG - Refactor build_cpe (rename confusing symbol-related variables) (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Update documentation for templated CPEs (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Rename CPE template cond_package into platform_package (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - The controleval script needs Python 3.7+ (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update package_dracut-fips-aesni_installed ansible (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - Update grub2_enable_fips_mode ansible (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - Add tests to package_dracut-fips_installed (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - Update package_dracut-fips_installed ansible (Edgar Aguilar) 2025-11-21 15:53:25.661 logging.py DEBUG - Add sanity tests for controleval.py (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - CIS / CCE numbers for SLE 12/15 covering special services (rchikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix make_items_product_specific function (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Use replace insted of lineinfile to fix TMOUT (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix PEP8 in build_cpe.py (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Document templated CPEs (shared/applicability/*.yml) (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Clean up templates.py, add missing conditionals for applicability/package.yml (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Refactor build_cpe.py (CPEALFactRef.pass_parameters) (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Refactor boolean_expression (Evgeny Kolesnikov) 2025-11-21 15:53:25.661 logging.py DEBUG - Use dry run in test-create_scap_delta_tailoring (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix bad name in sshd_enable_pam fix and check text (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix issues with duplicative lines at the end of the file (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Handle /etc/bashrc file in RHEL7 (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Add tests for /etc/bashrc for RHEL7 (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix pass duplicate test scenarios (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Ensure the remediation updates occurences of TMOUT (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Make sure that at least one TMOUT is defined (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Fail rule when any file contain incompliant TMOUT (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Make rule assess all occurences of TMOUT in file (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Add tests for conflicting and duplicate TMOUT (Watson Sato) 2025-11-21 15:53:25.661 logging.py DEBUG - Add nonessential services rule (anivan-suse) 2025-11-21 15:53:25.661 logging.py DEBUG - Fix build bug (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Whitespace update (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update kernel_module_can_disabled for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update audit and logging rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update chronyd_server_directive for the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update partition rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update account session rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update some auth rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update TFTP rule for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update OS is updated or RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update accounts physical rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update password quality rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update GRUB 2 rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update lockout rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update file permission rules RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Upadate crypto rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update accounts restrictions rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update system restrictions rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update AIDE rules for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update seprate file system rules in RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Tmux rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Audit and auditd config rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update USB guard rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update audit rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update networking sysctl for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update important file ownership for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.661 logging.py DEBUG - Update package rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Update NFS rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Update GNOME rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Update postfix rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Update GPG rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Update SSHD rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Package and service rule update for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Update service rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Update cron file permissions rules from RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Remove configure_kerberos_crypto_policy from the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Sync rules for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Include platform: grub2 for grub2_enable_selinux rule (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Improve test scenario scripts in alignment to OVAL (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Ensure style guide alignment in OVAL (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Extend Ansible remediation to avoid fatal errors (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Allocate difference SLE12 CCE id to avoid conflict with meanwhile consumed CCEs (teacup-on-rockingchair) 2025-11-21 15:53:25.662 logging.py DEBUG - Add sanity check to verify a log_file config is present (teacup-on-rockingchair) 2025-11-21 15:53:25.662 logging.py DEBUG - Update linux_os/guide/system/auditing/auditd_configure_rules/file_permissions_var_log_audit/ansible/shared.yml (teacup-on-rockingchair) 2025-11-21 15:53:25.662 logging.py DEBUG - Change chmod command with file module in ansible template (teacup-on-rockingchair) 2025-11-21 15:53:25.662 logging.py DEBUG - Add ansible remediation for file_permissions_var_log_audit rule (teacup-on-rockingchair) 2025-11-21 15:53:25.662 logging.py DEBUG - Add file_permissions_var_log_audit to SLE12 PCI-DSS profile (teacup-on-rockingchair) 2025-11-21 15:53:25.662 logging.py DEBUG - Update of CIS profiles for SLE 12/15 (rchikov) 2025-11-21 15:53:25.662 logging.py DEBUG - CPE AL: Introduce templated platforms (CPEs) (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Add package_firewalld_installed to OL7 STIG (Edgar Aguilar) 2025-11-21 15:53:25.662 logging.py DEBUG - Add rule to set ipv4 tcp_invalid_ratelimit in OL7 (Edgar Aguilar) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix typo. (Gabriel Becker) 2025-11-21 15:53:25.662 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2025-11-21 15:53:25.662 logging.py DEBUG - Add audit rule for create_module to OL7 STIG (Edgar Aguilar) 2025-11-21 15:53:25.662 logging.py DEBUG - Use dry run in test-create_scap_delta_tailoring_resolved (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Provide documentation for automatic detection of platform_package_overrides in tests (David Fernandez Gonzalez) 2025-11-21 15:53:25.662 logging.py DEBUG - Update rule tests to rely on platform_package_overrides + add needed alternatives to products (David Fernandez Gonzalez) 2025-11-21 15:53:25.662 logging.py DEBUG - Check packages against platform_package_overrides before installing in tests (David Fernandez Gonzalez) 2025-11-21 15:53:25.662 logging.py DEBUG - Set the proper rule for RHEL8 STIG control file (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Update the test scenario scripts for newer sshd versions (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Replace fixed value by the proper variable value (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor OVAL for sshd_set_keepalive (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Sort conditional remediation platform checks. (Gabriel Becker) 2025-11-21 15:53:25.662 logging.py DEBUG - Map selinux_user_login_roles to RHEL-08-040400 (Watson Sato) 2025-11-21 15:53:25.662 logging.py DEBUG - Needs an automated rule to check IngressController tlsSecurityProfile (Bharath B) 2025-11-21 15:53:25.662 logging.py DEBUG - Needs an automated rule to check IngressController tlsSecurityProfile (Bharath B) 2025-11-21 15:53:25.662 logging.py DEBUG - Update space_left rule in OL7 STIG to use percentage (Edgar Aguilar) 2025-11-21 15:53:25.662 logging.py DEBUG - Update kernel_module_disabled for OL systems (Edgar Aguilar) 2025-11-21 15:53:25.662 logging.py DEBUG - Update grub2_password for OL7 to not check grub.cfg (Edgar Aguilar) 2025-11-21 15:53:25.662 logging.py DEBUG - Update OL7 STIG id on mount_option_ rules (Federico Ramirez) 2025-11-21 15:53:25.662 logging.py DEBUG - Recognize all 64bit architectures in sysctl_kernel_exec_shield rule (Milan Lysonek) 2025-11-21 15:53:25.662 logging.py DEBUG - Remove offending stigid from apple_os/auditing/service_com_apple_auditd_enabled rule (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix line length in build_sce.py (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor entities/common (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Recognize all 64bit architectures in audit rules (Milan Lysonek) 2025-11-21 15:53:25.662 logging.py DEBUG - Add max_line_length parameter to .editorconfig (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor entities/common (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor templates (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor common.Templatable (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor templates (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Recognize all 64bit architectures in audit_rules templates (Milan Lysonek) 2025-11-21 15:53:25.662 logging.py DEBUG - Add to pci-dss profile (anivan-suse) 2025-11-21 15:53:25.662 logging.py DEBUG - Add pci-dss Req (anivan-suse) 2025-11-21 15:53:25.662 logging.py DEBUG - Add 4.1.14 to cis@sle15 (anivan-suse) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix config file for dconf_gnome_screensaver_lock_locked (Federico Ramirez) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix missing backslash while configuring gitpod env. (Gabriel Becker) 2025-11-21 15:53:25.662 logging.py DEBUG - Add option to Automatus to remove platforms from benchmark/profiles. (Gabriel Becker) 2025-11-21 15:53:25.662 logging.py DEBUG - Include warning regarding quota options in XFS (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor build_yaml (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.662 logging.py DEBUG - Add documentation about readthedocs.org integration. (Gabriel Becker) 2025-11-21 15:53:25.662 logging.py DEBUG - Added CIS / CCE codes to the rules which belong to warning banners group (rchikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor templates: move XCCDFEntity-specific code into Templatable (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor templates: Rule and Templatable and products (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor templates and XCCDFEntities (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Refactor template builder (Evgeny Kolesnikov) 2025-11-21 15:53:25.662 logging.py DEBUG - Ensure pwquality.conf.d dir exists on test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Add ANSSI and CIS ansible tests to CI (Milan Lysonek) 2025-11-21 15:53:25.662 logging.py DEBUG - Add dry run to utils/create_scap_delta_tailoring.py (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Add test for create_scap_delta_tailoring using the resolved dirs flag (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Unselect nfs-utils removal rule as GUI installation reqires the package (Milan Lysonek) 2025-11-21 15:53:25.662 logging.py DEBUG - Move is_name to Symbol class (Jan Černý) 2025-11-21 15:53:25.662 logging.py DEBUG - Remove unused import (Jan Černý) 2025-11-21 15:53:25.662 logging.py DEBUG - Bump version to 0.1.66 (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands/ansible/shared.yml (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Remove unnecessary extra tests (Watson Sato) 2025-11-21 15:53:25.662 logging.py DEBUG - Align rule with RHEL8 (Watson Sato) 2025-11-21 15:53:25.662 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.662 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.662 logging.py DEBUG - incorporated comments part-4 (Bharath B) 2025-11-21 15:53:25.662 logging.py DEBUG - Add SUSE Manager 4.x in installed_OS_is_sle15 (Xavier Coulon) 2025-11-21 15:53:25.662 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.662 logging.py DEBUG - Add sanity test for create_scap_delta_tailoring (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix issue where the last line of the file was being added again (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Add set_firewalld_default_zone rule to PCI DSS profile for sle15 (teacup-on-rockingchair) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix indentation in Ansible shell module parameter (Marcus Burghardt) 2025-11-21 15:53:25.662 logging.py DEBUG - Replace OS name in check text as well. (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix the issue with no spaces in replaced name (Matthew Burket) 2025-11-21 15:53:25.662 logging.py DEBUG - Fix macro loading order (Watson Sato) 2025-11-21 15:53:25.662 logging.py DEBUG - Change placeholder version in spec to 0.0.1 (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - Add note about package version to spec file (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - CIS numbers - added/updated CCE numbers - added for SLE 12/15 (rchikov) 2025-11-21 15:53:25.663 logging.py DEBUG - Change ignored_keys to frozenset (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Rename method reference_is_parametrized to cpe_id_is_parametrized (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Rename a variable (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Set ignored_keys to an empty list explicitely (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Rename method _is_parametrized to reference_is_parametrized (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Use a frozenset as a default argument (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Extract function recurse_or_substitute_or_do_nothing (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Move function is_parametrized to Symbol class (Jan Černý) 2025-11-21 15:53:25.663 logging.py DEBUG - Only run test-generate_contributors if git is installed (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Install git in fedora rawhide gating (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Add sanity test for generate_contributors (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Add dry run to utils/generate_contributors.py (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix minor bug in release_process.md (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Make the contributors script use UTC for the time notice. (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Update contributors list for v0.1.65 release (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Use jinja to limit the RHEL 8 minor version text (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Fixed bash_shell_file_set macro to consider spaces (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Refactored the test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Refactored the OVAL assessment for fapolicy_default_deny (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Update ocil and fixtext in fapolicy_default_deny (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.663 logging.py DEBUG - Update rule.yml (rumch-se) 2025-11-21 15:53:25.663 logging.py DEBUG - removed wrong rule from hipaa.profile (hagenest) 2025-11-21 15:53:25.663 logging.py DEBUG - Add config for Ansible lint (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix Code Climate issues (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix PEP8 issuses in utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix typo in test platforms (Eduardo Barretto) 2025-11-21 15:53:25.663 logging.py DEBUG - Refactor CPE AL (Evgeny Kolesnikov) 2025-11-21 15:53:25.663 logging.py DEBUG - Add Ansible destructive CI tests (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - Update existing FMF plans to explicitly say they are testing Bash (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - incorporated comments part-3 (Bharath B) 2025-11-21 15:53:25.663 logging.py DEBUG - incorporated comments part-2 (Bharath B) 2025-11-21 15:53:25.663 logging.py DEBUG - incorporated comments part-1 (Bharath B) 2025-11-21 15:53:25.663 logging.py DEBUG - Formatting and bug fixes in utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Update instructions for TLS cipher suite algorithms (Lance Bragstad) 2025-11-21 15:53:25.663 logging.py DEBUG - Make rpm_verify_hashes ansible remediation applicable on all RHELs (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - Add new CCI on RHEL-07-020019 (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix CCI of RHEL-07-020019 (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Correction of CIS numbers assigned to SLES 12/15 rules (rchikov) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix rpm_verify_* ansible remediations (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - Add sle platform support for ansible remediation in set_password_hashing_algorithm_libuserconf rule (teacup-on-rockingchair) 2025-11-21 15:53:25.663 logging.py DEBUG - Enable set_password_hashing_algorithm_libuserconf rule for sle12 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.663 logging.py DEBUG - Make service_disabled template compatible with Ansible 2.14 (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - Revert "Align service_disabled template to service_enabled" (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - clean up rule_dir_json.py import (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - sysctl: remove settings in /usr/local/lib/sysctl.d (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - sysctl: Align Ansible and Bash remediations (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Extend OVAL check to ignore .bash_history file (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Include test scenario to test .bash_history treatment (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Update remediation to skip .bash_profile file (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Update checktext for RHEL-08-020352 (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - sysctl: Check /usr/local/lib/sysctl.d for configs (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Add tests for sysctls in /usr/local/lib/sysctl.d (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Add SRG XLSX files to the build system (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Add --quiet to rule_dir_json (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Change more rule to rules (anivan-suse) 2025-11-21 15:53:25.663 logging.py DEBUG - Change rule to rules (anivan-suse) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix type and bash line (anivan-suse) 2025-11-21 15:53:25.663 logging.py DEBUG - Remove deprecated warn parameter from Ansbile command module (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - Remove remove_multiple_blank_lines function as it's no longer used (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - CMP-1389: SRG-APP-000014-CTR-000040: Needs an automated rule to check for TLS Security Profile (Bharath B) 2025-11-21 15:53:25.663 logging.py DEBUG - Ignore results files from testing (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Update gitignore (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Do not remove blank lines when building profile playbook (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - Align service_disabled template to service_enabled (Milan Lysonek) 2025-11-21 15:53:25.663 logging.py DEBUG - accounts_password_pam_retry: Add test for dupes and conflicts (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - accounts_password: Add tests for conflicting and duplicate values (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - accounts_password: Rename param conflict test (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - ssg/build_cpe: check if the reference of CPE item is not parametrized platform id (Vojtech Polasek) 2025-11-21 15:53:25.663 logging.py DEBUG - Remove unnecessary metric (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - add helper function to extract only the base name from parametrized platform name (Vojtech Polasek) 2025-11-21 15:53:25.663 logging.py DEBUG - Fix title in requirement 2.2.9 for cis_rhel8 (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - ssg/boolean_expression.py: more friendly naming of arguments (Vojtech Polasek) 2025-11-21 15:53:25.663 logging.py DEBUG - Include hint to update PYTHONPATH (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - sshd_lineinfile: Add tests for duplicated params (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Include new maintainers teams in CODEOWNERS (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Add test for duplicated SSHD parameter (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Separate the SSHD parameter from the value (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - Add tests to check for RekeyLimit conflicts (Watson Sato) 2025-11-21 15:53:25.663 logging.py DEBUG - use varible for ocp version detection (Vincent Shen) 2025-11-21 15:53:25.663 logging.py DEBUG - Address reviewer comments in 9778 (Matthew Burket) 2025-11-21 15:53:25.663 logging.py DEBUG - Add sle platform for relevant accounts_password_pam_unix_remember test scripts (teacup-on-rockingchair) 2025-11-21 15:53:25.663 logging.py DEBUG - Enable sle12 support for accounts_password_pam_unix_remember bash and ansible remediation (teacup-on-rockingchair) 2025-11-21 15:53:25.663 logging.py DEBUG - Add CCE for sle12 to accounts_password_pam_unix_remember (teacup-on-rockingchair) 2025-11-21 15:53:25.663 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2025-11-21 15:53:25.663 logging.py DEBUG - Pull openpyxl pandas from the Debian 10 tests (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Add more guarding of the smoke tests (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Sure CMake fixtures for rules_dir_json and SRG Export dependacies (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - add cis code (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Change rpm command (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - allow passing of parameters when creating the platform (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - enhance the boolean_expression.Symbol class to handle parameters and store them (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - Add test for param conflicts for SSH compression (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - add new function to apply formatting on dictionary values (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - Update docs/manual/developer/06_contributing_with_content.md (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Document rule deprecation instructions and agreements (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Update profile stability test data (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Add opensc_card_drivers rules to sle12 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.664 logging.py DEBUG - Add dconf_gnome_screensaver_idle_activation_enabled to sle12 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.664 logging.py DEBUG - Enable install_hids for sle12 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix pandas dep in CI (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Add openpyxl to CI so that smoke tests run (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Add smoke test for the compare_ds script (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Add smoke test for the srg-diff script (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Add smoke test for the create_srg_export script (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4: Don't select ocp4-node-on-ovn rules for NIST high profile (Jakub Hrozek) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4: 4.12 uses ebs.csi.aws.com not kubernetes.io/aws-ebs as storage provisioner on AWS (Jakub Hrozek) 2025-11-21 15:53:25.664 logging.py DEBUG - Change verbiage on idle timeout rule (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Add test to check for configuration conflicts (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Check all instances of ClientAliveCountMax (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Add tests to check for configuration conflicts (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Change verbiage on keepalive rules (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - RHEL8 STIG v1R8 requires ClientAliveCountMax 1 (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix broken Automatus CI jobs (Jan Černý) 2025-11-21 15:53:25.664 logging.py DEBUG - Add error messages (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Remove execute permission from SCAP content (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Remove execute permission from SCAP content (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Add rule name (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Include fedora in the prodtype list and test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Update RHEL7 STIG to V3R9 (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R9 (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R9 (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Update RHEL8 STIG to V1R8 (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R7 (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R8 (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - merge two if statements (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - fix blank lines to align with pep8 (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - extract functions for getting platform names and cpe names related to remediations (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - unify definition of remediatiojObject (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - Ignore errors on semanage command when SELinux is not used (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Add sorted results to srg_diff (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Increment remediation to ensure correct SELinux fcontext (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Removed STIG references from account_passwords_pam_faillock_dir (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Change manual page name to pam_faillock in lowercase (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Include RHEL identifiers to the more complete rule (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - update build_remediations.py to reflect changes in XCCDF platform API (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - Include deprecation warning for duplicated rule (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix the stigid reference for RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Update SRG to use more complete rule for pam_faillock dir (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Use the proper variable in bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Use the existing variable in fixtext instead of static value (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Improve ocil and ocil_clause to be more clear (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - Include srg_requirement in accounts_passwords_pam_faillock_dir (Marcus Burghardt) 2025-11-21 15:53:25.664 logging.py DEBUG - change api for getting of remediation conditionla s from XCCDF platforms (Vojtech Polasek) 2025-11-21 15:53:25.664 logging.py DEBUG - Remove STIGIDs from deprecated rule (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix sloppy typing and spacing errors (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix nmcli bug (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - products/anolis8: supports Anolis OS 8 (YiLin.Li) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix - 2 new rules (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4: Mark file_{owner,groupowner,permissions}_openshift_sdn_cniserver_config as NOT-APPLICABLE on OCP 4.12 (Jakub Hrozek) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4: Mark file_{owner,groupowner,permissions}_ip_allocations as NOT-APPLICABLE on OCP 4.12 (Jakub Hrozek) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4: file_{owner,groupowner,permissions}_proxy_kubeconfig should be NOT_APPLICABLE on 4.12+ (Jakub Hrozek) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix misnamed rule (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Add loopback rules (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Make the utils/srg_diff.py more generic (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4: improve rule scc_limit_container_allowed_capabilities instruction (Vincent Shen) 2025-11-21 15:53:25.664 logging.py DEBUG - Fix Automatus --duplicate-templates (Jan Černý) 2025-11-21 15:53:25.664 logging.py DEBUG - Remove text (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Add section to SRG Diff to highlight missing CCEs (Matthew Burket) 2025-11-21 15:53:25.664 logging.py DEBUG - Remove cces and fix bash (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Add shadow rule to pci-dss-4 (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Add new rule ensure_shadow_group_empty (anivan-suse) 2025-11-21 15:53:25.664 logging.py DEBUG - Add CIS and ANSSI machine hardening tests for TF (Milan Lysonek) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4 update rule general-default-seccomp-profile (Vincent Shen) 2025-11-21 15:53:25.664 logging.py DEBUG - Consider the last field the log file path (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - Add test cases identical to the cloudinit conf (Watson Sato) 2025-11-21 15:53:25.664 logging.py DEBUG - OCP4: lowercase several rules (Jakub Hrozek) 2025-11-21 15:53:25.665 logging.py DEBUG - OCP4: Add more test manifests (Jakub Hrozek) 2025-11-21 15:53:25.665 logging.py DEBUG - Load and preprocess the template individually (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - CCI -> CCE in srg_diff (Matthew Burket) 2025-11-21 15:53:25.665 logging.py DEBUG - Updates according to DISA updates published on 21.10.2022 (rumch-se) 2025-11-21 15:53:25.665 logging.py DEBUG - Rename and align extracted functions (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - Remove Builder() from RuleChecker() (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - Extract non-building functions from Builder() (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - Update tests in dconf related rules (Edgar Aguilar) 2025-11-21 15:53:25.665 logging.py DEBUG - Align bash dconf macros with corresponding OVAL (Edgar Aguilar) 2025-11-21 15:53:25.665 logging.py DEBUG - Remove deprecated code (Jan Černý) 2025-11-21 15:53:25.665 logging.py DEBUG - Removed extra spaces in test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Include test scenarios with stig banner for ubuntu (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Remove the harmful text from fapolicyd_prevent_home_folder_access (Matthew Burket) 2025-11-21 15:53:25.665 logging.py DEBUG - Add tests to accounts_password template (Edgar Aguilar) 2025-11-21 15:53:25.665 logging.py DEBUG - Clean up import sections (Matej Tyc) 2025-11-21 15:53:25.665 logging.py DEBUG - Split profile functionality from build_yaml (Matej Tyc) 2025-11-21 15:53:25.665 logging.py DEBUG - remove cceids from txt file (anivan-suse) 2025-11-21 15:53:25.665 logging.py DEBUG - Add Rules (anivan-suse) 2025-11-21 15:53:25.665 logging.py DEBUG - Add note about history (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - Example how to create two PRs from a single branch (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - How to relocate a fix from one to another (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - Reformat example how to port fix between branches (Watson Sato) 2025-11-21 15:53:25.665 logging.py DEBUG - Update profiles for profile_stability tests (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Update SRG to use rule with consistent name (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Update rule name in OL8 STIG profile (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Update rule name in RHEL8 STIG profile (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Remove duplicated ids from OVAL (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Include deprecation warning in disaligned rule (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Create accounts_passwords_pam_faillock_audit rule (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Align test scenario scripts with banner_etc_issue rule (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Align the OVAL to the project style guide (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - Include missing platforms in remediations (Marcus Burghardt) 2025-11-21 15:53:25.665 logging.py DEBUG - remove no longer used imports and fix flak8 issues in templates.py (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - store templating languages in dict instead of list (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - drop usage of getiterator because we support only Python 2.7, not older (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - add forgotten __init__.py (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - extract function which converts "true" or "false" from yaml to booleans (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - add correct dependencies to cmake file (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - template handling: redesign how templating languages are defined (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - remove no longer valid comment (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - improve dictionary iteration (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - remove no longer used method (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - correctly raise an exception instead of printing a message (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - fixing issues reported by flake8 and codeclimate in modified files (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - remove function which was forgotten when extracting XCCDFEntity class (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - modify tests to use new way of initializing ProductCPEs (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - deduplicate code (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - rework adding of CPE items and product CPE items (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - add explanatory comment (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - Improve product CPEs (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - Support for compiled CPE items (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - Support reading content CPES from individual yaml files (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - Allow compiled content file names to contain dots (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - Extract XCCDFEntity class to be used in other module files (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - Add PCI-DSS rules (anivan-suse) 2025-11-21 15:53:25.682 logging.py DEBUG - Add PCI-DSS rules and update cceid (anivan-suse) 2025-11-21 15:53:25.682 logging.py DEBUG - Remove fapolicyd_prevent_home_folder_access from the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.682 logging.py DEBUG - Update SLE 15 SAP hardening profile (sampsone) 2025-11-21 15:53:25.682 logging.py DEBUG - Improvements based on review discussion (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Include Ansible remediation for banner_etc_issue_net (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Update requirement 1.7.3 for CIS RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Include RHEL in prodtype for banner_etc_issue_net rule (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - add tests (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - add Ansible remediation (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - add Bash remediation and change macro (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - add OVAL check (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - add rule and associated variable (Vojtech Polasek) 2025-11-21 15:53:25.682 logging.py DEBUG - OCP4: Check ownership and permission of OVN DB files (Jakub Hrozek) 2025-11-21 15:53:25.682 logging.py DEBUG - Add correct_value, profile independent test to rule (Edgar Aguilar) 2025-11-21 15:53:25.682 logging.py DEBUG - Add tests for file_ownership_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.682 logging.py DEBUG - Add tests for force_opensc_card_drivers (Edgar Aguilar) 2025-11-21 15:53:25.682 logging.py DEBUG - Add tests for configure_opensc_card_drivers (Edgar Aguilar) 2025-11-21 15:53:25.682 logging.py DEBUG - Reformulate the release_process documentation (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Added 4 rules to SLES 12/15 PCI DSS 4.0 profiles (rumch-se) 2025-11-21 15:53:25.682 logging.py DEBUG - OCP4: check file permissions and ownership of ovn-cni-server.sock (Jakub Hrozek) 2025-11-21 15:53:25.682 logging.py DEBUG - Clarify how the branches are syncronized (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Remove process to sincronize branches (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Fix CCE-86042-9 in the list of available CCEs (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Update requirement 1.7.6 for CIS RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Update requirement 1.7.6 for CIS RHEL8 (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Create file_owner_etc_issue_net rule (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Create file_groupowner_etc_issue_net rule (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Create file_permissions_etc_issue_net rule (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Added SLES 15/12 CCE codes related to the rules ...backup_etc_group (rumch-se) 2025-11-21 15:53:25.682 logging.py DEBUG - Update pci-dss-4.profile (rumch-se) 2025-11-21 15:53:25.682 logging.py DEBUG - Fix test_id_translate.py to work with Python 2.7 (Matthew Burket) 2025-11-21 15:53:25.682 logging.py DEBUG - Improve regex to detect ifcfg files (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Remediation applicable to all NetworkManager connections (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Optimize test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Adjust the OCP OVN platform detection for 4.12 (Jakub Hrozek) 2025-11-21 15:53:25.682 logging.py DEBUG - Created SLES 12 PCI DSS 4.0 profile and added rules to it (rumch-se) 2025-11-21 15:53:25.682 logging.py DEBUG - Add pci-ds rules (anivan-suse) 2025-11-21 15:53:25.682 logging.py DEBUG - Improve wording on warning about custom ssh.xml (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Simplify the Bash remediation in alignment to Ansible (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Trim nmcli connection names output (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Fix loop over array in bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Introduce new Ansible remediation (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Recreated OVAL assessment for firewalld_sshd_port_enabled (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Reinvent the test scenarios for firewalld_sshd_port_enabled (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Review test scenario scripts (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Include warning message regarging custom SSH port (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Increase robustness of firewalld_sshd_port_enabled bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Improve rule descriptions for firewalld_sshd_port_enabled (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - Include section of review hints in PR template (Marcus Burghardt) 2025-11-21 15:53:25.682 logging.py DEBUG - CCE codes added to the rule sshd_set_max_sessions (rumch-se) 2025-11-21 15:53:25.682 logging.py DEBUG - Docs/developer: Mention that rules will inherit its group(s) platforms (Evgeny Kolesnikov) 2025-11-21 15:53:25.682 logging.py DEBUG - Update docs/manual/developer/05_tools_and_utilities.md (Gabriel Becker) 2025-11-21 15:53:25.682 logging.py DEBUG - Make sure xatrr audit rules contains a check for root user on Ubuntu (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - Remove unused import (Jan Černý) 2025-11-21 15:53:25.682 logging.py DEBUG - Add an unit test for the to_ocil() method (Jan Černý) 2025-11-21 15:53:25.682 logging.py DEBUG - Add unit tests for warnings and sub elements (Jan Černý) 2025-11-21 15:53:25.682 logging.py DEBUG - Added rules to PCI DSS 4.0 SLES 15 profile (rumch-se) 2025-11-21 15:53:25.682 logging.py DEBUG - Ubuntu 20.04 CIS: add package_pam_pwquality_installed for the case where (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - install_smartcard_packages: Add Ubuntu specific remediation (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - rsyslog_remote_access_monitoring: Fix oval regex to avoid commented lines (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - rsyslog_remote_access_monitoring: Fix shared bash regex to avoid commented lines (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - ensure_rsyslog_log_file_configuration: Add Ubuntu specific bash (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - Add a test with a rule without CCE (Jan Černý) 2025-11-21 15:53:25.682 logging.py DEBUG - dir_perms_world_writable_sticky_bits: Update test remediation (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - dir_perms_world_writable_sticky_bits: Improve bash to avoid (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - dir_perms_world_writable_sticky_bits: Add ubuntu platform to bash (Eduardo Barretto) 2025-11-21 15:53:25.682 logging.py DEBUG - Add documentation about automatically adding CCE feature. (Gabriel Becker) 2025-11-21 15:53:25.682 logging.py DEBUG - Add newlines to SLES CCE available files. (Gabriel Becker) 2025-11-21 15:53:25.682 logging.py DEBUG - Remove broken link to CCE documentation. (Gabriel Becker) 2025-11-21 15:53:25.682 logging.py DEBUG - Add support to SLES CCE available codes in add-cce tool. (Gabriel Becker) 2025-11-21 15:53:25.683 logging.py DEBUG - Use diff_files instead of diff_trees (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Added 2 SLES 15/12 CCE codes to the rule disable_prelink (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - Remove expected items from the diff (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - SLES 12/15 codes updates (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - Add xmldiff to the documentation (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Add a test for no prexisting confing in rsyslog_remote_tls (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Update bash remedation for rsyslog_remote_tls (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Ignore errors on rsyslog_remote_tls Ansible (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - remove ospp-mls.profile (Jiri Jaburek) 2025-11-21 15:53:25.683 logging.py DEBUG - Free and used CCE codes for SLES 12/15 OSes (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - Assign RHEL-07-010271 to account_emergency_expire_date. (Gabriel Becker) 2025-11-21 15:53:25.683 logging.py DEBUG - CIS: Update etcd encryption provider rationale (Matt Rogers) 2025-11-21 15:53:25.683 logging.py DEBUG - service_ntp_enabled: Fix description as service name is ntp (Eduardo Barretto) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix Ubuntu 20.04 cis_level1_server profile for grub2 password (Eduardo Barretto) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix Ubuntu 20.04 stig profile for grub2 password (Eduardo Barretto) 2025-11-21 15:53:25.683 logging.py DEBUG - grub2_uefi_password: Add Ubuntu specific OVAL (Eduardo Barretto) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix grub2_uefi_boot_path for Ubuntu 20.04 (Eduardo Barretto) 2025-11-21 15:53:25.683 logging.py DEBUG - root_permissions_syslibrary_files: Re-add tests that were removed in 3800451 (Eduardo Barretto) 2025-11-21 15:53:25.683 logging.py DEBUG - corrected yaml value checks (Bharath B) 2025-11-21 15:53:25.683 logging.py DEBUG - corrected rule name in SRG CTR (Bharath B) 2025-11-21 15:53:25.683 logging.py DEBUG - Add pcidss Req-ids (anivan-suse) 2025-11-21 15:53:25.683 logging.py DEBUG - Use conditional import of xlmdiff and lxml (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Use xmldiff in unit tests of to_xml_element methods (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - corrected indentation (Bharath B) 2025-11-21 15:53:25.683 logging.py DEBUG - Remove unit tests that check expected properties (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Update products/sle12/profiles/pci-dss.profile (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Update products/sle12/profiles/pci-dss.profile (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Add an empty last line to the file (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Set var_smartcard_drivers variable in the PCIDSS control file (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Add PCI-DSS v4 related rules in separate profile (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Change reference to PCI standard to correct version (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Add tally2 rules instead of faillock-based for sle12 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Rename pcidss 3.2.1 to pcidss 3 (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix syntax errors in control format (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix missing CCEs for PCI-DSS (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Add PCI-DSS control for v.3.2.1 and SLE profiles to include it (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Add sle12 platform and missing CCE and PCIDSS references to rules related to PCIDSS effort for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Remove docs for utils scripts that have been moved (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Update links to documents for myst (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Update docs about SCAP 1.2 content. (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Allow linking to headers (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix links in tests/README.md (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix OL documentation links (Federico Ramirez) 2025-11-21 15:53:25.683 logging.py DEBUG - Add tests to rule (Edgar Aguilar) 2025-11-21 15:53:25.683 logging.py DEBUG - Refactor DISA content diff functions. (Gabriel Becker) 2025-11-21 15:53:25.683 logging.py DEBUG - Assigned 6 SLES 12/15 CCE codes to rules related to coredumps (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - Revert "6 SLES 12/15 CCE codes related to coredumps" (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - 6 SLES 12/15 CCE codes related to coredumps (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - renamed ocp_secure_allowed_registries_for_import rule (Bharath B) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix config file and interpreter check control flow (win97pro) 2025-11-21 15:53:25.683 logging.py DEBUG - Add tests to sebool template (Edgar Aguilar) 2025-11-21 15:53:25.683 logging.py DEBUG - root_permissions_syslibrary_files: Re-add file_regex otherwise (Eduardo Barretto) 2025-11-21 15:53:25.683 logging.py DEBUG - Include the status tag in SRG-OS-000163-GPOS-00072 (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix the total used to calculate general stats (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - Do not process checks from templates by Jinja (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Extract variable oval_file_path (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Use a negative condition and a continue (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Use negative condition and continue (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Add unit tests for CPEAL when conditionals are empty. (Gabriel Becker) 2025-11-21 15:53:25.683 logging.py DEBUG - Remove comparison utilities (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Remove definition_location paths (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - OCP: change default kubelet tlscipher (Vincent Shen) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix CCE ids (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Add rpm_verify_permissions and rpm_verify_hashes rules sle12 support (teacup-on-rockingchair) 2025-11-21 15:53:25.683 logging.py DEBUG - Remove Travis CI (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Added 4 SLES 15/12 codes to the rules group_unique_id/name (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - Added SLES 15 CCE and STIG ID code to the rule (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - Added CCE number for SLES_15 in the rule sshd_use_approved_ciphers (rumch-se) 2025-11-21 15:53:25.683 logging.py DEBUG - Sort the list of ids in json output (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - Include small function to order output list (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - Refactor json output function in controleval.py (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix typos. (Gabriel Becker) 2025-11-21 15:53:25.683 logging.py DEBUG - Complete 1.4.2 requirement for CIS RHEL7 v3.1.1 (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - New rules for permissions check on user.cfg file (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - New rules for owner check on user.cfg file (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - New rules for groupowner check on user.cfg file (Marcus Burghardt) 2025-11-21 15:53:25.683 logging.py DEBUG - Add unit tests for conversion to XCCDF 1.2 (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Check if the values are not None (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - incorporated comments to remove CCE reference IDs used (Bharath B) 2025-11-21 15:53:25.683 logging.py DEBUG - Add dconf_gnome_disable_user_list to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Add PSC for dconf_gnome_disable_user_list (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Clean up checktext in audit_rules_login_events_tallylog (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Remove double text from sysctl_fs_protected_symlinks checktext (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Add sudo sysctl_kernel_kptr_restrict psc (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix path in /var/log/faillock psc (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Fix postfix_client_configure_mail_alias_postmaster checktext (Matthew Burket) 2025-11-21 15:53:25.683 logging.py DEBUG - Add import-or-skip for lxml (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Skip test if xmldiff isn't available (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Add a test with xmldiff (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Add missing asserts (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Make oval_unix_namespace defintion a global (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Change unit tests for translate() (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Refactor by using a dictionary (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Reduce test data input (Jan Černý) 2025-11-21 15:53:25.683 logging.py DEBUG - Create unit tests for ssg.id_translate (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Create mount_option_home_grpquota rule for CIS (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Create mount_option_home_usrquota rule for CIS (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix order of cce-ids (anivan-suse) 2025-11-21 15:53:25.684 logging.py DEBUG - Add PCI-DSS Rules (anivan-suse) 2025-11-21 15:53:25.684 logging.py DEBUG - corrected identifiers format (Bharath B) 2025-11-21 15:53:25.684 logging.py DEBUG - incorporated comments to add ocil_clause (Bharath B) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix Code Climate problems (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Add unit tests for ssg/build_renumber.py (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Cover the CIS 1.8.5 requirement for RHEL8 v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Cover the CIS 1.8.4 requirement for RHEL8 v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Cover the CIS 1.8.3 requirement for RHEL8 v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Delete test from accounts_umask_etc_login_defs (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Added sle support to sshd_set_max_auth_tries/ansible/shared.yml file (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Added 6 SLES 15/12 CCE codes to the rules sshd_... (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Use of variables in calculations and PEP8 fixes (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Substitute newlines with breaks in texts (Matej Tyc) 2025-11-21 15:53:25.684 logging.py DEBUG - Add support for templated rules (Matej Tyc) 2025-11-21 15:53:25.684 logging.py DEBUG - Added 6 SLES-15/12 CCE codes to the rules ..._backup_etc_shadow (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Added SLES 15/12 codes to rules ..._backup_etc_passwd (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Update ol products yaml files (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Update tests in service_enabled template (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Update test in kernel_module_disable template (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Update tests in wireless_disable_interfaces (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Update platform and fix in typo in tests of rule (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Update tests in sshd_use_priv_separation (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix tests in accounts_umask_etc_login_defs (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Add tests to mount_option template (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Update CMake minimum version (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Add status output in cmake for SCE content (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Summarize rule fields into a single HTML file. (Matej Tyc) 2025-11-21 15:53:25.684 logging.py DEBUG - Include coverage statistic in the output (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove superfluous XML namespaces from HTML tables (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove get_fixgroup_for_type (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Improve the stats output (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Make it optional to output the controls (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Separete functions to manipulate lists and output (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove unused XSLT xccdf2table-profileanssirefs.xslt (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - SLES 15/12 CCE codes were added to 2 rules related to avahi-daemon and cups service (rchikov) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove XCCDF 1.1 from get_profile_choices_for_input (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Stop iterating over both XCCDF 1.1 and XCCDF 1.2 (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix editorconfig (Matej Tyc) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove unused import (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove XCCDF 1.1 from profile tool (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove XCCDF 1.1 from enable_derivatives.py (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Automated rule to check for insecure image registries (Bharath B) 2025-11-21 15:53:25.684 logging.py DEBUG - Add pci-dss rules (anivan-suse) 2025-11-21 15:53:25.684 logging.py DEBUG - Introduce pci-dss profile for OL9 (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Require a Github account for gitpod.io workshops (Jiri Jaburek) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix a bug in the remediation condition when using CPE AL. (Gabriel Becker) 2025-11-21 15:53:25.684 logging.py DEBUG - Refactor code that generates HTML output (Matej Tyc) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove jinja condition to make rule applicability to all products. (Gabriel Becker) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove "note" superfluous field from the controls file format. (Gabriel Becker) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove check for OpenSCAP OVAL version as that is no longer needed (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove duplicated and unnecessary test (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Refactor calculation of implicit status (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Simplify the calculation of assessed controls (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Refactor how the controls are calculated (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Two small corrections (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Added SLES_15/12 CCE codes related to rules in the group restict_at_cron_users (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Introduce cui profile for OL9 (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Address CodeClimate coments (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Extended controls.Status class to return status list (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Added 8 SLES 15/12 CCE codes to rules related to group restrict_at_cron_users (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Extented the json function to include all available status (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Include controls for product argument (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove intentions before list items (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Add indentation before list items (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - rearrange cce-ids (anivan-suse) 2025-11-21 15:53:25.684 logging.py DEBUG - Sort cce-ids (anivan-suse) 2025-11-21 15:53:25.684 logging.py DEBUG - Improve argparse descriptions and readability (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Added 2 SLES15/12 CCE codes to the rule service_rpcbind_disabled (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Order the imported modules alphabetically (Marcus Burghardt) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix incorrect variable reference (Dan Clark) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix issues found in code review for #9574 (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove 5.10 oval_version attributes (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Update sysctl documentation (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Update sysctl template's OVAL (Edgar Aguilar) 2025-11-21 15:53:25.684 logging.py DEBUG - Add rule id to titles for srg_diff (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Minor bug fix for srg diff (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Use rule id in SRG Diff for missing rules (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix SRG Diff html to be smaller (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix more Code Climate issues (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Handle rules addd in new content (Watson Sato) 2025-11-21 15:53:25.684 logging.py DEBUG - Add more pci-dss rules (anivan-suse) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix handling of rule missing in new datastream (Watson Sato) 2025-11-21 15:53:25.684 logging.py DEBUG - Added 10 SLES_15/12 codes to the rules file_permissions_cron_ (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Make CodeClimate to use .editorconfig (Matej Tyc) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove function drop_oval_definitions (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Implementation of proposed changes (rumch-se) 2025-11-21 15:53:25.684 logging.py DEBUG - Add pci-dss rules (anivan-suse) 2025-11-21 15:53:25.684 logging.py DEBUG - Change list to not use numbers (Jan Černý) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix up mdl findings docs/manual/developer/05_tools_and_utilities.md (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix Code Climate issues (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Reduce the pickyness of radon for codeclimate (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix handling of < and > in the import_srg script (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Add some more formatting to 05_tools_and_utilities.md (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Add docs for utils/srg_diff.py (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Add SRG Diff script (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Fix vuldiscussion in SRG export (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Only load policy specific content if the rule doesn't already have it (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Update Rule.read_policy_specific_content to handle None env_yaml (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Import STIG content for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.684 logging.py DEBUG - Remove duplicated CCE. (Gabriel Becker) 2025-11-21 15:53:25.684 logging.py DEBUG - Implementation of proposed changes (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Added SLES 15/12 CCE codes to different rules related to sshd (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Some corrections in rule service_rsyncd_disabled. (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Add PR gating guideline (Matej Tyc) 2025-11-21 15:53:25.685 logging.py DEBUG - Added 2 SLES15/12 CCE codes to the rule file_permissions_crontab (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Added a CCE code (SLES 12) for the rule 'Enable cron Service' (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix more OVAL 5.10 references (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - OCP4: Install FIO from the right catalog (Jakub Hrozek) 2025-11-21 15:53:25.685 logging.py DEBUG - Added 2 SLES-15/12' CCE codes for the rule package_net-snmp-removed (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix backend_krb5_config in configure_kerberos_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Added 2 SLES-15/12' CCE codes to the rule package_samba_removed (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Added 2 SLES15/12' CCE codes to the rule package_httpd_removed (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Added 2 SLES-15/12' CCE codes for the rule package_bind_removed (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Added two CCE codes for SLES-12/15 to the rule package_nfs-utils_removed (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Added SLES 12 and SLES 15 CCE codes to the rule package_openldap-servers_removed (rumch-se) 2025-11-21 15:53:25.685 logging.py DEBUG - Rework tests not to use separate files as templates for accounts passwords pam tally2 unlock time (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Rework tests not to use separate files as templates for accounts passwords pam tally2 (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Rework tests not to use separate files as templates (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Drop extra line (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Replace usage of bash/ansible_ensure_pam_module_options with bash/ansible_ensure_pam_module_option (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix duplicate CCE id (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Replace accounts_passwords_pam_faillock_unlock_time with accounts_passwords_pam_tally2_unlock_time for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Replace accounts_passwords_pam_faillock_deny_root with accounts_passwords_pam_tally2_deny_root for SLE platform (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Add accounts_passwords_pam_tally2 for cases when pam_faillock is not supported (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Drop accounts_passwords_pam_faillock_interval rule for SLE12 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Clarify instructions for implementing SCCs (Lance Bragstad) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove if statements around OVAL 5.10 (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove OVAL 5.10 from the build system (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove SCAPVAL 1.2 from stablization (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove OVAL 5.10 from GH Actions (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove ident_size for .py files from editorconfig (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - tftpd_uses_secure_mode: update rule wrt RHEL9 STIG (Matus Marhefka) 2025-11-21 15:53:25.685 logging.py DEBUG - usbguard_generate_policy: update ocil and fixtext wrt RHEL9 STIG (Matus Marhefka) 2025-11-21 15:53:25.685 logging.py DEBUG - use_pam_wheel_for_su: update fixtext, srg_requirement and add vuldiscussion (RHEL9 STIG) (Matus Marhefka) 2025-11-21 15:53:25.685 logging.py DEBUG - wireless_disable_interfaces: updated ocil and fixtext wrt RHEL9 STIG (Matus Marhefka) 2025-11-21 15:53:25.685 logging.py DEBUG - Update contributors for 0.1.64 release (Watson Sato) 2025-11-21 15:53:25.685 logging.py DEBUG - Bump version to 0.1.65 (Watson Sato) 2025-11-21 15:53:25.685 logging.py DEBUG - Re add the rule to RHEL9 data stream (Watson Sato) 2025-11-21 15:53:25.685 logging.py DEBUG - OCP4: Fix OCIL of machine_volume_encrypted (Jakub Hrozek) 2025-11-21 15:53:25.685 logging.py DEBUG - Style guide clean up (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Update the docs to use `'` vs `’` (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - xwindows_remove_packages: update srg_requirement based on RHEL9 STIG (Matus Marhefka) 2025-11-21 15:53:25.685 logging.py DEBUG - xwindows_runlevel_target: update ocil and fixtext wrt RHEL9 STIG (Matus Marhefka) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove RPM verify rules from RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Use variable to remediate rule (Watson Sato) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix unit tests for contributors (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Added gitmailmap validation job (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Update contributors.py based on new mailmap (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Add gitmailmap (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - OCP4: Add 4.12-specific test manifests (Jakub Hrozek) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove mentions of "shorthand" from CMake (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Update documentation after shorthand removal (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Unselect rules that remove GUI from RHEL9 stig_gui (Watson Sato) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix Markdown issues in 02_building_complianceascode.md (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Change to use extend and remove logic (sampsone) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix create_output args in utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Add profile for SUSE SAP Public Cloud Images (sampsone) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix case where get_policy_specific_content may return None vs empty string (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Add python3-mypy to CI dependencies (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Add content testing docs (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Add docs for mypy (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Update import SRG to use policy specific content fields (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Use the policy_specific_content for SRG export (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Add MyPy CI Test (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Removed the jre product. (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Move to MyST as recommonmark and commonmark are not supported (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix Code Climate issues (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Rename build_shorthand.py to build_xccdf.py (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove relabel_ids.py (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Relabel IDs as a part of shorthand creation (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Refactor: Extract method export_ocil_to_xml (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Add ability to export benchmark XML element from LinearLoader (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Create elements properly in OCIL namespace (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Use string type in var_event_record_qps OpenShift Variable. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix OL7 URL documentation link. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Improve the regulated content handling (Matěj Týč) 2025-11-21 15:53:25.685 logging.py DEBUG - Update OVAL to accept expected values from RHEL9 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Removed fuse6 (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Do not remove remediation for FIPS related rules in derivatives. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - add warning to sysctl_net_ipv4_conf_all_forwarding (Vojtech Polasek) 2025-11-21 15:53:25.685 logging.py DEBUG - add accounts_password_set_max_life_existing to unselect_rules_list (Vojtech Polasek) 2025-11-21 15:53:25.685 logging.py DEBUG - Disable anaconda remediation of mount_option_boot_efi_nosuid. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Add support for regulated fields (Matej Tyc) 2025-11-21 15:53:25.685 logging.py DEBUG - Unselect configure_gnutls_tls_crypto_policy in RHEL9 STIG. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix ansible lint warning (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Use bash variable rsyslog_remote_loghost_address instead of jinja - thanks to @jan-cerny for the note (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Drop unnecessary and wrong extra whitespaces (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Add bash and ansible remediation for rsyslog_remote_tls (teacup-on-rockingchair) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix doc error (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Add tests to dconf_gnome_session_idle_user_locks (Edgar Aguilar) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix bash conditional for and add ansible cond for container CPE. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Add custom bash/ansible conditionals for UEFI/non-UEFI CPE checks. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Add mount_option_boot_efi_nosuid to RHEL8 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Make rule applicable only to uefi systems mount_option_boot_efi_nosuid. (Gabriel Becker) 2025-11-21 15:53:25.685 logging.py DEBUG - Resolve codeclimate problem (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Resolve codeclimate problem (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove duplicate id attribute assignment (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Remove the ssg-${product}-xccdf-1.2.xml file (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Use ssg-${PRODUCT}-xccdf.xml as dependency (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Generate XCCDF 1.2 directly (Jan Černý) 2025-11-21 15:53:25.685 logging.py DEBUG - Removed vsel (Matthew Burket) 2025-11-21 15:53:25.685 logging.py DEBUG - Introduce 'Not Applicable' platform (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Remove superflous check of rule ID consistency (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Fix bash conditional for and add ansible cond for container CPE. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Add custom bash/ansible conditionals for UEFI/non-UEFI CPE checks. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Add mount_option_boot_efi_nosuid to RHEL8 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Make rule applicable only to uefi systems mount_option_boot_efi_nosuid. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Add back SRG requirement to accounts_authorized_local_users (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Remove Debian 9 from products (Matthew Burket) 2025-11-21 15:53:25.686 logging.py DEBUG - Remove Debian 9 from docs and the build system (Matthew Burket) 2025-11-21 15:53:25.686 logging.py DEBUG - Remove the debian9 product (Matthew Burket) 2025-11-21 15:53:25.686 logging.py DEBUG - Update chronyd_client_only to align with RHEL9 STIG (Marek Haicman) 2025-11-21 15:53:25.686 logging.py DEBUG - Update chronyd_no_chronyc_network to align with RHEL9 STIG (Marek Haicman) 2025-11-21 15:53:25.686 logging.py DEBUG - Select sssd profile in RHEL9 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Use custom content for auditd_name_format because of different path in EL7. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Use XCCDF value instead of a hard coded value (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update ansible remediation of two umask rules. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Make the ansible remediation of accounts_umask_etc_login_defs simpler. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Fix pwquality.conf.d directory path (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Use XCCDF Value in OCIL and fixtext (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Add checktext to accounts_umask_etc_login_defs (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Add checktext to accounts_umask_etc_csh_cshrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Add checktext key to accounts_umask_etc_bashrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Revert addition of srg_requirement accounts_authorized_local_users (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Replace dnf by pkg_manager variable (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Remove a sentence that isn't a part of SRG requirement (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Remove commented out code (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Move variable setting to SRG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update fapolicyd_prevent_home_folder_access for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update ensure_gpgcheck_local_packages for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update ensure_gpgcheck_globally_activated for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update coredump_disable_backtraces for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update configure_firewalld_ports for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update configure_opensc_card_drivers for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update configure_usbguard_auditbackend for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update configure_tmux_lock_command for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update configure_tmux_lock_after_time for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update configure_bashrc_exec_tmux for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update auditd_data_retention_space_left_percentage (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Add rule auditd_data_retention_admin_space_left_percentage (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update auditd_data_retention_space_left_action for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Add variable for auditd freq (Matthew Burket) 2025-11-21 15:53:25.686 logging.py DEBUG - rename some templated test scenarios to keep consistency (Vojtech Polasek) 2025-11-21 15:53:25.686 logging.py DEBUG - update rule audit_rules_immutable (Vojtech Polasek) 2025-11-21 15:53:25.686 logging.py DEBUG - fix test inconsistencies (Vojtech Polasek) 2025-11-21 15:53:25.686 logging.py DEBUG - remove tests from rules which are covered by template test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.686 logging.py DEBUG - extend tests for audit_rules_login_events and audit_rules_usergroup_modifications templates (Vojtech Polasek) 2025-11-21 15:53:25.686 logging.py DEBUG - Apply suggestions from code review (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to no_host_based_files (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to clean_components_post_updating (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Update rule CCE-83441-6 with RHEL9 STIG assessment (Watson Sato) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to no_user_host_based_files (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Fix row order for SRG VulDiscussion and VulDiscussion (Matthew Burket) 2025-11-21 15:53:25.686 logging.py DEBUG - Add audit_rules_kernel_module_loading_create to RHEL7 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Set the var_password_pam_retry variable closer to the rule (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Fix the module name from pam_pwhistory.so to pam_pwquality.so (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update ocil and ocil_clause in display_login_attempts (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Include checktest for banner_etc_issue rule (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update accounts_passwords_pam_faillock_deny (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update accounts_passwords_pam_faillock_deny_root (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update accounts_passwords_pam_faillock_interval (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update uditd_data_retention_max_log_file_action_stig (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in auditd_data_retention_admin_space_left_action (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Add vuldiscussion in auditd_data_retention_admin_space_left_action (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update srg_requirement in auditd_data_retention_admin_space_left_action (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update fixtext in auditd_data_retention_admin_space_left_action (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update auditd_data_retention_action_mail_acct (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update fixtext in auditd_data_disk_full_action_stig (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update SRG requirement in auditd_data_disk_error_action_stig (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_user_interactive_home_directory_exists (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_user_interactive_home_directory_defined (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update accounts_passwords_pam_faillock_unlock_time (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to auditd_lineinfile template (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to no_tmux_in_shells (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to dir_perms_world_writable_system_owned (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to rule (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Add tests to file_ownership_binary_dirs (Edgar Aguilar) 2025-11-21 15:53:25.686 logging.py DEBUG - Update accounts_password_pam_retry rule (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update audit rules RHEL9 STIG metadata. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Update ocil in accounts_password_pam_pwquality_system_auth (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update ocil in accounts_password_pam_pwquality_password_auth (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update accounts_password_pam_pwhistory_remember_system_auth (Marcus Burghardt) 2025-11-21 15:53:25.686 logging.py DEBUG - Update clean_components_post_updating to align with RHEL9 STIG (Marek Haicman) 2025-11-21 15:53:25.686 logging.py DEBUG - Use auid whenever possible in OCIL macros. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Update chronyd_or_ntpd_set_maxpoll to align with RHEL9 STIG (Marek Haicman) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL accounts_user_home_paths_only (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Unify audit rules with existing macros. (Gabriel Becker) 2025-11-21 15:53:25.686 logging.py DEBUG - Update fixtext in accounts_user_dot_no_world_writable_programs (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_user_dot_no_world_writable_programs (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_umask_interactive_users (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update fixtext in accounts_umask_etc_login_defs (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_umask_etc_login_defs (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update srg_requirement in accounts_umask_etc_csh_cshrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update fixtext in accounts_umask_etc_csh_cshrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_umask_etc_csh_cshrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update srg_requirement in accounts_umask_etc_bashrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update fixtext in accounts_umask_etc_bashrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_umask_etc_bashrc (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Udpate OCIL in accounts_tmout (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Update OCIL in accounts_password_set_min_life_existing (Jan Černý) 2025-11-21 15:53:25.686 logging.py DEBUG - Remove audit_rules_execution_restorecon from SRG control files. (Gabriel Becker) 2025-11-21 15:53:25.687 logging.py DEBUG - Update fixtext for accounts_password_set_max_life_existing (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_ucredit (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update SRG requirement in accounts_password_pam_ucredit (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update SRG requirement in accounts_password_pam_ocredit (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update fixtext in accounts_password_pam_ocredit (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_ocredit (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL and SRG in accounts_password_pam_minlen (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_minclass (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update accounts_password_pam_pwhistory_remember_password_auth (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_maxrepeat (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_maxclassrepeat (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update accounts_password_all_shadowed_sha512 rule (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Update macros from audit privileged commands. (Gabriel Becker) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_lcredit (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update fixtext in accounts_password_pam_enforce_root (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_enforce_root (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update module name in ocil (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_difok (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update srg_requirement in account_password_selinux_faillock_dir (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Update fixtext in account_password_selinux_faillock_dir (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_dictcheck (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_password_pam_dcredit (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_minimum_age_login_defs (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Include checktext in ccounts_umask_etc_profile (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Update ocil and ocil_clause in accounts_umask_etc_profile (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Use XCCDF Value to parametrize fixtext (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - update rule accounts_no_uid_except_zero (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_maximum_age_login_defs (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - update accounts_max_concurrent_login_sessions (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OCIL in accounts_logon_fail_delay (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - update accounts_have_homedir_login_defs (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Update SRG requirement in accounts_authorized_local_users (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - update account_temp_expire_date (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Add vuldiscussion account_unique_id (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update fixtext wording in account_emergency_expire_date (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Update fixtext wording in accounts_umask_etc_profile (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Update srg_requirement in accounts_umask_etc_profile (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - Improve regex to also match line without space (Marcus Burghardt) 2025-11-21 15:53:25.687 logging.py DEBUG - OCP: Correct the default value for var_oauth_inactivity_timeout (Vincent Shen) 2025-11-21 15:53:25.687 logging.py DEBUG - Update accounts_password template's OVAL (Edgar Aguilar) 2025-11-21 15:53:25.687 logging.py DEBUG - Fix tests for kernel_module_dccp_disabled for RHEL 7 (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Improve HTML in utils/tables/reference_tables_template.html (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - fix one test scenario - putting content into wrong file (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - do not return set of groups, we do not need them. They are needed only by the scan_rules_group function (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - if the datastream has not been build, just continue and do not perform loading of rules etc (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - small fixes based on feedback (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Fixed badly placed variable initialization (Matej Tyc) 2025-11-21 15:53:25.687 logging.py DEBUG - OCP: Update kubelet rules to check default kubeletconfig (Vincent Shen) 2025-11-21 15:53:25.687 logging.py DEBUG - Refactored the machine platform test (Matěj Týč) 2025-11-21 15:53:25.687 logging.py DEBUG - In SRG Export change location that rationale is sourced from (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove empty load operation (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Address feedback in #9489 (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Use fully qualified name for ansible module. (Gabriel Becker) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove unnecessary negative lookahead from regex. (Gabriel Becker) 2025-11-21 15:53:25.687 logging.py DEBUG - fix styling issues and remove forgotten no longer used code (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - try to fix one test scenario which fails in CI (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - fixmissing slash in sudoers-d path in ansible remediations (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - remove redundant and duplicate test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - use the macro in other rules which remediate audit waches (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - use the fixed macro in Ansible templates for audit_login_events and audit_usergroup_modification (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - add tests to affected rules (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - modify OVAL checking for Audit watch rules to not require the key (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Improve ansible remediation of accounts_umask_etc_login_defs. (Gabriel Becker) 2025-11-21 15:53:25.687 logging.py DEBUG - improve matching of platform definitions in test_machine_only_rules (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - rewrite test_machine_only_rules test (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Update coredump_disable_storage (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update package_policycoreutils_installed (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update selinux_policytype (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update partition_for_home (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update dconf_db_up_to_date (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update partition_for_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update check and fix text for partitions (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Fix tests in 2 rules used by OL8 (Edgar Aguilar) 2025-11-21 15:53:25.687 logging.py DEBUG - Add OL8 platform to required tests (Edgar Aguilar) 2025-11-21 15:53:25.687 logging.py DEBUG - Add checktext for partition_for_home (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update encrypt_partitions (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update macros for partitions (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Fix ensure_gpgcheck_never_disabled per review (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update package_fapolicyd_installed (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update srg_requirement_package_removed (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Update ensure_gpgcheck_never_disabled (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - modify passing of inherited cpe_platform_names when processing rules and groups (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Add warnings to rules using mount_option_home (Edgar Aguilar) 2025-11-21 15:53:25.687 logging.py DEBUG - Clean up formatting in style guide (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Document the order the new checktext field (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Add section ordering for the platform key (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Fix style guide spelling (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - Add tests to audit privileged commands template (Edgar Aguilar) 2025-11-21 15:53:25.687 logging.py DEBUG - Update OVAL in openssh rule (Edgar Aguilar) 2025-11-21 15:53:25.687 logging.py DEBUG - Fix srg_requirement_package_removed (Matthew Burket) 2025-11-21 15:53:25.687 logging.py DEBUG - change parameter of findmnt used in bash partition conditional (Vojtech Polasek) 2025-11-21 15:53:25.687 logging.py DEBUG - Use service directive to restart auditd service. (Gabriel Becker) 2025-11-21 15:53:25.687 logging.py DEBUG - install_vm.py: add new option for disk size specification (Matus Marhefka) 2025-11-21 15:53:25.687 logging.py DEBUG - Introduce hipaa profile for ol9 (Edgar Aguilar) 2025-11-21 15:53:25.687 logging.py DEBUG - Fix audit_rules_privileged_commands_kmod rule in RHEL7. (Gabriel Becker) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove unused xccdf2table-profilenistrefs.xslt (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove unused xccdf2table-profilenistrefs-cui.xslt (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove unused profilecisrefs.xslt (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove unused xccdf2table-byref.xslt (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove unused xccdf2stigformat.xslt (Jan Černý) 2025-11-21 15:53:25.687 logging.py DEBUG - Remove unused shared_xccdf2html.xslt (Jan Černý) 2025-11-21 15:53:25.688 logging.py DEBUG - Remove unused table-sortbyref.xslt (Jan Černý) 2025-11-21 15:53:25.688 logging.py DEBUG - Remove unused table-add-srgitems.xslt (Jan Černý) 2025-11-21 15:53:25.688 logging.py DEBUG - Remove unused templates cci2html.xsl (Jan Černý) 2025-11-21 15:53:25.688 logging.py DEBUG - Remove unused file includelogo.xslt (Jan Černý) 2025-11-21 15:53:25.688 logging.py DEBUG - Do not print identifiers when there is no actual diff. (Gabriel Becker) 2025-11-21 15:53:25.688 logging.py DEBUG - Fix PEP issues and typos. (Gabriel Becker) 2025-11-21 15:53:25.688 logging.py DEBUG - Table headings should use th vs td elements (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Add lang and doctype to utils/tables/tables_template_common.html (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Update macros to use more STIG like language (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Fix vuldiscussion key in utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: package_gdm_removed: package name is gdm, not quagga (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: sudo_add_use_pty/tests/use_pty_absent.fail.sh: ls iterating files is not needed and is bad actually (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: sudo_add_noexec: Handle situation where /etc/sudoers.d is empty (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: sudo_add_use_pty: Handle situation where /etc/sudoers.d is empty (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: sudo_custom_logfile: Handle situation where /etc/sudoers.d is empty (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: sudoers_validate_passwd/tests: /etc/sudoers.d can be empty (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - change: service_sssd_enabled: add fedora (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: service_sssd_enabled: fix tests (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - bugfix: accounts_password_all_shadowed_sha512: add !* as locked (Markus Linnala) 2025-11-21 15:53:25.688 logging.py DEBUG - Add srg reference for service_chronyd_enabled (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Add srg to references for file_groupowner_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Add srg to references for file_groupowner_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Add srg to references for file_groupowner_etc_group (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Add srg to references for file_groupowner_etc_group (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Add srg to references for file_groupowner_backup_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.688 logging.py DEBUG - Document compare_ds.py (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Make groups inherit platforms from parent groups (Evgeny Kolesnikov) 2025-11-21 15:53:25.688 logging.py DEBUG - Print path where diff files were saved. (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Fix bug in get_check_docs (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Rename variable to clarify they are DISA rule IDs (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Unify compare_rule_texts (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Decouple per rule diffs from STIG mode (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Use difflib to generate platform diff (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Fix PEP8 issues (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Reduce cognitive complexity on compare_checks (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Simplify compare_checks a bit (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Add ol7 platform to existing required tests (Edgar Aguilar) 2025-11-21 15:53:25.688 logging.py DEBUG - Align OL7 tests with RHEL7 ones (Edgar Aguilar) 2025-11-21 15:53:25.688 logging.py DEBUG - Bump version of OL8 to V1R3 and update STIG ids (Edgar Aguilar) 2025-11-21 15:53:25.688 logging.py DEBUG - Align the OVAL and OCIL diff messages (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Rename diff generation funcion (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Standardize diff generation with difflib (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Output rule/check ID instead of old/new datastream (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Standardize function names with similar purpose (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Fix PEP8 isues (Watson Sato) 2025-11-21 15:53:25.688 logging.py DEBUG - Update docs/workshop/README.adoc (Gabriel Becker) 2025-11-21 15:53:25.688 logging.py DEBUG - Update docs/workshop/next_steps_with_complianceascode.adoc (Gabriel Becker) 2025-11-21 15:53:25.688 logging.py DEBUG - Conditional for Ansible remediation on RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove pam_unix_rounds rules (Matthew Burket) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove redundant rules from RHEL9 STIG (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove init_system conditional on xwindows_runlevel_target (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove upstart in disable_ctrlaltdel_reboot (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove upstart handling in require_singleuser_auth (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove upstart handling in rsyslog_cron_logging (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Avoid sed hack (Jan Černý) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove upstart in audit ExecStartPost checks (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix documentation of ocil_timer_enabled macro (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove upstart handling from bash remediation macro (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove upstart from service_enabled template (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Remvoe upstart from service_disabled template (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Include informative message regaring profile selection (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Include srg_requirement and fixtext for enable_authselect (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Minor updates in rule description and style alignment (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Include enable_authselect rule for RHEL9 STIG (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Move kernel_module_disabled use more genric RHEL in conditionals (Matthew Burket) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove RHEL 9 SRG GPOS (Matthew Burket) 2025-11-21 15:53:25.711 logging.py DEBUG - bugfix: tests: do not use sudo, tests are run using root (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - change: sshd_rekey_limit/tests: add correct_value.pass.sh (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - fix: sshd_rekey_limit/tests: rename ospp tests as such (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - fix: sshd_rekey_limit/tests: ensure only proper key match (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - fix: sshd_rekey_limit/tests: drop unnecessary .* (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - fix: sshd_rekey_limit/tests: keys are caseinsensitive (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - bugfix: sshd_rekey_limit/tests: when testing other value, use variable for another (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - bugfix: sshd_rekey_limit/tests: Handle possible /etc/ssh/sshd_config.d files too (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - bugfix: sshd_rekey_limit: use -i instead of -e in sed (Markus Linnala) 2025-11-21 15:53:25.711 logging.py DEBUG - Simplify compare_platforms() a bit (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Move find_boolean_question() to xml.py (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove self argument from compare remediations (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Don't pass self paramenters to its own functions (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Move extraction of rule text to XMLRule class (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Move serialization of OVAL XML elements to class (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Add workshops reference into the main page. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove unused images in the workshop. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add disclaimer that a github, gitlab or bitbucket is required. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Put links to gitpod pointing to official repository. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add lab exercise 2. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix namespace of select elements (Jan Černý) 2025-11-21 15:53:25.711 logging.py DEBUG - Add srg to references for file_permissions_cron_allow (Matthew Burket) 2025-11-21 15:53:25.711 logging.py DEBUG - Update Ansible styleguide to prefix tasks names (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Improve comparison of empty rule elements (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Quit when content is not a STIG Benchmark (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Handle sub elements in rule descriptions (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Separate XML structure from and Diff logic (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Make compare_ds.py output diffs in a separate dir (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Add Rule text comparison (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Add STIG rule mapping between releases (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Parametrize the XCCDF version (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Recognize XCCDF Benchmark arguments (Watson Sato) 2025-11-21 15:53:25.711 logging.py DEBUG - Unselect empty groups during shorthand creation (Jan Černý) 2025-11-21 15:53:25.711 logging.py DEBUG - Improve the test which check config existence (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Update the var_check CheckEnumeration value (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Include test scenario where faillock dir is not set (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Improve remediation to not fail when no dirs are defined (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix missing files in echo commands (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix check_existence enumeration (Marcus Burghardt) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove bash machine platform condition from core pattern empty string. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix help text in utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.711 logging.py DEBUG - Update utils/import_srg_spreadsheet.py based on feedback in #9416 (Matthew Burket) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix 5.10 OVAL validation of core_pattern_empty_string rule. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add variable definition in documents. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add lab5 exercise. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add lab exercise number 4. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add lab exercise 3 to the workshop. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove markdown version of the lab exercise 1. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Improve format and add table of contents. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Update OVAL reference link in lab exercise 1. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Put caption to OSPP image. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix missing content in lab exercise 1 asciidoc. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Fix typo. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove leftover text in the adoc from lab exercise 1. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Lab exercise 1: Update section about commenting on bash remediation. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Update images of lab exercise 1. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add adoc version of the lab exercise 1. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Fixes to lab1 exercise documentation. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Update how to open the guide in the workshop. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add lab1_introduction module. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Add step to copy ospp profile back to workshop setup. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Remove unused setup.sh from workshop files. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Update gitpod with workshop. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Do not copy RHEL8 OSPP profiles in the workshop setup. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Make lab build individually with parameter. (Gabriel Becker) 2025-11-21 15:53:25.711 logging.py DEBUG - Initial import of workshop setup files. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix e2e expected test result for configure_usbguard_auditbackend (Vincent Shen) 2025-11-21 15:53:25.712 logging.py DEBUG - Align ANSSI profiles for SLE platforms with common control spec (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Add SUSE gpgkey rule to ANSSI profile (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Add rules to SLE12 platform in context of ANSSI profiles (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - More doc fixes for (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Exclude rule MD014 from MDL lint (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix CodeClimate errors for utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add docs for utils/import_srg_spreadsheet.py (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add a new script to import changes from a SRG spreadsheet (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Update tests of mount_option_home (Edgar Aguilar) 2025-11-21 15:53:25.712 logging.py DEBUG - Update mount_option_home for edge cases (Edgar Aguilar) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix missing OCIL text and 800-53 references (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Update account_emergency_expire_date (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add checktext and vuldiscussion to rule (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add newline at end of file (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Add explicit dependency (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: regexp: quote .*.suffix properly (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - change: quote dot delim in regexps (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - change: yaml double quote string, quote dot delim in regexps (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - style: jinja: use ~ as concat, not + (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: jinja: avoid concat in macro if not needed (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: bootloader-grub2: no double quote with parameter inside jinja macro (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: restrict_at_cron_users: no double quote with target_perms_octal inside jinja macro (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: ntp: no double quote with chrony_conf_path inside jinja macro (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: aide_check_audit_tools: no double quote with full_name inside jinja macro (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: mount: no double quote with MOUNTPOINT inside jinja macro (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - fix: sshd_rekey_limit: no double quote with parameter inside jinja macro (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - Use correct defition of template value parameter in api_server_bind_address. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - change: quote pam_foo.so in regexps (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - Skip configure_usbguard_auditbackend e2e test (Vincent Shen) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix kernel_module_disabled remediation template (Vincent Shen) 2025-11-21 15:53:25.712 logging.py DEBUG - Update mount_option_home (Edgar Aguilar) 2025-11-21 15:53:25.712 logging.py DEBUG - Create mount_option_home and use it in ol8 (Edgar Aguilar) 2025-11-21 15:53:25.712 logging.py DEBUG - Add more test scenarios for sysctl_kernel_core_pattern_empty_string. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Avoid code duplication (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Add package_xorg-x11-server-common_removed back to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Update configure_libreswan_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add harden SSH crypto rules to RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add firewalld_sshd_port_enabled to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Update dconf_db_up_to_date to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add grub2_disable_interactive_boot to RHEL9 (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add set_firewalld_default_zone to RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add grub2_kernel_trust_cpu_rng to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add sysctl_kernel_exec_shield to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add rules for permissions on /etc/cron.allow to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Refactor: Extract function parse_description (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Add a blank line (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Use short profile ID in the visualization (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Remove unused XSLT template (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Use XCCDF 1.2 and Jinja 2 to generate STIG tables (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Add an alternative script to generate HTML tables (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Refactor: Move function definition (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix PEP8 issue. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix ansible remediation to preserve old non compliant values. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Update configure_libreswan_crypto_policy for the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add ssh_client_rekey_limit to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Add SSHD time out rules back to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix selinux_context_elevation_for_sudo spelling (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix test parse affected to support OVAL with multiple def-group tags. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Address feedback. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Fix return type annotations (Watson Sato) 2025-11-21 15:53:25.712 logging.py DEBUG - Switch bash remediation applicable to all products in sysctl_kernel_core_pattern_empty_string. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Make the conflicts attribute appblicable only to RHEL9. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Refactor so that each rule-result is looped once (Watson Sato) 2025-11-21 15:53:25.712 logging.py DEBUG - Print ID of the executed check during scan (Watson Sato) 2025-11-21 15:53:25.712 logging.py DEBUG - Make code climate indent check better (Matthew Burket) 2025-11-21 15:53:25.712 logging.py DEBUG - Adding rule to DISA STIG for RHEL7 as of V3R7 (Vuln V-250314). (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.712 logging.py DEBUG - Since string is a subset of sequence, it needs to check first for str. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Create custom sysctl_kernel_core_pattern_empty_string content. (Gabriel Becker) 2025-11-21 15:53:25.712 logging.py DEBUG - Skip configure_usbguard_auditbackend to unblock the e2e (Vincent Shen) 2025-11-21 15:53:25.712 logging.py DEBUG - sap_host: solve shellcheck error SC2046 (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - products/jre: silence shellcheck SC2174 (Markus Linnala) 2025-11-21 15:53:25.712 logging.py DEBUG - Convert newlines in strings to use '|-' syntax. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.712 logging.py DEBUG - Sort check-export elements (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Create elements with explicit namespace (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Generate per profile testinfo tables from XCCDF 1.2 (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - Replace platform conditionals in whole remediation code (Jan Černý) 2025-11-21 15:53:25.712 logging.py DEBUG - GRUB2 is not available on s390x (Watson Sato) 2025-11-21 15:53:25.712 logging.py DEBUG - Add more rules to ANSSI profile (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Enable sle support for postfix_network_listening_disabled rule remediations (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Add CCE ids for sle12 and sle15 for postfix_network_listening_disabled in context of anssi profile (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Add CCE id for sle12 rule package_chrony_installed (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Add mount_option rules to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Add SLES CCE ids for mount_option_tmp and mount_option_var_tmp (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Enable SLE12,SLE15 platforms for mount_option_opt_nosuid/noexec,mount_option_var_log_nosuid/noexec,mount_option_var_noexec/nosuid (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Enable SLE12 platform for mount_option_boot_nosuid,mount_option_home_noexec,mount_option_nodev_nonroot_local_partitions (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - Enable SLE12 platform for mount_option_boot_noexec (teacup-on-rockingchair) 2025-11-21 15:53:25.712 logging.py DEBUG - change: sudoers_validate_passwd: suggest cvtsudoers (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - fix: sudoers_default_includedir/tests: sed regexp // are matches .* at beginnin/end not needed (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - fix: sudoers_validate_passwd/tests: check last one (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - bugfix: sudoers_validate_passwd: handle @ includes too (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - Add trim_trailing_whitespace to editorconfig (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix warning when build STIG overlay. (Gabriel Becker) 2025-11-21 15:53:25.713 logging.py DEBUG - Put smartcard rules with pam_pkcs11 out of s390x (Watson Sato) 2025-11-21 15:53:25.713 logging.py DEBUG - Use data stream to generate HTML statistics (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Use data stream to generate stats (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Ensure password pam_pkcs11.so fixed in smartcard-auth (Watson Sato) 2025-11-21 15:53:25.713 logging.py DEBUG - Ensure auth pam_pkcs11.so fixed in smartcard-auth (Watson Sato) 2025-11-21 15:53:25.713 logging.py DEBUG - Add tests for PAM with and without authconfig (Watson Sato) 2025-11-21 15:53:25.713 logging.py DEBUG - smartcard_auth: PAM stack with faildelay enabled (Watson Sato) 2025-11-21 15:53:25.713 logging.py DEBUG - Disable wrong_runtime.fail.sh test scenario for sysctl_kernel_unprivileged_bpf_disabled (Milan Lysonek) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix PEP8 problems (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Rename a variable (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Use data stream in test for missing references (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Add support for data streams in profile_tool.py (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Add support for XCCDF 1.2 to profile_tool (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Save XCCDF namespace as a member of the class (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Extract method (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Quote shell for Ubuntu (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix PREP8 finding. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Remove abort in macro. (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - fix tests to account for both possible locations. (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Prefer distribution location when writing remediations if there is one already there. (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Use search_value to specify SSL Minimum version check instead of needing to reproduce the OVAL check manually. (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Restrict OVAL so that it uses a separate State (so that the search doesn't incorrectly pass a failure) entry and allow for overrides of the OVAL state so that the search term can be overridden. (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Remove unnecessary command substitution (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - style: grub2_bootloader_argument: use multi_platform_rhel instead of listing all (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - fix: grub2_bootloader_argument: fedora grub is like rhel9 (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - fix: grub2_bootloader_argument/tests/invalid_rescue.pass.sh: support arg_variable (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - fix: grub2_bootloader_argument/tests: ensure grub is setup properly (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - style: grub2_bootloader_argument: product ifs (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - fix: grub2_bootloader_argument: use arg_name not audit in comments (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - bugfix: grub2_slub_debug_argument: honor variable var_slub_debug_options (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - add/remove fedora from privileged commands depending if exists or not (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - Update controls/srg_gpos/SRG-OS-000366-GPOS-00153.yml based on review (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - remove ospp reference from sysctl_kernel_core_pattern_empty_string (Vojtech Polasek) 2025-11-21 15:53:25.713 logging.py DEBUG - switch sysctl_kernel_core_pattern_empty_string for sysctl_kernel_core_pattern (Vojtech Polasek) 2025-11-21 15:53:25.713 logging.py DEBUG - Add ubuntu2204 to jinja if statements that were missing. (Juan Antonio Osorio) 2025-11-21 15:53:25.713 logging.py DEBUG - Add Ubuntu 22.04 to build_product (Juan Antonio Osorio) 2025-11-21 15:53:25.713 logging.py DEBUG - Tag Ubuntu CIS reference for 22.04 (Juan Antonio Osorio) 2025-11-21 15:53:25.713 logging.py DEBUG - Tag rules applicable to ubuntu2004 as applicable to ubuntu2204 too (Juan Antonio Osorio) 2025-11-21 15:53:25.713 logging.py DEBUG - Introduce Ubuntu 22.04 (Juan Antonio Osorio) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix test scenario script with invalid fcontext (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Include test scenario for multiple dirs (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix issues with bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix many copy-and-paste issues and improved style (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Improve the rule description for selinux_faillock_dir (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Update a comment (Jan Černý) 2025-11-21 15:53:25.713 logging.py DEBUG - Manually set OVAL check for SSL minimum version to catch tls1.2 or tls1.3 (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Revise bash remediation template to use /etc/firefox/policies instead of /usr/lib64/firefox/distribution (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix incorrect escaping in OCIL for colons (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Clean up OCIL text and some template names. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Mark FFOX-00-000003 as a manual check. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - V6R3: Implementing controls as policy files. * FFOX-00-000002 * FFOX-00-000003 * FFOX-00-000004 * FFOX-00-000009 * FFOX-00-000010 * FFOX-00-000011 * FFOX-00-000014 * FFOX-00-000022 * FFOX-00-000023 * FFOX-00-000024 * FFOX-00-000025 * FFOX-00-000026 * FFOX-00-000027 * FFOX-00-000028 * FFOX-00-000038 * FFOX-00-000039 (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Remove duplicate rule for Top Sites (combined into nonessential_capabilities) (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Remove unused Firefox template. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - V6R3: Remove unused checks (or checks replaced with profile changes) (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Revise Mozilla Firefox STIG profile to V6R3 from upstream. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Add sshd_set_keepalive_0 to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Add ensure_redhat_gpgkey_installed to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Add mount_option_krb_sec_remote_filesystems to the RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix srg_requirement in file_permissions_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - bugfix: build_test_container.sh: actually honor --name/-n (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - Update command in fixtext section (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Add identifiers to rule_dir_json (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Add harden_sshd_ciphers_opensshserver_conf_crypto_policy to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Add sshd_set_idle_timeout to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Add sysctl_net_ipv4_icmp_ignore_bogus_error_responses to RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Add ssh_private_keys_have_passcode to RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Add AUID filters on audit kernel module loading (Watson Sato) 2025-11-21 15:53:25.713 logging.py DEBUG - Revise OVAL template to use backreferences, move DisableDevelopmentTools to policy (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.713 logging.py DEBUG - Move "find python" to a macro (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - Add templates to handle detection of most Firefox Policy json items. Implement several rules with templates. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.713 logging.py DEBUG - fix: sub_var_value: deprecated, use xccdf_value (Markus Linnala) 2025-11-21 15:53:25.713 logging.py DEBUG - Update test scenario scripts to respect symlinks (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Remove auditd_data_retention_max_log_file_action STIG specific test scenario (Milan Lysonek) 2025-11-21 15:53:25.713 logging.py DEBUG - Include leading caret to regex (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Remove DCCP from RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix srg_requirement in fapolicyd_prevent_home_folder_access (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix srg_requirement in no_empty_passwords_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix srg_requirement in file_permissions_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Remove nss-tools from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.713 logging.py DEBUG - Fix order of CCEs (anivan-suse) 2025-11-21 15:53:25.713 logging.py DEBUG - Ensure the expected values for test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Optimize Ansible remediation for accounts_password_set_max_life_existing (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Change the command which set the max age for passwords (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Increment exclusion filter for accounts_password_all_shadowed_sha512 (Marcus Burghardt) 2025-11-21 15:53:25.713 logging.py DEBUG - Mask password field in accounts_password_all_shadowed_sha512 (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Include pass test scenario for accounts_password_all_shadowed_sha512 (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Include remediation header in fail scripts without remediation (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Mask password field in accounts_password_all_shadowed (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Mask password field in accounts_password_set_max_life_existing (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Aligned the OVAL content to style guide (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Add selinux_state rule to ANSSI (anivan-suse) 2025-11-21 15:53:25.714 logging.py DEBUG - Don't select the variable selector 'default' (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Move rule to correct profile (anivan-suse) 2025-11-21 15:53:25.714 logging.py DEBUG - audit_rules_suid_privilege_function: test spaces in other_key.pass.sh (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - audit_rules_suid_privilege_function: drop miss_k.fail.sh as unnecessary (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - audit_rules_suid_privilege_function: only one arch rule (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - change: audit_rules_suid_privilege_function: better regexp (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - change: audit_rules_suid_privilege_function: add fedora (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - fix: audit_rules_suid_privilege_function: rename no rules as such (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - bugfix: sudo_add_umask: xccdf_value is jinja macro, use as such (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - change: prefer xccdf_value instead of sub_var_value (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - fix: test_xccdf_values_in_ds.sh: check sub_var_value too (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - fix: SSG_SHELLCHECK_BASH_FIXES_VALIDATION_ENABLED: drop discourage (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - change: shellcheck_wrapper.sh: use bash nullglob (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - Shorten platform header and fix typo in rule.yml (Edgar Aguilar) 2025-11-21 15:53:25.714 logging.py DEBUG - Mark arguments as required (Jan Černý) 2025-11-21 15:53:25.714 logging.py DEBUG - Add git package to the Ansible Role test github action. (Gabriel Becker) 2025-11-21 15:53:25.714 logging.py DEBUG - feature: ssg parsing: add sometimes external_variable related asserts (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - Specify output file names (Jan Černý) 2025-11-21 15:53:25.714 logging.py DEBUG - Add package_chrony_installed rule to ANSSI (anivan-suse) 2025-11-21 15:53:25.714 logging.py DEBUG - Move the RHEL 9 STIG to use the srg_gpos control (Matthew Burket) 2025-11-21 15:53:25.714 logging.py DEBUG - fix: fedora has dedicated_ssh_keyowner ssh_keys (Markus Linnala) 2025-11-21 15:53:25.714 logging.py DEBUG - Don't fail rule if /etc/grubenv missing on s390x (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Add tests to rule about pam_faillock_silent (Edgar Aguilar) 2025-11-21 15:53:25.714 logging.py DEBUG - Create rule to cover OL08-00-020018 & 020019 (Edgar Aguilar) 2025-11-21 15:53:25.714 logging.py DEBUG - Update build-scripts/verify_references.py (Gabriel Becker) 2025-11-21 15:53:25.714 logging.py DEBUG - Packit: change Fedora test target to be the latest released Fedora (Matus Marhefka) 2025-11-21 15:53:25.714 logging.py DEBUG - Rearrange criteria in sysctl template to previous correct behavior. (Gabriel Becker) 2025-11-21 15:53:25.714 logging.py DEBUG - Add oracle and ubuntu href references to OVAL verify references test. (Gabriel Becker) 2025-11-21 15:53:25.714 logging.py DEBUG - Include warning about the pam_securetty.so PAM module (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Simplify platform value in no_direct_root_logins remediation (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Align no_direct_root_logins OVAL with style guide (Marcus Burghardt) 2025-11-21 15:53:25.714 logging.py DEBUG - Do not use the sshd service disabled OVAL in sshd_set_max_auth_tries. (Gabriel Becker) 2025-11-21 15:53:25.714 logging.py DEBUG - Remove executable permissions for disa-stig-rhel7-v3r8-xccdf-scap.xml (Juan Antonio Osorio) 2025-11-21 15:53:25.714 logging.py DEBUG - Avoid use of json_query and additional dependency (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Access the mounts via ansible_mounts (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - DISA looks for a very specific set of configurations (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.714 logging.py DEBUG - Set RHEL7-specific override files to satisfy DISA STIG (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.714 logging.py DEBUG - Allow context elevation for sudo in multiple files (Federico Ramirez) 2025-11-21 15:53:25.714 logging.py DEBUG - Allow sudoers_validate_passwd in multiple files (Federico Ramirez) 2025-11-21 15:53:25.714 logging.py DEBUG - Add SRG requirement and fixtext macros (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.714 logging.py DEBUG - Allow timestamp_timeout config in several files (Federico Ramirez) 2025-11-21 15:53:25.714 logging.py DEBUG - OL7 DISA STIG v2r8 update (Federico Ramirez) 2025-11-21 15:53:25.714 logging.py DEBUG - Add the AUID filters on audit kernel module rules (Federico Ramirez) 2025-11-21 15:53:25.714 logging.py DEBUG - Add perm filter for OL7 privileged commands rules (Federico Ramirez) 2025-11-21 15:53:25.714 logging.py DEBUG - add 4 rules back to RHEL9 datastream (Vojtech Polasek) 2025-11-21 15:53:25.714 logging.py DEBUG - Fix typo in audit_access_success_aarch64 rule title. (Gabriel Becker) 2025-11-21 15:53:25.714 logging.py DEBUG - Use get blob when file is bigger than 1M in ansible roles conversion. (Gabriel Becker) 2025-11-21 15:53:25.714 logging.py DEBUG - Fix CMake dependencies (Jan Černý) 2025-11-21 15:53:25.714 logging.py DEBUG - Ignore invalid or non existing include objects (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Align Ansible remediation with Bash (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Should have been delete with "git mv" but was not (Earl Sampson) 2025-11-21 15:53:25.714 logging.py DEBUG - Add test for for missing rsyslog included files (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Don't parse hidden config files for Includes (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Reset the arrays before using them (Watson Sato) 2025-11-21 15:53:25.714 logging.py DEBUG - Added platform. (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - Fixed incorrect parsing of rules in old code (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - Match glob() function of rsyslog (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - Rsyslog says we should include all files (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - Update test files. (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - Cover the include pattern '/etc/rsyslog.d/' (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - The way using 'find' can be retired. (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - Add test for wildcard paths used in rsyslog (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - A better fix. (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - rsyslog: Fix array creation when path has wildcard (Flos Lonicerae) 2025-11-21 15:53:25.714 logging.py DEBUG - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_create/ansible/shared.yml (Joseph Lenox) 2025-11-21 15:53:25.714 logging.py DEBUG - The test now accepts mulitple users in the same group. (sampsone) 2025-11-21 15:53:25.714 logging.py DEBUG - Add the platform applicability to relevant rules (Matej Tyc) 2025-11-21 15:53:25.714 logging.py DEBUG - Improve code style (Matej Tyc) 2025-11-21 15:53:25.714 logging.py DEBUG - Use partition exist platforms on a real rule (Matej Tyc) 2025-11-21 15:53:25.714 logging.py DEBUG - Add platforms for partition existence (Matej Tyc) 2025-11-21 15:53:25.714 logging.py DEBUG - switch rule grub2_disable_interactive_boot for grub2_disable_recovery in rhel8 ospp (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Extend rule to audit uses of kmod on RHEL7 to satisfy DISA STIG. (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.715 logging.py DEBUG - Implement DISA check for auditing create_module for RHEL7. (Lenox, Joseph D (Joseph)) 2025-11-21 15:53:25.715 logging.py DEBUG - SUSE fix file_groupownership_home_directories (sampsone) 2025-11-21 15:53:25.715 logging.py DEBUG - fix ocils (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Reintroduce back the sshd timeout rules in RHEL8 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.715 logging.py DEBUG - Avoid very long lines by renaming varaible (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Fix CodeClimate problems (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Update a comment (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Add SUSE remote content to verify_references.py (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Use data stream to verify references (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - make sysctl_kernel_core_pattern conflicting with sysctl_kernel_core_pattern_empty_string (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - describe beneficial dependency between sysctl_kernel_core_pattern_empty_string and sysctl:kernel_core_uses_pid (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - add rule to RHEL9 OSPP profile (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - add new rule setting kernel.core_pattern to empty string (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - add new rule sysctl_kernel_core_uses_pid (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - remove conditional from sysctl templated OVAL (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - remove unneeded coredump related rules from rhel9 ospp (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Update RHEL7 STIG to V3R8 (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R8 (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R8 (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Build 5.10 content for sanity test. (Gabriel Becker) 2025-11-21 15:53:25.715 logging.py DEBUG - Fix build in OVAL 5.10 mode. (Gabriel Becker) 2025-11-21 15:53:25.715 logging.py DEBUG - Update linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_loghost/rule.yml (vojtapolasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Apply suggestions from code review (vojtapolasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Add Kubernets remediation for rule configure_crypto_policy (vincent056) 2025-11-21 15:53:25.715 logging.py DEBUG - add warning to the rsyslog_remote_loghost rule about configuring queues (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - OCP4: Look at rendered-config-xyz when checking FIPS, consolidate two rules (Jakub Hrozek) 2025-11-21 15:53:25.715 logging.py DEBUG - add warning to audit_rules_for_ospp because the same case as audit_basic_configuration applies (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Add an empty line (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Use XCCDF 1.2 to create a STIG overlay (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Extend create-stig-overlay.py to accept XCCDF 1.2 (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Remove unused import (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Fix a traceback in help (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Generate CCE tables from data stream (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - update profile stability test (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Fix CodeClimate problem (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Fix rule sudo_custom_logfile (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - change authselect profile to minimal in rhel8 ospp (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - change authselect profile to minimal in rhel9 ospp (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - fix ospp references (Vojtech Polasek) 2025-11-21 15:53:25.715 logging.py DEBUG - Use data stream to verify profile titles and descriptions (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Stop validating ssg-product-xccdf.xml (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Use data stream to build Ansible Playbooks and Bash scripts (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Add the AUID filters on audit kernel module rules (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Add perm filter for RHEL7 privileged commands rule (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Remove useless whitespace chars from references. (Gabriel Becker) 2025-11-21 15:53:25.715 logging.py DEBUG - Update OCIL check along with the rule (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Gitpod: move ssh into workspace so it's persisted between sessions. (Gabriel Becker) 2025-11-21 15:53:25.715 logging.py DEBUG - Improve definition's comments (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Restrict sysctl multivalue compliance to rhel and ol (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Remove variable selector that will result in error (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Make rule for kptr_restrict accept two values (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Make rule sysctl ipv4 rp_filter accept two values (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Add ol9 to jinja conditionals (Edgar Aguilar) 2025-11-21 15:53:25.715 logging.py DEBUG - Introduce e8 profile for ol9 (Edgar Aguilar) 2025-11-21 15:53:25.715 logging.py DEBUG - Accept sudoers files without includes as compliant (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Add rsyslogd to the list of tools check by aide (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Support commas in variables (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Better align with RHEL-08-040259 (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Add rule for sysctl net.ipv4.conf.all.forwarding (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Add tests to account_password_selinux_faillock_dir (Edgar Aguilar) 2025-11-21 15:53:25.715 logging.py DEBUG - Add automation content to a rule (Edgar Aguilar) 2025-11-21 15:53:25.715 logging.py DEBUG - Add OVAL to fapolicy_default_deny (Edgar Aguilar) 2025-11-21 15:53:25.715 logging.py DEBUG - Update RHEL8 STIG to V1R7 (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R6 (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R7 (Watson Sato) 2025-11-21 15:53:25.715 logging.py DEBUG - Mention both values 1 and 2 in the rule description (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Remove RHEL 8 STIG ID (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Improve documentation of the sysctl template (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Add a variable sysctl_kernel_unprivileged_bpf_disabled_value (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Rename parameter missing_static_pass (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Rename a template parameter (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Replace the sysctlval_remediate template parameter (Jan Černý) 2025-11-21 15:53:25.715 logging.py DEBUG - Simplify sysctl template (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Change test_config.yml (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Introduce sysctlval_wrong parameter (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Document the missing_static_pass option (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Document that sysctlval can be a list (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Use rule sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Add test scenarios for rule sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Introduce new rule sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Accept multiple values in the sysctl remediation (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Add option to allow system default (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Allow multiple values in sysctl static configuration (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Move check unrelated to the test scenarios (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Use a list of values in sysctl template (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Rename IDs in sysctl OVAL template (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Remove a rule from RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix broken XCCDF Values in Chromium (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Add test for broken XCCDF Values (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix broken XCCDF values (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - ssg/constants.py: fix the alinux3 full name error (YiLin.Li) 2025-11-21 15:53:25.716 logging.py DEBUG - ssg/constants.py: fix the alinux2 full name error (YiLin.Li) 2025-11-21 15:53:25.716 logging.py DEBUG - Gathering chrony conf field does not change system (sampsone) 2025-11-21 15:53:25.716 logging.py DEBUG - Reword description of account_disable_inactivity (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix titles in accounts_passwords_pam_faillock_audit (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update pam_faillock_parameter_value macros (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Install ansible for the extra modules (Watson Sato) 2025-11-21 15:53:25.716 logging.py DEBUG - Never add OCIL for security_patches_up_to_date (Watson Sato) 2025-11-21 15:53:25.716 logging.py DEBUG - Introcuce a shortcut for --datastream-only (Matej Tyc) 2025-11-21 15:53:25.716 logging.py DEBUG - fix white space problem (Earl Sampson) 2025-11-21 15:53:25.716 logging.py DEBUG - Remove unused import (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Double quote sysctl values (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Avoid data duplication (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Avoid data duplication (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Avoid confusion (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Extract method _find_tests_paths (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - OCP: Fix rule kubelet_configure_event_creation (vincent056) 2025-11-21 15:53:25.716 logging.py DEBUG - Add tests to accounts_passwords_pam_faillock_audit (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Add automated content to a rule (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update contributors for v0.1.63 release (Watson Sato) 2025-11-21 15:53:25.716 logging.py DEBUG - Update gitpod HTML preview extension. (Gabriel Becker) 2025-11-21 15:53:25.716 logging.py DEBUG - Align test scenario value with variable's values. (Gabriel Becker) 2025-11-21 15:53:25.716 logging.py DEBUG - SUSE SLE15 add messagebus and nscd to authorized_local_users (sampsone) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Update rule to accept binaries with GID > 1000 (Watson Sato) 2025-11-21 15:53:25.716 logging.py DEBUG - Add system account owned file test scenario (Watson Sato) 2025-11-21 15:53:25.716 logging.py DEBUG - Update shared.yml (Earl Sampson) 2025-11-21 15:53:25.716 logging.py DEBUG - Extract function load_local_test_scenarios (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Extract function load_templated_test_scenarios (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Update SRG-APP-000131-CTR-000285 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.716 logging.py DEBUG - Move variable definition nearer its usage (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Separate finding paths from loading test scenarios (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Update SRG-APP-000069-CTR-000125 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update SRG-APP-000068-CTR-000120 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update SRG-APP-000039-CTR-000110 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.716 logging.py DEBUG - SUSE update chronyd max poll to support chrony.d (sampsone) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix Code Climate problem (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Remove a confusing sentence (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Rename variables (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix bash remediation in rsyslog_remote_access_monitoring rule (Marcus Burghardt) 2025-11-21 15:53:25.716 logging.py DEBUG - Separate locating test scenarios (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Improve bash_ensure_pam_module_line macro (Marcus Burghardt) 2025-11-21 15:53:25.716 logging.py DEBUG - Extract method (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Refactor by merging functions (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Remove unused parameters (Jan Černý) 2025-11-21 15:53:25.716 logging.py DEBUG - Include test scenario for accounts_password_pam_retry rule (Marcus Burghardt) 2025-11-21 15:53:25.716 logging.py DEBUG - Improve wording in pwhistory_remember rules (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update tests to use authselect when available (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update pam_pwhistory_remember rule (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update tests in pam_pwhistory_remember rules (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update var_password_pam_remember_control_flag (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Improve remediation which enable pam_faillock.so (Marcus Burghardt) 2025-11-21 15:53:25.716 logging.py DEBUG - Improve regex to match retry parameter (Marcus Burghardt) 2025-11-21 15:53:25.716 logging.py DEBUG - Create FMF test plans for destructive and non-destructive tests (Milan Lysonek) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix ansible role condition when a package/service rule id has hyphen. (Gabriel Becker) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix pep issues. (Gabriel Becker) 2025-11-21 15:53:25.716 logging.py DEBUG - Create rule to cover OL08-00-020261 (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Create rule to cover OL08-00-020260 (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Include ol9 product to jinja conditionals (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Improve ol9 anssi rules wording (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Introduce anssi profiles to ol9 (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Update macro bash_ensure_pam_module_line (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Fix typos in accounts_password_pam_retry (Edgar Aguilar) 2025-11-21 15:53:25.716 logging.py DEBUG - Address maintainer comments (pam_retry rule) (Edgar Aguilar) 2025-11-21 15:53:25.717 logging.py DEBUG - Update ansible macro for systems without authselect (Edgar Aguilar) 2025-11-21 15:53:25.717 logging.py DEBUG - Update accounts_password_pam_retry behavior (Edgar Aguilar) 2025-11-21 15:53:25.717 logging.py DEBUG - Condition run of newaliases to its availability (Watson Sato) 2025-11-21 15:53:25.717 logging.py DEBUG - Update SRG-APP-000038-CTR-000105 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.717 logging.py DEBUG - Update SRG-APP-000126-CTR-000275 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.717 logging.py DEBUG - Update SRG-APP-000111-CTR-000220 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.717 logging.py DEBUG - Update SRG-APP-000092-CTR-000165 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.717 logging.py DEBUG - Remove rules for package removal from RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.717 logging.py DEBUG - The RHEL 9 OSPP gets out of Draft phase. (Jan Pazdziora) 2025-11-21 15:53:25.717 logging.py DEBUG - Update the OSPP SFR references in the profile file for the Annex items. (Jan Pazdziora) 2025-11-21 15:53:25.717 logging.py DEBUG - Clarify that management and audit servers are not selected in trusted channel SFR. (Jan Pazdziora) 2025-11-21 15:53:25.717 logging.py DEBUG - Refer to the actual protection profile page. (Jan Pazdziora) 2025-11-21 15:53:25.717 logging.py DEBUG - Add OL platform to tests (Federico Ramirez) 2025-11-21 15:53:25.717 logging.py DEBUG - Refactor ansible role with STIG references code. (Gabriel Becker) 2025-11-21 15:53:25.717 logging.py DEBUG - Add DISA STIG ids to ansible when conditions in roles. (Gabriel Becker) 2025-11-21 15:53:25.717 logging.py DEBUG - Add OL9 to jinja conditionals (Federico Ramirez) 2025-11-21 15:53:25.717 logging.py DEBUG - Exclude OL9 from remediations (Federico Ramirez) 2025-11-21 15:53:25.717 logging.py DEBUG - Add OL9 platform to remediations for stig profile (Federico Ramirez) 2025-11-21 15:53:25.717 logging.py DEBUG - Introduce draft stig profile for OL9 (Federico Ramirez) 2025-11-21 15:53:25.717 logging.py DEBUG - remove rules from rhel8 ospp (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - change not aarch64 specific rules to be not applicable on rhel9 if we are on aarch64 (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - make audit aarch64 rules rhel9 only (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - remove rule from rhel9 ospp (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - remove umask related rules from rhel9 ospp (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - Don't pass sssd rules when sssd.conf is absent (Watson Sato) 2025-11-21 15:53:25.717 logging.py DEBUG - remove redundant rules from rhel9 ospp (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - remove rule from rhel9 ospp profile (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - remove 4 rules from rhel9 ospp (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - Remove unrelated rule from CIS RHEL8 control (Watson Sato) 2025-11-21 15:53:25.717 logging.py DEBUG - Move iptables rules to related_rules (Watson Sato) 2025-11-21 15:53:25.717 logging.py DEBUG - fix CCE assignments after rebase (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - Remove unused build option (Jan Černý) 2025-11-21 15:53:25.717 logging.py DEBUG - make newly added rules RHEL9 only (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add new rules to rhel9 ospp profile (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_perm_change_success ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_perm_change_failed for ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_owner_change_success aarch64 (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_owner_change_failed ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_ospp_general ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_module_load ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit modify_success ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_modify_failed ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_delete_success ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_delete_failed ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_create_success ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_create_failed ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_access_success ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add audit_access_failed_ppc64le (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - add ppc64le applicability platform (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - Fix OCP rule kubelet_enable_client_cert_rotation (vincent056) 2025-11-21 15:53:25.717 logging.py DEBUG - Remove CentOS 6 and SL 6 from the project (Matthew Burket) 2025-11-21 15:53:25.717 logging.py DEBUG - Remove duplicate keys for alinux (Matthew Burket) 2025-11-21 15:53:25.717 logging.py DEBUG - Fix pre tag in ocil_mount_option (Matthew Burket) 2025-11-21 15:53:25.717 logging.py DEBUG - The FMT_MOF_EXT.1 only deals with restricting management functions to administrator, the functions themselves are listed in FMT_SMF_EXT.1. (Jan Pazdziora) 2025-11-21 15:53:25.717 logging.py DEBUG - update test scenarios of postfix_client_configure_mail_alias to install postfix (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - make rule rhel9 aware and add it to stig profile (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - correct ansible remediatiation postfix_client_configure_mail_alias (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - use fixtext macro (Vojtech Polasek) 2025-11-21 15:53:25.717 logging.py DEBUG - Update linux_os/guide/services/mail/package_postfix_installed/rule.yml (vojtapolasek) 2025-11-21 15:53:25.717 logging.py DEBUG - Add more sysctl rules to intermediary profile (anivan-suse) 2025-11-21 15:53:25.717 logging.py DEBUG - Add headers to remediations in faillock_dir rule (Edgar Aguilar) 2025-11-21 15:53:25.717 logging.py DEBUG - Add more ANSSI Intermediary Rules (anivan-suse) 2025-11-21 15:53:25.717 logging.py DEBUG - Automatus: close hanging tempfiles descriptors (Matus Marhefka) 2025-11-21 15:53:25.717 logging.py DEBUG - Add pass and fail tests for auditd_audispd_disk_full_action rule (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Update CIS RHEL8 2.2.18 requirement to mask nfs-server (Marcus Burghardt) 2025-11-21 15:53:25.737 logging.py DEBUG - Update the service_nfs_disabled for CIS RHEL8 v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.737 logging.py DEBUG - Add oval check, bash and ansible remediation for auditd_audispd_disk_full_action rule (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - change remediations to include the "=" sign (Vojtech Polasek) 2025-11-21 15:53:25.737 logging.py DEBUG - add rule to rhel8 stig profiles (Vojtech Polasek) 2025-11-21 15:53:25.737 logging.py DEBUG - add new rule (Vojtech Polasek) 2025-11-21 15:53:25.737 logging.py DEBUG - Add user session timeout rules to ANSSI enhanced profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add rules for Uninstalling SELinux Policy Debugging Tools to ANSSI SLE high profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sebool_polyinstantiation_enabled to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sebool rules for execheap insmod and ssh login to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add ANSSI high profile for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sysctl_vm_mmap_min_addr rule to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sysctl_kernel_yama_ptrace_scope to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sysctl_kernel_sysrq to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sysctl_kernel_pid_max to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add rules that restricts the use of the perf system to ANSSI SLE profiles (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add enhanced ANSSI profile for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sysctl_kernel_modules_disabled to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add sysctl_kernel_dmesg_restrict rule to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add NX/DX setting rules to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add rule sysctl_fs_suid_dumpable to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add to SLE12 and SLE15 ANSSI profile rules for sysctl_fs_protected_symlinks (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Introduce sebool description and ocil macros (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Bump version to 0.1.64 (Watson Sato) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix PEP8 issue and useless assignment in rule_dir_json.py (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix copy paste error in test_build_cpe.py (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix usage of fix_file_prompt in utils/fix_rules.py (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix error message in rule test_suite (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Remove 3 package rules from RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.737 logging.py DEBUG - Remove 3 crypto rules from RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.737 logging.py DEBUG - Presence of the argument enables interactive boot (Watson Sato) 2025-11-21 15:53:25.737 logging.py DEBUG - Improve rule description and fix wrt rhcos4 (Matej Tyc) 2025-11-21 15:53:25.737 logging.py DEBUG - Add tests for accounts_passwords_pam_faillock_dir (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Create rule to cover OL08-00-020016 & 020017 (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Update linux_os/guide/system/auditing/policy_rules/audit_immutable_login_uids/rule.yml (vojtapolasek) 2025-11-21 15:53:25.737 logging.py DEBUG - Remove rule dnf-automatic_security_updates_only from RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.737 logging.py DEBUG - Ensure the Ansible shell command don't fail (Watson Sato) 2025-11-21 15:53:25.737 logging.py DEBUG - Define the dedicated_ssh_keyowner in RHCOS4 product to ssh_keys. (Gabriel Becker) 2025-11-21 15:53:25.737 logging.py DEBUG - Revert "Fix copy paste error in test_build_cpe.py" (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Revert "Fix PEP8 issue and useless assignment in rule_dir_json.py" (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix copy paste error in test_build_cpe.py (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix PEP8 issue and useless assignment in rule_dir_json.py (Matthew Burket) 2025-11-21 15:53:25.737 logging.py DEBUG - Add missing rules to OL8 STIG (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Add template to firewalld-backend (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Update platform in test (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Update rule no_empty_passwords (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Minor fix to OVAL check files storing. (Gabriel Becker) 2025-11-21 15:53:25.737 logging.py DEBUG - Update rationale for package_iptables-services_installed (Marcus Burghardt) 2025-11-21 15:53:25.737 logging.py DEBUG - Re-introduce former check features (Matej Tyc) 2025-11-21 15:53:25.737 logging.py DEBUG - Amend OSPP references for some package_*_installed rules. (Jan Pazdziora) 2025-11-21 15:53:25.737 logging.py DEBUG - Inform the package name for systemd-journald service unit (Marcus Burghardt) 2025-11-21 15:53:25.737 logging.py DEBUG - Update CIS L2 test for configure_crypto_policy (Watson Sato) 2025-11-21 15:53:25.737 logging.py DEBUG - Make the Ansible remediation less generic (Matej Tyc) 2025-11-21 15:53:25.737 logging.py DEBUG - Add a supercompliance test scenario. (Matej Tyc) 2025-11-21 15:53:25.737 logging.py DEBUG - Add automated content to a rule (Edgar Aguilar) 2025-11-21 15:53:25.737 logging.py DEBUG - Include package_iptables-services_installed rule (Marcus Burghardt) 2025-11-21 15:53:25.737 logging.py DEBUG - Only store OVAL checks that are applicable to the product. (Gabriel Becker) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix CIS RHEL8 titles for 2.2.5 and 5.3.5 ids (Marcus Burghardt) 2025-11-21 15:53:25.737 logging.py DEBUG - Ensure audit is installed in test scenarios (Watson Sato) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix typo's (Håvard F. Aasen) 2025-11-21 15:53:25.737 logging.py DEBUG - Command 'chown', change from '.' to ':' separator (Håvard F. Aasen) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix man-page header for lexgrog (Håvard F. Aasen) 2025-11-21 15:53:25.737 logging.py DEBUG - Add test scripts for auditd_audispd_network_failure_action rule (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add SLE12 CCE ids for file_owner_etc_gshadow and file_permissions_etc_gshadow rules (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Drop sle12 support from accounts_password_pam_ucredit rule since it duplicates with cracklib_accounts_password_pam_ucredit (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Drop sle12 support from accounts_password_pam_ocredit rule since it duplicates with cracklib_accounts_password_pam_ocredit (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Drop sle12 support from accounts_password_pam_minlen rule since it duplicates with cracklib_accounts_password_pam_minlen (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Drop sle12 support from accounts_password_pam_dcredit rule since it duplicates with cracklib_accounts_password_pam_dcredit (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Drop sle12 support from accounts_password_pam_unix_remember rule since it duplicates with accounts_password_pam_pwhistory_remember (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Drop debug printout and prefer line length over indentation (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - More code climate minor improvements (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Reduce code complexity (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Add long profiles option to missin_cces test (teacup-on-rockingchair) 2025-11-21 15:53:25.737 logging.py DEBUG - Move OVAL templated checks to a folder called checks_from_template. (Gabriel Becker) 2025-11-21 15:53:25.737 logging.py DEBUG - Store intermediate OVAL check files into the build directory. (Gabriel Becker) 2025-11-21 15:53:25.737 logging.py DEBUG - Fix check and remediation wrt POSIX CLI standard (Matej Tyc) 2025-11-21 15:53:25.737 logging.py DEBUG - Don't treat missing file as failure (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - Relaxed the chrony user check (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove authselect profile select from RHEL8 and RHEL9 kickstarts (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update profile stability for rhel8 STIG (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Add var_authselect_profile to RHEL8 and RHEL9 STIG profiles (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Add references to enable_authselect (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Add enable_authselect to RHEL 8 and RHEL 9 STIG profiles (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove the vendor-zipfile and redhat-zipfile targets (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Removed iptables and ip6tables rules from CIS RHEL8 controlfile (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix missing identifiers and references in rules (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Change false to true where needed (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix Ansible tests for Fedora building (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update Fedora linker checker to Fedora latest (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update Fedora Dockerfile to latest (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update Ubuntu docker file (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Configure markdownlint (mld) via .mdlrc and style file (Evgeny Kolesnikov) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove obsolete one-off scripts following the Style Guide (Evgeny Kolesnikov) 2025-11-21 15:53:25.738 logging.py DEBUG - Configure markdownlint (mld) via .mdlrc (Evgeny Kolesnikov) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix Style Guide formatting according to mdl (markdownlint) (Evgeny Kolesnikov) 2025-11-21 15:53:25.738 logging.py DEBUG - Extract Project-level recommendations from General Coding Style and add the entry about one-off scripts (Evgeny Kolesnikov) 2025-11-21 15:53:25.738 logging.py DEBUG - Python 2 has been removed from Fedora (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Include fedora product in the macro conditional for sssd_enable_smartcards (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Add missing CCES for SLE15 (teacup-on-rockingchair) 2025-11-21 15:53:25.738 logging.py DEBUG - Tune missing CCEs test for SLE platform (teacup-on-rockingchair) 2025-11-21 15:53:25.738 logging.py DEBUG - Add ability to filter missing cces by profile list (teacup-on-rockingchair) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix test syntax (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - Replace lowercase "pam" by "PAM" in description (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update CIS RHEL8 controlfile to v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Added the original rhcos4 behavior to the PR (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove CIS RHEL8 reference for rules not present on v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update RHEL8 CIS refereces for system maintainance rules (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update RHEL8 CIS refereces for access, authentication and authorization rules (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update RHEL8 CIS refereces for logging and auditing rules (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update RHEL8 CIS refereces for network configuration rules (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update RHEL8 CIS refereces for services rules (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update RHEL8 CIS refereces for initial setup rules (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Add missing cce test for SLE platforms (teacup-on-rockingchair) 2025-11-21 15:53:25.738 logging.py DEBUG - Add tests in faillock rules (Edgar Aguilar) 2025-11-21 15:53:25.738 logging.py DEBUG - Improve faillock related macros (Edgar Aguilar) 2025-11-21 15:53:25.738 logging.py DEBUG - Add oval,bash and ansible for auditd_audispd_network_failure_action rule (teacup-on-rockingchair) 2025-11-21 15:53:25.738 logging.py DEBUG - Reduce the list of FIPS crypto policies (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove yp-related rules from RHEL9 (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - Solve the issue of dedicated ssh key groups. (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - Extract file mode check to an extend definition (Jan Černý) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix assigned STIG id to set_password_hashing_min_rounds_logindefs rule (teacup-on-rockingchair) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove SLES-15-010250 rule to follow up updated of DISA STIG (teacup-on-rockingchair) 2025-11-21 15:53:25.738 logging.py DEBUG - Update description in RHEL8 CIS profiles and controlfile for v2.0.0 (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Include test scenarios for missing /etc/sssd/sssd.conf (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update OVAL assessment for sssd_enable_smartcards (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Include relevant test scenarios for sssd_enable_smartcards rule (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update Ansible remediation for sssd_enable_smartcards (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update Bash remediation for sssd_enable_smartcards (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Update the sssd_enable_smartcards rule description (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix spacing in ansible (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix tests (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - Modified the rule description. (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - Added tests for the new behavior. (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - De-template the rule (Matej Tyc) 2025-11-21 15:53:25.738 logging.py DEBUG - remove rule from rhel9 ospp (Vojtech Polasek) 2025-11-21 15:53:25.738 logging.py DEBUG - Clean up small typos (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - controls/cis_alinux2.yml: modify the check value error of some rules (YiLin.Li) 2025-11-21 15:53:25.738 logging.py DEBUG - BUG: 2105878 OCP: Fix rule ocp4-kubelet-enable-streaming-connections (vincent056) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix typo in wrong_value.fail.sh (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - SUSE dconf_gnome_screensaver_lock_enabled fix bash and ansible remediation (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - Mark tasks that don't make changes (Watson Sato) 2025-11-21 15:53:25.738 logging.py DEBUG - Set pipefail in Ansible shell commands with pipe (Watson Sato) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove the secret from file (vincent056) 2025-11-21 15:53:25.738 logging.py DEBUG - bash remediation prepends a blank line (Vojtech Polasek) 2025-11-21 15:53:25.738 logging.py DEBUG - Enhance the bash_ensure_pam_module_line macro capabilities (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Create Bash macro to apply authselect changes (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Align bash_ensure_pam_module_line to the Ansible equivalent (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - revert back usage of audit_file_contents template (Vojtech Polasek) 2025-11-21 15:53:25.738 logging.py DEBUG - Unify the rhel approach for the rule (Watson Sato) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix missing condition for Ansible authselect backup task (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - Create macro for authselect backup - Ansible (Marcus Burghardt) 2025-11-21 15:53:25.738 logging.py DEBUG - SLE15 SP4 audit_rules_augenrules broken. (sampsone) 2025-11-21 15:53:25.738 logging.py DEBUG - add ansible conditionals to CPE platforms determining architecture (Vojtech Polasek) 2025-11-21 15:53:25.738 logging.py DEBUG - make RHEL-08-020231 automated again (Vojtech Polasek) 2025-11-21 15:53:25.738 logging.py DEBUG - Select grub debug-shell rule in RHEL9 OSPP (Watson Sato) 2025-11-21 15:53:25.738 logging.py DEBUG - Add zipl_systemd_debug-shell_argument_absent (Watson Sato) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix file_groupowner_grub2_cfg (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove SSG and openscap packages from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update audit_rules_usergroup_modification_passwd (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update audit_rules_usergroup_modification_passwd (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update audit_rules_usergroup_modification_gshadow (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update audit_rules_usergroup_modification_opasswd (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update audit_rules_usergroup_modification_group (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update suoders rules (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update account_temp_expire_date (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Update account_emergency_expire_date (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Fix PEP8 issues (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Add grub2_systemd_debug-shell_argument_absent (Watson Sato) 2025-11-21 15:53:25.738 logging.py DEBUG - Add to docs that product removals need to use the label (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Finish WRLinux removal (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove multi_platform_wrlinux from various places in the project (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove WRLinux 1019 product (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - Remove WRLinux8 products (Matthew Burket) 2025-11-21 15:53:25.738 logging.py DEBUG - The reasons for disabling Ctrl-Alt-Del reboot is audit trail related, to have the subject identity for the reboot operation. (Jan Pazdziora) 2025-11-21 15:53:25.738 logging.py DEBUG - Update link in PAM group (Milan Lysonek) 2025-11-21 15:53:25.738 logging.py DEBUG - remove rules from rhel9 ospp profile (Vojtech Polasek) 2025-11-21 15:53:25.738 logging.py DEBUG - fix scoring of audit_access_success in rhel9 ospp profile (Vojtech Polasek) 2025-11-21 15:53:25.738 logging.py DEBUG - sort cces (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - Add sysctl kernel rules and cceids for mount rules (anivan-suse) 2025-11-21 15:53:25.738 logging.py DEBUG - Add Ansible remediation (anivan-suse) 2025-11-21 15:53:25.739 logging.py DEBUG - Disable glob expansion in Compare Datastream service. (Gabriel Becker) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix ubuntu logic in display_login_attempts (Eduardo Barretto) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix issues found in code review for #9101 (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix more missing ocil clauses. (Gabriel Becker) 2025-11-21 15:53:25.739 logging.py DEBUG - Add missing ocil_clause for audit rules. (Gabriel Becker) 2025-11-21 15:53:25.739 logging.py DEBUG - Update OCIL (Jan Černý) 2025-11-21 15:53:25.739 logging.py DEBUG - Add removed products to the changelog (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Add two rules and some more CCEIDs (anivan-suse) 2025-11-21 15:53:25.739 logging.py DEBUG - Improve conditionals for authselect apply-changes tasks (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Add file mode checks to configure_tmux_lock_command (Jan Černý) 2025-11-21 15:53:25.739 logging.py DEBUG - Add file mode checks to configure_tmux_lock_after_time (Jan Černý) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix ansible syntax and make sure default rsyslog config file is also scanned for log file entries (teacup-on-rockingchair) 2025-11-21 15:53:25.739 logging.py DEBUG - products/alinux3 && controls: Add CIS Alibaba Cloud Linux 3 profiles (YuQing) 2025-11-21 15:53:25.739 logging.py DEBUG - Update the ocil_mount_option to remove the use of should (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update network_sniffer_disabled (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update ocil_sysctl_option_value (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update no_user_host_based_files (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update xwindows_runlevel_target (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update accounts_no_uid_except_zero (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update accounts_user_interactive_home_directory_exists (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update accounts_umask_interactive_users (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update rsyslog_cron_logging (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update rsyslog_nolisten (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update coredump_disable_backtraces (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update coredump_disable_storage (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update disable_users_coredumps (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update dconf_gnome_disable_ctrlaltdel_reboot (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update sudo_restrict_privilege_elevation_to_authorized (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Improve Ansible macros for PAM rules (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Rephrasing and ordering adjustments - no functional impact (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Improve regex for Ansible remediation in display_login_attempts (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update postfix_prevent_unrestricted_relay (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update no_host_based_files (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update tftpd_uses_secure_mode (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update network_configure_name_resolution (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Remove "should from OCIL in installed_OS_is_vendor_supported (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update display_login_attempts (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Improve output of srg_audit (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Columns in srg_audit script (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Oracle GPG reference reference links (Federico Ramirez) 2025-11-21 15:53:25.739 logging.py DEBUG - Add OL9 Dockerfile (Federico Ramirez) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_backup_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_backup_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_backup_etc_gshadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_backup_etc_group (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_backup_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_backup_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_backup_etc_gshadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_backup_etc_group (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_groupowner_backup_etc_group (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_groupowner_backup_etc_gshadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_groupowner_backup_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Adjust bash remediation to correspond to rule.yml for correct value of TimedLoginEnable (Lenox, Joseph D (Collins)) 2025-11-21 15:53:25.739 logging.py DEBUG - Add rules to ensure the backup security files are protected. (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_etc_gshadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_permissions_etc_group (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix ordering args in fixtext_directory_permissions (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Add file_permissions_etc_* to the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_etc_gshadow (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update file_owner_etc_group (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix small typo in bash_enable_authselect_feature description (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for no_empty_passwords (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Include Ansible macro to enable authselect feature (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Include Ansible remediation for password hashing algorithm (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Include Ansible remediation for set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Include Ansible macro to remove PAM module option (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update ansible_ensure_pam_module_line macro (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for display_login_attempts (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for pam_unix rounds option in system-auth (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for pam_unix rounds option in password-auth (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix the back references for replace module (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for accounts_password_pam_unix_remember (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for accounts_password_pam_retry (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for pam_pwquality in system_auth (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for pam_pwquality in password_auth (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for pam_pwhistory in system_auth (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Update Ansible remediation for pam_pwhistory in password_auth (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Introduce new Ansible macros to configure PAM modules (Marcus Burghardt) 2025-11-21 15:53:25.739 logging.py DEBUG - Add file_owner_etc_* to the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update accounts_password_pam_pwquality_password_auth (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update accounts_password_pam_pwquality_system_auth (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Add srg_requirement to audit_rules_immutable (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Update dir_permissions_library_dirs (Matthew Burket) 2025-11-21 15:53:25.739 logging.py DEBUG - Fix missing newlines at EOF (Jan Černý) 2025-11-21 15:53:25.739 logging.py DEBUG - Improve a regular expression (Jan Černý) 2025-11-21 15:53:25.739 logging.py DEBUG - remove no longer applicable references from the rule (Vojtech Polasek) 2025-11-21 15:53:25.739 logging.py DEBUG - update profile stability tests (Vojtech Polasek) 2025-11-21 15:53:25.739 logging.py DEBUG - remove rule and variable from control files (Vojtech Polasek) 2025-11-21 15:53:25.739 logging.py DEBUG - remove rule and variable from Fedora profiles (Vojtech Polasek) 2025-11-21 15:53:25.739 logging.py DEBUG - remove rule and variable from RHEL7 profiles (Vojtech Polasek) 2025-11-21 15:53:25.739 logging.py DEBUG - remove rule and variable from RHEL8 profiles (Vojtech Polasek) 2025-11-21 15:53:25.739 logging.py DEBUG - remove rule and variable from RHEL9 profiles (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - Fix regular expression (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Increase Congintive Complexity threshold (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Stop checking systemd.confirm_spawn in RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Create rule grub2_disable_recovery (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Increase Congintive Complexity threshold (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - RHEL9 OSPP: Drop rule preventing forwarding (Watson Sato) 2025-11-21 15:53:25.740 logging.py DEBUG - RHEL9 OSPP: Drop log martians rules (Watson Sato) 2025-11-21 15:53:25.740 logging.py DEBUG - RHEL9 OSPP: Remove rules that affect secuity of TOE (Watson Sato) 2025-11-21 15:53:25.740 logging.py DEBUG - RHEL9 OSPP: Drop send redirect rules that don't affect the TOE (Watson Sato) 2025-11-21 15:53:25.740 logging.py DEBUG - RHEL9 OSPP: Drop rules changing default values not related to OSPP (Watson Sato) 2025-11-21 15:53:25.740 logging.py DEBUG - RHEL9 OSPP: Drop rules affecting important funcionality (Watson Sato) 2025-11-21 15:53:25.740 logging.py DEBUG - RHEL9 OSPP: Drop rules w/o specific need aligned with default value (Watson Sato) 2025-11-21 15:53:25.740 logging.py DEBUG - update rhel8 ospp profile stability test (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - aarch64 version of audit_perm_change_success (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - aarch64 version of audit_perm_change_failed (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - aarch64 version of audit_owner_change_success (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - aarch64 version of audit_owner_change_failed (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - add aarch64 version of audit_delete_success (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - add aarch64 version of audit_delete_failed (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - add aarch64 version of audit_access_failed / success rules (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - add aarch64 version of audi_modify_success (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - add aarch64 version of audit_modify_failed (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - add aarch64 rule audit_create_success (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - make audi_create_failed aarch64 version (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - make aarch64 version of audit_ospp_general (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - modify the oval_file_content macro to use rule_id (Vojtech Polasek) 2025-11-21 15:53:25.740 logging.py DEBUG - Switch aide variable to the wrapper in Ubuntu products. (Gabriel Becker) 2025-11-21 15:53:25.740 logging.py DEBUG - Use product defined aide_bin_path variable instead of custom ones. (Gabriel Becker) 2025-11-21 15:53:25.740 logging.py DEBUG - Fix PEP8 (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Use a aideinit script to generate ubuntu aide databases. (Gabriel Becker) 2025-11-21 15:53:25.740 logging.py DEBUG - Use correct aide path variable in the rule descriptions and ocil. (Gabriel Becker) 2025-11-21 15:53:25.740 logging.py DEBUG - Ensure an authselect profile is selected for tests (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Ignore IntelliJ Idea configuration (Evgeny Kolesnikov) 2025-11-21 15:53:25.740 logging.py DEBUG - Update file_groupowner_etc_gshadow (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update file_groupowner_etc_group (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update file_groupowner_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update file_groupowner_etc_passwd (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update file_groupowner_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update file_groupowner_grub2_cfg (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Add more file_groupowner_* rules to the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update chronyd_server_directive (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update service_chronyd_enabled (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update SRG-OS-000355-GPOS-00143 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update set_password_hashing_algorithm_passwordauth (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Add set_password_hashing_algorithm_passwordauth to the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Update set_password_hashing_min_rounds_logindefs (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Add set_password_hashing_min_rounds_logindefs to the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Add accounts_password_pam_pwquality_* to RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Add sysctl_net_ipv4_conf_default_accept_redirects to the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Add dir_permissions_library_dirs to RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.740 logging.py DEBUG - Refactor: Extract function file_known_as_useless (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Extract condition (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Extract a variable (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Refactor: Extract function write_rule_test_content_to_dir (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Fix content applicability to correctly use templated content. (Gabriel Becker) 2025-11-21 15:53:25.740 logging.py DEBUG - Fix PEP 8 problems (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Split method (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Rework tarball generation (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Ansible remediation for enable_authselect (Milan Lysonek) 2025-11-21 15:53:25.740 logging.py DEBUG - Update version in SRG control file. (Gabriel Becker) 2025-11-21 15:53:25.740 logging.py DEBUG - Extend the regex on macro to remove PAM option (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Improve test scenarios for accounts_password_pam_retry rule (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - OCP4: Drop not-s390x from file_owner_ovs_conf_db (Jakub Hrozek) 2025-11-21 15:53:25.740 logging.py DEBUG - OCP: Drop not-arch from file_groupowner_ovs_sys_id_conf (Jakub Hrozek) 2025-11-21 15:53:25.740 logging.py DEBUG - OCP4: Drop not-arch from file_groupowner_ovs_conf_db_lock (Jakub Hrozek) 2025-11-21 15:53:25.740 logging.py DEBUG - OCP4: Drop not-arch from file_groupowner_ovs_conf_db (Jakub Hrozek) 2025-11-21 15:53:25.740 logging.py DEBUG - Enforce rule sysctl_user_max_user_namespaces in RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Remove rule zip_vsyscall_argument (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Make rule audit_access_success in OSPP profile unenforcing (Jan Černý) 2025-11-21 15:53:25.740 logging.py DEBUG - Fix the PAM file informed in the two scripts (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Improve regex to remove option from PAM line (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Improve test scenarios for display_login_attempts (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Regex and descriptions improvemens in PAM macros (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update no_empty_passwords rule remediation and test scenarios (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - New bash macro to enable authselect feature (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update remediation for display_login_attempts rule (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Include bash macro to remove PAM module options (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Updated accounts_password_pam_retry rule remediation (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update bash_ensure_pam_module_configuration macro (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update remediation for pam_pwquality in system-auth (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update remediation for pam_pwquality in password-auth (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update remediation for pam_unix_rounds in system-auth (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update remediation for pam_unix_rounds in password-auth (Marcus Burghardt) 2025-11-21 15:53:25.740 logging.py DEBUG - Update remediation for password_hashing_algorithm in system-auth (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Update remediation for password_hashing_algorithm in password-auth (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Update the sed and grep commands to interpret vars (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Update bash remediation for pam_pwhistory rules (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Include test scenario for missing PAM line (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Use new PAM macros for bash remediation (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Introduce new bash macros to configure PAM modules (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Remove sysctl_fs_protected_* rules from RHEL 9 OSPP (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Assign RHEL-08-030030 to postfix_client_configure_mail_alias_postmaster. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Set tmux config files mode (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add headers to remediations of a rule (Edgar Aguilar) 2025-11-21 15:53:25.741 logging.py DEBUG - Improve asterisk and spacing in markdown export (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - usbguard_generate_policy: fix Ansible remediation (Matus Marhefka) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix type hints in convert_srg_export_to_md (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix type hints and constancy in utils/create_srg_export.py (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Add a markdown output target to create_srg_export (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Add python vscode extension to the gitpod environment. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Update RHEL8 profile stability data (Watson Sato) 2025-11-21 15:53:25.741 logging.py DEBUG - remove test data no longer used (Vojtech Polasek) 2025-11-21 15:53:25.741 logging.py DEBUG - remove custom test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.741 logging.py DEBUG - create templated test scenarios (Vojtech Polasek) 2025-11-21 15:53:25.741 logging.py DEBUG - Add ansible remediation for postfix_prevent_unrestricted_relay. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix RHEL8 STIG selection for sysctl forwarding (Watson Sato) 2025-11-21 15:53:25.741 logging.py DEBUG - Select rule for RHEL8 STIG (Watson Sato) 2025-11-21 15:53:25.741 logging.py DEBUG - Update testing container name in gitpod integration. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Build content in debug mode when generating coverage statistics. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix overlapping CCE ids for SLE15 (teacup-on-rockingchair) 2025-11-21 15:53:25.741 logging.py DEBUG - Add more rules to ANSSI profile for SLE platform (teacup-on-rockingchair) 2025-11-21 15:53:25.741 logging.py DEBUG - Add log related rules to ANSSI profile for SLE (teacup-on-rockingchair) 2025-11-21 15:53:25.741 logging.py DEBUG - Add rule rsyslog_files_permissions to sle12 ANSSI profile (teacup-on-rockingchair) 2025-11-21 15:53:25.741 logging.py DEBUG - Add rules to ANSSI SLE profile (teacup-on-rockingchair) 2025-11-21 15:53:25.741 logging.py DEBUG - OCP4: api_server_api_priority_gate_enabled: Checking this rule only makes sense for OCP 4.6 or older (Jakub Hrozek) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix the sorting of identifiers (Marcus Burghardt) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix regular expression in Ansible remediation (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - usbguard_generate_policy: handle also systems without USBs (Matus Marhefka) 2025-11-21 15:53:25.741 logging.py DEBUG - Add ANSSI rules (anivan-suse) 2025-11-21 15:53:25.741 logging.py DEBUG - Add the SFRs from the SSH Functional Package as they are the most specific. (Jan Pazdziora) 2025-11-21 15:53:25.741 logging.py DEBUG - With the SSH Extended Package sunset and replaced by the Functional package (FP) via TD0649, use the relevant SFR from the FP. (Jan Pazdziora) 2025-11-21 15:53:25.741 logging.py DEBUG - The reason for disabling Kerberos and GSSAPI is the "and no other methods" in FCS_SSH_EXT.1.2 of the SSH Functional Package. (Jan Pazdziora) 2025-11-21 15:53:25.741 logging.py DEBUG - Remove test scenario that is no longer relevant (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - In OSPP the reason for disabling root logins is to know the real identity of the administrator who logged in (and then used su/sudo), for auditing purposes. (Jan Pazdziora) 2025-11-21 15:53:25.741 logging.py DEBUG - remove test scenarios which test the content against files provided by audit (Vojtech Polasek) 2025-11-21 15:53:25.741 logging.py DEBUG - edit description of audit_policy_rules/* (Vojtech Polasek) 2025-11-21 15:53:25.741 logging.py DEBUG - Unify the OSPP references for the tmux-based session locking rules, add the implicitly satisfied FTA_SSL.1. (Jan Pazdziora) 2025-11-21 15:53:25.741 logging.py DEBUG - Use the correct path in a test scenario (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add OL9 to jinja conditionals (Federico Ramirez) 2025-11-21 15:53:25.741 logging.py DEBUG - Update OL9 GPG key packages release (Federico Ramirez) 2025-11-21 15:53:25.741 logging.py DEBUG - Add OL9 platform to remediations for OSPP profile (Federico Ramirez) 2025-11-21 15:53:25.741 logging.py DEBUG - Introduce OSPP profile for OL9 (Federico Ramirez) 2025-11-21 15:53:25.741 logging.py DEBUG - Update fixtext_audit_file_watch_rule (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Fixtext full_name in SRG-OS-000001-GPOS-00001 (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - OCP4: configure_network_policies: Calico also supports NetworkPolicies (Jakub Hrozek) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix ocil_fix_srg_privileged_command arg in audit_rules_privileged_commands_usermod (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Update srg_requirement file_permissions_etc_audit_auditd (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Update srg_requirement in file_permissions_etc_audit_rulesd (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix srg_requirement in service_fapolicyd_enabled (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Update linux_os/guide/services/sssd/sssd_enable_pam_services/bash/shared.sh (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - OCP4: Filter out SCCs that end with -v2 from the allowedCapabilities list (Jakub Hrozek) 2025-11-21 15:53:25.741 logging.py DEBUG - Use correct faillock path in group description (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Use correct faillock path (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Update PR comments with gitpod links to include OL8. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Proper username regex in accounts_user_interactive_home_directory_defined (Milan Lysonek) 2025-11-21 15:53:25.741 logging.py DEBUG - Rename SSGTS to Automatus in gitpod integration files. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Do not include symlink tests into OVAL 5.10. (Gabriel Becker) 2025-11-21 15:53:25.741 logging.py DEBUG - Remove audispd (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix a broken Jinja variable definition (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Remove audispd related rules (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add a dot (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Update OCIL and add SRG to rsyslog_encrypt_offload_defaultnetstreamdriver (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Update OCIL and add SRG to rsyslog_encrypt_offload_actionsendstreamdrivermode (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Remove rule package_audit-audispd-plugins_installed (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add SRG and fixtext package_audispd-plugins_installed (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add OCIL and SRG in auditd_overflow_action (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add fixtext and SRG requirement to auditd_audispd_syslog_plugin_activated (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add fixtext and SRG to auditd_audispd_network_failure_action (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add fixtext and SRG to auditd_audispd_encrypt_sent_records (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add fixtext and SRG requirement to auditd_audispd_disk_full_action (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Add a missing word (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Update text and SRG requirement in auditd_audispd_configure_sufficiently_large_partition (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Update OCIL and fixtext in auditd_audispd_configure_remote_server (Jan Černý) 2025-11-21 15:53:25.741 logging.py DEBUG - Fix build errors during bug fixing (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Add anssi_bp28_intermediary profile (anivan-suse) 2025-11-21 15:53:25.741 logging.py DEBUG - Add srg_requirement to configure_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Tweak srg_requirement_audit_file_watch_rule text (Matthew Burket) 2025-11-21 15:53:25.741 logging.py DEBUG - Remove erroneous curly brace from accounts_password_pam_difok (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - In accounts_password_all_shadowed_sha512 cite FIPS 140-3 for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Update srg_requirement to accounts_password_pam_unix_rounds_password_auth (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Update srg_requirement to accounts_password_pam_unix_rounds_system_auth (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix srg_requirement in service_pcscd_enabled (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add fixtxet to SRG-OS-000024-GPOS-00007 (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Update srg_requirement in configure_openssl_tls_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Parametrize the file name of the container used by gitpod integration. (Gabriel Becker) 2025-11-21 15:53:25.742 logging.py DEBUG - Use full_name in file_permissions_sshd_private_key (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Use full_name in file_permissions_sshd_pub_key (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - service_rsyslog_enabled should use service_enabled macros (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Update srg_requirement for package_tftp-server_removed (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Rewrite fixtext in ssh_private_keys_have_passcode (Edgar Aguilar) 2025-11-21 15:53:25.742 logging.py DEBUG - Use pkg_manager vs yum in rpm_verify_hashes (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Remove configure_libreswan_crypto_policy from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Align sssd_enable_pam_services tests to expect existing pam service (Milan Lysonek) 2025-11-21 15:53:25.742 logging.py DEBUG - sssd_enable_pam_services needs pam service to exist in [sssd] section (Milan Lysonek) 2025-11-21 15:53:25.742 logging.py DEBUG - Add a better srg_requirement for ensure_gpgcheck_globally_activated (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add better srg_requirement for ensure_gpgcheck_local_packages (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add better srg_requirement for ensure_gpgcheck_never_disabled (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix spelling errer in ensure_gpgcheck_never_disabled (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add fixtext to SRG-OS-000358-GPOS-00145 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix -> fixtext in RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix formatting for fixtext macros "Run the following command" (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Use the fixtext macro for the fixtext in package_vsftpd_removed (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Handle variables in SRG Requirement (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Variable in configure_opensc_card_drivers for srg_requirement (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Pull force_opensc_card_drivers from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Update tests/unit/ssg-module/test_playbook_builder_data/guide/configure_crypto_policy/rule.yml (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add platform machine to two rules (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Update tests/unit/ssg-module/test_playbook_builder_data/guide/configure_crypto_policy/rule.yml (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - EKS: Fix typo (Jakub Hrozek) 2025-11-21 15:53:25.742 logging.py DEBUG - adapt to paramters (Marcus Meissner) 2025-11-21 15:53:25.742 logging.py DEBUG - OCP4: The flowcontrol API was bumped to v1beta2 in 4.11 (Jakub Hrozek) 2025-11-21 15:53:25.742 logging.py DEBUG - add products/uos20 to support UnionTech OS Server 20 (binyanling) 2025-11-21 15:53:25.742 logging.py DEBUG - Create rule to cover OL08-00-010100 (Edgar Aguilar) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix quotes in accounts_password_set_min_life_existing (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix quotes in accounts_minimum_age_login_defs (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix quotes in accounts_password_set_max_life_existing (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix quotes in accounts_maximum_age_login_defs (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix quotes in rsyslog_remote_loghost (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix quotes in dir_perms_world_writable_root_owned (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix quotes in sshd_enable_warning_banner (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_ocredit (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to account_disable_post_pw_expiration (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_logon_fail_delay (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_max_concurrent_login_sessions (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_minlen_login_defs (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_dcredit (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_dictcheck (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_difok (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_lcredit (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_maxclassrepeat (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_maxrepeat (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - sssd_enable_smartcards: authselect with-smarcard (Watson Sato) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_minclass (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_minlen (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_pwhistory_remember_password_auth (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_pwhistory_remember_system_auth (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_retry (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add whitespace in macro function so CTF can parse properly tokens. (Gabriel Becker) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_ucredit (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - test_env.py: add more attempts when executing ssh command (Matus Marhefka) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_unix_remember (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_unix_rounds_password_authk (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_password_pam_unix_rounds_system_auth (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_umask_etc_csh_cshrc (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_umask_etc_login_defs (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to accounts_umask_etc_profile (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to account_temp_expire_date (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to aide_periodic_cron_checking (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to banner_etc_issue (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to chronyd_or_ntpd_set_maxpoll (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to configure_bind_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Update configure_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Do not include OCIL content in rules that define OVAL external content. (Gabriel Becker) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement to dconf_gnome_banner_enabled (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Fix issues in code review for PR #9025 (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement for dconf_gnome_lock_screen_on_smartcard_removal (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement for configure_tmux_lock_after_time (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement for bios_enable_execution_restrictions (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement for clean_components_post_updating (Matthew Burket) 2025-11-21 15:53:25.742 logging.py DEBUG - Add srg_requirement for configure_firewalld_ports (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement for configure_kerberos_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement for configure_libreswan_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement for configure_tmux_lock_command (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement for dconf_gnome_login_banner_text (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement for dconf_gnome_screensaver_idle_delay (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement for dconf_gnome_screensaver_lock_delay (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to dconf_gnome_screensaver_lock_enabled (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Update dconf_gnome_screensaver_lock_locked (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Remove dconf_gnome_screensaver_mode_blank from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to dconf_gnome_screensaver_user_locks (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to dconf_gnome_session_idle_user_locks (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to dir_ownership_library_dirs (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to disable_ctrlaltdel_burstaction (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to disable_host_auth (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to enable_dracut_fips_module (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to enable_fips_mode (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to encrypt_partitions (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to ensure_gpgcheck_globally_activated (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to ensure_gpgcheck_never_disabled (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Pull ensure_redhat_gpgkey_installed from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to file_audit_tools_group_ownership (Matthew Burket) 2025-11-21 15:53:25.743 logging.py DEBUG - Add srg_requirement to file_audit_tools_ownership (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to file_audit_tools_permissions (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Update file_permissions_var_log (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to grub2_admin_username (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Update file_permissions_var_log_messages (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Remove firewalld_sshd_port_enabled from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to gnome_gdm_disable_automatic_login (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to grub2_audit_backlog_limit_argument (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to grub2_password (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to grub2_uefi_admin_username (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to grub2_uefi_password (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to install_smartcard_packages (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to no_tmux_in_shells (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Update package_pcsc-lite_installed (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to postfix_client_configure_mail_alias (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to require_emergency_target_auth (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to require_singleuser_auth (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to rsyslog_encrypt_offload_actionsendstreamdriverauthmode (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to rsyslog_encrypt_offload_actionsendstreamdrivermode (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to rsyslog_encrypt_offload_defaultnetstreamdriver (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sshd_enable_pam (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to rsyslog_remote_access_monitoring (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to selinux_policytype (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to service_pcscd_enabled (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to service_sshd_enabled (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to service_usbguard_enabled (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Update set_password_hashing_algorithm_libuserconf (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Update set_password_hashing_algorithm_logindefs (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Update set_password_hashing_algorithm_systemauth (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Pull ssh_client_rekey_limit (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sshd_do_not_permit_user_env (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sshd_enable_warning_banner (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sssd_certificate_verification (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sssd_enable_smartcards (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sssd_has_trust_anchor (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sssd_offline_cred_expiration (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sudo_remove_no_authenticate (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sudo_remove_nopasswd (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sudo_require_reauthentication (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sysctl_fs_protected_hardlinks (Matthew Burket) 2025-11-21 15:53:25.761 logging.py DEBUG - Add srg_requirement to sysctl_fs_protected_symlinks (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Removing sysctl_kernel_exec_shield from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add srg_requirement to sysctl_kernel_perf_event_paranoid (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Don't fail utils/compare_results.py when idref/result is missing, just add placeholder to inform (Milan Lysonek) 2025-11-21 15:53:25.762 logging.py DEBUG - OCP4: Update policy.json verification (Jakub Hrozek) 2025-11-21 15:53:25.762 logging.py DEBUG - Remove references to authselect.conf not being empty (Matej Tyc) 2025-11-21 15:53:25.762 logging.py DEBUG - Add anssi gshadow rules (anivan-suse) 2025-11-21 15:53:25.762 logging.py DEBUG - fix title in account_password_pam_faillock_system_auth (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update rule to allow special bits in library dirs (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - OCP4: Our CI checks for version.yml not version.yaml (Jakub Hrozek) 2025-11-21 15:53:25.762 logging.py DEBUG - Add 4.11 test manifests to several rules (Jakub Hrozek) 2025-11-21 15:53:25.762 logging.py DEBUG - Address feedback in #9016 (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update no_empty_passwords_etc_shadow (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update disallow_bypass_password_sudo (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add file_permissions_etc_group to anssi (anivan-suse) 2025-11-21 15:53:25.762 logging.py DEBUG - Add ssh rules to ANSSI (anivan-suse) 2025-11-21 15:53:25.762 logging.py DEBUG - Ensure pam_lastlog with 'silent' is caught (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - convert to jinja template (Marcus Meissner) 2025-11-21 15:53:25.762 logging.py DEBUG - Correct display_login_attempts pass scenarios (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - Remove any ocurrence of silent from postlogin (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - OCP: use variable for oauthclient_inactivity_timeout (vincent) 2025-11-21 15:53:25.762 logging.py DEBUG - Add EditorConfig file (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add srg_requirement to sysctl_net_ipv4_tcp_invalid_ratelimit (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add srg_requirement to usbguard_generate_policy (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add srg_requirement to use_pam_wheel_for_su (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add srg_requirement to wireless_disable_interfaces (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update aide_scan_notification (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Remove harden_ssh_client_crypto_policy from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update disable_users_coredumps (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update coredump_disable_storage (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update coredump_disable_backtraces (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update xwindows_remove_packages (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - utils: Remove obsolete script (Jakub Hrozek) 2025-11-21 15:53:25.762 logging.py DEBUG - Update no_files_unowned_by_user (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update rpm_verify_permissions (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update rpm_verify_ownership (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add fixtext to sysctl_kernel_perf_event_paranoid (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add fixtext to sysctl_kernel_dmesg_restrict (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update sysctl bash template (Federico Ramirez) 2025-11-21 15:53:25.762 logging.py DEBUG - Sort subkeys in the new rules (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add new rule firewalld-backend (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add new rule fapolicy_default_deny (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update configured_firewalld_default_deny (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add new rule kernel_module_uvcvideo_disabled (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Update audit_rules_login_events_faillock (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add new rule account_password_pam_faillock_password_auth (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add new rule account_password_pam_faillock_password_auth (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Fix auditd_overflow_action OVAL to work properly on RHEL9. (Gabriel Becker) 2025-11-21 15:53:25.762 logging.py DEBUG - Fix account_passwords_pam_faillock_dir formatting issue (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add new rule account_password_selinux_faillock_dir (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Remove empty line in ensure_gpgcheck_never_disabled ansible remediation (Milan Lysonek) 2025-11-21 15:53:25.762 logging.py DEBUG - Update dconf_gnome_screensaver_lock_locked (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add new rule account_passwords_pam_faillock_audit to RHEL STIGs (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add rule for account_passwords_pam_faillock_dir for RHEL STIGs (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add mount_option_boot_efi_nosuid to RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add disallow_bypass_password_sudo to RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add no_empty_passwords_etc_shadow to SRG-OS-000480-GPOS-00227 (Matthew Burket) 2025-11-21 15:53:25.762 logging.py DEBUG - Add srg_requirement to postfix rule (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Extract function (Jan Černý) 2025-11-21 15:53:25.762 logging.py DEBUG - Handle symlinks in pkg manager config file path (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - Follow symlinks in ensure_gpgcheck_local_packages (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - Restrict multiline tests for SLE (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - Update accounts_tmout to export and readonly TMOUT (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - Make krb5 rules applicable only to older versions of certain package. (Gabriel Becker) 2025-11-21 15:53:25.762 logging.py DEBUG - Create rule to cover OL08-00-020262 (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Create rule to cover OL08-00-020263 (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Create rule to cover OL08-00-020264 (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Introduce rule passwd_system-auth_substack (Federico Ramirez) 2025-11-21 15:53:25.762 logging.py DEBUG - Create rule to cover OL08-00-030030 (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Create rule to cover OL08-00-010572 (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Create rule to cover OL08-00-010424 (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Add tests to configure_tmux_lock_after_time (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - Update configure_tmux_lock_after_time (Edgar Aguilar) 2025-11-21 15:53:25.762 logging.py DEBUG - OCP4: Kubernetes 1.24+ does not support the insecure-port flag (Jakub Hrozek) 2025-11-21 15:53:25.762 logging.py DEBUG - Update stability of RHEL8 STIG (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - RHEL8 STIG: Install redhat gpg key (Watson Sato) 2025-11-21 15:53:25.762 logging.py DEBUG - Move method to parent class (Jan Černý) 2025-11-21 15:53:25.762 logging.py DEBUG - Remove unused code (Jan Černý) 2025-11-21 15:53:25.762 logging.py DEBUG - Refactor: extract method (Jan Černý) 2025-11-21 15:53:25.762 logging.py DEBUG - Add sysctl rules to anssi (anivan-suse) 2025-11-21 15:53:25.762 logging.py DEBUG - fedora 34 is EOL since 2022-06-07 (Markus Linnala) 2025-11-21 15:53:25.762 logging.py DEBUG - fix: ansible_sshd_set: sshd_config is case-insensitive (Markus Linnala) 2025-11-21 15:53:25.762 logging.py DEBUG - Fix sssd_enable_smartcards case sensitivity (Hunter Jones) 2025-11-21 15:53:25.763 logging.py DEBUG - Update file_owner_var_log (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update file_owner_var_log (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update file_groupowner_var_log_messages (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update file_groupowner_var_log (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_tmp_nosuid (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_tmp_nexec (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_tmp_nodev (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_nodev (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_log_nosuid (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_log_audit_nosuid (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_log_noexec (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_log_nodev (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_log_audit_noexec (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_var_log_audit_node (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_boot_nodev (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_tmp_noexec (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_tmp_noexec (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_tmp_nodev (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_home_nodev (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_dev_shm_nosuid (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_dev_shm_noexec (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update mount_option_dev_shm_nodev (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update disable_ctrlaltdel_reboot (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update service_fapolicyd_enabled (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_openssh-server_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_crypto-policies_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_usbguard_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_opensc_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update ensure_gpgcheck_local_packages (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_fapolicyd_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_subscription-manager_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_sudo_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update package_chrony_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Add srg_requirement to package_tmux_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Add srg_requirement to package_aide_installed (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Allow srg_rule_audit to audit a whole SRG (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Add srg_requirement to configure_bashrc_exec_tmux (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Fix usage of an undefined variable (Jan Černý) 2025-11-21 15:53:25.763 logging.py DEBUG - Update configure_openssl_tls_crypto_policy (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - OCP4 STIG: Only use resource_requests_quota directly, not its subtests (Jakub Hrozek) 2025-11-21 15:53:25.763 logging.py DEBUG - Add package_tftp-server_removed to ANSSI (anivan-suse) 2025-11-21 15:53:25.763 logging.py DEBUG - Use Ansible from the Fedora repos in the nightly (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Remove unused utils (Jan Černý) 2025-11-21 15:53:25.763 logging.py DEBUG - Add tests to file_ownership_var_log_audit_stig (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update file_ownership_var_log_audit_stig [rhel8] (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update file_ownership_var_log_audit_stig for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update OL8 STIG profile comments (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update OL8 STIG profiles to reflect v1r2 revision (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update references in OL8 STIG rules (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - Clean and update OL8 STIG profile (Edgar Aguilar) 2025-11-21 15:53:25.763 logging.py DEBUG - Add missing OL7 stig IDs (Federico Ramirez) 2025-11-21 15:53:25.763 logging.py DEBUG - Check for module blacklist on RHCOS4 (Watson Sato) 2025-11-21 15:53:25.763 logging.py DEBUG - Add fapolicyd_prevent_home_folder_access for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - add comment to audit rules which require blankline at the end (Vojtech Polasek) 2025-11-21 15:53:25.763 logging.py DEBUG - strip trailing blank lines for some rules using audit-file_contents template (Vojtech Polasek) 2025-11-21 15:53:25.763 logging.py DEBUG - Update SRG-APP-000101-CTR-000205 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update no_host_based_files (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update no_user_host_based_files (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update tftpd_uses_secure_mode (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update display_login_attempts (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Remove selinux_all_devicefiles_labeled from RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update installed_OS_is_vendor_supported (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update rpm_verify_hashes (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Update security_patches_up_to_date (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - Add RHEL9 CCE to service_systemd-journald_enabled (Matthew Burket) 2025-11-21 15:53:25.763 logging.py DEBUG - User urlencode filter in kubernetes remediation (Watson Sato) 2025-11-21 15:53:25.763 logging.py DEBUG - Update SRG-APP-000023-CTR-000055 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update the status with inherently met for OCP4 controls (Dhriti Shikhar) 2025-11-21 15:53:25.763 logging.py DEBUG - Update the control status with not applicable (Dhriti Shikhar) 2025-11-21 15:53:25.763 logging.py DEBUG - Select the correct macro for set_password_hashing_algorithm_passwordauth (Marcus Burghardt) 2025-11-21 15:53:25.763 logging.py DEBUG - The separate partition is to meet FMT_SMF_EXT.1's Configure local audit storage capacity. (Jan Pazdziora) 2025-11-21 15:53:25.763 logging.py DEBUG - products/alinux3: supports Alibaba Cloud Linux 3 (YiLin.Li) 2025-11-21 15:53:25.763 logging.py DEBUG - Fix rule sysctl_kernel_yama_ptrace_scope and sysctl_kernel_core_pattern (vincent) 2025-11-21 15:53:25.763 logging.py DEBUG - Fix OCIL entry for world_writable_programs rule (Federico Ramirez) 2025-11-21 15:53:25.763 logging.py DEBUG - Introduce variable for user init files (Federico Ramirez) 2025-11-21 15:53:25.763 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Set missing_parameter_pass to false in auditd_local_events (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Update SRG-OS-000269-GPOS-00103 (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update postfix_prevent_unrestricted_relay (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update network_sniffer_disabled (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update network_configure_name_resolution (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Removed from libreswan_approved_tunnels from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix srg_requirement in service_firewalld_enabled (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Add new rule configured_firewalld_default_deny (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Remove grub2_disable_interactive_boot from RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Remove grub2_kernel_trust_cpu_rng from RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Add SRG-OS-000480-GPOS-00230 to fapolicyd rules (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Fail sshd_disable_compression if parameter missing (Watson Sato) 2025-11-21 15:53:25.764 logging.py DEBUG - Remove rule harden_ssh_client_crypto_policy (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Set var_system_crypto_policy=fips (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Add fixtext to package_crypto-policies_installed (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Add fixtext for configure_crypto_policy (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Address pull request feedback from #8960 (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update file_group_ownership_var_log_audit tests (Edgar Aguilar) 2025-11-21 15:53:25.764 logging.py DEBUG - Update rule file_group_ownership_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.764 logging.py DEBUG - Update SRG-OS-000312-GPOS-00122 for the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update SRG-OS-000312-GPOS-00124 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Upate xwindows_runlevel_target (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Remove use_kerberos_security_all_exports from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix boolean to string conversion caused by yaml.CSafeLoader (Jiri Odehnal) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix CDumper issue where unexpected end-of-document three dots are inserted (Jiri Odehnal) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix formatting (Jiri Odehnal) 2025-11-21 15:53:25.764 logging.py DEBUG - Use Cloader and Cdumper in ssg.yaml and avoid error due to missing Cdumper (Jiri Odehnal) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix build profiling for targets with multiple outputs (Jiri Odehnal) 2025-11-21 15:53:25.764 logging.py DEBUG - Update no_empty_passwords (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update sudo_restrict_privilege_elevation_to_authorized (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Upate sudoers_validate_passwd (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update no_shelllogin_for_systemaccounts (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update SRG file name to v2r3 (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Improve the rule (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Add the enable_authselect rule to profiles (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Introduce authselect enabled rule (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Update SRG-APP-000014-CTR-000035 for OCP4 STIG (Jakub Hrozek) 2025-11-21 15:53:25.764 logging.py DEBUG - Properly exclude all files from analysis (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix some whitespace and indentation issues (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Call automatus, not test_suite.py (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Rename gh actions to Automatus. (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Refresh the script (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Provide an adaptor to the legacy call of the test suite (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Introduce Automatus (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Update SRG-APP-000089-CTR-000150 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.764 logging.py DEBUG - Use CCI number instead of first identifier in the CCI column (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Use os.path for Python 2 compatibility (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Remove fstring for Python 2 compatibility (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Remove type annotations for Python 2 compatibility (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Unify 2 functions (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Handle missing CCEs (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix Python2 compatibility (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Generate srgmap tables using Jinja (Jan Černý) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_no_uid_except_zero (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_authorized_local_users (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_umask_interactive_users (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_user_interactive_home_directory_exists (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_umask_etc_bashrc (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_user_interactive_home_directory_defined (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_user_home_paths_only (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Fix accounts_have_homedir_login_defs (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_user_dot_no_world_writable_programs (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update accounts_have_homedir_login_defs (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Update aide_verify_ext_attributes (Matthew Burket) 2025-11-21 15:53:25.764 logging.py DEBUG - Override audisp_conf_path for OL7 and RHEL7 (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Update tests for audisp rules (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Update remediations to use audisp_conf_path (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Update OVAL checks to use audisp_conf_path (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Update rule text to use audisp_conf_path (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Add audisp_conf_path as an implied property (Federico Ramirez) 2025-11-21 15:53:25.764 logging.py DEBUG - Update the status with does not meet for OCP4 controls (Dhriti Shikhar) 2025-11-21 15:53:25.764 logging.py DEBUG - Increase the threshold for duplication detection (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Add shellcheck checks for our shell scripts (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - Further restrict files to analyze (Matej Tyc) 2025-11-21 15:53:25.764 logging.py DEBUG - remove automated field (Dhriti Shikhar) 2025-11-21 15:53:25.765 logging.py DEBUG - Add file_permissions_etc_passwd (anivan-suse) 2025-11-21 15:53:25.765 logging.py DEBUG - Include about me section in the template (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Specify how merge rights should be requested (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Include new issue template for requesting merge rights (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Remove the RHCOS4 OSPP profile (Jakub Hrozek) 2025-11-21 15:53:25.765 logging.py DEBUG - Move the definition of test data to template.py (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add tests for options in symlinks (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add tests for two sysctl options (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add test for option defined in two places (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add test for wrong .d option (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add test for wrong runtime value (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add test for wrong option (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add test for line missing (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add test for correct value (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - sysctl template: Add test for commented option (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - Update SRG-APP-000014-CTR-000040 for OCP4 STIG (Dhriti Shikhar) 2025-11-21 15:53:25.765 logging.py DEBUG - Don't add check for modprobe.conf on RHEL content (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - Update kernel_module_disabled documentation (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - Add support for blacklist in kernel_module_disabled (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - Update directory_ownership_var_log_audit rule.yml (Edgar Aguilar) 2025-11-21 15:53:25.765 logging.py DEBUG - Update directory_ownership_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.765 logging.py DEBUG - Update directory_ownership_var_log_audit for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.765 logging.py DEBUG - Update OVAL for enable_fips_mode (Edgar Aguilar) 2025-11-21 15:53:25.765 logging.py DEBUG - Add handling for blacklist in tests (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - add tests (Vojtech Polasek) 2025-11-21 15:53:25.765 logging.py DEBUG - align rule fixtext and description (Vojtech Polasek) 2025-11-21 15:53:25.765 logging.py DEBUG - change OVAL (Vojtech Polasek) 2025-11-21 15:53:25.765 logging.py DEBUG - Configure the file analysis on a include basis (Matej Tyc) 2025-11-21 15:53:25.765 logging.py DEBUG - Update RHEL8 and RHEL9 links in sssd group.yml (Matus Marhefka) 2025-11-21 15:53:25.765 logging.py DEBUG - Remove check for disabled from SLE products (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - Stop codecov for files that are not unit-testable (Matej Tyc) 2025-11-21 15:53:25.765 logging.py DEBUG - Append email_mappings dict (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Add file_owner_etc_shadow to anssi (anivan-suse) 2025-11-21 15:53:25.765 logging.py DEBUG - Update README.md (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Update visible email in Contributors.md (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Add ANSSI minimal profile to SLE12 (teacup-on-rockingchair) 2025-11-21 15:53:25.765 logging.py DEBUG - Add ensure_suse_gpgkey_installed rule to ansi sle minimal profile (teacup-on-rockingchair) 2025-11-21 15:53:25.765 logging.py DEBUG - Add missing cce for sle12 (teacup-on-rockingchair) 2025-11-21 15:53:25.765 logging.py DEBUG - Add SLE support for ensure_gpgcheck_never_disabled remediations (teacup-on-rockingchair) 2025-11-21 15:53:25.765 logging.py DEBUG - Drop irrelevant rules for SLE platform (teacup-on-rockingchair) 2025-11-21 15:53:25.765 logging.py DEBUG - Enable SLE12 for ANSSI minimal profile rules and add relevant CCEs (teacup-on-rockingchair) 2025-11-21 15:53:25.765 logging.py DEBUG - Enable timer_dnf-automatic_enabled for SLE12 platform (teacup-on-rockingchair) 2025-11-21 15:53:25.765 logging.py DEBUG - OCP:Fix rule kubelet_enable_streaming_connections (vincent) 2025-11-21 15:53:25.765 logging.py DEBUG - Add CCE to rule and this to RHEL8 sability test (Edgar Aguilar) 2025-11-21 15:53:25.765 logging.py DEBUG - Add rule to RHEL8 stability test (Edgar Aguilar) 2025-11-21 15:53:25.765 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2025-11-21 15:53:25.765 logging.py DEBUG - Adjust for different syntax (Jan Černý) 2025-11-21 15:53:25.765 logging.py DEBUG - OCP4: Split node and platform DISA STIG profiles (Jakub Hrozek) 2025-11-21 15:53:25.765 logging.py DEBUG - Update aide_verify_acls (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Remove aide_use_fips_hashes (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Include SRG reference for dconf_gnome_disable_user_list (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_kernel_randomize_va_space (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_kernel_kptr_restrict (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_user_max_user_namespaces (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_core_bpf_jit_harden (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_kernel_yama_ptrace_scope (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_kernel_unprivileged_bpf_disabled (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Define grub2 uefi boot path for OL7 (Federico Ramirez) 2025-11-21 15:53:25.765 logging.py DEBUG - Add file system kernel modules rules to OL7 ncp (Federico Ramirez) 2025-11-21 15:53:25.765 logging.py DEBUG - Add OL prodtype to rules and remediations (Federico Ramirez) 2025-11-21 15:53:25.765 logging.py DEBUG - Add OL7 ncp profile (Federico Ramirez) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_kernel_kexec_load_disabled (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_ipv4_ip_forward (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Fix RHEL8 STIG ID for sysctl_net_ipv4_ip_forward (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_ipv4_conf_default_send_redirects (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Separate tests for blacklist and install (Watson Sato) 2025-11-21 15:53:25.765 logging.py DEBUG - Improve Ansible remediation for accounts_umask_etc_profile (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Remove double "that" from Ansible task title (Marcus Burghardt) 2025-11-21 15:53:25.765 logging.py DEBUG - Remove harden_* rules (Jan Černý) 2025-11-21 15:53:25.765 logging.py DEBUG - Update OCIL, add fixtext and srg in configure_ssh_crypto_policy (Jan Černý) 2025-11-21 15:53:25.765 logging.py DEBUG - Add fixtext and SRG and update configure_openssl_tls_crypto_policy (Jan Černý) 2025-11-21 15:53:25.765 logging.py DEBUG - Add fixtext and SRG and update configure_openssl_crypto_policy (Jan Černý) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_send_redirects (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Remove sysctl_net_ipv4_icmp_ignore_bogus_error_responses from RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_ipv4_icmp_echo_ignore_broadcasts (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Pull the sysctl_net_ipv4_conf_default_* rules (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_ipv4_conf_default_accept_source_route (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_ipv4_conf_default_accept_redirects (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_kernel_core_pattern (Matthew Burket) 2025-11-21 15:53:25.765 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_secure_redirects (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_rp_filter (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_log_martians (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_accept_source_route (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv4_conf_all_accept_redirects (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv6_conf_default_accept_source_route (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv6_conf_default_accept_redirects (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv6_conf_default_accept_ra (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_forwarding (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_accept_source_route (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_accept_redirects (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add a missing new line at the end of the file (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sysctl_net_ipv6_conf_all_accept_ra (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Resolve the auditctl and augenrules conflict (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Update rule audit_rules_suid_privilege_function (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Include missing rule in STIG profile for RHEL7 (Marcus Burghardt) 2025-11-21 15:53:25.766 logging.py DEBUG - Update partition_for_var_tmp (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update partition_for_var_log_adit (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update partition_for_var_log (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update partition_for_var (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update partition_for_tmp (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add macro srg_requirement_separate_partition (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update partition_for_home (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add fixtext_separate_partition macro (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add srg_requirement (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Use a specific value in auditd_data_disk_error_action_stig (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Use a Jinja macro istead of custom code (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Add a new rule for audit max_log_file (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Add a new rule for audit disk_full_action (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Add a new rule for audit disk_error_action (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Replace the operating system by full_name (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove variable from the original file (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and fixtext in auditd_data_retention_max_log_file_action (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and add fixtext for auditd_data_retention_max_log_file_action (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove duplicate text (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and add fixtext for auditd_data_disk_full_action (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and add fixtext for auditd_data_disk_error_action (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - products/alinux2 && controls: Add CIS Alibaba Cloud Linux (Aliyun Linux) 2 profiles (YiLin.Li) 2025-11-21 15:53:25.766 logging.py DEBUG - Use target type instead of rule spec (Jan Černý) 2025-11-21 15:53:25.766 logging.py DEBUG - Let's not Jinja expand Vi swp files (Watson Sato) 2025-11-21 15:53:25.766 logging.py DEBUG - Organize tests and objects to reduce check size (Watson Sato) 2025-11-21 15:53:25.766 logging.py DEBUG - Merge test on similar objects to a single test (Watson Sato) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL in unsuccessful syscall rules (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_open_by_handle_at (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_open (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_ftruncate (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update OCIL and srg_requirement for audit_rules_unsuccessful_file_modification_creat (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update srg_requirement for audit_rules_unsuccessful_file_modification_openat (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add ocil macros for unsuccessful syscall audits (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Fix docs for the srg_requirement_audit_syscall macro (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add a macro for srg requirements for auditing unsuccessful syscalls (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove duplicative audit rules in SRG-OS-000064-GPOS-00033 (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_rename (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_renameat (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_unlink (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_unsuccessful_file_modification_unlink (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove line before in macro srg_requirement_audit_syscall (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update SRG-OS-000064-GPOS-00033 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Fix spelling in titles in audit_rules_unsuccessful_* (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update sshd_use_strong_rng rationale (Edgar Aguilar) 2025-11-21 15:53:25.766 logging.py DEBUG - Set metadata for OL8 STIG_GUI profile (Edgar Aguilar) 2025-11-21 15:53:25.766 logging.py DEBUG - Add srg_requirement to rsyslog_remote_loghost (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update rsyslog_nolisten (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update rsyslog_cron_logging (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update dconf_gnome_disable_ctrlaltdel_reboot (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove dconf_gnome_remote_access_encryption from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Fix bash in two rules to manage commented lines (Edgar Aguilar) 2025-11-21 15:53:25.766 logging.py DEBUG - Relocate shebang in tests (Edgar Aguilar) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove dconf_gnome_disable_restart_shutdown from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove dconf_db_up_to_date from RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add srg_requirement to auditd_write_logs (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add srg_requirement to auditd_log_format (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove auditd_data_retention_flush from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Address feedback in 10-ocil.jinja (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Remove newline at the start of the systemd_ocil_service_disabled (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Fix docs on srg_requirement_service_disabled (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Fix up fixtext_service_disabled macro (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add fixtext and srg_requirement to service_systemd-coredump_disabled (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Updatue service_firewalld_enabled for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update service_rsyslog_enabled for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update service_syslogng_enabled for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update service_debug-shell_disabled for the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Update service_rngd_enabled for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.766 logging.py DEBUG - Add fixtext and srg_requirement to service_kdump_disabled (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext_service_disabled macro (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add sudo in the fixtext_service_enabled macro (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add the macro ocil_clause_service_enabled (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add the macro srg_requirement_service_disabled (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Fix formatting for srg_requirement_service_enabled (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Fix OCIL and fixtext sshd_use_strong_rng (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_x11_use_localhost (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_use_strong_rng (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Remove sshd_use_priv_separation from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_rekey_limit (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_print_last_log (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Remove sshd_enable_x11_forwarding from RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_enable_strictmodes (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_disable_x11_forwarding (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_disable_user_known_hosts (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_disable_root_login (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Remove sshd_disable_rhosts_rsa from SRG-OS-000480-GPOS-00227 (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_disable_rhosts (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_disable_kerb_auth (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_disable_gssapi_auth (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update sshd_disable_empty_passwords (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update shd_disable_compression (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Make macros loading procedure deterministic and designate 01_general.jinja file to be first in the sequence (Evgeny Kolesnikov) 2025-11-21 15:53:25.767 logging.py DEBUG - ANSSI enabled for file_permissions_unaurorized_world_writable (anivan-suse) 2025-11-21 15:53:25.767 logging.py DEBUG - Update mount_option_nosuid_removable_partitions (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_noexec_removable_partitions (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Update mount_option_nodev_removable_partitions (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add srg_requirement to mount_option_nodev_nonroot_local_partitions (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Fix mount_option_home_nosuid (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Fixup srg_requirement to mount_option_home_noexec (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add srg_requirement to mount_option_boot_nosuid (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add ensure_gpgcheck_never_disabled to STIG (Edgar Aguilar) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro srg_requirement_mount_option (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_nosuid_remote_filesystems (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_noexec_remote_filesystems (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to mount_option_nodev_remote_filesystems (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Remove mount_option_krb_sec_remote_filesystems from SRG-OS-000480-GPOS-00227 (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Enable all rhel8 profiles in centos8 product (Milan Lysonek) 2025-11-21 15:53:25.767 logging.py DEBUG - Fix srg_requirement_*_permission name (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_ungroupowned (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_home_directories (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement file_groupownership_home_directories (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permission_user_init_files (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_sshd_private_key (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_sshd_private_key (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_sshd_config (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_sshd_config (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_sshd_config (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Pull the cron.allow rules from the RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_monthly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_weekly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_crontab (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_hourly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_daily (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_permissions_cron_d (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro srg_requirement_directory_mode (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Fix directory mode commont (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro srg_requirement_file_mode (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_crontab (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_weekly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_monthly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_hourly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_daily (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_owner_cron_d (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_crontab (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_weekly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_monthly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_hourly (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_daily (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add fixtext and srg_requirement to file_groupowner_cron_d (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro srg_requirement_directory_group_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro srg_requirement_directory_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro srg_requirement_file_group_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro srg_requirement_file_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro fixtext_file_permissions (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro fixtext_directory_permissions (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro fixtext_directory_group_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro fixtext_directory_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro fixtext_file_group_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add macro fixtext_file_owner (Matthew Burket) 2025-11-21 15:53:25.767 logging.py DEBUG - Add new line to the end of files (Edgar Aguilar) 2025-11-21 15:53:25.768 logging.py DEBUG - Apply CPEs for krb5 packages to rhel8 (Edgar Aguilar) 2025-11-21 15:53:25.768 logging.py DEBUG - Introduce applicability CPEs for krb5 packages (Edgar Aguilar) 2025-11-21 15:53:25.768 logging.py DEBUG - Fix build issues with auditd_data_retention_admin_space_left_act and auditd_data_retention_space_left_action (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Fix template mode (Jan Černý) 2025-11-21 15:53:25.768 logging.py DEBUG - Apply suggestions from code review (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Update the fixtext for package installed and removed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - OCP4: Add compat rules for checking API server and kubelet TLS certs and keys on OCP releases <= 4.8 (Jakub Hrozek) 2025-11-21 15:53:25.768 logging.py DEBUG - OCP4: Don't use a list in platforms (Jakub Hrozek) 2025-11-21 15:53:25.768 logging.py DEBUG - Do not try to define the rc value in the Rule Test Suite mode. (Gabriel Becker) 2025-11-21 15:53:25.768 logging.py DEBUG - unit test the new function derive_id_from_file_name (Vojtech Polasek) 2025-11-21 15:53:25.768 logging.py DEBUG - extract the function which derives id from the file name (Vojtech Polasek) 2025-11-21 15:53:25.768 logging.py DEBUG - correctly load files with multiple dots in file name (Vojtech Polasek) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_tuned_removed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_scap-security-guide_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_rng-tools_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_openscap-scanner_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_nss-tools_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_gnutls-utils_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_MFEhiplsm_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_gdm_removed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_policycoreutils-python-utils_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and update srg_requirement for package_libreswan_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_openssh-clients_installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_quagga_removed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext and srg_requirement to package_tftp-server_removed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add a fixtext macro for package installed (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Clean up EOF on auditd_data_retention_space_left (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add srg_requirement to auditd_data_retention_space_left_action (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add srg_requirement to auditd_data_retention_space_left_percentage (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add srg_requirement to auditd_data_retention_admin_space_left_action (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add srg_requirement to auditd_data_retention_action_mail_acct (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add srg_requirement to auditd_data_disk_full_action (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Remove obsolete rules from SRG-OS-000480-GPOS-00227. (Gabriel Becker) 2025-11-21 15:53:25.768 logging.py DEBUG - Group rules from SRG-OS-000480-GPOS-00227 into categories. (Gabriel Becker) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext to auditd_data_retention_space_left_action (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext to auditd_data_retention_space_left_percentage (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Add fixtext to auditd_data_retention_admin_space_left_action (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Upadate fixtext in auditd_data_retention_action_mail_acct (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Update SRG-OS-000343-GPOS-00134 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Update RHEL8 profile stability data (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Select correct rules for RHEL-07-010270 (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Remove RHEL7 stigid from rule audit rule (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Select rule for RHEL-07-010200 V-204415 (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Remove unsuccessful audit syscall rules from SRG-OS-000468-GPOS-00212. (Gabriel Becker) 2025-11-21 15:53:25.768 logging.py DEBUG - Remove RHEL7 stigid from emergency target rule (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Fix a python2 syntax issue in the Test Suite. (Gabriel Becker) 2025-11-21 15:53:25.768 logging.py DEBUG - Update SRG-OS-000392-GPOS-00172 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.768 logging.py DEBUG - Remove RHEL7 stigid from rule (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Remove RHEL7 stigid from xorg-x11-server-commom removed (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Fix typo in rule ID (Watson Sato) 2025-11-21 15:53:25.768 logging.py DEBUG - Apply suggestions from code review (Edgar Aguilar) 2025-11-21 15:53:25.787 logging.py DEBUG - Update audit_immutable_login_uids yaml file (Edgar Aguilar) 2025-11-21 15:53:25.787 logging.py DEBUG - New issue template for Product Removal (Marcus Burghardt) 2025-11-21 15:53:25.787 logging.py DEBUG - Include an issue template for changes proposals (Marcus Burghardt) 2025-11-21 15:53:25.787 logging.py DEBUG - Remove the new_rule issue template (Marcus Burghardt) 2025-11-21 15:53:25.787 logging.py DEBUG - Remove stigid from SSHD rules not STIG selected (Watson Sato) 2025-11-21 15:53:25.787 logging.py DEBUG - Remove stigids from abrt rules not STIG selected (Watson Sato) 2025-11-21 15:53:25.787 logging.py DEBUG - Revert undesired change made in 6404c2075. (Gabriel Becker) 2025-11-21 15:53:25.787 logging.py DEBUG - Update docs/manual/developer/01_introduction.md (Gabriel Becker) 2025-11-21 15:53:25.787 logging.py DEBUG - update documentation status to false (Dhriti Shikhar) 2025-11-21 15:53:25.787 logging.py DEBUG - Fix a traceback in combined mode (Jan Černý) 2025-11-21 15:53:25.787 logging.py DEBUG - k8scontent: Switch to using `metal-toolbox/container-push` workflow (Juan Antonio Osorio) 2025-11-21 15:53:25.787 logging.py DEBUG - Simplify the message around the label-less approach (Marcus Burghardt) 2025-11-21 15:53:25.787 logging.py DEBUG - Update creating DISA STIG docs (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Update rule schema (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Update the style guide on rules (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Add pygithub to build guide (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Get sphinxcontrib-napoleon from GitHub (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Fix header underrun in docs (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Revise the removal policy (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Improve wording on the removal policy (Matthew Burket) 2025-11-21 15:53:25.787 logging.py DEBUG - Update audit_immutable_login_uids template (Edgar Aguilar) 2025-11-21 15:53:25.787 logging.py DEBUG - Update auditd_data_disk_error_action (Edgar Aguilar) 2025-11-21 15:53:25.787 logging.py DEBUG - Update auditd_data_disk_full_action (Edgar Aguilar) 2025-11-21 15:53:25.787 logging.py DEBUG - Publish the coverage ID and restrict repo (Matej Tyc) 2025-11-21 15:53:25.787 logging.py DEBUG - Add 'key' parameter to macro ocil_audit_rules_unsuccessful_file_modification (Jan Černý) 2025-11-21 15:53:25.787 logging.py DEBUG - Rename SRG file according to latest SRG GPOS release. (Gabriel Becker) 2025-11-21 15:53:25.787 logging.py DEBUG - Update SRG GPOS to latest version V2R3. (Gabriel Becker) 2025-11-21 15:53:25.787 logging.py DEBUG - Move join_list to general.jinja (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Fix typo (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Include guidelines for labels (Marcus Burghardt) 2025-11-21 15:53:25.788 logging.py DEBUG - Incremented instructions to file issues (Marcus Burghardt) 2025-11-21 15:53:25.788 logging.py DEBUG - Add CCE for new audit rules in RHEL9 product. (Gabriel Becker) 2025-11-21 15:53:25.788 logging.py DEBUG - Use parenteshis in nist reference for new audit rules. (Gabriel Becker) 2025-11-21 15:53:25.788 logging.py DEBUG - Add CCE to rule and this to RHEL8 sability test (Edgar Aguilar) 2025-11-21 15:53:25.788 logging.py DEBUG - Generate tmux applicability cpe (Edgar Aguilar) 2025-11-21 15:53:25.788 logging.py DEBUG - Add ol support in cpes_to_platform function (Edgar Aguilar) 2025-11-21 15:53:25.788 logging.py DEBUG - Do not use block asignments (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Change the macro to create a human readable sentence (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Remove rules not present in RHEL 8 (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Fix macro fixtext_audit_rules_unsuccessful_file_modification_rule_order (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Fix macro fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Fix macro fixtext_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Create OCIL macro for template audit_rules_unsuccessful_file_modification_rule_order (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use a more specific OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Create OCIL macro for template audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use macro ocil_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Introduce macro ocil_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Use the OCIL macro corresponding to the template (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Update OCIL by using a more specific jinja macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add OCIL macro (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Align fixtext with bash remediation (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Improve vertical whitespace (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_unlinkat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_unlink (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_renameat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_rename (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Allow to add the syscall grouping as a parameter (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_openat_rule_order (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_openat_o_trunc_write (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_openat_o_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_open_rule_order (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add a fixtext to audit_rules_unsuccessful_file_modification_open_o_trunc_write (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_open_o_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add a fixtext to audit_rules_unsuccessful_file_modification_open_by_handle_at_rule_order (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Create a fixtext macro for template audit_rules_unsuccessful_file_modification_rule_order (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Move a macro from bash.jinja to general.jinja (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Refactor: Extract macro audit_remediation_unsuccessful_file_modification_detailed_audit_file_content (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to audit_rules_unsuccessful_file_modification_open_by_handle_at_o_trunc_write (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Introduce macro fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext in audit_rules_unsuccessful_file_modification_open_by_handle_at_o_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Introduce macro fixtext_audit_rules_unsuccessful_file_modification_o_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Rename fixtext macro fixtext_audit_rules_unsuccessful_file_modification_creat (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.788 logging.py DEBUG - Add docs for srg_requirement_service_enabled (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add srg_requirement to package_audit_installed (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add srg_requirement to service_auditd_enabled (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add srg_requirement_service_enabled macro (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add macro srg_requirement_package_installed (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add severity to required attributes for rules schema (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add reboot rules to SRG-OS-000477-GPOS-00222 (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add new rule audit_privileged_commands_init (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add a new rule aaudit_privileged_commands_poweroff (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add new rule audit_privileged_commands_reboot (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add rule audit_privileged_commands_shutdown (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Revise removal of products policy (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Adjust formatting for product removal (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Update tests for bash_ensure_ini_config (Edgar Aguilar) 2025-11-21 15:53:25.788 logging.py DEBUG - Update ansible in sssd_enable_smartcards (Edgar Aguilar) 2025-11-21 15:53:25.788 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext to audit_rules_execution_restorecon (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add does not meet text to SRG-OS-000274-GPOS-00104 (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Exclude files from Code Climate (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add srg_requirement to auditd_local_events (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add srg_requirement and fixtext to configure_usbguard_auditbackend (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Update OCIL, Fix text, and SRG Requirement for audit_rules_privileged_commands_pt_chown (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Update OCIL, Fix text, and SRG Requirement for audit_rules_privileged_commands_umount (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Update OCIL, Fix text, and SRG Requirement for audit_rules_privileged_commands_mount (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to package_nfs-utils_removed (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to package_telnet-server_removed (Matthew Burket) 2025-11-21 15:53:25.788 logging.py DEBUG - Add fixtext to package_sendmail_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add fixtext to kernel_module_atm_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add fixtext to kernel_module_can_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add fixtext to kernel_module_ticp_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add fixtext to kernel_module_cramfs_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Grammar fix in chronyd_no_chronyc_network (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add for fixtext package_gssproxy_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add fixtext for package_iprutils_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add fix text macro for kernel module removal (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add fixtext macro for package removal (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to package_iprutils_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to package_gssproxy_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_cramfs_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Update srg_requirement on kernel_module_bluetooth_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_tipc_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_sctp_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_rds_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_firewire-core_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_dccp_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_can_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to kernel_module_atm_disabled (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to package_telnet-server_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Update ocil_clause on chronyd_client_only (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to package_nfs-utils_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add srg_requirement to package_sendmail_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add macro srg_requirement_kernel_module_disable (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Add macro srg_requirement_package_removed (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Remove rules from SRG-OS-000095-GPOS-00049 that are not in RHEL9 (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Upload artifacts for OCP4 SRG Mapping if its on a pull request (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Don not pass target as a parameter (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Merge _iterate_over_rules in _get_rules_to_test (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - update mapping of duplicate mails in contributors.py (Vojtech Polasek) 2025-11-21 15:53:25.789 logging.py DEBUG - update contributors (Vojtech Polasek) 2025-11-21 15:53:25.789 logging.py DEBUG - Rename method (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Split functions (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Rename "target" (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Improve handling templated test scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Move Rule to rule.py (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Simplify condition (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Do not duplicate check for the rule in the benchmark (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Check that rule exists in the benchmark sooner (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Inverse condition (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Move the rule ID comparison sooner (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Pass only the rule short ID (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Move iterate_over_rules to RuleChecker class (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Split the decision if a rule should be tested (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Update description of the Rule named tuple fields (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Merge _get_all_rule_scenarios and fetch_test_scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Split responsibilities (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Move scenario object creation (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Move fetch_test_scenarios from common to rule (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Decouple responsibility for rules from scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Extract function fetch_test_scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Pass rule into the Rule named tuple (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Move test_config to the function where it's used (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Pass the template_builder from outside of iterate_over_rules (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Add local_env_yaml to Rule named tuple (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Extract function fetch_local_test_scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Extract function fetch_templated_test_scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Move definition of the template_name variable (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Separate profiles overriding to a special method (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Add unit test on Scenario class (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Change methods in the Scenario class (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Simplify code (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Promote Scenario from named tuple to a class (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Extract Method _scenario_matches_platform (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Extract function _scenario_matches_regex (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Extract method _get_rule_scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Change misleading named tuple member name (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Remove parameters that are always class members (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Extract method _get_scenarios_by_rule_id (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Rename method _get_scenarios to _filter_scenarios (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Remove unused parameter rule_dir (Jan Černý) 2025-11-21 15:53:25.789 logging.py DEBUG - Update OCIL and fixtext in audit_rules_dac_modification_umount (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Update OCIL for audit_rules_execution_chacl (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Fix OCIL for audit_rules_execution_chcon (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Update OCIL and fixtext in audit_rules_execution_setfiles (Matthew Burket) 2025-11-21 15:53:25.789 logging.py DEBUG - Fix doc error in fixtext_audit_rules_privileged_commands (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Fix EOF in a macro files (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Fix paramter error in complete_ocil_entry_audit_privileged_commands macro (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add a macro ocil_clause_audit (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Fix doc error in complete_ocil_entry_audit_privileged_commands (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add docs for fixtext_audit_rules_command macro (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Rename fixtext_privileged_commands to better fit (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_setsebool (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_setfiles (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_semanage (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_setfacl (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update OCIL and OCIL Clause in audit_rules_execution_chacl (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Fix srg_rule_audit to also check for None values (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add missing CCEs for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Clean up code climate issues (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_pam_timestamp_check (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_delete (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_finit (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_init (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_userhelper (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_unix_upate (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_unix_chkpwd (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_sudoedit (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_sudo (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_ssh-keysign (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_su (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_ssh-agent (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_postqueue (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_postdrop (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_passwd (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_newgrp (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_kmod (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_gpasswd (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_crontab (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_chsh (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_chage (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_usermod (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update OCIL, OCIL clause and add fixtext and srg_requirement to audit_rules_media_export (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add ocil_fix_srg_privileged_command macro (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext_privileged_commands macro (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add complete_ocil_entry_audit_privileged_commands macro (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add macro srg_requirement_audit_command (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Fix doc string in srg_requirement_audit_syscall (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Add script to find rules needing keys for the STIG (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update lineinfile documentation (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add tests to sssd_enable_smartcards (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add policy for removal of products (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update rule sssd_enable_smartcards (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update linux_os/guide/system/software/integrity/fips/enable_dracut_fips_module/ansible/shared.yml (vojtapolasek) 2025-11-21 15:53:25.790 logging.py DEBUG - no fatal fail when return code is 1 (Vojtech Polasek) 2025-11-21 15:53:25.790 logging.py DEBUG - Make the repository safe (Matěj Týč) 2025-11-21 15:53:25.790 logging.py DEBUG - Send coverage to Code Climate (Matěj Týč) 2025-11-21 15:53:25.790 logging.py DEBUG - Update tests directory_group_ownership_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update directory_group_ownership_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add the plugins to the config file (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update bash in rule to handle commented lines (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update tests of directory_permissions_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update ocil and fixtext of rule (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add RHEL requirements for new rule (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update rule accounts_users_home_files_permissions (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update SRG references for audit permissions (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - OCP4 build: Don't use fedora-33 anymore (Jakub Hrozek) 2025-11-21 15:53:25.790 logging.py DEBUG - Update SRG-OS-000258-GPOS-00099 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update SRG-OS-000257-GPOS-00098 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update PAM password hash algo remediation (Federico Ramirez) 2025-11-21 15:53:25.790 logging.py DEBUG - Update SRG-OS-000066-GPOS-00034 and SRG-OS-000384-GPOS-00167. (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Added new rule sssd_has_trust_anchor (Matthew Burket) 2025-11-21 15:53:25.790 logging.py DEBUG - Update PAM password hashing algorithm for OL8 (Federico Ramirez) 2025-11-21 15:53:25.790 logging.py DEBUG - Update sssd_offline_cred_expiration description (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update docs to point to correct constants file path (Dhriti Shikhar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update docs to point to correct build_products file (Dhriti Shikhar) 2025-11-21 15:53:25.790 logging.py DEBUG - update docs for creating product (Dhriti Shikhar) 2025-11-21 15:53:25.790 logging.py DEBUG - Remove ol8 from rsyslog_remote_loghost fixes (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - update docs (Dhriti Shikhar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update directory_permissions_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add tests to directory_permissions_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update directory_permissions_var_log_audit[rhel8] (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update directory_permissions_var_log_audit [ol8] (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Fix sssd_enable_certmap OVAL (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update tests in dconf_gnome_disable_user_list (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add dconf_gnome_disable_user_list to STIG profile (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update file_permissions_var_log_audit description (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add tests to file_permissions_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update file_permissions_var_log_audit bash[rhel8] (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update bash in file_permissions_var_log_audit (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update file_permissions_var_log_audit for rhel8 (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Update file_permissions_var_log_audit for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_setsebool. (Gabriel Becker) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_setfiles. (Gabriel Becker) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_semanage. (Gabriel Becker) 2025-11-21 15:53:25.790 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_chcon. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_setfacl. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_execution_chacl. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext macro for audit system commands. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_dac_modification_umount. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Only print group text if variable is defined in fixtext. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext and srg requirement to audit_rules_dac_modification_umount2. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Add OCP4 STIG profile (Dhriti Shikhar) 2025-11-21 15:53:25.791 logging.py DEBUG - OCP NIST controls: Remove link to a PR (Jakub Hrozek) 2025-11-21 15:53:25.791 logging.py DEBUG - Presence of management function Configure host-based firewall is in FMT_SMF_EXT.1.1, not in FMT_MOF_EXT.1. (Jan Pazdziora) 2025-11-21 15:53:25.791 logging.py DEBUG - The debug-shell.target does not exist, the rule is about service. (Jan Pazdziora) 2025-11-21 15:53:25.791 logging.py DEBUG - Replace the system by full name (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Apply suggestions from code review (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Use a unique account name for the superusers account (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Update OCIL (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Use grub_command macro in rules in SRG-OS-000080-GPOS-00048 (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add an update operation to macro grub_command (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext in grub2_uefi_password (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Align OCIL with OVAL in grub2_uefi_password (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext in grub2_uefi_admin_username (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Align OCIL with OVAL in grub2_uefi_admin_username (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext for grub2_password (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Align OCIL with OVAL in grub2_password (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext for grub2_admin_username (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Update OCIL in grub2_admin_username (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext to require_singleuser_auth (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Align OCIL with OVAL for require_singleuser_auth (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext to require_emergency_target_auth (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Update OCIL for require_emergency_target_auth (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Replace RHEL 9 by full name (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Update OL8 STIG severities (Edgar Aguilar) 2025-11-21 15:53:25.791 logging.py DEBUG - Update set_password_hashing_min_rounds_logindefs (Edgar Aguilar) 2025-11-21 15:53:25.791 logging.py DEBUG - Set check_root_user to true on multiple rules ol8 (Edgar Aguilar) 2025-11-21 15:53:25.791 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Update nightly build links to github actions generated artifacts. (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Update titles for nightly builds (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - Stop SSGTS when a wrong domain name is informed (Marcus Burghardt) 2025-11-21 15:53:25.791 logging.py DEBUG - Update tests for sssd_offline_cred_expiration (Edgar Aguilar) 2025-11-21 15:53:25.791 logging.py DEBUG - Update OVAL for sssd_offline_cred_expiration (Edgar Aguilar) 2025-11-21 15:53:25.791 logging.py DEBUG - Update sssd_offline_cred_expiration OVAL [rhel8] (Edgar Aguilar) 2025-11-21 15:53:25.791 logging.py DEBUG - Update sssd_offline_cred_expiration OVAL for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.791 logging.py DEBUG - Add OCP4 to the SRG Mapping CI job (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - Add check and fixtext to Contributing content docs (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - Update SRG-OS-000379-GPOS-00164 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - In the docs Fix -> Fixtext (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - Add Code Climate config (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - Added a config for pycodestyle (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - Improve wording (Matěj Týč) 2025-11-21 15:53:25.791 logging.py DEBUG - srg_gpos: Fix typos in attribute names (Jakub Hrozek) 2025-11-21 15:53:25.791 logging.py DEBUG - Do not include symlink_state in 5.10 content (Watson Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Adds ocp4 controls (Dhriti Shikhar) 2025-11-21 15:53:25.791 logging.py DEBUG - bump version to 0.1.63 (Vojtech Polasek) 2025-11-21 15:53:25.791 logging.py DEBUG - SUSE SLE15 create profile for hardening cloud images (sampsone) 2025-11-21 15:53:25.791 logging.py DEBUG - Rename test scenario with wrong extension (Watson Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Remove duplicated ocp4 test result (Watson Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Update rule to allow special bits in library dirs (Watson Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Fix typo and update docs (Watson Yuuma Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Update linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/rule.yml (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Update linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/rule.yml (Gabriel Becker) 2025-11-21 15:53:25.791 logging.py DEBUG - Do not macro expand swap files of test scenarios (Watson Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Improve fixtext in kernel_module_dccp_disabled (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Update OCIL and fixtext in usbguard_generate_policy (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext to service_usbguard_enabled (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fixtext to package_usbguard_installed (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Apply suggestions from code review (Watson Yuuma Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Address review feedback (Watson Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Fix template not found error message (Watson Sato) 2025-11-21 15:53:25.791 logging.py DEBUG - Add RHEL9 package name into rule service_dhcpd_disabled (Matus Marhefka) 2025-11-21 15:53:25.791 logging.py DEBUG - Remove redundant service_disabled custom test scenarios (Matus Marhefka) 2025-11-21 15:53:25.791 logging.py DEBUG - Remove redundant service_enabled custom test scenarios (Matus Marhefka) 2025-11-21 15:53:25.791 logging.py DEBUG - Remove remaining rules (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Change status to does not meet (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Change fix to fixtext (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Explicitely set variable in controls file (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Add fix for accounts_tmout (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Improve OCIL clause for accounts_tmout (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Update SRG-OS-000163-GPOS-00072 for RHEL9 STIG (Jan Černý) 2025-11-21 15:53:25.791 logging.py DEBUG - Split nightly builds (Matthew Burket) 2025-11-21 15:53:25.791 logging.py DEBUG - Added Nightly builds action (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Be explicit about adding tests when rules need them (Matej Tyc) 2025-11-21 15:53:25.792 logging.py DEBUG - Specify current version for Packit (Milan Lysonek) 2025-11-21 15:53:25.792 logging.py DEBUG - Introduce Testing Farm (Milan Lysonek) 2025-11-21 15:53:25.792 logging.py DEBUG - Introduce packit-as-a-service (Milan Lysonek) 2025-11-21 15:53:25.792 logging.py DEBUG - Revert efb925b462a541d55dffff2eab6a49b011e56ff3 (Matus Marhefka) 2025-11-21 15:53:25.792 logging.py DEBUG - SSGTS: update prefix name of the snapshots wrt podman limitation (Matus Marhefka) 2025-11-21 15:53:25.792 logging.py DEBUG - SSGTS: Extend cpes_to_platform function to handle CentOS (Matus Marhefka) 2025-11-21 15:53:25.792 logging.py DEBUG - Replace Scrutinizer badage with Code Climate (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Update README (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Remove All Contributors from the README (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - clean_components_post_updating, enabe bash remediation for sle15 (sampsone) 2025-11-21 15:53:25.792 logging.py DEBUG - Add tests to rsyslog_cron_logging (Edgar Aguilar) 2025-11-21 15:53:25.792 logging.py DEBUG - OCP: Update file_groupowner_ovs_conf_db rule (vincent) 2025-11-21 15:53:25.792 logging.py DEBUG - Update OVAl from rsyslog_cron_logging (Edgar Aguilar) 2025-11-21 15:53:25.792 logging.py DEBUG - make test scenarios modify all relevant directories (Vojtech Polasek) 2025-11-21 15:53:25.792 logging.py DEBUG - Test (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Switch oscap-ssh in SSGTS GHA to maint-1.3. (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Add Centos Stream Dockerfiles and enable them in GHA for testing. (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Enable recursivity for root_permissions_syslibrary_files rule (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Update shell_lineinfile OVAL template to handle escaping of dollar sign (Matus Marhefka) 2025-11-21 15:53:25.792 logging.py DEBUG - Add templated test scenarios for shell_lineinfile template (Matus Marhefka) 2025-11-21 15:53:25.792 logging.py DEBUG - Use correct path for sshd options in ansible remediation. (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Parametrize test suite name (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Remove similar test scenarios on rules templated by file_groupownership (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - drop custom test scenarios from kernel_module_disabled (Vojtech Polasek) 2025-11-21 15:53:25.792 logging.py DEBUG - create tests for kernel_module_disabled template (Vojtech Polasek) 2025-11-21 15:53:25.792 logging.py DEBUG - Remove redundant package_installed custom test scenarios (Matej Tyc) 2025-11-21 15:53:25.792 logging.py DEBUG - Introduce a proper custom test scenario (Matej Tyc) 2025-11-21 15:53:25.792 logging.py DEBUG - add test scenarios covering missing files (Vojtech Polasek) 2025-11-21 15:53:25.792 logging.py DEBUG - remove redundant test scenario (Vojtech Polasek) 2025-11-21 15:53:25.792 logging.py DEBUG - Remove redundant package_removed test scenarios (Matej Tyc) 2025-11-21 15:53:25.792 logging.py DEBUG - Update ocp4_content fedora version to latest (Lance Bragstad) 2025-11-21 15:53:25.792 logging.py DEBUG - Refactor snapshot prefix related functions (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Point to new content gh pages. (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Remove Link Checker from the README (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Cleanup duplicate scenarios for sshd_lineinfile template (Matus Marhefka) 2025-11-21 15:53:25.792 logging.py DEBUG - Skip test scenarios when prep scripts fail (Matej Tyc) 2025-11-21 15:53:25.792 logging.py DEBUG - Include the keep-snapshots option to ssgts (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Use secret token to publish pages to a different repository. (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Simplify the snapshot_lookup function (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Include snapshot cleanup functions for SSGTS (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Update Fedora-based Actions to latest Fedora (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Sysctl: template Remediate files in /run/sysctl.d (Watson Sato) 2025-11-21 15:53:25.792 logging.py DEBUG - Don't scan /usr/lib/sysctl.d/ for conf files (Watson Sato) 2025-11-21 15:53:25.792 logging.py DEBUG - Add templated tests for dconf_ini_file. (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Document recent changes to sysctl template (Watson Sato) 2025-11-21 15:53:25.792 logging.py DEBUG - Workaround for git unsafe repository CVE-2022-24765 (Milan Lysonek) 2025-11-21 15:53:25.792 logging.py DEBUG - Publish content pages to a different repository. (Gabriel Becker) 2025-11-21 15:53:25.792 logging.py DEBUG - Add template mode to SSGTS (Watson Sato) 2025-11-21 15:53:25.792 logging.py DEBUG - Add ocil_clause to service_ufw_enabled (Eduardo Barretto) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to aide_check_audit_tools (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to sysctl_crypto_fips_enabled (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Fix fixtext in sysctl_crypto_fips_enabled (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to configure_gnutls_tls_crypto_policy (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to dconf_gnome_disable_autorun (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to dconf_gnome_disable_automount_open (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to selinux_state (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to package_policycoreutils_installed (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to grub2_slub_debug_argument (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to service_autofs_disabled (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to kernel_module_usb-storage_disabled (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to root_permissions_syslibrary_files (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to file_permissions_library_dirs (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to file_permissions_binary_dirs (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to file_ownership_library_dirs (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to file_ownership_binary_dirs (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to file_groupownership_system_commands_dirs (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to dir_group_ownership_library_dirs (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to dir_perms_world_writable_sticky_bits (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to dir_perms_world_writable_root_owned (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to sysctl_net_ipv4_tcp_syncookies (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Add srg_requirement to package_firewalld_installed (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Grammer fix in gid_passwd_group_same (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Fix Jinja error force_opensc_card_drivers (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Clean up accounts_password_pam_lcredit (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Update OCIL clause for accounts_password_pam_enforce_root (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Fix "the operating system" in fixtext for accounts_password_pam_dcredit (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Fix the check for SRG-OS-000191-GPOS-00080 (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Pull the explicit rules for USB guard (Matthew Burket) 2025-11-21 15:53:25.792 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Remove html tags from fixtext and include sudo (Marcus Burghardt) 2025-11-21 15:53:25.792 logging.py DEBUG - Add a sentence into OCIL (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Use a modern hash function (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Use XCCDF Variable in fixtext (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Separate decision on config file path (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Remove quotes (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Update OCIL and add fixtext to accounts_password_pam_unix_rounds_system_auth (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Update rule accounts_password_pam_unix_rounds_password_auth (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Use sudo with standard user prompt (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Update OCIL and add fixtext to set_password_hashing_algorithm_systemauth (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Add OCIL and fixtext to set_password_hashing_algorithm_logindefs (Jan Černý) 2025-11-21 15:53:25.792 logging.py DEBUG - Improve OCIL and add fixtext in set_password_hashing_algorithm_libuserconf (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove var_system_crypto_policy (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Fix missing new line at the of files. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove rules from SRG-OS-000458-GPOS-00203 that don't belong there. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove superfluous quotes (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg requirement text to deletion audit syscalls. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Add fixtext to service_pcscd_enabled (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Add reviewer comments (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add a fixtext to package_pcsc-lite_installed (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Add variable setting to SRG file (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove unused cmake macros (Jiri Odehnal) 2025-11-21 15:53:25.793 logging.py DEBUG - Update fixtext and srg_requirement of creat/open/truncate syscalls (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Add variable value (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Restrict the symlink test to OVAL 5.11 (Watson Sato) 2025-11-21 15:53:25.793 logging.py DEBUG - Consider file/link/dir while applying ansible remediation on sysctl template. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Include relevant variables on SRG-OS-000077-GPOS-00045 (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Update accounts_password_pam_pwhistory_remember rules (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Include fixtext on accounts_password_pam_unix_remember rule (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Include respective variables on SRG-OS-000021-GPOS-00005 (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Include fixtext in accounts_passwords_pam_faillock_interval rule (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Include fixtext in accounts_passwords_pam_faillock_enforce_local rule (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Small adjustment in description. (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove duplicated warning section (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to grub2_page_poison_argument (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to grub2_vsyscall_argument (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add a warning about remediation to libreswan_approved_tunnels (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to libreswan_approved_tunnels (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add fixtext to libreswan_approved_tunnels (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Improve the OCIL for libreswan_approved_tunnels (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Swap package_libreswan_installed for libreswan_approved_tunnels (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Pull duplicate rules for rsyslog encryption (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to package_rsyslog-gnutls_installed (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to sshd_enable_pubkey_auth (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add rhel9 CCE to sshd_enable_pubkey_auth (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to gid_passwd_group_same (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Update OCIL clause for group_unique_id (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to group_unique_id (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add CCE for RHEL9 on group_unique_id (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to force_opensc_card_drivers (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to configure_opensc_card_drivers (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Don't scan dir with preconfigured sysctls in RHEL (Watson Sato) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove package_krb5-workstation_removed from the STIG (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to package_krb5-workstation_removed (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to kernel_module_bluetooth_disabled (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to grub2_pti_argument (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to chronyd_no_chronyc_network (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Add srg_requirement to chronyd_client_only (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Update enable_dracut_fips_module rule (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - ocil_file_permissions statement should be false on a correctly configured system (Matthew Burket) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove controls/stig_rhel9 (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Update fixtext and srg_requirement of attr syscalls. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Update fixtext and srg_requirement of chown syscalls. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Update fixtext and srg_requirement of chmod syscalls. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove file_ownership_var_log_audit (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove file_ownership_var_log_audit (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Fix pidof path in ubuntu on chronyd_or_ntpd_set_maxpoll bash (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add Ubuntu platform to chronyd_or_ntpd_set_maxpoll bash (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add chronyd_sync_clock to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add tests to chronyd_sync_clock (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add rule chronyd_sync_clock (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Update chrony tests to use chrony_conf_path (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Update shared ansible to use chrony_conf_path (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Update shared bash script to fix chronyd path (Richard Maciel Costa) 2025-11-21 15:53:25.793 logging.py DEBUG - Update shared ovals to use chrony_conf_path (Richard Maciel Costa) 2025-11-21 15:53:25.793 logging.py DEBUG - Update rule text to use chrony_conf_path (Richard Maciel Costa) 2025-11-21 15:53:25.793 logging.py DEBUG - Add overridden chrony_conf_path for Debian-likes (Richard Maciel Costa) 2025-11-21 15:53:25.793 logging.py DEBUG - Add chrony_conf_path as an implied property (Richard Maciel Costa) 2025-11-21 15:53:25.793 logging.py DEBUG - Add package_chrony_installed to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add stigid to package_chrony_installed (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove trailing white space in Ubuntu 20.04 STIG profile (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add ufw_only_required_services to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add rule ufw_only_required_services (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add ufw_rate_limit to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add rule ufw_rate_limit (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add service_ufw_enabled to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add stigid, disa and srg to service_ufw_enabled (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add service_ufw_enabled for CIS 3.5.1.3 (Alexander Scheel) 2025-11-21 15:53:25.793 logging.py DEBUG - Add package_ufw_installed to Ubuntu 20.04 STIG profile (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add stigid, disa and srg references to package_ufw_installed (Eduardo Barretto) 2025-11-21 15:53:25.793 logging.py DEBUG - Add package_ufw_installed for CIS 3.5.1.1 (Alexander Scheel) 2025-11-21 15:53:25.793 logging.py DEBUG - Add Uncomplicated Firewall (ufw) group (Alexander Scheel) 2025-11-21 15:53:25.793 logging.py DEBUG - Use sudo in systemctl related OCIL macros (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Style formatting in sysctl_crypto_fips_enabled rule (Marcus Burghardt) 2025-11-21 15:53:25.793 logging.py DEBUG - Improve text of SRG fixtext macro title. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Fix no newline at the of the file. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove unrelated audit rules and add package audit rule to SRGs. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Fix typos. (Gabriel Becker) 2025-11-21 15:53:25.793 logging.py DEBUG - Change ocil_clause_entry_mount_option (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Use sudo in OCIL (Jan Černý) 2025-11-21 15:53:25.793 logging.py DEBUG - Remove variables from root file (Jan Černý) 2025-11-21 15:53:25.794 logging.py DEBUG - Fix build due to symbol for accounts_password_set_min_life_existing (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Fix files without a newline at the end (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to accounts_password_set_max_life_existing (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Remove duplicate fixtext in accounts_maximum_age_login_defs (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to accounts_maximum_age_login_defs (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Update OCIL for accounts_password_set_min_life_existing (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to accounts_password_set_min_life_existing (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to accounts_minimum_age_login_defs (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to package_vsftpd_removed (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to accounts_password_all_shadowed_sha512 (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Clean up the PAM credit OCIL (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to accounts_password_pam_enforce_root (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Addd srg_requirement to sssd_enable_certmap (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Addd srg_requirement to file_permissions_etc_audit_rulesd (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Addd srg_requirement to file_permissions_etc_audit_auditd (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to audit_immutable_login_uids (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to auditd_freq (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to file_ownership_var_log_audit_stig (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to file_group_ownership_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to directory_permissions_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Clean up OCIL clause in directory_permissions_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to directory_ownership_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Addd srg_requirement to directory_group_ownership_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to file_permissions_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to auditd_freq (Matthew Burket) 2025-11-21 15:53:25.794 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_gshadow (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_usergroup_modification_group (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_sudoers_d (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_sudoers (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_login_events_tallylog (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_login_events_lastlog (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to audit_rules_login_events_faillock (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add a macro file for srg_requirement (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to package_audit_installed (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to service_auditd_enabled (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to grub2_audit_argument (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to auditd_name_format (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to account_unique_id (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_unlock_time (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_interval (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_deny_root (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to accounts_passwords_pam_faillock_deny (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requirement to sshd_set_loglevel_verbose (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Remove audit_rules_usergroup_modification from the GPOS SRG (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Filter out symlinks referencing default dirs (Watson Sato) 2025-11-21 15:53:25.810 logging.py DEBUG - Add tests to ensure valid symlinks are checked (Watson Sato) 2025-11-21 15:53:25.810 logging.py DEBUG - Source requirement for SRG Export from rule or control (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requriment account_emergency_expire_date (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Add srg_requriment to rule (Matthew Burket) 2025-11-21 15:53:25.810 logging.py DEBUG - Update the describe_firewalld_allow macro (Marcus Burghardt) 2025-11-21 15:53:25.810 logging.py DEBUG - Separate the state from the object and check it (Watson Sato) 2025-11-21 15:53:25.810 logging.py DEBUG - Restrict test to sysctl.conf and /usr/sysctl.d (Watson Sato) 2025-11-21 15:53:25.810 logging.py DEBUG - Update SRG-OS-000297-GPOS-00115 for RHEL9 STIG (Marcus Burghardt) 2025-11-21 15:53:25.810 logging.py DEBUG - Remove test scenarios from service_firewalld_enabled rule (Marcus Burghardt) 2025-11-21 15:53:25.811 logging.py DEBUG - Use a full name in fixtexts (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_minclass (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_maxrepeat (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_maxclassrepeat (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext and update OCIL in accounts_password_pam_difok (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_tmp_nosuid (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_tmp_noexec (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_tmp_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_log_nosuid (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_log_noexec (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_log_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_log_audit_nosuid (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_log_audit_noexec (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_var_log_audit_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_tmp_nosuid (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_tmp_noexec (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_tmp_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Use jinja macro for fixtext in grub2_audit_backlog_limit_argument. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_nodev_nonroot_local_partitions (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add sudo to the command in OCIL (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_home_nosuid (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Remove unnecessary blank space from jinja macro text. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Add package_audit_installed rule to SRG-OS-000254-GPOS-00095 control. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Update SRG section of audit package/service with latest RHEL8 STIG info. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_home_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_dev_shm_nosuid (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_dev_shm_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_boot_nosuid (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to mount_option_boot_nodev (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Introduce macro fixtext_mount_option (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to root_permissions_syslibrary_files (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add test scenarios for sysctl symlink (Watson Sato) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL in root_permissions_syslibrary_files (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext in file_permissions_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL in file_permissions_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to file_permissions_binary_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL in file_permissions_binary_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to file_ownership_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL in file_ownership_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Avoid using empty variable when no symlinks exist (Watson Sato) 2025-11-21 15:53:25.811 logging.py DEBUG - Add new macro for audit configuration fixtext field. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Add package_audit_installed to SRG-OS-000255-GPOS-00096. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to file_ownership_binary_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL to file_ownership_binary_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext in file_groupownership_system_commands_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL in file_groupownership_system_commands_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to dir_ownership_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL in dir_ownership_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to dir_group_ownership_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL on dir_group_ownership_library_dirs (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Remove code duplication by using bash and ansible macros (Marcus Burghardt) 2025-11-21 15:53:25.811 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_temp_expire_date/rule.yml (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Update shared/macros/warning.jinja (Marcus Burghardt) 2025-11-21 15:53:25.811 logging.py DEBUG - Create warning_rule_depracated_by macro. (Marcus Burghardt) 2025-11-21 15:53:25.811 logging.py DEBUG - Remediation and improvement for file_permissions_home_dirs rule (Marcus Burghardt) 2025-11-21 15:53:25.811 logging.py DEBUG - Update controls/srg_gpos/SRG-OS-000112-GPOS-00057.yml (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Filter out symlinks (Watson Sato) 2025-11-21 15:53:25.811 logging.py DEBUG - Use the XCCDF variable in fixtext (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Clean up the text in account_temp_expire_date (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Update SRG-OS-000024-GPOS-00007 (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Add rationale to SRG-OS-000112-GPOS-00057 (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Move var_password_pam_ucredit to SRG-OS-000069-GPOS-00037 (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Fix typo in accounts_password_pam_ucredit (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL for accounts_password_pam_ucredit (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to accounts_password_pam_ucredit (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Add variables to SRG GPOS control according to RHEL9 STIG profile. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Fix title text of SRG-OS-000163-GPOS-00072. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Add macroed ocil clause for service disabled rules. (Gabriel Becker) 2025-11-21 15:53:25.811 logging.py DEBUG - Bump OL7 STIG version to v2r7 (Federico Ramirez) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to audit_immutable_login_uids (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Remove rule file_ownership_var_log_audit from SRG-OS-000057-GPOS-00027 (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add OCIL and fixtext to directory_permissions_var_log_audit (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add OCIL and fixtext to audit_rules_immutable (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to auditd_data_retention_action_mail_acct (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add fixtext to rule audit_rules_system_shutdown (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update the description to be aligned with Bash remediation (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Update postfix_client_configure_mail_alias for RHEL 9 STIG (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Fix grub_command macro for Ubuntu (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Fix variable substitution in SRG export (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Reformat OCIL text (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add a fixtext to configure_libreswan_crypto_policy (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Set variables (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Add forgotten CCE ID for file_permissions_unauthorized_sgid (teacup-on-rockingchair) 2025-11-21 15:53:25.811 logging.py DEBUG - Update OCIL clause and add fixtext for rsyslog_remote_loghost (Matthew Burket) 2025-11-21 15:53:25.811 logging.py DEBUG - Initial definition of ANSSI BP28 minmal profile for SLE (teacup-on-rockingchair) 2025-11-21 15:53:25.811 logging.py DEBUG - Add OVAL for gitops_operator_exists rule (vincent) 2025-11-21 15:53:25.811 logging.py DEBUG - Add a fixtext to sshd_rekey_limit (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Remove mentions of 32 bits systems (Jan Černý) 2025-11-21 15:53:25.811 logging.py DEBUG - Do not remove directory in audit_rules_sudoers empty.fail.sh (Milan Lysonek) 2025-11-21 15:53:25.811 logging.py DEBUG - Add sysctl_fs_protected_symlinks and sysctl_fs_protected_hardlinks to SRG-OS-000312-GPOS-00123 (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Document new Jinja macros (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Use sudo in ocil_grub2_argument (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Trim white space in grub_command (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix broken grub2-mkconfig argument (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext for sudo_require_reauthentication (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Add machine platform to xwindows_runlevel_target (Milan Lysonek) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix incomplete SRG title (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Replace operating system by full name (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Complete dconf_ini_file_fix macro (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Extend rationale (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix for dconf_gnome_disable_autorun (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix to dconf_gnome_disable_automount_open (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix to service_autofs_disabled (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add OCIL clause in service_autofs_disabled (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix to kernel_module_usb-storage_disabled (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix to usbguard_allow_hub (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add Ansible to usbguard_allow_hub (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix to usbguard_allow_hid_and_hub (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add Ansible to usbguard_allow_hid_and_hub (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix to usbguard_allow_hid (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add Ansible to usbguard_allow_hid (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Assign a RHEL9 CPE to rule usbguard_allow_hid (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext for use_pam_wheel_for_su (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Add a grouping notice to fixtext (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Align 64 bit system Ansible remediation (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Remove sudo_require_authentication from control (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Update RHEL8 STIG to v1r6 (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Update DISA STIG RHEL8 SCAP content to V1R5 (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Create macro ansible_grub2_bootloader_argument_absent (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Update DISA RHEL8 STIG manual benchmark to V1R6 (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Create macro ansible_grub2_bootloader_argument (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add OCIL and fixtext to rule bios_enable_execution_restrictions (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to sysctl_kernel_kptr_restrict (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Update rule sysctl_kernel_exec_shield (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Unify Bash remediations in GRUB templates (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Remove duplicate platform (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Use grub_command in grub2_bootloader_argument_remediation (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Unify grub_command macro arguments (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Move macro grub_command to general macros (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Refactor Jinja fixtext macros (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Added control response for OCP:CM, MA, IA (vincent) 2025-11-21 15:53:25.812 logging.py DEBUG - Update DISA CCI reference (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - OCP: Added control resonse for NIST AU (vincent) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix text to rsyslog_encrypt_offload_actionsendstreamdrivermode (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to rsyslog_encrypt_offload_defaultnetstreamdriver (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to package_rsyslog_installed (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix text to rsyslog_encrypt_offload_actionsendstreamdriverauthmode (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Remove audispd rules from SRG-OS-000479-GPOS-00224 (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Remove empty rules file (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - fix: fedora: define login_defs in platform_package_overrides (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix text to grub2_audit_backlog_limit_argument (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix text to partition_for_var_log_audit (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fix text to auditd_audispd_configure_sufficiently_large_partition (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - cleanup: use one space with # platform consistently (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - cleanup: auditd_audispd_encrypt_sent_records: if multi_platform_all no need of others (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - cleanup: sshd_use_priv_separation: if multi_platform_all no need of others (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - bugfix: display_login_attempts: ensure \s is before keyword (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - Introduce fixtext macros for GRUB arguments (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Check whole file path instead of its file name (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Add tests for duplicate options (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Add comma to ocil question in the SRG mapping text. (Gabriel Becker) 2025-11-21 15:53:25.812 logging.py DEBUG - Shade rows that don't have fix text (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Apply suggestions from code review (Earl Sampson) 2025-11-21 15:53:25.812 logging.py DEBUG - bugfix: display_login_attempts: quote . in pam_lastlog.so when matching with regex (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - Update SRG-OS-000358-GPOS-00145 to inherently met (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Use BaseLoader to variable support for SRG Export (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Remove extranious SRG ids from audit_rules_suid_privilege_function (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - Update OCIL clause on audit_rules_suid_privilege_function (Matthew Burket) 2025-11-21 15:53:25.812 logging.py DEBUG - change: use pkg_manager_config_file to allow fedora to work (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - change: ensure_gpgcheck_repo_metadata: support fedora (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - change: clean_components_post_updating: support fedora (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - cleanup: ensure_gpgcheck_globally_activated: all sle are zypper (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - cleanup: clean_components_post_updating: simplify yum platform rule (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - fix: clean_components_post_updating: sle15 is zypper (Markus Linnala) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix firewalld command for adding services (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix typo (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix syscall name in macro text (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix ansible remediation of dconf_gnome_screensaver_lock_delay. (Gabriel Becker) 2025-11-21 15:53:25.812 logging.py DEBUG - Upgrade cosign-installer github action to v2.3.0 (Juan Antonio Osorio) 2025-11-21 15:53:25.812 logging.py DEBUG - Remove reference to SRG-OS-000467-GPOS-00211 (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to audit_delete_success (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to audit_delete_failed (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_unlinkat (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_unlink (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_rmdir (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to audit_rules_file_deletion_events_renameat (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Add fixtext to audit_file_deletion_events (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Create a Jinja macro fixtext_audit_rules_file_deletion_events (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/rule.yml (Jan Černý) 2025-11-21 15:53:25.812 logging.py DEBUG - Exclude configure_usbguard_auditbackend from counting (vincent) 2025-11-21 15:53:25.812 logging.py DEBUG - Add unit tests for gnome screensaver settings. (Gabriel Becker) 2025-11-21 15:53:25.812 logging.py DEBUG - Fix deduplication of parameters (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Simplify the regex for when SYSCTLVAL is defined (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Avoid directly referencing empty object collections (Watson Sato) 2025-11-21 15:53:25.812 logging.py DEBUG - Print rule identifiers in utils/compare_results.py (Milan Lysonek) 2025-11-21 15:53:25.813 logging.py DEBUG - Change utils/compare_results.py to be albe analyse oscap --stig-viewer result (Milan Lysonek) 2025-11-21 15:53:25.813 logging.py DEBUG - address review comments, remove unneeded space. (sampsone) 2025-11-21 15:53:25.813 logging.py DEBUG - SUSE enable remediation configure_openssl_crypto_policy (rebased) (sampsone) 2025-11-21 15:53:25.813 logging.py DEBUG - Change UMASK to uppercase (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - from code review, remove double comma (Earl Sampson) 2025-11-21 15:53:25.813 logging.py DEBUG - Test include with wildcarding (*.conf) (sampsone) 2025-11-21 15:53:25.813 logging.py DEBUG - Add check for unique source of sysctl parameters (Watson Sato) 2025-11-21 15:53:25.813 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_ocredit/rule.yml (Marcus Burghardt) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix pep issues. (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Add tests two definitions of sysctl parameters (Watson Sato) 2025-11-21 15:53:25.813 logging.py DEBUG - Move the appropriate comment to a Jinja var (Watson Sato) 2025-11-21 15:53:25.813 logging.py DEBUG - products/alinux2: supports Alibaba Cloud Linux 2 (YiLin.Li) 2025-11-21 15:53:25.813 logging.py DEBUG - configure_openssl_crypto_policy: OpenSSL v3.0 has = in include (Markus Linnala) 2025-11-21 15:53:25.813 logging.py DEBUG - Add ssh_client_rekey_limit to SRG-OS-000424-GPOS-00188 (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Replace the system by full name (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Remove SRG-OS-000480-GPOS-00225 (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix typo in accounts_passwords_pam_faillock_unlock_time ocil. (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Kubernetes container image: Use lowercase for image repository (Juan Antonio Osorio) 2025-11-21 15:53:25.813 logging.py DEBUG - OCP: Added control response for SI group (vincent) 2025-11-21 15:53:25.813 logging.py DEBUG - Update from review comments: (sampsone) 2025-11-21 15:53:25.813 logging.py DEBUG - cleanup: auditing: remove unnecessary mkdir -p /etc/audit/rules.d (Markus Linnala) 2025-11-21 15:53:25.813 logging.py DEBUG - fix: auditing: ensure audit package installed (Markus Linnala) 2025-11-21 15:53:25.813 logging.py DEBUG - Add SUSE to remediation for: audit_rules_... (sampsone) 2025-11-21 15:53:25.813 logging.py DEBUG - fix: audit_ospp_general/tests/correct_rules.pass.sh: add missing bash shebang (Markus Linnala) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to ensure_redhat_gpgkey_installed (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to ensure_gpgcheck_never_disabled (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to ensure_gpgcheck_local_packages (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to ensure_gpgcheck_globally_activated (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to package_subscription-manager_installed (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to sysctl_kernel_kexec_load_disabled (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Update wording in OCIL clause in accounts_umask rules (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Update OCIL and add fixtext accounts_umask_etc_profile (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Update OCIL and add fixtext accounts_umask_etc_login_defs (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Update OCIL and add fixtext accounts_umask_etc_csh_cshrc (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add variable var_accounts_user_umask to SRG (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Update rule accounts_umask_etc_bashrc (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to accounts_logon_fail_delay (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add variable var_accounts_fail_delay to SRG (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to accounts_password_pam_retry (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to accounts_password_pam_dictcheck (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Remove rules from SRG files that are not expected to be there. (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Update controls/srg_gpos/SRG-OS-000266-GPOS-00101.yml (Marcus Burghardt) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to configure_gnutls_tls_crypto_policy (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Improve OCIL (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add missing prodtype (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to ssh_client_rekey_limit (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Improve OCIL (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Set variables used by rule ssh_client_rekey_limit (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Improve HTML string substitution when exporting the SRG mapping tables. (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Moved rules to the public developer documentation (Matěj Týč) 2025-11-21 15:53:25.813 logging.py DEBUG - Improved wording based on review feedback (Matěj Týč) 2025-11-21 15:53:25.813 logging.py DEBUG - Update .github/workflows/srg-mapping-table.yaml (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext for enable_fips_mode (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Change status of SRG-OS-000472-GPOS-00217 to inherently met (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Improve fixtext to be more instructive (Watson Yuuma Sato) 2025-11-21 15:53:25.813 logging.py DEBUG - dconf_gnome_screensaver_lock_enabled: Ensure that dconf is installed (Arnaud Patard) 2025-11-21 15:53:25.813 logging.py DEBUG - linux_os/guide/system/*/*/*/dconf_*/oval/shared.xml: Try fixing wrong regexp (Arnaud Patard) 2025-11-21 15:53:25.813 logging.py DEBUG - Publish Kubernetes content container image on each commit (Juan Antonio Osorio) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to rule service_sshd_enabled (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add OCIL clause to rule service_sshd_enabled (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix SRG mapping for rule service_sshd_enabled (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Remove rule dconf_gnome_enable_smartcard_auth from SRGs (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - The SRG export needs a valid build for variables (Matthew Burket) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix permissions on disa-stig-rhel7-v3r7-xccdf-scap.xml (Matthew Burket) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext and improve OCIL (Watson Sato) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext and improve OCIL (Watson Sato) 2025-11-21 15:53:25.813 logging.py DEBUG - Update version of RHEL7 STIG profiles to V3R7. (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Update DISA RHEL7 STIG manual benchmark to V3R7. (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Update DISA STIG RHEL7 SCAP content to V3R7. (Gabriel Becker) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix PEP8 issues (Matthew Burket) 2025-11-21 15:53:25.813 logging.py DEBUG - Use the correct selector in SRG-OS-000356-GPOS-00144 (Matthew Burket) 2025-11-21 15:53:25.813 logging.py DEBUG - Adds support for default values and using selectors in create_srg_export (Matthew Burket) 2025-11-21 15:53:25.813 logging.py DEBUG - Address reviewer feedback (Matěj Týč) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix style of SLE remediation (Matěj Týč) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix Grub remediation (Matej Tyc) 2025-11-21 15:53:25.813 logging.py DEBUG - Indent macros to prevent YAML error (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to grub2_audit_argument (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext for audit_rules_login_events_tallylog (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext for audit_rules_login_events_lastlog (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext for audit_rules_login_events_faillock (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Fix typo (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - fix case of a package name (Vojtech Polasek) 2025-11-21 15:53:25.813 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/grub2_disable_interactive_boot/rule.yml (Earl Sampson) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext to audit_rules_for_ospp (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add RHEL 9 CCE (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Improve OCIL clause (Jan Černý) 2025-11-21 15:53:25.813 logging.py DEBUG - Add fixtext for sysctl_kernel_randomize_va_space (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext for grub2_pti_argument (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/grub2_disable_interactive_boot/rule.yml (Earl Sampson) 2025-11-21 15:53:25.814 logging.py DEBUG - Update remediation in rule.yml to match ansible and bash code (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Update rule configure_bind_crypto_policy (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext for rule package_openssh-server_installed (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Update rule sssd_certificate_verification (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix for dconf_gnome_enable_smartcard_auth (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext for package_opensc_installed (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Set the var_password_pam_ocredit variable for SRG-OS-000266-GPOS-00101 (Marcus Burghardt) 2025-11-21 15:53:25.814 logging.py DEBUG - Fix the title in SRG-OS-000355-GPOS-00143 (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext to kernel_module_bluetooth_disabled (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Subtle update to the ocil_clause of accounts_password_pam_enforce_root (Marcus Burghardt) 2025-11-21 15:53:25.814 logging.py DEBUG - Check for a CNI that supports network policies (Lance Bragstad) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000298-GPOS-00116 to inherently met (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000266-GPOS-00101 for RHEL9 STIG (Marcus Burghardt) 2025-11-21 15:53:25.814 logging.py DEBUG - Add chronyd_server_directive to OL8 STIG profile (Edgar Aguilar) 2025-11-21 15:53:25.814 logging.py DEBUG - Add OL to chronyd_or_ntpd_set_maxpoll ansible (Edgar Aguilar) 2025-11-21 15:53:25.814 logging.py DEBUG - Add not applicable text to SRG-OS-000374-GPOS-00159 (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Use grub2-mkconfig must be used to handle GRUB_DISABLE_RECOVERY (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Fix typo. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000029-GPOS-00010 with new rules. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG of dconf_gnome_screensaver_lock_locked. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000031-GPOS-00012 with a new rule. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Remove not applicable rules from SRG-OS-000029-GPOS-00010. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Add SRG-OS-000031-GPOS-00012 to idle delay dconf rules. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Remove rules that do not belong to SRG-OS-000240-GPOS-00091. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Much less strange. (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Ensure that ntp/chronyd_or_ntpd_set_maxpoll uses variables vs static value (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Remove rules that do not belong to SRG-OS-000240-GPOS-00090. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Remove SRG-OS-000359-GPOS-00146 in audit_rules_suid_privilege_function (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Update OCIL clause for package_audit_installed (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Exclude package_crypto-policies_installed removal tests (Milan Lysonek) 2025-11-21 15:53:25.814 logging.py DEBUG - Define a variable in SRG-OS-000029-GPOS-00010. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Update idle-delay dconf rules. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - consistent perm_x product filtering (Markus Linnala) 2025-11-21 15:53:25.814 logging.py DEBUG - use grub2_uefi_boot_path (Markus Linnala) 2025-11-21 15:53:25.814 logging.py DEBUG - bugfix: no_shelllogin_for_systemaccounts: value parsing fixes (Markus Linnala) 2025-11-21 15:53:25.814 logging.py DEBUG - double quote find command. (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - use mapfile to process find output to handle spell check errors. (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Restore double quotes in varible reference (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Bad use of double quotes in rsyslog_files_permissions/bash/shared.sh (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Add SRG-OS-000312-GPOS-00123 to sysctl_fs_protected_symlinks (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add SRG-OS-000312-GPOS-00123 to sysctl_fs_protected_hardlinks (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add variables for SRG-OS-000078-GPOS-00046 (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext to accounts_password_minlen_login_defs (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext to accounts_password_pam_minlen (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add json output function to controleval script (vincent) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000481-GPOS-000481 for RHEL9 STIG (Marcus Burghardt) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix text to aide_check_audit_tools (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix text to aide_periodic_cron_checking and update OCIL (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Update profile stability for RHEL 8 (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Move aide_string to macros (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add commented out umask fai test (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000363-GPOS-00150 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000256-GPOS-00097 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add new rule file_audit_tools_group_ownership (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add new rule file_audit_tools_permissions (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add new rule for file_audit_tools_ownership (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix text to package_aide_installed (Matthew Burket) 2025-11-21 15:53:25.814 logging.py DEBUG - Apply suggestions from code review (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Explicitely set a value (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext to sysctl_net_ipv4_tcp_invalid_ratelimit (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add RHEL 9 CCE (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Address review comments (sampsone) 2025-11-21 15:53:25.814 logging.py DEBUG - Fix macro ocil_clause_file_owner (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Improve fixtext (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Improve HTML tag replacing during SRG mapping export. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Update rule selection of SRG-OS-000239-GPOS-00089. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Fix macro ocil_clause_file_group_owner (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Remove reference to SRG-OS-000206-GPOS-00084 (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Remove STIG id from audit_rules_usergroup_modification. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext for file_permissions_var_log_audit (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add OCIL clause to file_permissions_var_log_audit (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Update SRG-OS-000024-GPOS-00007 and SRG-OS-000228-GPOS-00088. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Iterate over every rule in the control selections. (Gabriel Becker) 2025-11-21 15:53:25.814 logging.py DEBUG - Add OCIL and fixtext to file_group_ownership_var_log_audit (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fixtext to directory_ownership_var_log_audit (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add ocil_clause to directory_ownership_var_log_audit (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add OCIL and fixtext for directory_group_ownership_var_log_audit (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Align remediation with OVAL (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Change fix to fixtext (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Remove file_ownership_var_log_audit from SRG-OS-000206-GPOS-00084 (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix for file_ownership_var_log_audit_stig (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Improve OCIL and align it with OVAL (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix to file_permissions_var_log_messages (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix to file_owner_var_log_messages (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix to file_groupowner_var_log_messages (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix to file_permissions_var_log (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix to file_owner_var_log (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - Add fix to rule file_groupowner_var_log (Jan Černý) 2025-11-21 15:53:25.814 logging.py DEBUG - SUSE audit_rules_privileged_commands_kmod add bash remediation SLE12/15 (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - Simplify ubuntu product checks. (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - SUSE enable remediiation for grub2_disable_interactive_boot (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fixtext to sssd_offline_cred_expiration (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add var_accounts_max_concurrent_login_sessions to SRG-OS-000057-GPOS-00027 (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix text to accounts_max_concurrent_login_sessions (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Update OCIL and add fixtext to chronyd_or_ntpd_set_maxpoll (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Update SRG-OS-000356-GPOS-00144 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix text to package_sudo_install (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Remove sebool_ssh_sysadm_login and selinux_user_login_roles from SRG-OS-000324-GPOS-00125 (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Update SRG-OS-000324-GPOS-00125 for RHEL 9 (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix text to service_debug-shell_disabled (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix text to sysctl_fs_protected_hardlinks (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix text to sysctl_fs_protected_hardlinks (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add macro for sysctl settings fix text (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix text to disable_ctrlaltdel_reboot (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix text to disable_ctrlaltdel_burstaction (Matthew Burket) 2025-11-21 15:53:25.815 logging.py DEBUG - Update linux_os/guide/system/selinux/selinux_policytype/bash/shared.sh (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fixtext to configure_firewalld_ports (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Add OCIL clause and fix to firewalld_sshd_port_enabled (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Add firewalld_sshd_port_enabled to SRG-OS-000096-GPOS-00050 (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Disambiguate rules configure_firewalld_ports and firewalld_sshd_port_enabled (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Fix description (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix for kernel_module_dccp_disabled (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Improve describe_module_disable macro (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Add Ansible to chronyd_no_chronyc_network (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix and improve OCIL in chronyd_no_chronyc_network (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Add Ansible to chronyd_client_only (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - Add fix and improve OCIL in chronyd_client_only (Jan Černý) 2025-11-21 15:53:25.815 logging.py DEBUG - OCP: Added control response for SA group (vincent) 2025-11-21 15:53:25.815 logging.py DEBUG - SUSE no_empty_passwords enable bash remediation. (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - SUSE auditd_data_retention_flush enable bash remditaion (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - SUSE enable selinux_policytype remediation bash and ansible (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - SUSE enable no_rsh_trust_files remediation bash and ansible (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - SUSE enable bash remediation for accounts_logon_fail_delay (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - Update shared/macros/bash.jinja (Earl Sampson) 2025-11-21 15:53:25.815 logging.py DEBUG - Update OCIL for SSHD to consider default values. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Add option in SSH rules to mark rule as default value is compliant. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Make sure test env doesn't have undesired ssh configuration. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Remove substring tests from ssh rules. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Introduce more templated tests for sshd line in file template. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Remove missing_parameter_pass from SSH rules. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Fix kubernets template removal. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Fixed broken var reference with in grub2_bootloader_argument_remediation (sampsone) 2025-11-21 15:53:25.815 logging.py DEBUG - Update linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_pam_enabled/bash/shared.sh (Earl Sampson) 2025-11-21 15:53:25.815 logging.py DEBUG - Align the test audit.rules with the rule behavior (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Ensure the appropriate lines get to the test (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Add debug profile for the srg_gpos controls. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Rename unit tests according to their meaning. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Add unit tests for controls_dir option in controls files. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Rename SRG policy control file. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Add documentation about the controls_dir option in controls format. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Substitute operating system with full_name variable in SRG files. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Move SRG control files to a generic folder called srg_gpos. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Add support to load control files from a specific folder. (Gabriel Becker) 2025-11-21 15:53:25.815 logging.py DEBUG - Fix reference to Ansible macro reference (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Remove reference to section in index (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Update docs for general and highlevel jinja files (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Add names to the toctree section (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - OCP: Added Control Response for SC group (vincent) 2025-11-21 15:53:25.815 logging.py DEBUG - Point the docs to new jinja macro files (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Exclude ClientAliveCountMax check in sshd_set_idle_timeout for RHEL9 (Milan Lysonek) 2025-11-21 15:53:25.815 logging.py DEBUG - Cleanup sshd_set_idle_timeout test scenarios (Milan Lysonek) 2025-11-21 15:53:25.815 logging.py DEBUG - utils/compare_results.py specify column width (Milan Lysonek) 2025-11-21 15:53:25.815 logging.py DEBUG - Refactor utils/compare_results.py (Milan Lysonek) 2025-11-21 15:53:25.815 logging.py DEBUG - Fix blank lines in general.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Rename macro to describe_kernel_build_config (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Rename and move warning macros to warning.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move describe macros to general.jinja file (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Rename and mov fix_sysctl macro to fixtext.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL Firefox macro to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL OC macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Remove unused macro ocil_xinetd_service_disabled (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL Kernel build config to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL sysctl options macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL File macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL Timer enabled macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL SELinux booleans macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL partition macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL Kernel modules macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL firewalld macro to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL audit syscall macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL Mount option macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL SSHD macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL socket and service disabled to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.815 logging.py DEBUG - Move OCIL service disabled macros to ocil.jinja (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Move OCIL service macros to ocil.jinja file (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Move OCIL package macros to the ocil.jinja file (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Load all Jinja macros from shared/macros (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Add fix for encrypt_partitions (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Update title for SRG-OS-000185-GPOS-00079 (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Add CCE to the row if there is a rule (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - Refactor handle_output in create_srg_export.py (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - Add openpyxl to dependancies in install doc (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - Generalize changes in grub2_uefi_password (Edgar Aguilar) 2025-11-21 15:53:25.816 logging.py DEBUG - Update SRG-OS-000113-GPOS-00058 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - Update SRG-OS-000380-GPOS-00165 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - OCP: Add control response for RA-5(4) (vincent) 2025-11-21 15:53:25.816 logging.py DEBUG - fix grub2 remediations for sle12 ans sle15 (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - Simplify gid handling (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - Update linux_os/guide/system/permissions/files/permissions_important_account_files/file_etc_security_opasswd/bash/shared.sh (Earl Sampson) 2025-11-21 15:53:25.816 logging.py DEBUG - Deduplicate values in the IA Control in create_srg_export (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - bugfix: auditing: Fix documentation distro (Markus Linnala) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix doc indentation of Fix Text (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Move oval_affected macro to oval.jinja (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Rename macro files and align docs (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Rename the control fix key to fixtext (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - change: encrypt_partitions: add fedora url (Markus Linnala) 2025-11-21 15:53:25.816 logging.py DEBUG - bugfix: encrypt_partitions: use common . (Markus Linnala) 2025-11-21 15:53:25.816 logging.py DEBUG - SUSE disable_users_coredumps enable bash remediation for sle. (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - Align kernel_module_loading remediations (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Rename Rule key fix to fixtext (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Standardize fixtext macro names with prefix (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Move fixtext macros to their file (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Add file to organize the fixtext macros (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Move macros to their on place in shared folder (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - For sle systems the etc shadow is group shadow (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - SUSE fix file_groupowner_backup_etc_shadow (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - SUSE add bash remediation for file_etc_security_opasswd (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - SUSE add multi_platform_sle to audit_rules_file_deletion_events/bash.template (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - SUSE SLE fix audit_rules_unsuccessful_file_modification_renameat2 (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - Update accounts_umask_etc_profile remediation regex to handle comments (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - Enable bash remediation for SUSE smartcard_pam_enabled (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - Downgrade OCP4 builder image to fedora 34 (Lance Bragstad) 2025-11-21 15:53:25.816 logging.py DEBUG - Enable for ansible and bash remediation for SLE15 and SLE12. (sampsone) 2025-11-21 15:53:25.816 logging.py DEBUG - Add docuemntion for Pandas dependancy (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix duplicate SRG (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Make HTML pages HTML5 compatible. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - Add rule package_policycoreutils_installed to SRG-OS-000134-GPOS-00068 for RHEL 9 (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Add rule selinux_state to SRG-OS-000134-GPOS-00068 for RHEL 9 (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix coding style (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Remove IPv4 limitation (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix gh-pages SRG mapping index page generation and deployment. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - utils/compare_results.py returns 1 if results are not the same (Milan Lysonek) 2025-11-21 15:53:25.816 logging.py DEBUG - Exclude package_libreport-plugin-rhtsupport_removed from stig_gui profile. (Milan Lysonek) 2025-11-21 15:53:25.816 logging.py DEBUG - Add fix text to install_smartcard_packages (Matthew Burket) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix broken Oracle Linux doc links. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - bugfix: kernel_config_slub_debug: should be y (Markus Linnala) 2025-11-21 15:53:25.816 logging.py DEBUG - Add error checking for HTML guide index page generation. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - Generate index.html page for SRG Mapping tables. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix typos and improve grammar (Watson Yuuma Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Move the release docs to docs/ (Watson Sato) 2025-11-21 15:53:25.816 logging.py DEBUG - Add fix for sysctl_net_ipv4_tcp_syncookies (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Add a jinja macro for fixing sysctl items (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Change title in SRG-OS-000142-GPOS-00071 (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - typo: kernel_config_slub_debug Enale -> Enable (Markus Linnala) 2025-11-21 15:53:25.816 logging.py DEBUG - Change title in SRG-OS-000134-GPOS-00068 (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Add fix to grub2_slub_debug_argument (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Add fix to grub2_page_poison_argument (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix index page generation for guides artifacts. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix a typo (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Add fix for rule grub2_vsyscall_argument (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Refactor HTML SRG exporting code to a separate python file. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - Improve exception messages (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix coding style (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Change imports to not use "from" syntax (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Specify output file explicitely (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Exclude/remove package removal test scenarios that remove essential package (Milan Lysonek) 2025-11-21 15:53:25.816 logging.py DEBUG - Remove unused file (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Remove unused functions (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Remove generate_fixes_xml.py (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Add remediations to rules (Jan Černý) 2025-11-21 15:53:25.816 logging.py DEBUG - Update the OCP e2e documentation (Lance Bragstad) 2025-11-21 15:53:25.816 logging.py DEBUG - Fix pep issues. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - Publish SRG mapping artifacts to github pages. (Gabriel Becker) 2025-11-21 15:53:25.816 logging.py DEBUG - Remove unused release scripts (Watson Sato) 2025-11-21 15:53:25.817 logging.py DEBUG - Update release process documentation (Watson Sato) 2025-11-21 15:53:25.817 logging.py DEBUG - Add new GH job to generate XLSX table and HTML page with SRG mapping. (Gabriel Becker) 2025-11-21 15:53:25.817 logging.py DEBUG - Handle variables in ocil_clause when generating the SRG spreadsheet. (Gabriel Becker) 2025-11-21 15:53:25.817 logging.py DEBUG - Refactor SRG XLSX table creation. (Gabriel Becker) 2025-11-21 15:53:25.817 logging.py DEBUG - Apply suggestions from code review (Gabriel Becker) 2025-11-21 15:53:25.817 logging.py DEBUG - Fix ocil_clause of package installed rules. (Gabriel Becker) 2025-11-21 15:53:25.817 logging.py DEBUG - Apply style suggestions (Jan Černý) 2025-11-21 15:53:25.817 logging.py DEBUG - Add fix text sssd_enable_smartcards (Matthew Burket) 2025-11-21 15:53:25.817 logging.py DEBUG - Add fix text to sshd_enable_pubkey_auth (Matthew Burket) 2025-11-21 15:53:25.817 logging.py DEBUG - Update the proposal based on community suggestions. (Matej Tyc) 2025-11-21 15:53:25.835 logging.py DEBUG - Update SRG-OS-000109-GPOS-00056 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.835 logging.py DEBUG - Update SRG-OS-000108-GPOS-00055 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.835 logging.py DEBUG - Update SRG-OS-000107-GPOS-00054 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.835 logging.py DEBUG - Update SRG-OS-000106-GPOS-00053 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.835 logging.py DEBUG - Typo fix (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Update SRG-OS-000105-GPOS-00052 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix for sysctl_crypto_fips_enabled (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix for sshd_enable_pam (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Use correct separator macro sshd_lineinfile_fix (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Update title of SRG-OS-000125-GPOS-00065 (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix for package_krb5-workstation_removed (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix to configure_kerberos_crypto_policy (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Fix capital K (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - install_vm.py: update default Fedora version to 35 (Matus Marhefka) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix for package_libreswan_installed (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Update title in SRG-OS-000120-GPOS-00061 (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix to rsyslog_remote_tls (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - remove no longer needed rule from hipaa profiles (Vojtech Polasek) 2025-11-21 15:53:25.835 logging.py DEBUG - align stability test (Vojtech Polasek) 2025-11-21 15:53:25.835 logging.py DEBUG - remove rules from rhel8 ospp profile (Vojtech Polasek) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix for package_rsyslog-gnutls_installed (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix for accounts_password_all_shadowed_sha512 (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add rules for 64b kernel (Watson Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Fix typos and improve rule descriptions (Watson Yuuma Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Add fix for kerberos_disable_no_keytab (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Improve OCIL clause in kerberos_disable_no_keytab (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add Ansible for kerberos_disable_no_keytab (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add test scenarios for kerberos_disable_no_keytab (Jan Černý) 2025-11-21 15:53:25.835 logging.py DEBUG - Add rules for ARM64 kernel (Watson Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Add rules to configure Kernel panic behavior (Watson Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Add a custom sheet name and bug fixes (Matthew Burket) 2025-11-21 15:53:25.835 logging.py DEBUG - Apply suggestions from code review (Watson Yuuma Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Add a pass test for the quoted value (Watson Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Add test to ensure quote capturing behavior (Watson Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Fix handling of quotes matching against substrings (Watson Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Add test for match against super strings (Watson Sato) 2025-11-21 15:53:25.835 logging.py DEBUG - Move kernel_config_rules to XCCDF variables (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add fix text to gid_passwd_group_same (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel security options (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules to check kernel IP stack configs (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel compiler features (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Fix typos in rule descriptions (Watson Yuuma Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add XCCDF variable support to kernel_build_config (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for various kernel behaviors (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add fix text to configure_opensc_card_drivers (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add fix text to force_opensc_card_drivers (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Update group_unique_id for RHEL9 STIG and add fix text (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Update SRG-OS-000104-GPOS-00051 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add SRG mapping text to the STIG mapping table. (Gabriel Becker) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel module security (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Use GH team in codeowners (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Fix typo (Watson Yuuma Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Update ansible in audit_rules_kernel_module rules (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Update tests in audit_rules_kernel_module rules (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Move XLSX export to the SRG export script (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - tests/ds_unselect_rules.sh: make unselecting of rules more robust (Matus Marhefka) 2025-11-21 15:53:25.836 logging.py DEBUG - Change OCIL clauses to negative form (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for kernel config_compat_bkr (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel page poisoning build config (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Change the OCIL clause to negative form (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Change OCIL clause to the negative form (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Fix typos from rule descriptions (Watson Yuuma Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules to check SLUB kernel build config (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules to check SLAB kernel build config (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel data structure configs (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Set Benchmark's resolved attribute to true (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Add CODEOWNERS (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Add Centos Stream 8/9 support in install_vm script. (Gabriel Becker) 2025-11-21 15:53:25.836 logging.py DEBUG - Fix ocil macro call for some kernel config rules (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Fix typos in rule descriptions (Watson Yuuma Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Extend description of rule for CONFIG_COMPAT_VDSO (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - feat: OCP4 on HyperShift product definition (Takuya Mishina) 2025-11-21 15:53:25.836 logging.py DEBUG - Update account_unique_id with warnings and fix text (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel vsyscall configs (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for CONFIG_RETPOLINE (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule to prevent unprivileged access to dmesg (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for CONFIG_COMPAT_VDSO (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for CONFIG_PROC_KCORE (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for CONFIG_DEVKMEM (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for CONFIG_ACPI_CUSTOM_METHOD (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for kernel CONFIG_FORTIFY_SOURCE (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for kernel refcounting (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Update SRG-OS-000121-GPOS-00062 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule for CONFIG_VMAP_STACK (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel hardened usercopy (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Remove a removed script from docs (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Fix PEP8 problem (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Remove unused code (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Stop using dedicated script (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Add STIG references to compiled rules (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Refactor: Extract function (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Check kernel config CONFIG_SCHED_STACK_END_CHECK (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rules for kernel build config stack protection (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule to check kernel config_debug_wx (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - SRG-OS-000349-GPOS-00137 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add OCIL clause and update SRGs on service_auditd_enabled (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Update SRG-OS-000281-GPOS-00111 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - *.py: always use shebang /usb/bin/python3 (Markus Linnala) 2025-11-21 15:53:25.836 logging.py DEBUG - bugfix: xml files do not need to be executable (Markus Linnala) 2025-11-21 15:53:25.836 logging.py DEBUG - Update package_krb5-server_removed references (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Update ansible in configure_ssh_crypto_policy (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Compare number of kernels with number of configs (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add no remediation metadat to fail test scenario (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add tests for missing config (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - All kernel config rules are machine only (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Clarify expected output of config grep command (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Make config applicable to all products (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Clarify template documentation (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Update OVAL to also check for negative values (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Default to input config in upper case letters (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule to disable kernel debugfs (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Make template check for "n" values (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add rule to check Kernel config CONFIG_STRICT_KERNEL_RWX (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Add template to check for kernel build configs (Watson Sato) 2025-11-21 15:53:25.836 logging.py DEBUG - Use templated generated content instead of custom artifacts. (Gabriel Becker) 2025-11-21 15:53:25.836 logging.py DEBUG - Update profile_stability stigs data for rhel8 (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Restore rule.yml description and rationale (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Add CCE reference to package_krb5-server_removed (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Update profile_stability stigs data for rhel8 (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Update package_krb5-server_removed (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Fix variable path access issue (Andrew Becker) 2025-11-21 15:53:25.836 logging.py DEBUG - Refactoring for convert_srg_export_to_xlsx (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - OCP4: Remove oval check from file_groupowner_proxy_kubeconfig and file_owner_proxy_kubeconfig (vincent) 2025-11-21 15:53:25.836 logging.py DEBUG - Freeze Header Row (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add utils/convert_srg_export_to_xlsx.py (Matthew Burket) 2025-11-21 15:53:25.836 logging.py DEBUG - Add CCE to rule and update profile_stability data (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Update tests for configure_ssh_crypto_policy (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Introduce usbguard cpe (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Update tests in audit_rules_kernel_module rules (Edgar Aguilar) 2025-11-21 15:53:25.836 logging.py DEBUG - Use Jinja template (Jan Černý) 2025-11-21 15:53:25.836 logging.py DEBUG - Simplify code (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Remove unused update_sds_version.py (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Build SCAP 1.2 and 1.3 using a single command (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Add option to build SCAP 1.3 (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Rename the script (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix same shadow field bug in tests (Alexander Scheel) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix macro bash_ensure_mount_option_for_vfstype (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Add tests to mount_option_remote_filesystems (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix typo (Gabriel Becker) 2025-11-21 15:53:25.837 logging.py DEBUG - Update comments in STIG profiles for OL8 & RHEL8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Update OVAL in dconf_gnome_screensaver_lock_delay (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Add rule vlock_installed to STIG profile in OL8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Add OL8 STIG ID to configure_crypto_policy (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Update regex to detect nfs filesystems in fstab (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix typos and description of two sysctl_kernel rules (Marcus Burghardt) 2025-11-21 15:53:25.837 logging.py DEBUG - Update grub2_bootloader_argument template for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Add Fix text and update OCIL on clean_components_post_updating (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update configure_ssh_crypto_policy (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Like the docs requirments GitPod should also use https vs the lagecy git protocol (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add text to selinux_state to fix and OCIL for better support to (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add text to selinux_policytype to fix and OCIL for better support to (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add variables for SRG-OS-000445-GPOS-00199 (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update grub2_uefi_password to use CPE (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Update grub2_uefi_admin_username to use CPE (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Apply grub2_uefi_password changes to rhel8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Make grub2_uefi_password rule compliant for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Ensure that headers and the Requirement field for create_srg_export are correct (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update accounts_password template OVAL for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Introduce CPE for tftp-server (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Remove shared_xccdf-removeaux.xslt (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Use the correct command in bash to list fingerprint of RHEL9 gpg keys. (Gabriel Becker) 2025-11-21 15:53:25.837 logging.py DEBUG - Stop using oscap xccdf resolve (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Do not insist on resolved Benchmarks (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Split command line arguments of add_stig_references.py (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Bump Fedora version, rawhide is now 37, drop 33 (Markus Linnala) 2025-11-21 15:53:25.837 logging.py DEBUG - Add rule audit_rules_dac_modification_lsetxattr to SLE12 (Yavor Georgiev) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix CCE key for sle12 with right notation (Yavor Georgiev) 2025-11-21 15:53:25.837 logging.py DEBUG - Update grub2_password to use CPE (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Make grub2_password rule compliant for rhel8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Make grub2_password rule compliant for ol8 (Edgar Aguilar) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000364-GPOS-00151 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix text to package_fapolicyd_installed (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix text to service_fapolicyd_enabled (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000370-GPOS-00155 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix indentation in SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000432-GPOS-00191 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000437-GPOS-00194 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix text to selinux_state (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update selinux_policytype for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000445-GPOS-00199 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000031-GPOS-00012 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix text to dconf_gnome_screensaver_mode_blank (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Disable templated tests for the rule (Matej Tyc) 2025-11-21 15:53:25.837 logging.py DEBUG - Enable templated test scenarios filtering (Matěj Týč) 2025-11-21 15:53:25.837 logging.py DEBUG - Rename a Rule property files (Matěj Týč) 2025-11-21 15:53:25.837 logging.py DEBUG - Revert "chore: temporaliry change catalog image to load latest CO image" (Takuya Mishina) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000030-GPOS-00011 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update create_srg_export based on feedback (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix to gnome_gdm_disable_automatic_login (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix to sshd_do_not_permit_user_env (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix and ocil clause to service_firewalld_enabled (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix and update rationale in package_firewalld_installed (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Mention compose_ds.py in docs (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Remove sds_move_ocil_to_checks.py (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Stop using oscap to compose data stream (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Introduce script to compose data streams (Jan Černý) 2025-11-21 15:53:25.837 logging.py DEBUG - Group rules for removexattr and setxattr under sam SUSE STIG IDs (Yavor Georgiev) 2025-11-21 15:53:25.837 logging.py DEBUG - Group chown syscall audit rules under same STIG ID dor SLE12 and SLE15 (Yavor Georgiev) 2025-11-21 15:53:25.837 logging.py DEBUG - Group init_module and finit_module audit rules. (Yavor Georgiev) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix minor typo (Yavor Georgiev) 2025-11-21 15:53:25.837 logging.py DEBUG - Add sudoers_default_includedir rule support to SLE12 and SLE15 platforms (Yavor Georgiev) 2025-11-21 15:53:25.837 logging.py DEBUG - Add fix text to sshd_disable_empty_passwords (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add to fix disable_host_auth (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000480-GPOS-00229 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000480-GPOS-00232 for RHEL 9 SRG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - One step in getting the docs to build again (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update SRG-OS-000123-GPOS-00064 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add variables for RHEL9 STIG Control (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Add support for variables in create_srg_export (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - HTML encode the < and > in accounts_password_set_max_life_existing (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Allow for HTML encoding of < and > in srg export (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Fix fix in dir_perms_world_writable_root_owned (Matthew Burket) 2025-11-21 15:53:25.837 logging.py DEBUG - Update how the utils/create_srg_export.py sets the Requirement column (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Populate the IA Control column if using the GPOS SRG. (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000138-GPOS-00069 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000076-GPOS-00044 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update accounts_password_set_max_life_existing (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add fix text rules under SRG-OS-000075-GPOS-00043 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add text for SRG-OS-000067-GPOS-00035 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Fix title in stig_rhel9 control (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Ensure that full_name used in the RHEL9 STIG control (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Fix a couple of issues at create_srg_export (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000362-GPOS-00149 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000360-GPOS-00147 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000344-GPOS-00135 for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000280-GPOS-00110 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000277-GPOS-00107 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000275-GPOS-00105 for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000205-GPOS-00083 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000184-GPOS-00078 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000132-GPOS-00067 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000079-GPOS-00047 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000066-GPOS-00034 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000024-GPOS-00007 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000001-GPOS-00001 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000395-GPOS-00175 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000362-GPOS-00149 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000279-GPOS-00109 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000276-GPOS-00106 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000275-GPOS-00105 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-0001320GPOS-00067 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000280-GPOS-00110 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000205-GPOS-00083 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000066-GPOS-00034 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update for SRG-OS-000344-GPOS-00135 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Fix issue with build due to rule SRG-OS-000126-GPOS-00066.yml (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000079-GPOS-00047 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000277-GPOS-00107 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000184-GPOS-00078 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000403-GPOS-00182 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000055-GPOS-00026 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - RHEL9 STIG SRG-OS-000024-GPOS-00007 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Remove the sshd_set_idle_timeout rule since idle timeout no longer works on RHEL9. (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000360-GPOS-00147 for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000001-GPOS-00001 for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000001-GPOS-00001 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Updated SRG-OS-000079-GPOS-00047 for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Fix missing "to" in account restriction warnings (Alexander Scheel) 2025-11-21 15:53:25.838 logging.py DEBUG - Initial version of project rules (Matej Tyc) 2025-11-21 15:53:25.838 logging.py DEBUG - Use UID field for bash remediation of homedirs (Alexander Scheel) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000122-GPOS-00063 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - NIST: AC-18(4) ensure wireless capability is turned disabled using templating (vincent) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000118-GPOS-00060 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update account_disable_post_pw_expiration rationale and ocil_clause and add fix (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000112-GPOS-00057 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update accounts_password_set_max_life_existing for RHEL 9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add fix text to accounts_maximum_age_login_defs (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000076-GPOS-00044 for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000074-GPOS-00042 for RHEL9 (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add fix text for package_vsftpd_removed (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Include RBAC related information for AC-6(8) (TrilokGeer) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000071-GPOS-00039 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add fix text to accounts_password_pam_dcredit (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000070-GPOS-00038 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add fix text for accounts_password_pam_enforce_root (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add fix text to accounts_password_pam_lcredit (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add CCE for RHEL9 on accounts_password_pam_enforce_root (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add fix text for sssd_enable_certmap (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Update SRG-OS-000068-GPOS-00036 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Move code (anivan-suse) 2025-11-21 15:53:25.838 logging.py DEBUG - Add OCIL, OCIL Clause, Fix to file_permissions_etc_audit_rulesd (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Add OCIL and fix text to file_permissions_etc_audit_auditd (Matthew Burket) 2025-11-21 15:53:25.838 logging.py DEBUG - Apply text suggestions (Watson Yuuma Sato) 2025-11-21 15:53:25.838 logging.py DEBUG - Apply text suggestions (Watson Yuuma Sato) 2025-11-21 15:53:25.838 logging.py DEBUG - Override dconf_gdm_dir for OL8 (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Turn all wireless interfaces off (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Ignore commented lines in bash_fix_audit_watch_rule (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Audit changes to rsyslogd binary (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - OCP4: Add rules to check kubelet config file permission (vincent) 2025-11-21 15:53:25.838 logging.py DEBUG - Introduce rules for abrt packages (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Update OL08-00-040001 requirement (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Allow auid to be not equal to -1 (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Ignore comments in bash_fix_audit_syscall_rule (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Add perm param for audit rules in OL8 (Federico Ramirez) 2025-11-21 15:53:25.838 logging.py DEBUG - Fix language errors (Matěj Týč) 2025-11-21 15:53:25.839 logging.py DEBUG - Update SRG-OS-000063-GPOS-00032 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Update SRG-OS-000055-GPOS-00026 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Update SRGs only containing service_auditd_enabled for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Add fix text to auditd_name_format (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Update SRG-OS-000039-GPOS-00017 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Update SRG-OS-000038-GPOS-00016 for RHEL9 STIG (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Add fix text to package_audit_installed (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - chore: temporaliry change catalog image to load latest CO image (Takuya Mishina) 2025-11-21 15:53:25.839 logging.py DEBUG - Update test platform (Edgar Aguilar) 2025-11-21 15:53:25.839 logging.py DEBUG - Add fix to service_auditd_enabled (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Add macro to describe for how to enable a service for fix text (Matthew Burket) 2025-11-21 15:53:25.839 logging.py DEBUG - Add tests to network_configure_name_resolution (Edgar Aguilar) 2025-11-21 15:53:25.839 logging.py DEBUG - Update network_configure_name_resolution (Edgar Aguilar) 2025-11-21 15:53:25.839 logging.py DEBUG - Add rule to prevent routing to loopback (Watson Sato) 2025-11-21 15:53:25.839 logging.py DEBUG - Update control response for AC-6(8) (TrilokGeer) 2025-11-21 15:53:25.839 logging.py DEBUG - Remove reference to a nonexistent file (Jan Černý) 2025-11-21 15:53:25.839 logging.py DEBUG - Add 
 tag HTML element to STIG mapping tables. (Gabriel Becker)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add fix text to sshd_set_loglevel_verbose (Matthew Burket)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add fix text to rsyslog_remote_access_monitoring (Matthew Burket)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add macro for SSHD config fix text (Matthew Burket)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Update SRG-OS-000032-GPOS-00013 for RHEL9 STIG (Matthew Burket)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Expand project guidelines (Matěj Týč)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Unify a custom_command (Jan Černý)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add rule to drop gratuitious ARP frames (Watson Sato)
2025-11-21 15:53:25.839 logging.py        DEBUG  - OCP: cluster version history bug fix (vincent)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Fix handling of missing limits.d/*.conf files (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Fix fix text macro in SRG-OS-000028-GPOS-00009 (Matthew Burket)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Remove one "oscap xccdf resolve" step (Jan Černý)
2025-11-21 15:53:25.839 logging.py        DEBUG  - SC-7(10) Control Response (vincent)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Bump version to 0.1.62 (Watson Sato)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Remove sudo from bash command (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - OCP: Add vaiabled support for kubelet_configure_tls_cipher_suites (vincent)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Update RHEL7 STIG references. (Gabriel Becker)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Update RHEL8 STIG rules. (Gabriel Becker)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add rule for sysctl arp (Watson Sato)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add rule for sysctl shared_media (Watson Sato)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add rule for net.ipv4.conf.all.accept_local (Watson Sato)
2025-11-21 15:53:25.839 logging.py        DEBUG  - fix: error on kubelet TLS config check in kubelet categoly (copied from api-server rules) (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - fix: error (lack of closing double quote) (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: update kube scheduler rules (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: update etcd rule (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: update kube-controller-manager rules (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: customization for ocp-api-server rule and openshift-api-server rule (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: hypershift customization for cert/key file locations (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - fix: now all rules are "pass" for regression test (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules regarding apiServerArguments (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules with "at least one" (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: fix yamlpath of openshift-kube-apiserver rules with "none satisfy" (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - chore: replace filepath (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - chore: replace warnings element (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - chore: add jinja variables after title (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: customizable rule for api_server_admission_control_plugin_AlwaysAdmit (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: customizable rule for api_server_no_adm_ctrl_plugins_disabled (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: support custom/default API path and filter (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - chore: rename jinja variable names (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: customizable rule for api_server_no_adm_ctrl_plugins_disabled (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - feat: support distinct object path and dump path for openshift_filtered_cluster_setting() (Takuya Mishina)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Make taylor reg ex to /etc/group and /etc/passwd structure. (sampsone)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Fix if statements with config_is_distributed (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Remove -F euid=0 parameter from a rule for ol8 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Remove unnecessary criterion from rule for rhel8 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Remove unnecessary criterion from rule for ol8 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Fix bash remediation of disable_users_coredumps (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Update network_configure_name_resolution (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Update network_configure_name_resolution for ol8 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Fix sshd_rekey_limit jinja if statements in OVAL (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Revert "Update sshd_oval_check related default constant" (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Update sshd_oval_check related default constant (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add auid criteria to rules required by rhel8 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add auid criteria to rule to meet OL08-00-030360 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add auid criteria to rule to meet OL08-00-030380 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Add auid criteria to rule to meet OL08-00-030390 (Edgar Aguilar)
2025-11-21 15:53:25.839 logging.py        DEBUG  - Fix reference to local_variable (Watson Sato)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add rule for HWRNG contribution to pool entropy (Watson Sato)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add rule for MDS vulnerability (Watson Sato)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add rule to force spectre_v2 mitigation (Watson Sato)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add rule to mitigate Spec Store Bypass vuln (Watson Sato)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add rule for l1tf mitigation (Watson Sato)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Update SRG-OS-000028-GPOS-00009 for RHEL9 STIG (Matthew Burket)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add a macro for donf_ini_file_fix (Matthew Burket)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Replace Red Hat Enterprise Linux 7 with {{{ full_name }}} (Yavor Georgiev)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Drop trailing whitespaces (Yavor Georgiev)
2025-11-21 15:53:25.840 logging.py        DEBUG  - gid_passwd_group_same oval does not allow ! in passwd field (sampsone)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Remove sle files (anivan-suse)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Update fix (anivan-suse)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Generalize OpenShift groups (Lance Bragstad)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Fix for bug 1195520 (anivan-suse)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Set reboot meta parameter to true since we modify grub related rule Thanks to @Mab879 for raising the issue (Yavor Georgiev)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Fix for literal-compare ansible lint rule (Yavor Georgiev)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add remediations metadata (Yavor Georgiev)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Update linux_os/guide/system/permissions/restrictions/enable_execshield_settings/sysctl_kernel_exec_shield/ansible/shared.yml (teacup-on-rockingchair)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Add sysctl_kernel_exec_shield to HIPAA profile (Yavor Georgiev)
2025-11-21 15:53:25.840 logging.py        DEBUG  - Use template variable for grub config path to improve portability of the OVAL rule (Yavor Georgiev)
2025-11-21 15:53:25.875 changelog_helper.py DEBUG  Setting Release in spec to '0.20251121155324409959.pr14163.18614.g5be14d47dd'.
2025-11-21 15:53:25.915 base_git.py       DEBUG  List of sources to download (url, path, optional): []
2025-11-21 15:53:25.915 actions_handler.py DEBUG  Running ActionName.post_modifications hook.
2025-11-21 15:53:25.915 actions_handler.py DEBUG  Running ActionName.post_modifications.
2025-11-21 15:53:25.915 actions_handler.py DEBUG  Running default implementation for ActionName.post_modifications.
2025-11-21 15:53:25.915 api.py            DEBUG  Copying /tmp/tmpswowaprq -> /workdir
2025-11-21 15:53:26.543 api.py            INFO   Directory with sources: /workdir
2025-11-21 15:53:26.544 local_project.py  DEBUG  Cleaning: /tmp/tmpswowaprq
2025-11-21 15:53:26.716 local_project.py  DEBUG  Cleaning: /tmp/tmpswowaprq
Finish: chroot ["set -xe ; cd /workdir ; COPR_OWNER=packit COPR_PROJECT=ComplianceAsCode-content-14163 COPR_PACKAGE='' COPR_RESULTDIR=/workdir /script"]
Finish: run
Running: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyout /workdir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir

cmd: ['mock', '-r', '/var/lib/copr-rpmbuild/results/mock-config.cfg', '--copyout', '/workdir', '/var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir']
cwd: .
rc: 0
stdout: 
stderr: INFO: mock.py version 6.5 starting (python version = 3.13.7, NVR = mock-6.5-1.fc42), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --copyout /workdir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir
Start(bootstrap): init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish(bootstrap): init plugins
Start: init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish: init plugins
INFO: Signal handler active
Start: run
Mock Version: 6.5
INFO: Mock Version: 6.5
Start(bootstrap): chroot init
INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root.
INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64-bootstrap/root.
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start(bootstrap): cleaning package manager metadata
Finish(bootstrap): cleaning package manager metadata
INFO: Package manager dnf5 detected and used (fallback)
Finish(bootstrap): chroot init
Start: chroot init
INFO: mounting tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root.
INFO: reusing tmpfs at /var/lib/mock/copr-custom-fedora-43-x86_64/root.
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled package manager cache
Start: cleaning package manager metadata
Finish: cleaning package manager metadata
INFO: enabled HW Info plugin
INFO: Package manager dnf5 detected and used (direct choice)
Finish: chroot init
INFO: copying /var/lib/mock/copr-custom-fedora-43-x86_64/root/workdir to /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir
Finish: run

Running: mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --scrub all

cmd: ['mock', '-r', '/var/lib/copr-rpmbuild/results/mock-config.cfg', '--scrub', 'all']
cwd: .
rc: 0
stdout: 
stderr: INFO: mock.py version 6.5 starting (python version = 3.13.7, NVR = mock-6.5-1.fc42), args: /usr/libexec/mock/mock -r /var/lib/copr-rpmbuild/results/mock-config.cfg --scrub all
Start(bootstrap): init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish(bootstrap): init plugins
Start: init plugins
INFO: tmpfs initialized
INFO: selinux enabled
INFO: chroot_scan: initialized
INFO: compress_logs: initialized
Finish: init plugins
INFO: Signal handler active
Start: run
Start: scrub ['all']
INFO: scrubbing everything for mock-config
INFO: unmounting tmpfs.
INFO: unmounting tmpfs.
Finish: scrub ['all']
Finish: run

Running: rpmbuild -bs --define '_sourcedir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir' --define '_rpmdir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir' --define '_builddir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir' --define '_specdir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir' --define '_srcrpmdir /var/lib/copr-rpmbuild/results' /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir/scap-security-guide.spec

cmd: ['rpmbuild', '-bs', '--define', '_sourcedir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir', '--define', '_rpmdir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir', '--define', '_builddir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir', '--define', '_specdir /var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir', '--define', '_srcrpmdir /var/lib/copr-rpmbuild/results', '/var/lib/copr-rpmbuild/workspace/workdir-epw5gpdn/srcdir/scap-security-guide.spec']
cwd: .
rc: 0
stdout: Wrote: /var/lib/copr-rpmbuild/results/scap-security-guide-0.1.80-0.20251121155324409959.pr14163.18614.g5be14d47dd.src.rpm

RPM build warnings:
stderr: Building target platforms: noarch
Building for target noarch
warning: %source_date_epoch_from_changelog is set, but %changelog has no entries to take a date from
    %source_date_epoch_from_changelog is set, but %changelog has no entries to take a date from

Output: ['scap-security-guide-0.1.80-0.20251121155324409959.pr14163.18614.g5be14d47dd.src.rpm', 'mock-config.cfg']
Running SRPMResults tool
Package info: {
    "name": "scap-security-guide",
    "epoch": null,
    "version": "0.1.80",
    "release": "0.20251121155324409959.pr14163.18614.g5be14d47dd",
    "exclusivearch": [],
    "excludearch": []
}
SRPMResults finished