エラータID: AXBA:2018-3338:03

2018/09/27 Thursday - 08:24
Asianux Server 7 for x86_64

The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol (SCAP) format and constitutes a catalog of practical hardening advice, linked to government requirements where applicable. The project bridges the gap between generalized policy requirements and specific implementation guidelines.

This update fixes the following bugs:

* Previously, the playbook for setting SELinux policy did not include the "state" parameter to the Ansible SELinux module. As a consequence, remediation playbooks generated by the oscap command failed to set the SELinux policy accordingly to the "var_selinux_policy_name" variable. With this update, the remediation playbook has been changed to use the "lineinfile" module, and it can now correctly set the SELinux policy as defined in "var_selinux_policy_name". (BZ#1601929)

* Prior to this update, the Extensible Configuration Checklist Description Format (XCCDF) benchmark contained the octal umask value for the "/etc/login.defs" file converted to the decimal format. Consequently, Ansible remediations against Asianux Server 7 incorrectly set the "accounts_umask_etc_login_defs" value. The umask value format in the XCCDF benchmark has been fixed, the umask entry now correctly passes through. (BZ#1601931)

* Previously, parts of the OpenSCAP code generating Ansible remediation playbooks contained typos in the path to the dconf database directory. As a consequence, remediation tasks failed with the "OSError: [Errno 20] Not a directory: '/etc/dconf/db/local/d'" error message. The typos have been fixed, and the Ansible remediation tasks by OpenSCAP-generated playbooks now succeed. (BZ#1601933)

Users of scap-security-guide are advised to upgrade to these updated packages, which fix these bugs.


Update packages.




  1. scap-security-guide-0.1.36-10.el7.src.rpm
    MD5: 4076e2b716355f585483161c7f7e3032
    SHA-256: fbad0f156f3d75e41c3609f64bd3fe57bfc82f6085f2a8bc73084a337f3a96c9
    Size: 3.91 MB

Asianux Server 7 for x86_64
  1. scap-security-guide-0.1.36-10.el7.noarch.rpm
    MD5: 5d175e37fffc26307f6a83d4740c9c42
    SHA-256: 6d43f31837827823ce7b82d9430f82b01eb7ec589e35fbcd1f6dbbcc6f0f7395
    Size: 2.62 MB
  2. scap-security-guide-doc-0.1.36-10.el7.noarch.rpm
    MD5: 75b99cd243b413ed34a82fdbdc2dba2d
    SHA-256: 4da9585436c647c0088e67577d8afc46809473d8b6ea01da8c3f51efa2641948
    Size: 1.38 MB