Revisions of openscap

Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 254)
Marcus Meissner's avatar Marcus Meissner (msmeissn) accepted request 847158 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 253)
- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)
buildservice-autocommit accepted request 839126 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 252)
baserev update by copy to link target
Marcus Meissner's avatar Marcus Meissner (msmeissn) accepted request 839124 from Robert Frohl's avatar Robert Frohl (rfrohl) (revision 251)
update openscap to 1.3.4
buildservice-autocommit accepted request 800232 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 250)
baserev update by copy to link target
Marcus Meissner's avatar Marcus Meissner (msmeissn) accepted request 799976 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 248)
- openscap 1.3.3. Notable improvements in this release:
  - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč);
  - timezone for XCCDF TestResult start and end time (thank you, Jan Černý);
  - new yamlfilecontent independent probe (draft implementation),
    see the proposal https://github.com/OVAL-Community/OVAL/issues/91
    for additional information.
There are other changes as well, here is the list:
  - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF;
  - Added ability to generate `machineconfig` fix;
  - Detect ambiguous scan target (utils/oscap-podman);
  - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory;
  - The data system_info probe return for offline and online modes is consistent and actual;
  - Prevent crashes when complicated regexes are executed in textfilecontent58 probe;
  - Fixed #1512: Severity refinement lost in generated guide;
  - Fixed #1453: Pointer lost in Swig API;
  - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities;
    from system_info probe;
  - Fixed filepath pattern matching in offline mode in textfilecontent58 probe;
  - Fixed infinite recursion in systemdunitdependency probe;
  - Fixed the case when CMake couldn't find libacl or xattr.h.
- dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream
buildservice-autocommit accepted request 788259 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 247)
baserev update by copy to link target
Marcus Meissner's avatar Marcus Meissner (msmeissn) accepted request 788252 from Christophe Giboudeaux's avatar Christophe Giboudeaux (cgiboudeaux) (revision 246)
- Add upstream patch to fix the scap-workbench build:
  * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch
buildservice-autocommit accepted request 766084 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 245)
baserev update by copy to link target
buildservice-autocommit accepted request 764315 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 244)
baserev update by copy to link target
Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 243)
- switch back to official release
- openscap 1.3.2
Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 242)
- openscap 1.3.1
  - the test suite and build scripts were improved to support Debian 10
  - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes;
  - the oscap-docker wrapper is no longer dependent on Atomic 
  - Python binding are now more robust 
  - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents 
  - Support of multi-check rules has been improved across the whole workflow 
  There are other changes as well, here is the list:
  * New features
    - Offline mode support for environmentvariable58 probe
    - The oscap-docker wrapper is available without Atomic
  + Maintenance, bug fixes
    - Improved support of multi-check rules (report, remediations, console output)
    - Improved HTML report look and feel, including printed version
    - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels
    - Probe rpmverifyfile uses and returns canonical paths
    - Improved a11y of HTML reports and guides
    - Fixes and improvements for SWIG Python bindings
    - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity)
    - Fixed URL link mechanism for Red Hat Errata
    - New STIG Viewer URI: public.cyber.mil
    - Probe selinuxsecuritycontext would not check if SELinux is enabled
    - Scanner would provide information about unsupported OVAL objects
    - Added more tests for offline mode (probes, remediation)
    - #528 fixed: Eval SCE script when /tmp is in mode noexec
    - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage
buildservice-autocommit accepted request 763678 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 241)
baserev update by copy to link target
Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 240)
Marcus Meissner's avatar Marcus Meissner (msmeissn) accepted request 763602 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 239)
- temporary openscap 1.3.1 git snapshot
  - make it build with new RPM  (bsc#1160720)
Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 238)
- openscap-new-rpm.patch: use the recent RPM defines, some old
  ones got obsoleted
Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 237)
Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 236)
Marcus Meissner's avatar Marcus Meissner (msmeissn) committed (revision 235)
- use distribution-release instead of dummy-release
Displaying revisions 41 - 60 of 294
openSUSE Build Service is sponsored by