RHBA-2023:4808 - Bug Fix Advisory

Topic

An update for scap-security-guide is now available for Red Hat Enterprise Linux
9.0 Extended Update Support.

Description

The scap-security-guide project provides a guide for configuration of the
system from the final system's security point of view. The guidance is
specified in the Security Content Automation Protocol (SCAP) format and
constitutes a catalog of practical hardening advice, linked to government
requirements where applicable. The project bridges the gap between generalized
policy requirements and specific implementation guidelines.

Bug Fix(es):

• Failed to locate a datastream with ID matching 'scap_org.open-

scap_datastream_from_xccdf_ssg-rhel8-xccdf-1.2.xml' ID (BZ#2223964)

• Update ANSSI BP-028 in RHEL9 to v2.0 (BZ#2228432)
• journald config parameters not set up correctly after oscap remediation

(BZ#2228440)

• Rebase scap-security-guide in Red Hat Enterprise Linux 9.3 to latest upstream

version (BZ#2228449)

• Rule "All Interactive Users Home Directories Must Exist"

(`xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_exists`)
applies to non-local users as well (BZ#2228463)

• Rules "Set Existing Passwords Maximum/Minimum Age" apply to non-local users

as well (BZ#2228468)

• The /usr/share/xml/scap/ssg/content/ssg-rhel9-ds.xml file contains reference

to an URL that no longer exist. (BZ#2228470)

Solution

For details on how to apply this update, which includes the changes described
in this advisory, refer to

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0 s390x
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0 ppc64le
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

• BZ - 2223964 - Failed to locate a datastream with ID matching 'scap_org.open-scap_datastream_from_xccdf_ssg-rhel8-xccdf-1.2.xml' ID [rhel-9.0.0.z]
• BZ - 2228432 - Update ANSSI BP-028 in RHEL9 to v2.0 [rhel-9.0.0.z]
• BZ - 2228440 - journald config parameters not set up correctly after oscap remediation [rhel-9.0.0.z]
• BZ - 2228449 - Rebase scap-security-guide in Red Hat Enterprise Linux 9.3 to latest upstream version [rhel-9.0.0.z]
• BZ - 2228463 - Rule "All Interactive Users Home Directories Must Exist" (`xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_exists`) applies to non-local users as well [rhel-9.0.0.z]
• BZ - 2228468 - Rules "Set Existing Passwords Maximum/Minimum Age" apply to non-local users as well [rhel-9.0.0.z]
• BZ - 2228470 - The /usr/share/xml/scap/ssg/content/ssg-rhel9-ds.xml file contains reference to an URL that no longer exist. [rhel-9.0.0.z]

CVEs

(none)

References

(none)