In running through the RHEL 7.3 beta, I found the following bugs. Looks
like most have already been patched upstream.
Has anyone seen bugs beyond those below?
FAIL DURING OSCAP-ANACONDA INSTALL? FAIL AFTER CLI REMEDIATION?
BugZilla
Install AIDE X FIXED
https://bugzilla.redhat.com/show_bug.cgi?id=1372058
Build and Test AIDE Database X FIXED
https://bugzilla.redhat.com/show_bug.cgi?id=1372058
Configure Periodic Execution of AIDE X FIXED
https://bugzilla.redhat.com/show_bug.cgi?id=1372058
Install Virus Scanning Software X X
Acceptable - DoD specific
Enable Randomized Layout of Virtual Address Space X ERROR
https://bugzilla.redhat.com/show_bug.cgi?id=1372060
Set Password to Maximum of Consecutive Repeating Characters from Same
Character Class X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372061
Set Interactive Session Timeout X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372062
Set Boot Loader Password X X
Acceptable - user needs to input password
Install the screen Package X
https://bugzilla.redhat.com/show_bug.cgi?id=1372066
Configure Kernel Parameter for Accepting Source-Routed Packets for All
Interfaces X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372063
Ensure Logs Sent to Remote Host X X
Acceptable - user must input
Disable GSSAPI Authentication X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372068
Disable Kerberos Authentication X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372068
Enable Use of StrictModes X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372068
Enable Use of Privilege Separation X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372068
Disable Compression or Set Compression to delayed X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372068
Verify Permissions on SSH Server Private *_key Key Files X X
https://bugzilla.redhat.com/show_bug.cgi?id=1372070
--
SCAP Security Guide mailing list
[email protected]
https://lists.fedorahosted.org/admin/lists/[email protected]
https://github.com/OpenSCAP/scap-security-guide/
