Highlights
- SCAP 1.3 DS generated along side SCAP 1.2 DS
- An Ansible Playbook is generated for each rule
- Remediation roles terminology fixed
- Ansible "roles" are now called Playbooks
- Bash "roles" are now called bash scripts
Introduction of package CPEs for Rule applicability
- Content will detect Podman as a container environment
- Several fixes in Ansible snippets so that they don't error during execution
Products and Profiles
- Significant content additions and bugfixes for OpenShift
- Enable RHV-H and RHEL-H draft STIG profiles
- RHEL7 STIG profiles renamed to have shorter ID
- RHEL7
nist-800-171-cui
renamed tocui
- New rules enabled for SLE12
Rules
- FIPS regulatory warning updated
- Rules not relevant for containers tagged as machine only
- Fixed duplicated CCEs
Documentation
- Documentation in Build.md merged into Developer Guide
- Mention profile_stats.py in Developer Guide
- Update Ansible section in Developer Guide
- Add documentation to build zipfile target
Infrastructure
- Rename profile_stats to profile_tool and update usage by CMake.
- CCE checksums are now validated
- Update ansible template, readme, and script to bring in line with Ansible Galaxy