22 Pull requests merged by 10 people

• Build thin data streams alongside normal data stream

  #13170 merged Mar 13, 2025

• Change the way in which applicability of selinux platform is determined

  #13173 merged Mar 13, 2025

• Remove macOS content

  #13158 merged Mar 13, 2025

• OCPBUGS-52884: Exclude file integrity operator checks from ARM clusters

  #13164 merged Mar 13, 2025

• Update Ubuntu 22.04 STIG to V2R3

  #13167 merged Mar 13, 2025

• Revert the uid back to rsyslog for the rule file_owner_var_log_syslog

  #13169 merged Mar 13, 2025

• Improve platform processing in Automatus

  #13162 merged Mar 12, 2025

• Add missing RHEL8 stig id to rootfiles_configured

  #13161 merged Mar 12, 2025

• Introduce rule enable_gpgcheck_for_all_repositories

  #13156 merged Mar 12, 2025

• OCPBUGS-52295: Update testing assertions for partition-for-var-log-audit

  #13142 merged Mar 12, 2025

• Update owner macros to allow | between owners

  #13113 merged Mar 12, 2025

• [template]: fixes in file_owner template

  #13070 merged Mar 12, 2025

• OPENSCAP-4118 - Add script to build tests

  #13029 merged Mar 12, 2025

• OPENSCAP-5464: Use more fine granular audit rules for E8 and ISM profiles in RHEL

  #13149 merged Mar 11, 2025

• Align chronyd makestep value with Ubuntu STIGs

  #13153 merged Mar 10, 2025

• SLE15 Use socket disable template for telnet

  #13154 merged Mar 10, 2025

• Add new rule for rootfiles package

  #13134 merged Mar 10, 2025

• Update release script based on new stabilization date

  #13140 merged Mar 10, 2025

• Add mount[boot-efi] platform to mount_option_boot_efi_nosuid rule

  #13152 merged Mar 7, 2025

• Fix accounts_password_pam_retry

  #13144 merged Mar 7, 2025

• Improve snapshot handling in automatus

  #13138 merged Mar 7, 2025

• Fail if the build causes empty OCIL

  #13148 merged Mar 7, 2025

9 Pull requests opened by 7 people

• OCPBUGS-52862: Do not unselect rules from RHCOS4 STIG profile

  #13157 opened Mar 10, 2025

• OCPBUGS-52885: Exclude FIO notification check on ARM64

  #13165 opened Mar 11, 2025

• OCPBUGS-52888: Support checking ovs db lock groups for ARM64

  #13166 opened Mar 11, 2025

• Update rule package_bind_removed for RHEL 9.6

  #13168 opened Mar 12, 2025

• OCPBUGS-52889: Support ovs sys id ownership check on ARM64

  #13171 opened Mar 12, 2025

• Update regex to support RainerScript in rsyslog_cron_logging

  #13172 opened Mar 12, 2025

• fix accounts_password_pan_rety oval check for Debian

  #13174 opened Mar 13, 2025

• OPENSCAP-4808: Remove deprecated specific UEFI rules from RHEL9/RHEL10 profiles

  #13176 opened Mar 13, 2025

• Groupowner template

  #13177 opened Mar 13, 2025

11 Issues closed by 2 people

• Thin datastreams cannot be built outside of `build_product`

  #13163 closed Mar 13, 2025

• Review ip6tables related rules

  #11054 closed Mar 13, 2025

• Static checker issue with gitops-operator-install

  #8916 closed Mar 13, 2025

• Allow Remarks alongside profile entries and other Profile-related changes

  #6889 closed Mar 13, 2025

• Check /etc/systemd/rules and other directories in systemd rules

  #3359 closed Mar 13, 2025

• Remove macOS Content

  #13041 closed Mar 13, 2025

• ensure_gpgcheck_globally_activated is misaligned with DISA

  #13110 closed Mar 12, 2025

• Some `audit_rules_*` are missing Ansible remediation

  #13125 closed Mar 11, 2025

• Rule `file_permission_user_init_files_root` fails to remediate

  #13100 closed Mar 10, 2025

• DISA misalignment with rule mount_option_boot_efi_nosuid

  #13006 closed Mar 7, 2025

• Rule accounts_password_pam_retry fails after kickstart installation

  #12277 closed Mar 7, 2025

3 Issues opened by 1 person

• Rule enable_gpgcheck_for_all_repositories fails on RHEL8 (Anaconda installation)

  #13175 opened Mar 13, 2025

• rootfiles_configured is misaligned with DISA

  #13160 opened Mar 11, 2025

• Test scenario `no_partition.fail` fails for `partition_for_var_log` on RHEL9

  #13159 opened Mar 11, 2025

19 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [OCPBUGS-42396]Add variable reference for resource_requests_limits rules

  #12987 commented on Mar 13, 2025 • 1 new comment

• CI adjustments for OCP 4.18

  #12863 commented on Mar 14, 2025 • 1 new comment

• OCPBUGS-47485: Only list CLO output urls when they exist

  #13150 commented on Mar 13, 2025 • 0 new comments

• CMP-3182: Remove unnecessary 4.2.yml assertion files

  #13141 commented on Mar 12, 2025 • 0 new comments

• Handle XCCDF variable in key_value_pair_in_file template

  #13051 commented on Mar 13, 2025 • 0 new comments

• Add PAM rules to default RHCOS profiles

  #12941 commented on Mar 12, 2025 • 0 new comments

• CMP-2859: Resolve failing Image-stream-sets-schedule

  #12895 commented on Mar 12, 2025 • 0 new comments

• The `uefi` and `non-uefi` platforms have incoherent conditionals

  #13151 commented on Mar 13, 2025 • 0 new comments

• `sysctl_net_ipv4_conf_all_forwarding` fails on `stig_gui` using Ansible remediation

  #13129 commented on Mar 13, 2025 • 0 new comments

• Some Automatus tests fail for unknown reasons on RHEL

  #13126 commented on Mar 13, 2025 • 0 new comments

• Alinux 3 OpenSCAP scanning not working

  #12401 commented on Mar 13, 2025 • 0 new comments

• template issue: file_groupowner fails tests of itself

  #12131 commented on Mar 13, 2025 • 0 new comments

• Incorrect instructions for ocp4-stig-node-worker-kubelet-enable-protect-kernel-sysctl-file-exist

  #11253 commented on Mar 13, 2025 • 0 new comments

• sysctl_kernel_yama_ptrace_scope should pass with stricter value

  #11217 commented on Mar 13, 2025 • 0 new comments

• accounts_password_set_max_life_existing is misaligned with DISA

  #10083 commented on Mar 13, 2025 • 0 new comments

• Rule accounts_password_pam_pwhistory_remember_password_auth is misaligned with DISA

  #10044 commented on Mar 13, 2025 • 0 new comments

• check for makeIPTablesUtilChains does not reflect benchmark and product description

  #8453 commented on Mar 13, 2025 • 0 new comments

• Some SELinux / mount option rules still failing on Image Builder

  #13127 commented on Mar 13, 2025 • 0 new comments

• Test scenario 'package-installed.fail' fails for package_bind_removed

  #13107 commented on Mar 10, 2025 • 0 new comments