Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Description of problem:
The latest package on RHEL7 : scap-security-guide-0.1.40-12.el7.noarch.rpm
But it only contains DISA STIG for Red Hat Enterprise Linux V1R4
There has been no updates on this package from Red Hat.
I checked for upstream and found that latest version does include DISA STIG V2R2, it was released recently Jan 2019.
When will be these DISA STIG V2R2 available in package with RHEL7 ?
Version-Release number of selected component (if applicable):
scap-security-guide-0.1.40-12.el7.noarch.rpm
How reproducible:
DISA STIG with latest package on RHEL7 is V1R4
# oscap xccdf eval --fetch-remote-resources --profile xccdf_org.ssgproject.content_profile_stig-rhel7-disa --results results.xml --results-arf results-arf.xml --stig-view stig-viewer --report report.html --oval-results --check-engine-results --export-variables /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
It uses the stig-rhel7-disa profile. The html report that is generated has this text at the top
Guide to the Secure Configuration of Red Hat Enterprise Linux 7
with profile DISA STIG for Red Hat Enterprise Linux 7
This profile contains configuration checks that align to the
>>>> DISA STIG for Red Hat Enterprise Linux V1R4.
Steps to Reproduce:
1. install latest package
2. execute rule above
3. Find DISA STIG version supported on RHEL7
Actual results:
DISA STIG V1R4
Expected results:
DISA STIG V2R1 or V2R2
Additional info:
Upstream has released V2R2 in Junuary 2019 for RHEL7
Description of problem: The latest package on RHEL7 : scap-security-guide-0.1.40-12.el7.noarch.rpm But it only contains DISA STIG for Red Hat Enterprise Linux V1R4 There has been no updates on this package from Red Hat. I checked for upstream and found that latest version does include DISA STIG V2R2, it was released recently Jan 2019. When will be these DISA STIG V2R2 available in package with RHEL7 ? Version-Release number of selected component (if applicable): scap-security-guide-0.1.40-12.el7.noarch.rpm How reproducible: DISA STIG with latest package on RHEL7 is V1R4 # oscap xccdf eval --fetch-remote-resources --profile xccdf_org.ssgproject.content_profile_stig-rhel7-disa --results results.xml --results-arf results-arf.xml --stig-view stig-viewer --report report.html --oval-results --check-engine-results --export-variables /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml It uses the stig-rhel7-disa profile. The html report that is generated has this text at the top Guide to the Secure Configuration of Red Hat Enterprise Linux 7 with profile DISA STIG for Red Hat Enterprise Linux 7 This profile contains configuration checks that align to the >>>> DISA STIG for Red Hat Enterprise Linux V1R4. Steps to Reproduce: 1. install latest package 2. execute rule above 3. Find DISA STIG version supported on RHEL7 Actual results: DISA STIG V1R4 Expected results: DISA STIG V2R1 or V2R2 Additional info: Upstream has released V2R2 in Junuary 2019 for RHEL7