[El-errata] ELBA-2022-6452 Oracle Linux 8 scap-security-guide bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2022-6452

http://linux.oracle.com/errata/ELBA-2022-6452.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
scap-security-guide-0.1.63-1.0.1.el8_6.noarch.rpm
scap-security-guide-doc-0.1.63-1.0.1.el8_6.noarch.rpm

aarch64:
scap-security-guide-0.1.63-1.0.1.el8_6.noarch.rpm
scap-security-guide-doc-0.1.63-1.0.1.el8_6.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/scap-security-guide-0.1.63-1.0.1.el8_6.src.rpm



Description of changes:

[0.1.63.1.0.1]
- Update rules related to pam pwhistory remember module to allow both
 requisite and required control values [Orabug: 34604895]
- Update accounts_password_pam_retry rule to align it with DISA requirements
 OL08-00-020102, OL08-00-020103, and OL08-00-020104 [Orabug: 34604895]
- Create mount_option_home and use it in OL8 [Orabug: 34604895]
- Update rule no_empty_passwords to include the password-auth file in
 OVAL check and rule wording [Orabug: 34604895]
- Introduce the rule accounts_passwords_pam_faillock_dir to cover
 DISA requirements OL08-00-020016 and OL08-00-020017 [Orabug: 34604895]
- Introduce rule account_disable_inactivity_system_auth to cover
 DISA requirement OL08-00-020260 [Orabug: 34604895]
- Add automation content to rule accounts_passwords_pam_faillock_audit and include
 it in the OL8 stig profile [Orabug: 34604895]
- Add OVAL content to rule fapolicy_default_deny and include it on the
 OL8 stig profile [Orabug: 34604895]
- Add automation content to rule rule account_password_selinux_faillock_dir
 and include it on the OL8 stig profile [Orabug: 34604895]
- Create rule to cover DISA requirements OL08-00-020018 and OL08-00-020019 [Orabug: 34604895]
- Update sysctl template OVAL [Orabug: 34604895]
- Update accounts_password template OVAL [Orabug: 34604895]

[0.1.63-1]
- Update to the latest upstream release (RHBZ#2116347)
- Update RHEL8 STIG profile to V1R7 (RHBZ#2116408)
- Select grub2_disable_recovery in OSPP Profile (RHBZ#2117308)
- Use authselect minimal profile in OSPP Profile (RHBZ#2117306)
- Improve rules for CIS level1 partition options (RHBZ#2117510)