[El-errata] ELBA-2022-6452 Oracle Linux 8 scap-security-guide bug fix and enhancement update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Sep 29 12:39:28 UTC 2022

Oracle Linux Bug Fix Advisory ELBA-2022-6452


The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:




Description of changes:

- Update rules related to pam pwhistory remember module to allow both
 requisite and required control values [Orabug: 34604895]
- Update accounts_password_pam_retry rule to align it with DISA requirements
 OL08-00-020102, OL08-00-020103, and OL08-00-020104 [Orabug: 34604895]
- Create mount_option_home and use it in OL8 [Orabug: 34604895]
- Update rule no_empty_passwords to include the password-auth file in
 OVAL check and rule wording [Orabug: 34604895]
- Introduce the rule accounts_passwords_pam_faillock_dir to cover
 DISA requirements OL08-00-020016 and OL08-00-020017 [Orabug: 34604895]
- Introduce rule account_disable_inactivity_system_auth to cover
 DISA requirement OL08-00-020260 [Orabug: 34604895]
- Add automation content to rule accounts_passwords_pam_faillock_audit and include
 it in the OL8 stig profile [Orabug: 34604895]
- Add OVAL content to rule fapolicy_default_deny and include it on the
 OL8 stig profile [Orabug: 34604895]
- Add automation content to rule rule account_password_selinux_faillock_dir
 and include it on the OL8 stig profile [Orabug: 34604895]
- Create rule to cover DISA requirements OL08-00-020018 and OL08-00-020019 [Orabug: 34604895]
- Update sysctl template OVAL [Orabug: 34604895]
- Update accounts_password template OVAL [Orabug: 34604895]

- Update to the latest upstream release (RHBZ#2116347)
- Update RHEL8 STIG profile to V1R7 (RHBZ#2116408)
- Select grub2_disable_recovery in OSPP Profile (RHBZ#2117308)
- Use authselect minimal profile in OSPP Profile (RHBZ#2117306)
- Improve rules for CIS level1 partition options (RHBZ#2117510)

More information about the El-errata mailing list