Security Tools

Jump to letter: [ 3ABCDEFGHIJKLMNOPQRSTUVWXYZ ]

scap-security-guide - Security guidance and baselines in SCAP formats

Website: https://github.com/ComplianceAsCode/content/
License: BSD-3-Clause
Vendor: Virtuozzo
Description:
The scap-security-guide project provides a guide for configuration of the
system from the final system's security point of view. The guidance is specified
in the Security Content Automation Protocol (SCAP) format and constitutes
a catalog of practical hardening advice, linked to government requirements
where applicable. The project bridges the gap between generalized policy
requirements and specific implementation guidelines. The system
administrator can use the oscap CLI tool from openscap-scanner package, or the
scap-workbench GUI tool from scap-workbench package to verify that the system
conforms to provided guideline. Refer to scap-security-guide(8) manual page for
further information.

Packages

scap-security-guide-0.1.74.22-1.vl9.noarch [3.0 MiB] Changelog by Konstantin Volkov (2025-09-26): 
- Add Makefile.version and targets.list, see #VSTOR-115549 (#VSTOR-115549)
 - Merged in niyaz_VSTOR-115549_scratch-build-with-autotests (pull request #4)
(Alibek Niyazov <alibek.niyazov@virtuozzo.com>) (#VSTOR-115549)
 - add dummy version (Alibek Niyazov <alibektr@gmail.com>)
 - add source id (Alibek Niyazov <alibek.niyazov@virtuozzo.com>)
 - refactor: pipeline steps - check comment, scratch build, nexus temp repo, CI
test (Alibek Niyazov <alibek.niyazov@virtuozzo.com>)
 - add pipeline with check ci comment, scratch build, nexus repo and ci tests.
(Alibek Niyazov <alibek.niyazov@virtuozzo.com>)
 - add ci-gateway.conf (Alibek Niyazov <alibek.niyazov@virtuozzo.com>)
 - Ensure that security_patches_up_to_date is not built with remediations wrt
Red Hat products (Vojtech Polasek <vpolasek@redhat.com>)
 - Disable RHEL 10 content for 0.1.73 release (Matthew Burket
<mburket@redhat.com>)
 - Fix zipl_bootmap_is_up_to_date (Jan Černý <jcerny@redhat.com>)
 - add when conditional to remediation of sssd_enable_pam_service (Vojtech
Polasek <vpolasek@redhat.com>)
 - Prioritize chronyd_specify_remote_server (Jan Černý <jcerny@redhat.com>)
 - Fix accounts_umask_etc_bashrc (Jan Černý <jcerny@redhat.com>)
 - Recollect facts in mount_option_nodev_nonroot_local_partitions (Jan Černý
<jcerny@redhat.com>)
 - OCP Update variable filter to consider go_template (Vincent Shen
<wenshen@redhat.com>)
 - add rule configure_firewalld_ports to the rhel9 default profile (Vojtech
Polasek <vpolasek@redhat.com>)
 - make Ansible remediation of zipl_bootmap_is_up_to_date available in all
products (Vojtech Polasek <vpolasek@redhat.com>)
 - Revert PR 11816 (Marcus Burghardt <maburgha@redhat.com>)
 - Fix kdump service name on Ubuntu 22.04 (Miha Purg <miha.purg@canonical.com>)
 - Add rule set_password_hashing_algorithm_systemauth to Ubuntu STIG profile
(Miha Purg <miha.purg@canonical.com>)
 - Fix rule set_password_hashing_algorithm_systemauth on Ubuntu (Miha Purg
<miha.purg@canonical.com>)
 - Add Ubuntu tests for set_password_hashing_algorithm_systemauth (Miha Purg
<miha.purg@canonical.com>)
 - Add and modify rules file/dir_permissions_system_journal (Miha Purg
<miha.purg@canonical.com>)
 - Bump paambaati/codeclimate-action from 5.0.0 to 6.0.0 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Fix ansible lint for SLE platforms (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix #11902 (Marco Fortina <marco_fortina@hotmail.it>)
 - Fix test for template file_groupowner (Miha Purg <miha.purg@canonical.com>)
 - Fix test for template file_owner (Miha Purg <miha.purg@canonical.com>)
 - Fix test for template file_permissions (Miha Purg <miha.purg@canonical.com>)
 - Fix #11898 issue (Marco Fortina <marco_fortina@hotmail.it>)
 - Add ol8 to FIPS certified oVAL list (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ol8 pci-dss profile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests to network_nmcli_permissions (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add ansible to ol9 in network_nmcli_permissions (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update platform for ol in timer_logrotate_enabled (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to ol in chronyd_run_as_chrony_user (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add ansible to ol in chronyd_run_as_chrony_user (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ol9 pci-dss profile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix #11895 issue (Marco Fortina <marco_fortina@hotmail.it>)
 - Align wireless_disable_interfaces with Ubuntu 22.04 STIG (Miha Purg
<miha.purg@canonical.com>)
 - Add docs how to build thin ds (Jan Rodak <hony.com@seznam.cz>)
 - Apply suggestions from code review (Matthew Burket <m@tthewburket.com>)
 - Apply suggestions from code review (Matthew Burket <m@tthewburket.com>)
 - Update R38 notes (Matthew Burket <mburket@redhat.com>)
 - Restrict the list of accepted shells to avoid user login (Marcus Burghardt
<maburgha@redhat.com>)
 - Add back rules once shipped in RHCOS4 Benchmark (Watson Sato
<wsato@redhat.com>)
 - Return condition to test firewalld service state (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenarios for service state (Marcus Burghardt
<maburgha@redhat.com>)
 - Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Add RHEL 10 to SRG Mapping Table Action (Matthew Burket <mburket@redhat.com>)
 - Fix stricter permissions test for file_permission (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL9 CCE for sudo_dedicated_group (Matthew Burket <mburket@redhat.com>)
 - Move R38 to automated status (Matthew Burket <mburket@redhat.com>)
 - Allow sudo_dedicated_group in RHEL9 and RHEL10 ANSSI profiles (Matthew Burket
<mburket@redhat.com>)
 - Don't allow stricter permissions on file_permissions_sudo (Matthew Burket
<mburket@redhat.com>)
 - Try 4110 for file_permissions_sudo (Matthew Burket <mburket@redhat.com>)
 - OCP4: Add container_security_operator_exists to PCIDSS profile (Vincent Shen
<wenshen@redhat.com>)
 - update profile stability test data (Vojtech Polasek <vpolasek@redhat.com>)
 - set the var_user_initialization_files_regex to all_dotfiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - update list of contributors before releasing 0.1.73 (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix content_diff when a rule is removed (Matthew Burket <mburket@redhat.com>)
 - Align rule encrypt_partitions with Ubuntu 22.04 STIG (Miha Purg
<miha.purg@canonical.com>)
 - Add variables from profiles (Jan Rodak <hony.com@seznam.cz>)
 - Update stig version in ol8 profiles (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OL8 STIG reference (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Align chronyd_sync_clock to Ubuntu 22.04 STIG (Miha Purg
<miha.purg@canonical.com>)
 - exclude /static-checks/diff TMT tests (Jiri Jaburek <comps@nomail.dom>)
 - Update RHEL 9 STIG to V1R3 (Matthew Burket <mburket@redhat.com>)
 - Remove RHEL-09-255070 from RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Add initial RHEL 10 PCI DSS profile (Matthew Burket <mburket@redhat.com>)
 - Add unit test for get_not_included_components() (Jan Rodak
<hony.com@seznam.cz>)
 - Adding variable filtering (Jan Rodak <hony.com@seznam.cz>)
 - Add XML validation test (Jan Rodak <hony.com@seznam.cz>)
 - Update RHEL 8 STIG to V1R14 (Matthew Burket <mburket@redhat.com>)
 - Fix Bash remediation of firewalld-based rules in offline mode (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Add assertion file for RHCOS4 E8 profile tests on 4.13 (Lance Bragstad
<lbragsta@redhat.com>)
 - remove adjusts from tmt-plans (Jiri Jaburek <comps@nomail.dom>)
 - disable CentOS Stream Testing Farm tests for ccn_advanced (Jiri Jaburek
<comps@nomail.dom>)
 - CMP-2454: Mark Requirement 2.3 as not applicable (Watson Sato
<wsato@redhat.com>)
 - CMP-2454: Implement and justify Requirement 2.2 (Watson Sato
<wsato@redhat.com>)
 - CMP-2454: Mark Requirement 2.1 as not applicable (Watson Sato
<wsato@redhat.com>)
 - add TMT plans for all RHEL / CentOS Stream profiles (Jiri Jaburek
<comps@nomail.dom>)
 - remove TMT plan summaries (Jiri Jaburek <comps@nomail.dom>)
 - split out TMT plans to separate Packit jobs (Jiri Jaburek <comps@nomail.dom>)
 - Align OVN e2e results with fixed platform check (Watson Sato
<wsato@redhat.com>)
 - Adjust OCP OVN platform check (Watson Sato <wsato@redhat.com>)
 - update profile stability tests (Vojtech Polasek <vpolasek@redhat.com>)
 - Improve title of CCN profiles for RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - set instances of var_sshd_set_keepalive to 1 in RHEL 8 and 9 profiles
(Vojtech Polasek <vpolasek@redhat.com>)
 - Fix SCE check for iptables_open_ports (Miha Purg <miha.purg@canonical.com>)
 - Fix SCE checks for iptables_loopback_traffic (Miha Purg
<miha.purg@canonical.com>)
 - Move auditing group (Jan Černý <jcerny@redhat.com>)
 - Bump peter-evans/create-pull-request from 6.0.3 to 6.0.4 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Bump JamesIves/github-pages-deploy-action from 4.5.0 to 4.6.0
(dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
 - ol9 remove xinetd rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - ol9 anssi add kernel_config rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update ol9 ospp profile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - fix regex (Vojtech Polasek <vpolasek@redhat.com>)
 - Align var_accounts_tmout to Ubuntu 22.04 STIG V1R1 (Miha Purg
<miha.purg@canonical.com>)
 - add test scenario (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix broken exception message (Jan Černý <jcerny@redhat.com>)
 - accounts_umask_etc_bashrc: modify regex to capture also instances of umask
which are not at the begining of line (Vojtech Polasek <vpolasek@redhat.com>)
 - ol8 hipaa remove sshd_use_priv_separation (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - ol8 e8 add authselect rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - ol8 cjis delete password_minlen_login_defs var (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - ol8 anssi add kernel_config rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update tests in auditd_name_format (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - ol8 stig update var_auditd_name_format (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add enable_authselect to ol8 stig (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update rule to cover OL08-00-010100 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update rule for OL08-00-010200 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update rule to cover OL08-00-030122 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - ol8 stig remove rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Initial draft version of STIG V1R1 profile for Ubuntu 22.04 LTS (Miha Purg
<miha.purg@canonical.com>)
 - Fix rule mount_option_nodev_nonroot_local_partitions Bash remediation (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Fix a case where the motd check would consider an empty file valid. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove OVAL version restrictions from
auditd_audispd_configure_sufficiently_large_partition (Matthew Burket
<mburket@redhat.com>)
 - Set SRG-OS-000480-GPOS-00230 to does not meet (Matthew Burket
<mburket@redhat.com>)
 - Add rmmod and modprobe auditing to SRG-OS-000477-GPOS-00222 (Matthew Burket
<mburket@redhat.com>)
 - Add audit_rules_privileged_commands_rmmod to SRG-OS-000471-GPOS-00216
(Matthew Burket <mburket@redhat.com>)
 - Add AIDE to SRG-OS-000445-GPOS-00199 (Matthew Burket <mburket@redhat.com>)
 - Ensure that ensure_oracle_gpgkey_installed is only for OL products in
srg_gpos (Matthew Burket <mburket@redhat.com>)
 - Move all variables for SRG-OS-GPOS-000343-00134 (Matthew Burket
<mburket@redhat.com>)
 - Add accounts_tmout to SRG-OS-000279-GPOS-00109 (Matthew Burket
<mburket@redhat.com>)
 - Clean up title for SRG-OS-000276-GPOS-00106 (Matthew Burket
<mburket@redhat.com>)
 - Update title for wireless_disable_interfaces (Matthew Burket
<mburket@redhat.com>)
 - Remove extraous text from SRG-OS-000228-GPOS-00088 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000191-GPOS-00080 (Matthew Burket <mburket@redhat.com>)
 - Clean up SRG-OS-000163-GPOS-00072 (Matthew Burket <mburket@redhat.com>)
 - Fix SRG-OS-000095-GPOS-00049 (Matthew Burket <mburket@redhat.com>)
 - Add group_unique to SRG-OS-000-121-GPOS-00062 (Matthew Burket
<mburket@redhat.com>)
 - Clean up the ocil in group_unique_id (Matthew Burket <mburket@redhat.com>)
 - Move configure_opensc_card_drivers around in SRG GPOS (Matthew Burket
<mburket@redhat.com>)
 - Add firewalld_sshd_port_enabled to SRG-OS-000096-GPOS-00050 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000095-GPOS-00049 (Matthew Burket <mburket@redhat.com>)
 - Move SRG-OS-000080-GPOS-00048 to use account_temp_expire_date (Matthew Burket
<mburket@redhat.com>)
 - Add tftp and telnet-server removed to SRG-OS-000074-GPOS-00042 (Matthew
Burket <mburket@redhat.com>)
 - Remove atm and cramfs from SRG-OS-000095-GPOS-00049 (Matthew Burket
<mburket@redhat.com>)
 - Update SSH version to 9.6 in SRG GPOS (Matthew Burket <mburket@redhat.com>)
 - Pull account_emergency_expire_date from SRG GPOS (Matthew Burket
<mburket@redhat.com>)
 - Add status to does not meet from SRG-OS-000191-GPOS-00080 (Matthew Burket
<mburket@redhat.com>)
 - Add sudo and su auditing to SRG-OS-000064-GPOS-00033 (Matthew Burket
<mburket@redhat.com>)
 - Remove account_unique_id from SRG-OS-000042-GPOS-00020 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000037-GPOS-00015 (Matthew Burket <mburket@redhat.com>)
 - Add configure_tmux_lock_keybinding to SRG-OS-000030-GPOS-00011 (Matthew
Burket <mburket@redhat.com>)
 - Remove account_emergency_expire_date from SRG-OS-000002-GPOS-00002 (Matthew
Burket <mburket@redhat.com>)
 - Add Inital RHEL 10 STIG Profile (Matthew Burket <mburket@redhat.com>)
 - Rule had incorrect CRD reference rule.yml (Paul Bastide
<pbastide@redhat.com>)
 - Fix super overcomplicated regex (Marcus Burghardt <maburgha@redhat.com>)
 - Include test scenario for quoted path (Marcus Burghardt
<maburgha@redhat.com>)
 - Update OCP test assertions (Lance Bragstad <lbragsta@redhat.com>)
 - Fix dconf package name for Ubuntu (Miha Purg <miha.purg@canonical.com>)
 - Removed the RHEL <8.5 restriction from sshd_set_idle_timeout (Matthew Burket
<mburket@redhat.com>)
 - Update task to check if line is already present (Marcus Burghardt
<maburgha@redhat.com>)
 - Bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Add forgotten definition used in service disabled (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Replace package based platform limitation from platform service (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Make package installation for iptables and nftables mutually exclusive
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Set the requires to sshd_set_keepalive on sshd_set_idle_timeout (Matthew
Burket <mburket@redhat.com>)
 - Prevent removing existing entries (Jan Černý <jcerny@redhat.com>)
 - exclude the html-links test from /static-checks (Jiri Jaburek
<comps@nomail.dom>)
 - sort lists of components after removing of excluded ones (Vojtech Polasek
<vpolasek@redhat.com>)
 - ensure that before profile is output as XCCDF, it does not include any
unwanted components (Vojtech Polasek <vpolasek@redhat.com>)
 - add function profile.remove_components_not_included (Vojtech Polasek
<vpolasek@redhat.com>)
 - generate TMT HTML reports when running under Testing Farm (Jiri Jaburek
<comps@nomail.dom>)
 - Improve regex to ignore files not used for logs (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenario for exceptions (Marcus Burghardt <maburgha@redhat.com>)
 - remove fedora-latest-stable from Packit tests (Jiri Jaburek
<comps@nomail.dom>)
 - put .fmf under tests/tmt-plans to avoid a long prefix (Jiri Jaburek
<comps@nomail.dom>)
 - rename tests/fmf-plans/ to tests/tmt-plans/ (Jiri Jaburek <comps@nomail.dom>)
 - consolidate all fmf-plans under main.fmf (Jiri Jaburek <comps@nomail.dom>)
 - Stop using FQMN for ini_file (Jan Černý <jcerny@redhat.com>)
 - replace fmf-plans/base with Contest's /static-checks (Jiri Jaburek
<comps@nomail.dom>)
 - Prevent matching entries in other sections than [sssd] (Jan Černý
<jcerny@redhat.com>)
 - Add test scenario for conf.d directory (Jan Černý <jcerny@redhat.com>)
 - Fix unused variables (Jan Černý <jcerny@redhat.com>)
 - Improve regex (Jan Černý <jcerny@redhat.com>)
 - Add rule title to Ansible Tasks (Jan Černý <jcerny@redhat.com>)
 - replace dead links for the chronyd project (Jiri Jaburek <comps@nomail.dom>)
 - Use a filtered benchmark for multiple profiles (Jan Rodak
<hony.com@seznam.cz>)
 - Get a filtered benchmark for multiple profiles (Jan Rodak
<hony.com@seznam.cz>)
 - Update references for product stability (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop retired PCI-DSS 3.2.1 for sle15 (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Platform package override for passwd in SUSE platforms (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add RHEL 10 install commands to Automatus (Matthew Burket
<mburket@redhat.com>)
 - Add Ansible remediation to sssd_enable_pam_services (Jan Černý
<jcerny@redhat.com>)
 - Add PyGitHub to test-requirements.txt (Matthew Burket <mburket@redhat.com>)
 - RHEL 8: unify documentation within kickstart files (Vojtech Polasek
<vpolasek@redhat.com>)
 - RHEL9: unify documentation within kickstart files (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update ANSSI R38 Status (Matthew Burket <mburket@redhat.com>)
 - Update SMEs for RHEL 10 ANSSI (Matthew Burket <mburket@redhat.com>)
 - update cryptopolicy used in CUI profile to fips (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix for OVAL in grub2_bootloader_argument on Ubuntu (Miha Purg
<miha.purg@canonical.com>)
 - Add Ubuntu tests for grub2_bootloader_argument template (Miha Purg
<miha.purg@canonical.com>)
 - Fix ANSSI Ansible fmf test plan (Milan Lysonek <mlysonek@redhat.com>)
 - Update SSHD Line in File Template for RHEL 10 (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 10 ANSSI Profiles (Matthew Burket <mburket@redhat.com>)
 - Update requirement status (Marcus Burghardt <maburgha@redhat.com>)
 - use failed_when:false for Ansible register: checks (Jiri Jaburek
<comps@nomail.dom>)
 - remove Bash and Ansible conditionals from the nfs_mount_defined  CPE (Vojtech
Polasek <vpolasek@redhat.com>)
 - Fix ansible_ini_file_set (Matthew Burket <mburket@redhat.com>)
 - OCP4: Add rule to check ACS sensor deployed (Vincent Shen
<wenshen@redhat.com>)
 - OCP4: Drop not-arch from file_permissions_cni_conf (Vincent Shen
<wenshen@redhat.com>)
 - Add Ansible Remediations (Jan Černý <jcerny@redhat.com>)
 - Do not require existence of /var/tmp/tmp-inst (Jan Černý
<jcerny@redhat.com>)
 - Add ignore_spaces to Ansible remediation for networkmanager_dns_mode (Matthew
Burket <mburket@redhat.com>)
 - Add workflow for thin ds test (Jan Rodak <hony.com@seznam.cz>)
 - Add test for thin ds (Jan Rodak <hony.com@seznam.cz>)
 - OCP4: Fix rules with both platform and platforms (Vincent Shen
<wenshen@redhat.com>)
 - drop no longer applicable test scenarios (Vojtech Polasek
<vpolasek@redhat.com>)
 - add platforms to relevant rules (Vojtech Polasek <vpolasek@redhat.com>)
 - stop checking for nonexistence of nfs mount within the template oval for
mount_option_remote_filesystems (Vojtech Polasek <vpolasek@redhat.com>)
 - add new applicability platform nfs_mount_defined (Vojtech Polasek
<vpolasek@redhat.com>)
 - Clean up check_eof (Matthew Burket <mburket@redhat.com>)
 - Add root user to interactive users (Jan Černý <jcerny@redhat.com>)
 - Add tests for utils/ansible_playbook_to_role.py (Matthew Burket
<mburket@redhat.com>)
 - remove incorrect closing bracket from the Grubby argument (Vojtech Polasek
<vpolasek@redhat.com>)
 - Make sure to gather package facts in context of aide_check_audit_tools rule
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add var_accounts_tmout variable definition for PCI profile (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix ansible remediations run in check mode (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add docs for ./utils/ansible_playbook_to_role.py (Matthew Burket
<mburket@redhat.com>)
 - Clean up utils/ansible_playbook_to_role.py (Matthew Burket
<mburket@redhat.com>)
 - Improve args for utils/ansible_playbook_to_role.py (Matthew Burket
<mburket@redhat.com>)
 - Improve import error messages in utils/ansible_playbook_to_role.py (Matthew
Burket <mburket@redhat.com>)
 - Update profile stability for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 9 CCE to configure_tmux_lock_keybinding (Matthew Burket
<mburket@redhat.com>)
 - Add all RHELs to the tests for configure_tmux_lock_keybinding (Matthew Burket
<mburket@redhat.com>)
 - Add configure_tmux_lock_keybinding back to RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Align networkmanager_dns_mode to the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - configure correct package name for service_sssd_enabled rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - CMP-2471: Disable rules on s390x (Vincent Shen <wenshen@redhat.com>)
 - Enforce explicit setting in password-auth (Jan Černý <jcerny@redhat.com>)
 - Enforce explicit setting in system-auth (Jan Černý <jcerny@redhat.com>)
 - Update links for Ansible role (Marcus Burghardt <maburgha@redhat.com>)
 - Chnage metric to count of profile insted count of rules (Jan Rodak
<hony.com@seznam.cz>)
 - update profile stability test (Vojtech Polasek <vpolasek@redhat.com>)
 - use the new variable in RHEL 9 STIG profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new xccdf variable to sshd_approved_ciphers relevant to RHEL 9 STIG
(Vojtech Polasek <vpolasek@redhat.com>)
 - OCPBUGS-13589: Remove sysctl file check rule from STIG profile (Lance
Bragstad <lbragsta@redhat.com>)
 - Move to use main branch and 1.4.0 for building on Windows (Matthew Burket
<mburket@redhat.com>)
 - Add documentation (Jan Rodak <hony.com@seznam.cz>)
 - Implement product filter (Jan Rodak <hony.com@seznam.cz>)
 - Add parameter products to most used components sub command (Jan Rodak
<hony.com@seznam.cz>)
 - Add parameter products to most used rules sub command (Jan Rodak
<hony.com@seznam.cz>)
 - Use defaultdict for results (Jan Rodak <hony.com@seznam.cz>)
 - Reduce duplication of output generation code (Jan Rodak <hony.com@seznam.cz>)
 - Process products that support components (Jan Rodak <hony.com@seznam.cz>)
 - trivial: Update link to audit profile documentation link (Lance Bragstad
<lbragsta@redhat.com>)
 - CMP-2375: Implement a new rule for checking audit logging is enabled (Lance
Bragstad <lbragsta@redhat.com>)
 - Add documentation (Jan Rodak <hony.com@seznam.cz>)
 - Revert "Fix grep for fedora and sle15" (Ross Murphy <RossMurphy@ibm.com>)
 - Implement most used components command (Jan Rodak <hony.com@seznam.cz>)
 - Rename sort function (Jan Rodak <hony.com@seznam.cz>)
 - Create command line entry point (Jan Rodak <hony.com@seznam.cz>)
 - Disallow spaces in SSSD certificate_verification option (Jan Černý
<jcerny@redhat.com>)
 - Fix grep for fedora and sle15 (Ross Murphy <RossMurphy@ibm.com>)
 - Stabilize resolved profiles (Jan Černý <jcerny@redhat.com>)
 - Fix handling of grub.d configs in grub2_bootloader_argument (Miha Purg
<miha.purg@canonical.com>)
 - CMP-2453: Update Requirement 1.5 (Lance Bragstad <lbragsta@redhat.com>)
 - CMP-2453: Update Requirement 1.4 (Lance Bragstad <lbragsta@redhat.com>)
 - Add aide_build_database to the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add aide_build_database to RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - CMP-2453: Update Requirement 1.3 (Lance Bragstad <lbragsta@redhat.com>)
 - CMP-2453: Update Requirement 1.2 (Lance Bragstad <lbragsta@redhat.com>)
 - CMP-2453: Mark Requirement 1.1 as not applicable (Lance Bragstad
<lbragsta@redhat.com>)
 - Add rule audit_rules_networkconfig_modification_network_scripts (Jan Černý
<jcerny@redhat.com>)
 - Add new template audit_rules_watch (Jan Černý <jcerny@redhat.com>)
 - Update references for stig_gui profile stability tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Unselect sysctl_user_max_user_namespaces for stig_gui (Marcus Burghardt
<maburgha@redhat.com>)
 - add warning to service_sssd_enabled (Vojtech Polasek <vpolasek@redhat.com>)
 - fix assignment to components (Vojtech Polasek <vpolasek@redhat.com>)
 - consider nss-pam-ldapd in requirement r67 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add platform to ldap_client_tls_cacertpath (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rhel9 cces to newly added rules (Vojtech Polasek <vpolasek@redhat.com>)
 - change the OVAL for sssd-ldap platform (Vojtech Polasek
<vpolasek@redhat.com>)
 - extend notes and add rules for ANSSI R67 requirement related to RHEL systems
(Vojtech Polasek <vpolasek@redhat.com>)
 - Update 01-general.jinja (CoreyCook8
<129206271+CoreyCook8@users.noreply.github.com>)
 - Delete
linux_os/guide/system/permissions/mounting/service_autofs_disabled/kubernetes
directory (CoreyCook8 <129206271+CoreyCook8@users.noreply.github.com>)
 - Delete linux_os/guide/system/accounts/accounts-physical/service_debug-
shell_disabled/kubernetes directory (CoreyCook8
<129206271+CoreyCook8@users.noreply.github.com>)
 - Add configure_bind_crypto_policy to bind component (Matthew Burket
<mburket@redhat.com>)
 - Update profile stability for RHEL-09-653050 (Matthew Burket
<mburket@redhat.com>)
 - Add bind page applicability to configure_bind_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Add bind package applicability (Matthew Burket <mburket@redhat.com>)
 - tests/fmf-plans: Match end of string in test selection (Milan Lysonek
<mlysonek@redhat.com>)
 - Move common discover and execute plan parts to main.fmf plan (Milan Lysonek
<mlysonek@redhat.com>)
 - Add base fmf test plan with configurations (Milan Lysonek
<mlysonek@redhat.com>)
 - Run Contest test instead of Fedora project beakerlib tests (Milan Lysonek
<mlysonek@redhat.com>)
 - Adjust action for auditd_data_retention_admin_space_left_action on RHEL 9
(Matthew Burket <mburket@redhat.com>)
 - Addes some new tests (rchikov <rumen.chikov@suse.com>)
 - Align securetty_root_login_console_only remediations with OVAL/rule
description (Milan Lysonek <mlysonek@redhat.com>)
 - Fix OVAL check and remediations to work also with the deny=NUMBER setting
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - ubuntu2204: cis_level1_workstation: Add missing !package_cups_removed
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Remove cnss from product stability (Matthew Burket <mburket@redhat.com>)
 - Remove CNSS reference from SSG_REF_URIS (Matthew Burket <mburket@redhat.com>)
 - Fix AIDE PATH Product Stability of OpenSUSE (Matthew Burket
<mburket@redhat.com>)
 - Generate formatted derivates (Jan Rodak <hony.com@seznam.cz>)
 - Add CPE OVAL for new CPE platforms (Jan Rodak <hony.com@seznam.cz>)
 - Create functions to insert new CPE OVAL definitions (Jan Rodak
<hony.com@seznam.cz>)
 - Create getter for linked CPE OVAL (Jan Rodak <hony.com@seznam.cz>)
 - Use namesapces from constants (Jan Rodak <hony.com@seznam.cz>)
 - Turn off the reference element in CPE OVAL (Jan Rodak <hony.com@seznam.cz>)
 - Reduce duplication (Jan Rodak <hony.com@seznam.cz>)
 - Fix CPE OVAL references (Jan Rodak <hony.com@seznam.cz>)
 - Add CPE dict and CPE OVAL to final thin DS (Jan Rodak <hony.com@seznam.cz>)
 - Add generation of CPE dict and CPE OVAL for thin DS (Jan Rodak
<hony.com@seznam.cz>)
 - Fix bug when parameter is not present (Jan Rodak <hony.com@seznam.cz>)
 - Add filtration of CPE to  generation of CPE dict XML (Jan Rodak
<hony.com@seznam.cz>)
 - Add filtration of OVAL document (Jan Rodak <hony.com@seznam.cz>)
 - Get used IDs of CPE OVAL definitions (Jan Rodak <hony.com@seznam.cz>)
 - Disable generation of not used cpe platform (Jan Rodak <hony.com@seznam.cz>)
 - Get used and not used cpe platforms (Jan Rodak <hony.com@seznam.cz>)
 - use grep in if statement for crypto policy remediations (Ross Murphy
<RossMurphy@ibm.com>)
 - use grep in if statement for crypto policy remediations (Ross Murphy
<RossMurphy@ibm.com>)
 - Update shared.xml (Rumen <77793453+rumch-se@users.noreply.github.com>)
 - Fix of bugs from tests (rchikov <rumen.chikov@suse.com>)
 - Bugs fixes (rchikov <rumen.chikov@suse.com>)
 - trivial: fix linting issue (Lance Bragstad <lbragsta@redhat.com>)
 - Bump docker/login-action from 3.0.0 to 3.1.0 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - all_apparmor_profiles_in_enforce_complain_mode: tests: Make tests work
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_in_enforce_complain_mode: Fix OVAL logic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Correction in oval part ensure_gpgcheck_globally_activated (rchikov
<rumen.chikov@suse.com>)
 - Bump peter-evans/create-pull-request from 6.0.1 to 6.0.2 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Bump softprops/action-gh-release from 2.0.3 to 2.0.4 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Fix SCE finding XPath to allow nesting with OCILs (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Modified definition of path to aide in opensuse (rchikov
<rumen.chikov@suse.com>)
 - Fix Ansible systemd module name (Jan Černý <jcerny@redhat.com>)
 - Update notes in ANSSI R3 (Jan Černý <jcerny@redhat.com>)
 - Make Blueprint for service_disabled template to mask services (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - mention the relevant log file in the message (Vojtech Polasek
<vpolasek@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - Apply suggestions from code review (Jan Černý <jcerny@redhat.com>)
 - pam_options ansible template dry-run fix (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - accounts_passwords_pam_tally2_deny_root fix (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Bump softprops/action-gh-release from 2.0.2 to 2.0.3 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Update RHEL 9 SCAP references to V1R1 (Matthew Burket <mburket@redhat.com>)
 - Fix bash remediation for sysctl template (Miha Purg
<miha.purg@canonical.com>)
 - extend automatus error message (Vojtech Polasek <vpolasek@redhat.com>)
 - update requirement R69 in ANSSI control file (Vojtech Polasek
<vpolasek@redhat.com>)
 - add test scenarios to rule no_hesiod_in_nsswitch (Vojtech Polasek
<vpolasek@redhat.com>)
 - add oval to rule no_hesiod_in_nsswitch (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new rule no_hesiod_in_nsswitch (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests for rule no_nis_in_nsswitch (Vojtech Polasek <vpolasek@redhat.com>)
 - add oval check for no_nis_in_nsswitch (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule no_nis_in_nsswitch (Vojtech Polasek <vpolasek@redhat.com>)
 - Add ocil prefix to the macro name (Jan Černý <jcerny@redhat.com>)
 - Correction in SLE15 stig profile file (rchikov <rumen.chikov@suse.com>)
 - Bump softprops/action-gh-release from 0.1.15 to 2.0.2 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - add the components test to quick tests (Vojtech Polasek
<vpolasek@redhat.com>)
 - gen_rendered_policiy_index.py: read compiled control files, not the original
ones (Vojtech Polasek <vpolasek@redhat.com>)
 - store the "policy" key in complied control files (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix deperation warning in ssg/build_derivatives.py (Matthew Burket
<mburket@redhat.com>)
 - Corrections in aide_periodic_cron_checking and aide_scan_notification - SUSE
products (rchikov <rumen.chikov@suse.com>)
 - Update bootlaoder STIG content (Matthew Burket <mburket@redhat.com>)
 - Update sysctl_user_max_user_namespaces (Matthew Burket <mburket@redhat.com>)
 - Update SELinux Section STIG Content (Matthew Burket <mburket@redhat.com>)
 - Update Logging Section STIG Content (Matthew Burket <mburket@redhat.com>)
 - Update Network Section STIG Content (Matthew Burket <mburket@redhat.com>)
 - Update permissions group STIG content (Matthew Burket <mburket@redhat.com>)
 - Update Audit STIG Content (Matthew Burket <mburket@redhat.com>)
 - Update product stability data: remaining products (Watson Sato
<wsato@redhat.com>)
 - Update product_stability data: ocp4 and rhcos4 (Watson Sato
<wsato@redhat.com>)
 - Add container-platform SRG URI (Watson Sato <wsato@redhat.com>)
 - OCP4 and RHCOS4 have their own STIGID URI (Watson Sato <wsato@redhat.com>)
 - Remove outdated comments (Jan Rodak <hony.com@seznam.cz>)
 - Rename function load_oval to process_cpe_oval (Jan Rodak
<hony.com@seznam.cz>)
 - Pass to functions specific arguments instead args (Jan Rodak
<hony.com@seznam.cz>)
 - Remove identifier prefix argument (Jan Rodak <hony.com@seznam.cz>)
 - Rename shorthandfile to xccdfFile (Jan Rodak <hony.com@seznam.cz>)
 - Use base name of file (Jan Rodak <hony.com@seznam.cz>)
 - Use format string (Jan Rodak <hony.com@seznam.cz>)
 - Remove unused ID checks and translations (Jan Rodak <hony.com@seznam.cz>)
 - Translation of IDs to valid OVAL IDs (Jan Rodak <hony.com@seznam.cz>)
 - Decompose CPE OVAL and CPE dictionary generation (Jan Rodak
<hony.com@seznam.cz>)
 - Use OVAL object model to generate linked CPE OVAL (Jan Rodak
<hony.com@seznam.cz>)
 - Format argument parsing (Jan Rodak <hony.com@seznam.cz>)
 - Stop requiring the directory (Jan Černý <jcerny@redhat.com>)
 - Add docs for the systemd_mount_enabled template (Jan Černý
<jcerny@redhat.com>)
 - Create new rule systemd_tmp_mount_enabled (Jan Černý <jcerny@redhat.com>)
 - Add SLE cce-ids to newly added mcaffee rules (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update profile stability for pci-dss (Matthew Burket <mburket@redhat.com>)
 - Add package_firewalld_installed to PCI-DSS profile (Matthew Burket
<mburket@redhat.com>)
 - OCPBUGS-28797: Clarify banner instructions for RHCOS nodes (Lance Bragstad
<lbragsta@redhat.com>)
 - Update Services STIG Content (Matthew Burket <mburket@redhat.com>)
 - Update Software STIG Content (Matthew Burket <mburket@redhat.com>)
 - Update Accounts STIG Content (Matthew Burket <mburket@redhat.com>)
 - Defined notes and rules for control BSI APP4.4.A1 (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - add manual rule to check application to namespace assignment (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - Defined notes and rules for control BSI APP4.4.A3 (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - Defined notes and rules for control BSI APP4.4.A2 (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - Small changes in the ansible part of the template service_disabled (rchikov
<rumen.chikov@suse.com>)
 - Create new template systemd_mount_enabled (Jan Černý <jcerny@redhat.com>)
 - Updates in ansible part from service_dsabled template (rchikov
<rumen.chikov@suse.com>)
 - Be more strict on the captured exception (Watson Sato <wsato@redhat.com>)
 - CNTR-OS-000820 status is manual (Watson Sato <wsato@redhat.com>)
 - CNTR-OS-000770 status is manual (Watson Sato <wsato@redhat.com>)
 - CNTR-OS-000690 is still pending (Watson Sato <wsato@redhat.com>)
 - CNTR-OS-000500 status is manual (Watson Sato <wsato@redhat.com>)
 - CNTR-OS-000440 status is automated (Watson Sato <wsato@redhat.com>)
 - CNTR-OS-00430 and CNTR-OS-00460 are not applicable (Watson Sato
<wsato@redhat.com>)
 - CNTR-OS-000390 status is manual (Watson Sato <wsato@redhat.com>)
 - CNTR-OS-000380 status is manual (Watson Sato <wsato@redhat.com>)
 - OCP4 STIG: Add spacing between the controls (Watson Sato <wsato@redhat.com>)
 - Move SRG rules from control to the ocp4 profile (Watson Sato
<wsato@redhat.com>)
 - Do not use raise from (Watson Sato <wsato@redhat.com>)
 - Refactor functions too complex for code climate (Watson Sato
<wsato@redhat.com>)
 - Manually add rules to keep rule selection stable (Watson Sato
<wsato@redhat.com>) (#PP-000516)
 - Avoid adding duplicate rules to a control (Watson Sato <wsato@redhat.com>)
 - Identify and avoid duplicate references (Watson Sato <wsato@redhat.com>)
 - Switch to the stig_ocp4 control file (Watson Sato <wsato@redhat.com>)
 - Add a second product in the STIG OCP4 (Watson Sato <wsato@redhat.com>)
 - Add generated stig control file for OCP4 (Watson Sato <wsato@redhat.com>)
 - Leverage reference assingment from control file (Watson Sato
<wsato@redhat.com>)
 - Grab the STIG version from the Benchmark (Watson Sato <wsato@redhat.com>)
 - Parse an SRG control file for matching rules (Watson Sato <wsato@redhat.com>)
 - Move creation of env_yaml to main func (Watson Sato <wsato@redhat.com>)
 - SRG-APP-000516-CTR-001325 is not applicable (Watson Sato <wsato@redhat.com>) (#PP-000516)
 - Add refence file for OCP4 STIG V1R1 (Watson Sato <wsato@redhat.com>)
 - Simplify output of ip link show command (Marcus Burghardt
<maburgha@redhat.com>)
 - Update SLES Stig IDs (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Enable ansible remediation in SLE for dconf_gnome_session_idle_user_locks
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix tests packages header (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - fix rule not applicable for rules checking login-defs (Stephen L Arnold
<sarnold@vctlabs.com>)
 - swap bash umask rules from default to align with minimal image installs
(Steve Arnold <sarnold@vctlabs.com>)
 - openembedded profile cleanup, add expanded profile (Steve Arnold
<sarnold@vctlabs.com>)
 - CMP-2417: Add new profiles for OpenShift PCI-DSS version 4.0.0 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for appendix (Lance Bragstad
<lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 12 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 11 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 10 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 9 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 8 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 7 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 6 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 5 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 4 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 3 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 2 (Lance
Bragstad <lbragsta@redhat.com>)
 - CMP-2417: Implement OpenShift PCI-DSS v4 outline for section 1 (Lance
Bragstad <lbragsta@redhat.com>)
 - Remove Kubernetes remediation for service_debug-shell_disabled (Vincent Shen
<wenshen@redhat.com>)
 - OCPBUGS-28242: Fix remediation for service_debug-shell_disabled (Vincent Shen
<wenshen@redhat.com>)
 - CMP-2247: Add a new profile for CIS OpenShift 1.5.0 (Lance Bragstad
<lbragsta@redhat.com>)
 - change status of ANSSI R29 to automated (Vojtech Polasek
<vpolasek@redhat.com>)
 - update R36 in ANSSI (Vojtech Polasek <vpolasek@redhat.com>)
 - update description of the "automated" status for control files (Vojtech
Polasek <vpolasek@redhat.com>)
 - Changes in template service_disabled - ansible part (rchikov
<rumen.chikov@suse.com>)
 - Update github workflows PR runs (Vincent Shen <wenshen@redhat.com>)
 - k8s content image: Comment the commit used (Watson Sato <wsato@redhat.com>)
 - Apply suggestions from code review (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - k8s content images: Don't tag PR images as latest (Watson Sato
<wsato@redhat.com>)
 - Refactor CMake macros (Jan Černý <jcerny@redhat.com>)
 - Do not reformat XCCDF if not needed (Jan Černý <jcerny@redhat.com>)
 - Improve XCCDF output format (Jan Černý <jcerny@redhat.com>)
 - Update controls/anssi.yml (vojtapolasek <krecoun@gmail.com>)
 - Update ANSSI requirement R29 (Marcus Burghardt <maburgha@redhat.com>)
 - Include RHEL9 CCE for file_permissions_systemmap (Marcus Burghardt
<maburgha@redhat.com>)
 - New templated rule file_groupowner_systemmap (Marcus Burghardt
<maburgha@redhat.com>)
 - New templated rule file_owner_systemmap (Marcus Burghardt
<maburgha@redhat.com>)
 - Ensure proper test scenarios for templated rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove local OVAL in favor of template (Marcus Burghardt
<maburgha@redhat.com>)
 - Update file_permissions_systemmap rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Do not reformat OCIL if not needed (Jan Černý <jcerny@redhat.com>)
 - Use indent for OCIL if possible (Jan Černý <jcerny@redhat.com>)
 - update notes of the R36 requirement for ANSSI (Vojtech Polasek
<vpolasek@redhat.com>)
 - Do not reformat if not needed (Jan Černý <jcerny@redhat.com>)
 - Indent using 2 spaces (Jan Černý <jcerny@redhat.com>)
 - Stop pretty formatting unlinked OVALs (Jan Černý <jcerny@redhat.com>)
 - profile_tool.py: Fix traceback in sub command (Watson Sato
<wsato@redhat.com>)
 - Revert "Add scripts to Update SRG" (Matthew Burket <mburket@redhat.com>)
 - Add scripts to Update SRG (Matthew Burket <mburket@redhat.com>)
 - Update SRG GPOS Control to v2r7 (Matthew Burket <mburket@redhat.com>)
 - Fix python2 support (Jan Rodak <hony.com@seznam.cz>)
 - Update docuentation (Jan Rodak <hony.com@seznam.cz>)
 - Add processing of controlfiles (Jan Rodak <hony.com@seznam.cz>)
 - Fix invalid number usage in oauth variable (Lance Bragstad
<lbragsta@redhat.com>)
 - Add profile collected from controll files (Jan Rodak <hony.com@seznam.cz>)
 - Unselect R29 rules not applicable for RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update ANSSI R29 (Marcus Burghardt <maburgha@redhat.com>)
 - Change command line arguments (Jan Rodak <hony.com@seznam.cz>)
 - Add test (Jan Rodak <hony.com@seznam.cz>)
 - Add documentation for a new script capability (Jan Rodak
<hony.com@seznam.cz>)
 - Add calculation of most used rules (Jan Rodak <hony.com@seznam.cz>)
 - Add getter of profiles stats (Jan Rodak <hony.com@seznam.cz>)
 - Add subcommand with arguments (Jan Rodak <hony.com@seznam.cz>)
 - Update ANSSI R36 requirement (Marcus Burghardt <maburgha@redhat.com>)
 - Bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - extend the explanation why ANSSI R52 requirement is manual (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add Base STIG Profile for RHEL 10 (Matthew Burket <mburket@redhat.com>)
 - Add RHEL10 to CI (Matthew Burket <mburket@redhat.com>)
 - Human sort the sections in fix_rules (Matthew Burket <mburket@redhat.com>)
 - Update DISA Import Based on Reviewer Commnets (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 10 Product (Matthew Burket <mburket@redhat.com>)
 - Add RHEL 9 to Ansible Gating (Matthew Burket <mburket@redhat.com>)
 - Fix search not included components (Jan Rodak <hony.com@seznam.cz>)
 - Add env_yaml to xccdf as xml (Jan Rodak <hony.com@seznam.cz>)
 - Add filtering of groups and rules to build of XCCDF benchamrk (Jan Rodak
<hony.com@seznam.cz>)
 - Rework Group xml generation (Jan Rodak <hony.com@seznam.cz>)
 - Change abroach for generation of thin ds (Jan Rodak <hony.com@seznam.cz>)
 - Rework build of benchmark xml (Jan Rodak <hony.com@seznam.cz>)
 - Batch generation of OVAL (Jan Rodak <hony.com@seznam.cz>)
 - Add platform machine to systctl.d rules (Matthew Burket <mburket@redhat.com>)
 - Unify variable selection in CIS controls (Jan Černý <jcerny@redhat.com>)
 - Extend the stable-profiles test (Jan Černý <jcerny@redhat.com>)
 - add manual rules to APP.4.4.A4 (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - add referencing method (sluetze <13255307+sluetze@users.noreply.github.com>)
 - add referencing method (sluetze <13255307+sluetze@users.noreply.github.com>)
 - add references for bsi.app.4.4.a4+a3 (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - fix bsi rhcos4 versioning and control usage (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - added versioned profiles (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - kick off sys 1.6. profile (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - OCP4: use utf-8 as default xml encoding (Vincent Shen <wenshen@redhat.com>)
 - Add docs for ./utils/import_disa_stig.py (Matthew Burket
<mburket@redhat.com>)
 - Move srg_utils to a module so the openpyxl is only included as needed
(Matthew Burket <mburket@redhat.com>)
 - Change permissions of /etc/ipsec.d (Jan Černý <jcerny@redhat.com>)
 - Fix grub2_bootloader_argument to check /etc/default/grub.d on Ubuntu (Miha
Purg <miha.purg@canonical.com>)
 - Fix ubuntu tests in template grub2_bootloader_argument (Miha Purg
<miha.purg@canonical.com>)
 - Add new reference stats to HTML stats (Jan Černý <jcerny@redhat.com>)
 - Fix CI issues with utils/srg_utils.py (Matthew Burket <mburket@redhat.com>)
 - Fix nologin_ignored tests for rules using
create_local_interactive_users_object (Miha Purg <miha.purg@canonical.com>)
 - Remove intermediary dictionary (Jan Černý <jcerny@redhat.com>)
 - Reduce count of ctor parameters (Jan Černý <jcerny@redhat.com>)
 - Remove superfluous variable (Jan Černý <jcerny@redhat.com>)
 - Fix PEP 8 problems (Jan Černý <jcerny@redhat.com>)
 - Clean up utils/srg_utils.py (Matthew Burket <mburket@redhat.com>)
 - Add tests for utils/import_disa_stig.py (Matthew Burket <mburket@redhat.com>)
 - Add script to import DISA STIG XML to PSC (Matthew Burket
<mburket@redhat.com>)
 - Factor out common methods in utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - Add get_all_controls_dict to policy (Matthew Burket <mburket@redhat.com>)
 - OCP4: add api_server_api_priority_v1_flowschema_catch_all (Vincent Shen
<wenshen@redhat.com>)
 - Use correct directory permissions (Jan Černý <jcerny@redhat.com>)
 - Refactor: Extract function get_cis_uri (Jan Černý <jcerny@redhat.com>)
 - Fix TypeError in get_implemented_stigs (svet-se <svetlin.boychev@suse.com>)
 - Check PCI-DSS references in RHEL7 (Jan Černý <jcerny@redhat.com>)
 - Check PCI-DSS references in RHEL8 (Jan Černý <jcerny@redhat.com>)
 - Extend test missing-references-ssg-rhel9-ds.xml (Jan Černý
<jcerny@redhat.com>)
 - Add ability to check "stigid" references in rules (Jan Černý
<jcerny@redhat.com>)
 - Unify options naming (Jan Černý <jcerny@redhat.com>)
 - Remove unused variable (Jan Černý <jcerny@redhat.com>)
 - Reconcile stig_ns variable (Jan Černý <jcerny@redhat.com>)
 - Remove dead code (Jan Černý <jcerny@redhat.com>)
 - Remove disa-stigs-uri from XSLT (Jan Černý <jcerny@redhat.com>)
 - Disable build of OCIL for thin DS (Jan Rodak <hony.com@seznam.cz>)
 - Fix getting relevant benchmarks for a product (Jan Rodak
<hony.com@seznam.cz>)
 - Add XML declaration (Jan Rodak <hony.com@seznam.cz>)
 - Deal with empty OVAL and OCIL components (Jan Rodak <hony.com@seznam.cz>)
 - Add compose of multiple ds (Jan Rodak <hony.com@seznam.cz>)
 - Enable component generation per profile (Jan Rodak <hony.com@seznam.cz>)
 - Generates components per profile (Jan Rodak <hony.com@seznam.cz>)
 - Prepare for generation benchmark per profile (Jan Rodak <hony.com@seznam.cz>)
 - Add test to verify missing PCIDSS references (Jan Černý
<jcerny@redhat.com>)
 - Add test to verify missing CCN references (Jan Černý <jcerny@redhat.com>)
 - Format long lines (Jan Rodak <hony.com@seznam.cz>)
 - Create profile per rule (Jan Rodak <hony.com@seznam.cz>)
 - Add entrypoints to the build_product script (Jan Rodak <hony.com@seznam.cz>)
 - Rework build_xccdf.py (Jan Rodak <hony.com@seznam.cz>)
 - Test missing references in RHEL 9 (Jan Černý <jcerny@redhat.com>)
 - Account for non-existent 'build' dir in build_product (Jiri Jaburek
<comps@nomail.dom>)
 - Adding ocp4.14 ocp4.15 to applicable ocp rules (Vincent Shen
<wenshen@redhat.com>)
 - OCP4: Fix OCP version regex (Vincent Shen <wenshen@redhat.com>)
 - Remove token from thollander's action parameters (Watson Sato
<wsato@redhat.com>)
 - Remove used CCEs from pool (Jan Černý <jcerny@redhat.com>)
 - Use correct permissions in /etc/sysctl.d (Jan Černý <jcerny@redhat.com>)
 - Improve ANSSI references (Jan Černý <jcerny@redhat.com>)
 - Flush automatus test logs before outputting results (Jiri Jaburek
<comps@nomail.dom>)
 - Rename run command var name assignemnt (Watson Sato <wsato@redhat.com>)
 - Fix step id and output reference (Watson Sato <wsato@redhat.com>)
 - Use variable for remediation of rule (Watson Sato <wsato@redhat.com>)
 - Use correct permissions for /etc/sudoers.d (Jan Černý <jcerny@redhat.com>)
 - Fix rule for accounts_authorized_local_users in SLE15 (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/apparmor/all_apparmor_profiles_in_enforce_compla
in_mode/tests/correct_all_apparmor_profiles_in_complain.pass.sh (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Disable remediation for accounts_umask_interactive_users on Ubuntu (Miha Purg
<miha.purg@canonical.com>)
 - Update DISA STIG manual for SLE12 V2R13 (svet-se <svetlin.boychev@suse.com>)
 - Update SLE12 STIG version (svet-se <svetlin.boychev@suse.com>)
 - Update DISA STIG manual for SLE15 V1R12 (svet-se <svetlin.boychev@suse.com>)
 - Update SLE15 STIG version (svet-se <svetlin.boychev@suse.com>)
 - Add missing CCEs (Jan Černý <jcerny@redhat.com>)
 - Assign rules to components (Jan Černý <jcerny@redhat.com>)
 - Clarify files and directories (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_permissions_etc_iptables (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_owner_etc_iptables (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_groupowner_etc_iptables (Jan Černý
<jcerny@redhat.com>)
 - Create rule file_permissions_etc_sudoers (Jan Černý <jcerny@redhat.com>)
 - Create rule file_owner_etc_sudoers (Jan Černý <jcerny@redhat.com>)
 - Create rule file_groupowner_etc_sudoers (Jan Černý <jcerny@redhat.com>)
 - Create rule file_permissions_etc_ipsec_secrets (Jan Černý
<jcerny@redhat.com>)
 - Create rule file_owner_etc_ipsec_secrets (Jan Černý <jcerny@redhat.com>)
 - Create rule file_groupowner_etc_ipsec_secrets (Jan Černý
<jcerny@redhat.com>)
 - Create rule file_permissions_etc_ipsec_conf (Jan Černý <jcerny@redhat.com>)
 - Create rule file_owner_etc_ipsec_conf (Jan Černý <jcerny@redhat.com>)
 - Create rule file_groupowner_etc_ipsec_conf (Jan Černý <jcerny@redhat.com>)
 - Create rule file_permissions_etc_chrony_keys (Jan Černý
<jcerny@redhat.com>)
 - Create rule file_owner_etc_chrony_keys (Jan Černý <jcerny@redhat.com>)
 - Create rule file_groupowner_etc_chrony_keys (Jan Černý <jcerny@redhat.com>)
 - Create rule file_permissions_etc_crypttab (Jan Černý <jcerny@redhat.com>)
 - Create rule file_owner_etc_crypttab (Jan Černý <jcerny@redhat.com>)
 - Create rule file_groupowner_etc_crypttab (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_permissions_etc_sudoersd (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_owner_etc_sudoersd (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_groupowner_etc_sudoersd (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_permissions_etc_sysctld (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_owner_etc_sysctld (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_groupowner_etc_sysctld (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_permissions_etc_nftables (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_owner_etc_nftables (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_groupowner_etc_nftables (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_permissions_etc_ipsecd (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_owner_etc_ipsecd (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_groupowner_etc_ipsecd (Jan Černý <jcerny@redhat.com>)
 - Create rule file_permissions_etc_sestatus_conf (Jan Černý
<jcerny@redhat.com>)
 - Create rule file_groupowner_etc_sestatus_conf (Jan Černý
<jcerny@redhat.com>)
 - Create rule file_owner_etc_sestatus_conf (Jan Černý <jcerny@redhat.com>)
 - Create rule directory_permissions_etc_selinux (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_groupowner_etc_selinux (Jan Černý
<jcerny@redhat.com>)
 - Create rule directory_owner_etc_selinux (Jan Černý <jcerny@redhat.com>)
 - Add missing rules to ANSSI R50 (Jan Černý <jcerny@redhat.com>)
 - Add RHEL 9 CCEs (Jan Černý <jcerny@redhat.com>)
 - Add new rule file_permissions_sudo (Matthew Burket <mburket@redhat.com>)
 - Fix reviewer comments in #11590 (Matthew Burket <mburket@redhat.com>)
 - Hide profiles not in good shape for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove references test (Jan Černý <jcerny@redhat.com>)
 - Remove empty references keys from rules (Jan Černý <jcerny@redhat.com>)
 - Use controls to generate RHEL 9 STIG references (Jan Černý
<jcerny@redhat.com>)
 - Use control file to generate PCI DSS 4 references (Jan Černý
<jcerny@redhat.com>)
 - Use controls to generate CCN references (Jan Černý <jcerny@redhat.com>)
 - Add stigrefs after references from controls (Jan Černý <jcerny@redhat.com>)
 - Code climate fix for tests/cces-removed.py (Matthew Burket
<mburket@redhat.com>)
 - Add new test cces-removed.py (Matthew Burket <mburket@redhat.com>)
 - Fix OVAL macro create_local_interactive_users_object (Miha Purg
<miha.purg@canonical.com>)
 - Extend kernel_config_default_mmap_min_addr to aarch64 (Jan Černý
<jcerny@redhat.com>)
 - Fix title (Jan Černý <jcerny@redhat.com>)
 - Add platform to kernel_config_unmap_kernel_at_el0 (Jan Černý
<jcerny@redhat.com>)
 - Add platform to kernel_config_modify_ldt_syscall (Jan Černý
<jcerny@redhat.com>)
 - Add platform to kernel_config_ia32_emulation (Jan Černý
<jcerny@redhat.com>)
 - Add platform to kernel_config_page_table_isolation (Jan Černý
<jcerny@redhat.com>)
 - Add platform to kernel_config_randomize_memory (Jan Černý
<jcerny@redhat.com>)
 - Specify platform of kernel_config_default_mmap_min_addr (Jan Černý
<jcerny@redhat.com>)
 - Add a new platform x86_64_arch (Jan Černý <jcerny@redhat.com>)
 - Upsert image comment instead of creating new one (Watson Sato
<wsato@redhat.com>)
 - Fix empty pull reference number (Watson Sato <wsato@redhat.com>)
 - build_ds_container.py: Enable container image push (Watson Sato
<wsato@redhat.com>)
 - Update sudo_dedicated_group (Matthew Burket <mburket@redhat.com>)
 - Fix description for auditd_max_log_file_action (Miha Purg
<miha.purg@canonical.com>)
 - OCP: Fix e2e remediation for container_security_operator_exists (Vincent Shen
<wenshen@redhat.com>)
 - OCPBUGS-18331: Include sshd config directories in remediation template (Lance
Bragstad <lbragsta@redhat.com>)
 - Update utils/ansible_playbook_to_role.py (Matthew Burket <m@tthewburket.com>)
 - Update STIG references for profile stability tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Map SRG to chronyd_specify_remote_server (Marcus Burghardt
<maburgha@redhat.com>)
 - Include chronyd_specify_remote_server in STIG profiles (Marcus Burghardt
<maburgha@redhat.com>)
 - Include option for stig in var_multiple_time_servers (Marcus Burghardt
<maburgha@redhat.com>)
 - HIPAA profile for SLE 15 - update (rchikov <rumen.chikov@suse.com>)
 - Improve Milestone description when created (Marcus Burghardt
<maburgha@redhat.com>)
 - Include simple function to get github username (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the release cadence function (Marcus Burghardt <maburgha@redhat.com>)
 - Document API Token scopes for release_helper (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix regex in sssd_offline_cred_expiration (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix spacing in ANSSI Control File (Matthew Burket <mburket@redhat.com>)
 - Update ANSSI R68 (Matthew Burket <mburket@redhat.com>)
 - Add 11 rounds to var_password_pam_unix_rounds (Matthew Burket
<mburket@redhat.com>)
 - Format outputing XCCDF xml (Jan Rodak <hony.com@seznam.cz>)
 - Reduce OCIL XML according to selected rules (Jan Rodak <hony.com@seznam.cz>)
 - Fix rule audit_rules_networkconfig_modification for Ubuntu (Miha Purg
<miha.purg@canonical.com>)
 - Fix ubuntu tests for audit_rules_networkconfig_modification (Miha Purg
<miha.purg@canonical.com>)
 - Fix rule description for audit_rules_networkconfig_modification (Miha Purg
<miha.purg@canonical.com>)
 - Bump docker/setup-qemu-action from 2 to 3 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Bump docker/metadata-action from 4 to 5 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Update ANSSI R71 (Jan Černý <jcerny@redhat.com>)
 - Minor fixes after removal of prodtype (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - sysctl template: allow skipping of runtime checks (Watson Sato
<wsato@redhat.com>)
 - Set status for ANSSI R79 to partial (Matthew Burket <mburket@redhat.com>)
 - Add a note to ANSSI R23 (Jan Černý <jcerny@redhat.com>)
 - Update ANSSI R32 (Jan Černý <jcerny@redhat.com>)
 - Replace bogus 'prodtype' with 'product' in Jinja expressions (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Remove all references to prodtype (Docs) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Remove all references to prodtype (Code and Tests) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Update ANSSI R40 (Matthew Burket <mburket@redhat.com>)
 - Add a new rule accounts_password_set_max_life_root (Jan Černý
<jcerny@redhat.com>)
 - RHEL 9 STIG: replace configure_bashrc_exec_tmux with configure_bashrc_tmux
(Vojtech Polasek <vpolasek@redhat.com>)
 - Revert "Remove 'exec' from configure_bashrc_exec_tmux" (Vojtech Polasek
<vpolasek@redhat.com>)
 - Defined notes and rules for control BSI APP4.4.A10 (Benjamin Ruland
<benjamin.ruland@gmail.com>)
 - Change password minimal lenght (Jan Černý <jcerny@redhat.com>)
 - Update a comment (Jan Černý <jcerny@redhat.com>)
 - Update utils/ansible_playbook_to_role.py (Dan Clark <danielmclark@gmail.com>)
 - Use controls to assign ANSSI references (Jan Černý <jcerny@redhat.com>)
 - Prevent conflicts in references (Jan Černý <jcerny@redhat.com>)
 - Bump docker/setup-buildx-action from 2 to 3 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Remove disabling_ipv6_autoconfig rule (Jan Rodak <hony.com@seznam.cz>)
 - Red Hat product security is on the path of deprecating the OVAL CVE feed
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Remove one-off script remove_references.sh (Jan Černý <jcerny@redhat.com>)
 - Reword and extend documentation (Jan Černý <jcerny@redhat.com>)
 - CMP-2366: Update service_autofs_disabled default e2e result (Lance Bragstad
<lbragsta@redhat.com>)
 - OCP4: Fix pr image workflow (Vincent Shen <wenshen@redhat.com>)
 - CMP-2372: Remove info override for virtual syscall rules (Lance Bragstad
<lbragsta@redhat.com>)
 - CMP-2365: Fix check for rotating kubelet server certificates (Lance Bragstad
<lbragsta@redhat.com>)
 - Update entities/common.py to use CDumper (Matthew Burket
<mburket@redhat.com>)
 - Solve Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Add documentation (Jan Černý <jcerny@redhat.com>)
 - Solve Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Solve Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Solve Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Fix PEP 8 problems (Jan Černý <jcerny@redhat.com>)
 - Remove CIS references from rules (Jan Černý <jcerny@redhat.com>)
 - Add a unit test (Jan Černý <jcerny@redhat.com>)
 - Remove refcheck test for CIS profiles (Jan Černý <jcerny@redhat.com>)
 - Use references from control files (Jan Černý <jcerny@redhat.com>)
 - Add a one-off script to remove references (Jan Černý <jcerny@redhat.com>)
 - Add references from control files to rules (Jan Černý <jcerny@redhat.com>)
 - Extend control file schema to support references (Jan Černý
<jcerny@redhat.com>)
 - Represent references as lists internally (Jan Černý <jcerny@redhat.com>)
 - Make tests apparmor platform dependent (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Make sure pattern matching includes subexpressions (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Updates to support rhel9 role conversion and using main as the primary branch
instead of master (Dan Clark <danclark@redhat.com>)
 - Update oval rule with improved variable declarations and rule naming (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add OVAL check for apparmor profile rules (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add platform dependency for the apparmor profiles rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Enable apparmor package installed rule for SLE15 (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Define apparmor package platform (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix Ansible compatibility with sysctl module (Marcus Burghardt
<maburgha@redhat.com>)
 - remove /dev/shm partition definition from RHEL 7 kickstarts (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove /dev/shm partition definition from RHEL 9 kickstarts (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add tests to OL8 sssd rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update OL8 sssd rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix ubuntu remediation for pam_faildelay (Miha Purg
<miha.purg@canonical.com>)
 - Fix step reference to output and set-output (Watson Sato <wsato@redhat.com>)
 - Update audit_ospp_general_ppc64le (Matthew Burket <mburket@redhat.com>)
 - Update audit_ospp_general_aarch64 (Matthew Burket <mburket@redhat.com>)
 - set indent to 4 (sluetze <13255307+sluetze@users.noreply.github.com>)
 - Remove restrictions in sshd_use_approved_ciphers remediation (Marcus
Burghardt <maburgha@redhat.com>)
 - fix regex in Ansible remediation of configure_ssh_crypto_policy (Vojtech
Polasek <vpolasek@redhat.com>)
 - Parametrize rule oauth token maxage rules (Watson Sato <wsato@redhat.com>)
 - Adjust kube remediation to urlencoding (Watson Sato <wsato@redhat.com>)
 - SRG-APP-000141-CTR-000315: allow hid and hub (Watson Sato <wsato@redhat.com>) (#PP-000141)
 - OCP4 STIG: select rule for audit backlog limit (Watson Sato
<wsato@redhat.com>) (#PP-000092)
 - OCP4 STIG: Enable SRG-APP-000141-CTR-000315 rules (Watson Sato
<wsato@redhat.com>) (#PP-000141)
 - OCP4 STIG: select rule to audit pt_chown binary (Watson Sato
<wsato@redhat.com>)
 - OCP4 STIG: audit for unsuccessful deletion (Watson Sato <wsato@redhat.com>)
 - OCP4 STIG: add rule for accessTokenMaxAgeSeconds (Watson Sato
<wsato@redhat.com>) (#PP-000400)
 - Minor alignment in CIS test scenario for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Bump peter-evans/create-pull-request from 5.0.2 to 6.0.0 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Update audit_ospp_general (Matthew Burket <mburket@redhat.com>)
 - Remove BuildRequire /usr/bin/python3 from spec (Matthew Burket
<mburket@redhat.com>)
 - Fix STIG Version for RHEL 8 (Matthew Burket <mburket@redhat.com>)
 - Update references for profile stability tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Update crypto_policy test scenario for CIS RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Align logind_session_timeout value with RHEL9 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Align logind_session_timeout value with RHEL8 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Make additional check if selinux is actually enabled (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Bump actions/github-script from 6 to 7 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Fix tests on sssd-ldap (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix shellcheck warning on find command (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to sssd-ldap rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update sssd-ldap rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update one existing test scenario to accept /bin/false (Marcus Burghardt
<maburgha@redhat.com>)
 - Default the module line to /bin/false in Kubernetes (Marcus Burghardt
<maburgha@redhat.com>)
 - Default the module line to /bin/false in Bash (Marcus Burghardt
<maburgha@redhat.com>)
 - Add a warning to sshd_limit_user_access (Jan Černý <jcerny@redhat.com>)
 - Update CIS RHEL8 requirements related to crypto (Marcus Burghardt
<maburgha@redhat.com>)
 - Include more specific rules to CIS RHEL9 5.4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include more specific rules to CIS RHEL8 4.4.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 requirement 3.4.4.3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - remove prodtype from add_kubernetes_rule (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - Remove option `--add-product-to-fips-certified` (Jan Černý
<jcerny@redhat.com>)
 - Use `--remove-fips-certified` in CI (Jan Černý <jcerny@redhat.com>)
 - Add option '--remove-fips-certified' (Jan Černý <jcerny@redhat.com>)
 - Improve github workflow for building OCP PR image (Vincent Shen
<wenshen@redhat.com>)
 - Fix OVAL identation in faillock rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update oval in faillock enable rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Set OL8 STIG id in faillock rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests to faillock rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update OL08-00-020025 & OL08-00-020026 assignment (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add automation to faillock rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Bump master version to 0.1.73 (Marcus Burghardt <maburgha@redhat.com>)
 - Alibaba Cloud Linux 3 CIS Benchmark has stopped receiving updates and has
entered the End-of-Life (EOL) maintenance stage. As a result, the Alibaba Cloud
Linux 3 CIS-related profile and its associated references will be removed.
(Yuqing Yang <yyq01323329@alibaba-inc.com>)
 - Alibaba Cloud Linux 2 CIS Benchmark has stopped receiving updates and has
entered the End-of-Life (EOL) maintenance stage. As a result, the Alibaba Cloud
Linux 2 CIS-related profile and its associated references will be removed.
(Yuqing Yang <yyq01323329@alibaba-inc.com>)
 - remove prodtype (steven.y.gui <steven_ygui@163.com>)
 - Remove prodtype from rule schema (Matthew Burket <mburket@redhat.com>)
 - Update CIS profiles descriptions (Jan Černý <jcerny@redhat.com>)
 - Move to /bin/false in wireless_disable_interface (Miha Purg
<miha.purg@canonical.com>)
 - add tests for cis profile and auditd_data_retention_admin_space_left_action
(Vojtech Polasek <vpolasek@redhat.com>)
 - auditd_data_retention_admin_space_left_action - allow multiple config values
(Vojtech Polasek <vpolasek@redhat.com>)
 - update RHEL 8 section 5.2.2.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - update RHEL 7 section 5.2.2.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - update RHEL 8 CIS section 5.2.2.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - switch RHEL 7 CIS control 1.7.1 to automated (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rhel8 prodtype to package_dnsmasq_removed (Vojtech Polasek
<vpolasek@redhat.com>)
 - align RHEL 7 CIS with RHEL 8 CIS WRT logging (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rhel7 prodtype to file_permissions_at_allow (Vojtech Polasek
<vpolasek@redhat.com>)
 - add missing rhel7 prodtype to file_groupowner_at_allow (Vojtech Polasek
<vpolasek@redhat.com>)
 - update RHEL 8 CIS section 1.2.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - update RHEL 7 CIS section 1.7.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - update RHEL 7 section 1.7.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - add rhel7 prodtype to audit_rules_execution_setfacl (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix remediation for smartcard_pam_enabled (Miha Purg
<miha.purg@canonical.com>)
 - Convert prodtype fields into default profiles (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Small CI fixes (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Remove no_new_global_applicable_rules test (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Clean up product properties and shared platforms (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Build CPEs for all products that share the guide directory (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Filter out unused OVAL components from oval_unlinked.xml when composing final
XCCDF document (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Ignore prodtype when building Benchmark and include only rules that are part
of a Profile (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Bump peter-evans/find-comment from 2 to 3 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Bump peter-evans/create-or-update-comment from 3 to 4 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Update RHEL 8 PCI DSS stability (Matthew Burket <mburket@redhat.com>)
 - Fix more review issues on CIS RHEL 8 section 3 (Matthew Burket
<mburket@redhat.com>)
 - Add missing CCE to rules (Matthew Burket <mburket@redhat.com>)
 - Remove CIS@rhel8 reference from set_firewalld_default_zone (Matthew Burket
<mburket@redhat.com>)
 - Update RHEL 8 CIS Section 3 based on reviewer comments (Matthew Burket
<mburket@redhat.com>)
 - Update RHEL 8 CIS 3.1.3 (Matthew Burket <mburket@redhat.com>)
 - Adjust title for 3.4.2.4 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Adjust title for 3.3.10 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Add rules to Ensure host based firewall loopback traffic is configured for
RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update rule file references for RHEL 8 CIS (Matthew Burket
<mburket@redhat.com>)
 - Remove unused section 3 controls for RHEL 8 CIS (Matthew Burket
<mburket@redhat.com>)
 - Update section 3.4.2.5 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.4.2.4 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.4.2.3 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.4.2.2 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.4.2.1 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.4.1.2 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.4.1.1 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.11 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.10 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.9 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.8 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.7 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.6 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.5 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.4 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.3 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.2 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.3.1 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.2.4 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.2.3 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.2.2 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.2.1 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.1.3 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.1.2 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 3.1.1 RHEL 8 CIS (Matthew Burket <mburket@redhat.com>)
 - Fix ubuntu tests for faillock rules (Miha Purg <miha.purg@canonical.com>)
 - Fix pam_faillock remediation macro for ubuntu (Miha Purg
<miha.purg@canonical.com>)
 - Fix position of faillock-preauth module in pam (Miha Purg
<miha.purg@canonical.com>)
 - Update version number for RHEL 9 STIG V1R2 (Matthew Burket
<mburket@redhat.com>)
 - Update DISA files for RHEL 9 STIG V1R2 (Matthew Burket <mburket@redhat.com>)
 - Clean up policy for audit_rules_dac_modification_umount (Matthew Burket
<mburket@redhat.com>)
 - Remove extraneous autrace in aide_files (Matthew Burket <mburket@redhat.com>)
 - Remove 'exec' from configure_bashrc_exec_tmux (Matthew Burket
<mburket@redhat.com>)
 - service_rngd_enabled is only non-FIPS system in RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Ensure that var_sshd_set_keepalive is set to 1 in the RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Update linux_os/guide/services/sssd/sssd-
ldap/sssd_ldap_configure_tls_ca/rule.yml (Matthew Burket <m@tthewburket.com>)
 - Update pci-dss reference for profile stability test (Marcus Burghardt
<maburgha@redhat.com>)
 - Update contributors list for v0.1.72 release (Marcus Burghardt
<maburgha@redhat.com>)
 - Move CIS RHEL8 5.2.3.5 to partial (Marcus Burghardt <maburgha@redhat.com>)
 - Update CIS RHEL8 4.5.3.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Include note in CIS RHEL8 4.4.3.1.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Enable sshd_use_strong_macs for RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable sshd_use_strong_kex for RHEL8 (Marcus Burghardt <maburgha@redhat.com>)
 - Include explicit variable for CIS RHEL8 4.2.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Make CIS RHEL8 4.2.1 partial (Marcus Burghardt <maburgha@redhat.com>)
 - Make CIS RHEL8 4.1.2.1 partial (Marcus Burghardt <maburgha@redhat.com>)
 - remove the task which deletes artifacts from automatus GH workflows (Vojtech
Polasek <vpolasek@redhat.com>)
 - Update SRG GPOS file references to v2r7 (Matthew Burket <mburket@redhat.com>)
 - Add package install to tests for sssd_ldap_configure_tls_reqcert (Matthew
Burket <mburket@redhat.com>)
 - Update pci-dss reference for profile stability test (Marcus Burghardt
<maburgha@redhat.com>)
 - OCPBUGS-20015: Add remediation for RHCOS banners (Lance Bragstad
<lbragsta@redhat.com>)
 - Update SRG GPOS to V2R7 (Matthew Burket <mburket@redhat.com>)
 - Update RHEL 8 STIG version (Matthew Burket <mburket@redhat.com>)
 - Update DISA files for RHEL 8 STIG V1R13 (Matthew Burket <mburket@redhat.com>)
 - Allow sssd_offline_cred_expiration to be configed in drop in dirs (Matthew
Burket <mburket@redhat.com>)
 - Update RHEL 7 STIG version (Matthew Burket <mburket@redhat.com>)
 - Update DISA files for RHEL 7 STIG V3R14 (Matthew Burket <mburket@redhat.com>)
 - Add warning to sssd_ldap_configure_tls_ca (Matthew Burket
<mburket@redhat.com>)
 - Remove sssd_ldap_configure_tls_ca_dir from RHEL 7 STIG (Matthew Burket
<mburket@redhat.com>)
 - Allow sssd_ldap_configure_tls_reqcert to be in drop files as well (Matthew
Burket <mburket@redhat.com>)
 - Allow sssd_ldap_start_tls to be in drop files as well (Matthew Burket
<mburket@redhat.com>)
 - Move to /bin/false for disabling kernel modules (Matthew Burket
<mburket@redhat.com>)
 - Update ol stig references (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Small fixes in references (Marcus Burghardt <maburgha@redhat.com>)
 - Include missing CCE for RHEL8 in aide_use_fips_hashes (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 5.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Enable rules for RHEL8 CIS (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 5.2.4 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 5.2.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 5.2.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 5.12.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.1.3 and 5.1.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 sections 5.1.3 and 5.1.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 5.1.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 5.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 5.1.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Remove CIS RHEL8 references from rules in dropped requirements (Marcus
Burghardt <maburgha@redhat.com>)
 - Reviewed policy changelog about section 4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.5.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.5.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Enable ensure_root_password_configured to rhel8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.5.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.5.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.5.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.5.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.4.3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.4.3.4 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.4.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.4.3.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.4.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.4.3.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.4.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.4.3.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rule related to CIS RHEL8 4.4.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.4.2.1 and 4.4.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.4.1 and 4.4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.1.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 4.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 4.1.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Add /etc/shells rules to CIS control 6.1.9 (Jan Černý <jcerny@redhat.com>)
 - Improve CIS 6.2.11 (Jan Černý <jcerny@redhat.com>)
 - Change RHEL 7 CIS 6.2.11 (Jan Černý <jcerny@redhat.com>)
 - Update control status (Jan Černý <jcerny@redhat.com>)
 - Update control status (Jan Černý <jcerny@redhat.com>)
 - Update control status (Jan Černý <jcerny@redhat.com>)
 - Add dir_perms_world_writable_sticky_bits to 6.1.11 (Jan Černý
<jcerny@redhat.com>)
 - Update control status (Jan Černý <jcerny@redhat.com>)
 - Update control status (Jan Černý <jcerny@redhat.com>)
 - Remove leftover sections (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.11 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.10 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.14 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.13 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.12 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.11 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.10 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.4 and 6.1.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.1 (Jan Černý <jcerny@redhat.com>)
 - Fix regex for pam_wheel.so line with use_uid (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unnecessary space at the beginning (Marcus Burghardt
<maburgha@redhat.com>)
 - Just minor update in the line format (Marcus Burghardt <maburgha@redhat.com>)
 - Include note in CIS RHEL7 4.5.3.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Update selection in CIS RHEL7 4.5.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix rule section in CIS RHEL7 4.2.15 (Marcus Burghardt <maburgha@redhat.com>)
 - Review usage of sudo_require_reauthentication (Marcus Burghardt
<maburgha@redhat.com>)
 - Review sshd_approved_ciphers.var (Marcus Burghardt <maburgha@redhat.com>)
 - Update requirements status after review (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix wrong reference (Marcus Burghardt <maburgha@redhat.com>)
 - Update CIS RHEL7 version in header (Marcus Burghardt <maburgha@redhat.com>)
 - Update var_password_pam_remember for CIS RHEL7 4.0.0 (Marcus Burghardt
<maburgha@redhat.com>)
 - Removed CIS RHEL7 references in dropped rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.5.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.5.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Enable ensure_root_password_configured to rhel7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.5.1 and 4.5.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.5.1 and 4.5.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.4.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.4.2.4 (Marcus Burghardt <maburgha@redhat.com>)
 - Enable accounts_password_pam_dictcheck to rhel7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.4.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.4.2.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.4.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.4.2.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.4.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.4.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Enable rhel7 in rules required by CIS RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.1.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL7 4.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL7 section 4.1.1 (Marcus Burghardt <maburgha@redhat.com>)
 - remove cis reference from xwindows_remove_packages (Vojtech Polasek
<vpolasek@redhat.com>)
 - update control 2.2.20 to set correct runlevel (Vojtech Polasek
<vpolasek@redhat.com>)
 - update refernce in related rule of 2.2.3 (Vojtech Polasek
<vpolasek@redhat.com>)
 - include reference also in related rule for 2.2.2 (Vojtech Polasek
<vpolasek@redhat.com>)
 - change status of 2.2.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - modify profile stability test of RHEL 8 PCI-DSS (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove CIS references in rules which were removed from the profile (Vojtech
Polasek <vpolasek@redhat.com>)
 - remove control 2.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.3.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.3.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.3.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.3.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.22 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.21 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.20 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.19 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.18 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.17 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.16 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.15 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.14 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.13 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.12 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.11 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.10 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.9 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.8 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.7 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.6 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.1.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.1.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - update section 2.1.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - Change status of a control (Jan Černý <jcerny@redhat.com>)
 - Add rules to RHEL 8 CIS 6.1.10 (Matthew Burket <mburket@redhat.com>)
 - Add rule file_owner_backup_etc_shells (Matthew Burket <mburket@redhat.com>)
 - Add new rule file_groupowner_etc_shells (Matthew Burket <mburket@redhat.com>)
 - Add new rule file_permissions_etc_shells (Matthew Burket
<mburket@redhat.com>)
 - change how xwindows is disabled in CIS profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add a CCE (Jan Černý <jcerny@redhat.com>)
 - Update control title (Jan Černý <jcerny@redhat.com>)
 - Add rules rsyslog_files_* to CIS 5.1.4 (Jan Černý <jcerny@redhat.com>)
 - Update rule references for 5.1.3 (Jan Černý <jcerny@redhat.com>)
 - Fix the control status (Jan Černý <jcerny@redhat.com>)
 - Fix the control status (Jan Černý <jcerny@redhat.com>)
 - Fix the control status (Jan Černý <jcerny@redhat.com>)
 - change the sysctl module fqcn for rhel7 product (Vojtech Polasek
<vpolasek@redhat.com>)
 - Allow tests/test_product_stability.py to be executed. (Matthew Burket
<mburket@redhat.com>)
 - Fix OpenEmbedded name in test stability (Matthew Burket <mburket@redhat.com>)
 - Add missing CCEs (Jan Černý <jcerny@redhat.com>)
 - Fix indentation (Jan Černý <jcerny@redhat.com>)
 - Remove leftover sections (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.11 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.10 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.2.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.14 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.13 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.12 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.11 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.10 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 6.1.1 (Jan Černý <jcerny@redhat.com>)
 - Fix OVAL in auditd_data_retention_space_left_action (Jan Černý
<jcerny@redhat.com>)
 - Fix remediation in auditd_data_retention_space_left_action (Jan Černý
<jcerny@redhat.com>)
 - Fix leftover section (Jan Černý <jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Update control status (Jan Černý <jcerny@redhat.com>)
 - Remove leftovers (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.3.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.3.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.10 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.4.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.21 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.20 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.19 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.18 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.17 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.16 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.15 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.14 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.13 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.12 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.11 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.10 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.3.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.2.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.2.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.2.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.2.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.1.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.1.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.1.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.2.1.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.1.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.1.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.1.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.2.1.1 (Jan Černý <jcerny@redhat.com>)
 - Remove obsolete section (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.1.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.1.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.1.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.1.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.1.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.1.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 5.1.1.1 (Jan Černý <jcerny@redhat.com>)
 - update sles oval feed url (svet-se <svetlin.boychev@suse.com>)
 - remove the control containing service_autofs_disabled from section 1 (Vojtech
Polasek <vpolasek@redhat.com>)
 - remove cis references from dropped rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove control 2.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - add control 2.3.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.3.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.3.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.3.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.22 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.21 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.20 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.19 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.18 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.17 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.16 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.15 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.14 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.13 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.12 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.11 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.10 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.9 (Vojtech Polasek <vpolasek@redhat.com>)
 - update section 2.2.8 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.7 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.6 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - update section 2.2.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.2.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - update control 2.1.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - update 2.1.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - control 2.1.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - fix package_iptables_installed (Matthew Burket <mburket@redhat.com>)
 - Update titles in section 1.1 for RHEL 7 CIS (Matthew Burket
<mburket@redhat.com>)
 - Fix up section 1.1.1 for RHEL 7 CIS (Matthew Burket <mburket@redhat.com>)
 - Fix mount_option_home_nosuid references (Matthew Burket <mburket@redhat.com>)
 - fixup! Add RHEL 7 CIS reference to 1.1.2.7.4 (Matthew Burket
<mburket@redhat.com>)
 - Update RHEL 7 Section 1 references (Matthew Burket <mburket@redhat.com>)
 - Update CIS reference for kernel_module_hfs_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CIS reference to mount_option_var_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CIS reference to mount_option_var_log_audit_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CIS reference for sysctl_kernel_yama_ptrace_scope (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CIS reference mount_option_var_log_audit_nodev (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CIS references to dconf_gnome_screensaver_idle_delay (Matthew
Burket <mburket@redhat.com>)
 - Add RHEL 7 CIS reference to selinux_not_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add selinux_not_disabled to RHEL 7 (Matthew Burket <mburket@redhat.com>)
 - Add RHEL7 CIS reference for mount_option_var_log_nodev (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CIS reference to 1.1.2.7.4 (Matthew Burket <mburket@redhat.com>)
 - Add RHEL7 CIS reference to dconf_gnome_disable_autorun (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CIS reference to mount_option_var_log_noexec (Matthew Burket
<mburket@redhat.com>)
 - Update references on mount_option_var_log_nosuid for RHEL 7 (Matthew Burket
<mburket@redhat.com>)
 - Update dconf_gnome_disable_automount_open references for RHEL 7 CIS (Matthew
Burket <mburket@redhat.com>)
 - Update references on dconf_gnome_screensaver_user_locks for RHEL 7 CIS
(Matthew Burket <mburket@redhat.com>)
 - Update dconf_gnome_disable_automount references for RHEL 7 CIS (Matthew
Burket <mburket@redhat.com>)
 - Update references for mount_option_var_nodev RHEL 7 CIS (Matthew Burket
<mburket@redhat.com>)
 - Update mount_option_home_nosuid RHEL 7 CIS references (Matthew Burket
<mburket@redhat.com>)
 - Update section 1.7 for RHEL 7 CIS Control (Matthew Burket
<mburket@redhat.com>)
 - Remove section 1.9 as it was moved up to 1.2.5 (Matthew Burket
<mburket@redhat.com>)
 - Remove 1.2.5 from the RHEL 7 Benchmark (Matthew Burket <mburket@redhat.com>)
 - Update section 1.6 RHEL 7 CIS (Matthew Burket <mburket@redhat.com>)
 - Update section 1.5 RHEL 7 CIS (Matthew Burket <mburket@redhat.com>)
 - Remove prelink removed rule from RHEL 7 CIS (Matthew Burket
<mburket@redhat.com>)
 - Remove NX rule has it is no longer in the RHEL 7 Benchmark (Matthew Burket
<mburket@redhat.com>)
 - Update Section 1.4 for RHEL 7 CIS (Matthew Burket <mburket@redhat.com>)
 - Update Section 1.3 for RHEL 7 CIS (Matthew Burket <mburket@redhat.com>)
 - Update Section 1.2 for RHEL 7 CIS (Matthew Burket <mburket@redhat.com>)
 - Remove "removable media partitions mount rules from RHEL 7 CIS (Matthew
Burket <mburket@redhat.com>)
 - Update RHEL 7 CIS /var/log/audit (Matthew Burket <mburket@redhat.com>)
 - RHEL 7 CIS Update /var/log section (Matthew Burket <mburket@redhat.com>)
 - RHEL 7 CIS Update /var/tmp section (Matthew Burket <mburket@redhat.com>)
 - Update CIS for RHEL 7 /var section (Matthew Burket <mburket@redhat.com>)
 - Update section for /home checks RHEL 7 CIS (Matthew Burket
<mburket@redhat.com>)
 - Update section for /dev/shm checks RHEL 7 CIS (Matthew Burket
<mburket@redhat.com>)
 - Update section for /tmp checks RHEL 7 CIS (Matthew Burket
<mburket@redhat.com>)
 - Update Section 1.1 of RHEL 7 CIS Control (Matthew Burket
<mburket@redhat.com>)
 - Update OL8 STIG id references (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update .github/workflows/k8s-content-pr.yaml (Vincent Shen
<wenshen@redhat.com>)
 - Update .github/workflows/k8s-content-pr.yaml (Vincent Shen
<wenshen@redhat.com>)
 - Mark control 3.4.4.2.6 as partial (Jan Černý <jcerny@redhat.com>)
 - Fix configure_bashrc_exec_tmux missing parentheses (BenGui
<benoit.guillon1@etu.unilim.fr>)
 - Add a missing CCE (Jan Černý <jcerny@redhat.com>)
 - Add a missing header (Jan Černý <jcerny@redhat.com>)
 - Fix a missing reference (Jan Černý <jcerny@redhat.com>)
 - Sort references in service_bluetooth_disabled (Jan Černý
<jcerny@redhat.com>)
 - Remove section 3.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.3.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.3.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.3.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.3.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.3.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.3.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.2.6 (Jan Černý <jcerny@redhat.com>)
 - Fix references issues detected in tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Align CIS 3.4.4.2.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.2.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.2.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.2.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.2.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.4.1.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.3.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.3.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.3.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.3.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.3.5 (Jan Černý <jcerny@redhat.com>)
 - Add group.yml file for firewalld_deactivation rules (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Align CIS 3.4.3.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.3.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.3.2 (Jan Černý <jcerny@redhat.com>)
 - Update rules related to CIS RHEL8 1.8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 1.8 (Marcus Burghardt <maburgha@redhat.com>)
 - Align CIS 3.4.3.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.2.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.2.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.2.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.2.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.1.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.4.1.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.11 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.10 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.9 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.8 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.7 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.6 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.5 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.3.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.2.4 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.2.3 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.2.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.2.1 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.1.3 (Jan Černý <jcerny@redhat.com>)
 - Update CIS RHEL8 section 1.7 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rule related to CIS RHEL8 1.6 (Marcus Burghardt <maburgha@redhat.com>)
 - Update CIS RHEL8 section 1.6 (Marcus Burghardt <maburgha@redhat.com>)
 - Align CIS 3.1.2 (Jan Černý <jcerny@redhat.com>)
 - Align CIS 3.1.1 (Jan Černý <jcerny@redhat.com>)
 - Update rules related to CIS RHEL8 1.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 1.5 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 1.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 1.4 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 1.3 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 1.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Remove dropped filesystem requiremens from CIS RHEL8 1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 1.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 section 1.1.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Update rules related to CIS RHEL8 1.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix import problem (Jan Rodak <hony.com@seznam.cz>)
 - Update CIS RHEL8 section 1.1.1 (Marcus Burghardt <maburgha@redhat.com>)
 - Update CIS version in RHEL8 control file (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unnessary conditionals (Jan Rodak <hony.com@seznam.cz>)
 - Move import to top of file (Jan Rodak <hony.com@seznam.cz>)
 - Fix typo (Jan Rodak <hony.com@seznam.cz>)
 - Rename functions (Jan Rodak <hony.com@seznam.cz>)
 - Format via black tool (Jan Rodak <hony.com@seznam.cz>)
 - Move command processing to separate files (Jan Rodak <hony.com@seznam.cz>)
 - Decompose statistics generation in html (Jan Rodak <hony.com@seznam.cz>)
 - Separate commands to functions (Jan Rodak <hony.com@seznam.cz>)
 - Separate subparsers to functions (Jan Rodak <hony.com@seznam.cz>)
 - Update k8s action to build image on new PR (Vincent Shen
<wenshen@redhat.com>)
 - add missing ocil part (Vojtech Polasek <vpolasek@redhat.com>)
 - align the audit line with remediations and check (Vojtech Polasek
<vpolasek@redhat.com>)
 - add explaining comment to mount_option bash template (Vojtech Polasek
<vpolasek@redhat.com>)
 - Create the cron.allow file with correct permissions (Jan Černý
<jcerny@redhat.com>)
 - Add optional parameters to file_existence template (Jan Černý
<jcerny@redhat.com>)
 - Update product_stability test data with BSI reference (Benjamin Ruland
<benjamin.ruland@gmail.com>)
 - Define notes and rules for BSI APP.4.4.A12 (Benjamin Ruland
<benjamin.ruland@gmail.com>)
 - add bsi constant (sluetze <13255307+sluetze@users.noreply.github.com>)
 - Add new rule file_cron_allow_exists (Jan Černý <jcerny@redhat.com>)
 - Add a note to the description (Jan Černý <jcerny@redhat.com>)
 - Allow using declare keyword (Jan Černý <jcerny@redhat.com>)
 - xccdf_org.ssgproject.content_rule_accounts_tmout: replace 'declare' by
'typeset' (Renaud Métrich <rmetrich@redhat.com>)
 - Removes shebang from files that are not directly executed (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Support drop-in config in journald rules on RHEL (Jan Černý
<jcerny@redhat.com>)
 - Add ocp platforms to some eks shared OVALs (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Do not change comments by remediations (Jan Černý <jcerny@redhat.com>)
 - Allow spaces in rule sudo_custom_logfile (Jan Černý <jcerny@redhat.com>)
 - Move install_mcafee_hbss shared OVAL to the install_hids rule (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - fix invalid level (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests for the function validating policy levels (Vojtech Polasek
<vpolasek@redhat.com>)
 - add function validating policy levels (Vojtech Polasek <vpolasek@redhat.com>)
 - ensure that loaded Policy class has always list of levels (Vojtech Polasek
<vpolasek@redhat.com>)
 - Do not check for yum on dnf systems (Jan Černý <jcerny@redhat.com>)
 - Consider checking for iptables service only if we don't have firewalld
service enabled (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add support to disable wifi interfaces via wicked (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - remove spaces for code check (steven.y.gui <steven_ygui@163.com>)
 - Updates tools_and_utilities.md based on code review feedback (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Add zlib1g-dev to debain 10 CI deps (Matthew Burket <mburket@redhat.com>)
 - Add libxml2 and libxslt dev packages to Debian 10 CI (Matthew Burket
<mburket@redhat.com>)
 - fix ctest fail (steven.y.gui <steven_ygui@163.com>)
 - fix compilation errors (steven.y.gui <steven_ygui@163.com>)
 - remove openeuler and modified rule ids (steven.y.gui <steven_ygui@163.com>)
 - Add reference title mapping (Jan Černý <jcerny@redhat.com>)
 - Fix a duplication of the code ID 3.5.2.1 (rchikov <rumen.chikov@suse.com>)
 - add new product openeuler supporting (steven.y.gui <steven_ygui@163.com>)
 - Update Install VM to use Fedora 39 (Matthew Burket <mburket@redhat.com>)
 - Fix levels in CIS OCP 1.4.0 (Matthew Burket <mburket@redhat.com>)
 - Fail load a control if the level is a string (Matthew Burket
<mburket@redhat.com>)
 - Remove unused imports from tests/unit/ssg-module/test_controls.py (Matthew
Burket <mburket@redhat.com>)
 - Fix type hints in utils/render_all_policies.py (Matthew Burket
<mburket@redhat.com>)
 - Add Windows CI (Matthew Burket <mburket@redhat.com>)
 - We should raise NotImplementedError (Matthew Burket <mburket@redhat.com>)
 - Fix Ansible in rule ensure_redhat_gpgkey_installed (Jan Černý
<jcerny@redhat.com>)
 - Update GitHub Artifacts Action Steps to v4 (Matthew Burket
<mburket@redhat.com>)
 - fix: better with absolute path (Whidix
<31294015+Whidix@users.noreply.github.com>)
 - fix: service_timesyncd_configured (Whidix
<31294015+Whidix@users.noreply.github.com>)
 - Ignore none as possible root dir (Commandcracker
<lukas.fricke.dev@gmail.com>)
 - Use correct HTML element for inline code (Jan Černý <jcerny@redhat.com>)
 - Bump geekyeggo/delete-artifact from 2 to 4 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - adapt styling (Commandcracker <lukas.fricke.dev@gmail.com>)
 - Use XSLT_PREFIX (Commandcracker <lukas.fricke.dev@gmail.com>)
 - Find xccdf-guide.xsl by pssible openscap root dirs (adds Windows support)
(Commandcracker <lukas.fricke.dev@gmail.com>)
 - Account for division by zero (Commandcracker <lukas.fricke.dev@gmail.com>)
 - Find xccdf_1.1_to_1.2.xsl on Windows (Commandcracker
<49335821+Commandcracker@users.noreply.github.com>)
 - move bsi os checks into os profile (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - split bsi profile into node and not node (sluetze
<13255307+sluetze@users.noreply.github.com>)
 - Added OCP4 Profile and Controls for BSI APP.4.4 (ermeratos
<manuel.ermer@atos.net>)
 - Finish rename to Automatus (Jan Černý <jcerny@redhat.com>)
 - Fix broken formatting (Jan Černý <jcerny@redhat.com>)
 - Update test-check-eof for smoke test (Jan Černý <jcerny@redhat.com>)
 - Add anolis23/anolis8 support for pci-dss compliance. (YuQing.Yang
<yangyuqing6@qq.com>)
 - Add alinux2/alinux3 support for pci-dss compliance. (YuQing.Yang
<yangyuqing6@qq.com>)
 - Remove unnecessary overwrite of the init function (Jan Rodak
<hony.com@seznam.cz>)
 - Add invoke parent's init function (Jan Rodak <hony.com@seznam.cz>)
 - Fix value of sshd_strong_kex variable on Ubuntu (David du Colombier
<djc@datadoghq.com>)
 - Rename inconsistent shared OVAL IDs (Oracle Linux) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - add template path prefix with environment override (Stephen L Arnold
<sarnold@vctlabs.com>)
 - configure_bashrc_tmux: escape braces within regex (Vojtech Polasek
<vpolasek@redhat.com>)
 - configure_bashrc_exec_tmux: escape braces within regex (Vojtech Polasek
<vpolasek@redhat.com>)
 - Minor update in default ini file name (Marcus Burghardt
<maburgha@redhat.com>)
 - Revert "Amend: Update e2e results for OVS-related checks" (Vincent Shen
<wenshen@redhat.com>)
 - Revert "Update e2e results for OVS-related checks" (Vincent Shen
<wenshen@redhat.com>)
 - Revert "OCPBUGS-11932: Disable checks for Open vSwitch on  NSX cluster"
(Vincent Shen <wenshen@redhat.com>)
 - add high ANSSI-BP-028 profile for Debian (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - add enhanced ANSSI-BP-028 profile for Debian (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable package_pam_apparmor_installed for Debian (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable grub2_enable_apparmor for Debian (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable package_apparmor_installed for Debian (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable apparmor_configured for Debian (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable all_apparmor_profiles_enforced for Debian12 (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable debian ansible remediation in audit_rules_session_events (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian ansible remediation audit_rules_privileged_commands (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian ansible remediation in audit_rules_kernel_module_loading_init
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian ansible remediation in audit_rules_kernel_module_loading_finit
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian ansible remediation in audit_rules_kernel_module_loading_delete
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - escape pipefail for debian in rsyslog_logfiles_attributes_modify (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - Remove bogus specifier from audit_rules_privileged_commands_unix2_chkpwd
rule's template (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Fix duplicate OVAL ids (gpgkey package, GDM login) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Add STIG Tables for RHEL 9 (Matthew Burket <mburket@redhat.com>)
 - Add CCE-ID for SLE-15 for iptables_default_forward (Christian Hagenest
<christian.hagenest@suse.com>)
 - Add CCE-ID for SLE-12 for require_singleuser_auth (Christian Hagenest
<christian.hagenest@suse.com>)
 - Fixes update-oscal.yml to remove env context from matrix variables (Jennifer
Power <barnabei.jennifer@gmail.com>)
 - Add missing group.yml (Jan Černý <jcerny@redhat.com>)
 - enable debian remediation in audit_time_rules (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_session_events (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_networkconfig_modification
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_immutable (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_sysadmin_actions (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_time_clock_settime (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_time_adjtimex (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_login_events (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_uncuccessful_file_modification
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_file_deletion_events template
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian remediation in audit_rules_dac_modification template (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable osrelease strings ending with -amd64 to pass prefer_64bit_os check
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - Add ANSSI-BP-028 intermediary profile for Debian 12 (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable debian 12 ansible remediation for accounts_maximum_age_login_defs rule
(Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable Debian remediation for sshd_set_keepalive rule (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable Debian bash remediation for sysctl template (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - add debian remediation support in grub2_bootloader_argument template and
related macros (Alexandre Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - fix package name for debian 12 in service_auditd_enabled rule (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable debian 12 in aide_build_database rule (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - enable bash remediation for Debian in package_installed template (Alexandre
Skrzyniarz <alexandre.skrzyniarz@laposte.net>)
 - enable remediation for Debian in postfix client rule (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - change defaut root mail alias in postfix client rule (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - Add ANSSI-BP-028 minimal profile for Debian 12 (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - Updates yaml files to comply to YAML styleguide requirements (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Updates installed dependencies on nightly_build.yml and release.yaml
(Jennifer Power <barnabei.jennifer@gmail.com>)
 - Updates requirements.txt and test-requirements.txt with lxml-stubs and
requests (Jennifer Power <barnabei.jennifer@gmail.com>)
 - Adds information about the OSCAL utilities to the developer docs (Jennifer
Power <barnabei.jennifer@gmail.com>)
 - Updates OscalStatus mappings and adds unit tests (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Updates response handling to always add the status prop to the implemented
requirement (Jennifer Power <barnabei.jennifer@gmail.com>)
 - Adds ControlSelector for extensible control response selection logic
(Jennifer Power <barnabei.jennifer@gmail.com>)
 - Adds rule and parameter transformation in OSCAL props and set parameters
(Jennifer Power <barnabei.jennifer@gmail.com>)
 - Adds a separate helper class for OSCAL profile processing (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Add type hints and mypy tests for utils/oscal (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Adds control responses by status and adds status property (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Updates requirements.txt with compliance-trestle and updates test
configuration (Jennifer Power <barnabei.jennifer@gmail.com>)
 - Adds unit tests for the handle_response function (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Adds initial OSCAL component definition generation (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Correction of step descriptions (Jan Rodak <hony.com@seznam.cz>)
 - Typo in product.yml (Håvard <havard.f.aasen@pfft.no>)
 - Sort shared/applicability/package.yml (Matthew Burket <mburket@redhat.com>)
 - Add snmpd package platform to service_snmpd_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add autofs package platform to service_autofs_disabled (Matthew Burket
<mburket@redhat.com>)
 - Remove rlogin rules from RHEL9 HIPAA profile (Matthew Burket
<mburket@redhat.com>)
 - Add avahi package platform to service_avahi-daemon_disabled (Matthew Burket
<mburket@redhat.com>)
 - Remove xinetd rules from HIPAA and e8 profiles on RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Add package telnet-server platform to service_telnet_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add squid package platform to service_squid_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add blueprint remedation for enable_fips_mode (Matthew Burket
<mburket@redhat.com>)
 - Implementation of some additional changes in ansible (rchikov
<rumen.chikov@suse.com>)
 - Update ANSSI profile description and SME for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update ANSSI profile description and SME for RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update ANSSI profile description and SME for RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix url to ANSSI policy in control file (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix shellcheck in accounts_polyinstantiated_*tmp (Matthew Burket
<mburket@redhat.com>)
 - Turn off blueprint remediation for mount_option_dev_shm_* (Matthew Burket
<mburket@redhat.com>)
 - Remove remediations from partition_for_dev_shm (Matthew Burket
<mburket@redhat.com>)
 - Remove not osbuild from enable_pam_namespace (Matthew Burket
<mburket@redhat.com>)
 - Remove not os_build from accounts_polyinstantiated_*tmp (Matthew Burket
<mburket@redhat.com>)
 - Remove not osbuild from selinux-booleans group (Matthew Burket
<mburket@redhat.com>)
 - Make some improvements to bash remediation template (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add e2e test for audit_rules_login_events_faillock (Lance Bragstad
<lbragsta@redhat.com>)
 - Removed unnecessary platform definitions in tests (Miha Purg
<miha.purg@canonical.com>)
 - Use the rule id for the path in Kubernetes remediation (Watson Sato
<wsato@redhat.com>)
 - audit_rule_login_events: handle path_is_variable in Kubernetes remediation
(Watson Sato <wsato@redhat.com>)
 - Add Gate tests back to master (Matthew Burket <mburket@redhat.com>)
 - Bump actions/setup-python from 4 to 5 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Update shared/templates/sebool/ansible.template (Rumen <77793453+rumch-
se@users.noreply.github.com>)
 - Update test scenario to test file hashes (Marcus Burghardt
<maburgha@redhat.com>)
 - remove irrelevant rules from rhel8 and rhel9 pci-dss profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - add warnings to package_*_removed rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update Ubuntu STIG-20-010072 (Miha Purg <miha.purg@canonical.com>)
 - Add ubuntu to rule faillock_silent and fix tests (Miha Purg
<miha.purg@canonical.com>)
 - Add ubuntu to faillock_audit rule and fix tests (Miha Purg
<miha.purg@canonical.com>)
 - Fix for ubuntu OVALs for rules faillock_deny and faillock_interval (Miha Purg
<miha.purg@canonical.com>)
 - Minor fix in OVAL and version bump (Miha Purg <miha.purg@canonical.com>)
 - Refactor ubuntu OVAL in accounts_passwords_pam_faillock_unlock_time (Miha
Purg <miha.purg@canonical.com>)
 - Fix ubuntu OVAL for accounts_passwords_pam_faillock_unlock_time (Miha Purg
<miha.purg@canonical.com>)
 - Fix missing platforms in tests and add ubuntu to faillock rules (Miha Purg
<miha.purg@canonical.com>)
 - Implementation of proposed changes (rchikov <rumen.chikov@suse.com>)
 - Add package_firewalld_installed to RHEL 9 CIS (Matthew Burket
<mburket@redhat.com>)
 - Show etcd's encryption's status more clearly (Watson Sato <wsato@redhat.com>)
 - Move section to bottom of document (Jan Rodak <hony.com@seznam.cz>)
 - Turn off blueprint for package_MFEhiplsm_installed (Matthew Burket
<mburket@redhat.com>)
 - Update DISA STIG versions in SLE STIG profiles (Christian Hagenest
<christian.hagenest@suse.com>)
 - Update DISA STIG for SLES 15 to V1 R11 (Christian Hagenest
<christian.hagenest@suse.com>)
 - remove the rule from rhel8 pci-dss profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove the rule from the rhel7 pci-dss profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - add warning to rule timer_logrotate_enabled (Vojtech Polasek
<vpolasek@redhat.com>)
 - Show rhel article in warning only to rhel products (Marcus Burghardt
<maburgha@redhat.com>)
 - Show rhel article in warning only to rhel products (Marcus Burghardt
<maburgha@redhat.com>)
 - Show rhel article in warning only to rhel products (Marcus Burghardt
<maburgha@redhat.com>)
 - Make sure required ansible steps are not skipped (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Ensure that normal UEFI does not use secure boot in install_vm.py (Matthew
Burket <mburket@redhat.com>)
 - Fix Secureboot Installs (Matthew Burket <mburket@redhat.com>)
 - remove rule service_ntpd_enabled from rhel8 and rhel9 pci-dss profiles
(Vojtech Polasek <vpolasek@redhat.com>)
 - add warning to rule service_ntpd_enabled that the service does not exist on
some products (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix style guide (Jan Rodak <hony.com@seznam.cz>)
 - remove stigid from rule passwd_system-auth_substack (Vojtech Polasek
<vpolasek@redhat.com>)
 - replace audit_immutable_login_uids with audit_rules_immutable_login_uids in
rhel9 stig (Vojtech Polasek <vpolasek@redhat.com>)
 - remove stigid from rule no longer selected in RHEL 8 STIG (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add documentation of the actual steps that OVAL content goes through during
build (Jan Rodak <hony.com@seznam.cz>)
 - Refactor OVAL in no_files_unowned_by_user (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve rule description in no_files_unowned_by_user (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix test scenario comment in alignment to the commands (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor OVAL in dir_perms_world_writable_sticky_bits (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve rule description in dir_perms_world_writable_sticky_bits (Marcus
Burghardt <maburgha@redhat.com>)
 - Refactor OVAL in dir_perms_world_writable_system_owned (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve rule description in dir_perms_world_writable_system_owned (Marcus
Burghardt <maburgha@redhat.com>)
 - Improve Bash in file_permissions_unauthorized_world_writable (Marcus
Burghardt <maburgha@redhat.com>)
 - Refactor OVAL in file_permissions_unauthorized_world_writable (Marcus
Burghardt <maburgha@redhat.com>)
 - Improve rule description in file_permissions_unauthorized_world_writable
(Marcus Burghardt <maburgha@redhat.com>)
 - Refactor OVAL in file_permissions_unauthorized_sgid (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve rule description in file_permissions_unauthorized_sgid (Marcus
Burghardt <maburgha@redhat.com>)
 - Adopt new macro in file_permissions_unauthorized_suid (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor OVAL check to not collect same objects twice (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve OVAL readability in file_permissions_unauthorized_suid (Marcus
Burghardt <maburgha@redhat.com>)
 - Update file_permissions_unauthorized_suid description (Marcus Burghardt
<maburgha@redhat.com>)
 - Include warning in file_permissions_ungroupowned (Marcus Burghardt
<maburgha@redhat.com>)
 - Update file_permissions_ungroupowned description (Marcus Burghardt
<maburgha@redhat.com>)
 - Adopt new macro in file_permissions_ungroupowned (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce OVAL macro to map local mount points (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor OVAL in file_permissions_ungroupowned (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve OVAL readability in file_permissions_ungroupowned (Marcus Burghardt
<maburgha@redhat.com>)
 - Improved OVAL readability in rpm_verify_permissions (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve rule description in rpm_verify_permissions (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor OVAL in rpm_verify_ownership (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve rule description in rpm_verify_ownership (Marcus Burghardt
<maburgha@redhat.com>)
 - Add ansible remediation for ubuntu for rule
accounts_password_pam_unix_remember (Miha Purg <miha.purg@canonical.com>)
 - Minor improvements in Ansible remediation for rpm_verify_hashes (Marcus
Burghardt <maburgha@redhat.com>)
 - Minor improvements in Bash remediation for rpm_verify_hashes (Marcus
Burghardt <maburgha@redhat.com>)
 - Improved OVAL readability in rpm_verify_hashes (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve rule description in rpm_verify_hashes (Marcus Burghardt
<maburgha@redhat.com>)
 - Updates the PR body message in update-oscal.yml (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Converts the README under shared/references/oscal to Markdown (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Minor formatting for CMake section (Matthew Burket <mburket@redhat.com>)
 - Add CMakeLint requirement to CMake section (Matthew Burket
<mburket@redhat.com>)
 - Add GitHub Actions section to style guide (Matthew Burket
<mburket@redhat.com>)
 - Fix wording in PR section (Matthew Burket <mburket@redhat.com>)
 - Updates update-oscal to use variables for references in the repositories
(Jennifer Power <barnabei.jennifer@gmail.com>)
 - OCPBUGS-8041: Remove info override for vsyscall kernerl argument (Lance
Bragstad <lbragsta@redhat.com>)
 - Amend: Update e2e results for OVS-related checks (Vincent Shen
<wenshen@redhat.com>)
 - Added few ubuntu tests for `accounts_password_pam_unix_remember` (Miha Purg
<miha.purg@canonical.com>)
 - Change template for 'aide_disable_silentreports' (Miha Purg
<miha.purg@canonical.com>)
 - Fixed tests for aide_disable_silentreports (Miha Purg
<miha.purg@canonical.com>)
 - Added comment for UBTU-20-010451 (Miha Purg <miha.purg@canonical.com>)
 - Remove trailing whitespaces (Miha Purg <miha.purg@canonical.com>)
 - add aide_disable_silentreports rule for UBTU-20-010437 (Dexter Le
<dexter.le@sap.com>)
 - Add more type hints for methods in check_eof script (Matthew Burket
<mburket@redhat.com>)
 - Exclude mypy_cache from check_eof (Matthew Burket <mburket@redhat.com>)
 - Fix ShellCheck in secure_boot_enabled (Matthew Burket <mburket@redhat.com>)
 - Fix quoting for runtime_kernel_fips_enabled CPE check (Matthew Burket
<mburket@redhat.com>)
 - remove explicit remediations, check and tests from templated rule
audit_rules_privileged_commands_kmod (Vojtech Polasek <vpolasek@redhat.com>)
 - remove explicit remediations, check and tests from templated rule
audit_rules_privileged_commands_kmod (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove all contributors file (Matthew Burket <mburket@redhat.com>)
 - Move ansible_sudo_remove_config to FQCN (Matthew Burket <mburket@redhat.com>)
 - Add docs for ansible_sudo_remove_config (Matthew Burket <mburket@redhat.com>)
 - Fix wrong_value test in sudo_require_authentication (Matthew Burket
<mburket@redhat.com>)
 - Add profile aliases for OpenShift versioned profiles (Lance Bragstad
<lbragsta@redhat.com>)
 - Bump JamesIves/github-pages-deploy-action from 4.4.3 to 4.5.0
(dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
 - Update Oracle Linux anssi profiles (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update OL8 stig selection for OL08-00-040259 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - remove calls to exit from Bash remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - OCP4: Fix e2e result on CIS kube file permission issues (Vincent Shen
<wenshen@redhat.com>)
 - bump version to 0.1.72 (Vojtech Polasek <vpolasek@redhat.com>)
 - Fixed auditd package name (Miha Purg <miha.purg@canonical.com>)
 - Fix audit key check in audit_rules_privileged_commands_fdisk (Miha Purg
<miha.purg@canonical.com>)
 - update list of contributors before 0.1.71 release (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_base_chain/ansible/shared.yml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Disable the build of OVAL intermediate files (Jan Rodak <hony.com@seznam.cz>)
 - Fix FutureWarning: The behavior of this method will change in future
versions. (Jan Rodak <hony.com@seznam.cz>)
 - Add test (Jan Rodak <hony.com@seznam.cz>)
 - Add parameter for generation of OVAL document for each rule (Jan Rodak
<hony.com@seznam.cz>)
 - Implement generation of OVAL documents for each rule (Jan Rodak
<hony.com@seznam.cz>)
 - Generate a subset of an OVAL document according to the
OVALDefinitionReference class (Jan Rodak <hony.com@seznam.cz>)
 - Revert "Created test cases covering /etc/audit/rules.d/privileged.rules and
/etc/audit/audit.rules" (rchikov <rumen.chikov@suse.com>)
 - Revert "Additional changes into ansible part" (rchikov
<rumen.chikov@suse.com>)
 - Revert "Modification of ansible part and test files, 2 additional tests
added" (rchikov <rumen.chikov@suse.com>)
 - add multi_platform_ubuntu to sshd_lineinfile/tests (Paul Roche
<paul.roche@menlosecurity.com>)
 - enable sshd_distributed_config for ubuntu2004 (Paul Roche
<paul.roche@menlosecurity.com>)
 - enable sshd_distributed_config for ubuntu2204 (Paul Roche
<paul.roche@menlosecurity.com>)
 - Update grub2_mitigation_argument texts (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - add suggested rules to warnings (Vojtech Polasek <vpolasek@redhat.com>)
 - fix ugly grammar from previous PR (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rules not relevant to rhel7 from pcidss profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rhel7 prodtype to rules related to loopback traffic (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rhel7 prodtype to package_audit-audispd-plugins_installed (Vojtech
Polasek <vpolasek@redhat.com>)
 - add rhel7 prodtype to service_ntp_enabled (Vojtech Polasek
<vpolasek@redhat.com>)
 - Return empty list when parameter is not found (Watson Sato
<wsato@redhat.com>)
 - Add check if to continue with ansible task (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix attribute in reference element of OVAL definition (Jan Rodak
<hony.com@seznam.cz>)
 - display warning for service_ntp_enabled also for sle15 (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add Ubuntu to audit_rules_kernel_module_loading tests (Miha Purg
<miha.purg@canonical.com>)
 - audit_rules_privileged_commands_ssh_keysign: Fix ssh-keysign path for Ubuntu
22.04 (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - modify rhel8 and rhel9 pci-dss profiles to exclude rules which do not apply
(Vojtech Polasek <vpolasek@redhat.com>)
 - add back prodtype to set_loopback_traffic (Vojtech Polasek
<vpolasek@redhat.com>)
 - add back prodtypes to set_ipv6_loopback_traffic (Vojtech Polasek
<vpolasek@redhat.com>)
 - add prodtype and warning to package-audit-audispd-plugins_installed (Vojtech
Polasek <vpolasek@redhat.com>)
 - add back prodtype and warning to service_ntp_enabled (Vojtech Polasek
<vpolasek@redhat.com>)
 - return prodtype to ntpd_specify_remote_server (Vojtech Polasek
<vpolasek@redhat.com>)
 - return prodtype to ntpd_specify_multiple_servers (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add an ID translation test for the OVAL object model (Jan Rodak
<hony.com@seznam.cz>)
 - Remove not applicable tests (Jan Rodak <hony.com@seznam.cz>)
 - Report an empty OVAL definition title or description (Jan Rodak
<hony.com@seznam.cz>)
 - Adapt OVALlinker for OVAL object model (Jan Rodak <hony.com@seznam.cz>)
 - Add a method for OVAL object model translation (Jan Rodak
<hony.com@seznam.cz>)
 - Add translate_id method to OVAL object model (Jan Rodak <hony.com@seznam.cz>)
 - add the rule to profile stability test (Vojtech Polasek
<vpolasek@redhat.com>)
 - add enable_authselect rule to pci-dss control file (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix kernel_module_disabled template for Ubuntu (Miha Purg
<miha.purg@canonical.com>)
 - Removed broken test for kernel_module_disabled (Miha Purg
<miha.purg@canonical.com>)
 - Add check if SELinux is enabled in bash sebool remediation (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update e2e results for OVS-related checks (Lance Bragstad
<lbragsta@redhat.com>)
 - OCPBUGS-11932: Disable checks for Open vSwitch on  NSX cluster (Vincent Shen
<wenshen@redhat.com>)
 - fix: incorporates PR feedback on update-vendor.yml and directory location
(Jennifer Power <barnabei.jennifer@gmail.com>)
 - Fix EOF in .github/pull_request_template.md (Matthew Burket
<mburket@redhat.com>)
 - Added .github to EOF checker (Matthew Burket <mburket@redhat.com>)
 - feat(action): adds directory and action for vendor dir (Jennifer Power
<barnabei.jennifer@gmail.com>)
 - Reordered rules in stig profile (Miha Purg <miha.purg@canonical.com>)
 - Fix and modify UBTU-20-010463 (no_empty_passwords) (Miha Purg
<miha.purg@canonical.com>)
 - Update pcidss reference for rhel8 profile stability test (Marcus Burghardt
<maburgha@redhat.com>)
 - Exclude rpm_verify_permissions in pcidss profiles for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove old ubuntu versions from package_audit-audispd-plugins_installed
(Marcus Burghardt <maburgha@redhat.com>)
 - Exclude rule in pci-dss profile for rhel9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complement pcidss_4 requirement 10.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Apdate style of sudo_require_reauthentication (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix wording around remove merge commits in style guide (Matthew Burket
<mburket@redhat.com>)
 - Add PR title rule to the style guide (Matthew Burket <mburket@redhat.com>)
 - Override the tests for audit_rules_privileged_commands_kmod (Matthew Burket
<mburket@redhat.com>)
 - Enable remediations for audit_rules_privileged_commands_kmod on all platforms
(Matthew Burket <mburket@redhat.com>)
 - Add some more comments for Ansible lint (Matthew Burket <mburket@redhat.com>)
 - Update Ansible Lint Config (Matthew Burket <mburket@redhat.com>)
 - Per the style guide make the prodtype now required in JSON schema. (Matthew
Burket <mburket@redhat.com>)
 - Bump OL7 STIG version to V2R13 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Bump OL8 STIG version to V1R8 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add test to sudo_require_reauthentication (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix edge case in sudo_require_reauthentication (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update DISA STIG for SLES 12 to V2 R12 (Christian Hagenest
<christian.hagenest@suse.com>)
 - Change to multi_platform_ubuntu (Miha Purg <miha.purg@canonical.com>)
 - Add ubuntu product to audit_rules_kernel_odule_loading_delete tests (Miha
Purg <miha.purg@canonical.com>)
 - Include rhv4 in prodtype for ntpd_specify_remote_server (Marcus Burghardt
<maburgha@redhat.com>)
 - Update grub2_mitigation_argument (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Include ol8 in prodtype for ntpd_specify_remote_server (Marcus Burghardt
<maburgha@redhat.com>)
 - Include ol8 in prodtype for service_ntpd_enabled (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rhcos4 in prodtype for ntpd_specify_remote_server (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rhel9 in prodtype for directory_access_var_log_audit (Marcus
Burghardt <maburgha@redhat.com>)
 - Update pcidss reference for rhel8 profile stability test (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rhel8 in prodtype for ntpd_specify_remote_server (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rhel8 in prodtype for service_ntpd_enabled (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rhel cces in ntpd_specify_multiple_servers (Marcus Burghardt
<maburgha@redhat.com>)
 - Define prodtype for ntpd_specify_remote_server (Marcus Burghardt
<maburgha@redhat.com>)
 - Define prodtype for ntpd_specify_multiple_servers (Marcus Burghardt
<maburgha@redhat.com>)
 - Define prodtype for NTP service rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Define prodtype for set_loopback_traffic (Marcus Burghardt
<maburgha@redhat.com>)
 - Define prodtype for package_audit-audispd-plugins_installed (Marcus Burghardt
<maburgha@redhat.com>)
 - Define prodtype for set_ipv6_loopback_traffic (Marcus Burghardt
<maburgha@redhat.com>)
 - Add log option to stcript ./build_product (Jan Rodak <hony.com@seznam.cz>)
 - fix kernel_config_security_writable_hooks rule (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - fix kernel_config_security_dmesg_restrict rule (Alexandre Skrzyniarz
<alexandre.skrzyniarz@laposte.net>)
 - Add awk support in sle15 containers so can run tests involving awk processing
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix accounts_set_post_pw_existing awk expression (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix name for stig_srg_mapping_test (Matthew Burket <mburket@redhat.com>)
 - Add alternatives to mandatory keys (Watson Sato <wsato@redhat.com>)
 - Update PCI-DSS profile for RHEL7 (Marcus Burghardt <maburgha@redhat.com>)
 - Update PCI-DSS profile for RHEL8 (Marcus Burghardt <maburgha@redhat.com>)
 - Update PCI-DSS profile for RHEL9 (Marcus Burghardt <maburgha@redhat.com>)
 - Add docs for tests/stig_srg_mapping.py (Matthew Burket <mburket@redhat.com>)
 - Add SRG Mapping test to ctest (Matthew Burket <mburket@redhat.com>)
 - Add test to ensure that rules in a STIG profile have an SRG reference
(Matthew Burket <mburket@redhat.com>)
 - Make sure required step is not skipped (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix code climate issues in no_new_global_applicable_rules.py (Matthew Burket
<mburket@redhat.com>)
 - Clean up and add types to no_new_global_applicable_rules.py (Matthew Burket
<mburket@redhat.com>)
 - Add forgotten patch for  custom timesyncd configuration files directory is
setup for test environment (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Define prodtype for directory_access_var_log_audit (Marcus Burghardt
<maburgha@redhat.com>)
 - Include related_rule for pcidss_4 requirement 10.6.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update pcidss_4 requirement 10.6.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Complement pcidss_4 requirement 10.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update pcidss_4 requirement 10.2.1.4 (Marcus Burghardt <maburgha@redhat.com>)
 - Remove duplicated rule in pcidss_4 10.6.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complement pcidss_4 requirement 10.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve pcidss_4 requirement 10.2.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complement pcidss_4 requirement 10.7.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable PCI-DSS in test-farm tests (Marcus Burghardt <maburgha@redhat.com>)
 - Add SRG id to file_owner_grub2_cfg for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Remove new line (Jan Rodak <hony.com@seznam.cz>)
 - Enable debug loging in CMAKE (Jan Rodak <hony.com@seznam.cz>)
 - Add docs for `utils/no_new_global_applicable_rules.py` (Matthew Burket
<mburket@redhat.com>)
 - Make prodtype required on all new rules in the style guide (Matthew Burket
<mburket@redhat.com>)
 - Drop service_timesyncd_configured from CIS SLE profile (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix ansible SLES cis remediations in check mode (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Make sure custom timesyncd configuration files directory is setup for test
environment (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Drop superfluous condition (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix by mistake overwritten comment (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Remove smart-quotes in pcidss_4.yml (Marcus Burghardt <maburgha@redhat.com>)
 - Update status of parent pcidss_4 requirements (Marcus Burghardt
<maburgha@redhat.com>)
 - Complement few pcidss_4 requirement 6.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Move dconf_db_up_to_date rule in pcidss_4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Add missing SLE15 CCE id for package_libselinux_installed rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Include rhv4 in no_password_auth_for_systemaccounts (Marcus Burghardt
<maburgha@redhat.com>)
 - Complement few pcidss_4 requirements (Marcus Burghardt <maburgha@redhat.com>)
 - Include prodtype in rules without SLE cce (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix typo and improved wording (Marcus Burghardt <maburgha@redhat.com>)
 - Complement pcidss_4 requirement 8.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Quote pcidss_4 ids that might be seen as float (Marcus Burghardt
<maburgha@redhat.com>)
 - Complement pcidss_4 requirement 3.3.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.2.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.2.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.1.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A3.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A2.1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A2.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A2.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A1.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A1.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A1.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A1.1.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A1.1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A1.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement A1.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.10.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.10.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.10.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.10.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.10.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.10.1 and 12.10.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.8.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.8.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.8.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.8.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.8.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.3.4. (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.3.3. (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.3.2. (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.1.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 12.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.5.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.5.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 11.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include option in var_password_pam_tally2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.7.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.7.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.7.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.6.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.6.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.6.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.5.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.4.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.4.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.3.1 and 10.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix small indentation issue in 10.2.1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 10.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix typo in pcidss_4 reference in 3 rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.4.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.4.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.4.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.4.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.4.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.4.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 9.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix typo in description key of 8.4.2 (Marcus Burghardt <maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.6.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.6.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.6.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.11 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.10 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 8.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.2.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.2.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 7.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.5.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.5.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.5.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.5.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.5.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.5.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.4.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.4.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 6.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.4.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.3.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.2 and 5.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 5.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 4.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 4.2.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 4.2.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 4.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 4.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.7.8 and 3.7.9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include pcidss_4 missing requirement 3.7.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.7.1 to 3.7.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.6.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.6.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.6.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.5.1.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.5.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.5.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.2.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.2.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.2.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.5.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Change 1.4.2 and 1.4.3 from automated to partial (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.4.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.4.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.4.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.4.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.4.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.3.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.3.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.3.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.2.8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.2.7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.2.6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include pcidss_4 missing requirement 1.2.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.2.4 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.2.3 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.2.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.2.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.1.2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Review and update pcidss_4 requirement 1.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update pcidss_4 control file header (Marcus Burghardt <maburgha@redhat.com>)
 - Improve stability of timesyncd based remediation (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Reformat combine_ovals.py with black tool (Jan Rodak <hony.com@seznam.cz>)
 - Fix comparation of object in python2 (Jan Rodak <hony.com@seznam.cz>)
 - Modify tests to use the new OVAL bulder (Jan Rodak <hony.com@seznam.cz>)
 - Modify combine_ovals.py to use the new OVAL bulder (Jan Rodak
<hony.com@seznam.cz>)
 - Modify the OVAL builder to use the OVAL object model (Jan Rodak
<hony.com@seznam.cz>)
 - Fix CI job after Fedora 39 release (Jan Černý <jcerny@redhat.com>)
 - Modification of ansible part and test files, 2 additional tests added
(rchikov <rumen.chikov@suse.com>)
 - Add new script to ensure that no new rules don't have a prodtype (Matthew
Burket <mburket@redhat.com>)
 - Update the RHEL8 STIG profile stability data (Simon THOBY
<git@nightmared.fr>)
 - Fix multiple STIG IDs for RHEL8 (THOBY Simon <Simon.THOBY@viveris.fr>)
 - Switch set_firewalld_default_zone to a 'lineinfile' template (Simon THOBY
<git@nightmared.fr>)
 - Add a warning to rule service_rngd_enabled (Jan Černý <jcerny@redhat.com>)
 - Extend OVAL filters to exclude dracut temp files (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenario for dracut temp files (Marcus Burghardt
<maburgha@redhat.com>)
 - Minor update to remove extra empty line (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenario for extra rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Changes into template sebool - bash part (rchikov <rumen.chikov@suse.com>)
 - Changes into template sebool - ansible part (rchikov <rumen.chikov@suse.com>)
 - remove duplicated multi_platform_sle in bash.template (Whidix
<31294015+Whidix@users.noreply.github.com>)
 - Remove warning from kubelet rule. (Thomas Montague
<montague.thomas@gmail.com>)
 - Add var_networkmanager_dns_mode to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Restore CRONTAB and CRONDIRS variables needed for non-SLE solution (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Additional changes into ansible part (rchikov <rumen.chikov@suse.com>)
 - Fix docs for utils.add_kubernetes_rule (Matthew Burket <mburket@redhat.com>)
 - Add Stabilization phase document reference to Release process doc (Milan
Lysonek <mlysonek@redhat.com>)
 - Add stabilization phase description to developers guide (Milan Lysonek
<mlysonek@redhat.com>)
 - Add optional product argument (Jan Rodak <hony.com@seznam.cz>)
 - Add tests (Jan Rodak <hony.com@seznam.cz>)
 - Add validation of referenced OVAL components (Jan Rodak <hony.com@seznam.cz>)
 - Use GITHUB_SHA instead (Thomas Montague <montague.thomas@gmail.com>)
 - Use recommended Github reference name for image tag. (Thomas Montague
<montague.thomas@gmail.com>)
 - Move jqfilter parameter to common parser (Watson Sato <wsato@redhat.com>)
 - Update RHEL 9 STIG IDs based on feedback (Matthew Burket
<mburket@redhat.com>)
 - remove sle15 from package_samba_common_installed (Whidix
<31294015+Whidix@users.noreply.github.com>)
 - Rename script to add_kuberentes_rule.py (Watson Sato <wsato@redhat.com>)
 - Add support for rules with jqfilters (Watson Sato <wsato@redhat.com>)
 - Create rules in a more yaml friendly approach (Watson Sato
<wsato@redhat.com>)
 - Remove references to CIS/STIG benchmarks, since Debian 12 has not been
released. (Paul Rensing <prensing@cimetrics.com>)
 - Fix rsyslog file test - use Jinja variable for group name (Paul Rensing
<prensing@cimetrics.com>)
 - Fix test of gshadow - should fix most Debian versions (Paul Rensing
<prensing@cimetrics.com>)
 - Some templates which need Debian12 listed (Paul Rensing
<prensing@cimetrics.com>)
 - Copy Debian11 product to Debian12 (Paul Rensing <prensing@cimetrics.com>)
 - Fix rule mapping for RHEL-09-213075 (Matthew Burket <mburket@redhat.com>)
 - Fix rule mapping for RHEL-09-271030 and RHEL-09-271035 (Matthew Burket
<mburket@redhat.com>)
 - Update rule mapping for RHEL-09-654180 (Matthew Burket <mburket@redhat.com>)
 - Add aide_scan_notification to RHEL-09-651015 (Matthew Burket
<mburket@redhat.com>)
 - Corrections for rsyslog_logfiles_attributes PR #2 (Miha Purg
<miha.purg@canonical.com>)
 - Add RHEL 9 regex for var_accounts_authorized_local_users_regex (Matthew
Burket <mburket@redhat.com>)
 - Fix formatting in the RHEL 9 STIG Control File (Matthew Burket
<mburket@redhat.com>)
 - Ensure RHEL 9 STIG version is in all right places (Matthew Burket
<mburket@redhat.com>)
 - Added missing variables to ubuntu profiles (Miha Purg
<miha.purg@canonical.com>)
 - Corrections for rsyslog_logfiles_attributes PR (Miha Purg
<miha.purg@canonical.com>)
 - Modified ensure_rsyslog_log_file_conf OVAL to allow user/groupnames (Miha
Purg <miha.purg@canonical.com>)
 - Fix for rsyslog_logfiles_attributes remediation for ubuntu (Miha Purg
<miha.purg@canonical.com>)
 - Added ubuntu to tests for rule 'rsyslog_logfiles_attributes_modify' (Miha
Purg <miha.purg@canonical.com>)
 - Don't hard code the wheel group in selinux_context_elevation_for_sudo
(Matthew Burket <mburket@redhat.com>)
 - Move selinux_context_elevation_for_sudo tests to all platforms (Matthew
Burket <mburket@redhat.com>)
 - Update RHEL7 STIG profiles to V3R13. (Matthew Burket <mburket@redhat.com>)
 - Move RHEL 9 STIG Refchecker back to the macro (Matthew Burket
<mburket@redhat.com>)
 - Update on RHEL 9 STIG based on code review (Matthew Burket
<mburket@redhat.com>)
 - Add Unit tests (Jan Rodak <hony.com@seznam.cz>)
 - Fix missing tag of affected element child (Jan Rodak <hony.com@seznam.cz>)
 - Inherit features from OVAL container to OVAL document (Jan Rodak
<hony.com@seznam.cz>)
 - Create OVAL shorthand class (Jan Rodak <hony.com@seznam.cz>)
 - Create OVAL container class (Jan Rodak <hony.com@seznam.cz>)
 - Create class for stroing references of OVAL definitions (Jan Rodak
<hony.com@seznam.cz>)
 - Update tests (Jan Rodak <hony.com@seznam.cz>)
 - Add logging and fix imports (Jan Rodak <hony.com@seznam.cz>)
 - Update info about generator in genereted OVAL document (Jan Rodak
<hony.com@seznam.cz>)
 - Add methods for obtaining references (Jan Rodak <hony.com@seznam.cz>)
 - Add a method to the OVAL definition that checks if the Affected in Metadata
field is not empty (Jan Rodak <hony.com@seznam.cz>)
 - Add a method to the OVAL Definition that checks if it is applicable to the
product (Jan Rodak <hony.com@seznam.cz>)
 - update link to ISO27001:2013 standard (Vojtech Polasek <vpolasek@redhat.com>)
 - update links to RHEL 8 and 9 chrony documentation (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update RHEL 7 DISA SCAP content to V3R13 (Matthew Burket
<mburket@redhat.com>)
 - Update RHEL 7 STIG content to V3R13 (Matthew Burket <mburket@redhat.com>)
 - Update RHEL 8 STIG profiles (Matthew Burket <mburket@redhat.com>)
 - Update RHEL 8 DISA SCAP Content (Matthew Burket <mburket@redhat.com>)
 - Update RHEL 8 STIG Manual (Matthew Burket <mburket@redhat.com>)
 - Pull service_rngd_enabled from the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Move RHEL-09-672030 to configure_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Pull rpm_verify_hashes from RHEL-09-214030 (Matthew Burket
<mburket@redhat.com>)
 - Add a better Error Message For Undefined Identifier Types (Jan Černý
<jcerny@redhat.com>)
 - Fix rpm python package SLE15 Automatus docker file (Matthew Burket
<mburket@redhat.com>)
 - Adopt gpasswd command for Bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove warning about missing remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix test scenarios for fapolicy_default_deny (Marcus Burghardt
<maburgha@redhat.com>)
 - Create Ansible remediation for fapolicy_default_deny (Marcus Burghardt
<maburgha@redhat.com>)
 - Create bash remediation for fapolicy_default_deny (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix Codeclimate issues (Matthew Burket <mburket@redhat.com>)
 - Remove add_stigid_from_csv (Matthew Burket <mburket@redhat.com>)
 - Updated rule selection for RHEL-09-271090 (Matthew Burket
<mburket@redhat.com>)
 - Adjust rule for RHEL-09-253075 (Matthew Burket <mburket@redhat.com>)
 - Add rule for RHEL-09-252040 (Matthew Burket <mburket@redhat.com>)
 - Add rule for RHEL-09-232235 (Matthew Burket <mburket@redhat.com>)
 - Add rule for RHEL-09-232230 (Matthew Burket <mburket@redhat.com>)
 - Add rule for RHEL-09-252020 (Matthew Burket <mburket@redhat.com>)
 - Adjust rule for RHEL-09-213040 (Matthew Burket <mburket@redhat.com>)
 - Adjust rule for RHEL-09-212040 (Matthew Burket <mburket@redhat.com>)
 - Add rule for RHEL-09-211025 (Matthew Burket <mburket@redhat.com>)
 - Add more rules for RHEL-09-654025 (Matthew Burket <mburket@redhat.com>)
 - Add more rules for RHEL-09-412020 (Matthew Burket <mburket@redhat.com>)
 - Add more rules for RHEL-09-654015 (Matthew Burket <mburket@redhat.com>)
 - Add more rules for RHEL-09-654020 (Matthew Burket <mburket@redhat.com>)
 - Add rule for RHEL-09-654080 (Matthew Burket <mburket@redhat.com>)
 - Add more rules for RHEL-09-654070 (Matthew Burket <mburket@redhat.com>)
 - Add more rules for RHEL-09-654065 (Matthew Burket <mburket@redhat.com>)
 - Exclude enable_authselect from the refcheck on RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update controlrefcheck script for STIGIDs (Matthew Burket
<mburket@redhat.com>)
 - Add STIGID to cro file_owner_* rules (Matthew Burket <mburket@redhat.com>)
 - Add second RHEL 9 STIG for configure_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Fix mix up with STIG IDs for RHEL 9 on /var/log mount opts (Matthew Burket
<mburket@redhat.com>)
 - Fix STIGID for package_s-nail_installed in RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 9 STIG manual (Matthew Burket <mburket@redhat.com>)
 - Add STIG ID to file_audit_tools_group_ownership (Matthew Burket
<mburket@redhat.com>)
 - Fix rule assignment for RHEL-09-231150 (Matthew Burket <mburket@redhat.com>)
 - Ensure that spacing is correct for all controls in RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add rules for RHEL-09-232230 in the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add rules for RHEL-09-232225 in RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add package_s-nail_installed to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix var_auditd_max_log_file_action (Matthew Burket <mburket@redhat.com>)
 - Add var_sssd_certificate_verification_digest_function for RHEL 9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Add var_accounts_maximum_age_login_defs vars for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix var_accounts_authorized_local_users_regex (Matthew Burket
<mburket@redhat.com>)
 - Add var for chronyd_or_ntpd_set_maxpoll to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix Needed rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update RHEL 9 STIG FIPS rule (Matthew Burket <mburket@redhat.com>)
 - Add enable_authselect rule to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add password vars for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Add failock vars for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Add sshd_idle_timeout_value var to RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Add SELinux vars for the RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Add PAM variables (Matthew Burket <mburket@redhat.com>)
 - Add umask variable (Matthew Burket <mburket@redhat.com>)
 - Add rekey variables (Matthew Burket <mburket@redhat.com>)
 - Add tests for RHEL 9 STIG control file (Matthew Burket <mburket@redhat.com>)
 - Format add variables for the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 9 STIGID for service_debug-shell_disabled (Matthew Burket
<mburket@redhat.com>)
 - Fix RHEL 9 STIG ID for RHEL-09-215060 (Matthew Burket <mburket@redhat.com>)
 - Move the RHEL 9 STIG to the RHEL 9 STIG Control File (Matthew Burket
<mburket@redhat.com>)
 - Add the RHEL 9 STIG Control File (Matthew Burket <mburket@redhat.com>)
 - Add RHEL 9 STIG IDs (Matthew Burket <mburket@redhat.com>)
 - Improve the import script. (Matthew Burket <mburket@redhat.com>)
 - First draft of utils/add_stigid_from_csv.py (Matthew Burket
<mburket@redhat.com>)
 - Also remove groupmems from test scenario script (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove groupmems from Bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Fixed broken bash remediation for 'set_nftables_loopback_traffic' (Miha Purg
<miha.purg@canonical.com>)
 - Minor fix for pam_faillock regex on Ubuntu (5.4.2) (Miha Purg
<miha.purg@canonical.com>)
 - Add more information on the SLE15 approach to the aidecheck notifications
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix bash remediation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add SLE15 specific remediation for aide check notification (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add checks that allow notification to be implemented via systemd unit
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Make sure to use aide_periodic_checking_systemd_timer for sle15 platform
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update OVAL in sshd_use_approved_kex_ordered_stig (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix typos (Jan Černý <jcerny@redhat.com>)
 - Corrections in bash/ansible remedition of the rule
audit_rules_privileged_commands_kmod (rchikov <rumen.chikov@suse.com>)
 - Avoid duplicate loading of component files (Jan Černý <jcerny@redhat.com>)
 - Review use_pam_wheel_group_for_su description (Marcus Burghardt
<maburgha@redhat.com>)
 - Rephrase the rule description and include warning (Marcus Burghardt
<maburgha@redhat.com>)
 - Include fixtext section (Marcus Burghardt <maburgha@redhat.com>)
 - Improve Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Simplify bash remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Simplify test scenario scripts (Marcus Burghardt <maburgha@redhat.com>)
 - Using an empty value for group has no effect (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactored OVAL to make it simpler and more efficient (Marcus Burghardt
<maburgha@redhat.com>)
 - Updates about style and comments on OVAL (Marcus Burghardt
<maburgha@redhat.com>)
 - update sle15 test data (svet-se <svetlin.boychev@suse.com>)
 - remove unused code (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Add cron.deny owner rules to srg_gpos control (Matthew Burket
<mburket@redhat.com>)
 - Add new rule file_groupowner_cron_deny (Matthew Burket <mburket@redhat.com>)
 - Add new rule file_owner_cron_deny (Matthew Burket <mburket@redhat.com>)
 - Minor updates in rule description (Marcus Burghardt <maburgha@redhat.com>)
 - Exlcude timer_logrotate_enabled from the RHEL8 and RHEL9 anssi profiles
(Matthew Burket <mburket@redhat.com>)
 - Add package requirement for auditctl tests (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix rule title for networkmanager_dns_mode (Matthew Burket
<mburket@redhat.com>)
 - nftables: sce: Same principle of commit 3d87ab8 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix Ansible variable name in networkmanager_dns_mode (Matthew Burket
<mburket@redhat.com>)
 - Add a platform for timer_logrotate_enabled on RHEL products (Matthew Burket
<mburket@redhat.com>)
 - Add timer_logrotate_enabled back to RHEL 7 and RHEL 8 (Matthew Burket
<mburket@redhat.com>)
 - remove some unnecessary imports (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Fix privileged commands not concating gathered lists (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - install python-rpm package so to be able to run some ansible tests (svet-se
<svetlin.boychev@suse.com>)
 - override crontabs package (svet-se <svetlin.boychev@suse.com>)
 - Created test cases covering /etc/audit/rules.d/privileged.rules and
/etc/audit/audit.rules (rchikov <rumen.chikov@suse.com>)
 - Add how to run unit tests via ctest (Jan Rodak <hony.com@seznam.cz>)
 - Add Documentation about tox unit tests (Jan Rodak <hony.com@seznam.cz>)
 - Disable flake8 (Jan Rodak <hony.com@seznam.cz>)
 - A fix into ansible part of the rule audit_rules_suid_privilege_function
(rchikov <rumen.chikov@suse.com>)
 - Bump version for 0.1.71 (Matthew Burket <mburket@redhat.com>)
 - fix sle remediation to unmask logrotate timer service (svet-se
<svetlin.boychev@suse.com>)
 - Select the var_accounts_passwords_pam_faillock_dir=run in RHEL7 profiles.
(Gabriel Becker <ggasparb@redhat.com>)
 - A change in ansible remediation part (rchikov <rumen.chikov@suse.com>)
 - Add merge group trigger to required jobs (Matthew Burket
<mburket@redhat.com>)
 - Ensure that NetworkManger is relaoded after networkmanager_dns_mode (Matthew
Burket <mburket@redhat.com>)
 - Add var and profiles to the editorconfig file (Matthew Burket
<mburket@redhat.com>)
 - Add networkmanager_dns_mode to SRG GPOS Control (Matthew Burket
<mburket@redhat.com>)
 - Add new rule networkmanager_dns_mode (Matthew Burket <mburket@redhat.com>)
 - Fix add_reference_elements sad path (Matthew Burket <mburket@redhat.com>)
 - Update Contributors for v0.1.70 (Matthew Burket <mburket@redhat.com>)
 - Small changes in bash and ansible fixes of the rule aide_build_database
(rchikov <rumen.chikov@suse.com>)
 - Add JSON schmea for controls (Matthew Burket <mburket@redhat.com>)
 - Add JSON schema for variables (Matthew Burket <mburket@redhat.com>)
 - Add version metadata to the OCP PCI-DSS profile (Lance Bragstad
<lbragsta@redhat.com>)
 - Version FedRAMP high and moderate profiles for OpenShift (Lance Bragstad
<lbragsta@redhat.com>)
 - Add version for OCP STIG (Lance Bragstad <lbragsta@redhat.com>)
 - Add version for OCP CIS (Lance Bragstad <lbragsta@redhat.com>)
 - Update test on sshd_lineinfile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update ansible in sshd_lineinfile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add ansible remediation for root group owner of audit for UBTU-20-010124
(Dexter Le <dexter.le@sap.com>)
 - Use shared remediations for non-template applicable OS's (Dexter Le
<dexter.le@sap.com>)
 - Update Mailmap (Matthew Burket <mburket@redhat.com>)
 - Update ansible in sshd_use_approved_kex_ordered_stig (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update Packit (Matthew Burket <mburket@redhat.com>)
 - Skipp tests that behave strangely in python2 (Jan Rodak <hony.com@seznam.cz>)
 - Add unit test execution with coverage for ssg module and flake8 for project
(Jan Rodak <hony.com@seznam.cz>)
 - Fix datetime for older Python (Matthew Burket <mburket@redhat.com>)
 - Remove old build documentation before build (Jan Rodak <hony.com@seznam.cz>)
 - Remove a test that doesn't test anything (Jan Rodak <hony.com@seznam.cz>)
 - Ignore coverage files (Jan Rodak <hony.com@seznam.cz>)
 - [utils/create_scap_delta_tailoring.py] Fix case where the profile was not
found (Matthew Burket <mburket@redhat.com>)
 - str are not bools (Matthew Burket <mburket@redhat.com>)
 - Move to datetime.datetime.now(datetime.UTC) (Matthew Burket
<mburket@redhat.com>)
 - Add package_s-nail_installed to SRG GPOS control (Matthew Burket
<mburket@redhat.com>)
 - Add rule package_s-nail_installed (Matthew Burket <mburket@redhat.com>)
 - Add capability to create node rules (Watson Sato <wsato@redhat.com>)
 - Add libvirt-dev to read the docs apt packages (Matthew Burket
<mburket@redhat.com>)
 - fix lint errors (Vojtech Polasek <vpolasek@redhat.com>)
 - Disable sysctl_kernel_yama_ptrace_scope rule for sle15 (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add SELinux as platform (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Resolve Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Add a unit test (Jan Černý <jcerny@redhat.com>)
 - Fail build if controls contain invalid rule IDs (Jan Černý
<jcerny@redhat.com>)
 - Fix broken profile resolution (Jan Černý <jcerny@redhat.com>)
 - Add accounts_users_own_home_directories to Ubuntu 22.04 (Jan Černý
<jcerny@redhat.com>)
 - Add missing prodtypes (Jan Černý <jcerny@redhat.com>)
 - Fix broken autoprodtyper tool (Jan Černý <jcerny@redhat.com>)
 - Fix invalid rule ID (Jan Černý <jcerny@redhat.com>)
 - Add sysctl_kernel_exec_shield to OL 9 (Jan Černý <jcerny@redhat.com>)
 - Add kerberos_disable_no_keytab to OL 9 (Jan Černý <jcerny@redhat.com>)
 - Add package_python3-abrt-addon_removed to OL 8 (Jan Černý
<jcerny@redhat.com>)
 - Remove audit_rules_privileged_commands_pt_chown from Fedora OSPP (Jan Černý
<jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Remove rules from SLE15 standard profile (Jan Černý <jcerny@redhat.com>)
 - Add missing prodtypes to rule package_iptables_installed (Jan Černý
<jcerny@redhat.com>)
 - Remove locking_out_password_attempts from profiles (Jan Černý
<jcerny@redhat.com>)
 - Remove rule service_zebra_disabled from RHEL 9 HIPAA profile (Jan Černý
<jcerny@redhat.com>)
 - Remove service_rexec_disabled from RHEL 9 HIPAA profile (Jan Černý
<jcerny@redhat.com>)
 - Remove rule service_zebra_disabled from RHEL 9 E8 profile (Jan Černý
<jcerny@redhat.com>)
 - Fix rule ID (Jan Černý <jcerny@redhat.com>)
 - ubuntu2004: cis_level1_server: Add missing nftables_base_chain variables
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add missing nftables_base_chain variables
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - set_nftables_loopback_traffic: bash: Improve bash and store ruleset (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - nftables_rules_permanent: Add Ubuntu specific bash and OVAL and drop SCE
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - nftables: sce: Improve scripts to avoid text being recognized (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Build OCP STIG profiles by default (Watson Sato <wsato@redhat.com>)
 - Update developer page with tox method for building sphinx docs (Stephen L
Arnold <sarnold@vctlabs.com>)
 - Move master to use merge groups (Matthew Burket <mburket@redhat.com>)
 - Make new functions more readable (Marcus Burghardt <maburgha@redhat.com>)
 - Rename a variable (Jan Černý <jcerny@redhat.com>)
 - Convert derivative name to original product ID (Jan Černý
<jcerny@redhat.com>)
 - Refactor: Extract function (Jan Černý <jcerny@redhat.com>)
 - Export controls content metrics to Prometheus (Marcus Burghardt
<maburgha@redhat.com>)
 - Update package_audit-libs_installed rule.yml (Whidix
<31294015+Whidix@users.noreply.github.com>)
 - Extend controleval.py to show rules and variables (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rules list for each control (Marcus Burghardt <maburgha@redhat.com>)
 - remove forgotten no longer used function (Vojtech Polasek
<vpolasek@redhat.com>)
 - rework applicability check of test scenarios (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add shorthand with variable and state (Jan Rodak <hony.com@seznam.cz>)
 - Fix attrubite with namespaces (Jan Rodak <hony.com@seznam.cz>)
 - Fix misleading code (Jan Rodak <hony.com@seznam.cz>)
 - Separate tag and namespace (Jan Rodak <hony.com@seznam.cz>)
 - Move constant from ssg/oval_object_model/general.py to ssg/constants.py (Jan
Rodak <hony.com@seznam.cz>)
 - Fix Code climate and python2 support (Jan Rodak <hony.com@seznam.cz>)
 - Create tests for load and store of an OVAL document (Jan Rodak
<hony.com@seznam.cz>)
 - Rename OVALEndPoint to OVAL Entity (Jan Rodak <hony.com@seznam.cz>)
 - Add object of OVAL document (Jan Rodak <hony.com@seznam.cz>)
 - Add object reprezentation of OVAL entities (Jan Rodak <hony.com@seznam.cz>)
 - Add general utilities for OVAL object model (Jan Rodak <hony.com@seznam.cz>)
 - Unify file saving (Jan Černý <jcerny@redhat.com>)
 - Remove unused logging (Jan Černý <jcerny@redhat.com>)
 - accounts_umask_etc_bashrc: ansible: Fix bashrc path for Ubuntu (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Enable ansible and bash remediation for sssd for UBTU-20-010441 (Dexter Le
<dexter.le@sap.com>)
 - Add Ubuntu ansible remediation and shorten shared ansible for UBTU-20-010450
(Dexter Le <dexter.le@sap.com>)
 - Change how example ROLE_LIST are formatted (Watson Sato <wsato@redhat.com>)
 - Remove dnf5 from Rawhide job (Jan Černý <jcerny@redhat.com>)
 - Fix OrderedDict definition (Jan Černý <jcerny@redhat.com>)
 - Bump paambaati/codeclimate-action from 4.0.0 to 5.0.0 (dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>)
 - Fix Ansible Tasks order (Jan Černý <jcerny@redhat.com>)
 - Remove the rule accounts_passwords_pam_faillock_interval from SLE profiles
(rchikov <rumen.chikov@suse.com>)
 - Fix path for aide to /etc/aide/aide.conf for UBTU-20-010205 (Dexter Le
<dexter.le@sap.com>)
 - [utils/create-stig-overlay.py] Marked the output flag as required (Matthew
Burket <mburket@redhat.com>)
 - [utils/create-stig-overlay.py] raw_input -> input (Matthew Burket
<mburket@redhat.com>)
 - Use fromJSON function to expand rules from CTF (Gabriel Becker
<ggasparb@redhat.com>)
 - Simplify ansible remediation of auditd_name_format. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ansible remediation style. (Gabriel Becker <ggasparb@redhat.com>)
 - Make sure value none is double quoted in variables. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add warning to auditd_name_format. (Gabriel Becker <ggasparb@redhat.com>)
 - Select STIG variable for auditd_name_format in STIG profiles. (Gabriel Becker
<ggasparb@redhat.com>)
 - Make auditd_name_format accept multiple valid values. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add variable support to configure_auditd_data_retention rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - fix ssh-keysign path for UBTU-20-010141 (Dexter Le <dexter.le@sap.com>)
 - Add UBTU-20-010463 to ensure system does not allow accounts configured with
blank or null pass (Dexter Le <dexter.le@sap.com>)
 - Add dependabot (Matthew Burket <mburket@redhat.com>)
 - Revert actions/checkout to v3 on CentOS 7 (Matthew Burket
<mburket@redhat.com>)
 - Fix UBTU-20-010179 to use proper parameters and key (Dexter Le
<dexter.le@sap.com>)
 - Enable ansible remediation for MACs SSH UBTU-20-010043 (Dexter Le
<dexter.le@sap.com>)
 - Add UBTU-20-010461 to ensure kernel module usb-storage is blacklisted and
disabled (Dexter Le <dexter.le@sap.com>)
 - Refactor logic and fix ocil for UBTU-20-010033 (Dexter Le
<dexter.le@sap.com>)
 - Fix ansible for accounts_umask_interactive_users (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix UBTU-20-10450 STIG (Dexter Le <dexter.le@sap.com>)
 - Update changelog to use new format (Matthew Burket <mburket@redhat.com>)
 - Update mikepenz/release-changelog-builder-action@v3 to v4 (Matthew Burket
<mburket@redhat.com>)
 - Update actions/checkout@v{2,3} to actions/checkout@v4 (Matthew Burket
<mburket@redhat.com>)
 - Update notiz-dev/github-action-json-property from 0.1.0 to 0.2.0 (Matthew
Burket <mburket@redhat.com>)
 - Update actions/upload-artifact from 2 to 3 (Matthew Burket
<mburket@redhat.com>)
 - Update JamesIves/github-pages-deploy-action from 4.3.3 to 4.4.3 (Matthew
Burket <mburket@redhat.com>)
 - Update geekyeggo/delete-artifact to v2 (Matthew Burket <mburket@redhat.com>)
 - Add support for xccdf_variable (Watson Sato <wsato@redhat.com>)
 - Fix Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Fix Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Fix Automatus traceback (Jan Černý <jcerny@redhat.com>)
 - Use var_accounts_passwords_pam_faillock_dir in audit_rules_login_events (Jan
Černý <jcerny@redhat.com>)
 - Add rules for GRUB2 permissions to standard profile (Matthew Burket
<mburket@redhat.com>)
 - Add file owner and group owner rules for auth files to standard (Matthew
Burket <mburket@redhat.com>)
 - Add gid_passwd_group_same to standard profile (Matthew Burket
<mburket@redhat.com>)
 - Add service_auditd_enabled to standard (Matthew Burket <mburket@redhat.com>)
 - Add file permission for /etc/{group,passwd,shadow} (Matthew Burket
<mburket@redhat.com>)
 - fix delete_module for UBTU-20-010181 (Dexter Le <dexter.le@sap.com>)
 - add sphinxcontrib-apidoc to docs build, test sphinx with tox file (Stephen L
Arnold <sarnold@vctlabs.com>)
 - Update bash for accounts_umask_etc_profile (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add test to accounts_umask_interactive_users (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix bash for accounts_umask_interactive_users (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Remove DRAFT wording for OpenShift STIG (Lance Bragstad
<lbragsta@redhat.com>)
 - api_server_encryption_provider_cipher rule.yml has bad jsonpath (Paul Bastide
<pbastide@redhat.com>)
 - Update Ubuntu 20.04 DISA Manual STIG to v1r9 (Dexter Le <dexter.le@sap.com>)
 - Replace shell command with find for chrony.conf files on UBTU-20-010435
(Dexter Le <dexter.le@sap.com>)
 - Add rsyslog ansible remediation for UBTU-20-010403 (Dexter Le
<dexter.le@sap.com>)
 - Add remediation and OVAL for UBTU-20-010297 (Dexter Le <dexter.le@sap.com>)
 - Fix path and add ansible remediation UBTU-20-010298 (Dexter Le
<dexter.le@sap.com>)
 - Updates based reviewer feedback in #11076 (Matthew Burket
<mburket@redhat.com>)
 - fix: jinja: remove unused macro bash_firefox_cfg_setting (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_pkg_conditional: use basic types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro ocil_firefox_config (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro fixtext_audit_rules_comman (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro
kubernetes_machine_config_file_with_required_value (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro
kubernetes_machineconfig_auditd_config_with_required_value (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro ansible_etc_profile_set (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro body_of_warning_about_dependent_rule (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro
bash_perform_audit_rules_privileged_commands_remediation (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro kernel_build_config_ocil (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro kernel_build_config_warning (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: join_list: use full type (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: create_system_accounts_list_object: param/type format (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: machine_volume_encrypted: extra } in ocil (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: openshift_cluster_setting/doc: type change (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: openshift_filtered_cluster_setting: typing (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: oval_argument_value_in_line_test: set value really optional (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: oval_line_in_file_state: change multi_value is boolean (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_unsuccessful_file_modification: use full type
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_dac_modification_chown: duplicate macro definition
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ocil_firewalld_*_access: either service or port+proto (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: describe_firewalld_prevent: rename and simplify (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: describe_firewalld_allow: split either service or proto (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: harden_ssh_client_crypto_policy: multi_value is boolean (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: remove unused macro bash_firefox_js_setting (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: audit_syscalls_rule: key is optional (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_set_config_file: escape_regex not used (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: jinja: ws cleanum in macro body (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: jinja macros: add/remove newlines (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: jinja macros: no 2 consecutive emtpy lines (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: style_guide: use python typing types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Fix excluded_files and recursive for UBTU-20-010416 (Dexter Le
<dexter.le@sap.com>)
 - Fix UBTU-20-010267 and deprecate STIGs (Dexter Le <dexter.le@sap.com>)
 - Deprecate UBTU-20-010180 (Dexter Le <dexter.le@sap.com>)
 - Remove override-true-all-profile-* tests (Matthew Burket
<mburket@redhat.com>)
 - Expand docs for STIG spreadsheets (Matthew Burket <mburket@redhat.com>)
 - Generate metrics file in build folder (Marcus Burghardt
<maburgha@redhat.com>)
 - Add UBTU-20-010044 to existing ansible remediation (Dexter Le
<dexter.le@sap.com>)
 - Fix UBTU-20-010449 ansible remediation to proper path and substitution
(Dexter Le <dexter.le@sap.com>)
 - Add UBTU-20-010401 to restrict kernel message buffer (Dexter Le
<dexter.le@sap.com>)
 - Add UBTU-20-010462 to lock accounts without passwords (Dexter Le
<dexter.le@sap.com>)
 - Add UBTU-20-010181 for generating audit record for unsuccessful attempts to
delete_module syscall (Dexter Le <dexter.le@sap.com>)
 - fix naming for UBTU-20-010430 (Dexter Le <dexter.le@sap.com>)
 - Ensure prometheus-client module is installed (Marcus Burghardt
<maburgha@redhat.com>)
 - Update generate_html_pages.sh to include policies metrics (Marcus Burghardt
<maburgha@redhat.com>)
 - Include task to generate policies metrics (Marcus Burghardt
<maburgha@redhat.com>)
 - sshd_use_approved_kex_ordered_stig: tests: Fix logic in correct_scrambled
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - sshd_use_approved_kex_ordered_stig: tests: Fix typo in correct_scrambled
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add UBTU-20-010045 for enforcing proper kex exchange algorithms (Dexter Le
<dexter.le@sap.com>)
 - sshd_use_approved_kex_ordered_stig: oval: Fix regex and improve comment
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Include conditional ctest for prometheus metrics (Marcus Burghardt
<maburgha@redhat.com>)
 - Minor comment update in requirements.txt (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove prometheus functions from controleval.py (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce the controleval_metrics.py (Marcus Burghardt <maburgha@redhat.com>)
 - Make the output to stdout as default (Marcus Burghardt <maburgha@redhat.com>)
 - Update requirements.txt for prometheus in controleval.py (Marcus Burghardt
<maburgha@redhat.com>)
 - Abbreviate controls_manager to ctrls_mgr (Marcus Burghardt
<maburgha@redhat.com>)
 - Minor type hints updates in new functions (Marcus Burghardt
<maburgha@redhat.com>)
 - Create functions to create prometheus registry (Marcus Burghardt
<maburgha@redhat.com>)
 - Create functions to collect prometheus metrics (Marcus Burghardt
<maburgha@redhat.com>)
 - Define new subcmd for Prometheus metrics (Marcus Burghardt
<maburgha@redhat.com>)
 - Simplify main function (Marcus Burghardt <maburgha@redhat.com>)
 - Fix minor typo (Marcus Burghardt <maburgha@redhat.com>)
 - sshd_use_strong_kex: Fix OVAL variable comment (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Include new options in var_accounts_minimum_age_login_defs (Marcus Burghardt
<maburgha@redhat.com>)
 - Include python3-pip in Ubuntu dependencies (Marcus Burghardt
<maburgha@redhat.com>)
 - Include warning about missing OVAL check (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove wrong OVAL check (Marcus Burghardt <maburgha@redhat.com>)
 - Fix Gate Test on Fedora Rawhide (Marcus Burghardt <maburgha@redhat.com>)
 - Ensure Python dependencies in Gate tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable lograte timer check on RHCOS4 (Watson Sato <wsato@redhat.com>)
 - Align bash and Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Simulate interaction for pkcs11-switch command (Marcus Burghardt
<maburgha@redhat.com>)
 - scap-security-guide: Add Poky support (Armin Kuster <akuster808@gmail.com>)
 - Use correct build_ds_container script (Watson Sato <wsato@redhat.com>)
 - Add SCAPVal to stabilize task (Matthew Burket <mburket@redhat.com>)
 - Fix Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Remove unused code (Jan Černý <jcerny@redhat.com>)
 - update link to English version of ANSSI guide (Vojtech Polasek
<vpolasek@redhat.com>)
 - Use lxml in the publication GitHub job (Jan Černý <jcerny@redhat.com>)
 - Add mount platform to mount_option_var_nosuid (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add a faster alternative for generating HTML guides (Jan Černý
<jcerny@redhat.com>)
 - Do not coment settings in /usr/lib/sysctl.d/* (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - add platforms to appropriate audit rules to exclude them from aarch64
architecture (Vojtech Polasek <vpolasek@redhat.com>)
 - Add a test for pcre2 compatibility (Jan Černý <jcerny@redhat.com>)
 - Resolve CodeClimate issue (Jan Černý <jcerny@redhat.com>)
 - Do not use textwrap module (Jan Černý <jcerny@redhat.com>)
 - Update platforms in test scenario scripts (Marcus Burghardt
<maburgha@redhat.com>)
 - Small alignment in jinja conditional syntax (Marcus Burghardt
<maburgha@redhat.com>)
 - Make control more flexible in remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Make verbiage in rule description more flexible (Marcus Burghardt
<maburgha@redhat.com>)
 - Use generate_profile_remediations.py during build (Jan Černý
<jcerny@redhat.com>)
 - Extend generate_bash_scripts.py to build Ansible (Jan Černý
<jcerny@redhat.com>)
 - Convert code to a class (Jan Černý <jcerny@redhat.com>)
 - Update tests for audit login events faillock (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Optimize KubeletConfig rules (Vincent Shen <wenshen@redhat.com>)
 - Aling Bash and Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Update Bash remediation to use better macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update regex reference for new sshd_config line (Marcus Burghardt
<maburgha@redhat.com>)
 - Change rule to use variable when auditing faillock (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Minor OVAL improvements in sshd_disable_compression (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve the remediation header (Jan Černý <jcerny@redhat.com>)
 - Add executable permission (Jan Černý <jcerny@redhat.com>)
 - iptables_ruleset_modifications: depend on iptables being installed (Craig
Andrews <candrews@integralblue.com>)
 - Resolve CodeClimate problems (Jan Černý <jcerny@redhat.com>)
 - Build profile bash scripts differently (Jan Černý <jcerny@redhat.com>)
 - Update no_legacy_plus_entries_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - Update no_legacy_plus_entries_etc_passwd (Matthew Burket
<mburket@redhat.com>)
 - Include rule warnings about possible corner cases (Marcus Burghardt
<maburgha@redhat.com>)
 - New Ansible macro to configure pam_lastlog.so (Marcus Burghardt
<maburgha@redhat.com>)
 - Update test scenario scripts in alignment to Bash changes (Marcus Burghardt
<maburgha@redhat.com>)
 - New Bash macro to configure pam_lastlog.so (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix Ansible macros used for PAM (Marcus Burghardt <maburgha@redhat.com>)
 - Make sure cis reference is interpreted as string (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update no_legacy_plus_entries_etc_group (Matthew Burket <mburket@redhat.com>)
 - Update enable_fips_mode to follow the style guide (Matthew Burket
<mburket@redhat.com>)
 - Change enable_fips_mode to multi_platform_all (Matthew Burket
<mburket@redhat.com>)
 - Add Ansible remediation for directory_group_ownership_var_log_audit (Matthew
Burket <mburket@redhat.com>)
 - Add missing CIS references for SLE platforms (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update control value (Marcus Burghardt <maburgha@redhat.com>)
 - Add product as parameter when building profile reports (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add new tests for auditd_configure_rules/directory_ownership_var_log_audit
(Matthew Burket <mburket@redhat.com>)
 - Update after_match value (Marcus Burghardt <maburgha@redhat.com>)
 - Remove extra blank lines from remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Add Ansible remediation for directory_ownership_var_log_audit (Matthew Burket
<mburket@redhat.com>)
 - Update CMakeLists.txt (akuster <akuster808@gmail.com>)
 - Update CMakeLists.txt (akuster <akuster808@gmail.com>)
 - Update CMakeLists.txt (akuster <akuster808@gmail.com>)
 - Grant packages permissions to k8s-content workflow (Watson Sato
<wsato@redhat.com>)
 - Allow the workflow to write (Watson Sato <wsato@redhat.com>)
 - Add tmux platform to tmux related rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - do not produce output when using grep command (Vojtech Polasek
<vpolasek@redhat.com>)
 - Assign RHEL-08-020332 to no_empty_passwords. (Gabriel Becker
<ggasparb@redhat.com>)
 - Assign RHEL-08-020014 to accounts_passwords_pam_faillock_unlock_time.
(Gabriel Becker <ggasparb@redhat.com>)
 - Assign RHEL-08-020018 to accounts_passwords_pam_faillock_silent. (Gabriel
Becker <ggasparb@redhat.com>)
 - Assign more STIG ids to accounts_passwords_pam_faillock_dir. (Gabriel Becker
<ggasparb@redhat.com>)
 - Restrict accounts_passwords_pam_faillock_audit to RHEL>=8.2. (Gabriel Becker
<ggasparb@redhat.com>)
 - Restrict accounts_passwords_pam_faillock_deny_root to RHEL>=8.2. (Gabriel
Becker <ggasparb@redhat.com>)
 - Assign RHEL-08-020028 to account_password_selinux_faillock_dir. (Gabriel
Becker <ggasparb@redhat.com>)
 - Assign RHEL8 STIG id to service_rngd_enabled. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update the STIG overlay creation to support multiple STIG ids per rule.
(Gabriel Becker <ggasparb@redhat.com>)
 - It's not possible to select the default selector. (Gabriel Becker
<ggasparb@redhat.com>)
 - Do not use default selector as it results in an OpenSCAP error. (Gabriel
Becker <ggasparb@redhat.com>)
 - Drop template section for rule in sle context (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix accounts_passwords_pam_tally2_unlock_time OVAL check (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/package_nftables_removed/rule.yml (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - add test scenario (Vojtech Polasek <vpolasek@redhat.com>)
 - improve regexp capturing mount point from fstab (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix ansible remediation of configure_ssh_crypto_policy. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improved indentation in the new macros (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update SCAPVAL docs (Matthew Burket <mburket@redhat.com>)
 - Improve Consistency of Headings in 5_tools_and_utilities.md (Matthew Burket
<mburket@redhat.com>)
 - Correct up-to-date in docs (Matthew Burket <mburket@redhat.com>)
 - Github -> GitHub in docs (Matthew Burket <mburket@redhat.com>)
 - s.a. to i.e. or e.g. in docs (Matthew Burket <mburket@redhat.com>)
 - add rules enabling audit to ANSSI control file (Vojtech Polasek
<vpolasek@redhat.com>)
 - add anssi references to rules (Vojtech Polasek <vpolasek@redhat.com>)
 - Implementation of the correction proposed (rchikov <rumen.chikov@suse.com>)
 - Update fixtext to represent correct file of disabled module. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix title variable expansion in ansible remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add a HTML link to XCCDF Values (Jan Černý <jcerny@redhat.com>)
 - Clean up some cis references that are in rules not used in such (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - no_empty_passwords: Remove cis@ubuntu2204 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add no_forward_files (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu: cis_level1_server: Fix CIS ID for mount_option_home_nosuid (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - pam_faillock: Fix issue in OVAL regex check for Ubuntu after improvement
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Update kernel_build_config templated scenarios to work in container env
(Matus Marhefka <mmarhefk@redhat.com>)
 - remove sebool_secure_mode_insmod from RHEL ANSSI high (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix platform limitation for all sle and error in shebang (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Remove "not available" message (Jan Černý <jcerny@redhat.com>)
 - Refine platform requirement from package to service for improved flexibility
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Reuse macro for service disabled checks (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add rule and template for service disabled cpe check (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Rework platform requirements to check for service firewalld disabled (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Express more accurate per package platform limitation for firewall rules
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Remove unused import (Jan Černý <jcerny@redhat.com>)
 - Add warning to network_configure_name_resolution (Jan Černý
<jcerny@redhat.com>)
 - remove rules not relevant to RHEL 9 from STIG profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add RHEL as platform in su pam wheel group remidiation (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Improve rendering controls to HTML (Jan Černý <jcerny@redhat.com>)
 - OCPBUGS-11696: Update encryption type to support 4.13 deployments (Lance
Bragstad <lbragsta@redhat.com>)
 - Fix kernel config name typo in rule kernel_config_slab_freelist_random (Matus
Marhefka <mmarhefk@redhat.com>)
 - Remove rule from OCP CIS v.1.4.0 (Watson Sato <wsato@redhat.com>)
 - Remove duplicate builds for GitHub Actions (Jan Černý <jcerny@redhat.com>)
 - Add tests to cover cases of missing/commented GRUB_CMDLINE_LINUX cfg (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop trailing whitespaces (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Remove test "validate-parse-platform" (Jan Černý <jcerny@redhat.com>)
 - Improve template macros for grub command line (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop irrelevant return statement in bash remediation (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix namespace when checking the hosted clusters (Watson Sato
<wsato@redhat.com>)
 - Update docs for yamlpath (Matthew Burket <mburket@redhat.com>)
 - Remvoe YAML path from test-requirements.txt (Matthew Burket
<mburket@redhat.com>)
 - Update metadata of OSPP profile in RHEL8/9. (Gabriel Becker
<ggasparb@redhat.com>)
 - test_machine_only_rules: allow multiple whitespaces within Ansible
conditional (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove yamlpath from CMakeLists.txt (Marcus Burghardt <maburgha@redhat.com>)
 - Remove reference files used by file_block_removed_and_added test (Marcus
Burghardt <maburgha@redhat.com>)
 - Remove scripts used for file_block_removed_and_added tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove the file_block_removed_and_added test (Marcus Burghardt
<maburgha@redhat.com>)
 - OCPBUGS-7455: Hide API warning messages (Vincent Shen <wenshen@redhat.com>)
 - OCPBUGS-17216: Update rotate certificates check for OCP 4.14 (Lance Bragstad
<lbragsta@redhat.com>)
 - Update test scenario scripts in alignment to the check (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation in alignment to the check (Marcus Burghardt
<maburgha@redhat.com>)
 - Update bash remediation in alignment to the check (Marcus Burghardt
<maburgha@redhat.com>)
 - Simplify display_login_attempts check (Marcus Burghardt
<maburgha@redhat.com>)
 - Reduce the number of times we build all of the products in CI (Matthew Burket
<mburket@redhat.com>)
 - OCPBUGS-10508: Add quotes around SCC audit procedure (Lance Bragstad
<lbragsta@redhat.com>)
 - Update the rule text to align with the checks (Watson Sato
<wsato@redhat.com>)
 - Fix remediation of sssd_enable_smartcards (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add test to sshd_lineinfile template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix regex in bash_sshd_remediation macro (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update rule description of display_login_attempts (Marcus Burghardt
<maburgha@redhat.com>)
 - Add CCN profile refchecks tests for RHEL 9. (Matthew Burket
<mburket@redhat.com>)
 - Add CIS refchecks tests for RHEL9 (Matthew Burket <mburket@redhat.com>)
 - Unify tests that use fix_rules.py (Jan Černý <jcerny@redhat.com>)
 - Add "test_all" subcommand (Jan Černý <jcerny@redhat.com>)
 - Refactor fix_rules.py (Jan Černý <jcerny@redhat.com>)
 - Update reference for profile stability tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Update sshd_approved_ciphers value for RHEL9 STIG Draft (Marcus Burghardt
<maburgha@redhat.com>)
 - Update sshd_approved_ciphers value for RHEL8 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Keep the rule's e2e result aligned with CI version (Watson Sato
<wsato@redhat.com>)
 - Add additional rules from CIS Level 1 to SAP hardening profile (sampsone
<esampson@suse.com>)
 - Check for etcd pod specification in /etc/kubernetes/manifests (Watson Sato
<wsato@redhat.com>)
 - Change "[DRAFT]" to DRAFT in draft profiles (Matthew Burket
<mburket@redhat.com>)
 - Remove kernel cmdline check (Jan Černý <jcerny@redhat.com>)
 - Skip OVAL schematron validation in CI (Jan Černý <jcerny@redhat.com>)
 - Remove CTest test "parse affected' (Jan Černý <jcerny@redhat.com>)
 - Check for presence of "affected" element (Jan Černý <jcerny@redhat.com>)
 - Update tests in ssh ciphers rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update OL8 STIG sshd_approved_ciphers (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests in ssh macs rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update OL8 STIG sshd_approved_macs (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Use parameter value in ansible lineinfile macro. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix service_httpd_disabled rule (Whidix
<31294015+Whidix@users.noreply.github.com>)
 - Improve Ansible remediation for dir_perms_world_writable_sticky_bits (Marcus
Burghardt <maburgha@redhat.com>)
 - Fix whitespace issue in build system guide (Matthew Burket
<mburket@redhat.com>)
 - Add compile_product.py to the docs (Matthew Burket <mburket@redhat.com>)
 - Fix Rawhide Python Install (Matthew Burket <mburket@redhat.com>)
 - Split base building requirements into a new file (Matthew Burket
<mburket@redhat.com>)
 - Add manifest as a dependence for zipfile (Matthew Burket
<mburket@redhat.com>)
 - Update default event creation limit to 50 (Watson Sato <wsato@redhat.com>)
 - Fix package name in components mapping (Marcus Burghardt
<maburgha@redhat.com>)
 - Update package name in rule description (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CCN A.25.SEC-RHEL1 and A.25.SEC-RHEL2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable package_cryptsetup-luks_installed for RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove tests from templated rule (Marcus Burghardt <maburgha@redhat.com>)
 - Include test scenarios for timer_enabled template (Marcus Burghardt
<maburgha@redhat.com>)
 - Add Oracle Linux 9 as supported platform (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update
linux_os/guide/system/logging/log_rotation/timer_logrotate_enabled/rule.yml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/logging/log_rotation/ensure_logrotate_activated/
oval/shared.xml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Remove rules that cannot be applied during image build (Robert Schweikert
<rjschwei@suse.com>)
 - Add prodtype clause to limit rule to platforms with logrotate.timer defined
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add manifests to zipfile target (Matthew Burket <mburket@redhat.com>)
 - Fix STIG version for RHEL 8 STIG (Matthew Burket <mburket@redhat.com>)
 - Move to setting the variable value in
harden_sshd_macs_opensshserver_conf_crypto_policy tests (Matthew Burket
<mburket@redhat.com>)
 - Create new option for SSHD MAC (Matthew Burket <mburket@redhat.com>)
 - Update RHEL 8 Profile Stability (Matthew Burket <mburket@redhat.com>)
 - Add service_rngd_enabled to the RHEL 8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update comment for RHEL-08-040060 (Matthew Burket <mburket@redhat.com>)
 - The STIG now reflects that SSHD KeepAlive settings are for network issues
(Matthew Burket <mburket@redhat.com>)
 - Add RHEL-08-020035 to the RHEL 8 STIG (Matthew Burket <mburket@redhat.com>)
 - Add note for RHEL-08-010471 that its not applicable for RHEL 8.4+ (Matthew
Burket <mburket@redhat.com>)
 - Update harden_sshd_macs_opensshserver_conf_crypto_policy for RHEL-08-010290
(Matthew Burket <mburket@redhat.com>)
 - Update RHEL8 STIG to V1R11 (Matthew Burket <mburket@redhat.com>)
 - Fix shellcheck errors in bash template (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add SRG to login_session_timeout (Matthew Burket <mburket@redhat.com>)
 - Update chrony docs url (Matthew Burket <mburket@redhat.com>)
 - Remove CIS reference from image policy webhook rule (Lance Bragstad
<lbragsta@redhat.com>)
 - Remove protect kernel default and sysctl rules from CIS (Lance Bragstad
<lbragsta@redhat.com>)
 - Reduce cyclomatic complexity in Profile.to_xml_element (Matthew Burket
<mburket@redhat.com>)
 - minor typo fix: add missing comma (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Add profile version tests (Matthew Burket <mburket@redhat.com>)
 - default_result is pass on these sysctl rules (Watson Sato <wsato@redhat.com>)
 - sysctl_kernel_kptr_restrict is PASS by default (Watson Sato
<wsato@redhat.com>)
 - Fix STIG versions for RHEL 7 (Matthew Burket <mburket@redhat.com>)
 - Fix STIG versions for RHEL 8 (Matthew Burket <mburket@redhat.com>)
 - Add platform logrotate clause for logrotate related rules (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Modifications in the rules' definitions (rchikov <rumen.chikov@suse.com>)
 - Correction in oval part (rchikov <rumen.chikov@suse.com>)
 - Added prodtypes to package_logrotate_installed and timer_logrotate_enabled
(rchikov <rumen.chikov@suse.com>)
 - Added missing CCE numbers to the rules package_logrotate_installed and
timer_logrotate_enabled (rchikov <rumen.chikov@suse.com>)
 - Changes in SLE 12/15 profiles to support logrotate service (rchikov
<rumen.chikov@suse.com>)
 - use jinja conditionals to specify a package which provides systemd-
coredump.socket (Vojtech Polasek <vpolasek@redhat.com>)
 - OL7 DISA STIG v2r12 update (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Update applicability of rule for OL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add kernel_uek platform (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add secureboot platform (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add rule logind_session_timeout to OL8 STIG (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update platform of service_rngd_enabled for OL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create runtime_kernel_fips_enabled cpe (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OL8 STIG to V1R7 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - accounts_umask_etc_bashrc: depend on bash being installed (Craig Andrews
<candrews@integralblue.com>)
 - Add version to profile to xml test data (Matthew Burket <mburket@redhat.com>)
 - Align comment with code (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/tests/empty_config.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/tests/dropin_config.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/oval/shared.xml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/oval/shared.xml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/bash/shared.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/ansible/shared.yml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/timesyn
cd_config.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/no_fall
back.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/empty_c
onfig.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/oval/shared.xml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update
linux_os/guide/services/ntp/service_timesyncd_configured/oval/shared.xml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Drop redundant checks for timesyncd enabled (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop redundant criterion (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Drop irrelevant commit (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_configured/tests/dropin_
config.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/tests/timesyncd_config.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_root_distance_configured
/tests/no_distance_config.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update
linux_os/guide/services/ntp/service_timesyncd_configured/bash/shared.sh (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update
linux_os/guide/services/ntp/service_timesyncd_configured/ansible/shared.yml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Drop redundant oval check for timesyncd enabled (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add service_timesyncd_root_distance_configured to systemd component (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Improve service_timesyncd_configured tests naming (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add implementation of service_timesyncd_root_distance_configured rule
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Extract root distance check and remediation in separate rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Reuse timesyncd enabled from service_timesyncd_enabled (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Move tests to the right place in the project structure (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update
linux_os/guide/services/ntp/service_timesyncd_configured/oval/shared.xml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Improve code style working with bash arrays (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Implement bash remediation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Rebase and map timesyncd_configured to systemd component (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix rule description (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/services/ntp/service_timesyncd_configured/rule.yml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Improve the oval checks and remediations and add tests (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add rule service_timesyncd_configured to CIS SLE profiles (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add SLE CCE ids for service_timesyncd_configured rule (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add definition of service_timesyncd_configured rule (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Refactor and simplify test scenario scripts (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unnecessary tasks from Ansible remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor Ansible remediation in no_user_host_based_files (Marcus Burghardt
<maburgha@redhat.com>)
 - Adopt new Ansible macro in no_host_based_files (Marcus Burghardt
<maburgha@redhat.com>)
 - Adopt new Ansible macro in dir_perms_world_writable_root_owned (Marcus
Burghardt <maburgha@redhat.com>)
 - Include Ansible macro to create list of local paths (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve OVAL comments for better readability (Marcus Burghardt
<maburgha@redhat.com>)
 - add new parameter packagename (Vojtech Polasek <vpolasek@redhat.com>)
 - Update shared/macros/10-warning.jinja (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Align the parameters ordering in OVAL objects (Marcus Burghardt
<maburgha@redhat.com>)
 - Update components mapping for service_rpcbind_disabled (Marcus Burghardt
<maburgha@redhat.com>)
 - More robust jinja product condition (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Fix missing EOFs (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add aide_periodic_checking_systemd_timer to aide component (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Rename the macro flag for more intuitive (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update shared/macros/10-warning.jinja (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Update shared/macros/10-warning.jinja (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Better OVAL comments language (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Utilise systemd_dropin_configuration template for journald configuration
rules (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add directory_permissions_var_log_audit to the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add dconf_gnome_login_banner_text back to the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add version to profile in the datastream (Matthew Burket
<mburket@redhat.com>)
 - no_rsh_trust_files: depend on rsh-server being installed (Craig Andrews
<candrews@integralblue.com>)
 - Fix association of nfs-utils package with rpcbind service (Marcus Burghardt
<maburgha@redhat.com>)
 - Add template for systemd module dropin configuration (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix bash array loop (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add journald configuration droping remediations (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - add template documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - use the new template with socket_systemd-journal-remote_disabled (Vojtech
Polasek <vpolasek@redhat.com>)
 - service_systemd-coredump_disabled: use new template, the rule is about
masking a socket (Vojtech Polasek <vpolasek@redhat.com>)
 - add a new template socket_disabled (Vojtech Polasek <vpolasek@redhat.com>)
 - Include RHEL indentifiers in timer_logrotate_enabled (Marcus Burghardt
<maburgha@redhat.com>)
 - Include RHEL indentifiers in package_logrotate_installed (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL8 control file regarding logrotate rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference for logrotate related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS reference for RHEL7 in logrotate rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Drop warning_rule_deprecated_cause macro (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update
linux_os/guide/services/ftp/ftp_configure_vsftpd/ftp_present_banner/rule.yml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Drop redundant package platform requirement in test (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Rename rule's oval,ansible and bash so they can be generic (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add package aide definition (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Improve ansible remediation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-integrity/aide/aide_
periodic_checking_systemd_timer/tests/aide_not_installed.fail.sh (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/rule.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/oval/sle15.xml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/bash/sle15.sh (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/ansible/sle15.yml (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_periodic_checking_systemd_timer/ansible/sle15.yml (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - For SLE15 use aide_periodic_checking_systemd_timer (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add new CCE references for aide_periodic_checking_systemd_timer (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Extract from aide_periodic_cron_checking separate rule for systemd timer
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Wrap some lines to fit in the 99 chars rule (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add remediations for aide_periodic_cron_checking via systemd (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add option to verify the periodic check also through systemd timer (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - A correction in the rule pam_disable_automatic_configuration (rchikov
<rumen.chikov@suse.com>)
 - remove duplicate oval state (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite criteria in OVAL (Vojtech Polasek <vpolasek@redhat.com>)
 - shared: templates: file_permissions: fix ansible find regex parameter
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Use explicit empty value for oval_test_package_installed's EVR parameter
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - SLE15 selinux policy directories depend on separate packages (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - add OVAL tests to test for fips=1 in /boot/loader/entries and in kernel
command line (Vojtech Polasek <vpolasek@redhat.com>)
 - Update RHEL 7 STIG profile to V3R12 (Matthew Burket <mburket@redhat.com>)
 - Update RHEL 7 STIG references to V3R12 (Matthew Burket <mburket@redhat.com>)
 - Sanitize lines for clean YAML output when generating profiles (Lance Bragstad
<lbragsta@redhat.com>)
 - Corrections related to audit_rules_sysadmin_actions and adaptation of the
rule sudo_log_events for usage in SLE 12/15 (rchikov <rumen.chikov@suse.com>)
 - Fix in audit_rules_systadmin_actions and new rule audit_rules_sysadmin_scope
(rchikov <rumen.chikov@suse.com>)
 - Implementation of the recommended changes (rchikov <rumen.chikov@suse.com>)
 - Fix into the rule sysctl_kernel_randomize_va_space (rchikov
<rumen.chikov@suse.com>)
 - Update controls to parse and validate the new fields (Matthew Burket
<mburket@redhat.com>)
 - Refactor Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Minor updates in rule description to improve readability (Marcus Burghardt
<maburgha@redhat.com>)
 - Replace shell module by command module (Marcus Burghardt
<maburgha@redhat.com>)
 - change hardcoded value to variable (Vojtech Polasek <vpolasek@redhat.com>)
 - Include warning in uefi group regarding vfat file systems (Marcus Burghardt
<maburgha@redhat.com>)
 - Allow 0700 permission for UEFI files (Marcus Burghardt <maburgha@redhat.com>)
 - shared: templates: file_permissions: ansible: Improve handling of (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add warning_rule_deprecated_cause macro (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update platform on rule about nx cpu flag (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix Kubernetes remediation of audit_create_failed (Jakub Hrozek
<jhrozek@redhat.com>)
 - Fix Kubernetes remediation of audit_access_failed (Jakub Hrozek
<jhrozek@redhat.com>)
 - Use distributed product properties in Automatus (Jan Černý
<jcerny@redhat.com>)
 - Implement rules for CIS OCP Section 1.4 (Lance Bragstad
<lbragsta@redhat.com>)
 - Remove rules from the RHEL9 STIG profile (Matěj Týč <matyc@redhat.com>)
 - CIS: Additional rules for already covered controls (Jakub Hrozek
<jhrozek@redhat.com>)
 - CIS: Use the automated rule for checking kube scheduler permissions (Jakub
Hrozek <jhrozek@redhat.com>)
 - CIS: Use the correct rule for 1.1.3 (Jakub Hrozek <jhrozek@redhat.com>)
 - SRG-APP-000506-CTR-001290: OpenShift must generate audit records when
concurrent logons from different workstations and systems occur. (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000506)
 - SRG-APP-000505-CTR-001285: OpenShift audit records must record user access
start and end times. (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000505)
 - SRG-APP-000504-CTR-001280: Red Hat Enterprise Linux CoreOS (RHCOS) must be
configured to audit the loading and unloading of dynamic kernel modules (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000504)
 - SRG-APP-000503-CTR-001275: OpenShift must generate audit records when
successful/unsuccessful attempts to delete security objects occur (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000503)
 - SRG-APP-000501-CTR-001265,SRG-APP-000502-CTR-001270: OpenShift must generate
audit records when successful/unsuccessful attempts to delete security objects
occur (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000501 #PP-000502)
 - SRG-APP-000499-CTR-001255: audit records when successful/unsuccessful
attempts to delete privileges occur. (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000499)
 - OCP4 STIG: audit records when successful/unsuccessful attempts to modify
security objects occur. (Jakub Hrozek <jhrozek@redhat.com>)
 - SRG-APP-000495-CTR-001235: audit records when successful/unsuccessful
attempts to modify privileges occur (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000495)
 - SRG-APP-000121-CTR-000255: Covered by the audit_immutable_login_uids rule
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000121)
 - SRG-APP-000119-CTR-000245 and SRG-APP-000120-CTR-000250: Covered by the
audit_rules_immutable rule (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000120 #PP-000119)
 - SRG-APP-000116-CTR-000235: Needs chrony and NTP servers to be set (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000116)
 - RHCOS STIG: Cover controls that need auditd.conf to be set (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4 STIG: Add the service_auditd_enabled rule to ensure that auditing is
enabled at runtime (Jakub Hrozek <jhrozek@redhat.com>)
 - SRG-APP-000092-CTR-000165: Add the RHCOS4 rule coreos_audit_option to make
sure auditing is on at system startup (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000092)
 - AU-12(c): OpenShift must generate audit records when successful/unsuccessful
attempts to access privileges occur. (Jakub Hrozek <jhrozek@redhat.com>)
 - Fix Kubernetes remediation for audit_ospp_general (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add Kubernetes remediation for audit_rules_dac_modification_umount (Jakub
Hrozek <jhrozek@redhat.com>)
 - Fix Kubernetes remediation of audit_immutable_login_uids (Jakub Hrozek
<jhrozek@redhat.com>)
 - Remove superseded script compare_disa_xml.py (Watson Sato <wsato@redhat.com>)
 - Update CIS profiles to use control files (Lance Bragstad
<lbragsta@redhat.com>)
 - Fix run_scapval.py Python 2 syntax errors (Matthew Burket
<mburket@redhat.com>)
 - Make CCN references more flexible (Marcus Burghardt <maburgha@redhat.com>)
 - Remove tickets from CIS control files (Lance Bragstad <lbragsta@redhat.com>)
 - update version to 0.1.70 (Vojtech Polasek <vpolasek@redhat.com>)
 - Port over etcd encryption rule from CIS 1.3 controls (Jakub Hrozek
<jhrozek@redhat.com>)
 - Apply suggestions from code review (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Create rhel9 kickstart file for CCN Advanced (Marcus Burghardt
<maburgha@redhat.com>)
 - Create rhel9 kickstart file for CCN Intermediate (Marcus Burghardt
<maburgha@redhat.com>)
 - Create rhel9 kickstart file for CCN Basic (Marcus Burghardt
<maburgha@redhat.com>)
 - Resolve confusing comment (Jan Černý <jcerny@redhat.com>)
 - Move CCN reference_uri to RHEL9 only (Marcus Burghardt <maburgha@redhat.com>)
 - A change into sudoers_validate_passwd (rchikov <rumen.chikov@suse.com>)
 - Update reference for product stability test (Marcus Burghardt
<maburgha@redhat.com>)
 - Create RHEL9 profiles for CCN in its three levels (Marcus Burghardt
<maburgha@redhat.com>)
 - Update constants to include CCN profiles (Marcus Burghardt
<maburgha@redhat.com>)
 - 0640 permission in permissions_local_var_log should only apply to files
(cueball23 <christoph.alms@westnetz.de>)
 - Include option used in CCN Policy (Marcus Burghardt <maburgha@redhat.com>)
 - Fix the informed variable option (Marcus Burghardt <maburgha@redhat.com>)
 - Include option used in CCN Policy (Marcus Burghardt <maburgha@redhat.com>)
 - Include CCN reference in special rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.30.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Partially cover A.25.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Partially cover A.25.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.23.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.19.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.15.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.11.SEC-RHEL12 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.11.SEC-RHEL9 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.11.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.11.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.11.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.11.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Drop irrelevant rules from STIG profile (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Make sure sssd.conf files have 0600 permissions mode. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update SLE12 STIG reference to V2R10 (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Add missing ANSSI and HIPAA references for SLES (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix STIG SLE12 references (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Complete A.11.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.6.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.8.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.8.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.8.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.6.SEC-RHEL5 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.6.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.6.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.6.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.6.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.5.SEC-RHEL8 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.5.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.5.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.5.SEC-RHEL5 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.5.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.5.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.5.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Partially cover A.3.SEC-RHEL10 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.3.SEC-RHEL9 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix small typo (Marcus Burghardt <maburgha@redhat.com>)
 - Complete A.3.SEC-RHEL7 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.3.SEC-RHEL6 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.3.SEC-RHEL4 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.3.SEC-RHEL3 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.3.SEC-RHEL2 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete A.3.SEC-RHEL1 requirement in CCN policy (Marcus Burghardt
<maburgha@redhat.com>)
 - Add missing STIG references for SLE (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Update SLE15 STIG reference to V1R10 (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Fix invalid levels key in section 5 (Lance Bragstad <lbragsta@redhat.com>)
 - Remove a parameter (Jan Černý <jcerny@redhat.com>)
 - Add documentation of macro (Jan Černý <jcerny@redhat.com>)
 - Extract macro (Jan Černý <jcerny@redhat.com>)
 - Check password inactivity only for local users (Jan Černý
<jcerny@redhat.com>)
 - Use macro in OVAL (Jan Černý <jcerny@redhat.com>)
 - Extract macro (Jan Černý <jcerny@redhat.com>)
 - Check password warning age only for local users (Jan Černý
<jcerny@redhat.com>)
 - Check password minimal age only for local users (Jan Černý
<jcerny@redhat.com>)
 - Extract code to a macro (Jan Černý <jcerny@redhat.com>)
 - Check password max age only for local users (Jan Černý <jcerny@redhat.com>)
 - Add an explanatory comment (Jan Černý <jcerny@redhat.com>)
 - Change OVAL in accounts_users_home_files_ownership (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in file_ownership_home_directories (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in file_groupownership_home_directories (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in file_permissions_home_directories (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in accounts_user_dot_user_ownership (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in accounts_umask_interactive_users (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in accounts_users_home_files_permissions (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in accounts_user_dot_group_ownership (Jan Černý
<jcerny@redhat.com>)
 - Change OVAL in accounts_users_home_files_groupownership (Jan Černý
<jcerny@redhat.com>)
 - Refactor OVAL code (Jan Černý <jcerny@redhat.com>)
 - Fix a wrong data type (Jan Černý <jcerny@redhat.com>)
 - Check only local users home directories (Jan Černý <jcerny@redhat.com>)
 - Add a small test scenario to prevent quoting issues (Jan Černý
<jcerny@redhat.com>)
 - Prevent quoting issues in rule firewalld-backend (Jan Černý
<jcerny@redhat.com>)
 - Modifications which support installation of bats and ShellCheck on SLE15
(rchikov <rumen.chikov@suse.com>)
 - Update .github/workflows/automatus-sle15.yaml (Gabriel Becker
<ggasparb@redhat.com>)
 - Apply suggestions from code review (Gabriel Becker <ggasparb@redhat.com>)
 - Added automatus-sle15.ymal and modifiied gate.yaml and test_suite-sle15 files
(rchikov <rumen.chikov@suse.com>)
 - Update Dockerfiles/test_suite-sle15 (Rumen <77793453+rumch-
se@users.noreply.github.com>)
 - Delete sshd_config (Rumen <77793453+rumch-se@users.noreply.github.com>)
 - Fix test_suite_sle15 (rchikov <rumen.chikov@suse.com>)
 - Files relates to SLES 15 SP 3 test container - podman (rumch-se
<rumen.chikov@suse.com>)
 - Add support for multiple STIG id assignments. (Gabriel Becker
<ggasparb@redhat.com>)
 - Implement rules for CIS OCP Section 5.5 (Lance Bragstad
<lbragsta@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - align behavior of Ansible remediation to Bash remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - update bash remediation to align with OVAL check (Vojtech Polasek
<vpolasek@redhat.com>)
 - align Bash remediation with rule description (Vojtech Polasek
<vpolasek@redhat.com>)
 - align Ansible remediation with the rule description (Vojtech Polasek
<vpolasek@redhat.com>)
 - update list of contributors (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rule to verify protection of profiling data (Lance Bragstad
<lbragsta@redhat.com>)
 - Allow verify_references.py to identify RH OVALv2 feed IDs as remote (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Fix invalid yaml in CIS OCP section 5 (Lance Bragstad <lbragsta@redhat.com>)
 - Update product stability for RHEL OVAL (Matthew Burket <mburket@redhat.com>)
 - Move to OVAL V2 URL for RHEL 9 (Matthew Burket <mburket@redhat.com>)
 - Move to OVAL V2 URL for RHEL 8 (Matthew Burket <mburket@redhat.com>)
 - Move to OVAL V2 URL for RHEL 7 (Matthew Burket <mburket@redhat.com>)
 - Fix invalid yaml in CIS section 4 (Lance Bragstad <lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 1.2 (Lance Bragstad
<lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 1.1 (Lance Bragstad
<lbragsta@redhat.com>)
 - Ensure Title Case as defined in the Style Guide (Marcus Burghardt
<maburgha@redhat.com>)
 - Update docs/manual/developer/03_creating_content.md (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Add ansible RHEL9 STIG profile to testing farm. (Gabriel Becker
<ggasparb@redhat.com>)
 - Ignore errors on enable_fips_mode ansible remediation when checking FIPS
mode. (Gabriel Becker <ggasparb@redhat.com>)
 - Revert accounts_authorized_local_users to SLES only. (Gabriel Becker
<ggasparb@redhat.com>)
 - Set platform all for rules that are selected in RHEL9 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove unnecessary state check in test (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve OVAL readability (Marcus Burghardt <maburgha@redhat.com>)
 - Refactor Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Minor improvements in wording and readability (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve readability in Bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Implement rules for CIS OCP Section 5.4 (Lance Bragstad
<lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 5.3 (Lance Bragstad
<lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 5.2 (Lance Bragstad
<lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 5.1 (Lance Bragstad
<lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 4.2 (Lance Bragstad
<lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 4.1 (Lance Bragstad
<lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 3 (Lance Bragstad <lbragsta@redhat.com>)
 - Remove unnecessary comments about policy sections (Marcus Burghardt
<maburgha@redhat.com>)
 - Apply suggestions from code review (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Fix invalid YAML in OCP CIS control file (Lance Bragstad
<lbragsta@redhat.com>)
 - Don't wrap titles in control files (Lance Bragstad <lbragsta@redhat.com>)
 - Fix `levels` key in general_profile script (Lance Bragstad
<lbragsta@redhat.com>)
 - Define ipv6 platform in group of ipv6 settings rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include an OVAL template for ipv6 applicability (Marcus Burghardt
<maburgha@redhat.com>)
 - Include applicability definition for ipv6 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix account_emergency_expire_date subkeys order (Matthew Burket
<mburket@redhat.com>)
 - Fix Profile stability for RHEL8 (Matthew Burket <mburket@redhat.com>)
 - Deprecate account_emergency_expire_date (Matthew Burket <mburket@redhat.com>)
 - Remove deprecated rules from control file (Marcus Burghardt
<maburgha@redhat.com>)
 - Move to account_temp_expire_date in RHEL 7 STIG (Matthew Burket
<mburket@redhat.com>)
 - Move to account_temp_expire_date in the RHEL 8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add package_mailx_installed to the RHEL 8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add ensure_redhat_gpgkey_installed to the RHEL 8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update to RHEL 8 V1R10 (Matthew Burket <mburket@redhat.com>)
 - accounts_passwords_pam_faillock_unlock_time: show XCCDF variable in the
description (Vojtech Polasek <vpolasek@redhat.com>)
 - account_password_selinux_faillock_dir: show XCCDF variable in the description
(Vojtech Polasek <vpolasek@redhat.com>)
 - rule accounts_passwords_pam_faillock_interval: show XCCDF variable in the
description (Vojtech Polasek <vpolasek@redhat.com>)
 - accounts_pam_faillock_deny: mention XCCDF variables in the rule description
(Vojtech Polasek <vpolasek@redhat.com>)
 - Include related_rules in A.24.SEC-RHEL2 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include notes in pending requirements (Marcus Burghardt
<maburgha@redhat.com>)
 - Translate the original titles to english (Marcus Burghardt
<maburgha@redhat.com>)
 - Include candidate rules for most requirements (Marcus Burghardt
<maburgha@redhat.com>)
 - Initial control file for CCN-STIC-610A22 (Marcus Burghardt
<maburgha@redhat.com>)
 - Implement rules for CIS OCP Section 5.7 (Lance Bragstad
<lbragsta@redhat.com>)
 - Update RHEL 7 GUI profile to V3R11 (Matthew Burket <mburket@redhat.com>)
 - SRG-APP-000029-CTR-000085: Audit execution of all setuid and setgid binaries
on RHCOS4 (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000029)
 - OCP4 STIG: SRG-APP-000343-CTR-000780 and SRG-APP-000381-CTR-000905 are
covered by audit_rules_suid_privilege_function (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000343 #PP-000381)
 - Update OL8 hipaa profile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Move RHEL-07-010271 to account_temp_expire_date (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL7 CCE to package_mailx_installed (Matthew Burket
<mburket@redhat.com>)
 - Add package_mailx_installed to RHEL 7 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add dconf_gnome_disable_user_list to RHEL 7 STIG (Matthew Burket
<mburket@redhat.com>)
 - Select ensure_redhat_gpgkey_installed in RHEL7 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update to RHEL 7 STIG to version V3R11 (Matthew Burket <mburket@redhat.com>)
 - Implement rules for CIS OCP Section 2 (Lance Bragstad <lbragsta@redhat.com>)
 - Implement rules for CIS OCP Section 1.3 (Lance Bragstad
<lbragsta@redhat.com>)
 - Stop using "imp" module (Jan Černý <jcerny@redhat.com>)
 - Add a test for rule journald_compress (Jan Černý <jcerny@redhat.com>)
 - Add a test for rule journald_storage (Jan Černý <jcerny@redhat.com>)
 - Add docs for SCAPVal testing (Matthew Burket <mburket@redhat.com>)
 - Move Stabilization to use ctest based scapval (Matthew Burket
<mburket@redhat.com>)
 - Add SCAPVal test to product build (Matthew Burket <mburket@redhat.com>)
 - Add SCAPVal configuration options to root CMake (Matthew Burket
<mburket@redhat.com>)
 - Add the ability to the run_scapval script to scan one file (Matthew Burket
<mburket@redhat.com>)
 - Add audit_rules_login_events_faillock to RHEL 8 STIG (Jan Černý
<jcerny@redhat.com>)
 - .github/workflows/gate.yaml:Add anolis8 product. (rain-Qing
<yangyuqing6@qq.com>)
 - Remove dead code in ssg/control.py (Matthew Burket <mburket@redhat.com>)
 - Fix control file found by new check (Matthew Burket <mburket@redhat.com>)
 - Add test for importing a control dict with unsupported keys (Matthew Burket
<mburket@redhat.com>)
 - Add check for unsupported keys in control files (Matthew Burket
<mburket@redhat.com>)
 - Switch from "use_pam_wheel_for_su" to "use_pam_wheel_group_for_su" for RHEL 8
and 9 (Kacper <kacper@kacper.se>)
 - ocp4: Add missing test YAML manifests (Jakub Hrozek <jhrozek@redhat.com>)
 - Don't use the obsolete filegid attribute, use gid_or_name instead (Jakub
Hrozek <jhrozek@redhat.com>)
 - Modify the auditd_configure_rules rule to check for permissions 600 on RHCOS,
too (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: SRG-APP-000118-CTR-000240: Audit and pod logs files ownership and
permission (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000118)
 - scap-security-guide: add openembedded distro support (Armin Kuster
<akuster808@gmail.com>)
 - Set accounts-physical as machine only (Craig Andrews
<candrews@integralblue.com>)
 - Use prefer-controls in GH actions that generate OCP4 STIG exports (Jakub
Hrozek <jhrozek@redhat.com>)
 - Amend several RHCOS controls to include a check and a fix (Jakub Hrozek
<jhrozek@redhat.com>)
 - create_srg_export: Add a command-line flag to prefer check and fix from the
control over rules (Jakub Hrozek <jhrozek@redhat.com>)
 - Set package_rng-tools_installed as machine only (Craig Andrews
<candrews@integralblue.com>)
 - service_apport_disabled: depend on apport being installed (Craig Andrews
<candrews@integralblue.com>)
 - ensure_pam_wheel_group_empty: depend on pam being installed (Craig Andrews
<candrews@integralblue.com>)
 - use_pam_wheel_group_for_su: depend on pam being installed (Craig Andrews
<candrews@integralblue.com>)
 - Set ensure_root_password_configured as machine only (Craig Andrews
<candrews@integralblue.com>)
 - Set package_iptables_installed as machine only (Craig Andrews
<candrews@integralblue.com>)
 - Set package_nftables_installed as machine only (Craig Andrews
<candrews@integralblue.com>)
 - SRG-APP-000450-CTR-001105: Add two related RHCOS rules (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000450)
 - products/anolis23: supports Anolis OS 23 (rain-Qing <yangyuqing6@qq.com>)
 - SRG-APP-000243-CTR-000600: Covered with kernel arguments and sysctls (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000243)
 - Update rule description to include also drop-in option configuration (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - SRG-APP-000439-CTR-001080: This is a manual rule (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000439)
 - SRG-APP-000233-CTR-000585: Covered by ensuring SELinux is enabled (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000233)
 - SRG-APP-000211-CTR-000530: A manual rule to check that root and core are the
only users (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000211)
 - OCP4: Fix instructions of scc_limit_container_allowed_capabilities (Jakub
Hrozek <jhrozek@redhat.com>)
 - Update linux_os/guide/system/permissions/restrictions/coredumps/coredump_disa
ble_storage/tests/coredumps_storage_none_dropin.pass.sh (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add profile as sshd_strong_macs to stable profile (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix OL9 stability oval url (Matthew Burket <mburket@redhat.com>)
 - Fix OL8 stability oval url (Matthew Burket <mburket@redhat.com>)
 - Fix OL7 stability oval url (Matthew Burket <mburket@redhat.com>)
 - Add mount platform to mount_option_home_grpquota (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_home_nodev (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_home_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_home_usrquota (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to  mount_option_opt_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_srv_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_log_audit_nodev (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_log_audit_noexec (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_log_audit_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_log_nodev (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_log_noexec (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_log_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_nodev (Matthew Burket
<mburket@redhat.com>)
 - Add mount platform to mount_option_var_noexec (Matthew Burket
<mburket@redhat.com>)
 - Add new missing mount platforms (Matthew Burket <mburket@redhat.com>)
 - Remove quotes from journald config parameters (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Extract method to fix Codeclimate (Jan Černý <jcerny@redhat.com>)
 - Reduce code complexity (Jan Černý <jcerny@redhat.com>)
 - Add a missing None in function definition (Jan Černý <jcerny@redhat.com>)
 - Add support for diffing the values (Jan Černý <jcerny@redhat.com>)
 - Refactor: split differences from printing (Jan Černý <jcerny@redhat.com>)
 - Introduce a script to compare ComplianceAsCode versions (Jan Černý
<jcerny@redhat.com>)
 - OCP4: Remove the CIS 1.3 controls completely (Jakub Hrozek
<jhrozek@redhat.com>)
 - Update ol9 oval_feed_url (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update ol8 oval_feed_url (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix selection of var_multiple_time_servers for OL7 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ol7 oval_feed_url (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Remove outdated comment from OCP4 CIS profile (Lance Bragstad
<lbragsta@redhat.com>)
 - Add ol8 & ol9 products in prodtype of rule (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add rule selinux_state to OL8 anssi enhanced (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OL8 cjis profile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update function and variables related to check_fact_ref (Marcus Burghardt
<maburgha@redhat.com>)
 - Allow populating one content type by more means (Matej Tyc
<matyc@redhat.com>)
 - Defer creation of the manifest (Matej Tyc <matyc@redhat.com>)
 - Fix the grub update executable for SLE15 (Matej Tyc <matyc@redhat.com>)
 - Remove irrelevant selections from compiled controls (Matej Tyc
<matyc@redhat.com>)
 - Revert "fix: aide/remediations: add crontabs" (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Introduce rule platform names and profile values (Matej Tyc
<matyc@redhat.com>)
 - Add build of a JSON manifest file to the build process (Matej Tyc
<matyc@redhat.com>)
 - Introduce a script summarizing contents to json (Matěj Týč
<matyc@redhat.com>)
 - Add missing headings (Matej Tyc <matyc@redhat.com>)
 - Improve the language and readability (Matěj Týč <matej.tyc@gmail.com>)
 - Modification of the rule ensure_pam_wheel_group_empty (rchikov
<rumen.chikov@suse.com>)
 - Move to file_owner test for template Automatus test (Matthew Burket
<mburket@redhat.com>)
 - Fix grep for Automatus sanity (Matthew Burket <mburket@redhat.com>)
 - OCP4: SRG-APP-000142-CTR-000325: No longer Does Not Meet (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000142)
 - Minor update in alignment to Style Guide (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix desired attribute for check-fact-ref element (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix searched string for cpe platform elements (Marcus Burghardt
<maburgha@redhat.com>)
 - Add a section guiding through the process of rule divergence (Matěj Týč
<matyc@redhat.com>)
 - Small correction in bash part (rchikov <rumen.chikov@suse.com>)
 - utils: Add SRG to NIST control mapping for the OCP4 STIG (Jakub Hrozek
<jhrozek@redhat.com>)
 - Update rule.yml (Rumen <77793453+rumch-se@users.noreply.github.com>)
 - A small correction in bash part of the rule (rchikov <rumen.chikov@suse.com>)
 - Updates of the rule use_pam_wheel_group_for_su (rchikov
<rumen.chikov@suse.com>)
 - Fix ectd rule e2e failures (Vincent Shen <wenshen@redhat.com>)
 - macros: bash: Fix shellcheck warning (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add data about nested controls to the compiled controls (Matěj Týč
<matyc@redhat.com>)
 - Rename wrong varaible in test (Markus Mathiason
<8738793+Mackemania@users.noreply.github.com>)
 - macros: bash: pam_faillock: Improve bash to consider different (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Drop FIPS references from oval definition (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - set_ufw_loopback_traffic: sce: Fix logic in script (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - wireless_disable_interfaces: bash: Improve Ubuntu remediation (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - macros: bash: Avoid matching comments in fstab macros (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update test cases to match jinja macro order (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Change file_groupowner template parameter after rebase (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add sshd_strong_macs variable (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add empty line at the end of file (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Too much stripping breaks the code (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Drop extra whitespaces from jinja macros (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - For SLE15 check drop-in files instead of symlink (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - SLES15 use dropin configuration for issue banner (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Generate CIS OpenShift 1.4.0 Section 4 (Lance Bragstad <lbragsta@redhat.com>)
 - Generate OpenShift CIS 1.4.0 Section 5 (Lance Bragstad <lbragsta@redhat.com>)
 - Generate CIS OpenShift 1.4.0 Section 3 (Lance Bragstad <lbragsta@redhat.com>)
 - Generate CIS OpenShift 1.4.0 Section 2 (Lance Bragstad <lbragsta@redhat.com>)
 - Generate CIS OpenShift 1.4.0 Section 1 (Lance Bragstad <lbragsta@redhat.com>)
 - Move the most important links to a better place (Jan Černý
<jcerny@redhat.com>)
 - Add platform package clause for firewalld related rules (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - file_groupownership_ssh_private_key: exclude templated test scenario (Vojtech
Polasek <vpolasek@redhat.com>)
 - file_groupownership_ssh_private_key: make sure that the group ssh_keys exists
before using it in test scenario (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove component SuSEfirewall2 (Matthew Burket <mburket@redhat.com>)
 - Clarify descriptions in rule text (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Update name of rule to remove benchmark coupling (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Add PR number for why RHEL-08-010471 is not covered (Matthew Burket
<mburket@redhat.com>)
 - Add accounts_password_minlen_login_defs (Matthew Burket <mburket@redhat.com>)
 - Add CCE for RHEL 8 to sssd_has_trust_anchor (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 8 CCE to disallow_bypass_password_sudo (Matthew Burket
<mburket@redhat.com>)
 - Update profile stability (Matthew Burket <mburket@redhat.com>)
 - Fix STIG ID for RHEL 8.2+ accounts_passwords_pam_faillock_interval (Matthew
Burket <mburket@redhat.com>)
 - Add a rule for RHEL-08-010385 to the RHEL8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add a rule for RHEL-08-010121 to the RHEL8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add a rule for RHEL-08-010090 to the RHEL8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL8 STIGID to accounts_password_minlen_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL8 STIGID to no_empty_passwords_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - Move to RHEL 8.2+ STIGID in accounts_passwords_pam_faillock_deny_root
(Matthew Burket <mburket@redhat.com>)
 - Move to RHEL 8.2+ STIGID in accounts_passwords_pam_faillock_unlock_time
(Matthew Burket <mburket@redhat.com>)
 - Add RHEL8 STIGID to disallow_bypass_password_sudo (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL8 to the sssd_has_trust_anchor prodtype (Matthew Burket
<mburket@redhat.com>)
 - Document nesting of controls by references (Matej Tyc <matyc@redhat.com>)
 - Improve code style (Matej Tyc <matyc@redhat.com>)
 - Expand subcontrols handling (Matej Tyc <matyc@redhat.com>)
 - Use existing functionality for controls I/O (Matej Tyc <matyc@redhat.com>)
 - Restructure the control unit test of controls (Matej Tyc <matyc@redhat.com>)
 - Store rendered control files. (Gabriel Becker <ggasparb@redhat.com>)
 - Change case title (Jan Černý <jcerny@redhat.com>)
 - Rename variable (Jan Černý <jcerny@redhat.com>)
 - Add typing hints (Jan Černý <jcerny@redhat.com>)
 - Use --root argument (Jan Černý <jcerny@redhat.com>)
 - Use long variable names (Jan Černý <jcerny@redhat.com>)
 - Create a wrapper function (Jan Černý <jcerny@redhat.com>)
 - Add utility to render components in HTML (Jan Černý <jcerny@redhat.com>)
 - Use the changelog property in Component class (Jan Černý
<jcerny@redhat.com>)
 - Unify template rendering functions (Jan Černý <jcerny@redhat.com>)
 - Update of anssi profile for SLE 12/15 (rchikov <rumen.chikov@suse.com>)
 - Add platform package clause for firewalld related rules (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add platform package definitions for firewalld and iptables (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - fix srg (svet-se <svetlin.boychev@suse.com>)
 - SRG-APP-000141-CTR-000315: Covered by disabling SSH and locking down USB
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000141)
 - SRG-APP-000185-CTR-000490: Covered by disabling SSH (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000185)
 - Add bash and ansible relevant remediations' changes (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Handle different ssh strong macs list for different platforms (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - SRG-APP-000148-CTR-000335,SRG-APP-000190-CTR-000500: Covered by
sshd_disable_root_login (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000148 #PP-000190)
 - Add modified audit suid privilege function rule for CIS (Mackemania
<8738793+Mackemania@users.noreply.github.com>)
 - Add small test to cover drop-in pass configuration (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - For SLE platforms put remedy in drop-in (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - For SLE platforms put remedy in drop-in (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add modified version of oval_check_config_file (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Updated fix_rules to use product class (Matej Tyc <matyc@redhat.com>)
 - split too long lines in template.py (Vojtech Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_user_interactive_home_directory_defined/bash/shared.sh (Marcus
Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - OCP4: Remove obsolete rule scheduler_no_bind_address (Jakub Hrozek
<jhrozek@redhat.com>)
 - Improve error message (Jan Černý <jcerny@redhat.com>)
 - Removal of package_libreswan_installed from SLE 12/15 profiles (rchikov
<rumen.chikov@suse.com>)
 - Fix attribute for args root (Dexter Le <dexter.le@sap.com>)
 - use multi_platform_ubuntu (Dexter Le <dexter.le@sap.com>)
 - Add components_root to example stability (Matthew Burket
<mburket@redhat.com>)
 - add rules UBTU-20-010045 (Dexter Le <dexter.le@sap.com>)
 - Fix traceback in release helper (Jan Černý <jcerny@redhat.com>)
 - Fix grub2 remediation instructions (Henry Finucane <hfinucane@zscaler.com>)
 - Add couple of tests for new bash jinja macro (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Rework jinja macro to use [[:blank:]] instead of \> (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - add overriding test scenario to file_groupownership_sshd_pub_key rule
(Vojtech Polasek <vpolasek@redhat.com>)
 - update missing_file_test test scenarios of file_groupownership and file_owner
template (Vojtech Polasek <vpolasek@redhat.com>)
 - fix test scenarios for file_(groupownership|owner|permissions) template
(Vojtech Polasek <vpolasek@redhat.com>)
 - extract duplicated function from file_(owner|groupowner|permissions)
templates into shared module (Vojtech Polasek <vpolasek@redhat.com>)
 - modify the oval for file_groupownership template (Vojtech Polasek
<vpolasek@redhat.com>)
 - modify the preprocessing function of file_groupownership template (Vojtech
Polasek <vpolasek@redhat.com>)
 - modify remediations for file_groupownership template (Vojtech Polasek
<vpolasek@redhat.com>)
 - change the parameter name in template tests (Vojtech Polasek
<vpolasek@redhat.com>)
 - modify rule.yaml files to change the parameter name of file_groupownership
template from filegid to gid_or_name (Vojtech Polasek <vpolasek@redhat.com>)
 - update template documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - Change double underscore to a single underscore (Jan Černý
<jcerny@redhat.com>)
 - Add graphs to represent the life cycle of controls file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add a Playbook name to Ansible Playbooks (Jan Černý <jcerny@redhat.com>)
 - add-rules sles-15-010418 sles-12-010498 (svet-se <svetlin.boychev@suse.com>)
 - Polish OVAL in sysctl template (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix CodeClimate problem (Jan Černý <jcerny@redhat.com>)
 - controls/srg_ctr.yaml: Remove the controls section to make SRG export happy
(Jakub Hrozek <jhrozek@redhat.com>)
 - RHCOS4 STIG: AC-2(4),AU-12(c): Controls covered with
audit_rules_sysadmin_actions and audit_rules_usergroup_modification (Jakub
Hrozek <jhrozek@redhat.com>)
 - profiles: Add a stub STIG RHCOS4 profile (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: Move the var_openshift_audit_profile variable from srg_ctr.yml to the
OCP4 STIG profile (Jakub Hrozek <jhrozek@redhat.com>)
 - Remove a space (Jan Černý <jcerny@redhat.com>)
 - Fix a traceback (Jan Černý <jcerny@redhat.com>)
 - Replace must by should (Jan Černý <jcerny@redhat.com>)
 - Create template testing plugins (Jan Černý <jcerny@redhat.com>)
 - Make the parameters required (Jan Černý <jcerny@redhat.com>)
 - Add components to resolved rules (Jan Černý <jcerny@redhat.com>)
 - Replace double underscore by single underscore (Jan Černý
<jcerny@redhat.com>)
 - Update example product.yml in Developer's guide (Jan Černý
<jcerny@redhat.com>)
 - Assign rule package_iptables-services_removed to a component (Jan Černý
<jcerny@redhat.com>)
 - Simplify function test_platform (Jan Černý <jcerny@redhat.com>)
 - Extract function (Jan Černý <jcerny@redhat.com>)
 - Allow products to specify the components directory (Jan Černý
<jcerny@redhat.com>)
 - Use ssg.components module in _load_components (Jan Černý
<jcerny@redhat.com>)
 - Avoid many return statements (Jan Černý <jcerny@redhat.com>)
 - Reduce amount of parameters (Jan Černý <jcerny@redhat.com>)
 - Reduce complexity of main function (Jan Černý <jcerny@redhat.com>)
 - Fix CodeClimate PEP8 problem (Jan Černý <jcerny@redhat.com>)
 - Extract method (Jan Černý <jcerny@redhat.com>)
 - Add a unit test for the ssg.components module (Jan Černý
<jcerny@redhat.com>)
 - remove env_yaml (Jan Černý <jcerny@redhat.com>)
 - Add a test for components based on groups (Jan Černý <jcerny@redhat.com>)
 - Add test for component based on platforms (Jan Černý <jcerny@redhat.com>)
 - Add a simple test for component consistency (Jan Černý <jcerny@redhat.com>)
 - Enforce component mapping (Jan Černý <jcerny@redhat.com>)
 - Assign network_implement_access_control to firewalld component (Jan Černý
<jcerny@redhat.com>)
 - Add fail test to sysctl template (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Improve ansible remediation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add jinja bash macro to comment out config setting (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - A fix in macro sshd_oval_check (rchikov <rumen.chikov@suse.com>)
 - A fix in the rule sshd_set_keepalive (rchikov <rumen.chikov@suse.com>)
 - Add RHEL 7 CCE to selinux_confine_to_least_privilege (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 7 CCE to disallow_bypass_password_sudo (Matthew Burket
<mburket@redhat.com>)
 - Revert macro usage in zipl rules (Matej Tyc <matyc@redhat.com>)
 - Add support for loading Jinja without the product context (Matej Tyc
<matyc@redhat.com>)
 - Simplify aide rules by leveraging product properties (Matej Tyc
<matyc@redhat.com>)
 - Consolidate grub rules (Matej Tyc <matyc@redhat.com>)
 - Guard product test references, not products (Matej Tyc <matyc@redhat.com>)
 - Expand the product stability test to autofix reference data (Matej Tyc
<matyc@redhat.com>)
 - Add product families (Matej Tyc <matyc@redhat.com>)
 - Fix the current product properties (Matej Tyc <matyc@redhat.com>)
 - Move grub paths to product properties (Matej Tyc <matyc@redhat.com>)
 - Start using product properties for ID numbers (Matej Tyc <matyc@redhat.com>)
 - Introduce minor text improvements (Matej Tyc <matyc@redhat.com>)
 - Add selinux_confine_to_least_privilege to RHEL 7 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add disallow_bypass_password_sudo to RHEL 7 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add no_empty_passwords_etc_shadow to RHEL 7 STIG (Matthew Burket
<mburket@redhat.com>)
 - SRG-APP-000158-CTR-000390: Add supporting evidence to an Inherently Met rule
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000158)
 - SRG-APP-000090-CTR-000155: No longer Does not Meet, but instead covered by
setting the OCP audit profile (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000090)
 - OCP4: Update instructions of scc/scc_limit_container_allowed_capabilities
(Jakub Hrozek <jhrozek@redhat.com>)
 - Update CIS control file for RHEL7 and RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule to remove iptables-services package (Marcus Burghardt
<maburgha@redhat.com>)
 - Updating control_response (pending) to prevent test failure (Rutvik
<32413084+rutvik23@users.noreply.github.com>)
 - Updating control_response for control id 1.3.1 (Rutvik
<32413084+rutvik23@users.noreply.github.com>)
 - Fix CMakelint (Matthew Burket <mburket@redhat.com>)
 - Fix a cmake linting error (Matej Tyc <matyc@redhat.com>)
 - Remove the deployment section (Matej Tyc <matyc@redhat.com>)
 - Address reviewer feedback (Matej Tyc <matyc@redhat.com>)
 - Integrate manpage with CMake better (Matej Tyc <matyc@redhat.com>)
 - Update reference for product stability test (Marcus Burghardt
<maburgha@redhat.com>)
 - Change of anssi recommendation for the rule mount_option_home_nosuid (rchikov
<rumen.chikov@suse.com>)
 - Pretty minor fix in product title (Marcus Burghardt <maburgha@redhat.com>)
 - OCP4 Add the suppresse warning tag (Vincent Shen <wenshen@redhat.com>)
 - Align notes in nftables supported requirements (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 3.5.3.1.2 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 3.5.1.3 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 3.5.3.1.1 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 3.5.2.1 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 5.7 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the CIS 5.5.4 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 3.5.1.4 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 5.5.1.2 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 5.5.1.1 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 4.1.1.1 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 5.5.2 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Typo correction in CIS profile for SLE 12 (rchikov <rumen.chikov@suse.com>)
 - Add sanity test for Automatus in CMake (Matthew Burket <mburket@redhat.com>)
 - Add Automatus Sanity tests (Matthew Burket <mburket@redhat.com>)
 - Add testing profile for Fedora (Matthew Burket <mburket@redhat.com>)
 - Complete the CIS 5.4.2 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete the CIS 4.1.15 requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Replace legacy parameter in CIS RHEL7 control file (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix in ansible part of the rule audit_rules_kernel_module_loading (rchikov
<rumen.chikov@suse.com>)
 - Add requirements files for python dependencies (Lance Bragstad
<lbragsta@redhat.com>)
 - Fix of rule sudo_dedicated_group for sle 12/15 (rchikov
<rumen.chikov@suse.com>)
 - Reduce the test install_vm to Python 3 (Jan Černý <jcerny@redhat.com>)
 - Add a sanity test of install_vm.py (Jan Černý <jcerny@redhat.com>)
 - Fixes in 1.3.1 GC rules with updated doc links and completing
control_response (rutvik23 <rutksh@gmail.com>)
 - Update ansible.template (Rumen <77793453+rumch-se@users.noreply.github.com>)
 - Implementation of proposed corrections (rchikov <rumen.chikov@suse.com>)
 - Add warning to rsyslog_remote_tls_cacert (Matthew Burket
<mburket@redhat.com>)
 - OCP4: Fix group ownerships checks (Jakub Hrozek <jhrozek@redhat.com>)
 - Changes in SLE 12/15 profiles related to time_sync services (rchikov
<rumen.chikov@suse.com>)
 - Add rsyslog_remote_loghost droping remediations (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Do not replace character in compare-ds job. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix in SLE 12/15 rule accounts_passwords_pam_tally2_unlock_time (rchikov
<rumen.chikov@suse.com>)
 - Fix Ansible fatal error from configure_tmux_lock_keybinding (Milan Lysonek
<mlysonek@redhat.com>)
 - Add remediations for rule network_sniffer_disabled (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Fix title case in ansible tasks name (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix var_firewalld_default_zone_filename datatype (Matthew Burket
<mburket@redhat.com>)
 - fix ansible kex_algos_regex (svet-se <svetlin.boychev@suse.com>)
 - Some SLE 12/15 fixes related to the rule accounts_passwords_pam_tally2
(rchikov <rumen.chikov@suse.com>)
 - Change git to git-core (Jan Černý <jcerny@redhat.com>)
 - OCP: Add CPE for HyperShift Hosted cluster (Vincent Shen
<wenshen@redhat.com>)
 - Add remediation headers in rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests for network_implement_access_control (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Harden bash in file_permission_user_init_files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Polish OVAL in file_permission_user_init_files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix install_vm.py on older versions of Python (Jan Černý
<jcerny@redhat.com>)
 - Add git to dependencies of the stabilize workflow (Jan Černý
<jcerny@redhat.com>)
 - Document packages key (Jan Černý <jcerny@redhat.com>)
 - Fix the current product properties (Matej Tyc <matyc@redhat.com>)
 - Implement limitations of defining product properties (Matej Tyc
<matyc@redhat.com>)
 - Fix loading of product yaml to utilities (Matej Tyc <matyc@redhat.com>)
 - Document product properties (Matej Tyc <matyc@redhat.com>)
 - Add support for properties into the build script (Matej Tyc
<matyc@redhat.com>)
 - Introduce input hierarchy to the product class (Matej Tyc <matyc@redhat.com>)
 - Allow product to update itself from directories (Matej Tyc
<matyc@redhat.com>)
 - Bump version to 0.1.69 (Jan Černý <jcerny@redhat.com>)
 - Update contributors for version 0.1.68 (Jan Černý <jcerny@redhat.com>)
 - update rule sles-12-030250 (svet-se <svetlin.boychev@suse.com>)
 - Add changelog key to the components YAML (Jan Černý <jcerny@redhat.com>)
 - fix oval check (svet-se <svetlin.boychev@suse.com>)
 - fix: use grep -E instead of deprecated egrep (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: accounts_user_interactive_home_directory_defined: use nobody_gid (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: accounts_user_interactive_home_directory_defined: use gid_min with
groups (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: nobody_uid: use it in ansible too (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: nobody_uid: use it (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ssg_test_suite: warning when rule not in benchmark (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: file_groupownership_system_commands_dirs: use gid_min (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: no_password_auth_for_systemaccounts: use uid_min (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: interactive_users tests: actually use uid_min (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: uid_min: use it in various cases (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: uid_min: use it in audit auid checks, out jinja macro (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: uid_min: use it in audit auid checks, in jinja macro (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: accounts_user_interactive_home_directory_defined: typo (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: cmake: do not quote \$ when using variable value (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: cmake: use list APPEND (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: cmake: ssg_build_sds: make REFERENCES_CHECK_PROFILE_LIST actually a list
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: cmake: symbolic DEPENDS also files in COMMANDS (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: cmake: use files as output, not directories (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: cmake: custom targets should not be quoted (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: cmake: ssg_build_derivative_product: create DERIVATIVE elements
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - style: cmake: ssg_build_html_ref_tables use upcase for foreach variable
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - style: cmake: silence other issues (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: cmake: add missing include(FindPackageHandleStandardArgs) (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - style: cmake: remove extra newlines (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: cmake: style use only up to 2 empty lines (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: cmake: use indent 4 (Markus Linnala <Markus.Linnala@knowit.fi>)
 - change: cmake: change style to set indent 4 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: cmake: drop extra spaces with commands (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: cmake: change style to not use extra spaces with commands (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Add OVAL for network_implement_access_control (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Implement network_implement_access_control rule (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - add rules sles-15-040450 sles-12-030270 (svet-se <svetlin.boychev@suse.com>)
 - Document components feature (Jan Černý <jcerny@redhat.com>)
 - Remove a one-off tool for semi-automated component assignment (Jan Černý
<jcerny@redhat.com>)
 - Add initial component-rule mapping (Jan Černý <jcerny@redhat.com>)
 - Add a one-off tool for semi-automated component assignment (Jan Černý
<jcerny@redhat.com>)
 - Implementation of proposed changes (rchikov <rumen.chikov@suse.com>)
 - Removal of extra spaces (rchikov <rumen.chikov@suse.com>)
 - Add two tests to sysctl template (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update sysctl template OVAL (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests to file_permission_user_init_files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add remediation to file_permission_user_init_files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add OVAL to file_permission_user_init_files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Use complete names in ansible modules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update shared/macros/10-bash.jinja (Edgar Aguilar <xeicker@gmail.com>)
 - Simple test to avoid service restart if unnecessary (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix Automatus Fedora (Matthew Burket <mburket@redhat.com>)
 - Align the Ansible remediation with Bash (Marcus Burghardt
<maburgha@redhat.com>)
 - applying changes to control_response, rule.yml and rebase (rutvik23
<rutksh@gmail.com>)
 - Update pass aging rules to not ignore empty pass (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Sync OL8 stig profile with stigids in rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Sync OL7 stig profile with stigids in rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix template not found error in Automatus (Matthew Burket
<mburket@redhat.com>)
 - Include firewalld option in var_nftables_table.var (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS requirement about nftables table (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS requirement about nftables base chains (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible remediation for rsyslog_nolisten (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Bash remediation for rsyslog_nolisten (Marcus Burghardt
<maburgha@redhat.com>)
 - Update test scenario scripts (Marcus Burghardt <maburgha@redhat.com>)
 - Update rule description to include RainerScript (Marcus Burghardt
<maburgha@redhat.com>)
 - Extend OVAL in rsyslog_nolisten rule to use RainerScript (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS requirement for system accounts (Marcus Burghardt
<maburgha@redhat.com>)
 - Update test scenario scripts to remediate (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible remediation to fix system accounts shell (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Bash remediation to fix system accounts shell (Marcus Burghardt
<maburgha@redhat.com>)
 - Update no_shelllogin_for_systemaccounts rule description (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule in CIS profile for RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rule description (Marcus Burghardt <maburgha@redhat.com>)
 - Include Ansible remediation to lock system accounts (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenarios for system accounts with password (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Bash remediation to lock system accounts (Marcus Burghardt
<maburgha@redhat.com>)
 - Create OVAL to check systemaccounts with password (Marcus Burghardt
<maburgha@redhat.com>)
 - Include OVAL macro to create systemaccounts list (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove ids from dedicated_ssh_keyowner in the product stability (Matthew
Burket <mburket@redhat.com>)
 - style: install_vm: split big main in smaller parts (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: install_vm: handle SUDO_USER only when needed (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: virt_install: minor style changes (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: install_vm: handle per distro using dicts (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - add rules sles-15-010375 sles-12-010375 (svet-se <svetlin.boychev@suse.com>)
 - Cosmetic refactoring (Matej Tyc <matyc@redhat.com>)
 - Only consider a product when the products/$product/product.yml exists.
(Gabriel Becker <ggasparb@redhat.com>)
 - Use jinja templates to render the policies page. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use add_custom_command instead of creating a custom target. (Gabriel Becker
<ggasparb@redhat.com>)
 - Upload artifacts in case the event is a pull request. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix codeclimate issues. (Gabriel Becker <ggasparb@redhat.com>)
 - Add rendered policies page to published html gh pages. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add CMake target render-policies to render all policies available. (Gabriel
Becker <ggasparb@redhat.com>)
 - add rules sles-15-010420 sles-12-010500 (svet-se <svetlin.boychev@suse.com>)
 - Use specific name in private key groups instead of gid. (Gabriel Becker
<ggasparb@redhat.com>)
 - add rules sles-15-010419 sles-12-010499 (svet-se <svetlin.boychev@suse.com>)
 - Refactor the test scripts (Matej Tyc <matyc@redhat.com>)
 - add rule aide_scan_notification for sle 15 (svet-se
<svetlin.boychev@suse.com>)
 - SRG-APP-000390-CTR-000930 is now not applicable (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000390)
 - SRG-APP-000266-CTR-000625: Inherently met SRG Was missing status
justification (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000266)
 - SRG-APP-000441-CTR-001090,SRG-APP-000442-CTR-001095: Add justification to a
rule that's inherently met (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000441 #PP-000442)
 - OCP4 STIG: Several RBAC related controls are no longer Inherently Met, let's
use a manual rule to cut duplication (Jakub Hrozek <jhrozek@redhat.com>)
 - Make the scapval waiving easier to update (Matej Tyc <matyc@redhat.com>)
 - Add eks platforms to some ocp shared OVAL (Matej Tyc <matyc@redhat.com>)
 - Extract parts of the stab tests into a function (Matej Tyc
<matyc@redhat.com>)
 - Reuse code between profile stab and product stab tests (Matej Tyc
<matyc@redhat.com>)
 - change task names to title case (Vojtech Polasek <vpolasek@redhat.com>)
 - Add support for exclusion of properties from stab test (Matej Tyc
<matyc@redhat.com>)
 - Populate product stability data with all products (Matej Tyc
<matyc@redhat.com>)
 - Rename rule from chronyd_configures_time_sources to
chronyd_configure_pool_and_server (rchikov <rumen.chikov@suse.com>)
 - style: install_vm: print infosection intelligently (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: install_vm: use specific err function to handle errors (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: install_vm: use shlex when printing command (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: install_vm: create virt-install as list (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: install_vm: use explicit number in format (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: install_vm.py: use subprocess with command as list (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Introduce a product yaml stability test (Matej Tyc <matyc@redhat.com>)
 - Change of variable settings for PCI DSS (rchikov <rumen.chikov@suse.com>)
 - style: install_vm: sort other imports (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: automatus: sort other imports (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: ssg_test_suite: sort other imports (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: oval_line_in_file_object/doc: missing_parameter_pass is bool (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: oval_metadata/doc: affected_platforms is list[str] (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_dac_modification_chown: type name (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ocil_firewalld_allow_access/doc: port is str (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ocil_firefox_config/doc: add hint about accepted values for value
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: update_etc_default_grub_manually_absent/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: update_etc_default_grub_manually/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: systemd_ocil_timer_enabled/doc: fix parameter name (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: set_config_file/doc: add types, add missing argument (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: openshift_cluster_setting_kubeletconfig/doc: bad doc (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: grub2_bootloader_argument_absent_remediation/doc: fix type format
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: grub2_bootloader_argument_remediation/doc: fix type format (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: grub_command/doc: arguments/types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fix_openshift_logging_rbac/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: die/doc: add types (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: create_interactive_users_list_object/doc: param/type must start line
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: warning_rule_deprecated_by/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: warning_ovirt_rule_notapplicable/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: srg_requirement_directory_group_owner/doc: fix name in doc (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: oval_line_in_file_criterion/doc: fix parameters (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: oval_check_dconf_ini_file/doc: fix types and add missing argument
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: oval_argument_value_in_line/doc: fix types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: oval_auditd_config/doc: fix types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: oval_grub_config/doc: fix type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: oval_file_contents/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: oval_check_shell_file/doc: use jinja type names, fix type name (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: oval_check_config_file/doc: bool type as bool (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ocil_clause_file_group_owner/doc: fix parameter name in doc (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ocil_cluster_logging_rbac_review/doc: fix types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_service_enabled/doc: parameter name (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_service_disabled/doc: parameter name (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_socket_disabled/doc: parameter name (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_file_group_owner/doc: parameter name (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_file_deletion_events/doc: fix type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_dac_modification_chmod/doc: fix type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_dac_modification_attr: fix types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_unsuccessful_file_modification/doc: fix types
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_unsuccessful_file_modification_o_creat/doc: fix type
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write/doc:
fix type (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: fixtext_audit_rules_unsuccessful_file_modification_rule_order/doc: fix
type (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: fixtext_sshd_lineinfile/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_shell_file_set/doc: argument types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_fix_audit_syscall_rule/doc: fix names, add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_get_version_os_linux/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_compare_version_os_linux/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_os_linux_conditional/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_remove_pam_module_option_configuration/doc: add types (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_pam_module_configuration/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_remove_pam_module_option/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_pam_module_option/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_pam_module_line/doc: add types, fix format (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_ini_config/doc: add types, fix format (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_chromium_pol_setting/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_pkg_conditional_dpkg/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_compare_version_dpkg/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_get_dpkg_package_version/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_pkg_conditional_rpm/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_compare_version/doc: add types, fix sphinx format (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_pkg_conditional_compare/doc: add types, fix sphinx format (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_get_rpm_package_version/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_pkg_conditional/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_mount_option_for_vfstype/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_replace_or_append/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_file_contents/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_pam_faillock_parameter_value/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_pam_pwhistory_parameter_value/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_apply_authselect_changes/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_there_are_servers_in_ntp_compatible_config_file/doc: add
types (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_firefox_cfg_setting/doc: add types, add missing params (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_firefox_js_setting/doc: add types, add missing param (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_fix_audit_watch_rule/doc: add types, move right place (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_perform_audit_rules_privileged_commands_remediation/doc: add types,
move right place (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_service_command/doc: add types, indent (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_pam_variables_and_authselect_profile/doc: add type (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_provide_pam_module_options/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_pam_module_options/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_mount_option_in_fstab/doc: param must start line, add types
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_ensure_nl_at_eof/doc: param must start line, add types (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: bash_pam_pwhistory_enable/doc: param must start line, add types (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible_grub2_bootloader_argument_absent/doc: fix type format (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible_grub2_bootloader_argument/doc: fix type format (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_instantiate_variables/doc: fix format (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_remove_pam_module_option_configuration/doc: add types (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible_ensure_pam_module_configuration/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_ensure_pam_facts_and_authselect_profile/doc: add type (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible_remove_pam_module_option/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_ensure_pam_module_option/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_ensure_pam_module_line/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_pam_faillock_parameter_value/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_pam_pwhistory_parameter_value/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_pam_pwhistory_enable/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_apply_authselect_changes/doc: add type (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_pkg_conditional/doc: add types (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_audit_auditctl_add_syscall_rule/doc: add types, fix name/order
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible_audit_augenrules_add_syscall_rule/doc: add types, fix name
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - style: jinja macros: add/remove newlines (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: jinja: ws cleanup (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: bash_ensure_mount_option_for_vfstype: fix parameter name (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Update audit_rules_suid_privilege_function tests (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update audit_rules_suid_privilege_function for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix tests in sshd_lineinfile template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - modify regexp in bash remediation of chronyd_specify_remote_server (Vojtech
Polasek <vpolasek@redhat.com>)
 - Fix problem with sshd_strong_kex default selector (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update set-output commands (Matthew Burket <mburket@redhat.com>)
 - Address Gate test issue on empty string (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add Ubuntu SCE checks for iptables rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Set nftables as default firewall (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add platform to iptables rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add platform to UFW rules (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add platform to nftables rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - applicability: Add nftables and ufw to package applicability (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule set_nftables_base_chain (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule set_nftables_base_chain (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - set_nftables_base_chain: sce: Simplify check so we don't run same (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - set_nftables_base_chain: Add ubuntu prodtype and cis references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule nftables_ensure_default_deny_policy
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule nftables_ensure_default_deny_policy
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - nftables_ensure_default_deny_policy: Add ubuntu SCE check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - nftables_ensure_default_deny_policy: Add ubuntu prodtype and cis references
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule set_nftables_loopback_traffic
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule set_nftables_loopback_traffic
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - set_nftables_loopback_traffic: Add ubuntu SCE check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_nftables_loopback_traffic: Add ubuntu prodtype and cis references
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule nftables_rules_permanent (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level_1_server: Add rule nftables_rules_permanent (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - fix: execute_tests: handle older versions (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: bash_replace_or_append: drop logic about symlinks (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_replace_or_append: use bash_ensure_nl_at_eof (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - feature: bash: add bash_ensure_nl_at_eof (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - improve: test_bash_replace_or_append: more tests (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: test_set_config_file: use bats features (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: test_set_config_file: add test name prefix (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bash_os_linux_conditional: use bats features (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: test_bash_replace_or_append: use bats features (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: test_bash_ensure_ini_config: use bats features (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: test_bash_ensure_ini_config (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: test_set_config_file.bats.jinja: indent, drop tabs (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bats tests: add set -pu (Markus Linnala <Markus.Linnala@knowit.fi>)
 - feature: unit/bash/execute_tests: allow to enable bats features (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Make sure the directory exists before saving the rendered policy file.
(Gabriel Becker <ggasparb@redhat.com>)
 - add ansible remediation to rule configure_bashrc_exec_tmux (Vojtech Polasek
<vpolasek@redhat.com>)
 - Use selections attribute from controls instead of rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - nftables_rules_permanent: Add Ubuntu SCE check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - nftables_rules_permanent: Add Ubuntu prodtypes and cis references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - fix: ssg_test_suite.get_product_context: fake Product (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Update Add Product guide (Matthew Burket <mburket@redhat.com>)
 - Reloval of ubuntu os support from the rule (rchikov <rumen.chikov@suse.com>)
 - Improve the structure of cmake macros (Matej Tyc <matyc@redhat.com>)
 - Rename SLE 12/15 rule and change package name (rchikov
<rumen.chikov@suse.com>)
 - Replace grep command with ansible find (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - fix: aide_string: drop nl at end (Markus Linnala <Markus.Linnala@knowit.fi>)
 - Add warning for remediation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix Bash heredoc (Matthew Burket <mburket@redhat.com>)
 - SLE 12/15 profile updates (rchikov <rumen.chikov@suse.com>)
 - Include aide_check_audit_tools rule in CIS for RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update linux_os/guide/system/selinux/selinux_not_disabled/oval/shared.xml
(Marcus Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attem
pts/accounts_passwords_pam_tally2_deny_root/rule.yml (Rumen <77793453+rumch-
se@users.noreply.github.com>)
 - Ensure that we correctly stated the version for action-gh-release (Matthew
Burket <mburket@redhat.com>)
 - Update Code Climate (Matthew Burket <mburket@redhat.com>)
 - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce selinux_not_disabled rule (Marcus Burghardt <maburgha@redhat.com>)
 - New rule ensure_chrony_is_configured (rchikov <rumen.chikov@suse.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_base_chain/sce/shared.sh (Rumen <77793453+rumch-
se@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update rule.yml to be relvant for sle15 only for now (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update shared.yml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_loopback_traffic/oval/sle15.xml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_loopback_traffic/tests/valid_config_file_handle_lo.pass.sh
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_loopback_traffic/bash/shared.sh (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/set_nftables_loopback_traffic/ansible/shared.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update CIS control file for RHEL9 regarding lo traffic (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce the firewalld_loopback_traffic_restricted rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce firewalld_loopback_traffic_trusted rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix issue when adding fstab entries with iso9660 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - fix: ensure_fedora_gpgkey_installed/bash: use bash_package_install (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Fix tests applicablity for ol8 product (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OL9 jinja conditionals from RHEL9 ones (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update jinja conditionals that apply to OL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update jinja conditionals that apply to any ol (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Remove use of mstksg/get-package in actions (Matthew Burket
<mburket@redhat.com>)
 - Streamline compile_all (Matej Tyc <matyc@redhat.com>)
 - Update actions/download-artifact (Matthew Burket <mburket@redhat.com>)
 - Update comment actions (Matthew Burket <mburket@redhat.com>)
 - Fixes in SLE 12/15 rule accounts_passwords_pam_tally2_deny_root (rchikov
<rumen.chikov@suse.com>)
 - Fix in SLE 12/15 rule sshd_use_approved_macs (rchikov
<rumen.chikov@suse.com>)
 - Fix in the SLE 12/15 rule sshd_use_strong_kex (rchikov
<rumen.chikov@suse.com>)
 - bugfix: dir_perms_world_writable_root_owned: do not modify files under /proc
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - Fix in sshd_use_approved_ciphers (rchikov <rumen.chikov@suse.com>)
 - Add oval check and tests (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - style: install_vm (Markus Linnala <Markus.Linnala@knowit.fi>)
 - feature: install_vm: add --disk-unsafe (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: install_vm: show defaults in --help (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: install_vm: allow other start dir than tests (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: aide_periodic_cron_checking: jinja expansion (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: package_libselinux_installed: custom-package-removed.fail.sh: need to
set releasever (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: install_vm: support biosboot (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: configure_etc_hosts_deny/tests/file_missing.fail.sh: typo (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ensure_logrotate_activated/bash: quote #! with '', avoid history
expansion (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: packages: delim is comma (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ssg_test_suite/oscap send_files_remote: drop, is unused (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sysctl: remove unnecessary tests/shared/sysctl.sh (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Fix title case of rule (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix ansible style titles and FQCN of tasks (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix rule name in control (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Optimize sysctl checks to use ansible sysctl module (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Replace non-existing command create with insert (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Assign CCE-ID  SLE15 set_nftables_loopback_traffic (Christian Hagenest
<c.hagenest@suse.com>)
 - fix ocil for set_nftables_loopback_traffic (Christian Hagenest
<c.hagenest@suse.com>)
 - add newlines (Christian Hagenest <c.hagenest@suse.com>)
 - fix ansible syntax error (Christian Hagenest <c.hagenest@suse.com>)
 - move ocil_clauses between iptables rules (Christian Hagenest
<c.hagenest@suse.com>)
 - New Rule nftable loopback traffic (Christian Hagenest <c.hagenest@suse.com>)
 - bugfix: aide_scan_notificatio/tests: ensure crontabs/chronie (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: aide_check_audit_tools: Ensure no suffix prefix (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: auditd_offload_logs/tests: ensure crontabs installed (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: file_permissions_cron_allow/tests: ensure crontabs installed (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: file_cron_deny_not_exist/tests: ensure crontabs installed (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: aide_periodic_cron_checking/tests: use bash_package_remove (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: aide_periodic_cron_checking/tests: ensure packages are installed
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: aide/remediations: add crontabs (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: chronyd_or_ntpd_set_maxpoll/tests: use bash_package_remove (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: snmpd_not_default_password/tests: use bash_package_remove (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: configure_bind_crypto_policy/tests: use bash_package_remove (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: configure_libreswan_crypto_policy/tests: use bash_package_remove (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: snmpd_not_default_password/tests: use packages feature to install
packages (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: smartcard_configure_cert_checking/bash: use bash_package_install to
install required packages (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: accounts_polyinstantiated_var_tmp: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: accounts_polyinstantiated_tmp: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: build_profiler: use mkdir -p (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: sysctl: use mkdir -p (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: rsyslog_cron_logging/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: dir_system_commands_root_owned/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: accounts_users_home_files_permissions/tests: use mkdir -p (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: file_ownership_library_dirs/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sudo_require_authentication/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sudo_remove_nopasswd/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sudo_remove_no_authenticate/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: accounts_umask_interactive_users/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: file_group_ownership_var_log_audit/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: directory_permissions_var_log_audit/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: auditd_data_disk_full_action/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: auditd_data_disk_error_action/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: rsyslog_encrypt_offload_defaultnetstreamdriver/tests: use mkdir -p
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: rsyslog_encrypt_offload_actionsendstreamdrivermode/tests: use mkdir -p
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: rsyslog_encrypt_offload_actionsendstreamdriverauthmode/tests: use mkdir
-p (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: dir_system_commands_group_root_owned/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sssd_enable_pam_services/bash: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: dir_perms_world_writable_system_owned_group/tests: use mkdir -p (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: dir_perms_world_writable_system_owned/tests: use mkdir -p (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: dir_perms_world_writable_sticky_bits/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: dir_perms_world_writable_root_owned/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: rsyslog_remote_tls/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: directory_group_ownership_var_log_audit/tests: use mkdir -p (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: account_password_selinux_faillock_dir/tests: use mkdir -p (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: usbguard_allow_hid_and_hub/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: file_permissions_library_dirs/tests: use mkdir -p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: mount_option_nodev_nonroot_local_partitions/tests: use mkdir -p (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Update CIS control file for RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include missing CIS reference for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS control files for RHEL (Marcus Burghardt <maburgha@redhat.com>)
 - Introduce file_groupownership_sshd_pub_key rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce file_ownership_sshd_pub_key rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS control files for RHEL (Marcus Burghardt <maburgha@redhat.com>)
 - Introduce file_groupownership_sshd_private_key rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Include id attribute to dedicated_ssh_keyowner (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unnecessary blank lines in templates (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce file_ownership_sshd_private_key rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Quote octal value informed to mode option (Marcus Burghardt
<maburgha@redhat.com>)
 - Rename test scenario scripts and include tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Minor changes into variables and ansible (rchikov <rumen.chikov@suse.com>)
 - Fixes of cron package/service for SLE 12/15 (rchikov <rumen.chikov@suse.com>)
 - Ensure that doctext blocks end with a blank line (Matthew Burket
<mburket@redhat.com>)
 - Fix up some warnings in walk_rules (Matthew Burket <mburket@redhat.com>)
 - Fix link to developer docs in docs README (Matthew Burket
<mburket@redhat.com>)
 - Remove utils/find_shadowed_files.py from docs (Matthew Burket
<mburket@redhat.com>)
 - Update Heading Issues (Matthew Burket <mburket@redhat.com>)
 - Remove utils/count_oval_objects.py from docs (Matthew Burket
<mburket@redhat.com>)
 - Python2 compatibility (Matej Tyc <matyc@redhat.com>)
 - Changes in profiles (rchikov <rumen.chikov@suse.com>)
 - fix: another instance of multi-tennant (Gene Gotimer
<otherdevopsgene@portinfo.com>)
 - fix: another instance of httpasswd (Gene Gotimer
<otherdevopsgene@portinfo.com>)
 - Upgrade to changelog v3 (Matthew Burket <mburket@redhat.com>)
 - Update add product guide (Matthew Burket <mburket@redhat.com>)
 - fix: typos in documentation (Gene Gotimer <otherdevopsgene@portinfo.com>)
 - fix: typos in controls (Gene Gotimer <otherdevopsgene@portinfo.com>)
 - fix: copied truncated text from CIS EKS benchmark (Gene Gotimer
<otherdevopsgene@portinfo.com>)
 - fix: typos in controls/srg_gpos (Gene Gotimer <otherdevopsgene@portinfo.com>)
 - fix: more status_justification misspellings (Gene Gotimer
<otherdevopsgene@portinfo.com>)
 - fix: typos in srg_ctr (Gene Gotimer <otherdevopsgene@portinfo.com>)
 - fix: fixed typos in label status_justfication (Gene Gotimer
<otherdevopsgene@portinfo.com>)
 - fix: typos in openshift content (Gene Gotimer <otherdevopsgene@portinfo.com>)
 - Use a dictionary as the env_yaml argument (Matej Tyc <matyc@redhat.com>)
 - Make the product class usable by the build system (Matej Tyc
<matyc@redhat.com>)
 - Make product dict an object (Matej Tyc <matyc@redhat.com>)
 - Prepare for the concept of compiled products (Matej Tyc <matyc@redhat.com>)
 - refactor ansible and use FQCN (svet-se <svetlin.boychev@suse.com>)
 - update rule sles-15-040250 (svet-se <svetlin.boychev@suse.com>)
 - Use actions/checkout@v3 (Matthew Burket <mburket@redhat.com>)
 - fix letter cases, remove abandoned rule, fix rule 7.1 description and add
vars (Jiri Odehnal <jodehnal@redhat.com>)
 - Update cusp_firefox.yml (j-ode <jodehnal@redhat.com>)
 - Update cusp_fedora.yml (j-ode <jodehnal@redhat.com>)
 - Update controls/cusp_fedora.yml (j-ode <jodehnal@redhat.com>)
 - Update controls/cusp_fedora.yml (j-ode <jodehnal@redhat.com>)
 - Remove trailing space (Jiri Odehnal <jodehnal@redhat.com>)
 - Remove rules that disable ip forwarding due to hardening of VM guests (Jiri
Odehnal <jodehnal@redhat.com>)
 - Fix order of fedora prodtype in rules (Jiri Odehnal <jodehnal@redhat.com>)
 - Remove mount option rules due to inconsistencies, fix remediation platforms
(Jiri Odehnal <jodehnal@redhat.com>)
 - Remove rules based on testing the profile (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fix controls yaml (Jiri Odehnal <jodehnal@redhat.com>)
 - Add Firefox controls, remove duplicate rules in fedora controls (Jiri Odehnal
<jodehnal@redhat.com>)
 - remove rule references (Jiri Odehnal <jodehnal@redhat.com>)
 - remove superfluous rule (Jiri Odehnal <jodehnal@redhat.com>)
 - fix control file and add fedora prodtype to rules (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fix firefox rule, create new cusp_firefox profile and update rule 6.1 to
reflect (Jiri Odehnal <jodehnal@redhat.com>)
 - Fix YAML errors (Jiri Odehnal <jodehnal@redhat.com>)
 - test - enable fedora product build with cusp_fedora profile (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add CaC rule to rule 6.1, add rules 6.2, 7.1, 7.2 (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add placeholder for rule 6.1 (j-ode <jodehnal@redhat.com>)
 - Add rule 5.2 (j-ode <jodehnal@redhat.com>)
 - Add rule 5.1 (j-ode <jodehnal@redhat.com>)
 - Fix rule 3.10 title (j-ode <jodehnal@redhat.com>)
 - Add rule 3.10 (j-ode <jodehnal@redhat.com>)
 - Add rules to 4.3 (j-ode <jodehnal@redhat.com>)
 - Add rule 4.3 (j-ode <jodehnal@redhat.com>)
 - Add rule 4.2 and update 3.5 to audit sudo config (j-ode
<jodehnal@redhat.com>)
 - Add rule 4.1 (j-ode <jodehnal@redhat.com>)
 - Add journald rule to 3.6 (j-ode <jodehnal@redhat.com>)
 - Add rule 3.6 (j-ode <jodehnal@redhat.com>)
 - Add rule 3.9 (j-ode <jodehnal@redhat.com>)
 - Update cusp_fedora.yml (j-ode <jodehnal@redhat.com>)
 - Add rule 3.8 (j-ode <jodehnal@redhat.com>)
 - Add rule 3.7 (j-ode <jodehnal@redhat.com>)
 - Add rule 3.6 (j-ode <jodehnal@redhat.com>)
 - Remove misplaced rule in 3.4 (j-ode <jodehnal@redhat.com>)
 - Add new rule to ensure gnome-software is installed and add it to cusp_fedora
controls (Jiri Odehnal <jodehnal@redhat.com>)
 - Add rule 3.4 (j-ode <jodehnal@redhat.com>)
 - Fix rule 3.3 status (j-ode <jodehnal@redhat.com>)
 - Add rule 3.2 and 3.3 (j-ode <jodehnal@redhat.com>)
 - Add rule 3.1 (j-ode <jodehnal@redhat.com>)
 - Add section 2. System installation (j-ode <jodehnal@redhat.com>)
 - Rename policy to security policy (j-ode <jodehnal@redhat.com>)
 - Rename profile to policy (j-ode <jodehnal@redhat.com>)
 - Add rules to section 1 (j-ode <jodehnal@redhat.com>)
 - Create cup_fedora controls file (j-ode <jodehnal@redhat.com>)
 - Set permissions mode 640 in rsyslog_files_permissions for every product.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove deadcode (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Improve indentation in oval definitions (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix read the docs build (Matthew Burket <mburket@redhat.com>)
 - Corrections in bash and ansible (rchikov <rumen.chikov@suse.com>)
 - Fix: many misspellings, typos (Gene Gotimer <otherdevopsgene@portinfo.com>)
 - Fix: grammar- mismatched tense (Gene Gotimer <otherdevopsgene@portinfo.com>)
 - Fix: another misspelled word, adminstrator (Gene Gotimer
<otherdevopsgene@portinfo.com>)
 - fix: Fix misspelled word infrastruture #10530 (Gene Gotimer
<otherdevopsgene@portinfo.com>)
 - Add CCE reference for SLE15 (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Remove duplicate IDs (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Add newline at eof (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Add Jinja variable to OS-based path in results (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Update Path config with macros (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Fix pkg names in macro (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Update descriptions for rsyslog-gnutls to account for sle packages (Nico
Truzzolino <nico.truzzolino@gmx.de>)
 - Revert rsyslog-gnutls changes (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Remove duplicate macro and fix variable names (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Fix typos (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Fix syntax error and banner mixup. (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Update all CIS Control files with new banner cfg (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Update rule calls to comply to current cis req (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Create separate rule for sle rsyslog-gnutls pkg. (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Add sle prodtype and refences to faillog rule (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Update command paths for sle products (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Update mode of /etc/shadow for sles os (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Separate variables for banners This allows a separate regex for each file.
(Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Drop of some rules from SLE 12/15 profiles (rchikov <rumen.chikov@suse.com>)
 - Implement a tool for parsing profiles and outputing rules (Lance Bragstad
<lbragsta@redhat.com>)
 - Make sure rule is valid for sle only (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Add no remediation tag (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix title to follow title case rule (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Rule renamed to shorter (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Test added (rchikov <rumen.chikov@suse.com>)
 - feature: template_reference: add jinja filter documentations (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: template_reference (Markus Linnala <Markus.Linnala@knowit.fi>)
 - Added SCE check (rchikov <rumen.chikov@suse.com>)
 - Update linux_os/guide/system/network/network-
nftables/nftables_ensure_default_deny_policy/rule.yml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix nftables rules titles title-case (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - make scap-security-guide.spec support RHEL too (Jiri Jaburek
<comps@nomail.dom>)
 - feature: jinja: add quote, shell quoting (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: jinja filters: sort (Markus Linnala <Markus.Linnala@knowit.fi>)
 - OCP add variable to define HyperShift namespace prefix (Vincent Shen
<wenshen@redhat.com>)
 - OCP4 NIST: Fix typo in rule selection (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4 CIS: Add control file response for 1.2.33 and 1.2.34 (Jakub Hrozek
<jhrozek@redhat.com>)
 - Use opening parenthesis in the switch case condition. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix in service_autofs_disabled - ansible (rchikov <rumen.chikov@suse.com>)
 - Update rule to pass if no interactive users (Marcus Burghardt
<maburgha@redhat.com>)
 - Update linux_os/guide/system/network/network-
nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/nftables_ensure_default_deny_policy/oval/sle15.xml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Rename var_nftable_master_config_file (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - bugfix: mount_option: handle commented lines (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Update CIS OCP 1.3.0 profile details (Lance Bragstad <lbragsta@redhat.com>)
 - change: use fedora 38 as builder (Markus Linnala <Markus.Linnala@knowit.fi>)
 - change: install_vm: use Fedora 38 (Markus Linnala <Markus.Linnala@knowit.fi>)
 - change: fedora 38 released (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ensure_fedora_gpgkey_installed: add rawhide and future in help (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Add Kickstarts to the changelog (Matthew Burket <mburket@redhat.com>)
 - Update netrc requirement in CIS for RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Style Guide alignment: one sentence per line (Marcus Burghardt
<maburgha@redhat.com>)
 - Apply suggestions from code review (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Fix in ansible part of the rule (rchikov <rumen.chikov@suse.com>)
 - Add control file for OCP 1.3.0 (Lance Bragstad <lbragsta@redhat.com>)
 - Fix title in package_mailx_installed (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add package_mailx_installed to OL7 STIG (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add rule package_mailx_installed (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - add python3 to the list of build dependencies for RHEL-8+ (Jiri Jaburek
<comps@nomail.dom>)
 - Update release documentation about release_helper (Marcus Burghardt
<maburgha@redhat.com>)
 - Implementation of proposed changes in ansible (rchikov
<rumen.chikov@suse.com>)
 - Including missing line in the rule description (Marcus Burghardt
<maburgha@redhat.com>)
 - Update 4.1.3.19 CIS requirement for RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - New audit rule for query_module kernel module (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable rule for RHEL8 and RHEL9 (Marcus Burghardt <maburgha@redhat.com>)
 - Style Guide alignment (Marcus Burghardt <maburgha@redhat.com>)
 - Ansible tasks names in Title Case (Marcus Burghardt <maburgha@redhat.com>)
 - Add SCE check (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Dropping irrelevant file (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Revert 3.5.3.2.3 requirement status to manual (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Revert 3.5.2.2 status to manual (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Use propper rule naming (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifi
cations/set_iptables_outband_n_established_connections_configured/rule.yml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix indentation in fixtext section (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifi
cations/set_iptables_outband_n_established_connections_configured/rule.yml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix indentation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-iptables/iptables_ruleset_modifi
cations/set_iptables_outband_n_established_connections_configured/rule.yml
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add couple of tests to illustrate target behaviour (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix duplicate reference key (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add reference to set_iptables_outband_n_established_connections_configured
rule in CIS SLE controls (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add rule to define CIS requirements for ensuring iptables outbound and
established connections are configured (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Allocate CCE ids for the
set_iptables_outband_n_established_connections_configured rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - unify logvol naming in RHEL kickstarts (Jiri Jaburek <comps@nomail.dom>)
 - add required partitions to CIS server/workstation l1 RHEL kickstarts (Jiri
Jaburek <comps@nomail.dom>)
 - remove wrong temporary password disablement in pci-dss RHEL kickstarts (Jiri
Jaburek <comps@nomail.dom>)
 - fix broken bootloader passwords in RHEL kickstarts (Jiri Jaburek
<comps@nomail.dom>)
 - use keyboard --vckeymap in RHEL kickstarts (Jiri Jaburek <comps@nomail.dom>)
 - remove default --append arguments from RHEL kickstarts (Jiri Jaburek
<comps@nomail.dom>)
 - remove --location=mbr from RHEL kickstarts (Jiri Jaburek <comps@nomail.dom>)
 - Fix uefi cpe bash condition The condition should look for a directory and it
looks for a file (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - remove unnecessary --pesize from RHEL kickstarts (Jiri Jaburek
<comps@nomail.dom>)
 - install RHEL stig_gui kickstarts with 'Server with GUI' packages (Jiri
Jaburek <comps@nomail.dom>)
 - remove @Base from RHEL kickstarts (Jiri Jaburek <comps@nomail.dom>)
 - Update accounts_password_pam_retry yaml (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Bump OL7 STIG version to v2r11 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add ensure_oracle_gpgkey_installed to OL8 STIG (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OL07-00-010271 requirement (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Bump OL8 STIG version to V1R6 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Implement OL07-00-010063 (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Implement OL07-00-010019 (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add remediation none header (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - SLE add ability to configure emergency via dropin (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Link api_server_encryption_provider_cipher with CIS 2.8 (Jakub Hrozek
<jhrozek@redhat.com>)
 - Fix EOF test (Matthew Burket <mburket@redhat.com>)
 - Update rule description to consider /etc/profile.d (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS requirement status for umask requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation to consider /etc/profile.d (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Bash remediation to consider /etc/profile.d (Marcus Burghardt
<maburgha@redhat.com>)
 - Set service_nftables_enabled as machine only (Watson Sato <wsato@redhat.com>)
 - Update test scenarios and include /etc/profile.d (Marcus Burghardt
<maburgha@redhat.com>)
 - Extend OVAL check to consider /etc/profile.d dir (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL9 control file for 4.1.4.5 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include file_permissions_audit_configuration rule (Marcus Burghardt
<maburgha@redhat.com>)
 - OCPBUGS-11334: OCP4: Fix instructions for rules that set the kubelet related
sysctls (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: Use the sysctl probe when checking kubelet sysctls (Jakub Hrozek
<jhrozek@redhat.com>)
 - Update ansible in mount_option_remote_filesystems (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests in mount_option_remote_filesystems (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ansible in mount_option_remote_filesystems (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - OCP4: Add rules for SRG-APP-000456-CTR-001125 (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000456)
 - Deletion of 2 tests (rchikov <rumen.chikov@suse.com>)
 - OCPBUGS-7307: Remove templating from OCIL in alert_receiver_configured (Lance
Bragstad <lbragsta@redhat.com>)
 - Use F38 for Ansible lint test (Matthew Burket <mburket@redhat.com>)
 - Expand the list of rules skiped by Ansible lint (Matthew Burket
<mburket@redhat.com>)
 - Revert ansible lint gating job to Fedora 37. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix unused variable in shell script (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Modify SLE remediation for ensure_logrotate_activated (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - accounts_password_pam_unix_remember: bash: Improve ubuntu remediation
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Ubuntu move from pam_pwhistory_remember to pam_unix_remember (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Fix logic for the release step (Marcus Burghardt <maburgha@redhat.com>)
 - Do not treat pull requests and issues differently (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix missing argument in update_milestone() (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix missing argument in get_version_milestone() (Marcus Burghardt
<maburgha@redhat.com>)
 - Update utils/release_helper.py (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Include required argument to milestone.edit (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unexpected data from datetime string (Marcus Burghardt
<maburgha@redhat.com>)
 - Expand use home directory if present in file path (Marcus Burghardt
<maburgha@redhat.com>)
 - Format simplification for functions that print stats (Marcus Burghardt
<maburgha@redhat.com>)
 - Rename functions for better readability (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve communication messages (Marcus Burghardt <maburgha@redhat.com>)
 - Improve a little bit get_release_end_message function (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove function which is no longer used (Marcus Burghardt
<maburgha@redhat.com>)
 - Increase robustness in functions that use local files (Marcus Burghardt
<maburgha@redhat.com>)
 - Simplified main function with a dictionary (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve error handling for session creation (Marcus Burghardt
<maburgha@redhat.com>)
 - Update utils/release_helper.py (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Move the bump_version option to release_prep (Marcus Burghardt
<maburgha@redhat.com>)
 - Some improvements regarding readability (Marcus Burghardt
<maburgha@redhat.com>)
 - Improvements based on the CodeClimate report (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce the release_helper.py script (Marcus Burghardt
<maburgha@redhat.com>)
 - sshd_limit_user_acess: tests: Fix typo (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Ensure all control files end with a new line (Matthew Burket
<mburket@redhat.com>)
 - Add control files to check_eof script (Matthew Burket <mburket@redhat.com>)
 - Add sysctl disable_ipv6 rule to CIS 3.1.1 (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Allow dot in VERSION_ID (Jan Černý <jcerny@redhat.com>)
 - Code Climate changed in check_eof (Matthew Burket <mburket@redhat.com>)
 - OCP4: New rule image_pruner_active covers SRG-APP-000454-CTR-001110 and SRG-
APP-000454-CTR-001115 (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000454)
 - OCP4: CO related rules resolve three SRGs in SI-6 (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4: Add a new rule scansettings_have_schedule (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4: STIG does not mandate FIO to be installed (Jakub Hrozek
<jhrozek@redhat.com>)
 - SRG-APP-000474-CTR-001180: Is does not meet (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000474)
 - OCP4: Check for scansettingbinding, not compliancesuite (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add test scenario vs port number 22 when sshd (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Use proto list also in criteria definition (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Use jinja to shorten the OVAL (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Reorder vars,objects,states for better readability (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - add warning explaining the change (Vojtech Polasek <vpolasek@redhat.com>)
 - ignore the /proc and its subdirectories when checking / remediating the rule
(Vojtech Polasek <vpolasek@redhat.com>)
 - fix tests errors (svet-se <svetlin.boychev@suse.com>)
 - Improve oval indentation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix XLXS test (Matthew Burket <mburket@redhat.com>)
 - FIx New EOF Issues (Matthew Burket <mburket@redhat.com>)
 - Fix final file EOF (Matthew Burket <mburket@redhat.com>)
 - Ignore /tests/data/utils/ in check_eof (Matthew Burket <mburket@redhat.com>)
 - Update tests/CMakeLists.txt (Matthew Burket <m@tthewburket.com>)
 - Add test folder to check EOF (Matthew Burket <mburket@redhat.com>)
 - Fix more files without newlines at the end (Matthew Burket
<mburket@redhat.com>)
 - Add exclusion for files in the check_eof script (Matthew Burket
<mburket@redhat.com>)
 - Add more extensions for check_eof (Matthew Burket <mburket@redhat.com>)
 - Update check_eof based on PR feedback. (Matthew Burket <mburket@redhat.com>)
 - Only run test-check-eof on Python 3 (Matthew Burket <mburket@redhat.com>)
 - Fix type hints in utils/check_eof.py (Matthew Burket <mburket@redhat.com>)
 - Ensure that all files in the repo end with a newline (Matthew Burket
<mburket@redhat.com>)
 - Add docs for utils/check_eof.py (Matthew Burket <mburket@redhat.com>)
 - Add test for ensure that files end with a new file (Matthew Burket
<mburket@redhat.com>)
 - Add mypy test for utils/check_eof (Matthew Burket <mburket@redhat.com>)
 - Update docs for adding mypy to tests (Matthew Burket <mburket@redhat.com>)
 - UUpdate mypy tests to use a macro (Matthew Burket <mburket@redhat.com>)
 - Add script to fix new line at end of files (Matthew Burket
<mburket@redhat.com>)
 - Update CIS requirement for SSH access limit (Marcus Burghardt
<maburgha@redhat.com>)
 - sshd_limit_user_access: tests: Add empty variable tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - sshd_limit_user_access: oval: Improve code style (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Use versioned expressions for OS checks (Jan Černý <jcerny@redhat.com>)
 - OCP4: Don't limit prometheus rules to 500 (Jakub Hrozek <jhrozek@redhat.com>)
 - Fix CMakelint errors (Matthew Burket <mburket@redhat.com>)
 - Add CMakelint test (Matthew Burket <mburket@redhat.com>)
 - Fix iterator of path_exists items (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix small states boolean value (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Use alternative approach to get interactive users (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Make the test for access mode more explicit (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix state id thanks to @marcusburghardt for the help (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix rule definitions and warnings to more clear (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Wrap lines in oval check definition (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/oval/shared.xml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/bash/shared.sh (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/ansible/shared.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/ansible/shared.yml (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Set rule prodtype sle platforms only (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-
session/accounts_users_netrc_file_permissions/rule.yml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop dead code from bash remediation and some double quote to prevent
globbing and word splitting. (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Assign CCE SLE ids for accounts_users_netrc_file_permissions rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add implementation for accounts_users_netrc_file_permissions (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - The expat package provides xmlwf which is not being used anymore. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add CMake rules to style guide (Matthew Burket <mburket@redhat.com>)
 - Update strategy shall be one of the given values (Matthew Burket
<mburket@redhat.com>)
 - Update strategy in remediation to include combination (Matthew Burket
<mburket@redhat.com>)
 - Update warning types to include all types of the XCCDF specification (Matthew
Burket <mburket@redhat.com>)
 - Update controls docs (Matthew Burket <mburket@redhat.com>)
 - ubuntu2204: cis_level1_server: Add rule sshd_limit_user_access (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule sshd_limit_user_access (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - sshd_limit_user_access: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - sshd_limit_user_access: Add OVAL (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - sshd_limit_user_access: Update rule description (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update shared.xml (Rumen <77793453+rumch-se@users.noreply.github.com>)
 - Update in OVAL regexp , updates in tests (rchikov <rumen.chikov@suse.com>)
 - Simplify OVAL for rule aide_build_database (Jan Černý <jcerny@redhat.com>)
 - remove trailing spaces (svet-se <svetlin.boychev@suse.com>)
 - Revert 06d377c4f5a6b3327959b498d40318c9465f0e17. (Gabriel Becker
<ggasparb@redhat.com>)
 - update rule sles 15-010340 and file_permissions template (svet-se
<svetlin.boychev@suse.com>)
 - OCPBUGS 7816: Fix remediation for sshd-set-loglevel-info (Vincent Shen
<wenshen@redhat.com>)
 - ubuntu2204: cis_level2_workstation: Add rule all_apparmor_profiles_enforced
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_server: Add rule all_apparmor_profiles_enforced
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level2_workstation: Add rule all_apparmor_profiles_enforced
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level2_server: Add rule all_apparmor_profiles_enforced
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_in_enforce_complain_mode: bash: Add Ubuntu bits
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_in_enforce_complain_mode: Add Ubuntu bits to (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_enforced: Add SCE check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_enforced: bash: Add Ubuntu bits (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_enforced: Add Ubuntu bits to description (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Updates in bash and ansible remediation (rchikov <rumen.chikov@suse.com>)
 - Test to trigger automatus. (Gabriel Becker <ggasparb@redhat.com>)
 - Add --no-remove-machine-only to runs of AutoMatus in gating. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add option to keep machine platforms in test_rule_in_container.sh. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add OVAL check for nftables_ensure_default_deny_policy rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add nftables_ensure_default_deny_policy to CIS SLE15 control (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add rule definition for nftables default deny policy (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - SRG-APP-000456-CTR-001130 is not applicable (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000456)
 - SRG-APP-000447-CTR-001100: This control is inherently met (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000447)
 - Add mount[var-tmp] platform to mount_option_var_tmp_bind (Matthew Burket
<mburket@redhat.com>)
 - No remediation warning for fapolicy_default_deny (Milan Lysonek
<mlysonek@redhat.com>)
 - Revert package version enforcing for xmldiff in CI. (Gabriel Becker
<ggasparb@redhat.com>)
 - Include rule_title in Ansible tasks names (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix change in Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Update OL9 stig_gui (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Move template platform_mount to use cpe-oval from oval (Matthew Burket
<mburket@redhat.com>)
 - Missing wrong_value_2.fail.sh test added (rchikov <rumen.chikov@suse.com>)
 - Optimizations in bash and ansible parts (rchikov <rumen.chikov@suse.com>)
 - Update of ansible part (rchikov <rumen.chikov@suse.com>)
 - templates/mount_option: Switch mount Ansible remediation module's state back
to 'mounted' (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - permissions/partitions: Add mount[] platform to mount_option_tmp* and
mount_option_var_tmp* rules (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - shared/applicability: Replace partition-tmp and partition-var-tmp with a new
templated platform mount[] (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Revert change in test scenario script (Marcus Burghardt
<maburgha@redhat.com>)
 - Update linux_os/guide/system/network/network-
nftables/nftables_rules_permanent/ansible/sle15.yml (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Enable SCE check in set_nftables_table for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable set_nftables_table rule for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Ensure the passwd package during the tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Add support for comma-separated version expressions (Jan Černý
<jcerny@redhat.com>)
 - Enable ensure_root_password_configured for RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix change in enable_authselect Ansible remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix tasks in ansible_sssd_ldap_config (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix authselect check task (Marcus Burghardt <maburgha@redhat.com>)
 - Add documentation for the os_linux platform (Jan Černý <jcerny@redhat.com>)
 - Support versions in the os_linux platform (Jan Černý <jcerny@redhat.com>)
 - Add a warning to AutoMatus (Jan Černý <jcerny@redhat.com>)
 - ensure_root_password_configure: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule ensure_root_password_configured
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule ensure_root_password_configured
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ensure_root_password_configured: Add OVAL check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule ensure_root_password_configured (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Enable service_nftables_enabled for RHEL7 and RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable ensure_shadow_group_empty for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable bash remediation for all platforms (Marcus Burghardt
<maburgha@redhat.com>)
 - OCPBUGS-10473: Adds instructions to several OCP rules (Jakub Hrozek
<jhrozek@redhat.com>)
 - Mitigate xmldiff package upgrade problem. (Gabriel Becker
<ggasparb@redhat.com>)
 - Import default sysctl file from constants.py (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update rule description about block devices (Marcus Burghardt
<maburgha@redhat.com>)
 - Extend unit test data by a CPE OVAL component (Jan Černý
<jcerny@redhat.com>)
 - Add a simple unit test for the XMLContent class (Jan Černý
<jcerny@redhat.com>)
 - Add RHEL platforms to rsyslog_logging_configured (Matthew Burket
<mburket@redhat.com>)
 - ensure_shadow_group_empty: oval: Improve criteria comment (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ensure_shadow_group_empty: bash: Remove non-remediation line (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Ensure /etc/cron.daily exists (Jan Černý <jcerny@redhat.com>)
 - Fix data stream component parsing (Jan Černý <jcerny@redhat.com>)
 - Update documentation on sysctl template (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add sysctl_remediate_drop_in_file to ansible fix (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Use sysctl_remediate_drop_in_file property (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Use jinja2 filter replace instead of bash (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Simplify a bit the rules (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update OL9 STIG profile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - ubuntu2204: cis_level1_server: Add rule package_avahi_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule package_avahi_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - package_avahi_removed: Add ubuntu prodtypes, cis references and pkgname
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ensure_shadow_group_empty: tests: Add test for no_shadow_group and (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ensure_shadow_group_empty: oval: Change logic in case of no shadow group
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: Move from approved_macs to strong_macs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: Move from approved_ciphers to strong_ciphers (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update ssg/constants.py (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Improve wording in OVAL comments (Marcus Burghardt <maburgha@redhat.com>)
 - Increase regular expression flexibility (Jan Černý <jcerny@redhat.com>)
 - Remove check of the "new" AIDE database (Jan Černý <jcerny@redhat.com>)
 - Remove confused test scenario (Jan Černý <jcerny@redhat.com>)
 - revert cce changes (svet-se <svetlin.boychev@suse.com>)
 - OCP4 STIG: Consolidate duplicate rules for SRG-APP-000429-CTR-001060, add
policy file (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000429)
 - Drop state_tcp/udp_listening_inet_ports filter (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Enable ip6tables_rules_for_open_ports for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable iptables_rules_for_open_ports for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL7 CIS controlfile for iptables policies (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable iptables and ip6tables rules for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix reference id to pcidss4 as intended (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add missing rules to PCIDSS-v4 (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add to pcidss4 profile ntp and timesyncd rules (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop requirement id from title string (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Drop Req prefix from pcidss4 reference ids (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Update CIS control files for RHEL (Marcus Burghardt <maburgha@redhat.com>)
 - Enable has_nonlocal_mta rule for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Corrections in bash parts (rchikov <rumen.chikov@suse.com>)
 - ensure_shadow_group_empty: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Introduce option to var_user_initialization_files_regex (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Test scenarios for dot_no_world_writable_programs (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update dot_no_world_writable_programs OVAL (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update var_user_initialization_files_regex.var (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update CIS control files for RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable service_nftables_disabled for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - var_pam_wheel_group_for_su: Fix title (Eduardo Barretto
<edusbarretto@gmail.com>)
 - Some additional corrections (rchikov <rumen.chikov@suse.com>)
 - has_nonlocal_mta: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update ANSSI version for OL products (Watson Sato <wsato@redhat.com>)
 - Explicitly set SELinux type (Jan Černý <jcerny@redhat.com>)
 - Update in bash part (rchikov <rumen.chikov@suse.com>)
 - Update linux_os/guide/system/network/network-
nftables/var_nftables_base_chain_priorities.var (Rumen <77793453+rumch-
se@users.noreply.github.com>)
 - Small correction (rchikov <rumen.chikov@suse.com>)
 - Small corrections (rchikov <rumen.chikov@suse.com>)
 - Update CTF to its new home in the ComplianceAsCode org (Matthew Burket
<mburket@redhat.com>)
 - ensure_pam_wheel_group_empty: bash: Fix bash shellcheck (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - use_pam_wheel_for_su: Remove ubuntu prodtypes and references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add pam wheel rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add pam wheel rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ensure_pam_wheel_group_empty: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ensure_pam_wheel_group_empty: Add OVAL check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ensure_pam_wheel_group_empty: Add bash remediation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule ensure_pam_wheel_group_empty (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - use_pam_wheel_group_for_su: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - use_pam_wheel_group_for_su: Add OVAL check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - use_pam_wheel_group_for_su: Add bash remediation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule use_pam_wheel_group_for_su (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add variable var_pam_wheel_group_for_su (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Include test scenarios for RHEL7 and CIS (Marcus Burghardt
<maburgha@redhat.com>)
 - Set sshd_strong_kex variable in CIS RHEL7 control (Marcus Burghardt
<maburgha@redhat.com>)
 - Complete 5.3.15 requirement for CIS RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unused imports (Jan Černý <jcerny@redhat.com>)
 - delete rule SLES-15-040280 (svet-se <svetlin.boychev@suse.com>)
 - Remove unused variables (Jan Černý <jcerny@redhat.com>)
 - ensure_shadow_group_empty: bash: Improve remediation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ensure_shadow_group_empty: oval: Improve check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add CPE OVAL to the checklist catalog (Jan Černý <jcerny@redhat.com>)
 - OCPBUGS-8347: Disable the check for scheduler's bind-address option, the
option was removed from newer kuber versions (Jakub Hrozek <jhrozek@redhat.com>)
 - Disable logrotate timer in ensure_logrotate_activated tests (Matthew Burket
<mburket@redhat.com>)
 - OCP: Disable rules for HyperShift (Vincent Shen <wenshen@redhat.com>)
 - ensure_shadow_group_empty: Add OVAL check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Bump version for 0.1.68 (Matthew Burket <mburket@redhat.com>)
 - OCP4 STIG: Cover SRG-APP-000246-CTR-000605 and SRG-APP-000435-CTR-001070
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000435 #PP-000246)
 - OCP4 STIG: SRG-APP-000190-CTR-000500 is covered by setting the OAuth client
timeout (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000190)
 - Remove redundant platforms from partitions/mount_option_* rules (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Add check for /etc/fstab entries in mount_option template (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - SLE improve kernel module disabled rule (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Use drop in file for sysctl variables for SLE platforms (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - fix: ctest: test_assert_reference_unique.py handle pytest v2.7 (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ctest: skip test_assert_reference_unique.py if not py3 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Add missing rules for pcidss v4 control file (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix reference key naming (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Drop reference wrongly added during rebase (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix rule names (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Extract rules from SLE15 profile to PCI-DSS v4 control file (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Use PCI-DSS v4 control file as base for the profile (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add support for PCI DSS v4 refernce support (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add PCI-DSS v4 relevant requirement ids as references (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix status from pending to partial where needed (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add PCI DSS v4 control (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - fix: ctest: unique-cces: only if PYTHON_VERSION_MAJOR GREATER > 2 (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: ctest: only run test-generate_contributors if .git exists (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: ctest: only run respective ssg_controlrefcheck_test tests if product is
enabled (Markus Linnala <Markus.Linnala@knowit.fi>)
 - style: rsyslog_logfiles_attributes_modify/ansible: split long line (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - style: no_user_host_based_files/ansible: drop unnecessary block (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - style: no_host_based_files/ansible: drop unnecessary block (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: no_rsh_trust_files/ansible: drop unnecessary block (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: ansible: Rule names to start with upcase (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: grub2_bootloader_argument_absent: split long result_authselect_present
rules (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: grub2_bootloader_argument_absent: simplify result_authselect_present
rules (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: set_ipv6_loopback_traffic/ansible: when is jinja2 already (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: service_pcscd_enabled/ansible: service does not have masked parameter
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: usbguard_generate_policy/ansible: service does not have masked
parameter (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: service_chronyd_or_ntpd_enabled/ansible: service does not have masked
parameter (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: service_enabled/ansible: service does not have masked parameter
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - change: accounts_root_path_dirs_no_write/ansible: it is run as root (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - change: use_kerberos_security_all_exports/ansible: do not ignore_errors
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - change: service_chronyd_or_ntpd_enabled: do not ignore_errors (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: ansible: do not use ignore_errors w/ grep (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: ansible_check_authselect_integrity: use rc, not ignore_errors (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - change: service_disabled/ansible: use failed_when instead of ignore_errors
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: enable_authselect/tests/remediable.fail.sh: Allow testing under
podman (Markus Linnala <Markus.Linnala@knowit.fi>)
 - change: enable_authselect/ansible: use failed_when instead of ignore_errors
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible build_profile_remediations: add and use
remove_too_many_blank_lines (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible build_profile_remediations: tidy end of file (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible_playbook_check: shellcheck fixes (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: assert_reference_unique: convert to python (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: ansible-lint: ensure ctest jobs can be run parallel (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: yamllint: increase line length to 170 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: yamllint: require document-start as checked documents have it (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: yamllint: allow consistent indentation (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: ansible-lint_config silence non-fixable issues (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: ansible-lint: mark all files as playbooks (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: ssg_test_suite: RuleResult __eq__ (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: display_login_attempts: bad product comparison against ubuntu (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - OCPBUGS-8358: enable_fips_mode: Make it clear that RHCOS can't be FIPS-
enabled post-install (Jakub Hrozek <jhrozek@redhat.com>)
 - style: dconf_db_up_to_date: use [] when comparing multiple products (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: jinja: use product in when comparing multiple products, not or clause
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: security_patches_up_to_date: avoid product comparison when not needed
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: permissions_important_account_files: use <product prefix> in product
style when comparing products (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: log_rotation: bad ubuntu product names (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: package_xorg-x11-server-common_removed: simplify products (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - ubuntu2004: cis_level2_workstation: Add rule package_cups_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_workstation: Add rule package_cups_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule has_nonlocal_mta (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule has_nonlocal_mta (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - has_nonlocal_mta: Add OVAL (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule has_nonlocal_mta (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - postfix_network_listening_disabled: Restart postfix service (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule package_nfs-kernel-server_removed
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule package_nfs-kernel-server_removed
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add rule package_nfs-kernel-server_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - RHCOS4: Updated rule for rhel9 based RHCOS (Vincent Shen
<wenshen@redhat.com>)
 - Update Contributors for v0.1.67 (Matthew Burket <mburket@redhat.com>)
 - Update mailmap for v0.1.67 (Matthew Burket <mburket@redhat.com>)
 - Remove references from rules that not selected (Watson Sato
<wsato@redhat.com>)
 - Add references to rules configureing IPv6 stack (Watson Sato
<wsato@redhat.com>)
 - Don't disable IPv6 stack, but configure it instead (Watson Sato
<wsato@redhat.com>)
 - change ANSSI versions for SLE products (Vojtech Polasek
<vpolasek@redhat.com>)
 - update ANSSI version for RHEL products (Vojtech Polasek
<vpolasek@redhat.com>)
 - ANSSI control file is no longer draft (Vojtech Polasek <vpolasek@redhat.com>)
 - add enable_authselect rule to anssi control file (Vojtech Polasek
<vpolasek@redhat.com>)
 - make location of rule title consistent in the file and with other control
files (Vojtech Polasek <vpolasek@redhat.com>)
 - fix typos in the control file (Vojtech Polasek <vpolasek@redhat.com>)
 - add anssi references to rules (Vojtech Polasek <vpolasek@redhat.com>)
 - add missing CCEs to rules used in ANSSI profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix duplicate CCE (Vojtech Polasek <vpolasek@redhat.com>)
 - Set as planned Recommendations that need update (Watson Sato
<wsato@redhat.com>)
 - Update various Recommendations (Watson Sato <wsato@redhat.com>)
 - Update R39 - sudo configuration (Watson Sato <wsato@redhat.com>)
 - Update the hardening level of the recommendations (Watson Sato
<wsato@redhat.com>)
 - Remove eliminated recommendations (Watson Sato <wsato@redhat.com>)
 - Fix grub2 mds variable and value (Watson Sato <wsato@redhat.com>)
 - Update analysis of R6 recommendation (Watson Sato <wsato@redhat.com>)
 - Fix typo on RNG confidence (Watson Sato <wsato@redhat.com>)
 - Update documentations status to manual (Watson Sato <wsato@redhat.com>)
 - Update status of requirements (Watson Sato <wsato@redhat.com>)
 - Update AIDE seal requirement (Watson Sato <wsato@redhat.com>)
 - Upddate R78 as automated (Watson Sato <wsato@redhat.com>)
 - Update rules for R8 (Watson Sato <wsato@redhat.com>)
 - Update status of a few requirements (Watson Sato <wsato@redhat.com>)
 - Select audit rules for R76 (Watson Sato <wsato@redhat.com>)
 - Select rules for kernel compile config (Watson Sato <wsato@redhat.com>)
 - Select sysctl rules for R12 (Watson Sato <wsato@redhat.com>)
 - Move hidepid out of selected rules (Watson Sato <wsato@redhat.com>)
 - Update R8 with new rules (Watson Sato <wsato@redhat.com>)
 - Update R1 (Watson Sato <wsato@redhat.com>)
 - Update R9 with new rules (Watson Sato <wsato@redhat.com>)
 - Select sysctl rule for R13 (Watson Sato <wsato@redhat.com>)
 - Update R14 with sysctl rules (Watson Sato <wsato@redhat.com>)
 - Update R40 with rule for sudo timestamp_tmeout (Watson Sato
<wsato@redhat.com>)
 - Update R28 with rule for hidepid=2 (Watson Sato <wsato@redhat.com>)
 - Update status of remaining items (Watson Sato <wsato@redhat.com>)
 - Set status supported for items we can implement (Watson Sato
<wsato@redhat.com>)
 - Fix requirement levels (Watson Sato <wsato@redhat.com>)
 - Add CCEs to rules reference in ANSSI (Watson Sato <wsato@redhat.com>)
 - Add and remove ANSSI references in rules (Watson Sato <wsato@redhat.com>)
 - Update ANSSI-BP-028 to DRAFT v2.0 (Watson Sato <wsato@redhat.com>)
 - style: utils: use "not in" (Markus Linnala <Markus.Linnala@knowit.fi>)
 - style: build-scripts/verify_references.py: use "not in" (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: tests/unit/ssg_test_suite/test_matches_platform.py: use "is" to
compare to truthy (Markus Linnala <Markus.Linnala@knowit.fi>)
 - style: utils/add_platform_rule.py: compare None using is (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: tests/unit/ssg-module/test_build_remediations.py: unused variable
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: utils/srg_audit.py: no need to use format string (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: utils/ansible_playbook_to_role.py: simplify platform_version (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: tests: drop unused format params (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: automatus: help string: rule testing is supported by openscap (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: utils/ansible_playbook_to_role.py: add missing import
UnknownObjectException (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: ssg/content_diff.py: add missing idref as parameter (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: ssg/entities/profile_base.py: add missing import CPEDoesNotExist
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: tests/ssg_test_suite/log.py: mixup with format and sys.stderr (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: ssg/xml: drop duplicate definition of get_test_action_ref_element
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: ssg/build_yaml: there is not xccdf v1.2.4, but v1.2 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix/change: ssg/escape_regex: do not escape "," (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix/change: ssg etc: improve and use mkdir_p (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Improve the UX of remediation macros (Matej Tyc <matyc@redhat.com>)
 - Improve version sanity check (Jan Černý <jcerny@redhat.com>)
 - Clarify the usage of epoch in the documentation (Jan Černý
<jcerny@redhat.com>)
 - Add a BATS test for bash_compare_version (Jan Černý <jcerny@redhat.com>)
 - Change macro bash_compare_version (Jan Černý <jcerny@redhat.com>)
 - Remove a local location (Jan Černý <jcerny@redhat.com>)
 - Improve text consistency (Jan Černý <jcerny@redhat.com>)
 - Explain versions caveat in the documentation (Jan Černý
<jcerny@redhat.com>)
 - Add support for epoch in platform package (Jan Černý <jcerny@redhat.com>)
 - Introduce a macro that is rpm-agnostic (Jan Černý <jcerny@redhat.com>)
 - Recommend to not use package platforms (Jan Černý <jcerny@redhat.com>)
 - Remove release part of the version string (Jan Černý <jcerny@redhat.com>)
 - Support only numeric versions (Jan Černý <jcerny@redhat.com>)
 - Check package release for RPM packages (Jan Černý <jcerny@redhat.com>)
 - Fix quoting problems (Jan Černý <jcerny@redhat.com>)
 - Add a simpler example of the bash_pkg_conditional use (Jan Černý
<jcerny@redhat.com>)
 - Remove duplicate code (Jan Černý <jcerny@redhat.com>)
 - Remove the dist part of the version from the test (Jan Černý
<jcerny@redhat.com>)
 - Split macro bash_compare_version_rpm (Jan Černý <jcerny@redhat.com>)
 - Add documentation for package CPE platform (Jan Černý <jcerny@redhat.com>)
 - Add a description of algortihm (Jan Černý <jcerny@redhat.com>)
 - Remove dependency on real-world RPM packages (Jan Černý
<jcerny@redhat.com>)
 - Improve test names (Jan Černý <jcerny@redhat.com>)
 - Add BATS tests for bash_pkg_conditional_rpm macro (Jan Černý
<jcerny@redhat.com>)
 - Add Ansible statement for package version checking (Jan Černý
<jcerny@redhat.com>)
 - Add Bash conditional for package version checking (Jan Černý
<jcerny@redhat.com>)
 - Stop raising an exception (Jan Černý <jcerny@redhat.com>)
 - Align rhel7 dracut-fips-aesni remediations (Watson Sato <wsato@redhat.com>)
 - Regexp matches multiple lines (nnerdmann
<128606223+nnerdmann@users.noreply.github.com>)
 - fix loops within ansible template for rsyslog_files (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove package_avahi_removed from RHEL 9 CIS Level 2 (Matthew Burket
<mburket@redhat.com>)
 - Remove package_avahi-autoipd_removed from RHEL 9 CIS (Matthew Burket
<mburket@redhat.com>)
 - OCP change CatalogSource used to deploy CO (Vincent Shen
<wenshen@redhat.com>)
 - OCP change CatalogSource used to deploy CO (Vincent Shen
<wenshen@redhat.com>)
 - change: ssg/build_ovals.py: fail if OVAL definition ID does not match rule ID
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sysctl_crypto_fips_enabled: rhcos4: fix definition name to match rule
name (Markus Linnala <Markus.Linnala@knowit.fi>)
 - SRG-APP-000414-CTR-001010 is completely manual (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000414)
 - ubuntu2204: cis_level1_server: Make timesyncd default ntp service (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add ntp related rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ntp: Add ubuntu2004 platform and fix cis references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - service_chrony_enabled: Alter platform to package chrony (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - service_ntp_enabled: Add platform package ntp (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - service_timesyncd_enabled: Add platform not package chrony and ntp (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - service_timesyncd_enabled: Add packagename@ubuntu2204 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add url for ism in constants (Matthew Burket <mburket@redhat.com>)
 - OCP optimize rule for hypershift (Vincent Shen <wenshen@redhat.com>)
 - OCP4 STIG: SRG-APP-000243-CTR-000595 is covered with manual SCC rules as well
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000243)
 - OCP4 STIG: SRG-APP-000386-CTR-000920 is inherently met (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000386)
 - OCP4 STIG: SRG-APP-000384-CTR-000915 is covered by CVO (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000384)
 - OCP4 STIG: SRG-APP-000383-CTR-000910 is inherently met (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000383)
 - OCP4 STIG: SRG-APP-000142-CTR-000330 is implemented via several manual rules
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000142)
 - OCP4 STIG: SRG-APP-000141-CTR-000320: Fix typo in attribute (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000141)
 - sshd_use_strong_kex: oval: Remove fips check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule sshd_use_strong_kex (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - sshd_use_strong_kex: oval: Make comments more generic (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - sshd_use_strong_kex: Add ubuntu2204 prodtype and cis reference (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - installed_OS_is_ubuntu*: Improve title and description (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_workstation: Fix title and description (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Fix typo in rule name (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule
all_apparmor_profiles_in_enforce_complain_mode (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule
all_apparmor_profiles_in_enforce_complain_mode (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_in_enforce_complain_mode: Add SCE check (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_in_enforce_complain_mode: bash: Add ubuntu (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - all_apparmor_profiles_in_enforce_complain_mode: Add ubuntu prodtypes and
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - sudo_add_use_pty: depend on sudo being installed (Craig Andrews
<candrews@integralblue.com>)
 - make rule accounts_password_last_change_is_in_past not applicable to
containers (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove VMM reference from unit tests (Matthew Burket <mburket@redhat.com>)
 - Add /dev/shm to CIS Server Level 2 Kickstart on RHEL 7 (Matthew Burket
<mburket@redhat.com>)
 - Add /dev/shm to RHEL 9 CIS Workstation Level 1 kickstart (Matthew Burket
<mburket@redhat.com>)
 - Add /dev/shm to RHEL 9 CIS Server Level 1 kickstart (Matthew Burket
<mburket@redhat.com>)
 - Add /dev/shm to RHEL 9 CIS Server Level 2 kickstart (Matthew Burket
<mburket@redhat.com>)
 - Add /dev/shm to RHEL 7 CIS Workstation Level 2 kickstart (Matthew Burket
<mburket@redhat.com>)
 - Add /dev/shm to RHEL 7 CIS Workstation Level 1 kickstart (Matthew Burket
<mburket@redhat.com>)
 - Add /dev/shm to RHEL 7 CIS Server Level 1 kickstart (Matthew Burket
<mburket@redhat.com>)
 - Fix CCE URI (Jan Černý <jcerny@redhat.com>)
 - Corrections in the rule.yml (rchikov <rumen.chikov@suse.com>)
 - Remove vsrg reference from rules (Matthew Burket <mburket@redhat.com>)
 - From vmmsrg from documentation and test data (Matthew Burket
<mburket@redhat.com>)
 - Remove vmmsrg references from rules (Matthew Burket <mburket@redhat.com>)
 - Corrections in bash, ansible and variables (rchikov <rumen.chikov@suse.com>)
 - Optimize loop through protocol families (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add tests if no service listens we consider it pass (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-
nftables/nftables_rules_permanent/rule.yml (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Modify oval rule on missing/incorrect config to return fail (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/oval/shared.xml (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/tests/wrong.fail.sh (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/tests/correct.pass.sh (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/tests/correct.pass.sh (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-firewalld/ruleset_modifications/
ensure_firewall_rules_for_open_ports/tests/common.sh (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update ansible in file_permissions_binary_dirs (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add SCE flag to ubuntu2204 gate (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - cmake: Make test-ds-sce run for both ubuntu2004 and ubuntu2204 (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule set_nftables_table (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule set_nftables_table (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_nftables_table: sce: Add sce auditing script (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_nftables_table: bash: Add ubuntu platform (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_nftables_table: Add ubuntu prodtypes and cis references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule service_nftables_enabled (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule service_nftables_enabled (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - service_nftables_enabled: Add ubuntu prodtype and cis references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Include warning for NM Keyfiles in RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include RHEL reference for CIS firewalld zone rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL CIS requirement for privileged commands (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Remove systemctl restart command in test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve OVAL check regarding eligible partitions (Marcus Burghardt
<maburgha@redhat.com>)
 - Update bash remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Review and update test scenario scripts (Marcus Burghardt
<maburgha@redhat.com>)
 - Ensure perm filter is considered in regex (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce variable for rule regex (Marcus Burghardt <maburgha@redhat.com>)
 - Update the rule description and references (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve audit_privileged_commands OVAL readability (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible remediation for rsyslog_filecreatemode (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable rsyslog_filecreatemode rule for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Small fix in Bash remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Use check-fact-ref in platform element (Jan Černý <jcerny@redhat.com>)
 - sudo_custom_logfile: depend on sudo being installed (Craig Andrews
<candrews@integralblue.com>)
 - coredump_disable_storage: depend on systemd being installed (Craig Andrews
<candrews@integralblue.com>)
 - coredump_disable_backtraces: depend on systemd being installed (Craig Andrews
<candrews@integralblue.com>)
 - Add srg to account_passwords_pam_faillock_dir (Matthew Burket
<mburket@redhat.com>)
 - sudo_require_reauthentication: depend on sudo being installed (Craig Andrews
<candrews@integralblue.com>)
 - use_pam_wheel_for_su: depend on pam being installed (Craig Andrews
<candrews@integralblue.com>)
 - aide_build_database: ansible: Add ubuntu bits (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule
accounts_password_last_change_is_in_past (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule
accounts_password_last_change_is_in_past (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - accounts_password_last_change_is_in_past: Add cis@ubuntu references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule banner_etc_motd (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule banner_etc_motd (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - banner_etc_motd: bash: Add ubuntu platform (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - banner_etc_motd: Add ubuntu prodtypes and cis references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Remove of OVAL part (rchikov <rumen.chikov@suse.com>)
 - New SLE 12/15 rule all_apparmor_profiles_in_enforce_complain_mode which
covers CIS recommendation (rchikov <rumen.chikov@suse.com>)
 - Remove OVAL part (rchikov <rumen.chikov@suse.com>)
 - A new rule as a part of CIS profile for SLE 12/15 -
all_apparmor_profiles_enforced (rchikov <rumen.chikov@suse.com>)
 - Add package_ftp_removed rule (cortesana <acortes@redhat.com>)
 - vlock_installed: apply only to platform machine (Craig Andrews
<candrews@integralblue.com>)
 - package_pam_pwquality_installed: depend on pam being installed (Craig Andrews
<candrews@integralblue.com>)
 - accounts_passwords_pam_tally2: depend on pam being installed (Craig Andrews
<candrews@integralblue.com>)
 - accounts_passwords_pam_faildelay_delay: depend on pam (Craig Andrews
<candrews@integralblue.com>)
 - apparmor: apply only to platform machine (Craig Andrews
<candrews@integralblue.com>)
 - ubuntu2204: cis_level1_server: Add rule package_cyrus-imapd_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule package_cyrus-imapd_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - package_cyrus-imapd_removed: Add ubuntu prodtypes and cis references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule package_nginx_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule package_nginx_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - package_nginx_removed: Add ubuntu prodtypes and cis references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - OCP4 STIG: Fix status of SRG-APP-000360-CTR-000815 (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000360)
 - nist_rhcos4: Fix typo in rule name (Jakub Hrozek <jhrozek@redhat.com>)
 - Add /dev/shm to CIS Workstation Level 2 Kickstart on RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - rsyslog_filecreatemode: bash: Improve remediation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add package_dnsmasq_removed rule (cortesana <acortes@redhat.com>)
 - Update pam_pwquality requirements in CIS (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS RHEL control files regarging nginx (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce rule to remove nginx package (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce rule to remove cyrus-imapd package (Marcus Burghardt
<maburgha@redhat.com>)
 - rsyslog_filecreatemode: oval: Improve comments (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_filecreatemode: Improve ocil_clause (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_filecreatemode: bash: Make it multi_platform_all (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_filecreatemode: tests: Remove platform (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_filecreatemode: oval: Simplify tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_files_permissions: Remove reference cis@ubuntu2004 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule rsyslog_filecreatemode (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule rsyslog_filecreatemode (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - rsyslog_filecreatemode: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_filecreatemode: Add OVAL audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_filecreatemode: Add bash remediation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule rsyslog_filecreatemode (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - SRG-APP-000243-CTR-000600 is completely manual (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000243)
 - OCP4 STIG: SRG-APP-000431-CTR-001065 is inherently met (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000431)
 - OCP4 STIG: Two SRGs that relate to SC-24 are inherently met (Jakub Hrozek
<jhrozek@redhat.com>)
 - Enable sshd_enable_warning_banner_net for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix conditional in bash remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Introduce Ansible remediation for journal-remote socket (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable systemd-journal-remote rule for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Corrections in the rule package_openldap-clients_removed (rchikov
<rumen.chikov@suse.com>)
 - Enable rule for RHEL and update CIS controlfiles (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediations in alignment to OVAL (Marcus Burghardt
<maburgha@redhat.com>)
 - Align test scenarios to the OVAL updates (Marcus Burghardt
<maburgha@redhat.com>)
 - Increase robustness of OVAL check (Marcus Burghardt <maburgha@redhat.com>)
 - Small change in rule.yml (rchikov <rumen.chikov@suse.com>)
 - Disable SLE platforms for password_quality-based rules (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Small corrections in package_dhcp_client_removed (rchikov
<rumen.chikov@suse.com>)
 - Changes in rule.yml (rchikov <rumen.chikov@suse.com>)
 - Fix package names for some SUSE packages (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add in ANSSI control cracklib_accounts_password_ rules (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop extra pam_pwquality rules we have in CIS SLE controls (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix automatus on Python 3.6 (Matthew Burket <mburket@redhat.com>)
 - OCP4 STIG: SRG-APP-000092-CTR-000165,SRG-APP-000111-CTR-000220 are covered by
two existing rules (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000092 #PP-000111)
 - Complete the 6.2.14 CIS requirement for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable no_forward_files rule for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Update requirements for .netrc in RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Adjust fixtext in accounts_password_pam_pwhistory_remember_password_auth
(Matthew Burket <mburket@redhat.com>)
 - OCP4 STIG: SRGs related to NIST CM-11 are inherently met (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4 STIG: SRG-APP-000039-CTR-000110 is resolved by
project_config_and_template_network_policy (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000039)
 - OCP4: Add a new rule project_config_and_template_network_policy (Jakub Hrozek
<jhrozek@redhat.com>)
 - socket_systemd-journal-remote_disabled: bash: Remove package install (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - socket_systemd-journal-remote_disabled: Fix prodtype position (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Update references for no_empty_passwords rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable no_empty_passwords_etc_shadow rule for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Small corrections (rchikov <rumen.chikov@suse.com>)
 - Resolve issues found in review of #10185 (Matthew Burket
<mburket@redhat.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Correction in rule package_openldap-servers_removed (rchikov
<rumen.chikov@suse.com>)
 - socket_systemd-journal-remote_disabled: bash: Move away from bash macro
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - socket_systemd-journal-remote_disabled: Add prodtype and alter ocil and
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - macros: fixtext: Add fixtext_socket_disabled macro (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - socket_systemd-journal-remote_disabled: Add tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - macros: bash: reset-failed services only if they are in failed state (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - macros: fixtext: Fix indentation or build fails (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Rename rule to socket_systemd-journal-remote_disabled (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - service_systemd-journal-remote_disabled: Add OVAL (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - service_systemd-journal-remote_disabled: Add bash remediation (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - service_systemd-journal-remote_disabled: Remove template (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - service_systemd-journal-remote_disabled: Fix fixtext field (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - service_systemd-journal-remote_disabled: Improve Note (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule service_systemd-journal-
remote_disabled (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add rule service_systemd-journal-remote_disabled (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update password hashing algorithm CIS requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - New rule package_dhcp_client_removed (rchikov <rumen.chikov@suse.com>)
 - Update docs/manual/developer/01_introduction.md (Matthew Burket
<m@tthewburket.com>)
 - Update CIS requirement for RHEL products (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve test scenatio scripts (Marcus Burghardt <maburgha@redhat.com>)
 - Update remediation to ignore users without password (Marcus Burghardt
<maburgha@redhat.com>)
 - Increase robustness of OVAL check (Marcus Burghardt <maburgha@redhat.com>)
 - Enable accounts_set_post_pw_existing rule for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Replacement of > with -gt in if statements (rchikov <rumen.chikov@suse.com>)
 - Changes in bash remediation for accounts_password_set_max_life_existing and
accounts_password_set_min_life_existing (rchikov <rumen.chikov@suse.com>)
 - OCP: Optimize HyperShift Support (Vincent Shen <wenshen@redhat.com>)
 - OCP4 fix kubelet_enable_protect_kernel_defaults (Vincent Shen
<wenshen@redhat.com>)
 - OCP4: New rule: container_security_operator_exists covers SRG-
APP-000516-CTR-001335, remove all the other references to this control (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000516)
 - OCP4 STIG: Remove references to SRG-APP-000516-CTR-001330, the rule is
inherently met (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000516)
 - OCP4 STIG: SRG-APP-000516-CTR-000790: Add mitigation and status justification
to a Does Not Meet control (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000516)
 - OCP4 STIG: Add status justification and artifact description to two rules
covering IA-11 (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4 STIG: Add status justification to two SRGs related to the IA-5 control
family (Jakub Hrozek <jhrozek@redhat.com>)
 - Rule description was changed (rchikov <rumen.chikov@suse.com>)
 - OCP4 STIG: Add status justification to SRG-APP-000178-CTR-000470, covering
IA-6 (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000178)
 - set_ufw_loopback_Traffica: Add Ubuntu prodtype (Eduardo Barretto
<edusbarretto@gmail.com>)
 - Assignment of SLE 12/15 CCE codes for rule security_patches_up_to_date
(rchikov <rumen.chikov@suse.com>)
 - ubuntu2204: cis_level1_server: Add rule set_ufw_default_rule (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule set_ufw_default_rule (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - set_ufw_default_rule: Add sce check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule set_ufw_default_rule (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule set_ufw_loopback_traffic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule set_ufw_loopback_traffic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - set_ufw_loopback_traffic: Add sce check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_ufw_loopback_traffic: Add bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule set_ufw_loopback_traffic (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule ufw_rules_for_open_ports (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ufw_rules_for_open_ports: Add sce check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule ufw_rules_for_open_ports (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rules iptables_rules_for_open_ports
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ip6tables_rules_for_open_ports: Add sce check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule ip6tables_rules_for_open_ports (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - iptables_rules_for_open_ports: Add sce check (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule iptables_rules_for_open_ports (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Removal of $ from some parts in rule.yml (rchikov <rumen.chikov@suse.com>)
 - ubuntu2204: cis_level1_server: Add rule
set_password_hashing_algorithm_logindefs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_password_hashing_algorithm_logindefs: bash: Add ubuntu platform (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - set_password_hashing_algorithm_logindefs: Adjust description to get (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - set_password_hashing_algorithm_logindefs: Add ubuntu2204 prodtype and
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - var_password_hashing_algorithm: Add yescrypt option (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - OCP: Add OCP 4.13 support for applicable rules (Vincent Shen
<wenshen@redhat.com>)
 - package_iptables-persistent_removed: Fix typo in package name (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - wireless_disable_interfaces: Add ubuntu specific bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: product: Fix oval feed name and add NetworkManager to (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - New tests added (rchikov <rumen.chikov@suse.com>)
 - Corrections in rule.yml (rchikov <rumen.chikov@suse.com>)
 - Small corrections in bash and ansible code (rchikov <rumen.chikov@suse.com>)
 - OCP4 STIG: The majority of controls related to CM-5 are inherently met (Jakub
Hrozek <jhrozek@redhat.com>)
 - OCP4 STIG: SRG-APP-000131-CTR-000285 is configurable with
reject_unsigned_images_by_default (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000131)
 - Replace login_defs platform by package platform (Jan Černý
<jcerny@redhat.com>)
 - Increase the robustness of OVAL check (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix in USBGuard rules' platform (cortesana <acortes@redhat.com>)
 - Disable FIPS-related rule group for 'osbuild' platform (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - ubuntu2204: cis_level1_server: Add rule service_chronyd_enabled (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule service_chronyd_enabled (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - service_chronyd_or_ntpd_enabled: Remove Ubuntu cis references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - service_chronyd_enabled: Add Ubuntu cis references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule rsyslog_nolisten (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_nolisten: Add cis@ubuntu2204 reference (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule permissions_local_var_log (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Include test scenario for no password users (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for checking password last change in RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - permissions_local_var_log: Add cis@ubuntu2204 reference (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - OCP4 STIG: Remove audit_profile_set from rules: in controls where it's only
related and will be covered by RHCOS checks later (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4 STIG: SRG-APP-000380-CTR-000900 is Inherently Met; add justification
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000380)
 - OCP4 STIG: SRG-APP-000375-CTR-000870 is Inherently Met; add justification
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000375)
 - OCP4 STIG: SRG-APP-000374-CTR-000865 is Inherently Met; add justification
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000374)
 - OCP4 STIG: SRG-APP-000181-CTR-000485 is Inherently Met; add justification
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000181)
 - OCP4 STIG: SRG-APP-000118-CTR-000240: Add justification to a Does Not Meet
control (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000118)
 - OCP4 STIG: SRG-APP-000090-CTR-000155: Add justification to a Does Not Meet
control (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000090)
 - OCP4 STIG: SRG-APP-000121-CTR-000255, SRG-APP-000122-CTR-000260 and RG-
APP-000123-CTR-000265 are covered by manual rules (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000123 #PP-000122 #PP-000121)
 - OCP4 STIG: SRG-APP-000089-CTR-000150 and SRG-APP-000101-CTR-000205 are
covered by setting the proper audit log (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000101 #PP-000089)
 - OCP4 STIG: SRG-APP-000069-CTR-000125 is a manual rule (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000069)
 - OCP4: oauth_login_template_set: Add an e2e test (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4 STIG: SRG-APP-000068-CTR-000120: Convert the replies to per-rule policy
files (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000068)
 - OCP4: Add a new rule oauth_provider_selection_set (Jakub Hrozek
<jhrozek@redhat.com>)
 - Corrections in rule (rchikov <rumen.chikov@suse.com>)
 - add cap_system_chroot capability to podman container when running automatus
in container mode (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix broken CI (Jan Černý <jcerny@redhat.com>)
 - New tests added (rchikov <rumen.chikov@suse.com>)
 - Update CIS RHEL requirements for log files permissions (Marcus Burghardt
<maburgha@redhat.com>)
 - Follow alphabetical order in prodtype clause (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Forgot to update description (sampsone <esampson@suse.com>)
 - OCP4 STIG: Cover SRG-APP-000359-CTR-000810 and SRG-APP-000360-CTR-000815
(AU-5) (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000359 #PP-000360)
 - correction in oval - regexp and tests (rchikov <rumen.chikov@suse.com>)
 - Include partition_for_dev_shm in CIS RHEL7 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4 STIG: SRG-APP-000126-CTR-000275 is covered by FIPS and using TLS for log
forwarding (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000126)
 - Make sure all CIS SLE 1.10 rules are built (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Remove nonexistent directories from CMake (Jan Černý <jcerny@redhat.com>)
 - Move CPE OVALs (Jan Černý <jcerny@redhat.com>)
 - Move remaining applicability checks to shared (Jan Černý
<jcerny@redhat.com>)
 - Build CPE OVAL separately (Jan Černý <jcerny@redhat.com>)
 - Change language type for OVAL templates (Jan Černý <jcerny@redhat.com>)
 - Introduce new template language type CPE-OVAL (Jan Černý
<jcerny@redhat.com>)
 - Prevent creating empty <oval:states> element (Jan Černý
<jcerny@redhat.com>)
 - Drop file added by mistake (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Enable package_gdm_removed for SLE platforms (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add gdm-related rules to CIS controls for sle12 and sle15 (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - OCP4 STIG: Clean up the usage of fips_mode_enabled_on_all_nodes (Jakub Hrozek
<jhrozek@redhat.com>)
 - Fix CIS req ids to be explicitely declared as strings (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add CIS SLE reference ids in the rule (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Add SLE platform to dconf_gnome_disable_user_list rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update CIS SLE12 reference requirement id (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Set product variable for dconf gdm subdir for SLE products (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - OCP4 STIG: SRG-APP-000290-CTR-000670: Inherently met, add status
justification (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000290)
 - OCP4 STIG: SRG-APP-000109-CTR-000215 is Does Not Meet despite having a rule
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000109)
 - A correction in description (rchikov <rumen.chikov@suse.com>)
 - Remove CIS RHEL references from service_avahi-daemon_disabled (Marcus
Burghardt <maburgha@redhat.com>)
 - Remove api_server_audit_log_maxsize remediation (Lance Bragstad
<lbragsta@redhat.com>)
 - Update CIS RHEL control files for avahi rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Enable avahi related rules to RHEL products (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4 STIG: Cover SRG-APP-000297-CTR-000705 with a new rule
oauth_logout_url_set (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000297)
 - A correction in regex in OVAL (rchikov <rumen.chikov@suse.com>)
 - a correction in OVAL part (rchikov <rumen.chikov@suse.com>)
 - postfix_prevent_unrestricted_relay: allow whitespaces and no comma for
'smtpd_client_restrictions' value (Renaud Métrich <rmetrich@redhat.com>)
 - Update OVAL lines to satisfy the Style Guide (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation platform for audit_mac_modification (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL CIS controlfiles for mac_modification (Marcus Burghardt
<maburgha@redhat.com>)
 - Limit the rule to SLE platforms only (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rs
yslog_logging_configured/rule.yml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Use values instead of variables in tests (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - SUSE: fix rule package_dhcp_removed (sampsone <esampson@suse.com>)
 - RHCOS4: Temporarily disable selinux_confinement_of_daemons to work around
kubelet bug (Jakub Hrozek <jhrozek@redhat.com>)
 - Use integer comparison for api_server_audit_log_maxsize (Lance Bragstad
<lbragsta@redhat.com>)
 - Creates comments informing the dictionary structure (Marcus Burghardt
<maburgha@redhat.com>)
 - update the Ubuntu products (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - New SLE 12/15 rule audit_rules_mac_modification_usr_share (rchikov
<rumen.chikov@suse.com>)
 - CIS numbers for SLE 12/15 rule audit_rules_login_events_tallylog (rchikov
<rumen.chikov@suse.com>)
 - OCP4 fix version dection for OCP (Vincent Shen <wenshen@redhat.com>)
 - New SLE 15 rule set_nftables_base_chain (rchikov <rumen.chikov@suse.com>)
 - A coorecting checkig for sudo package (rchikov <rumen.chikov@suse.com>)
 - Introduce commit messages style guidelines (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - In the user guide upgrade to RHEL 9 from RHEL 6 (Matthew Burket
<mburket@redhat.com>)
 - Fix typo in dev guide around product removal (Matthew Burket
<mburket@redhat.com>)
 - Ensure that the old .adoc files are consistent with each other (Matthew
Burket <mburket@redhat.com>)
 - Update no_forward_files to use OVAL macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_umask_interactive_users to use OVAL macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update file_permissions_home_dirs to use OVAL macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_user_dot_no_world_writable_programs to use OVAL macro (Marcus
Burghardt <maburgha@redhat.com>)
 - Update accounts_user_dot_group_ownership to use OVAL macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_user_dot_user_ownership to use OVAL macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_user_interactive_home_directory_exists to use OVAL macro
(Marcus Burghardt <maburgha@redhat.com>)
 - Update accounts_user_interactive_home_directory_defined to use OVAL macro
(Marcus Burghardt <maburgha@redhat.com>)
 - Update accounts_users_home_files_permissions to use OVAL macro (Marcus
Burghardt <maburgha@redhat.com>)
 - Update accounts_users_home_files_groupownership to use OVAL macro (Marcus
Burghardt <maburgha@redhat.com>)
 - Update accounts_users_home_files_ownership to use OVAL macro (Marcus
Burghardt <maburgha@redhat.com>)
 - Update file_permissions_home_directories to use OVAL macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update file_groupownership_home_directories to use OVAL macro (Marcus
Burghardt <maburgha@redhat.com>)
 - Update file_ownership_home_directories to use OVAL macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Include macro to create interactive users object (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix broken link to statistics page. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix in sudo_require_reauthentication (rchikov <rumen.chikov@suse.com>)
 - Add deprecation notice to docs/manual/user_guide.adoc (Matthew Burket
<mburket@redhat.com>)
 - Convert the user guide to markdown and read the docs (Matthew Burket
<mburket@redhat.com>)
 - Update rules for RHEL 9 SIG (Matthew Burket <mburket@redhat.com>)
 - Update test scenarios for accounts_password_last_change_is_in_past (Marcus
Burghardt <maburgha@redhat.com>)
 - Add implementation for rsyslog_logging_configured rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update bios_enable_execution_restrictions PSC for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update harden_sshd_macs_openssh_conf_crypto_policy PSC for RHEL 9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Update rsyslog_nolisten PSC for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Minor change to grub2_audit_backlog_limit_argument (Matthew Burket
<mburket@redhat.com>)
 - Update no_shelllogin_for_systemaccounts PSC for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Minor fix in grub2_admin_username PSC for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Adjust MACs for RHEL 9 STIG in SSHD (Matthew Burket <mburket@redhat.com>)
 - Add check text for accounts_password_pam_unix_rounds-* (Matthew Burket
<mburket@redhat.com>)
 - Ensure that < and > HTML encoding have a semicolon (Matthew Burket
<mburket@redhat.com>)
 - Fix accounts_passwords_pam_faillock_unlock_time PSC content (Matthew Burket
<mburket@redhat.com>)
 - Update vuldiscussion in ssh_keys_passphrase_protected for RHEL 9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Update checktext for accounts_umask_interactive_users in RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add checktext to kernel_module_sctp_disabled for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update harden_sshd_ciphers_openssh_conf_crypto_policy PSC for RHEL 9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Update harden_sshd_ciphers_openssh_conf_crypto_policy PSC for RHEL 9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Update harden_sshd_ciphers_opensshserver_conf_crypto_policy PSC for RHEL 9
(Matthew Burket <mburket@redhat.com>)
 - Update ensure_redhat_gpgkey_installed PSC for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update PSC file_permissions_sshd_private_key for RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - check -> checktext in RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Fix RHEL 9 to full_name in RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Add check text to package_audispd-plugins_installed (Matthew Burket
<mburket@redhat.com>)
 - Move audit_rules_login_events_faillock to use /var/log/faillock (Matthew
Burket <mburket@redhat.com>)
 - Fix fix -> fixtext package_nss-tools_installed (Matthew Burket
<mburket@redhat.com>)
 - Clean up sysctl_net_ipv4_icmp_echo_ignore_broadcasts (Matthew Burket
<mburket@redhat.com>)
 - Fix up kernel_module_sctp_disabled (Matthew Burket <mburket@redhat.com>)
 - Fix file_groupowner_grub2_cfg to be group owner (Matthew Burket
<mburket@redhat.com>)
 - Add PSC content for package_audispd-plugins_installed (Matthew Burket
<mburket@redhat.com>)
 - Add PSC content for kernel_module_sctp_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add two rules to SRG-OS-000021-GPOS-00005 for the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Always use aide_periodic_cron_checking for the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add package_nss-tools_installed to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix `&gt` to `&gt;` for audit rules in RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update configure_crypto_policy for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Minor fix on configure_openssl_tls_crypto_policy for RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add package_audispd-plugins_installed to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add accounts_password_pam_unix_rounds_* rules to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add kernel_module_sctp_disabled to the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL 9 specific content for installed_OS_is_vendor_supported (Matthew
Burket <mburket@redhat.com>)
 - More update to network_configure_name_resolution for PSC (Matthew Burket
<mburket@redhat.com>)
 - Remove extraneous text from grub2_password for PSC (Matthew Burket
<mburket@redhat.com>)
 - Update dconf_gnome_disable_ctrlaltdel_reboot for poliy specific content
(Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_grub2_cfg to use group-owner in PSC (Matthew Burket
<mburket@redhat.com>)
 - Update auditd_audispd_configure_sufficiently_large_partition policy specific
content (Matthew Burket <mburket@redhat.com>)
 - Fix up accounts_user_interactive_home_directory_defined for policy specifc
content (Matthew Burket <mburket@redhat.com>)
 - Update SSH crypto rules in policy specific content (Matthew Burket
<mburket@redhat.com>)
 - Clean up security_patches_up_to_date for policy specifc content (Matthew
Burket <mburket@redhat.com>)
 - Update accounts_password_set_min_life_existing to use passwd (Matthew Burket
<mburket@redhat.com>)
 - Update rules about unauthorized accounts in policy specific content (Matthew
Burket <mburket@redhat.com>)
 - Fix small errors in account_emergency_expire_date policy specifc content
(Matthew Burket <mburket@redhat.com>)
 - Fix capitalization in accounts_passwords_pam_faillock_unlock_time for PSC
(Matthew Burket <mburket@redhat.com>)
 - Update crypto policy for policy specific content (Matthew Burket
<mburket@redhat.com>)
 - Update kernel module disabling product specific content for RHEL 9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Escape < and > in product specific content (Matthew Burket
<mburket@redhat.com>)
 - Update SSH key permissions for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Remove variables from product specific content (Matthew Burket
<mburket@redhat.com>)
 - RHEL 9 STIG Import Whitespace Changes (Matthew Burket <mburket@redhat.com>)
 - Style rules to use Title Case in Ansible tasks names (Marcus Burghardt
<maburgha@redhat.com>)
 - Update docs/manual/developer/04_style_guide.md (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Include consideration about explicit parameters (Marcus Burghardt
<maburgha@redhat.com>)
 - Make it easier to indetify ansible-lint is a link (Marcus Burghardt
<maburgha@redhat.com>)
 - Style rule for Ansible Native YAML Syntax (Marcus Burghardt
<maburgha@redhat.com>)
 - Style rules for Ansible booleans values (Marcus Burghardt
<maburgha@redhat.com>)
 - Style rules for Ansible tasks names (Marcus Burghardt <maburgha@redhat.com>)
 - Style rules for Ansible modules usage (Marcus Burghardt
<maburgha@redhat.com>)
 - products/alinux3: fix some missing rules in the cis profile. (YiLin.Li
<YiLin.Li@linux.alibaba.com>)
 - Use bash variables properly in tests (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - products/alinux2: fix some missing rules in the cis profile. (YiLin.Li
<YiLin.Li@linux.alibaba.com>)
 - Fix platform specification in the remediation scripts for bash and ansible
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Code style improvements (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - add newlines to files without them (Shane Siebken
<shane.siebken@capellaspace.com>)
 - Update utils/srg_diff.py based on reviewer feedback (Matthew Burket
<mburket@redhat.com>)
 - Correction (rchikov <rumen.chikov@suse.com>)
 - Fixes in sysctl template (rchikov <rumen.chikov@suse.com>)
 - align stability tests (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rule logind_session_timeout from profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add rule to the CIS profile (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Allocate CCE for the nftables_rules_permanent rule (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update
linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml (Jan
Černý <jcerny@redhat.com>)
 - Add SLE15 based implementation of nftables_rules_permanent rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Always clean lines (Matthew Burket <mburket@redhat.com>)
 - Ensure that < and > in utils/srg_diff.py are handled correctly (Matthew
Burket <mburket@redhat.com>)
 - Shorten rule title (Jan Černý <jcerny@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/
accounts_password_last_change_is_in_past/tests/all_password_change_time_in_past.
pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/
accounts_password_last_change_is_in_past/tests/user_password_change_time_in_futu
re.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add 1 more CIS SLE reference to remove nftables rule (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - OCP4 STIG: Mark SRG-APP-000560-CTR-001340 with three existing controls (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000560)
 - update ubuntu 2004 cis level 1 server (Shane Siebken
<shane.siebken@capellaspace.com>)
 - Move authconfig_config_files_symlinks rule (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - OCP4 STIG: SRG-APP-000342-CTR-000775 is covered by two manual rules (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000342)
 - Update installed_OS_is_sle15.xml (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Fixes of errors (rchikov <rumen.chikov@suse.com>)
 - OCP4 STIG: SRG-APP-000340-CTR-000770 is a manual rule (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000340)
 - Small fixes (rchikov <rumen.chikov@suse.com>)
 - Update OCP4 for HyperShift for better user experience (Vincent Shen
<wenshen@redhat.com>)
 - OCP4 Modify etcd encryption check rule for hypershift (Vincent Shen
<wenshen@redhat.com>)
 - Rename remediations to ol instead of shared (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add extra line to shadow file to make tests pass (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Revert --stdin passwd option not available on suse (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Make running tests in special container env pass (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add variable declaration that contains the shadow file output (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add more descriptive fixtext and warnign for automatic remediation absence
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix comment to be more accurate since we are comparing days not accurate
timestamps (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/
accounts_password_last_change_is_in_past/tests/user_password_change_time_in_futu
re.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/accounts/accounts-restrictions/password_storage/
accounts_password_last_change_is_in_past/tests/user_password_change_time_in_futu
re.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Style fixes (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix copy-paste error referencing to another rule state (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Remove from available list the CCE ids for
accounts_password_last_change_is_in_past rule (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Rework OVAL rule to check time difference between now and last change date of
shadow entry (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add basic tests for accounts_password_last_change_is_in_past (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - OVAL changes for accounts_password_last_change_is_in_past rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Simplify ocil clause in rule (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add accounts_password_last_change_is_in_past rule to CIS profiles (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Initial implementation for rule checking if last password change is in the
past (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add back osrelease parameter check (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Sort references in ssh_keys_passphrase_protected (Matthew Burket
<mburket@redhat.com>)
 - Move SRG-OS-000067-GPOS-00035 to use ssh_keys_passphrase_protected (Matthew
Burket <mburket@redhat.com>)
 - Implementation of proposed corrections (rchikov <rumen.chikov@suse.com>)
 - Use distributed configuration in tests (Jan Černý <jcerny@redhat.com>)
 - Update profile stability tests for STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Minor update in baseline for STIG stability test (Marcus Burghardt
<maburgha@redhat.com>)
 - Added support for new SUSE product SLE HPC (rchikov <rumen.chikov@suse.com>)
 - Add a simple unit test for ssg/build_ovals.py (Jan Černý
<jcerny@redhat.com>)
 - Update warning about pwhistory feature in authselect (Marcus Burghardt
<maburgha@redhat.com>)
 - Update variable value in SRG-OS-000077-GPOS-00045 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update variable value for RHEL8 STIG (Marcus Burghardt <maburgha@redhat.com>)
 - Update variable value for CIS RHEL8 and RHEL9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce variable values with two values for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Add condition if kernel package arch is 64 then instead matching kernel
release name (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add srg to ssh_keys_passphrase_protected (Matthew Burket
<mburket@redhat.com>)
 - Fixes related to SLE 12/15 for the rules set_min/max_life_existing (rchikov
<rumen.chikov@suse.com>)
 - Minor change (rchikov <rumen.chikov@suse.com>)
 - Minor updates (rchikov <rumen.chikov@suse.com>)
 - Added a new rule accounts_password_set_warn_age_existing (rchikov
<rumen.chikov@suse.com>)
 - Added rule partition_for_dev_shm (rchikov <rumen.chikov@suse.com>)
 - Link sshd_use_strong_kex rule to PCI_DSSv4 2.2.7 requirement (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Enable SCE integrity checks for RHEL8 (Simon THOBY <git@nightmared.fr>)
 - Simplify definition of xml object for ssh service (Watson Sato
<wsato@redhat.com>)
 - fix capitalization of "ol" and "os" (Vojtech Polasek <vpolasek@redhat.com>)
 - change applicability of rule package_rear_installed (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new platform and OVAL check checking if OL >= 9.0 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new platform and OVAL check checking if RHEL <= 8.4 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new platform and OVAL check checking if RHEL >= 9.0 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add OVAL inventory check checking if installed system is OL (Vojtech Polasek
<vpolasek@redhat.com>)
 - Change custom zones check in reaction to OpenSCAP change (Marcus Burghardt
<maburgha@redhat.com>)
 - Improved formulations (Matěj Týč <matej.tyc@gmail.com>)
 - Add authconfig_config_files_symlinks to RHEL7 stig (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add missing remediation warning to authconfig rule (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Introduce rule authconfig_config_files_symlinks (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Apply suggestions from code review (Edgar Aguilar <xeicker@gmail.com>)
 - Update sebool_secure_mode_insmod OL remediations (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - add locked user to /etc/shadow (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - Add a template for reporting misalignment (Matej Tyc <matyc@redhat.com>)
 - Move to Code Climate for PEP 8 (Matthew Burket <mburket@redhat.com>)
 - rename exclusion (Thomas Sjögren <konstruktoid@users.noreply.github.com>)
 - add exclude filter (Thomas Sjögren <konstruktoid@users.noreply.github.com>)
 - update levels of some rules in RHEL8 CIS (Vojtech Polasek
<vpolasek@redhat.com>)
 - Improve rule description in rsyslog_files_permissions (Marcus Burghardt
<maburgha@redhat.com>)
 - Include specific test scenario for 0640 permission (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix typo in test scenario script name (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unnecessary conditions from runtime in Bash remediation (Marcus
Burghardt <maburgha@redhat.com>)
 - support locked account with hash present (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - remove the stig policy file (Vojtech Polasek <vpolasek@redhat.com>)
 - remove respective references from the rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove the rule from RHEL8 STIG profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove the rule from STIG RHEL9 profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/ansible.template
(Marcus Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - Disable rpcbind instead of removing the package (Marcus Burghardt
<maburgha@redhat.com>)
 - remove incorrectly assigned srg from package_aide_installed (Vojtech Polasek
<vpolasek@redhat.com>)
 - add missing srg to aide_build_database rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove l1_workstation from 2.2.4 requirement in RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - apply the platform only in context of RHEL products (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
physical/logind_session_timeout/rule.yml (vojtapolasek <krecoun@gmail.com>)
 - add rule to ANSSI profiles (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule to RHEL8 RHT-CCP profile (Vojtech Polasek <vpolasek@redhat.com>)
 - update RHEL8 PCI-DSS profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule to RHEL8 OSPP profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule to RHEL8 CJIS profile (Vojtech Polasek <vpolasek@redhat.com>)
 - update references of rule logind_session_timeout (Vojtech Polasek
<vpolasek@redhat.com>)
 - make rule sshd_idle_timeout applicable on RHEL <= 8.5 (Vojtech Polasek
<vpolasek@redhat.com>)
 - apply platforms to logind_session_timeout rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - add platform checking that RHEL == 9.0 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add platform which is applicable if RHEL <= 8.5 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add platform checking that RHEL >= 8.7 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add definition checking that installed os is RHEL (Vojtech Polasek
<vpolasek@redhat.com>)
 - Bump version to 0.1.67 (Marcus Burghardt <maburgha@redhat.com>)
 - Remove check of /var/log/dmesg from OVAL (Matej Tyc <matyc@redhat.com>)
 - Remove command path discovery with which (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP: Automated apiserver tls checks (Vincent Shen <wenshen@redhat.com>)
 - Add comment to sshd bash macro (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update linux_os/guide/system/network/network-nftables/var_nftables_table.var
(rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - OCP4 STIG: routes_protected_by_tls pertains to SRG-APP-000441-CTR-001090 and
SRG-APP-000442-CTR-001095, not SRG-APP-000441-CTR-001090 (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000441 #PP-000442)
 - OCP4 STIG: Remove configure_network_policies and
configure_network_policies_namespaces from controls that are not resolved by
these rules (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4 STIG: SRG-APP-000645-CTR-001410: Fix rules, add artifact_description and
status_justification (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000645)
 - OCP4 STIG: SRG-APP-000142-CTR-000325: Remove spurious rule, add mitigation
and status_justification (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000142)
 - OCP4 STIG: SRG-APP-000141-CTR-000320: Fix rules, add check and fix, fix
status (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000141)
 - OCP4 STIG: SRG-APP-000141-CTR-000315: Add artifact description and
justification, remove spurious rule (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000141)
 - OCP4 STIG: SRG-APP-000038-CTR-000105: Move metadata to the policy file,
select the correct rules (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000038)
 - Update Rawhide before use (Matthew Burket <mburket@redhat.com>)
 - fips_mode_enabled_on_all_nodes: Remove SRG-APP-000014-CTR-000035 from SRG
controls since the rule is only related to SRG-APP-000014-CTR-000035 (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000014)
 - SRG-APP-000014-CTR-000035: Is now automated (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000014)
 - SRG-APP-000014-CTR-000035: Move the fix and check into policy files (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000014)
 - OCP4 STIG: Add artifact description to SRG-APP-000033 (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000033)
 - OCP4 STIG: Add status justification and related_rules to not_applicable rules
solved by IDP (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4 STIG: SRG-APP-00050{3,5,6}: Not applicable rules, solved by IDP (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-00050)
 - OCP4 STIG: IDP related rules only resolve SRG-APP-000023-CTR-000055, the
other controls are related (Jakub Hrozek <jhrozek@redhat.com>) (#PP-000023)
 - OCP4 STIG: SRG-APP-000023-CTR-000055: Move metadata to control files (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000023)
 - Extend the regex to match log files (Marcus Burghardt <maburgha@redhat.com>)
 - Update rsyslog_files_permissions rule to use template (Marcus Burghardt
<maburgha@redhat.com>)
 - Test scenarios cleanup for rsyslog_files_permissions (Marcus Burghardt
<maburgha@redhat.com>)
 - Extend rsyslog template to assess and remediate file permissions (Marcus
Burghardt <maburgha@redhat.com>)
 - Extend test scenario scripts to test file permissions (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix Ansible remediation to read multiline include (Marcus Burghardt
<maburgha@redhat.com>)
 - Renamed test scenario scripts in alignment to their contents (Marcus
Burghardt <maburgha@redhat.com>)
 - Minor improvements in OVAL comments and readability (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4: Change default values for kubeletconfig garbage collection rules
(Vincent Shen <wenshen@redhat.com>)
 - Add sub folders of utils to code climate (Matthew Burket
<mburket@redhat.com>)
 - Remove count_oval_objects as it broken (Matthew Burket <mburket@redhat.com>)
 - OCP4: configure_network_policies: fix typo (Jakub Hrozek
<jhrozek@redhat.com>)
 - Two SLE 12/15 rules related to avahi package (rchikov
<rumen.chikov@suse.com>)
 - Some corrections (rchikov <rumen.chikov@suse.com>)
 - Some text corrections (rchikov <rumen.chikov@suse.com>)
 - Move 'not osbuild' platform for enable_pam_namespace into the existing
platform field (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - OCP4 STIG: Related rule should not reference SRG-APP-000014-CTR-000040 (Jakub
Hrozek <jhrozek@redhat.com>) (#PP-000014)
 - OCP4 STIG: Move metadata of SRG-APP-000014-CTR-000040 to rule policy files
(Jakub Hrozek <jhrozek@redhat.com>) (#PP-000014)
 - OCP4 STIG: SRG-APP-000014-CTR-000040 is now automated (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000014)
 - New SLE 15 rule set_nftables_table (rchikov <rumen.chikov@suse.com>)
 - Create the test user/group (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix regex in OVAL, Ansible and Bash remediations (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update tests in configure_tmux_lock_keybinding (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update configure_tmux_lock_keybinding (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update bashrc tmux rule in OL8 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add missing-remediation warning (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add tests to sshd_use_approved_kex_ordered_stig (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add docs for utils/controlrefcheck.py (Matthew Burket <mburket@redhat.com>)
 - Adjust utils/controlrefcheck.py based on reviewer comments (Matthew Burket
<mburket@redhat.com>)
 - Remove duplicate rule_object check in utils/controlrefcheck.py (Matthew
Burket <mburket@redhat.com>)
 - Clean up utils/controlrefcheck.py (Matthew Burket <mburket@redhat.com>)
 - In controlrefcheck don't error on nonexistent rules (Matthew Burket
<mburket@redhat.com>)
 - Fix RHEL 8 issues for controlrefchecker (Matthew Burket <mburket@redhat.com>)
 - Fix issues for controlrefchecker for RHEL 7 (Matthew Burket
<mburket@redhat.com>)
 - Fix the issues for the RHEL 9 controlrefchecker (Matthew Burket
<mburket@redhat.com>)
 - Add controlrefchecker to CTest (Matthew Burket <mburket@redhat.com>)
 - Add utils/controlrefcheck.py (Matthew Burket <mburket@redhat.com>)
 - packages_iptables-persistent_removed: Fix typo (Eduardo Barretto
<edusbarretto@gmail.com>)
 - Add tests to cover cases where RainerScript is used to define target log file
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Introduce rule sshd_use_approved_kex_ordered_stig (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update sshd_disable_compression applicability (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Introduce CPE for OL7 older than 7.4 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update audit failure mode for OL7 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add sysctl_kernel_dmesg_restric rule to OL7 stig (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - OL7 STIG v2r10 update (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Bump version of OL8 STIG to V1R5 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - assign ntp_configure_restrictions to SLE12 (Christian Hagenest
<c.hagenest@suse.com>)
 - service_iptables_enabled: Remove Ubuntu CIS references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add package_iptables-persistent_removed
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add package_iptables-persistent_removed
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add rule packages_iptables-persistent_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add set_ipv6_loopback_traffic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add rule set_ipv6_loopback_traffic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - set_ipv6_loopback_traffic: remediation: Add Ubuntu platform (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_ipv6_loopback_traffic: Add Ubuntu CIS references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule set_loopback_traffic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add set_loopback_traffic (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_loopback_traffic: remediation: Add ubuntu platform (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - set_loopback_traffic: Add Ubuntu CIS references and adjust description
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add set_ip6tables_default_rule (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add set_iptables_default_rule (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add package_iptables-persistent_installed
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add package_iptables-persistent_installed
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add rule package_iptables-persistent_installed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add package_ufw_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add package_ufw_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule package_ufw_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add a CTest test for shorthand_to_oval.py (Jan Černý <jcerny@redhat.com>)
 - Drop a test temporary file committed by mistake (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - nist_ocp4: Fix rule references (Jakub Hrozek <jhrozek@redhat.com>)
 - nist_ocp4: Fix nonexistent rule name (Jakub Hrozek <jhrozek@redhat.com>)
 - Inhibit ShellCheck warning for osbuild platform (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_r
oot_IncludeConfig_is_other.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/oval.template
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update
shared/templates/rsyslog_logfiles_attributes_modify/tests/is_root.pass.sh
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update
shared/templates/rsyslog_logfiles_attributes_modify/tests/is_other.fail.sh
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_mult
iline_is_root.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_r
oot_IncludeConfig_is_root.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_r
oot.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/include_is_o
ther.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/IncludeConfi
g_is_root.pass.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/tests/IncludeConfi
g_is_other.fail.sh (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Minor change (rchikov <rumen.chikov@suse.com>)
 - Small syntax corrections (rchikov <rumen.chikov@suse.com>)
 - Fix shell remediation argument passing (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add 'not osbuild' platform to polyinstantiated and selinux-boolean rules
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - OCP4 STIG: Add status justification to SRG-APP-000033 (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000033)
 - Update contributors list for v0.1.66 release (Marcus Burghardt
<maburgha@redhat.com>)
 - New SLE 15 rule set_nftables_new_connections (rchikov
<rumen.chikov@suse.com>)
 - accounts_passwords_pam_tally2: ansible: Move to (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - RHEL-08-010100: create a new rule ssh_keys_passphrase_protected (THOBY Simon
<Simon.THOBY@viveris.fr>)
 - New SLE 15 rule service_nftables_enabled (rchikov <rumen.chikov@suse.com>)
 - update rule title (Vojtech Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
physical/screen_locking/console_screen_locking/configure_bashrc_tmux/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - move two rules to higher level in cis_rhel8 (Vojtech Polasek
<vpolasek@redhat.com>)
 - New SLE 15 rule ensure_iptables_are_flushed (rchikov <rumen.chikov@suse.com>)
 - Remove set_iptables_default_rule CCEs from available lists (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add cce id for SLES platform to set_iptables_default_rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - ubuntu2204: cis_level1_server: Add (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule package_systemd-journal-remote_installed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_server: Add rule audit_sudo_log_events (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - audit_sudo_log_events: Add cis@ubuntu2204 reference (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2: Add rule audit_rules_suid_privilege_function (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - audit_rules_suid_privilege_function: Update cis@ubuntu2204 reference (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level2_server: Add missing variables (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_server: Add missing variables (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Remove ubunt2204 prodtype from rules not being used (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Refactor and promote function to a class (Jan Černý <jcerny@redhat.com>)
 - ubuntu2204: cis_level1_server: Add service_nftables_disabled (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add service_nftables_disabled (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - service_nftables_disabled: Add ubuntu platform and CIS references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Enable bash&ansible remediations for all platforms (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - ubuntu2204: cis_level1_server: Add packages_nftables_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add packages_nftables_removed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - package_nftables_removed: Add ubuntu platforms and CIS references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Change sshd_disable_compression applicability (Jan Černý
<jcerny@redhat.com>)
 - swap rules in RHEL 8 STIG profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add Ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add Bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add OVAL check (Vojtech Polasek <vpolasek@redhat.com>)
 - create new rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Make benchmark inclusion optional (Jan Černý <jcerny@redhat.com>)
 - Split code into 2 functions (Jan Černý <jcerny@redhat.com>)
 - Include RHEL7 and RHEL9 in sysctl_net_ipv4_conf_all_forwarding (Marcus
Burghardt <maburgha@redhat.com>)
 - OCP4 PCI-DSS: Fix non-existent rule name (Jakub Hrozek <jhrozek@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algor
ithm/set_password_hashing_algorithm_systemauth/rule.yml (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Remove rule for SSHD Compresion from RHEL8 STIG (Watson Sato
<wsato@redhat.com>)
 - Update
linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml
(Marcus Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - Drop parameter variable use template values instead (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Wrap lines in oval template and fixed a bug with matching aribitary file
paths not only log targets (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add implementation for rsyslog_logging_configured rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update shared/templates/rsyslog_logfiles_attributes_modify/oval.template
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Set the attribute values as part of the template (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Set the attribute values as part of the template (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Simplify OVAL template naming ids and references (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Move tests and oval from rsyslog_files_groupownership and
rsyslog_files_ownership to rsyslog_logfiles_attributes_modify teamplate (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop extra empty line (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Fix ansible template tasks naming (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Use complete name of ansible modules (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Fix unbalanced jinja brackets and identation (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Adjust bash template to produce scripts without shellcheck warnings (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add missing newline at the end of the file (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Replace shell find command with ansible find module (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add rsyskig owner and group variables to sle12 profiles (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Rework rsyslog_logfiles_attributes_modify template to use more generic
approach, not depending on low-level commands (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Use set_fact to aggregate outputs of two tasks (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add double quotes  to prevent globbing and word splitting (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add Check for RainerScript action log format in rsyslog configuration - check
for RainerScript format, which might be also multiline so grep regex is a bit
curly - extract possibly multiline action omfile expressions - extract and match
only "logfile" expression (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add remediations for rsyslog_files_groupownership and rsyslog_files_ownership
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add template to set parameters of log files from rsyslog (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Remove sshd_disable_compression from OL8 & RHEL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Remove rules related to UEFI path (Marcus Burghardt <maburgha@redhat.com>)
 - Remove aide_use_fips_hashes from controlfile (Marcus Burghardt
<maburgha@redhat.com>)
 - Included missing references (Marcus Burghardt <maburgha@redhat.com>)
 - Add aide_build_database to STIG in OL and RHEL (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update policy for ssh host key permissions (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update reference for profile stability tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for new controlfile in CODEOWNERS (Marcus Burghardt
<maburgha@redhat.com>)
 - New rule for SLE 15 set_firewalld_appropriate_zone (rchikov
<rumen.chikov@suse.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - New rule for SLE 15 unnecessary_firewalld_services_ports_disabled (rchikov
<rumen.chikov@suse.com>)
 - Update RHEL9 CIS profiles (Marcus Burghardt <maburgha@redhat.com>)
 - Reviewed all pending requirements (Marcus Burghardt <maburgha@redhat.com>)
 - A new SLE 12/15 rule ensure_package_repositories_are_configured/ (rchikov
<rumen.chikov@suse.com>)
 - Include CIS RHEL9 reference in System Maintainance related rules (Marcus
Burghardt <maburgha@redhat.com>)
 - Include CIS RHEL9 reference in AAA related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - New rule SLE 12/15 ensure_GPG_keys_are_configured (rchikov
<rumen.chikov@suse.com>)
 - Include CIS RHEL9 reference in Logging related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference in Network Config related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference in client services related rules (Marcus
Burghardt <maburgha@redhat.com>)
 - Refactor function expand_shorthand (Jan Černý <jcerny@redhat.com>)
 - Include CIS RHEL9 reference in Special Services related rules (Marcus
Burghardt <maburgha@redhat.com>)
 - Include CIS RHEL9 reference in NTP related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include 4 rules in the stig profile for RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update stigid for RHEL8 in accounts_passwords_pam_faillock_deny (Marcus
Burghardt <maburgha@redhat.com>)
 - Include STIG for RHEL in accounts_passwords_pam_faillock_silent (Marcus
Burghardt <maburgha@redhat.com>)
 - Include CIS RHEL9 reference in GDM related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference in banners related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference in SELinux related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference in process hardening related rules (Marcus
Burghardt <maburgha@redhat.com>)
 - Include CIS RHEL9 reference in fs integrity related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference in software updates related rules (Marcus
Burghardt <maburgha@redhat.com>)
 - Include CIS RHEL9 reference in bootloader related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include CIS RHEL9 reference in partition related rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Add osbuild platform (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Using the Ansible shell actions is needed in package_prelink_remove (Matthew
Burket <mburket@redhat.com>)
 - Document utils/shorthand_to_oval.py (Jan Černý <jcerny@redhat.com>)
 - Introduce utils/shorthand_to_oval.py (Jan Černý <jcerny@redhat.com>)
 - Move method and promote it (Jan Černý <jcerny@redhat.com>)
 - New CIS RHEL9 control file (Marcus Burghardt <maburgha@redhat.com>)
 - Update rule selections in RHEL 7 STIG (Jan Černý <jcerny@redhat.com>)
 - cce-ids for sysctl_net...log_martians (Christian Hagenest
<c.hagenest@suse.com>)
 - Correct variable description (Jan Černý <jcerny@redhat.com>)
 - Use only single textfilecontent54_state (Jan Černý <jcerny@redhat.com>)
 - Update RHEL7 STIG to V3R10 (Watson Sato <wsato@redhat.com>)
 - Update DISA STIG RHEL7 SCAP content to V3R10 (Watson Sato <wsato@redhat.com>)
 - Update DISA RHEL7 STIG manual benchmark to V3R10 (Watson Sato
<wsato@redhat.com>)
 - Update RHEL8 STIG to V1R9 (Watson Sato <wsato@redhat.com>)
 - Update DISA STIG RHEL8 SCAP content to V1R8 (Watson Sato <wsato@redhat.com>)
 - Update DISA RHEL8 STIG manual benchmark to V1R9 (Watson Sato
<wsato@redhat.com>)
 - Select rule in RHEL8 STIG profile (Watson Sato <wsato@redhat.com>)
 - Add rule for tmux lock-session keybinding (Watson Sato <wsato@redhat.com>)
 - Change hardocded string with variable of strong kex algorithms (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add account_emergency_expire_date to OL7 stig (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - ubuntu2004: cis_level1_server: Add package_prelink_remove to profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server Add package_prelink_removed to profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - package_prelink_removed: Add Ubuntu platforms and CIS references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Remove ubuntu2204 and ubuntu2004 from disable_prelink (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - fix bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule to profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add Ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add OVAL check (Vojtech Polasek <vpolasek@redhat.com>)
 - add Bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add new rule definition (Vojtech Polasek <vpolasek@redhat.com>)
 - Parametrize rule "audit_rules_system_shutdown" (Jan Černý
<jcerny@redhat.com>)
 - Added 2 rules for SLE 15 related to nftables (rchikov
<rumen.chikov@suse.com>)
 - Use variable instead of hardcoded list of algorithms (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Redo DisaStatus.from_string method (Matthew Burket <mburket@redhat.com>)
 - Move SRG Export data to a new file (Matthew Burket <mburket@redhat.com>)
 - Add CTests for all formats of the SRG Export script (Matthew Burket
<mburket@redhat.com>)
 - Rename export Python files for SRG Export (Matthew Burket
<mburket@redhat.com>)
 - Move convert_srg_export_* files to its own module (Matthew Burket
<mburket@redhat.com>)
 - create_srg_export.py: Map NOT_APPLICABLE (Jakub Hrozek <jhrozek@redhat.com>)
 - Only restore prelinked binaries if prelinked is installed (Matthew Burket
<mburket@redhat.com>)
 - build_product script: enable SCE checks for ubuntu20.04 (Simon THOBY
<git@nightmared.fr>)
 - build scripts: introduce a test for SCE checks (Simon THOBY
<git@nightmared.fr>)
 - Add package_prelink_removed to RHEL 7 CIS profile (Matthew Burket
<mburket@redhat.com>)
 - Create new rule package_prelink_removed (Matthew Burket <mburket@redhat.com>)
 - Remove utils/find_shadowed_files.py (Matthew Burket <mburket@redhat.com>)
 - Remove xccdf2csv-stig.py (Matthew Burket <mburket@redhat.com>)
 - accounts_passwords_pam_tally2: bash: Move to (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add link to using Chrony to configure NTP (Watson Sato <wsato@redhat.com>)
 - Fix broken link for Fedora NTP docs (Watson Sato <wsato@redhat.com>)
 - Include rule for CIS RHEL8 2.2.19 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Reviewed requirements in pending status (Marcus Burghardt
<maburgha@redhat.com>)
 - Update requirements about user passwords and sessions (Marcus Burghardt
<maburgha@redhat.com>)
 - Update status and rule rule for CIS RHEL8 5.3.7 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 5.3.7 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Update SSH related requirements (Marcus Burghardt <maburgha@redhat.com>)
 - Remove unnecessary comments from cis_rhel8 controlfile (Marcus Burghardt
<maburgha@redhat.com>)
 - Small updates about rsyslog requirements (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 4.1.3.18 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 4.1.3.17 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 4.1.3.16 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 4.1.3.15 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 4.1.3.4 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 4.1.3.3 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 4.1.3.2 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 3.4.2.1 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 2.2.20 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 2.2.6 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL8 2.2.5 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule for CIS RHEL7/RHEL8 2.2.4 requirement (Marcus Burghardt
<maburgha@redhat.com>)
 - Include related rule for CIS RHEL7 1.9 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS requirement to remove gdm package (Marcus Burghardt
<maburgha@redhat.com>)
 - ubuntu2004: cis_level1_server: Add package_rpcbind_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add package_rpcbind_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - package_rpcbind_removed: Add Ubuntu platforms and CIS references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - package_rpcbind_removed: Fix some typo leftovers (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - try to fix too complex function get_stripped_conditionals (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove definition_location line from test platform (Vojtech Polasek
<vpolasek@redhat.com>)
 - reword exception message (Vojtech Polasek <vpolasek@redhat.com>)
 - Don't test ANSSI-BP-028 on CentOS 7 (Milan Lysonek <mlysonek@redhat.com>)
 - Spec file python2 build requirements for CentOS 7 (Milan Lysonek
<mlysonek@redhat.com>)
 - Define distro where EPEL7 will be tested (Milan Lysonek
<mlysonek@redhat.com>)
 - Extend spec file for CentOS 7 (Milan Lysonek <mlysonek@redhat.com>)
 - Enable TF on CentOS 7 (Milan Lysonek <mlysonek@redhat.com>)
 - Do COPR build for CentOS 7 and for EPEL 7 (Milan Lysonek
<mlysonek@redhat.com>)
 - Typo corrections in the name of the rule (rchikov <rumen.chikov@suse.com>)
 - Update package name for RHEL in package_rsync_removed (Marcus Burghardt
<maburgha@redhat.com>)
 - Use variable containing strong KEX algorithms for remediations (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add ansible remediation for sshd_use_strong_kex rule (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add sshd_use_strong_kex to CIS SLE profiles (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - ubuntu2004: cis_level1_server: Add package_nftables_installed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add package_nftables_installed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - package_nftables_installed: Add Ubuntu platform and CIS references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add package_rsync_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add package_rsync_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - package_rsync_removed: Add Ubuntu platforms and CIS references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add package_cups_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add package_cups_removed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - package_cups_removed: Add Ubuntu platforms and CIS references (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Fix the service_telnet_disabled rule (Marcus Burghardt <maburgha@redhat.com>)
 - Added a new SLE 12/15's rule package_rcpbind_removed (rchikov
<rumen.chikov@suse.com>)
 - Fix accounts_password template for OL (Matthew Burket <mburket@redhat.com>)
 - decrease complexity of get_stripped_conditionals function (Vojtech Polasek
<vpolasek@redhat.com>)
 - Include RHEL products in audit_sudo_log_events (Marcus Burghardt
<maburgha@redhat.com>)
 - Include RHEL products in package_nftables_installed (Marcus Burghardt
<maburgha@redhat.com>)
 - Include RHEL products in package_rsync_removed (Marcus Burghardt
<maburgha@redhat.com>)
 - fix a typo (Vojtech Polasek <vpolasek@redhat.com>)
 - update outdated mention of shadow-utils platform (Vojtech Polasek
<vpolasek@redhat.com>)
 - update documentation explaining the change (Vojtech Polasek
<vpolasek@redhat.com>)
 - add test and new testing platform (Vojtech Polasek <vpolasek@redhat.com>)
 - Include RHEL products in package_cups_removed (Marcus Burghardt
<maburgha@redhat.com>)
 - wip test (Vojtech Polasek <vpolasek@redhat.com>)
 - prevent content build if usage of certain platform defiinitions would cause
inconsistency between OVAL and remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - Include ANSSI reference on pam_pwhistory rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rules to limit password reuse (Marcus Burghardt <maburgha@redhat.com>)
 - extend tests for version_to_evr (Vojtech Polasek <vpolasek@redhat.com>)
 - remove no longer valid tests (Vojtech Polasek <vpolasek@redhat.com>)
 - remove no longer used functions which were used for parsing of version to evr
(Vojtech Polasek <vpolasek@redhat.com>)
 - change method for parsing of version to evr (Vojtech Polasek
<vpolasek@redhat.com>)
 - Added a new rule package_tcp_wrappers_removed (rchikov
<rumen.chikov@suse.com>)
 - Fix OCP rule routes_protected_by_tls (Vincent Shen <wenshen@redhat.com>)
 - Add tests to sshd_lineinfile for relative paths (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Handle relative paths in sshd_config include (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Bump fedora version in Dockerfiles to 37 (Jakub Hrozek <jhrozek@redhat.com>)
 - Fix a few isssues in test-compare-disa-xml (Matthew Burket
<mburket@redhat.com>)
 - remove blank line and not used "register" statements from Ansible remediation
(Vojtech Polasek <vpolasek@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - change method to clear a list to be compatible with Python 2 (Vojtech Polasek
<vpolasek@redhat.com>)
 - Small corrections related to 3 rules (rchikov <rumen.chikov@suse.com>)
 - Assign CCE ids for sle sshd_use_strong_kex rule (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add initial implementation of sshd_use_strong_kex rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fixes for review notes (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - build support: when SCE support is enabled, include the SCE scripts in the
output datastream (THOBY Simon <Simon.THOBY@viveris.fr>)
 - build support: prefix the variables in SCE scripts with
'xccdf_org.ssgproject.content_value_' (THOBY Simon <Simon.THOBY@viveris.fr>)
 - build support: ignore empty CPE directories (needed for SCE generation)
(THOBY Simon <Simon.THOBY@viveris.fr>)
 - Add sanity tests for compare_disa_xml.py (Matthew Burket
<mburket@redhat.com>)
 - Add rule to OL7 stig profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - accounts_password_set_max_life_existing: tests: Attempt to unify the (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - update tests (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite ansible remediation to pass tests (Vojtech Polasek
<vpolasek@redhat.com>)
 - enable test scenarios which test remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - use full module names in remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add few tests which test also files within /etc/rsyslog.d directory (Vojtech
Polasek <vpolasek@redhat.com>)
 - rewrite the remediation so that it does not use shell commands anymore
(Vojtech Polasek <vpolasek@redhat.com>)
 - Produce an understanable error (Matej Tyc <matyc@redhat.com>)
 - accounts_password_set_min_life_existing: tests: Attempt to unite the (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_min_life_existing: tests: Add dummy password to
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: tests: Add dummy password to
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Update control flag in test scenario scripts for rhel7 cis (Marcus Burghardt
<maburgha@redhat.com>)
 - Optimize conditional in bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unnecessary grep from test scenario scripts (Marcus Burghardt
<maburgha@redhat.com>)
 - Update _no_removeable_media tests (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update _no_removeable_media rules (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add two new rules to Ansible lint (Matthew Burket <mburket@redhat.com>)
 - Minor indentation adjustments (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Add test to accounts_password for OL (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update accounts_password for OL (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - accounts_password_set_min_life_existing: oval: Improve regex and filter
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: tests: Fix var name (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: oval: Improve regex and filter
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Remove the CODEOWNERS for RHEL 8 STIG control (Matthew Burket
<mburket@redhat.com>)
 - Remove RHEL 8 STIG Control (Matthew Burket <mburket@redhat.com>)
 - fix: service_disabled/tests: handle socket actication services (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Add Ubuntu 22.04 to gating (Matthew Burket <mburket@redhat.com>)
 - Lower case the file for EXPLICIT_BUILD_TARGETS in build_product (Matthew
Burket <mburket@redhat.com>)
 - Update stig profile references for stability tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Align parameter name in Ansible macro for pam_pwhistory (Marcus Burghardt
<maburgha@redhat.com>)
 - Fixed unnecessary extra parameter in macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update STIG related description to use variable (Marcus Burghardt
<maburgha@redhat.com>)
 - Update pam_pwhistory control flag variable for STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Update pam_pwhistory control flag variable for CIS (Marcus Burghardt
<maburgha@redhat.com>)
 - Use condition based on packaging system name (Jan Černý
<jcerny@redhat.com>)
 - Use templated platform for zypper platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for yum platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for usbguard platform (Jan Černý
<jcerny@redhat.com>)
 - Use templated platform for tmux platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for tfpt-server platform (Jan Černý
<jcerny@redhat.com>)
 - Use templated platform for systemd platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for sudo platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for sssd platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for postfix platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for polkit platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for pam platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for ntp  platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for nss-pam-ldapd platform (Jan Černý
<jcerny@redhat.com>)
 - Use templated platform for net-snmp platform (Jan Černý
<jcerny@redhat.com>)
 - Use templated platform for libuser platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for gdm platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for chrony platform (Jan Černý <jcerny@redhat.com>)
 - Use templated platform for audit platform (Jan Černý <jcerny@redhat.com>)
 - Prevent broken build with Python 2 (Jan Černý <jcerny@redhat.com>)
 - Modify bash_pkg_conditional (Jan Černý <jcerny@redhat.com>)
 - Add missing rules to OL7 stig (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Bump OL7 stig profile version to v2r9 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - ubuntu2204: cis_level1_server: Add grub2_enable_apparmor rule (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2004: cis_level1_server: Add rule grub2_enable_apparmor (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - grub2_enable_apparmor: oval: Add audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - grub2_enable_apparmor: bash: Add remediation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu: Add new CIS rule grub2_enable_apparmor (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Install NetworkManager as part of wireless_disable_interfaces remediation
(Milan Lysonek <mlysonek@redhat.com>)
 - WIP: feature: add faillock_path (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fixing bootloader password (Jindrich Skacel
<102800748+jskacel@users.noreply.github.com>)
 - Added a new rule accounts_set_post_pw_existing (rchikov
<rumen.chikov@suse.com>)
 - Improve Bash macro name and description (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix Jinja condition in macro for pam_faillock (Marcus Burghardt
<maburgha@redhat.com>)
 - Added a new SLE 15 rule package_nftables_installed (rchikov
<rumen.chikov@suse.com>)
 - add correct cce id (denknorr <dennis.knorr@suse.com>)
 - Define srpm_build_deps in packit configuration (Matus Marhefka
<mmarhefk@redhat.com>)
 - Added a new rule package_audit-libs_installed (rchikov
<rumen.chikov@suse.com>)
 - CMP-1389 : Update titles of API server tlsSecurityProfile rules (Bharath B
<bhb@redhat.com>)
 - Improve conditional criteria in Ansible task (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rule description in aligment to OVAL and remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rule description in aligment to OVAL and remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the test scenario scripts to cover new scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation to use new macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Bash remediation to use new macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the test scenario scripts to cover new scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation to use new macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Bash remediation to use new macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation to use new macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible macros for pam_pwhistory.so (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the test scenario scripts to cover new scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Bash remediation to use new macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Bash macros for pam_pwhistory.so (Marcus Burghardt
<maburgha@redhat.com>)
 - Rename Blacklist to Disabled in profile selections (Watson Sato
<wsato@redhat.com>)
 - Remove usage of whitelist in check comments (Watson Sato <wsato@redhat.com>)
 - SLE 12/15 CIS profile updates (rchikov <rumen.chikov@suse.com>)
 - Rename PROFILE_ID_BLACKLIST to PROFILE_ID_SKIPLIST (Watson Sato
<wsato@redhat.com>)
 - ansible_playbook_to_role.py: Rename whitelist to allowlist (Watson Sato
<wsato@redhat.com>)
 - test platform with invalid argument (Vojtech Polasek <vpolasek@redhat.com>)
 - raise anexception if invalid argument to templated platform is supplied
(Vojtech Polasek <vpolasek@redhat.com>)
 - Small corrections related to 3 rules (rchikov <rumen.chikov@suse.com>)
 - Modifications into files (rchikov <rumen.chikov@suse.com>)
 - Fix failure test to actually create netrc file in user's home dir (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix failure test to actually create forward file in user's home dir (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Refactored OVAL to consider pwhistory.conf (Marcus Burghardt
<maburgha@redhat.com>)
 - Style guide alignment (Marcus Burghardt <maburgha@redhat.com>)
 - accounts_password_set_min_life_existing: Add consistency by moving from
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: test: Improve tests (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: oval: Change existence check to
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: Fix ansible to avoid system (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: Fix OVAL to avoid system (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_max_life_existing: Fix bash to avoid system (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_min_life_existing: test: Improve
incorrect_min_pass_age.fail.sh (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - accounts_password_set_min_life_existing: oval: Change existence check to
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_min_life_existing: Fix ansible to avoid system (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_min_life_existing: Fix OVAL to avoid system (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_password_set_min_life_existing: Fix bash to avoid system (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Fix CIS SLEs requirement id in sshd_set_keepalive (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add no_forward_files rule to CIS SLE profiles (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Assign CCE SLE ids for no_forward_files rule (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Add rule to Ensure no users have .forward files (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Assign SLE CCE ids and CIS references to no_netrc_files rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - make the os_linux unversioned (so far) (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new parametrized platform os_linux (Vojtech Polasek
<vpolasek@redhat.com>)
 - ensure that platforms update their conditionals after respective CPE items
update their templated conditionals (Vojtech Polasek <vpolasek@redhat.com>)
 - save templated remediations into CPE items (Vojtech Polasek
<vpolasek@redhat.com>)
 - change meaning of function build_lang_for_templatable (Vojtech Polasek
<vpolasek@redhat.com>)
 - add conditional setter to CPEItem (Vojtech Polasek <vpolasek@redhat.com>)
 - always store the xml representation of platform as string (Vojtech Polasek
<vpolasek@redhat.com>)
 - add a new function to platforms which collects conditionals from associated
CPE items (Vojtech Polasek <vpolasek@redhat.com>)
 - modify the function which resolves and adds new CPE items based on parameters
passed to platform (Vojtech Polasek <vpolasek@redhat.com>)
 - Update rule.yml (Bharath B <bhb@redhat.com>)
 - Update rule.yml (Bharath B <bhb@redhat.com>)
 - Update rule.yml (Bharath B <bhb@redhat.com>)
 - aide_periodic_cron_checking: oval: ubuntu: Improve regexes (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - aide_periodic_cron_checking: bash: ubuntu: Improve regex (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Bump OL8 STIG version to V1R4 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Handle polyinstantiated directories/mount points (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Documentation: Describe versioned platforms/CPE entities. (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - CPE AL: Allow version specifiers only for CPEs that explicitly support them
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Drop RHEL 7 CIS reference also after a tip from @yuumasato :bow: (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - accounts_umask_etc_bashrc: Fix tests for ubuntu (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - accounts_passwords_pam_faillock_unlock_time: Add Ubuntu specific OVAL
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - accounts_passwords_pam_faillock_interval: Add Ubuntu specific OVAL (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_passwords_pam_faillock_deny: Add ubuntu specific OVAL (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - macros: bash: faillock: Add Ubuntu specific case (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new value to var_accounts_passwords_pam_faillock_deny.var (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - sshd_approved_*.var: Add cis_ubuntu value (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - accounts_tmout: Add ubuntu specific bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - chronyd_run_as_chrony_user: Add ubuntu specific bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - chronyd_run_as_chrony_user: Add ubuntu specific tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add platforms to chronyd_run_as_chrony_user tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix some rules bash for ubuntu2204 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix some rules OVAL files for ubuntu2204 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix some rules descriptions and ocil for ubuntu2204 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Remove ubuntu2204 prodtype and cis reference from some rules (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add some ubuntu2204 specific template vars (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_server: Add platform to bash remediations (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add platform to bash remediations (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - ubuntu2204: product.yml: Add avahi and dconf to (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: product.yml: Update grub2_uefi_boot_path (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: product.yml: Fix title (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_server: Add cis references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add cis references (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_server: Add prodtype to rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Add prodtype to rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_worstation: Update profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_workstation: Update profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level2_server: Update profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2204: cis_level1_server: Update profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Satisfy CodeClimate (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Added a new rule service_firewalld_disabled (rchikov <rumen.chikov@suse.com>)
 - Fix references and add CCE ids for backup_etc_gshadow related rules (teacup-
on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Drop CIS reference in no_legacy_plus_entries_etc_group rule for SLE15
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add note about Koji scratch builds (Watson Sato <wsato@redhat.com>)
 - Add section about Fedora updates (Watson Sato <wsato@redhat.com>)
 - CPE AL: Polish the implementation (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update ISM and E8 profile SMEs (shaneboulden <shane.boulden@gmail.com>)
 - Update sshd_lineinfile template tests (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update macros related to sshd configuration files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix varible in ctest for srg-export-rhel9 (Matthew Burket
<mburket@redhat.com>)
 - Added a new rule package_cups_removed (rchikov <rumen.chikov@suse.com>)
 - Add support for intermediary version of setuptools to requirements_specs.py
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - CCE / CIS numbers for SLE 12/15 rules which belong to CIS group Initial setup
(rchikov <rumen.chikov@suse.com>)
 - Add RHEL9 product to `srg-export-rhel9` and `srg-diff-rhel9` (Matthew Burket
<mburket@redhat.com>)
 - Move to using PYTHON_VERSION_MAJOR (Matthew Burket <mburket@redhat.com>)
 - Fix typo. (Gabriel Becker <ggasparb@redhat.com>)
 - Ensure all notes use the same markdown format (Marcus Burghardt
<maburgha@redhat.com>)
 - Documentation about Fedora Packages (Marcus Burghardt <maburgha@redhat.com>)
 - Include links for release and examples for cleanup (Marcus Burghardt
<maburgha@redhat.com>)
 - Include -vX.Y.Z suffix where stabilization branch is mentioned (Marcus
Burghardt <maburgha@redhat.com>)
 - Include references in Checklist section (Marcus Burghardt
<maburgha@redhat.com>)
 - Add new Ubuntu-exclusive OVAL rule (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Enhancement to aide_build_database Ubuntu script (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - accounts_user_dot_group_ownership: Improve OVAL to avoid nobody group
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Use CPEItem id_ for templated CPEs (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Refactor boolean_expressions.py (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Refactor test_utils.py (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - CPE AL: Introduce version specifiers support (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Fix var_firewalld_active_zones var type to match object type (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Modifications in files with available CCE numbers for SLE 12/15 (rchikov
<rumen.chikov@suse.com>)
 - CCE and CIS numbers assignments for SLE 12/15 rules which belong to user and
group settings (rchikov <rumen.chikov@suse.com>)
 - Document the Stabilization prefix in PRs (Marcus Burghardt
<maburgha@redhat.com>)
 - Provide reference of message in Github Discussion (Marcus Burghardt
<maburgha@redhat.com>)
 - Update reference PR to be aligned to the given example (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the step related to contributors list (Marcus Burghardt
<maburgha@redhat.com>)
 - Correction of files with available CCE numbers for SLE12/15 (rchikov
<rumen.chikov@suse.com>)
 - CCE / CIS numbers assigment to SLE 12/15 rules (rchikov
<rumen.chikov@suse.com>)
 - Select new audispd rules in RHEL7 STIG profile (Watson Sato
<wsato@redhat.com>)
 - Changes into files with CCE codes available (rchikov <rumen.chikov@suse.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - CCE and CIS codes for SLE 12/15 rules which belong to CIS group 5.2 configure
ssh server (rchikov <rumen.chikov@suse.com>)
 - Improve rule definition (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add two simple tests for the new rule (teacup-on-rockingchair <315160+teacup-
on-rockingchair@users.noreply.github.com>)
 - Update sudo_require_reauthentication (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update OL7 kmod audit rule (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Fix and improve rule descriptions (Watson Sato <wsato@redhat.com>)
 - Rename template to key_value_pair_in_file (Watson Sato <wsato@redhat.com>)
 - removed unavailable cce-ids for sles (Christian Hagenest
<christian.hagenest@suse.com>)
 - Ensure the test scenarios are successful (Watson Sato <wsato@redhat.com>)
 - SLE 12/15 CCE and CIS numbers for the CIS group job schedulers (rchikov
<rumen.chikov@suse.com>)
 - Parametrize /etc/bashrc check with Jinja variable (Watson Sato
<wsato@redhat.com>)
 - Build all profiles on all CentOS and CentOS Streams (Milan Lysonek
<mlysonek@redhat.com>)
 - Make definition of textfilecontent54_object clearer (Watson Sato
<wsato@redhat.com>)
 - Use param_value_in_file template to configure audispd daemon (Watson Sato
<wsato@redhat.com>)
 - Add new template param_value_in_file (Watson Sato <wsato@redhat.com>)
 - Fix file name for CIS SLE15 control file in CODEOWNERS (Matthew Burket
<mburket@redhat.com>)
 - fix bash syntax for set_ipv6_loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - really add newline to bash set_loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - CIS + CCEID SLES service_iptables_enabled (Christian Hagenest
<christian.hagenest@suse.com>)
 - SLES CIS-ID sysctl_net_ipv6_conf_default_accept_ra (Christian Hagenest
<christian.hagenest@suse.com>)
 - CCE-IDs SLE sysctl_net_ipv6_conf_all_accept_ra (Christian Hagenest
<christian.hagenest@suse.com>)
 - Add CIS Nrs for set_ip6tables_default_rule sles (Christian Hagenest
<christian.hagenest@suse.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - add newline to ansible remed for loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - add newline at end of ipv6 loopback remed (Christian Hagenest
<christian.hagenest@suse.com>)
 - add ipv6 enabled check to ansible f ipv6 loopback (Christian Hagenest
<christian.hagenest@suse.com>)
 - Add check for ipv6-disable to ipv6_loopback bash (Christian Hagenest
<christian.hagenest@suse.com>)
 - Update CIS Nr for set_ipv6_loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - Modifications in rule and profile to cover CIS requirment 3.5.3.1.3 (rchikov
<rumen.chikov@suse.com>)
 - Added a new rule package_firewalld_removed (rchikov <rumen.chikov@suse.com>)
 - Changing a few  harcoded OS names for full_name (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - bash remed for set_loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - ansible remed for set_loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - add ansible remed for set_ipv6_loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - Migrate package_dracut-fips_installed to template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - add bash remediation to set_ipv6_loopback_traffic (Christian Hagenest
<christian.hagenest@suse.com>)
 - Wait for storage to finish writes (Matej Tyc <matyc@redhat.com>)
 - Added a new SLE 12/15 rule package_rsync_removed (rchikov
<rumen.chikov@suse.com>)
 - Fix oval check warning for comparing int vs string (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Status is partial automated can be partially ;) (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add ensure_firewall_rules_exist_for_all_open_ports rule to SLE15 CIS and
PCIDSS profile (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add rule definition on firewalling open ports (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Corrections related to SLE 12/15 CIS profiles (rchikov
<rumen.chikov@suse.com>)
 - incorporated comment (Bharath B <bhb@redhat.com>)
 - Fix typing import in create_srg_export.py (Matthew Burket
<mburket@redhat.com>)
 - Fix the file param in rule_dir_json (Matthew Burket <mburket@redhat.com>)
 - Add tests to package_dracut-fips-aesni_installed (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to grub2_enable_fips_mode (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add refcheck test for RHEL 7 and RHEL 8 (Matthew Burket <mburket@redhat.com>)
 - Fix message in refchecker.py (Matthew Burket <mburket@redhat.com>)
 - Make refchecker use full paths (Matthew Burket <mburket@redhat.com>)
 - Add OL7 to the /etc/bashrc conditional (Watson Sato <wsato@redhat.com>)
 - Fix refchecker (Matthew Burket <mburket@redhat.com>)
 - update ocp identifiers in the rules (Bharath B <bhb@redhat.com>)
 - CMP-1389: SRG-APP-000014-CTR-000040: Needs an automated rule to check Kubelet
tlsSecurityProfile (Bharath B <bhb@redhat.com>) (#PP-000014)
 - Remove ids, and add cis quotes (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix CCE-ID (anivan-suse <anastasija.ivanovic@suse.com>)
 - cis change (anivan-suse <anastasija.ivanovic@suse.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - SLE 12/15 CCE/CIS codes added and CIS codes updated (rchikov
<rumen.chikov@suse.com>)
 - The test-controleval tests should use test files (Matthew Burket
<mburket@redhat.com>)
 - Improve the arguments for Ansible command module (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor build_cpe (rename confusing symbol-related variables) (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Update documentation for templated CPEs (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Rename CPE template cond_package into platform_package (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - The controleval script needs Python 3.7+ (Matthew Burket
<mburket@redhat.com>)
 - Update package_dracut-fips-aesni_installed ansible (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update grub2_enable_fips_mode ansible (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to package_dracut-fips_installed (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update package_dracut-fips_installed ansible (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add sanity tests for controleval.py (Matthew Burket <mburket@redhat.com>)
 - CIS / CCE numbers for SLE 12/15 covering special services (rchikov
<rumen.chikov@suse.com>)
 - Fix make_items_product_specific function (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Use replace insted of lineinfile to fix TMOUT (Watson Sato
<wsato@redhat.com>)
 - Fix PEP8 in build_cpe.py (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Document templated CPEs (shared/applicability/*.yml) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Clean up templates.py, add missing conditionals for applicability/package.yml
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Refactor build_cpe.py (CPEALFactRef.pass_parameters) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Refactor boolean_expression (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Use dry run in test-create_scap_delta_tailoring (Matthew Burket
<mburket@redhat.com>)
 - Fix bad name in sshd_enable_pam fix and check text (Matthew Burket
<mburket@redhat.com>)
 - Fix issues with duplicative lines at the end of the file (Matthew Burket
<mburket@redhat.com>)
 - Handle /etc/bashrc file in RHEL7 (Watson Sato <wsato@redhat.com>)
 - Add tests for /etc/bashrc for RHEL7 (Watson Sato <wsato@redhat.com>)
 - Fix pass duplicate test scenarios (Watson Sato <wsato@redhat.com>)
 - Ensure the remediation updates occurences of TMOUT (Watson Sato
<wsato@redhat.com>)
 - Make sure that at least one TMOUT is defined (Watson Sato <wsato@redhat.com>)
 - Fail rule when any file contain incompliant TMOUT (Watson Sato
<wsato@redhat.com>)
 - Make rule assess all occurences of TMOUT in file (Watson Sato
<wsato@redhat.com>)
 - Add tests for conflicting and duplicate TMOUT (Watson Sato
<wsato@redhat.com>)
 - Add nonessential services rule (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix build bug (Matthew Burket <mburket@redhat.com>)
 - Whitespace update (Matthew Burket <mburket@redhat.com>)
 - Update kernel_module_can_disabled for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update audit and logging rules for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update chronyd_server_directive for the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update partition rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update account session rules for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update some auth rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update TFTP rule for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update OS is updated or RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update accounts physical rules for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update password quality rules for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update GRUB 2 rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update lockout rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update file permission rules RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Upadate crypto rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update accounts restrictions rules for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update system restrictions rules for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update AIDE rules for RHEL 9 (Matthew Burket <mburket@redhat.com>)
 - Update seprate file system rules in RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Tmux rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Audit and auditd config rules for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update USB guard rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update audit rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update networking sysctl for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update important file ownership for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update package rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update NFS rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update GNOME rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update postfix rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update GPG rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update SSHD rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Package and service rule update for RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Update service rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update cron file permissions rules from RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Remove configure_kerberos_crypto_policy from the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Sync rules for RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Include platform: grub2 for grub2_enable_selinux rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve test scenario scripts in alignment to OVAL (Marcus Burghardt
<maburgha@redhat.com>)
 - Ensure style guide alignment in OVAL (Marcus Burghardt <maburgha@redhat.com>)
 - Extend Ansible remediation to avoid fatal errors (Marcus Burghardt
<maburgha@redhat.com>)
 - Allocate difference SLE12 CCE id to avoid conflict with meanwhile consumed
CCEs (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add sanity check to verify a log_file config is present (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/file_permissions
_var_log_audit/ansible/shared.yml (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Change chmod command with file module in ansible template (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add ansible remediation for file_permissions_var_log_audit rule (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add file_permissions_var_log_audit to SLE12 PCI-DSS profile (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update of CIS profiles for SLE 12/15 (rchikov <rumen.chikov@suse.com>)
 - CPE AL: Introduce templated platforms (CPEs) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Add package_firewalld_installed to OL7 STIG (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add rule to set ipv4 tcp_invalid_ratelimit in OL7 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix typo. (Gabriel Becker <ggasparb@redhat.com>)
 - Apply suggestions from code review (Gabriel Becker <ggasparb@redhat.com>)
 - Add audit rule for create_module to OL7 STIG (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Use dry run in test-create_scap_delta_tailoring_resolved (Matthew Burket
<mburket@redhat.com>)
 - Provide documentation for automatic detection of platform_package_overrides
in tests (David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>)
 - Update rule tests to rely on platform_package_overrides + add needed
alternatives to products (David Fernandez Gonzalez
<david.fernandezgonzalez@canonical.com>)
 - Check packages against platform_package_overrides before installing in tests
(David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>)
 - Set the proper rule for RHEL8 STIG control file (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the test scenario scripts for newer sshd versions (Marcus Burghardt
<maburgha@redhat.com>)
 - Replace fixed value by the proper variable value (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor OVAL for sshd_set_keepalive (Marcus Burghardt <maburgha@redhat.com>)
 - Sort conditional remediation platform checks. (Gabriel Becker
<ggasparb@redhat.com>)
 - Map selinux_user_login_roles to RHEL-08-040400 (Watson Sato
<wsato@redhat.com>)
 - Needs an automated rule to check IngressController tlsSecurityProfile
(Bharath B <bhb@redhat.com>)
 - Needs an automated rule to check IngressController tlsSecurityProfile
(Bharath B <bhb@redhat.com>)
 - Update space_left rule in OL7 STIG to use percentage (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update kernel_module_disabled for OL systems (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update grub2_password for OL7 to not check grub.cfg (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OL7 STIG id on mount_option_ rules (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Recognize all 64bit architectures in sysctl_kernel_exec_shield rule (Milan
Lysonek <mlysonek@redhat.com>)
 - Remove offending stigid from
apple_os/auditing/service_com_apple_auditd_enabled rule (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Fix line length in build_sce.py (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Refactor entities/common (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Recognize all 64bit architectures in audit rules (Milan Lysonek
<mlysonek@redhat.com>)
 - Add max_line_length parameter to .editorconfig (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Refactor entities/common (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Refactor templates (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Refactor common.Templatable (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Refactor templates (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Recognize all 64bit architectures in audit_rules templates (Milan Lysonek
<mlysonek@redhat.com>)
 - Add to pci-dss profile (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add pci-dss Req (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add 4.1.14 to cis@sle15 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix config file for dconf_gnome_screensaver_lock_locked (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Fix missing backslash while configuring gitpod env. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add option to Automatus to remove platforms from benchmark/profiles. (Gabriel
Becker <ggasparb@redhat.com>)
 - Include warning regarding quota options in XFS (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor build_yaml (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Add documentation about readthedocs.org integration. (Gabriel Becker
<ggasparb@redhat.com>)
 - Added CIS / CCE codes to the rules which belong to warning banners group
(rchikov <rumen.chikov@suse.com>)
 - Refactor templates: move XCCDFEntity-specific code into Templatable (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Refactor templates: Rule and Templatable and products (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Refactor templates and XCCDFEntities (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Refactor template builder (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Ensure pwquality.conf.d dir exists on test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Add ANSSI and CIS ansible tests to CI (Milan Lysonek <mlysonek@redhat.com>)
 - Add dry run to utils/create_scap_delta_tailoring.py (Matthew Burket
<mburket@redhat.com>)
 - Add test for create_scap_delta_tailoring using the resolved dirs flag
(Matthew Burket <mburket@redhat.com>)
 - Unselect nfs-utils removal rule as GUI installation reqires the package
(Milan Lysonek <mlysonek@redhat.com>)
 - Move is_name to Symbol class (Jan Černý <jcerny@redhat.com>)
 - Remove unused import (Jan Černý <jcerny@redhat.com>)
 - Bump version to 0.1.66 (Marcus Burghardt <maburgha@redhat.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged
_commands/audit_rules_privileged_commands/ansible/shared.yml (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Remove unnecessary extra tests (Watson Sato <wsato@redhat.com>)
 - Align rule with RHEL8 (Watson Sato <wsato@redhat.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - incorporated comments part-4 (Bharath B <bhb@redhat.com>)
 - Add SUSE Manager 4.x in installed_OS_is_sle15 (Xavier Coulon
<xavier.coulon@suse.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Add sanity test for create_scap_delta_tailoring (Matthew Burket
<mburket@redhat.com>)
 - Fix issue where the last line of the file was being added again (Matthew
Burket <mburket@redhat.com>)
 - Add set_firewalld_default_zone rule to PCI DSS profile for sle15 (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix indentation in Ansible shell module parameter (Marcus Burghardt
<maburgha@redhat.com>)
 - Replace OS name in check text as well. (Matthew Burket <mburket@redhat.com>)
 - Fix the issue with no spaces in replaced name (Matthew Burket
<mburket@redhat.com>)
 - Fix macro loading order (Watson Sato <wsato@redhat.com>)
 - Change placeholder version in spec to 0.0.1 (Milan Lysonek
<mlysonek@redhat.com>)
 - Add note about package version to spec file (Milan Lysonek
<mlysonek@redhat.com>)
 - CIS numbers - added/updated CCE numbers - added for SLE 12/15 (rchikov
<rumen.chikov@suse.com>)
 - Change ignored_keys to frozenset (Jan Černý <jcerny@redhat.com>)
 - Rename method reference_is_parametrized to cpe_id_is_parametrized (Jan
Černý <jcerny@redhat.com>)
 - Rename a variable (Jan Černý <jcerny@redhat.com>)
 - Set ignored_keys to an empty list explicitely (Jan Černý
<jcerny@redhat.com>)
 - Rename method _is_parametrized to reference_is_parametrized (Jan Černý
<jcerny@redhat.com>)
 - Use a frozenset as a default argument (Jan Černý <jcerny@redhat.com>)
 - Extract function recurse_or_substitute_or_do_nothing (Jan Černý
<jcerny@redhat.com>)
 - Move function is_parametrized to Symbol class (Jan Černý
<jcerny@redhat.com>)
 - Only run test-generate_contributors if git is installed (Matthew Burket
<mburket@redhat.com>)
 - Install git in fedora rawhide gating (Matthew Burket <mburket@redhat.com>)
 - Add sanity test for generate_contributors (Matthew Burket
<mburket@redhat.com>)
 - Add dry run to utils/generate_contributors.py (Matthew Burket
<mburket@redhat.com>)
 - Fix minor bug in release_process.md (Matthew Burket <mburket@redhat.com>)
 - Make the contributors script use UTC for the time notice. (Matthew Burket
<mburket@redhat.com>)
 - Update contributors list for v0.1.65 release (Marcus Burghardt
<maburgha@redhat.com>)
 - Use jinja to limit the RHEL 8 minor version text (Marcus Burghardt
<maburgha@redhat.com>)
 - Fixed bash_shell_file_set macro to consider spaces (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactored the test scenario scripts (Marcus Burghardt <maburgha@redhat.com>)
 - Refactored the OVAL assessment for fapolicy_default_deny (Marcus Burghardt
<maburgha@redhat.com>)
 - Update ocil and fixtext in fapolicy_default_deny (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - removed wrong rule from hipaa.profile (hagenest
<christian.hagenest@suse.com>)
 - Add config for Ansible lint (Matthew Burket <mburket@redhat.com>)
 - Fix Code Climate issues (Matthew Burket <mburket@redhat.com>)
 - Fix PEP8 issuses in utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - Fix typo in test platforms (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Refactor CPE AL (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Add Ansible destructive CI tests (Milan Lysonek <mlysonek@redhat.om>)
 - Update existing FMF plans to explicitly say they are testing Bash (Milan
Lysonek <mlysonek@redhat.om>)
 - incorporated comments part-3 (Bharath B <bhb@redhat.com>)
 - incorporated comments part-2 (Bharath B <bhb@redhat.com>)
 - incorporated comments part-1 (Bharath B <bhb@redhat.com>)
 - Formatting and bug fixes in utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - Update instructions for TLS cipher suite algorithms (Lance Bragstad
<lbragsta@redhat.com>)
 - Make rpm_verify_hashes ansible remediation applicable on all RHELs (Milan
Lysonek <mlysonek@redhat.om>)
 - Add new CCI on RHEL-07-020019 (Watson Sato <wsato@redhat.com>)
 - Fix CCI of RHEL-07-020019 (Watson Sato <wsato@redhat.com>)
 - Correction of CIS numbers assigned to SLES 12/15 rules (rchikov
<rumen.chikov@suse.com>)
 - Fix rpm_verify_* ansible remediations (Milan Lysonek <mlysonek@redhat.om>)
 - Add sle platform support for ansible remediation in
set_password_hashing_algorithm_libuserconf rule (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Enable set_password_hashing_algorithm_libuserconf rule for sle12 platform
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Make service_disabled template compatible with Ansible 2.14 (Milan Lysonek
<mlysonek@redhat.om>)
 - Revert "Align service_disabled template to service_enabled" (Milan Lysonek
<mlysonek@redhat.om>)
 - clean up rule_dir_json.py import (Matthew Burket <mburket@redhat.com>)
 - sysctl: remove settings in /usr/local/lib/sysctl.d (Watson Sato
<wsato@redhat.com>)
 - sysctl: Align Ansible and Bash remediations (Watson Sato <wsato@redhat.com>)
 - Extend OVAL check to ignore .bash_history file (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenario to test .bash_history treatment (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation to skip .bash_profile file (Marcus Burghardt
<maburgha@redhat.com>)
 - Update checktext for RHEL-08-020352 (Marcus Burghardt <maburgha@redhat.com>)
 - sysctl: Check /usr/local/lib/sysctl.d for configs (Watson Sato
<wsato@redhat.com>)
 - Add tests for sysctls in /usr/local/lib/sysctl.d (Watson Sato
<wsato@redhat.com>)
 - Add SRG XLSX files to the build system (Matthew Burket <mburket@redhat.com>)
 - Add --quiet to rule_dir_json (Matthew Burket <mburket@redhat.com>)
 - Change more rule to rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Change rule to rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix type and bash line (anivan-suse <anastasija.ivanovic@suse.com>)
 - Remove deprecated warn parameter from Ansbile command module (Milan Lysonek
<mlysonek@redhat.om>)
 - Remove remove_multiple_blank_lines function as it's no longer used (Milan
Lysonek <mlysonek@redhat.om>)
 - CMP-1389: SRG-APP-000014-CTR-000040: Needs an automated rule to check for TLS
Security Profile (Bharath B <bhb@redhat.com>) (#PP-000014)
 - Ignore results files from testing (Matthew Burket <mburket@redhat.com>)
 - Update gitignore (Matthew Burket <mburket@redhat.com>)
 - Do not remove blank lines when building profile playbook (Milan Lysonek
<mlysonek@redhat.om>)
 - Align service_disabled template to service_enabled (Milan Lysonek
<mlysonek@redhat.om>)
 - accounts_password_pam_retry: Add test for dupes and conflicts (Watson Sato
<wsato@redhat.com>)
 - accounts_password: Add tests for conflicting and duplicate values (Watson
Sato <wsato@redhat.com>)
 - accounts_password: Rename param conflict test (Watson Sato
<wsato@redhat.com>)
 - ssg/build_cpe: check if the reference of CPE item is not parametrized
platform id (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove unnecessary metric (Marcus Burghardt <maburgha@redhat.com>)
 - add helper function to extract only the base name from parametrized platform
name (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix title in requirement 2.2.9 for cis_rhel8 (Marcus Burghardt
<maburgha@redhat.com>)
 - ssg/boolean_expression.py: more friendly naming of arguments (Vojtech Polasek
<vpolasek@redhat.com>)
 - Include hint to update PYTHONPATH (Marcus Burghardt <maburgha@redhat.com>)
 - sshd_lineinfile: Add tests for duplicated params (Watson Sato
<wsato@redhat.com>)
 - Include new maintainers teams in CODEOWNERS (Marcus Burghardt
<maburgha@redhat.com>)
 - Add test for duplicated SSHD parameter (Watson Sato <wsato@redhat.com>)
 - Separate the SSHD parameter from the value (Watson Sato <wsato@redhat.com>)
 - Add tests to check for RekeyLimit conflicts (Watson Sato <wsato@redhat.com>)
 - use varible for ocp version detection (Vincent Shen <wenshen@redhat.com>)
 - Address reviewer comments in 9778 (Matthew Burket <mburket@redhat.com>)
 - Add sle platform for relevant accounts_password_pam_unix_remember test
scripts (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Enable sle12 support for accounts_password_pam_unix_remember bash and ansible
remediation (teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Add CCE for sle12 to accounts_password_pam_unix_remember (teacup-on-
rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Update docs/manual/developer/06_contributing_with_content.md (Marcus
Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - Pull openpyxl pandas from the Debian 10 tests (Matthew Burket
<mburket@redhat.com>)
 - Add more guarding of the smoke tests (Matthew Burket <mburket@redhat.com>)
 - Sure CMake fixtures for rules_dir_json and SRG Export dependacies (Matthew
Burket <mburket@redhat.com>)
 - add cis code (anivan-suse <anastasija.ivanovic@suse.com>)
 - Change rpm command (anivan-suse <anastasija.ivanovic@suse.com>)
 - Update docs/manual/developer/06_contributing_with_content.md (Marcus
Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - Update docs/manual/developer/06_contributing_with_content.md (Marcus
Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - allow passing of parameters when creating the platform (Vojtech Polasek
<vpolasek@redhat.com>)
 - enhance the boolean_expression.Symbol class to handle parameters and store
them (Vojtech Polasek <vpolasek@redhat.com>)
 - Add test for param conflicts for SSH compression (Watson Sato
<wsato@redhat.com>)
 - add new function to apply formatting on dictionary values (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update docs/manual/developer/06_contributing_with_content.md (Marcus
Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - Document rule deprecation instructions and agreements (Marcus Burghardt
<maburgha@redhat.com>)
 - Update profile stability test data (Watson Sato <wsato@redhat.com>)
 - Add opensc_card_drivers rules to sle12 platform (teacup-on-rockingchair
<315160+teacup-on-rockingchair@users.noreply.github.com>)
 - Add dconf_gnome_screensaver_idle_activation_enabled to sle12 platform
(teacup-on-rockingchair <315160+teacup-on-
rockingchair@users.noreply.github.com>)
 - Enable install_hids for sle12 platform (teacup-on-rockingchair <315160
+teacup-on-rockingchair@users.noreply.github.com>)
 - Fix pandas dep in CI (Matthew Burket <mburket@redhat.com>)
 - Add openpyxl to CI so that smoke tests run (Matthew Burket
<mburket@redhat.com>)
 - Add smoke test for the compare_ds script (Matthew Burket
<mburket@redhat.com>)
 - Add smoke test for the srg-diff script (Matthew Burket <mburket@redhat.com>)
 - Add smoke test for the create_srg_export script (Matthew Burket
<mburket@redhat.com>)
 - OCP4: Don't select ocp4-node-on-ovn rules for NIST high profile (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4: 4.12 uses ebs.csi.aws.com not kubernetes.io/aws-ebs as storage
provisioner on AWS (Jakub Hrozek <jhrozek@redhat.com>)
 - Change verbiage on idle timeout rule (Watson Sato <wsato@redhat.com>)
 - Add test to check for configuration conflicts (Watson Sato
<wsato@redhat.com>)
 - Check all instances of ClientAliveCountMax (Watson Sato <wsato@redhat.com>)
 - Add tests to check for configuration conflicts (Watson Sato
<wsato@redhat.com>)
 - Change verbiage on keepalive rules (Watson Sato <wsato@redhat.com>)
 - RHEL8 STIG v1R8 requires ClientAliveCountMax 1 (Watson Sato
<wsato@redhat.com>)
 - Fix broken Automatus CI jobs (Jan Černý <jcerny@redhat.com>)
 - Add error messages (anivan-suse <anastasija.ivanovic@suse.com>)
 - Remove execute permission from SCAP content (Watson Sato <wsato@redhat.com>)
 - Remove execute permission from SCAP content (Watson Sato <wsato@redhat.com>)
 - Add rule name (anivan-suse <anastasija.ivanovic@suse.com>)
 - Include fedora in the prodtype list and test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL7 STIG to V3R9 (Watson Sato <wsato@redhat.com>)
 - Update DISA STIG RHEL7 SCAP content to V3R9 (Watson Sato <wsato@redhat.com>)
 - Update DISA RHEL7 STIG manual benchmark to V3R9 (Watson Sato
<wsato@redhat.com>)
 - Update RHEL8 STIG to V1R8 (Watson Sato <wsato@redhat.com>)
 - Update DISA STIG RHEL8 SCAP content to V1R7 (Watson Sato <wsato@redhat.com>)
 - Update DISA RHEL8 STIG manual benchmark to V1R8 (Watson Sato
<wsato@redhat.com>)
 - merge two if statements (Vojtech Polasek <vpolasek@redhat.com>)
 - fix blank lines to align with pep8 (Vojtech Polasek <vpolasek@redhat.com>)
 - extract functions for getting platform names and cpe names related to
remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - unify definition of remediatiojObject (Vojtech Polasek <vpolasek@redhat.com>)
 - Ignore errors on semanage command when SELinux is not used (Marcus Burghardt
<maburgha@redhat.com>)
 - Add sorted results to srg_diff (Matthew Burket <mburket@redhat.com>)
 - Increment remediation to ensure correct SELinux fcontext (Marcus Burghardt
<maburgha@redhat.com>)
 - Removed STIG references from account_passwords_pam_faillock_dir (Marcus
Burghardt <maburgha@redhat.com>)
 - Change manual page name to pam_faillock in lowercase (Marcus Burghardt
<maburgha@redhat.com>)
 - Include RHEL identifiers to the more complete rule (Marcus Burghardt
<maburgha@redhat.com>)
 - update build_remediations.py to reflect changes in XCCDF platform API
(Vojtech Polasek <vpolasek@redhat.com>)
 - Include deprecation warning for duplicated rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix the stigid reference for RHEL8 (Marcus Burghardt <maburgha@redhat.com>)
 - Update SRG to use more complete rule for pam_faillock dir (Marcus Burghardt
<maburgha@redhat.com>)
 - Use the proper variable in bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Use the existing variable in fixtext instead of static value (Marcus
Burghardt <maburgha@redhat.com>)
 - Improve ocil and ocil_clause to be more clear (Marcus Burghardt
<maburgha@redhat.com>)
 - Include srg_requirement in accounts_passwords_pam_faillock_dir (Marcus
Burghardt <maburgha@redhat.com>)
 - change api for getting of remediation conditionla s from XCCDF platforms
(Vojtech Polasek <vpolasek@redhat.com>)
 - Remove STIGIDs from deprecated rule (Watson Sato <wsato@redhat.com>)
 - Fix sloppy typing and spacing errors (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Fix nmcli bug (anivan-suse <anastasija.ivanovic@suse.com>)
 - products/anolis8: supports Anolis OS 8 (YiLin.Li
<YiLin.Li@linux.alibaba.com>)
 - Fix - 2 new rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - OCP4: Mark file_{owner,groupowner,permissions}_openshift_sdn_cniserver_config
as NOT-APPLICABLE on OCP 4.12 (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: Mark file_{owner,groupowner,permissions}_ip_allocations as NOT-
APPLICABLE on OCP 4.12 (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: file_{owner,groupowner,permissions}_proxy_kubeconfig should be
NOT_APPLICABLE on 4.12+ (Jakub Hrozek <jhrozek@redhat.com>)
 - Fix misnamed rule (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add loopback rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Make the utils/srg_diff.py more generic (Matthew Burket <mburket@redhat.com>)
 - OCP4: improve rule scc_limit_container_allowed_capabilities instruction
(Vincent Shen <wenshen@redhat.com>)
 - Fix Automatus --duplicate-templates (Jan Černý <jcerny@redhat.com>)
 - Remove text (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add section to SRG Diff to highlight missing CCEs (Matthew Burket
<mburket@redhat.com>)
 - Remove cces and fix bash (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add shadow rule to pci-dss-4 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add new rule ensure_shadow_group_empty (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add CIS and ANSSI machine hardening tests for TF (Milan Lysonek
<mlysonek@redhat.om>)
 - OCP4 update rule general-default-seccomp-profile (Vincent Shen
<wenshen@redhat.com>)
 - Consider the last field the log file path (Watson Sato <wsato@redhat.com>)
 - Add test cases identical to the cloudinit conf (Watson Sato
<wsato@redhat.com>)
 - OCP4: lowercase several rules (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: Add more test manifests (Jakub Hrozek <jhrozek@redhat.com>)
 - Load and preprocess the template individually (Watson Sato
<wsato@redhat.com>)
 - CCI -> CCE in srg_diff (Matthew Burket <mburket@redhat.com>)
 - Updates according to DISA updates published on 21.10.2022 (rumch-se
<rumen.chikov@suse.com>)
 - Rename and align extracted functions (Watson Sato <wsato@redhat.com>)
 - Remove Builder() from RuleChecker() (Watson Sato <wsato@redhat.com>)
 - Extract non-building functions from Builder() (Watson Sato
<wsato@redhat.com>)
 - Update tests in dconf related rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Align bash dconf macros with corresponding OVAL (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Remove deprecated code (Jan Černý <jcerny@redhat.com>)
 - Removed extra spaces in test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenarios with stig banner for ubuntu (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove the harmful text from fapolicyd_prevent_home_folder_access (Matthew
Burket <mburket@redhat.com>)
 - Add tests to accounts_password template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Clean up import sections (Matej Tyc <matyc@redhat.com>)
 - Split profile functionality from build_yaml (Matej Tyc <matyc@redhat.com>)
 - remove cceids from txt file (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add Rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add note about history (Watson Sato <wsato@redhat.com>)
 - Example how to create two PRs from a single branch (Watson Sato
<wsato@redhat.com>)
 - How to relocate a fix from one to another (Watson Sato <wsato@redhat.com>)
 - Reformat example how to port fix between branches (Watson Sato
<wsato@redhat.com>)
 - Update profiles for profile_stability tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Update SRG to use rule with consistent name (Marcus Burghardt
<maburgha@redhat.com>)
 - Update rule name in OL8 STIG profile (Marcus Burghardt <maburgha@redhat.com>)
 - Update rule name in RHEL8 STIG profile (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove duplicated ids from OVAL (Marcus Burghardt <maburgha@redhat.com>)
 - Include deprecation warning in disaligned rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Create accounts_passwords_pam_faillock_audit rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Align test scenario scripts with banner_etc_issue rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Align the OVAL to the project style guide (Marcus Burghardt
<maburgha@redhat.com>)
 - Include missing platforms in remediations (Marcus Burghardt
<maburgha@redhat.com>)
 - remove no longer used imports and fix flak8 issues in templates.py (Vojtech
Polasek <vpolasek@redhat.com>)
 - store templating languages in dict instead of list (Vojtech Polasek
<vpolasek@redhat.com>)
 - drop usage of getiterator because we support only Python 2.7, not older
(Vojtech Polasek <vpolasek@redhat.com>)
 - add forgotten __init__.py (Vojtech Polasek <vpolasek@redhat.com>)
 - extract function which converts "true" or "false" from yaml to booleans
(Vojtech Polasek <vpolasek@redhat.com>)
 - add correct dependencies to cmake file (Vojtech Polasek
<vpolasek@redhat.com>)
 - template handling: redesign how templating languages are defined (Vojtech
Polasek <vpolasek@redhat.com>)
 - remove no longer valid comment (Vojtech Polasek <vpolasek@redhat.com>)
 - improve dictionary iteration (Vojtech Polasek <vpolasek@redhat.com>)
 - remove no longer used method (Vojtech Polasek <vpolasek@redhat.com>)
 - correctly raise an exception instead of printing a message (Vojtech Polasek
<vpolasek@redhat.com>)
 - fixing issues reported by flake8 and codeclimate in modified files (Vojtech
Polasek <vpolasek@redhat.com>)
 - remove function which was forgotten when extracting XCCDFEntity class
(Vojtech Polasek <vpolasek@redhat.com>)
 - modify tests to use new way of initializing ProductCPEs (Vojtech Polasek
<vpolasek@redhat.com>)
 - deduplicate code (Vojtech Polasek <vpolasek@redhat.com>)
 - rework adding of CPE items and product CPE items (Vojtech Polasek
<vpolasek@redhat.com>)
 - add explanatory comment (Vojtech Polasek <vpolasek@redhat.com>)
 - Improve product CPEs (Vojtech Polasek <vpolasek@redhat.com>)
 - Support for compiled CPE items (Vojtech Polasek <vpolasek@redhat.com>)
 - Support reading content CPES from individual yaml files (Vojtech Polasek
<vpolasek@redhat.com>)
 - Allow compiled content file names to contain dots (Vojtech Polasek
<vpolasek@redhat.com>)
 - Extract XCCDFEntity class to be used in other module files (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add PCI-DSS rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add PCI-DSS rules and update cceid (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Remove fapolicyd_prevent_home_folder_access from the RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Update SLE 15 SAP hardening profile (sampsone <esampson@suse.com>)
 - Improvements based on review discussion (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible remediation for banner_etc_issue_net (Marcus Burghardt
<maburgha@redhat.com>)
 - Update requirement 1.7.3 for CIS RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include RHEL in prodtype for banner_etc_issue_net rule (Marcus Burghardt
<maburgha@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add Ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add Bash remediation and change macro (Vojtech Polasek <vpolasek@redhat.com>)
 - add OVAL check (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule and associated variable (Vojtech Polasek <vpolasek@redhat.com>)
 - OCP4: Check ownership and permission of OVN DB files (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add correct_value, profile independent test to rule (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests for file_ownership_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests for force_opensc_card_drivers (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests for configure_opensc_card_drivers (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Reformulate the release_process documentation (Marcus Burghardt
<maburgha@redhat.com>)
 - Added 4 rules to SLES 12/15 PCI DSS 4.0 profiles (rumch-se
<rumen.chikov@suse.com>)
 - OCP4: check file permissions and ownership of ovn-cni-server.sock (Jakub
Hrozek <jhrozek@redhat.com>)
 - Clarify how the branches are syncronized (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove process to sincronize branches (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix CCE-86042-9 in the list of available CCEs (Marcus Burghardt
<maburgha@redhat.com>)
 - Update requirement 1.7.6 for CIS RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update requirement 1.7.6 for CIS RHEL8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Create file_owner_etc_issue_net rule (Marcus Burghardt <maburgha@redhat.com>)
 - Create file_groupowner_etc_issue_net rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Create file_permissions_etc_issue_net rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Added SLES 15/12 CCE codes related to the rules ...backup_etc_group (rumch-se
<rumen.chikov@suse.com>)
 - Update pci-dss-4.profile (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Fix test_id_translate.py to work with Python 2.7 (Matthew Burket
<mburket@redhat.com>)
 - Improve regex to detect ifcfg files (Marcus Burghardt <maburgha@redhat.com>)
 - Remediation applicable to all NetworkManager connections (Marcus Burghardt
<maburgha@redhat.com>)
 - Optimize test scenarios (Marcus Burghardt <maburgha@redhat.com>)
 - Adjust the OCP OVN platform detection for 4.12 (Jakub Hrozek
<jhrozek@redhat.com>)
 - Created SLES 12 PCI DSS 4.0 profile and added rules to it (rumch-se
<rumen.chikov@suse.com>)
 - Add pci-ds rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Improve wording on warning about custom ssh.xml (Marcus Burghardt
<maburgha@redhat.com>)
 - Simplify the Bash remediation in alignment to Ansible (Marcus Burghardt
<maburgha@redhat.com>)
 - Trim nmcli connection names output (Marcus Burghardt <maburgha@redhat.com>)
 - Fix loop over array in bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce new Ansible remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Recreated OVAL assessment for firewalld_sshd_port_enabled (Marcus Burghardt
<maburgha@redhat.com>)
 - Reinvent the test scenarios for firewalld_sshd_port_enabled (Marcus Burghardt
<maburgha@redhat.com>)
 - Review test scenario scripts (Marcus Burghardt <maburgha@redhat.com>)
 - Include warning message regarging custom SSH port (Marcus Burghardt
<maburgha@redhat.com>)
 - Increase robustness of firewalld_sshd_port_enabled bash remediation (Marcus
Burghardt <maburgha@redhat.com>)
 - Improve rule descriptions for firewalld_sshd_port_enabled (Marcus Burghardt
<maburgha@redhat.com>)
 - Include section of review hints in PR template (Marcus Burghardt
<maburgha@redhat.com>)
 - CCE codes added to the rule sshd_set_max_sessions (rumch-se
<rumen.chikov@suse.com>)
 - Docs/developer: Mention that rules will inherit its group(s) platforms
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update docs/manual/developer/05_tools_and_utilities.md (Gabriel Becker
<ggasparb@redhat.com>)
 - Make sure xatrr audit rules contains a check for root user on Ubuntu (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Remove unused import (Jan Černý <jcerny@redhat.com>)
 - Add an unit test for the to_ocil() method (Jan Černý <jcerny@redhat.com>)
 - Add unit tests for warnings and sub elements (Jan Černý
<jcerny@redhat.com>)
 - Added rules to PCI DSS 4.0 SLES 15 profile (rumch-se <rumen.chikov@suse.com>)
 - Ubuntu 20.04 CIS: add package_pam_pwquality_installed for the case where
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - install_smartcard_packages: Add Ubuntu specific remediation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - rsyslog_remote_access_monitoring: Fix oval regex to avoid commented lines
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - rsyslog_remote_access_monitoring: Fix shared bash regex to avoid commented
lines (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - ensure_rsyslog_log_file_configuration: Add Ubuntu specific bash (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add a test with a rule without CCE (Jan Černý <jcerny@redhat.com>)
 - dir_perms_world_writable_sticky_bits: Update test remediation (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - dir_perms_world_writable_sticky_bits: Improve bash to avoid (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - dir_perms_world_writable_sticky_bits: Add ubuntu platform to bash (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add documentation about automatically adding CCE feature. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add newlines to SLES CCE available files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove broken link to CCE documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add support to SLES CCE available codes in add-cce tool. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use diff_files instead of diff_trees (Jan Černý <jcerny@redhat.com>)
 - Added 2 SLES 15/12 CCE codes to the rule disable_prelink (rumch-se
<rumen.chikov@suse.com>)
 - Remove expected items from the diff (Jan Černý <jcerny@redhat.com>)
 - SLES 12/15 codes updates (rumch-se <rumen.chikov@suse.com>)
 - Add xmldiff to the documentation (Jan Černý <jcerny@redhat.com>)
 - Add a test for no prexisting confing in rsyslog_remote_tls (Matthew Burket
<mburket@redhat.com>)
 - Update bash remedation for rsyslog_remote_tls (Matthew Burket
<mburket@redhat.com>)
 - Ignore errors on rsyslog_remote_tls Ansible (Matthew Burket
<mburket@redhat.com>)
 - remove ospp-mls.profile (Jiri Jaburek <comps@nomail.dom>)
 - Free and used CCE codes for SLES 12/15 OSes (rumch-se
<rumen.chikov@suse.com>)
 - Assign RHEL-07-010271 to account_emergency_expire_date. (Gabriel Becker
<ggasparb@redhat.com>)
 - CIS: Update etcd encryption provider rationale (Matt Rogers
<mrogers@redhat.com>)
 - service_ntp_enabled: Fix description as service name is ntp (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix Ubuntu 20.04 cis_level1_server profile for grub2 password (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Fix Ubuntu 20.04 stig profile for grub2 password (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - grub2_uefi_password: Add Ubuntu specific OVAL (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix grub2_uefi_boot_path for Ubuntu 20.04 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - root_permissions_syslibrary_files: Re-add tests that were removed in 3800451
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - corrected yaml value checks (Bharath B <bhb@redhat.com>)
 - corrected rule name in SRG CTR (Bharath B <bhb@redhat.com>)
 - Add pcidss Req-ids (anivan-suse <anastasija.ivanovic@suse.com>)
 - Use conditional import of xlmdiff and lxml (Jan Černý <jcerny@redhat.com>)
 - Use xmldiff in unit tests of to_xml_element methods (Jan Černý
<jcerny@redhat.com>)
 - corrected indentation (Bharath B <bhb@redhat.com>)
 - Remove unit tests that check expected properties (Jan Černý
<jcerny@redhat.com>)
 - Update products/sle12/profiles/pci-dss.profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Update products/sle12/profiles/pci-dss.profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add an empty last line to the file (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Set var_smartcard_drivers variable in the PCIDSS control file (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add PCI-DSS v4 related rules in separate profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Change reference to PCI standard to correct version (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add tally2 rules instead of faillock-based for sle12 platform (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Rename pcidss 3.2.1 to pcidss 3 (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Fix syntax errors in control format (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Fix missing CCEs for PCI-DSS (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add PCI-DSS control for v.3.2.1 and SLE profiles to include it (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add sle12 platform and missing CCE and PCIDSS references to rules related to
PCIDSS effort for SLE platforms (teacup-on-rockingchair <strandjata@gmail.com>)
 - Remove docs for utils scripts that have been moved (Matthew Burket
<mburket@redhat.com>)
 - Update links to documents for myst (Matthew Burket <mburket@redhat.com>)
 - Update docs about SCAP 1.2 content. (Matthew Burket <mburket@redhat.com>)
 - Allow linking to headers (Matthew Burket <mburket@redhat.com>)
 - Fix links in tests/README.md (Matthew Burket <mburket@redhat.com>)
 - Fix OL documentation links (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add tests to rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Refactor DISA content diff functions. (Gabriel Becker <ggasparb@redhat.com>)
 - Assigned 6 SLES 12/15 CCE codes to rules related to coredumps (rumch-se
<rumen.chikov@suse.com>)
 - Revert "6 SLES 12/15 CCE codes related to coredumps" (rumch-se
<rumen.chikov@suse.com>)
 - 6 SLES 12/15 CCE codes related to coredumps (rumch-se
<rumen.chikov@suse.com>)
 - renamed ocp_secure_allowed_registries_for_import rule (Bharath B
<bhb@redhat.com>)
 - Fix config file and interpreter check control flow (win97pro
<win97pro@protonmail.com>)
 - Add tests to sebool template (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - root_permissions_syslibrary_files: Re-add file_regex otherwise (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Include the status tag in SRG-OS-000163-GPOS-00072 (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix the total used to calculate general stats (Marcus Burghardt
<maburgha@redhat.com>)
 - Do not process checks from templates by Jinja (Jan Černý
<jcerny@redhat.com>)
 - Extract variable oval_file_path (Jan Černý <jcerny@redhat.com>)
 - Use a negative condition and a continue (Jan Černý <jcerny@redhat.com>)
 - Use negative condition and continue (Jan Černý <jcerny@redhat.com>)
 - Add unit tests for CPEAL when conditionals are empty. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove comparison utilities (Jan Černý <jcerny@redhat.com>)
 - Remove definition_location paths (Jan Černý <jcerny@redhat.com>)
 - OCP: change default kubelet tlscipher (Vincent Shen <wenshen@redhat.com>)
 - Fix CCE ids (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add rpm_verify_permissions and  rpm_verify_hashes rules sle12 support
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Remove Travis CI (Matthew Burket <mburket@redhat.com>)
 - Added 4 SLES 15/12 codes to the rules group_unique_id/name (rumch-se
<rumen.chikov@suse.com>)
 - Added SLES 15 CCE and STIG ID code to the rule (rumch-se
<rumen.chikov@suse.com>)
 - Added CCE number for SLES_15 in the rule sshd_use_approved_ciphers (rumch-se
<rumen.chikov@suse.com>)
 - Sort the list of ids in json output (Marcus Burghardt <maburgha@redhat.com>)
 - Include small function to order output list (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor json output function in controleval.py (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix typos. (Gabriel Becker <ggasparb@redhat.com>)
 - Complete 1.4.2 requirement for CIS RHEL7 v3.1.1 (Marcus Burghardt
<maburgha@redhat.com>)
 - New rules for permissions check on user.cfg file (Marcus Burghardt
<maburgha@redhat.com>)
 - New rules for owner check on user.cfg file (Marcus Burghardt
<maburgha@redhat.com>)
 - New rules for groupowner check on user.cfg file (Marcus Burghardt
<maburgha@redhat.com>)
 - Add unit tests for conversion to XCCDF 1.2 (Jan Černý <jcerny@redhat.com>)
 - Check if the values are not None (Jan Černý <jcerny@redhat.com>)
 - incorporated comments to remove CCE reference IDs used (Bharath B
<bhb@redhat.com>)
 - Add dconf_gnome_disable_user_list to the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add PSC for dconf_gnome_disable_user_list (Matthew Burket
<mburket@redhat.com>)
 - Clean up checktext in audit_rules_login_events_tallylog (Matthew Burket
<mburket@redhat.com>)
 - Remove double text from sysctl_fs_protected_symlinks checktext (Matthew
Burket <mburket@redhat.com>)
 - Add sudo sysctl_kernel_kptr_restrict psc (Matthew Burket
<mburket@redhat.com>)
 - Fix path in /var/log/faillock psc (Matthew Burket <mburket@redhat.com>)
 - Fix postfix_client_configure_mail_alias_postmaster checktext (Matthew Burket
<mburket@redhat.com>)
 - Add import-or-skip for lxml (Jan Černý <jcerny@redhat.com>)
 - Skip test if xmldiff isn't available (Jan Černý <jcerny@redhat.com>)
 - Add a test with xmldiff (Jan Černý <jcerny@redhat.com>)
 - Add missing asserts (Jan Černý <jcerny@redhat.com>)
 - Make oval_unix_namespace defintion a global (Jan Černý <jcerny@redhat.com>)
 - Change unit tests for translate() (Jan Černý <jcerny@redhat.com>)
 - Refactor by using a dictionary (Jan Černý <jcerny@redhat.com>)
 - Reduce test data input (Jan Černý <jcerny@redhat.com>)
 - Create unit tests for ssg.id_translate (Jan Černý <jcerny@redhat.com>)
 - Create mount_option_home_grpquota rule for CIS (Marcus Burghardt
<maburgha@redhat.com>)
 - Create mount_option_home_usrquota rule for CIS (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix order of cce-ids (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add PCI-DSS Rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - corrected identifiers format (Bharath B <bhb@redhat.com>)
 - incorporated comments to add ocil_clause (Bharath B <bhb@redhat.com>)
 - Fix Code Climate problems (Jan Černý <jcerny@redhat.com>)
 - Add unit tests for ssg/build_renumber.py (Jan Černý <jcerny@redhat.com>)
 - Cover the CIS 1.8.5 requirement for RHEL8 v2.0.0 (Marcus Burghardt
<maburgha@redhat.com>)
 - Cover the CIS 1.8.4 requirement for RHEL8 v2.0.0 (Marcus Burghardt
<maburgha@redhat.com>)
 - Cover the CIS 1.8.3 requirement for RHEL8 v2.0.0 (Marcus Burghardt
<maburgha@redhat.com>)
 - Delete test from accounts_umask_etc_login_defs (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Added sle support to sshd_set_max_auth_tries/ansible/shared.yml file (rumch-
se <rumen.chikov@suse.com>)
 - Added 6 SLES 15/12 CCE codes to the rules sshd_... (rumch-se
<rumen.chikov@suse.com>)
 - Use of variables in calculations and PEP8 fixes (Marcus Burghardt
<maburgha@redhat.com>)
 - Substitute newlines with breaks in texts (Matej Tyc <matyc@redhat.com>)
 - Add support for templated rules (Matej Tyc <matyc@redhat.com>)
 - Added 6 SLES-15/12 CCE codes to the rules ..._backup_etc_shadow (rumch-se
<rumen.chikov@suse.com>)
 - Added SLES 15/12 codes to rules ..._backup_etc_passwd (rumch-se
<rumen.chikov@suse.com>)
 - Update ol products yaml files (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update tests in service_enabled template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update test in kernel_module_disable template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests in wireless_disable_interfaces (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update platform and fix in typo in tests of rule (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests in sshd_use_priv_separation (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix tests in accounts_umask_etc_login_defs (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to mount_option template (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update CMake minimum version (Matthew Burket <mburket@redhat.com>)
 - Add status output in cmake for SCE content (Matthew Burket
<mburket@redhat.com>)
 - Summarize rule fields into a single HTML file. (Matej Tyc <matyc@redhat.com>)
 - Include coverage statistic in the output (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove superfluous XML namespaces from HTML tables (Jan Černý
<jcerny@redhat.com>)
 - Remove get_fixgroup_for_type (Jan Černý <jcerny@redhat.com>)
 - Improve the stats output (Marcus Burghardt <maburgha@redhat.com>)
 - Make it optional to output the controls (Marcus Burghardt
<maburgha@redhat.com>)
 - Separete functions to manipulate lists and output (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove unused XSLT xccdf2table-profileanssirefs.xslt (Jan Černý
<jcerny@redhat.com>)
 - SLES 15/12 CCE codes were added to 2 rules related to avahi-daemon and cups
service (rchikov <rumen.chikov@suse.com>)
 - Remove XCCDF 1.1 from get_profile_choices_for_input (Jan Černý
<jcerny@redhat.com>)
 - Stop iterating over both XCCDF 1.1 and XCCDF 1.2 (Jan Černý
<jcerny@redhat.com>)
 - Fix editorconfig (Matej Tyc <matyc@redhat.com>)
 - Remove unused import (Jan Černý <jcerny@redhat.com>)
 - Remove XCCDF 1.1 from profile tool (Jan Černý <jcerny@redhat.com>)
 - Remove XCCDF 1.1 from enable_derivatives.py (Jan Černý <jcerny@redhat.com>)
 - Automated rule to check for insecure image registries (Bharath B
<bhb@redhat.com>)
 - Add pci-dss rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Introduce pci-dss profile for OL9 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Require a Github account for gitpod.io workshops (Jiri Jaburek
<comps@nomail.dom>)
 - Fix a bug in the remediation condition when using CPE AL. (Gabriel Becker
<ggasparb@redhat.com>)
 - Refactor code that generates HTML output (Matej Tyc <matyc@redhat.com>)
 - Remove jinja condition to make rule applicability to all products. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove "note" superfluous field from the controls file format. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove check for OpenSCAP OVAL version as that is no longer needed (Matthew
Burket <mburket@redhat.com>)
 - Remove duplicated and unnecessary test (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor calculation of implicit status (Marcus Burghardt
<maburgha@redhat.com>)
 - Simplify the calculation of assessed controls (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor how the controls are calculated (Marcus Burghardt
<maburgha@redhat.com>)
 - Two small corrections (rumch-se <rumen.chikov@suse.com>)
 - Added SLES_15/12 CCE codes related to rules in the group
restict_at_cron_users (rumch-se <rumen.chikov@suse.com>)
 - Introduce cui profile for OL9 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Address CodeClimate coments (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Extended controls.Status class to return status list (Marcus Burghardt
<maburgha@redhat.com>)
 - Added 8 SLES 15/12 CCE codes to rules related to group restrict_at_cron_users
(rumch-se <rumen.chikov@suse.com>)
 - Extented the json function to include all available status (Marcus Burghardt
<maburgha@redhat.com>)
 - Include controls for product argument (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove intentions before list items (Jan Černý <jcerny@redhat.com>)
 - Add indentation before list items (Jan Černý <jcerny@redhat.com>)
 - rearrange cce-ids (anivan-suse <anastasija.ivanovic@suse.com>)
 - Sort cce-ids (anivan-suse <anastasija.ivanovic@suse.com>)
 - Improve argparse descriptions and readability (Marcus Burghardt
<maburgha@redhat.com>)
 - Added 2 SLES15/12 CCE codes to the rule service_rpcbind_disabled (rumch-se
<rumen.chikov@suse.com>)
 - Order the imported modules alphabetically (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix incorrect variable reference (Dan Clark <danclark@redhat.com>)
 - Fix issues found in code review for #9574 (Matthew Burket
<mburket@redhat.com>)
 - Remove 5.10 oval_version attributes (Matthew Burket <mburket@redhat.com>)
 - Update sysctl documentation (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update sysctl template's OVAL (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add rule id to titles for srg_diff (Matthew Burket <mburket@redhat.com>)
 - Minor bug fix for srg diff (Matthew Burket <mburket@redhat.com>)
 - Use rule id in SRG Diff for missing rules (Matthew Burket
<mburket@redhat.com>)
 - Fix SRG Diff html to be smaller (Matthew Burket <mburket@redhat.com>)
 - Fix more Code Climate issues (Matthew Burket <mburket@redhat.com>)
 - Handle rules addd in new content (Watson Sato <wsato@redhat.com>)
 - Add more pci-dss rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix handling of rule missing in new datastream (Watson Sato
<wsato@redhat.com>)
 - Added 10 SLES_15/12 codes to the rules file_permissions_cron_ (rumch-se
<rumen.chikov@suse.com>)
 - Make CodeClimate to use .editorconfig (Matej Tyc <matyc@redhat.com>)
 - Remove function drop_oval_definitions (Jan Černý <jcerny@redhat.com>)
 - Implementation of proposed changes (rumch-se <rumen.chikov@suse.com>)
 - Add pci-dss rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Change list to not use numbers (Jan Černý <jcerny@redhat.com>)
 - Fix up mdl findings docs/manual/developer/05_tools_and_utilities.md (Matthew
Burket <mburket@redhat.com>)
 - Fix Code Climate issues (Matthew Burket <mburket@redhat.com>)
 - Reduce the pickyness of radon for codeclimate (Matthew Burket
<mburket@redhat.com>)
 - Fix handling of < and > in the import_srg script (Matthew Burket
<mburket@redhat.com>)
 - Add some more formatting to 05_tools_and_utilities.md (Matthew Burket
<mburket@redhat.com>)
 - Add docs for utils/srg_diff.py (Matthew Burket <mburket@redhat.com>)
 - Add SRG Diff script (Matthew Burket <mburket@redhat.com>)
 - Fix vuldiscussion in SRG export (Matthew Burket <mburket@redhat.com>)
 - Only load policy specific content if the rule doesn't already have it
(Matthew Burket <mburket@redhat.com>)
 - Update Rule.read_policy_specific_content to handle None env_yaml (Matthew
Burket <mburket@redhat.com>)
 - Import STIG content for RHEL9 (Matthew Burket <mburket@redhat.com>)
 - Remove duplicated CCE. (Gabriel Becker <ggasparb@redhat.com>)
 - Implementation of proposed changes (rumch-se <rumen.chikov@suse.com>)
 - Added SLES 15/12 CCE codes to different rules related to sshd (rumch-se
<rumen.chikov@suse.com>)
 - Some corrections in rule service_rsyncd_disabled. (rumch-se
<rumen.chikov@suse.com>)
 - Add PR gating guideline (Matej Tyc <matyc@redhat.com>)
 - Added 2 SLES15/12 CCE codes to the rule file_permissions_crontab (rumch-se
<rumen.chikov@suse.com>)
 - Added a CCE code (SLES 12) for the rule 'Enable cron Service' (rumch-se
<rumen.chikov@suse.com>)
 - Fix more OVAL 5.10 references (Matthew Burket <mburket@redhat.com>)
 - OCP4: Install FIO from the right catalog (Jakub Hrozek <jhrozek@redhat.com>)
 - Added 2 SLES-15/12' CCE codes for the rule package_net-snmp-removed (rumch-se
<rumen.chikov@suse.com>)
 - Fix backend_krb5_config in configure_kerberos_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Added 2 SLES-15/12' CCE codes to the rule package_samba_removed (rumch-se
<rumen.chikov@suse.com>)
 - Added 2 SLES15/12' CCE codes to the rule package_httpd_removed (rumch-se
<rumen.chikov@suse.com>)
 - Added 2 SLES-15/12' CCE codes for the rule package_bind_removed (rumch-se
<rumen.chikov@suse.com>)
 - Added two CCE codes for SLES-12/15 to the rule package_nfs-utils_removed
(rumch-se <rumen.chikov@suse.com>)
 - Added SLES 12 and SLES 15 CCE codes to the rule package_openldap-
servers_removed (rumch-se <rumen.chikov@suse.com>)
 - Rework tests not to use separate files as templates for accounts passwords
pam tally2 unlock time (teacup-on-rockingchair <strandjata@gmail.com>)
 - Rework tests not to use separate files as templates for accounts passwords
pam tally2 (teacup-on-rockingchair <strandjata@gmail.com>)
 - Rework tests not to use separate files as templates (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Drop extra line (teacup-on-rockingchair <strandjata@gmail.com>)
 - Replace usage of bash/ansible_ensure_pam_module_options with
bash/ansible_ensure_pam_module_option (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Fix duplicate CCE id (teacup-on-rockingchair <strandjata@gmail.com>)
 - Replace accounts_passwords_pam_faillock_unlock_time with
accounts_passwords_pam_tally2_unlock_time for SLE platforms (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Replace accounts_passwords_pam_faillock_deny_root with
accounts_passwords_pam_tally2_deny_root for SLE platform (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add accounts_passwords_pam_tally2 for cases when pam_faillock is not
supported (teacup-on-rockingchair <strandjata@gmail.com>)
 - Drop accounts_passwords_pam_faillock_interval rule for SLE12 platform
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Clarify instructions for implementing SCCs (Lance Bragstad
<lbragsta@redhat.com>)
 - Remove if statements around OVAL 5.10 (Matthew Burket <mburket@redhat.com>)
 - Remove OVAL 5.10 from the build system (Matthew Burket <mburket@redhat.com>)
 - Remove SCAPVAL 1.2 from stablization (Matthew Burket <mburket@redhat.com>)
 - Remove OVAL 5.10 from GH Actions (Matthew Burket <mburket@redhat.com>)
 - Remove ident_size for .py files from editorconfig (Matthew Burket
<mburket@redhat.com>)
 - tftpd_uses_secure_mode: update rule wrt RHEL9 STIG (Matus Marhefka
<mmarhefk@redhat.com>)
 - usbguard_generate_policy: update ocil and fixtext wrt RHEL9 STIG (Matus
Marhefka <mmarhefk@redhat.com>)
 - use_pam_wheel_for_su: update fixtext, srg_requirement and add vuldiscussion
(RHEL9 STIG) (Matus Marhefka <mmarhefk@redhat.com>)
 - wireless_disable_interfaces: updated ocil and fixtext wrt RHEL9 STIG (Matus
Marhefka <mmarhefk@redhat.com>)
 - Update contributors for 0.1.64 release (Watson Sato <wsato@redhat.com>)
 - Bump version to 0.1.65 (Watson Sato <wsato@redhat.com>)
 - Re add the rule to RHEL9 data stream (Watson Sato <wsato@redhat.com>)
 - OCP4: Fix OCIL of machine_volume_encrypted (Jakub Hrozek
<jhrozek@redhat.com>)
 - Style guide clean up (Matthew Burket <mburket@redhat.com>)
 - Update the docs to use `'` vs `’` (Matthew Burket <mburket@redhat.com>)
 - xwindows_remove_packages: update srg_requirement based on RHEL9 STIG (Matus
Marhefka <mmarhefk@redhat.com>)
 - xwindows_runlevel_target: update ocil and fixtext wrt RHEL9 STIG (Matus
Marhefka <mmarhefk@redhat.com>)
 - Remove RPM verify rules from RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Use variable to remediate rule (Watson Sato <wsato@redhat.com>)
 - Fix unit tests for contributors (Matthew Burket <mburket@redhat.com>)
 - Added gitmailmap validation job (Matthew Burket <mburket@redhat.com>)
 - Update contributors.py based on new mailmap (Matthew Burket
<mburket@redhat.com>)
 - Add gitmailmap (Matthew Burket <mburket@redhat.com>)
 - OCP4: Add 4.12-specific test manifests (Jakub Hrozek <jhrozek@redhat.com>)
 - Remove mentions of "shorthand" from CMake (Jan Černý <jcerny@redhat.com>)
 - Update documentation after shorthand removal (Jan Černý
<jcerny@redhat.com>)
 - Unselect rules that remove GUI from RHEL9 stig_gui (Watson Sato
<wsato@redhat.com>)
 - Fix Markdown issues in 02_building_complianceascode.md (Matthew Burket
<mburket@redhat.com>)
 - Change to use extend and remove logic (sampsone <esampson@suse.com>)
 - Fix create_output args in utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - Add profile for SUSE SAP Public Cloud Images (sampsone <esampson@suse.com>)
 - Fix case where get_policy_specific_content may return None vs empty string
(Matthew Burket <mburket@redhat.com>)
 - Add python3-mypy to CI dependencies (Matthew Burket <mburket@redhat.com>)
 - Add content testing docs (Matthew Burket <mburket@redhat.com>)
 - Add docs for mypy (Matthew Burket <mburket@redhat.com>)
 - Update import SRG to use policy specific content fields (Matthew Burket
<mburket@redhat.com>)
 - Use the policy_specific_content for SRG export (Matthew Burket
<mburket@redhat.com>)
 - Add MyPy CI Test (Matthew Burket <mburket@redhat.com>)
 - Removed the jre product. (Matthew Burket <mburket@redhat.com>)
 - Move to MyST as recommonmark and commonmark are not supported (Matthew Burket
<mburket@redhat.com>)
 - Fix Code Climate issues (Jan Černý <jcerny@redhat.com>)
 - Rename build_shorthand.py to build_xccdf.py (Jan Černý <jcerny@redhat.com>)
 - Remove relabel_ids.py (Jan Černý <jcerny@redhat.com>)
 - Relabel IDs as a part of shorthand creation (Jan Černý <jcerny@redhat.com>)
 - Refactor: Extract method export_ocil_to_xml (Jan Černý <jcerny@redhat.com>)
 - Add ability to export benchmark XML element from LinearLoader (Jan Černý
<jcerny@redhat.com>)
 - Create elements properly in OCIL namespace (Jan Černý <jcerny@redhat.com>)
 - Use string type in var_event_record_qps OpenShift Variable. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix OL7 URL documentation link. (Gabriel Becker <ggasparb@redhat.com>)
 - Improve the regulated content handling (Matěj Týč <matyc@redhat.com>)
 - Update OVAL to accept expected values from RHEL9 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Removed fuse6 (Matthew Burket <mburket@redhat.com>)
 - Do not remove remediation for FIPS related rules in derivatives. (Gabriel
Becker <ggasparb@redhat.com>)
 - add warning to sysctl_net_ipv4_conf_all_forwarding (Vojtech Polasek
<vpolasek@redhat.com>)
 - add accounts_password_set_max_life_existing to unselect_rules_list (Vojtech
Polasek <vpolasek@redhat.com>)
 - Disable anaconda remediation of mount_option_boot_efi_nosuid. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add support for regulated fields (Matej Tyc <matyc@redhat.com>)
 - Unselect configure_gnutls_tls_crypto_policy in RHEL9 STIG. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ansible lint warning (teacup-on-rockingchair <strandjata@gmail.com>)
 - Use bash variable rsyslog_remote_loghost_address instead of jinja - thanks to
@jan-cerny for the note (teacup-on-rockingchair <strandjata@gmail.com>)
 - Drop unnecessary and wrong extra whitespaces (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add bash and ansible remediation for rsyslog_remote_tls (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Fix doc error (Matthew Burket <mburket@redhat.com>)
 - Add tests to dconf_gnome_session_idle_user_locks (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix bash conditional for and add ansible cond for container CPE. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add custom bash/ansible conditionals for UEFI/non-UEFI CPE checks. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add mount_option_boot_efi_nosuid to RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Make rule applicable only to uefi systems mount_option_boot_efi_nosuid.
(Gabriel Becker <ggasparb@redhat.com>)
 - Resolve codeclimate problem (Jan Černý <jcerny@redhat.com>)
 - Resolve codeclimate problem (Jan Černý <jcerny@redhat.com>)
 - Remove duplicate id attribute assignment (Jan Černý <jcerny@redhat.com>)
 - Fix PEP 8 problems (Jan Černý <jcerny@redhat.com>)
 - Remove the ssg-${product}-xccdf-1.2.xml file (Jan Černý
<jcerny@redhat.com>)
 - Use ssg-${PRODUCT}-xccdf.xml as dependency (Jan Černý <jcerny@redhat.com>)
 - Generate XCCDF 1.2 directly (Jan Černý <jcerny@redhat.com>)
 - Removed vsel (Matthew Burket <mburket@redhat.com>)
 - Introduce 'Not Applicable' platform (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Remove superflous check of rule ID consistency (Jan Černý
<jcerny@redhat.com>)
 - Fix bash conditional for and add ansible cond for container CPE. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add custom bash/ansible conditionals for UEFI/non-UEFI CPE checks. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add mount_option_boot_efi_nosuid to RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Make rule applicable only to uefi systems mount_option_boot_efi_nosuid.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add back SRG requirement to accounts_authorized_local_users (Jan Černý
<jcerny@redhat.com>)
 - Remove Debian 9 from products (Matthew Burket <mburket@redhat.com>)
 - Remove Debian 9 from docs and the build system (Matthew Burket
<mburket@redhat.com>)
 - Remove the debian9 product (Matthew Burket <mburket@redhat.com>)
 - Update chronyd_client_only to align with RHEL9 STIG (Marek Haicman
<mhaicman@redhat.com>)
 - Update chronyd_no_chronyc_network to align with RHEL9 STIG (Marek Haicman
<mhaicman@redhat.com>)
 - Select sssd profile in RHEL9 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use custom content for auditd_name_format because of different path in EL7.
(Gabriel Becker <ggasparb@redhat.com>)
 - Use XCCDF value instead of a hard coded value (Jan Černý
<jcerny@redhat.com>)
 - Update ansible remediation of two umask rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Make the ansible remediation of accounts_umask_etc_login_defs simpler.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix pwquality.conf.d directory path (Jan Černý <jcerny@redhat.com>)
 - Use XCCDF Value in OCIL and fixtext (Jan Černý <jcerny@redhat.com>)
 - Add checktext to accounts_umask_etc_login_defs (Jan Černý
<jcerny@redhat.com>)
 - Add checktext to accounts_umask_etc_csh_cshrc (Jan Černý
<jcerny@redhat.com>)
 - Add checktext key to accounts_umask_etc_bashrc (Jan Černý
<jcerny@redhat.com>)
 - Revert addition of srg_requirement accounts_authorized_local_users (Jan
Černý <jcerny@redhat.com>)
 - Replace dnf by pkg_manager variable (Jan Černý <jcerny@redhat.com>)
 - Remove a sentence that isn't a part of SRG requirement (Jan Černý
<jcerny@redhat.com>)
 - Remove commented out code (Jan Černý <jcerny@redhat.com>)
 - Move variable setting to SRG (Jan Černý <jcerny@redhat.com>)
 - Update fapolicyd_prevent_home_folder_access for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update ensure_gpgcheck_local_packages for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update ensure_gpgcheck_globally_activated for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update coredump_disable_backtraces for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update configure_firewalld_ports for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update configure_opensc_card_drivers for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update configure_usbguard_auditbackend for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update configure_tmux_lock_command for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update configure_tmux_lock_after_time for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update configure_bashrc_exec_tmux for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Update auditd_data_retention_space_left_percentage (Jan Černý
<jcerny@redhat.com>)
 - Add rule auditd_data_retention_admin_space_left_percentage (Jan Černý
<jcerny@redhat.com>)
 - Update auditd_data_retention_space_left_action for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Add variable for auditd freq (Matthew Burket <mburket@redhat.com>)
 - rename some templated test scenarios to keep consistency (Vojtech Polasek
<vpolasek@redhat.com>)
 - update rule audit_rules_immutable (Vojtech Polasek <vpolasek@redhat.com>)
 - fix test inconsistencies (Vojtech Polasek <vpolasek@redhat.com>)
 - remove tests from rules which are covered by template test scenarios (Vojtech
Polasek <vpolasek@redhat.com>)
 - extend tests for audit_rules_login_events and
audit_rules_usergroup_modifications templates (Vojtech Polasek
<vpolasek@redhat.com>)
 - Apply suggestions from code review (Edgar Aguilar <xeicker@gmail.com>)
 - Add tests to no_host_based_files (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests to clean_components_post_updating (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update rule CCE-83441-6 with RHEL9 STIG assessment (Watson Sato
<wsato@redhat.com>)
 - Add tests to no_user_host_based_files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix row order for SRG VulDiscussion and VulDiscussion (Matthew Burket
<mburket@redhat.com>)
 - Add audit_rules_kernel_module_loading_create to RHEL7 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Set the var_password_pam_retry variable closer to the rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix the module name from pam_pwhistory.so to pam_pwquality.so (Marcus
Burghardt <maburgha@redhat.com>)
 - Update ocil and ocil_clause in display_login_attempts (Marcus Burghardt
<maburgha@redhat.com>)
 - Include checktest for banner_etc_issue rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_passwords_pam_faillock_deny (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_passwords_pam_faillock_deny_root (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_passwords_pam_faillock_interval (Marcus Burghardt
<maburgha@redhat.com>)
 - Update uditd_data_retention_max_log_file_action_stig (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in auditd_data_retention_admin_space_left_action (Jan Černý
<jcerny@redhat.com>)
 - Add vuldiscussion in auditd_data_retention_admin_space_left_action (Jan
Černý <jcerny@redhat.com>)
 - Update srg_requirement in auditd_data_retention_admin_space_left_action (Jan
Černý <jcerny@redhat.com>)
 - Update fixtext in auditd_data_retention_admin_space_left_action (Jan Černý
<jcerny@redhat.com>)
 - Update auditd_data_retention_action_mail_acct (Jan Černý
<jcerny@redhat.com>)
 - Update fixtext in auditd_data_disk_full_action_stig (Jan Černý
<jcerny@redhat.com>)
 - Update SRG requirement in auditd_data_disk_error_action_stig (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_user_interactive_home_directory_exists (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_user_interactive_home_directory_defined (Jan Černý
<jcerny@redhat.com>)
 - Update accounts_passwords_pam_faillock_unlock_time (Marcus Burghardt
<maburgha@redhat.com>)
 - Add tests to auditd_lineinfile template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to no_tmux_in_shells (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests to dir_perms_world_writable_system_owned (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests to file_ownership_binary_dirs (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update accounts_password_pam_retry rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update audit rules RHEL9 STIG metadata. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update ocil in accounts_password_pam_pwquality_system_auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update ocil in accounts_password_pam_pwquality_password_auth (Marcus
Burghardt <maburgha@redhat.com>)
 - Update accounts_password_pam_pwhistory_remember_system_auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update clean_components_post_updating to align with RHEL9 STIG (Marek Haicman
<mhaicman@redhat.com>)
 - Use auid whenever possible in OCIL macros. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update chronyd_or_ntpd_set_maxpoll to align with RHEL9 STIG (Marek Haicman
<mhaicman@redhat.com>)
 - Update OCIL accounts_user_home_paths_only (Jan Černý <jcerny@redhat.com>)
 - Unify audit rules with existing macros. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update fixtext in accounts_user_dot_no_world_writable_programs (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_user_dot_no_world_writable_programs (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_umask_interactive_users (Jan Černý
<jcerny@redhat.com>)
 - Update fixtext in accounts_umask_etc_login_defs (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_umask_etc_login_defs (Jan Černý
<jcerny@redhat.com>)
 - Update srg_requirement in accounts_umask_etc_csh_cshrc (Jan Černý
<jcerny@redhat.com>)
 - Update fixtext in accounts_umask_etc_csh_cshrc (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_umask_etc_csh_cshrc (Jan Černý <jcerny@redhat.com>)
 - Update srg_requirement in accounts_umask_etc_bashrc (Jan Černý
<jcerny@redhat.com>)
 - Update fixtext in accounts_umask_etc_bashrc (Jan Černý <jcerny@redhat.com>)
 - Update OCIL in accounts_umask_etc_bashrc (Jan Černý <jcerny@redhat.com>)
 - Udpate OCIL in accounts_tmout (Jan Černý <jcerny@redhat.com>)
 - Update OCIL in accounts_password_set_min_life_existing (Jan Černý
<jcerny@redhat.com>)
 - Remove audit_rules_execution_restorecon from SRG control files. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update fixtext for accounts_password_set_max_life_existing (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_password_pam_ucredit (Jan Černý
<jcerny@redhat.com>)
 - Update SRG requirement in accounts_password_pam_ucredit (Jan Černý
<jcerny@redhat.com>)
 - Update SRG requirement in accounts_password_pam_ocredit (Jan Černý
<jcerny@redhat.com>)
 - Update fixtext in accounts_password_pam_ocredit (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_password_pam_ocredit (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL and SRG in accounts_password_pam_minlen (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_password_pam_minclass (Jan Černý
<jcerny@redhat.com>)
 - Update accounts_password_pam_pwhistory_remember_password_auth (Marcus
Burghardt <maburgha@redhat.com>)
 - Update OCIL in accounts_password_pam_maxrepeat (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_password_pam_maxclassrepeat (Jan Černý
<jcerny@redhat.com>)
 - Update accounts_password_all_shadowed_sha512 rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update macros from audit privileged commands. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update OCIL in accounts_password_pam_lcredit (Jan Černý
<jcerny@redhat.com>)
 - Update fixtext in accounts_password_pam_enforce_root (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_password_pam_enforce_root (Jan Černý
<jcerny@redhat.com>)
 - Update module name in ocil (Marcus Burghardt <maburgha@redhat.com>)
 - Update OCIL in accounts_password_pam_difok (Jan Černý <jcerny@redhat.com>)
 - Update srg_requirement in account_password_selinux_faillock_dir (Marcus
Burghardt <maburgha@redhat.com>)
 - Update fixtext in account_password_selinux_faillock_dir (Marcus Burghardt
<maburgha@redhat.com>)
 - Update OCIL in accounts_password_pam_dictcheck (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_password_pam_dcredit (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in accounts_minimum_age_login_defs (Jan Černý
<jcerny@redhat.com>)
 - Include checktext in ccounts_umask_etc_profile (Marcus Burghardt
<maburgha@redhat.com>)
 - Update ocil and ocil_clause in accounts_umask_etc_profile (Marcus Burghardt
<maburgha@redhat.com>)
 - Use XCCDF Value to parametrize fixtext (Jan Černý <jcerny@redhat.com>)
 - update rule accounts_no_uid_except_zero (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update OCIL in accounts_maximum_age_login_defs (Jan Černý
<jcerny@redhat.com>)
 - update accounts_max_concurrent_login_sessions (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update OCIL in accounts_logon_fail_delay (Jan Černý <jcerny@redhat.com>)
 - update accounts_have_homedir_login_defs (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update SRG requirement in accounts_authorized_local_users (Jan Černý
<jcerny@redhat.com>)
 - update account_temp_expire_date (Vojtech Polasek <vpolasek@redhat.com>)
 - Add vuldiscussion account_unique_id (Jan Černý <jcerny@redhat.com>)
 - Update fixtext wording in account_emergency_expire_date (Jan Černý
<jcerny@redhat.com>)
 - Update fixtext wording in accounts_umask_etc_profile (Marcus Burghardt
<maburgha@redhat.com>)
 - Update srg_requirement in accounts_umask_etc_profile (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve regex to also match line without space (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP: Correct the default value for var_oauth_inactivity_timeout (Vincent Shen
<wenshen@redhat.com>)
 - Update accounts_password template's OVAL (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix tests for kernel_module_dccp_disabled for RHEL 7 (Matthew Burket
<mburket@redhat.com>)
 - Improve HTML in utils/tables/reference_tables_template.html (Matthew Burket
<mburket@redhat.com>)
 - fix one test scenario - putting content into wrong file (Vojtech Polasek
<vpolasek@redhat.com>)
 - do not return set of groups, we do not need them. They are needed only by the
scan_rules_group function (Vojtech Polasek <vpolasek@redhat.com>)
 - if the datastream has not been build, just continue and do not perform
loading of rules etc (Vojtech Polasek <vpolasek@redhat.com>)
 - small fixes based on feedback (Vojtech Polasek <vpolasek@redhat.com>)
 - Fixed badly placed variable initialization (Matej Tyc <matyc@redhat.com>)
 - OCP: Update kubelet rules to check default kubeletconfig (Vincent Shen
<wenshen@redhat.com>)
 - Refactored the machine platform test (Matěj Týč <matyc@redhat.com>)
 - In SRG Export change location that rationale is sourced from (Matthew Burket
<mburket@redhat.com>)
 - Remove empty load operation (Jan Černý <jcerny@redhat.com>)
 - Address feedback in #9489 (Matthew Burket <mburket@redhat.com>)
 - Use fully qualified name for ansible module. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove unnecessary negative lookahead from regex. (Gabriel Becker
<ggasparb@redhat.com>)
 - fix styling issues and remove forgotten no longer used code (Vojtech Polasek
<vpolasek@redhat.com>)
 - try to fix one test scenario which fails in CI (Vojtech Polasek
<vpolasek@redhat.com>)
 - fixmissing slash in sudoers-d path in ansible remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove redundant and duplicate test scenarios (Vojtech Polasek
<vpolasek@redhat.com>)
 - use the macro in other rules which remediate audit waches (Vojtech Polasek
<vpolasek@redhat.com>)
 - use the fixed macro in Ansible templates for audit_login_events and
audit_usergroup_modification (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests to affected rules (Vojtech Polasek <vpolasek@redhat.com>)
 - modify OVAL checking for Audit watch rules to not require the key (Vojtech
Polasek <vpolasek@redhat.com>)
 - Improve ansible remediation of accounts_umask_etc_login_defs. (Gabriel Becker
<ggasparb@redhat.com>)
 - improve matching of platform definitions in test_machine_only_rules (Vojtech
Polasek <vpolasek@redhat.com>)
 - rewrite test_machine_only_rules test (Vojtech Polasek <vpolasek@redhat.com>)
 - Update coredump_disable_storage (Matthew Burket <mburket@redhat.com>)
 - Update package_policycoreutils_installed (Matthew Burket
<mburket@redhat.com>)
 - Update selinux_policytype (Matthew Burket <mburket@redhat.com>)
 - Update partition_for_home (Matthew Burket <mburket@redhat.com>)
 - Update dconf_db_up_to_date (Matthew Burket <mburket@redhat.com>)
 - Update partition_for_var_log_audit (Matthew Burket <mburket@redhat.com>)
 - Update check and fix text for partitions (Matthew Burket
<mburket@redhat.com>)
 - Fix tests in 2 rules used by OL8 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add OL8 platform to required tests (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add checktext for partition_for_home (Matthew Burket <mburket@redhat.com>)
 - Update encrypt_partitions (Matthew Burket <mburket@redhat.com>)
 - Update macros for partitions (Matthew Burket <mburket@redhat.com>)
 - Fix ensure_gpgcheck_never_disabled per review (Matthew Burket
<mburket@redhat.com>)
 - Update package_fapolicyd_installed (Matthew Burket <mburket@redhat.com>)
 - Update srg_requirement_package_removed (Matthew Burket <mburket@redhat.com>)
 - Update ensure_gpgcheck_never_disabled (Matthew Burket <mburket@redhat.com>)
 - modify passing of inherited cpe_platform_names when processing rules and
groups (Vojtech Polasek <vpolasek@redhat.com>)
 - Add warnings to rules using mount_option_home (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Clean up formatting in style guide (Matthew Burket <mburket@redhat.com>)
 - Document the order the new checktext field (Matthew Burket
<mburket@redhat.com>)
 - Add section ordering for the platform key (Matthew Burket
<mburket@redhat.com>)
 - Fix style guide spelling (Matthew Burket <mburket@redhat.com>)
 - Add tests to audit privileged commands template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OVAL in openssh rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix srg_requirement_package_removed (Matthew Burket <mburket@redhat.com>)
 - change parameter of findmnt used in bash partition conditional (Vojtech
Polasek <vpolasek@redhat.com>)
 - Use service directive to restart auditd service. (Gabriel Becker
<ggasparb@redhat.com>)
 - install_vm.py: add new option for disk size specification (Matus Marhefka
<mmarhefk@redhat.com>)
 - Introduce hipaa profile for ol9 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix audit_rules_privileged_commands_kmod rule in RHEL7. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove unused xccdf2table-profilenistrefs.xslt (Jan Černý
<jcerny@redhat.com>)
 - Remove unused xccdf2table-profilenistrefs-cui.xslt (Jan Černý
<jcerny@redhat.com>)
 - Remove unused profilecisrefs.xslt (Jan Černý <jcerny@redhat.com>)
 - Remove unused xccdf2table-byref.xslt (Jan Černý <jcerny@redhat.com>)
 - Remove unused xccdf2stigformat.xslt (Jan Černý <jcerny@redhat.com>)
 - Remove unused shared_xccdf2html.xslt (Jan Černý <jcerny@redhat.com>)
 - Remove unused table-sortbyref.xslt (Jan Černý <jcerny@redhat.com>)
 - Remove unused table-add-srgitems.xslt (Jan Černý <jcerny@redhat.com>)
 - Remove unused templates cci2html.xsl (Jan Černý <jcerny@redhat.com>)
 - Remove unused file includelogo.xslt (Jan Černý <jcerny@redhat.com>)
 - Do not print identifiers when there is no actual diff. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix PEP issues and typos. (Gabriel Becker <ggasparb@redhat.com>)
 - Table headings should use th vs td elements (Matthew Burket
<mburket@redhat.com>)
 - Add lang and doctype to utils/tables/tables_template_common.html (Matthew
Burket <mburket@redhat.com>)
 - Update macros to use more STIG like language (Matthew Burket
<mburket@redhat.com>)
 - Fix vuldiscussion key in utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - bugfix: package_gdm_removed: package name is gdm, not quagga (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: sudo_add_use_pty/tests/use_pty_absent.fail.sh: ls iterating files is
not needed and is bad actually (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sudo_add_noexec: Handle situation where /etc/sudoers.d is empty
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sudo_add_use_pty: Handle situation where /etc/sudoers.d is empty
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sudo_custom_logfile: Handle situation where /etc/sudoers.d is empty
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sudoers_validate_passwd/tests: /etc/sudoers.d can be empty (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - change: service_sssd_enabled: add fedora (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: service_sssd_enabled: fix tests (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: accounts_password_all_shadowed_sha512: add !* as locked (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Add srg reference for service_chronyd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg to references for file_groupowner_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - Add srg to references for file_groupowner_etc_passwd (Matthew Burket
<mburket@redhat.com>)
 - Add srg to references for file_groupowner_etc_group (Matthew Burket
<mburket@redhat.com>)
 - Add srg to references for file_groupowner_etc_group (Matthew Burket
<mburket@redhat.com>)
 - Add srg to references for file_groupowner_backup_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - Document compare_ds.py (Watson Sato <wsato@redhat.com>)
 - Make groups inherit platforms from parent groups (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Print path where diff files were saved. (Watson Sato <wsato@redhat.com>)
 - Fix bug in get_check_docs (Watson Sato <wsato@redhat.com>)
 - Rename variable to clarify they are DISA rule IDs (Watson Sato
<wsato@redhat.com>)
 - Unify compare_rule_texts (Watson Sato <wsato@redhat.com>)
 - Decouple per rule diffs from STIG mode (Watson Sato <wsato@redhat.com>)
 - Use difflib to generate platform diff (Watson Sato <wsato@redhat.com>)
 - Fix PEP8 issues (Watson Sato <wsato@redhat.com>)
 - Reduce cognitive complexity on compare_checks (Watson Sato
<wsato@redhat.com>)
 - Simplify compare_checks a bit (Watson Sato <wsato@redhat.com>)
 - Add ol7 platform to existing required tests (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Align OL7 tests with RHEL7 ones (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Bump version of OL8 to V1R3 and update STIG ids (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Align the OVAL and OCIL diff messages (Watson Sato <wsato@redhat.com>)
 - Rename diff generation funcion (Watson Sato <wsato@redhat.com>)
 - Standardize diff generation with difflib (Watson Sato <wsato@redhat.com>)
 - Output rule/check ID instead of old/new datastream (Watson Sato
<wsato@redhat.com>)
 - Standardize function names with similar purpose (Watson Sato
<wsato@redhat.com>)
 - Fix PEP8 isues (Watson Sato <wsato@redhat.com>)
 - Update docs/workshop/README.adoc (Gabriel Becker <ggasparb@redhat.com>)
 - Update docs/workshop/next_steps_with_complianceascode.adoc (Gabriel Becker
<ggasparb@redhat.com>)
 - Conditional for Ansible remediation on RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove pam_unix_rounds rules (Matthew Burket <mburket@redhat.com>)
 - Remove redundant rules from RHEL9 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove init_system conditional on xwindows_runlevel_target (Watson Sato
<wsato@redhat.com>)
 - Remove upstart in disable_ctrlaltdel_reboot (Watson Sato <wsato@redhat.com>)
 - Remove upstart handling in require_singleuser_auth (Watson Sato
<wsato@redhat.com>)
 - Remove upstart handling in rsyslog_cron_logging (Watson Sato
<wsato@redhat.com>)
 - Avoid sed hack (Jan Černý <jcerny@redhat.com>)
 - Remove upstart in audit ExecStartPost checks (Watson Sato <wsato@redhat.com>)
 - Fix documentation of ocil_timer_enabled macro (Watson Sato
<wsato@redhat.com>)
 - Remove upstart handling from bash remediation macro (Watson Sato
<wsato@redhat.com>)
 - Remove upstart from service_enabled template (Watson Sato <wsato@redhat.com>)
 - Remvoe upstart from service_disabled template (Watson Sato
<wsato@redhat.com>)
 - Include informative message regaring profile selection (Marcus Burghardt
<maburgha@redhat.com>)
 - Include srg_requirement and fixtext for enable_authselect (Marcus Burghardt
<maburgha@redhat.com>)
 - Minor updates in rule description and style alignment (Marcus Burghardt
<maburgha@redhat.com>)
 - Include enable_authselect rule for RHEL9 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Move kernel_module_disabled use more genric RHEL in conditionals (Matthew
Burket <mburket@redhat.com>)
 - Remove RHEL 9 SRG GPOS (Matthew Burket <mburket@redhat.com>)
 - bugfix: tests: do not use sudo, tests are run using root (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: sshd_rekey_limit/tests: add correct_value.pass.sh (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sshd_rekey_limit/tests: rename ospp tests as such (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sshd_rekey_limit/tests: ensure only proper key match (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sshd_rekey_limit/tests: drop unnecessary .* (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sshd_rekey_limit/tests: keys are caseinsensitive (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: sshd_rekey_limit/tests: when testing other value, use variable for
another (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sshd_rekey_limit/tests: Handle possible /etc/ssh/sshd_config.d files
too (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sshd_rekey_limit: use -i instead of -e in sed (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Simplify compare_platforms() a bit (Watson Sato <wsato@redhat.com>)
 - Move find_boolean_question() to xml.py (Watson Sato <wsato@redhat.com>)
 - Remove self argument from compare remediations (Watson Sato
<wsato@redhat.com>)
 - Don't pass self paramenters to its own functions (Watson Sato
<wsato@redhat.com>)
 - Move extraction of rule text to XMLRule class (Watson Sato
<wsato@redhat.com>)
 - Move serialization of OVAL XML elements to class (Watson Sato
<wsato@redhat.com>)
 - Add workshops reference into the main page. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove unused images in the workshop. (Gabriel Becker <ggasparb@redhat.com>)
 - Add disclaimer that a github, gitlab or bitbucket is required. (Gabriel
Becker <ggasparb@redhat.com>)
 - Put links to gitpod pointing to official repository. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add lab exercise 2. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix namespace of select elements (Jan Černý <jcerny@redhat.com>)
 - Add srg to references for file_permissions_cron_allow (Matthew Burket
<mburket@redhat.com>)
 - Update Ansible styleguide to prefix tasks names (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve comparison of empty rule elements (Watson Sato <wsato@redhat.com>)
 - Quit when content is not a STIG Benchmark (Watson Sato <wsato@redhat.com>)
 - Handle sub elements in rule descriptions (Watson Sato <wsato@redhat.com>)
 - Separate XML structure from and Diff logic (Watson Sato <wsato@redhat.com>)
 - Make compare_ds.py output diffs in a separate dir (Watson Sato
<wsato@redhat.com>)
 - Add Rule text comparison (Watson Sato <wsato@redhat.com>)
 - Add STIG rule mapping between releases (Watson Sato <wsato@redhat.com>)
 - Parametrize the XCCDF version (Watson Sato <wsato@redhat.com>)
 - Recognize XCCDF Benchmark arguments (Watson Sato <wsato@redhat.com>)
 - Unselect empty groups during shorthand creation (Jan Černý
<jcerny@redhat.com>)
 - Improve the test which check config existence (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the var_check CheckEnumeration value (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenario where faillock dir is not set (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve remediation to not fail when no dirs are defined (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix missing files in echo commands (Marcus Burghardt <maburgha@redhat.com>)
 - Fix check_existence enumeration (Marcus Burghardt <maburgha@redhat.com>)
 - Remove bash machine platform condition from core pattern empty string.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix help text in utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - Update utils/import_srg_spreadsheet.py based on feedback in #9416 (Matthew
Burket <mburket@redhat.com>)
 - Fix 5.10 OVAL validation of core_pattern_empty_string rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add variable definition in documents. (Gabriel Becker <ggasparb@redhat.com>)
 - Add lab5 exercise. (Gabriel Becker <ggasparb@redhat.com>)
 - Add lab exercise number 4. (Gabriel Becker <ggasparb@redhat.com>)
 - Add lab exercise 3 to the workshop. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove markdown version of the lab exercise 1. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improve format and add table of contents. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update OVAL reference link in lab exercise 1. (Gabriel Becker
<ggasparb@redhat.com>)
 - Put caption to OSPP image. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix missing content in lab exercise 1 asciidoc. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove leftover text in the adoc from lab exercise 1. (Gabriel Becker
<ggasparb@redhat.com>)
 - Lab exercise 1: Update section about commenting on bash remediation. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update images of lab exercise 1. (Gabriel Becker <ggasparb@redhat.com>)
 - Add adoc version of the lab exercise 1. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fixes to lab1 exercise documentation. (Gabriel Becker <ggasparb@redhat.com>)
 - Update how to open the guide in the workshop. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add lab1_introduction module. (Gabriel Becker <ggasparb@redhat.com>)
 - Add step to copy ospp profile back to workshop setup. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove unused setup.sh from workshop files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update gitpod with workshop. (Gabriel Becker <ggasparb@redhat.com>)
 - Do not copy RHEL8 OSPP profiles in the workshop setup. (Gabriel Becker
<ggasparb@redhat.com>)
 - Make lab build individually with parameter. (Gabriel Becker
<ggasparb@redhat.com>)
 - Initial import of workshop setup files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix e2e expected test result for configure_usbguard_auditbackend (Vincent
Shen <wenshen@redhat.com>)
 - Align ANSSI profiles for SLE platforms with common control spec (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add SUSE gpgkey rule to ANSSI profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add rules to SLE12 platform in context of ANSSI profiles (teacup-on-
rockingchair <strandjata@gmail.com>)
 - More doc fixes for (Matthew Burket <mburket@redhat.com>)
 - Exclude rule MD014 from MDL lint (Matthew Burket <mburket@redhat.com>)
 - Fix CodeClimate errors for utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - Add docs for utils/import_srg_spreadsheet.py (Matthew Burket
<mburket@redhat.com>)
 - Add a new script to import changes from a SRG spreadsheet (Matthew Burket
<mburket@redhat.com>)
 - Update tests of mount_option_home (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update mount_option_home for edge cases (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix missing OCIL text and 800-53 references (Jan Černý <jcerny@redhat.com>)
 - Update account_emergency_expire_date (Matthew Burket <mburket@redhat.com>)
 - Add checktext and vuldiscussion to rule (Matthew Burket <mburket@redhat.com>)
 - Add newline at end of file (Jan Černý <jcerny@redhat.com>)
 - Add explicit dependency (Jan Černý <jcerny@redhat.com>)
 - fix: regexp: quote .*.suffix properly (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: quote dot delim in regexps (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: yaml double quote string, quote dot delim in regexps (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - style: jinja: use ~ as concat, not + (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: jinja: avoid concat in macro if not needed (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: bootloader-grub2: no double quote with parameter inside jinja macro
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: restrict_at_cron_users: no double quote with target_perms_octal inside
jinja macro (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ntp: no double quote with chrony_conf_path inside jinja macro (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: aide_check_audit_tools: no double quote with full_name inside jinja
macro (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: mount: no double quote with MOUNTPOINT inside jinja macro (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: sshd_rekey_limit: no double quote with parameter inside jinja macro
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - Use correct defition of template value parameter in api_server_bind_address.
(Gabriel Becker <ggasparb@redhat.com>)
 - change: quote pam_foo.so in regexps (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Skip configure_usbguard_auditbackend e2e test (Vincent Shen
<wenshen@redhat.com>)
 - Fix kernel_module_disabled remediation template (Vincent Shen
<wenshen@redhat.com>)
 - Update mount_option_home (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Create mount_option_home and use it in ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add more test scenarios for sysctl_kernel_core_pattern_empty_string. (Gabriel
Becker <ggasparb@redhat.com>)
 - Avoid code duplication (Jan Černý <jcerny@redhat.com>)
 - Add package_xorg-x11-server-common_removed back to RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Update configure_libreswan_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Add harden SSH crypto rules to RHEL 9 (Matthew Burket <mburket@redhat.com>)
 - Add firewalld_sshd_port_enabled to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update dconf_db_up_to_date to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add grub2_disable_interactive_boot to RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Add set_firewalld_default_zone to RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add grub2_kernel_trust_cpu_rng to the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add sysctl_kernel_exec_shield to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add rules for permissions on /etc/cron.allow to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Refactor: Extract function parse_description (Jan Černý
<jcerny@redhat.com>)
 - Add a blank line (Jan Černý <jcerny@redhat.com>)
 - Use short profile ID in the visualization (Jan Černý <jcerny@redhat.com>)
 - Remove unused XSLT template (Jan Černý <jcerny@redhat.com>)
 - Use XCCDF 1.2 and Jinja 2 to generate STIG tables (Jan Černý
<jcerny@redhat.com>)
 - Add an alternative script to generate HTML tables (Jan Černý
<jcerny@redhat.com>)
 - Refactor: Move function definition (Jan Černý <jcerny@redhat.com>)
 - Fix PEP8 issue. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix ansible remediation to preserve old non compliant values. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update configure_libreswan_crypto_policy for the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add ssh_client_rekey_limit to the RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add SSHD time out rules back to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix selinux_context_elevation_for_sudo spelling (Matthew Burket
<mburket@redhat.com>)
 - Fix test parse affected to support OVAL with multiple def-group tags.
(Gabriel Becker <ggasparb@redhat.com>)
 - Address feedback. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix return type annotations (Watson Sato <wsato@redhat.com>)
 - Switch bash remediation applicable to all products in
sysctl_kernel_core_pattern_empty_string. (Gabriel Becker <ggasparb@redhat.com>)
 - Make the conflicts attribute appblicable only to RHEL9. (Gabriel Becker
<ggasparb@redhat.com>)
 - Refactor so that each rule-result is looped once (Watson Sato
<wsato@redhat.com>)
 - Print ID of the executed check during scan (Watson Sato <wsato@redhat.com>)
 - Make code climate indent check better (Matthew Burket <mburket@redhat.com>)
 - Adding rule to DISA STIG for RHEL7 as of V3R7 (Vuln V-250314). (Lenox, Joseph
D (Collins) <Joseph.Lenox@collins.com>)
 - Since string is a subset of sequence, it needs to check first for str.
(Gabriel Becker <ggasparb@redhat.com>)
 - Create custom sysctl_kernel_core_pattern_empty_string content. (Gabriel
Becker <ggasparb@redhat.com>)
 - Skip configure_usbguard_auditbackend to unblock the e2e (Vincent Shen
<wenshen@redhat.com>)
 - sap_host: solve shellcheck error SC2046 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - products/jre: silence shellcheck SC2174 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Convert newlines in strings to use '|-' syntax. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Sort check-export elements (Jan Černý <jcerny@redhat.com>)
 - Create elements with explicit namespace (Jan Černý <jcerny@redhat.com>)
 - Generate per profile testinfo tables from XCCDF 1.2 (Jan Černý
<jcerny@redhat.com>)
 - Replace platform conditionals in whole remediation code (Jan Černý
<jcerny@redhat.com>)
 - GRUB2 is not available on s390x (Watson Sato <wsato@redhat.com>)
 - Add more rules to ANSSI profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Enable sle support for postfix_network_listening_disabled rule remediations
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Add CCE ids for sle12 and sle15 for postfix_network_listening_disabled in
context of anssi profile (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add CCE id for sle12 rule package_chrony_installed (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add mount_option rules to ANSSI SLE profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add SLES CCE ids for mount_option_tmp and mount_option_var_tmp (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Enable SLE12,SLE15 platforms for mount_option_opt_nosuid/noexec,mount_option_
var_log_nosuid/noexec,mount_option_var_noexec/nosuid (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Enable SLE12 platform for mount_option_boot_nosuid,mount_option_home_noexec,m
ount_option_nodev_nonroot_local_partitions (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Enable SLE12 platform for mount_option_boot_noexec (teacup-on-rockingchair
<strandjata@gmail.com>)
 - change: sudoers_validate_passwd: suggest cvtsudoers (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: sudoers_default_includedir/tests: sed regexp // are matches .* at
beginnin/end not needed (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: sudoers_validate_passwd/tests: check last one (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: sudoers_validate_passwd: handle @ includes too (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Add trim_trailing_whitespace to editorconfig (Matthew Burket
<mburket@redhat.com>)
 - Fix warning when build STIG overlay. (Gabriel Becker <ggasparb@redhat.com>)
 - Put smartcard rules with pam_pkcs11 out of s390x (Watson Sato
<wsato@redhat.com>)
 - Use data stream to generate HTML statistics (Jan Černý <jcerny@redhat.com>)
 - Use data stream to generate stats (Jan Černý <jcerny@redhat.com>)
 - Ensure password pam_pkcs11.so fixed in smartcard-auth (Watson Sato
<wsato@redhat.com>)
 - Ensure auth pam_pkcs11.so fixed in smartcard-auth (Watson Sato
<wsato@redhat.com>)
 - Add tests for PAM with and without authconfig (Watson Sato
<wsato@redhat.com>)
 - smartcard_auth: PAM stack with faildelay enabled (Watson Sato
<wsato@redhat.com>)
 - Disable wrong_runtime.fail.sh test scenario for
sysctl_kernel_unprivileged_bpf_disabled (Milan Lysonek <mlysonek@redhat.com>)
 - Fix Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Fix PEP8 problems (Jan Černý <jcerny@redhat.com>)
 - Rename a variable (Jan Černý <jcerny@redhat.com>)
 - Use data stream in test for missing references (Jan Černý
<jcerny@redhat.com>)
 - Add support for data streams in profile_tool.py (Jan Černý
<jcerny@redhat.com>)
 - Add support for XCCDF 1.2 to profile_tool (Jan Černý <jcerny@redhat.com>)
 - Save XCCDF namespace as a member of the class (Jan Černý
<jcerny@redhat.com>)
 - Extract method (Jan Černý <jcerny@redhat.com>)
 - Quote shell for Ubuntu (Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Fix PREP8 finding. (Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Remove abort in macro. (Lenox, Joseph D (Joseph) <joseph.lenox@collins.com>)
 - fix tests to account for both possible locations. (Lenox, Joseph D (Joseph)
<joseph.lenox@collins.com>)
 - Prefer distribution location when writing remediations if there is one
already there. (Lenox, Joseph D (Joseph) <joseph.lenox@collins.com>)
 - Use search_value to specify SSL Minimum version check instead of needing to
reproduce the OVAL check manually. (Lenox, Joseph D (Joseph)
<joseph.lenox@collins.com>)
 - Restrict OVAL so that it uses a separate State (so that the search doesn't
incorrectly pass a failure) entry and allow for overrides of the OVAL state so
that the search term can be overridden. (Lenox, Joseph D (Joseph)
<joseph.lenox@collins.com>)
 - Remove unnecessary command substitution (Marcus Burghardt
<maburgha@redhat.com>)
 - style: grub2_bootloader_argument: use multi_platform_rhel instead of listing
all (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: grub2_bootloader_argument: fedora grub is like rhel9 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: grub2_bootloader_argument/tests/invalid_rescue.pass.sh: support
arg_variable (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: grub2_bootloader_argument/tests: ensure grub is setup properly (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - style: grub2_bootloader_argument: product ifs (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: grub2_bootloader_argument: use arg_name not audit in comments (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: grub2_slub_debug_argument: honor variable var_slub_debug_options
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - add/remove fedora from privileged commands depending if exists or not (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Update controls/srg_gpos/SRG-OS-000366-GPOS-00153.yml based on review
(Matthew Burket <mburket@redhat.com>)
 - remove ospp reference from sysctl_kernel_core_pattern_empty_string (Vojtech
Polasek <vpolasek@redhat.com>)
 - switch sysctl_kernel_core_pattern_empty_string for sysctl_kernel_core_pattern
(Vojtech Polasek <vpolasek@redhat.com>)
 - Add ubuntu2204 to jinja if statements that were missing. (Juan Antonio Osorio
<juan.osoriorobles@eu.equinix.com>)
 - Add Ubuntu 22.04 to build_product (Juan Antonio Osorio
<juan.osoriorobles@eu.equinix.com>)
 - Tag Ubuntu CIS reference for 22.04 (Juan Antonio Osorio
<juan.osoriorobles@eu.equinix.com>)
 - Tag rules applicable to ubuntu2004 as applicable to ubuntu2204 too (Juan
Antonio Osorio <juan.osoriorobles@eu.equinix.com>)
 - Introduce Ubuntu 22.04 (Juan Antonio Osorio
<juan.osoriorobles@eu.equinix.com>)
 - Fix test scenario script with invalid fcontext (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenario for multiple dirs (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix issues with bash remediation (Marcus Burghardt <maburgha@redhat.com>)
 - Fix many copy-and-paste issues and improved style (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve the rule description for selinux_faillock_dir (Marcus Burghardt
<maburgha@redhat.com>)
 - Update a comment (Jan Černý <jcerny@redhat.com>)
 - Manually set OVAL check for SSL minimum version to catch tls1.2 or tls1.3
(Lenox, Joseph D (Joseph) <joseph.lenox@collins.com>)
 - Revise bash remediation template to use /etc/firefox/policies instead of
/usr/lib64/firefox/distribution (Lenox, Joseph D (Joseph)
<joseph.lenox@collins.com>)
 - Fix incorrect escaping in OCIL for colons (Lenox, Joseph D (Joseph)
<joseph.lenox@collins.com>)
 - Clean up OCIL text and some template names. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Mark FFOX-00-000003 as a manual check. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - V6R3: Implementing controls as policy files. * FFOX-00-000002 *
FFOX-00-000003 * FFOX-00-000004 * FFOX-00-000009 * FFOX-00-000010 *
FFOX-00-000011 * FFOX-00-000014 * FFOX-00-000022 * FFOX-00-000023 *
FFOX-00-000024 * FFOX-00-000025 * FFOX-00-000026 * FFOX-00-000027 *
FFOX-00-000028 * FFOX-00-000038 * FFOX-00-000039 (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Remove duplicate rule for Top Sites (combined into nonessential_capabilities)
(Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Remove unused Firefox template. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - V6R3: Remove unused checks (or checks replaced with profile changes) (Lenox,
Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Revise Mozilla Firefox STIG profile to V6R3 from upstream. (Lenox, Joseph D
(Collins) <Joseph.Lenox@collins.com>)
 - Add sshd_set_keepalive_0 to RHEL 9 STIG (Matthew Burket <mburket@redhat.com>)
 - Add ensure_redhat_gpgkey_installed to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add mount_option_krb_sec_remote_filesystems to the RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Fix srg_requirement in file_permissions_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - bugfix: build_test_container.sh: actually honor --name/-n (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Update command in fixtext section (Marcus Burghardt <maburgha@redhat.com>)
 - Add identifiers to rule_dir_json (Matthew Burket <mburket@redhat.com>)
 - Add harden_sshd_ciphers_opensshserver_conf_crypto_policy to RHEL 9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Add sshd_set_idle_timeout to RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add sysctl_net_ipv4_icmp_ignore_bogus_error_responses to RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add ssh_private_keys_have_passcode to RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Add AUID filters on audit kernel module loading (Watson Sato
<wsato@redhat.com>)
 - Revise OVAL template to use backreferences, move DisableDevelopmentTools to
policy (Lenox, Joseph D (Joseph) <joseph.lenox@collins.com>)
 - Move "find python" to a macro (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Add templates to handle detection of most Firefox Policy json items.
Implement several rules with templates. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - fix: sub_var_value: deprecated, use xccdf_value (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Update test scenario scripts to respect symlinks (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove auditd_data_retention_max_log_file_action STIG specific test scenario
(Milan Lysonek <mlysonek@redhat.com>)
 - Include leading caret to regex (Marcus Burghardt <maburgha@redhat.com>)
 - Remove DCCP from RHEL9 STIG (Matthew Burket <mburket@redhat.com>)
 - Fix srg_requirement in fapolicyd_prevent_home_folder_access (Matthew Burket
<mburket@redhat.com>)
 - Fix srg_requirement in no_empty_passwords_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - Fix srg_requirement in file_permissions_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - Remove nss-tools from the RHEL9 STIG (Matthew Burket <mburket@redhat.com>)
 - Fix order of CCEs (anivan-suse <anastasija.ivanovic@suse.com>)
 - Ensure the expected values for test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Optimize Ansible remediation for accounts_password_set_max_life_existing
(Marcus Burghardt <maburgha@redhat.com>)
 - Change the command which set the max age for passwords (Marcus Burghardt
<maburgha@redhat.com>)
 - Increment exclusion filter for accounts_password_all_shadowed_sha512 (Marcus
Burghardt <maburgha@redhat.com>)
 - Mask password field in accounts_password_all_shadowed_sha512 (Marcus
Burghardt <maburgha@redhat.com>)
 - Include pass test scenario for accounts_password_all_shadowed_sha512 (Marcus
Burghardt <maburgha@redhat.com>)
 - Include remediation header in fail scripts without remediation (Marcus
Burghardt <maburgha@redhat.com>)
 - Mask password field in accounts_password_all_shadowed (Marcus Burghardt
<maburgha@redhat.com>)
 - Mask password field in accounts_password_set_max_life_existing (Marcus
Burghardt <maburgha@redhat.com>)
 - Aligned the OVAL content to style guide (Marcus Burghardt
<maburgha@redhat.com>)
 - Add selinux_state rule to ANSSI (anivan-suse <anastasija.ivanovic@suse.com>)
 - Don't select the variable selector 'default' (Watson Sato <wsato@redhat.com>)
 - Move rule to correct profile (anivan-suse <anastasija.ivanovic@suse.com>)
 - audit_rules_suid_privilege_function: test spaces in other_key.pass.sh (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - audit_rules_suid_privilege_function: drop miss_k.fail.sh as unnecessary
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - audit_rules_suid_privilege_function: only one arch rule (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: audit_rules_suid_privilege_function: better regexp (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: audit_rules_suid_privilege_function: add fedora (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: audit_rules_suid_privilege_function: rename no rules as such (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: sudo_add_umask: xccdf_value is jinja macro, use as such (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - change: prefer xccdf_value instead of sub_var_value (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: test_xccdf_values_in_ds.sh: check sub_var_value too (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - fix: SSG_SHELLCHECK_BASH_FIXES_VALIDATION_ENABLED: drop discourage (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - change: shellcheck_wrapper.sh: use bash nullglob (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Shorten platform header and fix typo in rule.yml (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Mark arguments as required (Jan Černý <jcerny@redhat.com>)
 - Add git package to the Ansible Role test github action. (Gabriel Becker
<ggasparb@redhat.com>)
 - feature: ssg parsing: add sometimes external_variable related asserts (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Specify output file names (Jan Černý <jcerny@redhat.com>)
 - Add package_chrony_installed rule to ANSSI (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Move the RHEL 9 STIG to use the srg_gpos control (Matthew Burket
<mburket@redhat.com>)
 - fix: fedora has dedicated_ssh_keyowner ssh_keys (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Don't fail rule if /etc/grubenv missing on s390x (Watson Sato
<wsato@redhat.com>)
 - Add tests to rule about pam_faillock_silent (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to cover OL08-00-020018 & 020019 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update build-scripts/verify_references.py (Gabriel Becker
<ggasparb@redhat.com>)
 - Packit: change Fedora test target to be the latest released Fedora (Matus
Marhefka <mmarhefk@redhat.com>)
 - Rearrange criteria in sysctl template to previous correct behavior. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add oracle and ubuntu href references to OVAL verify references test.
(Gabriel Becker <ggasparb@redhat.com>)
 - Include warning about the pam_securetty.so PAM module (Marcus Burghardt
<maburgha@redhat.com>)
 - Simplify platform value in no_direct_root_logins remediation (Marcus
Burghardt <maburgha@redhat.com>)
 - Align no_direct_root_logins OVAL with style guide (Marcus Burghardt
<maburgha@redhat.com>)
 - Do not use the sshd service disabled OVAL in sshd_set_max_auth_tries.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove executable permissions for disa-stig-rhel7-v3r8-xccdf-scap.xml (Juan
Antonio Osorio <juan.osoriorobles@eu.equinix.com>)
 - Avoid use of json_query and additional dependency (Watson Sato
<wsato@redhat.com>)
 - Access the mounts via ansible_mounts (Watson Sato <wsato@redhat.com>)
 - DISA looks for a very specific set of configurations (Lenox, Joseph D
(Joseph) <joseph.lenox@collins.com>)
 - Set RHEL7-specific override files to satisfy DISA STIG (Lenox, Joseph D
(Joseph) <joseph.lenox@collins.com>)
 - Allow context elevation for sudo in multiple files (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Allow sudoers_validate_passwd in multiple files (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add SRG requirement and fixtext macros (Lenox, Joseph D (Joseph)
<joseph.lenox@collins.com>)
 - Allow timestamp_timeout config in several files (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - OL7 DISA STIG v2r8 update (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add the AUID filters on audit kernel module rules (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add perm filter for OL7 privileged commands rules (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - add 4 rules back to RHEL9 datastream (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix typo in audit_access_success_aarch64 rule title. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use get blob when file is bigger than 1M in ansible roles conversion.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix CMake dependencies (Jan Černý <jcerny@redhat.com>)
 - Ignore invalid or non existing include objects (Watson Sato
<wsato@redhat.com>)
 - Align Ansible remediation with Bash (Watson Sato <wsato@redhat.com>)
 - Should have been delete with "git mv" but was not (Earl Sampson
<ESampson@suse.com>)
 - Add test for for missing rsyslog included files (Watson Sato
<wsato@redhat.com>)
 - Don't parse hidden config files for Includes (Watson Sato <wsato@redhat.com>)
 - Reset the arrays before using them (Watson Sato <wsato@redhat.com>)
 - Added platform. (Flos Lonicerae <lonicerae@gmail.com>)
 - Fixed incorrect parsing of rules in old code (Flos Lonicerae
<lonicerae@gmail.com>)
 - Match glob() function of rsyslog (Flos Lonicerae <lonicerae@gmail.com>)
 - Rsyslog says we should include all files (Flos Lonicerae
<lonicerae@gmail.com>)
 - Update test files. (Flos Lonicerae <lonicerae@gmail.com>)
 - Cover the include pattern '/etc/rsyslog.d/' (Flos Lonicerae
<lonicerae@gmail.com>)
 - The way using 'find' can be retired. (Flos Lonicerae <lonicerae@gmail.com>)
 - Add test for wildcard paths used in rsyslog (Flos Lonicerae
<lonicerae@gmail.com>)
 - A better fix. (Flos Lonicerae <lonicerae@gmail.com>)
 - rsyslog: Fix array creation when path has wildcard (Flos Lonicerae
<lonicerae@gmail.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_mod
ule_loading/audit_rules_kernel_module_loading_create/ansible/shared.yml (Joseph
Lenox <joseph.lenox@collins.com>)
 - The test now accepts mulitple users in the same group. (sampsone
<esampson@suse.com>)
 - Add the platform applicability to relevant rules (Matej Tyc
<matyc@redhat.com>)
 - Improve code style (Matej Tyc <matyc@redhat.com>)
 - Use partition exist platforms on a real rule (Matej Tyc <matyc@redhat.com>)
 - Add platforms for partition existence (Matej Tyc <matyc@redhat.com>)
 - switch rule grub2_disable_interactive_boot for grub2_disable_recovery in
rhel8 ospp (Vojtech Polasek <vpolasek@redhat.com>)
 - Extend rule to audit uses of kmod on RHEL7 to satisfy DISA STIG. (Lenox,
Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Implement DISA check for auditing create_module for RHEL7. (Lenox, Joseph D
(Joseph) <joseph.lenox@collins.com>)
 - SUSE fix file_groupownership_home_directories (sampsone <esampson@suse.com>)
 - fix ocils (Vojtech Polasek <vpolasek@redhat.com>)
 - Reintroduce back the sshd timeout rules in RHEL8 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Avoid very long lines by renaming varaible (Jan Černý <jcerny@redhat.com>)
 - Fix CodeClimate problems (Jan Černý <jcerny@redhat.com>)
 - Update a comment (Jan Černý <jcerny@redhat.com>)
 - Add SUSE remote content to verify_references.py (Jan Černý
<jcerny@redhat.com>)
 - Use data stream to verify references (Jan Černý <jcerny@redhat.com>)
 - Fix Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - make sysctl_kernel_core_pattern conflicting with
sysctl_kernel_core_pattern_empty_string (Vojtech Polasek <vpolasek@redhat.com>)
 - describe beneficial dependency between
sysctl_kernel_core_pattern_empty_string and sysctl:kernel_core_uses_pid (Vojtech
Polasek <vpolasek@redhat.com>)
 - add rule to RHEL9 OSPP profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add new rule setting kernel.core_pattern to empty string (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new rule sysctl_kernel_core_uses_pid (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove conditional from sysctl templated OVAL (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove unneeded coredump related rules from rhel9 ospp (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update RHEL7 STIG to V3R8 (Watson Sato <wsato@redhat.com>)
 - Update DISA STIG RHEL7 SCAP content to V3R8 (Watson Sato <wsato@redhat.com>)
 - Update DISA RHEL7 STIG manual benchmark to V3R8 (Watson Sato
<wsato@redhat.com>)
 - Build 5.10 content for sanity test. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix build in OVAL 5.10 mode. (Gabriel Becker <ggasparb@redhat.com>)
 - Update linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_
loghost/rule.yml (vojtapolasek <krecoun@gmail.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - Add Kubernets remediation for rule configure_crypto_policy (vincent056
<wenshen@redhat.com>)
 - add warning to the rsyslog_remote_loghost rule about configuring queues
(Vojtech Polasek <vpolasek@redhat.com>)
 - OCP4: Look at rendered-config-xyz when checking FIPS, consolidate two rules
(Jakub Hrozek <jhrozek@redhat.com>)
 - add warning to audit_rules_for_ospp because the same case as
audit_basic_configuration applies (Vojtech Polasek <vpolasek@redhat.com>)
 - Add an empty line (Jan Černý <jcerny@redhat.com>)
 - Use XCCDF 1.2 to create a STIG overlay (Jan Černý <jcerny@redhat.com>)
 - Extend create-stig-overlay.py to accept XCCDF 1.2 (Jan Černý
<jcerny@redhat.com>)
 - Remove unused import (Jan Černý <jcerny@redhat.com>)
 - Fix a traceback in help (Jan Černý <jcerny@redhat.com>)
 - Generate CCE tables from data stream (Jan Černý <jcerny@redhat.com>)
 - update profile stability test (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix CodeClimate problem (Jan Černý <jcerny@redhat.com>)
 - Fix rule sudo_custom_logfile (Jan Černý <jcerny@redhat.com>)
 - change authselect profile to minimal in rhel8 ospp (Vojtech Polasek
<vpolasek@redhat.com>)
 - change authselect profile to minimal in rhel9 ospp (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix ospp references (Vojtech Polasek <vpolasek@redhat.com>)
 - Use data stream to verify profile titles and descriptions (Jan Černý
<jcerny@redhat.com>)
 - Stop validating ssg-product-xccdf.xml (Jan Černý <jcerny@redhat.com>)
 - Use data stream to build Ansible Playbooks and Bash scripts (Jan Černý
<jcerny@redhat.com>)
 - Add the AUID filters on audit kernel module rules (Watson Sato
<wsato@redhat.com>)
 - Add perm filter for RHEL7 privileged commands rule (Watson Sato
<wsato@redhat.com>)
 - Remove useless whitespace chars from references. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update OCIL check along with the rule (Watson Sato <wsato@redhat.com>)
 - Gitpod: move ssh into workspace so it's persisted between sessions. (Gabriel
Becker <ggasparb@redhat.com>)
 - Improve definition's comments (Watson Sato <wsato@redhat.com>)
 - Restrict sysctl multivalue compliance to rhel and ol (Watson Sato
<wsato@redhat.com>)
 - Remove variable selector that will result in error (Watson Sato
<wsato@redhat.com>)
 - Make rule for kptr_restrict accept two values (Watson Sato
<wsato@redhat.com>)
 - Make rule sysctl ipv4 rp_filter accept two values (Watson Sato
<wsato@redhat.com>)
 - Add ol9 to jinja conditionals (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Introduce e8 profile for ol9 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Accept sudoers files without includes as compliant (Watson Sato
<wsato@redhat.com>)
 - Add rsyslogd to the list of tools check by aide (Watson Sato
<wsato@redhat.com>)
 - Support commas in variables (Jan Černý <jcerny@redhat.com>)
 - Better align with RHEL-08-040259 (Watson Sato <wsato@redhat.com>)
 - Add rule for sysctl net.ipv4.conf.all.forwarding (Watson Sato
<wsato@redhat.com>)
 - Add tests to account_password_selinux_faillock_dir (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add automation content to a rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add OVAL to fapolicy_default_deny (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update RHEL8 STIG to V1R7 (Watson Sato <wsato@redhat.com>)
 - Update DISA STIG RHEL8 SCAP content to V1R6 (Watson Sato <wsato@redhat.com>)
 - Update DISA RHEL8 STIG manual benchmark to V1R7 (Watson Sato
<wsato@redhat.com>)
 - Mention both values 1 and 2 in the rule description (Jan Černý
<jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Remove RHEL 8 STIG ID (Jan Černý <jcerny@redhat.com>)
 - Improve documentation of the sysctl template (Jan Černý
<jcerny@redhat.com>)
 - Add a variable sysctl_kernel_unprivileged_bpf_disabled_value (Jan Černý
<jcerny@redhat.com>)
 - Rename parameter missing_static_pass (Jan Černý <jcerny@redhat.com>)
 - Rename a template parameter (Jan Černý <jcerny@redhat.com>)
 - Replace the sysctlval_remediate template parameter (Jan Černý
<jcerny@redhat.com>)
 - Simplify sysctl template (Jan Černý <jcerny@redhat.com>)
 - Change test_config.yml (Jan Černý <jcerny@redhat.com>)
 - Introduce sysctlval_wrong parameter (Jan Černý <jcerny@redhat.com>)
 - Document the missing_static_pass option (Jan Černý <jcerny@redhat.com>)
 - Document that sysctlval can be a list (Jan Černý <jcerny@redhat.com>)
 - Use rule sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý
<jcerny@redhat.com>)
 - Add test scenarios for rule
sysctl_kernel_unprivileged_bpf_disabled_accept_default (Jan Černý
<jcerny@redhat.com>)
 - Introduce new rule sysctl_kernel_unprivileged_bpf_disabled_accept_default
(Jan Černý <jcerny@redhat.com>)
 - Accept multiple values in the sysctl remediation (Jan Černý
<jcerny@redhat.com>)
 - Add option to allow system default (Jan Černý <jcerny@redhat.com>)
 - Allow multiple values in sysctl static configuration (Jan Černý
<jcerny@redhat.com>)
 - Move check unrelated to the test scenarios (Jan Černý <jcerny@redhat.com>)
 - Use a list of values in sysctl template (Jan Černý <jcerny@redhat.com>)
 - Rename IDs in sysctl OVAL template (Jan Černý <jcerny@redhat.com>)
 - Remove a rule from RHEL 9 OSPP (Jan Černý <jcerny@redhat.com>)
 - Fix broken XCCDF Values in Chromium (Jan Černý <jcerny@redhat.com>)
 - Add test for broken XCCDF Values (Jan Černý <jcerny@redhat.com>)
 - Fix broken XCCDF values (Jan Černý <jcerny@redhat.com>)
 - ssg/constants.py: fix the alinux3 full name error (YiLin.Li
<YiLin.Li@linux.alibaba.com>)
 - ssg/constants.py: fix the alinux2 full name error (YiLin.Li
<YiLin.Li@linux.alibaba.com>)
 - Gathering chrony conf field does not change system (sampsone
<esampson@suse.com>)
 - Reword description of account_disable_inactivity (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix titles in accounts_passwords_pam_faillock_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update pam_faillock_parameter_value macros (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Install ansible for the extra modules (Watson Sato <wsato@redhat.com>)
 - Never add OCIL for security_patches_up_to_date (Watson Sato
<wsato@redhat.com>)
 - Introcuce a shortcut for --datastream-only (Matej Tyc <matyc@redhat.com>)
 - fix white space problem (Earl Sampson <ESampson@suse.com>)
 - Remove unused import (Jan Černý <jcerny@redhat.com>)
 - Double quote sysctl values (Jan Černý <jcerny@redhat.com>)
 - Avoid data duplication (Jan Černý <jcerny@redhat.com>)
 - Avoid data duplication (Jan Černý <jcerny@redhat.com>)
 - Avoid confusion (Jan Černý <jcerny@redhat.com>)
 - Extract method _find_tests_paths (Jan Černý <jcerny@redhat.com>)
 - Fix Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - OCP: Fix rule kubelet_configure_event_creation (vincent056
<wenshen@redhat.com>)
 - Add tests to accounts_passwords_pam_faillock_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add automated content to a rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update contributors for v0.1.63 release (Watson Sato <wsato@redhat.com>)
 - Update gitpod HTML preview extension. (Gabriel Becker <ggasparb@redhat.com>)
 - Align test scenario value with variable's values. (Gabriel Becker
<ggasparb@redhat.com>)
 - SUSE SLE15 add messagebus and nscd to authorized_local_users (sampsone
<esampson@suse.com>)
 - Fix PEP 8 problems (Jan Černý <jcerny@redhat.com>)
 - Update rule to accept binaries with GID > 1000 (Watson Sato
<wsato@redhat.com>)
 - Add system account owned file test scenario (Watson Sato <wsato@redhat.com>)
 - Update shared.yml (Earl Sampson <ESampson@suse.com>)
 - Extract function load_local_test_scenarios (Jan Černý <jcerny@redhat.com>)
 - Extract function load_templated_test_scenarios (Jan Černý
<jcerny@redhat.com>)
 - Update SRG-APP-000131-CTR-000285 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000131)
 - Move variable definition nearer its usage (Jan Černý <jcerny@redhat.com>)
 - Separate finding paths from loading test scenarios (Jan Černý
<jcerny@redhat.com>)
 - Update SRG-APP-000069-CTR-000125 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000069)
 - Update SRG-APP-000068-CTR-000120 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000068)
 - Update SRG-APP-000039-CTR-000110 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000039)
 - SUSE update chronyd max poll to support chrony.d (sampsone
<esampson@suse.com>)
 - Fix Code Climate problem (Jan Černý <jcerny@redhat.com>)
 - Remove a confusing sentence (Jan Černý <jcerny@redhat.com>)
 - Rename variables (Jan Černý <jcerny@redhat.com>)
 - Fix bash remediation in rsyslog_remote_access_monitoring rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Separate locating test scenarios (Jan Černý <jcerny@redhat.com>)
 - Improve bash_ensure_pam_module_line macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Extract method (Jan Černý <jcerny@redhat.com>)
 - Refactor by merging functions (Jan Černý <jcerny@redhat.com>)
 - Remove unused parameters (Jan Černý <jcerny@redhat.com>)
 - Include test scenario for accounts_password_pam_retry rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve wording in pwhistory_remember rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests to use authselect when available (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update pam_pwhistory_remember rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update tests in pam_pwhistory_remember rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update var_password_pam_remember_control_flag (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Improve remediation which enable pam_faillock.so (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve regex to match retry parameter (Marcus Burghardt
<maburgha@redhat.com>)
 - Create FMF test plans for destructive and non-destructive tests (Milan
Lysonek <mlysonek@redhat.com>)
 - Fix ansible role condition when a package/service rule id has hyphen.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix pep issues. (Gabriel Becker <ggasparb@redhat.com>)
 - Create rule to cover OL08-00-020261 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to cover OL08-00-020260 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Include ol9 product to jinja conditionals (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Improve ol9 anssi rules wording (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Introduce anssi profiles to ol9 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update macro bash_ensure_pam_module_line (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix typos in accounts_password_pam_retry (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Address maintainer comments (pam_retry rule) (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ansible macro for systems without authselect (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update accounts_password_pam_retry behavior (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Condition run of newaliases to its availability (Watson Sato
<wsato@redhat.com>)
 - Update SRG-APP-000038-CTR-000105 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000038)
 - Update SRG-APP-000126-CTR-000275 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000126)
 - Update SRG-APP-000111-CTR-000220 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000111)
 - Update SRG-APP-000092-CTR-000165 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000092)
 - Remove rules for package removal from RHEL 9 OSPP (Jan Černý
<jcerny@redhat.com>)
 - The RHEL 9 OSPP gets out of Draft phase. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Update the OSPP SFR references in the profile file for the Annex items. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Clarify that management and audit servers are not selected in trusted channel
SFR. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Refer to the actual protection profile page. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Add OL platform to tests (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Refactor ansible role with STIG references code. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add DISA STIG ids to ansible when conditions in roles. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add OL9 to jinja conditionals (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Exclude OL9 from remediations (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add OL9 platform to remediations for stig profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Introduce draft stig profile for OL9 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - remove rules from rhel8 ospp (Vojtech Polasek <vpolasek@redhat.com>)
 - change not aarch64 specific rules to be not applicable on rhel9 if we are on
aarch64 (Vojtech Polasek <vpolasek@redhat.com>)
 - make audit aarch64 rules rhel9 only (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rule from rhel9 ospp (Vojtech Polasek <vpolasek@redhat.com>)
 - remove umask related rules from rhel9 ospp (Vojtech Polasek
<vpolasek@redhat.com>)
 - Don't pass sssd rules when sssd.conf is absent (Watson Sato
<wsato@redhat.com>)
 - remove redundant rules from rhel9 ospp (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rule from rhel9 ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - remove 4 rules from rhel9 ospp (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove unrelated rule from CIS RHEL8 control (Watson Sato <wsato@redhat.com>)
 - Move iptables rules to related_rules (Watson Sato <wsato@redhat.com>)
 - fix CCE assignments after rebase (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove unused build option (Jan Černý <jcerny@redhat.com>)
 - make newly added rules RHEL9 only (Vojtech Polasek <vpolasek@redhat.com>)
 - add new rules to rhel9 ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_perm_change_success ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_perm_change_failed for ppc64le (Vojtech Polasek
<vpolasek@redhat.com>)
 - add audit_owner_change_success aarch64 (Vojtech Polasek
<vpolasek@redhat.com>)
 - add audit_owner_change_failed ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_ospp_general ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_module_load ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit modify_success ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_modify_failed ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_delete_success ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_delete_failed ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_create_success ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_create_failed ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_access_success ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add audit_access_failed_ppc64le (Vojtech Polasek <vpolasek@redhat.com>)
 - add ppc64le applicability platform (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix OCP rule kubelet_enable_client_cert_rotation (vincent056
<wenshen@redhat.com>)
 - Remove CentOS 6 and SL 6 from the project (Matthew Burket
<mburket@redhat.com>)
 - Remove duplicate keys for alinux (Matthew Burket <mburket@redhat.com>)
 - Fix pre tag in ocil_mount_option (Matthew Burket <mburket@redhat.com>)
 - The FMT_MOF_EXT.1 only deals with restricting management functions to
administrator, the functions themselves are listed in FMT_SMF_EXT.1. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - update test scenarios of postfix_client_configure_mail_alias to install
postfix (Vojtech Polasek <vpolasek@redhat.com>)
 - make rule rhel9 aware and add it to stig profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - correct ansible remediatiation postfix_client_configure_mail_alias (Vojtech
Polasek <vpolasek@redhat.com>)
 - use fixtext macro (Vojtech Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/services/mail/package_postfix_installed/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - Add more sysctl rules to intermediary profile (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add headers to remediations in faillock_dir rule (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add more ANSSI Intermediary Rules (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Automatus: close hanging tempfiles descriptors (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add pass and fail tests for auditd_audispd_disk_full_action rule (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Update CIS RHEL8 2.2.18 requirement to mask nfs-server (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the service_nfs_disabled for CIS RHEL8 v2.0.0 (Marcus Burghardt
<maburgha@redhat.com>)
 - Add oval check, bash and ansible remediation for
auditd_audispd_disk_full_action rule (teacup-on-rockingchair
<strandjata@gmail.com>)
 - change remediations to include the "=" sign (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rule to rhel8 stig profiles (Vojtech Polasek <vpolasek@redhat.com>)
 - add new rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Add user session timeout rules to ANSSI enhanced profile (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add rules for Uninstalling SELinux Policy Debugging Tools to ANSSI SLE high
profile (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add sebool_polyinstantiation_enabled to ANSSI SLE profile (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add sebool rules for execheap insmod and ssh login to ANSSI SLE profile
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Add ANSSI high profile for SLE platforms (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add sysctl_vm_mmap_min_addr rule to ANSSI SLE profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add sysctl_kernel_yama_ptrace_scope to ANSSI SLE profile (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add sysctl_kernel_sysrq to ANSSI SLE profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add sysctl_kernel_pid_max to ANSSI SLE profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add rules that restricts the use of the perf system to ANSSI SLE profiles
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Add enhanced ANSSI profile for SLE platforms (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add sysctl_kernel_modules_disabled to ANSSI SLE profile (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add sysctl_kernel_dmesg_restrict rule to ANSSI SLE profile (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add NX/DX setting rules to ANSSI SLE profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add rule sysctl_fs_suid_dumpable to ANSSI SLE profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add to SLE12 and SLE15 ANSSI profile rules for sysctl_fs_protected_symlinks
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Introduce sebool description and ocil macros (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Bump version to 0.1.64 (Watson Sato <wsato@redhat.com>)
 - Fix PEP8 issue and useless assignment in rule_dir_json.py (Matthew Burket
<mburket@redhat.com>)
 - Fix copy paste error in test_build_cpe.py (Matthew Burket
<mburket@redhat.com>)
 - Fix usage of fix_file_prompt in utils/fix_rules.py (Matthew Burket
<mburket@redhat.com>)
 - Fix error message in rule test_suite (Matthew Burket <mburket@redhat.com>)
 - Remove 3 package rules from RHEL 9 OSPP (Jan Černý <jcerny@redhat.com>)
 - Remove 3 crypto rules from RHEL 9 OSPP (Jan Černý <jcerny@redhat.com>)
 - Presence of the argument enables interactive boot (Watson Sato
<wsato@redhat.com>)
 - Improve rule description and fix wrt rhcos4 (Matej Tyc <matyc@redhat.com>)
 - Add tests for accounts_passwords_pam_faillock_dir (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to cover OL08-00-020016 & 020017 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update
linux_os/guide/system/auditing/policy_rules/audit_immutable_login_uids/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - Remove rule dnf-automatic_security_updates_only from RHEL 9 OSPP (Jan Černý
<jcerny@redhat.com>)
 - Ensure the Ansible shell command don't fail (Watson Sato <wsato@redhat.com>)
 - Define the dedicated_ssh_keyowner in RHCOS4 product to ssh_keys. (Gabriel
Becker <ggasparb@redhat.com>)
 - Revert "Fix copy paste error in test_build_cpe.py" (Matthew Burket
<mburket@redhat.com>)
 - Revert "Fix PEP8 issue and useless assignment in rule_dir_json.py" (Matthew
Burket <mburket@redhat.com>)
 - Fix copy paste error in test_build_cpe.py (Matthew Burket
<mburket@redhat.com>)
 - Fix PEP8 issue and useless assignment in rule_dir_json.py (Matthew Burket
<mburket@redhat.com>)
 - Add missing rules to OL8 STIG (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add template to firewalld-backend (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update platform in test (Edgar Aguilar <xeicker@gmail.com>)
 - Update rule no_empty_passwords (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Minor fix to OVAL check files storing. (Gabriel Becker <ggasparb@redhat.com>)
 - Update rationale for package_iptables-services_installed (Marcus Burghardt
<maburgha@redhat.com>)
 - Re-introduce former check features (Matej Tyc <matyc@redhat.com>)
 - Amend OSPP references for some package_*_installed rules. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Inform the package name for systemd-journald service unit (Marcus Burghardt
<maburgha@redhat.com>)
 - Update CIS L2 test for configure_crypto_policy (Watson Sato
<wsato@redhat.com>)
 - Make the Ansible remediation less generic (Matej Tyc <matyc@redhat.com>)
 - Add a supercompliance test scenario. (Matej Tyc <matyc@redhat.com>)
 - Add automated content to a rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Include package_iptables-services_installed rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Only store OVAL checks that are applicable to the product. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix CIS RHEL8 titles for 2.2.5 and 5.3.5 ids (Marcus Burghardt
<maburgha@redhat.com>)
 - Ensure audit is installed in test scenarios (Watson Sato <wsato@redhat.com>)
 - Fix typo's (Håvard F. Aasen <havard.f.aasen@pfft.no>)
 - Command 'chown', change from '.' to ':' separator (Håvard F. Aasen
<havard.f.aasen@pfft.no>)
 - Fix man-page header for lexgrog (Håvard F. Aasen <havard.f.aasen@pfft.no>)
 - Add test scripts for auditd_audispd_network_failure_action rule (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add SLE12 CCE ids for file_owner_etc_gshadow and file_permissions_etc_gshadow
rules (teacup-on-rockingchair <strandjata@gmail.com>)
 - Drop sle12 support from accounts_password_pam_ucredit rule since it
duplicates with cracklib_accounts_password_pam_ucredit (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Drop sle12 support from accounts_password_pam_ocredit rule since it
duplicates with cracklib_accounts_password_pam_ocredit (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Drop sle12 support from accounts_password_pam_minlen rule since it duplicates
with cracklib_accounts_password_pam_minlen (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Drop sle12 support from accounts_password_pam_dcredit rule since it
duplicates with cracklib_accounts_password_pam_dcredit (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Drop sle12 support from accounts_password_pam_unix_remember rule since it
duplicates with accounts_password_pam_pwhistory_remember (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Drop debug printout and prefer line length over indentation (teacup-on-
rockingchair <strandjata@gmail.com>)
 - More code climate minor improvements (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Reduce code complexity (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add long profiles option to missin_cces test (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Move OVAL templated checks to a folder called checks_from_template. (Gabriel
Becker <ggasparb@redhat.com>)
 - Store intermediate OVAL check files into the build directory. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix check and remediation wrt POSIX CLI standard (Matej Tyc
<matyc@redhat.com>)
 - Don't treat missing file as failure (Matej Tyc <matyc@redhat.com>)
 - Relaxed the chrony user check (Matej Tyc <matyc@redhat.com>)
 - Remove authselect profile select from RHEL8 and RHEL9 kickstarts (Matthew
Burket <mburket@redhat.com>)
 - Update profile stability for rhel8 STIG (Matthew Burket <mburket@redhat.com>)
 - Add var_authselect_profile to RHEL8 and RHEL9 STIG profiles (Matthew Burket
<mburket@redhat.com>)
 - Add references to enable_authselect (Matthew Burket <mburket@redhat.com>)
 - Add enable_authselect to  RHEL 8 and RHEL 9 STIG profiles (Matthew Burket
<mburket@redhat.com>)
 - Remove the vendor-zipfile and redhat-zipfile targets (Matthew Burket
<mburket@redhat.com>)
 - Removed iptables and ip6tables rules from CIS RHEL8 controlfile (Marcus
Burghardt <maburgha@redhat.com>)
 - Fix missing identifiers and references in rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Change false to true where needed (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Fix Ansible tests for Fedora building (Matthew Burket <mburket@redhat.com>)
 - Update Fedora linker checker to Fedora latest (Matthew Burket
<mburket@redhat.com>)
 - Update Fedora Dockerfile to latest (Matthew Burket <mburket@redhat.com>)
 - Update Ubuntu docker file (Matthew Burket <mburket@redhat.com>)
 - Configure markdownlint (mld) via .mdlrc and style file (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Remove obsolete one-off scripts following the Style Guide (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Configure markdownlint (mld) via .mdlrc (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Fix Style Guide formatting according to mdl (markdownlint) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Extract Project-level recommendations from General Coding Style and add the
entry about one-off scripts (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Python 2 has been removed from Fedora (Matthew Burket <mburket@redhat.com>)
 - Include fedora product in the macro conditional for sssd_enable_smartcards
(Marcus Burghardt <maburgha@redhat.com>)
 - Add missing CCES for SLE15 (teacup-on-rockingchair <strandjata@gmail.com>)
 - Tune missing CCEs test for SLE platform (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add ability to filter missing cces by profile list (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Fix test syntax (anivan-suse <anastasija.ivanovic@suse.com>)
 - Replace lowercase "pam" by "PAM" in description (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Update CIS RHEL8 controlfile to v2.0.0 (Marcus Burghardt
<maburgha@redhat.com>)
 - Added the original rhcos4 behavior to the PR (Matej Tyc <matyc@redhat.com>)
 - Remove CIS RHEL8 reference for rules not present on v2.0.0 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL8 CIS refereces for system maintainance rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL8 CIS refereces for access, authentication and authorization rules
(Marcus Burghardt <maburgha@redhat.com>)
 - Update RHEL8 CIS refereces for logging and auditing rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL8 CIS refereces for network configuration rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL8 CIS refereces for services rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL8 CIS refereces for initial setup rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Add missing cce test for SLE platforms (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add tests in faillock rules (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Improve faillock related macros (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add oval,bash and ansible for auditd_audispd_network_failure_action rule
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Reduce the list of FIPS crypto policies (Matej Tyc <matyc@redhat.com>)
 - Remove yp-related rules from RHEL9 (Matej Tyc <matyc@redhat.com>)
 - Solve the issue of dedicated ssh key groups. (Matej Tyc <matyc@redhat.com>)
 - Extract file mode check to an extend definition (Jan Černý
<jcerny@redhat.com>)
 - Fix assigned STIG id to set_password_hashing_min_rounds_logindefs rule
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Remove SLES-15-010250 rule to follow up updated of DISA STIG (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Update description in RHEL8 CIS profiles and controlfile for v2.0.0 (Marcus
Burghardt <maburgha@redhat.com>)
 - Include test scenarios for missing /etc/sssd/sssd.conf (Marcus Burghardt
<maburgha@redhat.com>)
 - Update OVAL assessment for sssd_enable_smartcards (Marcus Burghardt
<maburgha@redhat.com>)
 - Include relevant test scenarios for sssd_enable_smartcards rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Update Ansible remediation for sssd_enable_smartcards (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Bash remediation for sssd_enable_smartcards (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the sssd_enable_smartcards rule description (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix spacing in ansible (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix tests (anivan-suse <anastasija.ivanovic@suse.com>)
 - Modified the rule description. (Matej Tyc <matyc@redhat.com>)
 - Added tests for the new behavior. (Matej Tyc <matyc@redhat.com>)
 - De-template the rule (Matej Tyc <matyc@redhat.com>)
 - remove rule from rhel9 ospp (Vojtech Polasek <vpolasek@redhat.com>)
 - Clean up small typos (anivan-suse <anastasija.ivanovic@suse.com>)
 - controls/cis_alinux2.yml: modify the check value error of some rules
(YiLin.Li <YiLin.Li@linux.alibaba.com>)
 - BUG: 2105878 OCP: Fix rule ocp4-kubelet-enable-streaming-connections
(vincent056 <wenshen@redhat.com>)
 - Fix typo in wrong_value.fail.sh (anivan-suse <anastasija.ivanovic@suse.com>)
 - SUSE dconf_gnome_screensaver_lock_enabled fix bash and ansible remediation
(anivan-suse <anastasija.ivanovic@suse.com>)
 - Mark tasks that don't make changes (Watson Sato <wsato@redhat.com>)
 - Set pipefail in Ansible shell commands with pipe (Watson Sato
<wsato@redhat.com>)
 - Remove the secret from file (vincent056 <wenshen@redhat.com>)
 - bash remediation prepends a blank line (Vojtech Polasek
<vpolasek@redhat.com>)
 - Enhance the bash_ensure_pam_module_line macro capabilities (Marcus Burghardt
<maburgha@redhat.com>)
 - Create Bash macro to apply authselect changes (Marcus Burghardt
<maburgha@redhat.com>)
 - Align bash_ensure_pam_module_line to the Ansible equivalent (Marcus Burghardt
<maburgha@redhat.com>)
 - revert back usage of audit_file_contents template (Vojtech Polasek
<vpolasek@redhat.com>)
 - Unify the rhel approach for the rule (Watson Sato <wsato@redhat.com>)
 - Fix missing condition for Ansible authselect backup task (Marcus Burghardt
<maburgha@redhat.com>)
 - Create macro for authselect backup - Ansible (Marcus Burghardt
<maburgha@redhat.com>)
 - SLE15 SP4 audit_rules_augenrules broken. (sampsone <esampson@suse.com>)
 - add ansible conditionals to CPE platforms determining architecture (Vojtech
Polasek <vpolasek@redhat.com>)
 - make RHEL-08-020231 automated again (Vojtech Polasek <vpolasek@redhat.com>)
 - Select grub debug-shell rule in RHEL9 OSPP (Watson Sato <wsato@redhat.com>)
 - Add zipl_systemd_debug-shell_argument_absent (Watson Sato <wsato@redhat.com>)
 - Fix file_groupowner_grub2_cfg (Matthew Burket <mburket@redhat.com>)
 - Remove SSG and openscap packages from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update audit_rules_usergroup_modification_passwd (Matthew Burket
<mburket@redhat.com>)
 - Update audit_rules_usergroup_modification_passwd (Matthew Burket
<mburket@redhat.com>)
 - Update audit_rules_usergroup_modification_gshadow (Matthew Burket
<mburket@redhat.com>)
 - Update audit_rules_usergroup_modification_opasswd (Matthew Burket
<mburket@redhat.com>)
 - Update audit_rules_usergroup_modification_group (Matthew Burket
<mburket@redhat.com>)
 - Update suoders rules (Matthew Burket <mburket@redhat.com>)
 - Update account_temp_expire_date (Matthew Burket <mburket@redhat.com>)
 - Update account_emergency_expire_date (Matthew Burket <mburket@redhat.com>)
 - Fix PEP8 issues (Matthew Burket <mburket@redhat.com>)
 - Add grub2_systemd_debug-shell_argument_absent (Watson Sato
<wsato@redhat.com>)
 - Add to docs that product removals need to use the label (Matthew Burket
<mburket@redhat.com>)
 - Finish WRLinux removal (Matthew Burket <mburket@redhat.com>)
 - Remove multi_platform_wrlinux from various places in the project (Matthew
Burket <mburket@redhat.com>)
 - Remove WRLinux 1019 product (Matthew Burket <mburket@redhat.com>)
 - Remove WRLinux8 products (Matthew Burket <mburket@redhat.com>)
 - The reasons for disabling Ctrl-Alt-Del reboot is audit trail related, to have
the subject identity for the reboot operation. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Update link in PAM group (Milan Lysonek <mlysonek@redhat.com>)
 - remove rules from rhel9 ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - fix scoring of audit_access_success in rhel9 ospp profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - sort cces (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add sysctl kernel rules and cceids for mount rules (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add Ansible remediation (anivan-suse <anastasija.ivanovic@suse.com>)
 - Disable glob expansion in Compare Datastream service. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ubuntu logic in display_login_attempts (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix issues found in code review for #9101 (Matthew Burket
<mburket@redhat.com>)
 - Fix more missing ocil clauses. (Gabriel Becker <ggasparb@redhat.com>)
 - Add missing ocil_clause for audit rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update OCIL (Jan Černý <jcerny@redhat.com>)
 - Add removed products to the changelog (Matthew Burket <mburket@redhat.com>)
 - Add two rules and some more CCEIDs (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Improve conditionals for authselect apply-changes tasks (Marcus Burghardt
<maburgha@redhat.com>)
 - Add file mode checks to configure_tmux_lock_command (Jan Černý
<jcerny@redhat.com>)
 - Add file mode checks to configure_tmux_lock_after_time (Jan Černý
<jcerny@redhat.com>)
 - Fix ansible syntax and make sure default rsyslog config file is also scanned
for log file entries (teacup-on-rockingchair <strandjata@gmail.com>)
 - products/alinux3 && controls: Add CIS Alibaba Cloud Linux 3 profiles (YuQing
<yyq0391@163.com>)
 - Update the ocil_mount_option to remove the use of should (Matthew Burket
<mburket@redhat.com>)
 - Update network_sniffer_disabled (Matthew Burket <mburket@redhat.com>)
 - Update ocil_sysctl_option_value (Matthew Burket <mburket@redhat.com>)
 - Update no_user_host_based_files (Matthew Burket <mburket@redhat.com>)
 - Update xwindows_runlevel_target (Matthew Burket <mburket@redhat.com>)
 - Update accounts_no_uid_except_zero (Matthew Burket <mburket@redhat.com>)
 - Update accounts_user_dot_no_world_writable_programs (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_user_interactive_home_directory_exists (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_umask_interactive_users (Matthew Burket <mburket@redhat.com>)
 - Update rsyslog_cron_logging (Matthew Burket <mburket@redhat.com>)
 - Update rsyslog_nolisten (Matthew Burket <mburket@redhat.com>)
 - Update coredump_disable_backtraces (Matthew Burket <mburket@redhat.com>)
 - Update coredump_disable_storage (Matthew Burket <mburket@redhat.com>)
 - Update disable_users_coredumps (Matthew Burket <mburket@redhat.com>)
 - Update dconf_gnome_disable_ctrlaltdel_reboot (Matthew Burket
<mburket@redhat.com>)
 - Update sudo_restrict_privilege_elevation_to_authorized (Matthew Burket
<mburket@redhat.com>)
 - Improve Ansible macros for PAM rules (Marcus Burghardt <maburgha@redhat.com>)
 - Rephrasing and ordering adjustments - no functional impact (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve regex for Ansible remediation in display_login_attempts (Marcus
Burghardt <maburgha@redhat.com>)
 - Update postfix_prevent_unrestricted_relay (Matthew Burket
<mburket@redhat.com>)
 - Update no_host_based_files (Matthew Burket <mburket@redhat.com>)
 - Update tftpd_uses_secure_mode (Matthew Burket <mburket@redhat.com>)
 - Update network_configure_name_resolution (Matthew Burket
<mburket@redhat.com>)
 - Remove "should from OCIL in installed_OS_is_vendor_supported (Matthew Burket
<mburket@redhat.com>)
 - Update display_login_attempts (Matthew Burket <mburket@redhat.com>)
 - Improve output of srg_audit (Matthew Burket <mburket@redhat.com>)
 - Update Columns in srg_audit script (Matthew Burket <mburket@redhat.com>)
 - Update Oracle GPG reference reference links (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add OL9 Dockerfile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Update file_permissions_backup_etc_shadow (Matthew Burket
<mburket@redhat.com>)
 - Update file_permissions_backup_etc_passwd (Matthew Burket
<mburket@redhat.com>)
 - Update file_permissions_backup_etc_gshadow (Matthew Burket
<mburket@redhat.com>)
 - Update file_permissions_backup_etc_group (Matthew Burket
<mburket@redhat.com>)
 - Update file_owner_backup_etc_shadow (Matthew Burket <mburket@redhat.com>)
 - Update file_owner_backup_etc_passwd (Matthew Burket <mburket@redhat.com>)
 - Update file_owner_backup_etc_gshadow (Matthew Burket <mburket@redhat.com>)
 - Update file_owner_backup_etc_group (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_backup_etc_group (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_backup_etc_gshadow (Matthew Burket
<mburket@redhat.com>)
 - Update file_groupowner_backup_etc_passwd (Matthew Burket
<mburket@redhat.com>)
 - Adjust bash remediation to correspond to rule.yml for correct  value of
TimedLoginEnable (Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Add rules to ensure the backup security files are protected. (Matthew Burket
<mburket@redhat.com>)
 - Update file_permissions_etc_shadow (Matthew Burket <mburket@redhat.com>)
 - Update file_permissions_etc_passwd (Matthew Burket <mburket@redhat.com>)
 - Update file_permissions_etc_gshadow (Matthew Burket <mburket@redhat.com>)
 - Update file_permissions_etc_group (Matthew Burket <mburket@redhat.com>)
 - Fix ordering args in fixtext_directory_permissions (Matthew Burket
<mburket@redhat.com>)
 - Add file_permissions_etc_* to the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update file_owner_etc_shadow (Matthew Burket <mburket@redhat.com>)
 - Update file_owner_etc_passwd (Matthew Burket <mburket@redhat.com>)
 - Update file_owner_etc_gshadow (Matthew Burket <mburket@redhat.com>)
 - Update file_owner_etc_group (Matthew Burket <mburket@redhat.com>)
 - Fix small typo in bash_enable_authselect_feature description (Marcus
Burghardt <maburgha@redhat.com>)
 - Update Ansible remediation for no_empty_passwords (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible macro to enable authselect feature (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible remediation for password hashing algorithm (Marcus Burghardt
<maburgha@redhat.com>)
 - Include Ansible remediation for set_password_hashing_algorithm_passwordauth
(Marcus Burghardt <maburgha@redhat.com>)
 - Include Ansible macro to remove PAM module option (Marcus Burghardt
<maburgha@redhat.com>)
 - Update ansible_ensure_pam_module_line macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation for display_login_attempts (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation for pam_unix rounds option in system-auth (Marcus
Burghardt <maburgha@redhat.com>)
 - Update Ansible remediation for pam_unix rounds option in password-auth
(Marcus Burghardt <maburgha@redhat.com>)
 - Fix the back references for replace module (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation for accounts_password_pam_unix_remember (Marcus
Burghardt <maburgha@redhat.com>)
 - Update Ansible remediation for accounts_password_pam_retry (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation for pam_pwquality in system_auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation for pam_pwquality in password_auth (Marcus
Burghardt <maburgha@redhat.com>)
 - Update Ansible remediation for pam_pwhistory in system_auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Ansible remediation for pam_pwhistory in password_auth (Marcus
Burghardt <maburgha@redhat.com>)
 - Introduce new Ansible macros to configure PAM modules (Marcus Burghardt
<maburgha@redhat.com>)
 - Add file_owner_etc_* to the RHEL9 STIG (Matthew Burket <mburket@redhat.com>)
 - Update accounts_password_pam_pwquality_password_auth (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_password_pam_pwquality_system_auth (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to audit_rules_immutable (Matthew Burket
<mburket@redhat.com>)
 - Update dir_permissions_library_dirs (Matthew Burket <mburket@redhat.com>)
 - Fix missing newlines at EOF (Jan Černý <jcerny@redhat.com>)
 - Improve a regular expression (Jan Černý <jcerny@redhat.com>)
 - remove no longer applicable references from the rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - update profile stability tests (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rule and variable from control files (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rule and variable from Fedora profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rule and variable from RHEL7 profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rule and variable from RHEL8 profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rule and variable from RHEL9 profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix regular expression (Jan Černý <jcerny@redhat.com>)
 - Increase Congintive Complexity threshold (Jan Černý <jcerny@redhat.com>)
 - Stop checking systemd.confirm_spawn in RHEL 9 OSPP (Jan Černý
<jcerny@redhat.com>)
 - Create rule grub2_disable_recovery (Jan Černý <jcerny@redhat.com>)
 - Increase Congintive Complexity threshold (Jan Černý <jcerny@redhat.com>)
 - RHEL9 OSPP: Drop rule preventing forwarding (Watson Sato <wsato@redhat.com>)
 - RHEL9 OSPP: Drop log martians rules (Watson Sato <wsato@redhat.com>)
 - RHEL9 OSPP: Remove rules that affect secuity of TOE (Watson Sato
<wsato@redhat.com>)
 - RHEL9 OSPP: Drop send redirect rules that don't affect the TOE (Watson Sato
<wsato@redhat.com>)
 - RHEL9 OSPP: Drop rules changing default values not related to OSPP (Watson
Sato <wsato@redhat.com>)
 - RHEL9 OSPP: Drop rules affecting important funcionality (Watson Sato
<wsato@redhat.com>)
 - RHEL9 OSPP: Drop rules w/o specific need aligned with default value (Watson
Sato <wsato@redhat.com>)
 - update rhel8 ospp profile stability test (Vojtech Polasek
<vpolasek@redhat.com>)
 - aarch64 version of audit_perm_change_success (Vojtech Polasek
<vpolasek@redhat.com>)
 - aarch64 version of audit_perm_change_failed (Vojtech Polasek
<vpolasek@redhat.com>)
 - aarch64 version of audit_owner_change_success (Vojtech Polasek
<vpolasek@redhat.com>)
 - aarch64 version of audit_owner_change_failed (Vojtech Polasek
<vpolasek@redhat.com>)
 - add aarch64 version of audit_delete_success (Vojtech Polasek
<vpolasek@redhat.com>)
 - add aarch64 version of audit_delete_failed (Vojtech Polasek
<vpolasek@redhat.com>)
 - add aarch64 version of audit_access_failed / success rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - add aarch64 version of audi_modify_success (Vojtech Polasek
<vpolasek@redhat.com>)
 - add aarch64 version of audit_modify_failed (Vojtech Polasek
<vpolasek@redhat.com>)
 - add aarch64 rule audit_create_success (Vojtech Polasek <vpolasek@redhat.com>)
 - make audi_create_failed aarch64 version (Vojtech Polasek
<vpolasek@redhat.com>)
 - make aarch64 version of audit_ospp_general (Vojtech Polasek
<vpolasek@redhat.com>)
 - modify the oval_file_content macro to use rule_id (Vojtech Polasek
<vpolasek@redhat.com>)
 - Switch aide variable to the wrapper in Ubuntu products. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use product defined aide_bin_path variable instead of custom ones. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix PEP8 (Jan Černý <jcerny@redhat.com>)
 - Use a aideinit script to generate ubuntu aide databases. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use correct aide path variable in the rule descriptions and ocil. (Gabriel
Becker <ggasparb@redhat.com>)
 - Ensure an authselect profile is selected for tests (Marcus Burghardt
<maburgha@redhat.com>)
 - Ignore IntelliJ Idea configuration (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update file_groupowner_etc_gshadow (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_etc_group (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_etc_shadow (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_etc_passwd (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_etc_shadow (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_grub2_cfg (Matthew Burket <mburket@redhat.com>)
 - Add more file_groupowner_* rules to the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update chronyd_server_directive (Matthew Burket <mburket@redhat.com>)
 - Update service_chronyd_enabled (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000355-GPOS-00143 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update set_password_hashing_algorithm_passwordauth (Matthew Burket
<mburket@redhat.com>)
 - Add set_password_hashing_algorithm_passwordauth to the RHEL9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Update set_password_hashing_min_rounds_logindefs (Matthew Burket
<mburket@redhat.com>)
 - Add set_password_hashing_min_rounds_logindefs to the RHEL9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add accounts_password_pam_pwquality_* to RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add sysctl_net_ipv4_conf_default_accept_redirects to the RHEL9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add dir_permissions_library_dirs to RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Refactor: Extract function file_known_as_useless (Jan Černý
<jcerny@redhat.com>)
 - Extract condition (Jan Černý <jcerny@redhat.com>)
 - Extract a variable (Jan Černý <jcerny@redhat.com>)
 - Refactor: Extract function write_rule_test_content_to_dir (Jan Černý
<jcerny@redhat.com>)
 - Fix content applicability to correctly use templated content. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix PEP 8 problems (Jan Černý <jcerny@redhat.com>)
 - Split method (Jan Černý <jcerny@redhat.com>)
 - Rework tarball generation (Jan Černý <jcerny@redhat.com>)
 - Ansible remediation for enable_authselect (Milan Lysonek
<mlysonek@redhat.com>)
 - Update version in SRG control file. (Gabriel Becker <ggasparb@redhat.com>)
 - Extend the regex on macro to remove PAM option (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve test scenarios for accounts_password_pam_retry rule (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4: Drop not-s390x from file_owner_ovs_conf_db (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Drop not-arch from file_groupowner_ovs_sys_id_conf (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4: Drop not-arch from file_groupowner_ovs_conf_db_lock (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4: Drop not-arch from file_groupowner_ovs_conf_db (Jakub Hrozek
<jhrozek@redhat.com>)
 - Enforce rule sysctl_user_max_user_namespaces in RHEL 9 OSPP (Jan Černý
<jcerny@redhat.com>)
 - Remove rule zip_vsyscall_argument (Jan Černý <jcerny@redhat.com>)
 - Make rule audit_access_success in OSPP profile unenforcing (Jan Černý
<jcerny@redhat.com>)
 - Fix the PAM file informed in the two scripts (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve regex to remove option from PAM line (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve test scenarios for display_login_attempts (Marcus Burghardt
<maburgha@redhat.com>)
 - Regex and descriptions improvemens in PAM macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Update no_empty_passwords rule remediation and test scenarios (Marcus
Burghardt <maburgha@redhat.com>)
 - New bash macro to enable authselect feature (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation for display_login_attempts rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Include bash macro to remove PAM module options (Marcus Burghardt
<maburgha@redhat.com>)
 - Updated accounts_password_pam_retry rule remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Update bash_ensure_pam_module_configuration macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation for pam_pwquality in system-auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation for pam_pwquality in password-auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation for pam_unix_rounds in system-auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation for pam_unix_rounds in password-auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation for password_hashing_algorithm in system-auth (Marcus
Burghardt <maburgha@redhat.com>)
 - Update remediation for password_hashing_algorithm in password-auth (Marcus
Burghardt <maburgha@redhat.com>)
 - Update the sed and grep commands to interpret vars (Marcus Burghardt
<maburgha@redhat.com>)
 - Update bash remediation for pam_pwhistory rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include test scenario for missing PAM line (Marcus Burghardt
<maburgha@redhat.com>)
 - Use new PAM macros for bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Introduce new bash macros to configure PAM modules (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove sysctl_fs_protected_* rules from RHEL 9 OSPP (Jan Černý
<jcerny@redhat.com>)
 - Assign RHEL-08-030030 to postfix_client_configure_mail_alias_postmaster.
(Gabriel Becker <ggasparb@redhat.com>)
 - Set tmux config files mode (Jan Černý <jcerny@redhat.com>)
 - Add headers to remediations of a rule (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Improve asterisk and spacing in markdown export (Matthew Burket
<mburket@redhat.com>)
 - usbguard_generate_policy: fix Ansible remediation (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix type hints in convert_srg_export_to_md (Matthew Burket
<mburket@redhat.com>)
 - Fix type hints and constancy in utils/create_srg_export.py (Matthew Burket
<mburket@redhat.com>)
 - Add a markdown output target to create_srg_export (Matthew Burket
<mburket@redhat.com>)
 - Add python vscode extension to the gitpod environment. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL8 profile stability data (Watson Sato <wsato@redhat.com>)
 - remove test data no longer used (Vojtech Polasek <vpolasek@redhat.com>)
 - remove custom test scenarios (Vojtech Polasek <vpolasek@redhat.com>)
 - create templated test scenarios (Vojtech Polasek <vpolasek@redhat.com>)
 - Add ansible remediation for postfix_prevent_unrestricted_relay. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix RHEL8 STIG selection for sysctl forwarding (Watson Sato
<wsato@redhat.com>)
 - Select rule for RHEL8 STIG (Watson Sato <wsato@redhat.com>)
 - Update testing container name in gitpod integration. (Gabriel Becker
<ggasparb@redhat.com>)
 - Build content in debug mode when generating coverage statistics. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix overlapping CCE ids for SLE15 (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add more rules to ANSSI profile for SLE platform (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add log related rules to ANSSI profile for SLE (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add rule rsyslog_files_permissions to sle12 ANSSI profile (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add rules to ANSSI SLE profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - OCP4: api_server_api_priority_gate_enabled: Checking this rule only makes
sense for OCP 4.6 or older (Jakub Hrozek <jhrozek@redhat.com>)
 - Fix the sorting of identifiers (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Fix regular expression in Ansible remediation (Jan Černý
<jcerny@redhat.com>)
 - usbguard_generate_policy: handle also systems without USBs (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add ANSSI rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add the SFRs from the SSH Functional Package as they are the most specific.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - With the SSH Extended Package sunset and replaced by the Functional package
(FP) via TD0649, use the relevant SFR from the FP. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - The reason for disabling Kerberos and GSSAPI is the "and no other methods" in
FCS_SSH_EXT.1.2 of the SSH Functional Package. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Remove test scenario that is no longer relevant (Jan Černý
<jcerny@redhat.com>)
 - In OSPP the reason for disabling root logins is to know the real identity of
the administrator who logged in (and then used su/sudo), for auditing purposes.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - remove test scenarios which test the content against files provided by audit
(Vojtech Polasek <vpolasek@redhat.com>)
 - edit description of audit_policy_rules/* (Vojtech Polasek
<vpolasek@redhat.com>)
 - Unify the OSPP references for the tmux-based session locking rules, add the
implicitly satisfied FTA_SSL.1. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Use the correct path in a test scenario (Jan Černý <jcerny@redhat.com>)
 - Add OL9 to jinja conditionals (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update OL9 GPG key packages release (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add OL9 platform to remediations for OSPP profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Introduce OSPP profile for OL9 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update fixtext_audit_file_watch_rule (Matthew Burket <mburket@redhat.com>)
 - Fixtext full_name in SRG-OS-000001-GPOS-00001 (Matthew Burket
<mburket@redhat.com>)
 - OCP4: configure_network_policies: Calico also supports NetworkPolicies (Jakub
Hrozek <jhrozek@redhat.com>)
 - Fix ocil_fix_srg_privileged_command arg in
audit_rules_privileged_commands_usermod (Matthew Burket <mburket@redhat.com>)
 - Update srg_requirement file_permissions_etc_audit_auditd (Matthew Burket
<mburket@redhat.com>)
 - Update srg_requirement in file_permissions_etc_audit_rulesd (Matthew Burket
<mburket@redhat.com>)
 - Fix srg_requirement in service_fapolicyd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Update linux_os/guide/services/sssd/sssd_enable_pam_services/bash/shared.sh
(Gabriel Becker <ggasparb@redhat.com>)
 - OCP4: Filter out SCCs that end with -v2 from the allowedCapabilities list
(Jakub Hrozek <jhrozek@redhat.com>)
 - Use correct faillock path in group description (Jan Černý
<jcerny@redhat.com>)
 - Use correct faillock path (Jan Černý <jcerny@redhat.com>)
 - Update PR comments with gitpod links to include OL8. (Gabriel Becker
<ggasparb@redhat.com>)
 - Proper username regex in accounts_user_interactive_home_directory_defined
(Milan Lysonek <mlysonek@redhat.com>)
 - Rename SSGTS to Automatus in gitpod integration files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Do not include symlink tests into OVAL 5.10. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove audispd (Jan Černý <jcerny@redhat.com>)
 - Fix a broken Jinja variable definition (Jan Černý <jcerny@redhat.com>)
 - Remove audispd related rules (Jan Černý <jcerny@redhat.com>)
 - Add a dot (Jan Černý <jcerny@redhat.com>)
 - Update OCIL and add SRG to rsyslog_encrypt_offload_defaultnetstreamdriver
(Jan Černý <jcerny@redhat.com>)
 - Update OCIL and add SRG to rsyslog_encrypt_offload_actionsendstreamdrivermode
(Jan Černý <jcerny@redhat.com>)
 - Remove rule package_audit-audispd-plugins_installed (Jan Černý
<jcerny@redhat.com>)
 - Add SRG and fixtext package_audispd-plugins_installed (Jan Černý
<jcerny@redhat.com>)
 - Add OCIL and SRG in auditd_overflow_action (Jan Černý <jcerny@redhat.com>)
 - Add fixtext and SRG requirement to auditd_audispd_syslog_plugin_activated
(Jan Černý <jcerny@redhat.com>)
 - Add fixtext and SRG to auditd_audispd_network_failure_action (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext and SRG to auditd_audispd_encrypt_sent_records (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext and SRG requirement to auditd_audispd_disk_full_action (Jan
Černý <jcerny@redhat.com>)
 - Add a missing word (Jan Černý <jcerny@redhat.com>)
 - Update text and SRG requirement in
auditd_audispd_configure_sufficiently_large_partition (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL and fixtext in auditd_audispd_configure_remote_server (Jan
Černý <jcerny@redhat.com>)
 - Fix build errors during bug fixing (Matthew Burket <mburket@redhat.com>)
 - Add anssi_bp28_intermediary profile (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add srg_requirement to configure_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Tweak srg_requirement_audit_file_watch_rule text (Matthew Burket
<mburket@redhat.com>)
 - Remove erroneous curly brace from accounts_password_pam_difok (Matthew Burket
<mburket@redhat.com>)
 - In accounts_password_all_shadowed_sha512 cite FIPS 140-3 for RHEL9 (Matthew
Burket <mburket@redhat.com>)
 - Update srg_requirement to accounts_password_pam_unix_rounds_password_auth
(Matthew Burket <mburket@redhat.com>)
 - Update srg_requirement to accounts_password_pam_unix_rounds_system_auth
(Matthew Burket <mburket@redhat.com>)
 - Fix srg_requirement in service_pcscd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add fixtxet to SRG-OS-000024-GPOS-00007 (Matthew Burket <mburket@redhat.com>)
 - Update srg_requirement in configure_openssl_tls_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Parametrize the file name of the container used by gitpod integration.
(Gabriel Becker <ggasparb@redhat.com>)
 - Use full_name in file_permissions_sshd_private_key (Matthew Burket
<mburket@redhat.com>)
 - Use full_name in file_permissions_sshd_pub_key (Matthew Burket
<mburket@redhat.com>)
 - service_rsyslog_enabled should use service_enabled macros (Matthew Burket
<mburket@redhat.com>)
 - Update srg_requirement for package_tftp-server_removed (Matthew Burket
<mburket@redhat.com>)
 - Rewrite fixtext in ssh_private_keys_have_passcode (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Use pkg_manager vs yum in rpm_verify_hashes (Matthew Burket
<mburket@redhat.com>)
 - Remove configure_libreswan_crypto_policy from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Align sssd_enable_pam_services tests to expect existing pam service (Milan
Lysonek <mlysonek@redhat.com>)
 - sssd_enable_pam_services needs pam service to exist in [sssd] section (Milan
Lysonek <mlysonek@redhat.com>)
 - Add a better srg_requirement for ensure_gpgcheck_globally_activated (Matthew
Burket <mburket@redhat.com>)
 - Add better srg_requirement for ensure_gpgcheck_local_packages (Matthew Burket
<mburket@redhat.com>)
 - Add better srg_requirement for ensure_gpgcheck_never_disabled (Matthew Burket
<mburket@redhat.com>)
 - Fix spelling errer in ensure_gpgcheck_never_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to SRG-OS-000358-GPOS-00145 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix -> fixtext in RHEL9 STIG (Matthew Burket <mburket@redhat.com>)
 - Fix formatting for fixtext macros "Run the following command" (Matthew Burket
<mburket@redhat.com>)
 - Use the fixtext macro for the fixtext in package_vsftpd_removed (Matthew
Burket <mburket@redhat.com>)
 - Handle variables in SRG Requirement (Matthew Burket <mburket@redhat.com>)
 - Variable in configure_opensc_card_drivers for srg_requirement (Matthew Burket
<mburket@redhat.com>)
 - Pull force_opensc_card_drivers from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update tests/unit/ssg-
module/test_playbook_builder_data/guide/configure_crypto_policy/rule.yml
(Matthew Burket <m@tthewburket.com>)
 - Add platform machine to two rules (Matthew Burket <mburket@redhat.com>)
 - Update tests/unit/ssg-
module/test_playbook_builder_data/guide/configure_crypto_policy/rule.yml
(Matthew Burket <m@tthewburket.com>)
 - EKS: Fix typo (Jakub Hrozek <jhrozek@redhat.com>)
 - adapt to paramters (Marcus Meissner <meissner@suse.de>)
 - OCP4: The flowcontrol API was bumped to v1beta2 in 4.11 (Jakub Hrozek
<jhrozek@redhat.com>)
 - add products/uos20 to support UnionTech OS Server 20 (binyanling
<binyanling@uniontech.com>)
 - Create rule to cover OL08-00-010100 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix quotes in accounts_password_set_min_life_existing (Matthew Burket
<mburket@redhat.com>)
 - Fix quotes in accounts_minimum_age_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Fix quotes in accounts_password_set_max_life_existing (Matthew Burket
<mburket@redhat.com>)
 - Fix quotes in accounts_maximum_age_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Fix quotes in rsyslog_remote_loghost (Matthew Burket <mburket@redhat.com>)
 - Fix quotes in dir_perms_world_writable_root_owned (Matthew Burket
<mburket@redhat.com>)
 - Fix quotes in sshd_enable_warning_banner (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_ocredit (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to account_disable_post_pw_expiration (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_logon_fail_delay (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_max_concurrent_login_sessions (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_minlen_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_dcredit (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_dictcheck (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_difok (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_lcredit (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_maxclassrepeat (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_maxrepeat (Matthew Burket
<mburket@redhat.com>)
 - sssd_enable_smartcards: authselect with-smarcard (Watson Sato
<wsato@redhat.com>)
 - Add srg_requirement to accounts_password_pam_minclass (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_minlen (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_pwhistory_remember_password_auth
(Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_pwhistory_remember_system_auth
(Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_retry (Matthew Burket
<mburket@redhat.com>)
 - Add whitespace in macro function so CTF can parse properly tokens. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add srg_requirement to accounts_password_pam_ucredit (Matthew Burket
<mburket@redhat.com>)
 - test_env.py: add more attempts when executing ssh command (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add srg_requirement to accounts_password_pam_unix_remember (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_unix_rounds_password_authk
(Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_unix_rounds_system_auth (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_umask_etc_csh_cshrc (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_umask_etc_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_umask_etc_profile (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to account_temp_expire_date (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to aide_periodic_cron_checking (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to banner_etc_issue (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to chronyd_or_ntpd_set_maxpoll (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to configure_bind_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Update configure_crypto_policy (Matthew Burket <mburket@redhat.com>)
 - Do not include OCIL content in rules that define OVAL external content.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add srg_requirement to dconf_gnome_banner_enabled (Matthew Burket
<mburket@redhat.com>)
 - Fix issues in code review for PR #9025 (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement for dconf_gnome_lock_screen_on_smartcard_removal (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement for configure_tmux_lock_after_time (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for bios_enable_execution_restrictions (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for clean_components_post_updating (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for configure_firewalld_ports (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for configure_kerberos_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for configure_libreswan_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for configure_tmux_lock_command (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for dconf_gnome_login_banner_text (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for dconf_gnome_screensaver_idle_delay (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement for dconf_gnome_screensaver_lock_delay (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dconf_gnome_screensaver_lock_enabled (Matthew Burket
<mburket@redhat.com>)
 - Update dconf_gnome_screensaver_lock_locked (Matthew Burket
<mburket@redhat.com>)
 - Remove dconf_gnome_screensaver_mode_blank from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dconf_gnome_screensaver_user_locks (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dconf_gnome_session_idle_user_locks (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dir_ownership_library_dirs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to disable_ctrlaltdel_burstaction (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to disable_host_auth (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to enable_dracut_fips_module (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to enable_fips_mode (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to encrypt_partitions (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to ensure_gpgcheck_globally_activated (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to ensure_gpgcheck_never_disabled (Matthew Burket
<mburket@redhat.com>)
 - Pull ensure_redhat_gpgkey_installed from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_audit_tools_group_ownership (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_audit_tools_ownership (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_audit_tools_permissions (Matthew Burket
<mburket@redhat.com>)
 - Update file_permissions_var_log (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to grub2_admin_username (Matthew Burket
<mburket@redhat.com>)
 - Update file_permissions_var_log_messages (Matthew Burket
<mburket@redhat.com>)
 - Remove firewalld_sshd_port_enabled from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to gnome_gdm_disable_automatic_login (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to grub2_audit_backlog_limit_argument (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to grub2_password (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to grub2_uefi_admin_username (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to grub2_uefi_password (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to install_smartcard_packages (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to no_tmux_in_shells (Matthew Burket
<mburket@redhat.com>)
 - Update package_pcsc-lite_installed (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to postfix_client_configure_mail_alias (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to require_emergency_target_auth (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to require_singleuser_auth (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to rsyslog_encrypt_offload_actionsendstreamdriverauthmode
(Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to rsyslog_encrypt_offload_actionsendstreamdrivermode
(Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to rsyslog_encrypt_offload_defaultnetstreamdriver
(Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to sshd_enable_pam (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to rsyslog_remote_access_monitoring (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to selinux_policytype (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to service_pcscd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to service_sshd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to service_usbguard_enabled (Matthew Burket
<mburket@redhat.com>)
 - Update set_password_hashing_algorithm_libuserconf (Matthew Burket
<mburket@redhat.com>)
 - Update set_password_hashing_algorithm_logindefs (Matthew Burket
<mburket@redhat.com>)
 - Update set_password_hashing_algorithm_systemauth (Matthew Burket
<mburket@redhat.com>)
 - Pull ssh_client_rekey_limit (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to sshd_do_not_permit_user_env (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sshd_enable_warning_banner (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sssd_certificate_verification (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sssd_enable_smartcards (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sssd_has_trust_anchor (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sssd_offline_cred_expiration (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sudo_remove_no_authenticate (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sudo_remove_nopasswd (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sudo_require_reauthentication (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sysctl_fs_protected_hardlinks (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sysctl_fs_protected_symlinks (Matthew Burket
<mburket@redhat.com>)
 - Removing sysctl_kernel_exec_shield from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sysctl_kernel_perf_event_paranoid (Matthew Burket
<mburket@redhat.com>)
 - Don't fail utils/compare_results.py when idref/result is missing, just add
placeholder to inform (Milan Lysonek <mlysonek@redhat.com>)
 - OCP4: Update policy.json verification (Jakub Hrozek <jhrozek@redhat.com>)
 - Remove references to authselect.conf not being empty (Matej Tyc
<matyc@redhat.com>)
 - Add anssi gshadow rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - fix title in account_password_pam_faillock_system_auth (Matthew Burket
<mburket@redhat.com>)
 - Apply suggestions from code review (Matthew Burket <m@tthewburket.com>)
 - Update rule to allow special bits in library dirs (Watson Sato
<wsato@redhat.com>)
 - OCP4: Our CI checks for version.yml not version.yaml (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add 4.11 test manifests to several rules (Jakub Hrozek <jhrozek@redhat.com>)
 - Address feedback in #9016 (Matthew Burket <mburket@redhat.com>)
 - Update no_empty_passwords_etc_shadow (Matthew Burket <mburket@redhat.com>)
 - Update disallow_bypass_password_sudo (Matthew Burket <mburket@redhat.com>)
 - Add file_permissions_etc_group to anssi (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add ssh rules to ANSSI (anivan-suse <anastasija.ivanovic@suse.com>)
 - Ensure pam_lastlog with 'silent' is caught (Watson Sato <wsato@redhat.com>)
 - convert to jinja template (Marcus Meissner <meissner@suse.de>)
 - Correct display_login_attempts pass scenarios (Watson Sato
<wsato@redhat.com>)
 - Remove any ocurrence of silent from postlogin (Watson Sato
<wsato@redhat.com>)
 - OCP: use variable for oauthclient_inactivity_timeout (vincent
<wenshen@redhat.com>)
 - Add EditorConfig file (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to sysctl_net_ipv4_tcp_invalid_ratelimit (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to usbguard_generate_policy (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to use_pam_wheel_for_su (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to wireless_disable_interfaces (Matthew Burket
<mburket@redhat.com>)
 - Update aide_scan_notification (Matthew Burket <mburket@redhat.com>)
 - Remove harden_ssh_client_crypto_policy from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update disable_users_coredumps (Matthew Burket <mburket@redhat.com>)
 - Update coredump_disable_storage (Matthew Burket <mburket@redhat.com>)
 - Update coredump_disable_backtraces (Matthew Burket <mburket@redhat.com>)
 - Update xwindows_remove_packages (Matthew Burket <mburket@redhat.com>)
 - utils: Remove obsolete script (Jakub Hrozek <jhrozek@redhat.com>)
 - Update no_files_unowned_by_user (Matthew Burket <mburket@redhat.com>)
 - Update rpm_verify_permissions (Matthew Burket <mburket@redhat.com>)
 - Update rpm_verify_ownership (Matthew Burket <mburket@redhat.com>)
 - Add fixtext to sysctl_kernel_perf_event_paranoid (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to sysctl_kernel_dmesg_restrict (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl bash template (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Sort subkeys in the new rules (Matthew Burket <mburket@redhat.com>)
 - Add new rule firewalld-backend (Matthew Burket <mburket@redhat.com>)
 - Add new rule fapolicy_default_deny (Matthew Burket <mburket@redhat.com>)
 - Update configured_firewalld_default_deny (Matthew Burket
<mburket@redhat.com>)
 - Add new rule kernel_module_uvcvideo_disabled (Matthew Burket
<mburket@redhat.com>)
 - Update audit_rules_login_events_faillock (Matthew Burket
<mburket@redhat.com>)
 - Add new rule account_password_pam_faillock_password_auth (Matthew Burket
<mburket@redhat.com>)
 - Add new rule account_password_pam_faillock_password_auth (Matthew Burket
<mburket@redhat.com>)
 - Fix auditd_overflow_action OVAL to work properly on RHEL9. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix account_passwords_pam_faillock_dir formatting issue (Matthew Burket
<mburket@redhat.com>)
 - Add new rule account_password_selinux_faillock_dir (Matthew Burket
<mburket@redhat.com>)
 - Remove empty line in ensure_gpgcheck_never_disabled ansible remediation
(Milan Lysonek <mlysonek@redhat.com>)
 - Update dconf_gnome_screensaver_lock_locked (Matthew Burket
<mburket@redhat.com>)
 - Add new rule account_passwords_pam_faillock_audit to RHEL STIGs (Matthew
Burket <mburket@redhat.com>)
 - Add rule for account_passwords_pam_faillock_dir for RHEL STIGs (Matthew
Burket <mburket@redhat.com>)
 - Add mount_option_boot_efi_nosuid to RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add disallow_bypass_password_sudo to RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add no_empty_passwords_etc_shadow to SRG-OS-000480-GPOS-00227 (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to postfix rule (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Extract function (Jan Černý <jcerny@redhat.com>)
 - Handle symlinks in pkg manager config file path (Watson Sato
<wsato@redhat.com>)
 - Follow symlinks in ensure_gpgcheck_local_packages (Watson Sato
<wsato@redhat.com>)
 - Restrict multiline tests for SLE (Watson Sato <wsato@redhat.com>)
 - Update accounts_tmout to export and readonly TMOUT (Watson Sato
<wsato@redhat.com>)
 - Make krb5 rules applicable only to older versions of certain package.
(Gabriel Becker <ggasparb@redhat.com>)
 - Create rule to cover OL08-00-020262 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to cover OL08-00-020263 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to cover OL08-00-020264 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Introduce rule passwd_system-auth_substack (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Create rule to cover OL08-00-030030 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to cover OL08-00-010572 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to cover OL08-00-010424 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to configure_tmux_lock_after_time (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update configure_tmux_lock_after_time (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - OCP4: Kubernetes 1.24+ does not support the insecure-port flag (Jakub Hrozek
<jhrozek@redhat.com>)
 - Update stability of RHEL8 STIG (Watson Sato <wsato@redhat.com>)
 - RHEL8 STIG: Install redhat gpg key (Watson Sato <wsato@redhat.com>)
 - Move method to parent class (Jan Černý <jcerny@redhat.com>)
 - Remove unused code (Jan Černý <jcerny@redhat.com>)
 - Refactor: extract method (Jan Černý <jcerny@redhat.com>)
 - Add sysctl rules to anssi (anivan-suse <anastasija.ivanovic@suse.com>)
 - fedora 34 is EOL since 2022-06-07 (Markus Linnala <Markus.Linnala@knowit.fi>)
 - fix: ansible_sshd_set: sshd_config is case-insensitive (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Fix sssd_enable_smartcards case sensitivity (Hunter Jones
<hjones2199@gmail.com>)
 - Update file_owner_var_log (Matthew Burket <mburket@redhat.com>)
 - Update file_owner_var_log (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_var_log_messages (Matthew Burket <mburket@redhat.com>)
 - Update file_groupowner_var_log (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_tmp_nosuid (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_tmp_nexec (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_tmp_nodev (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_nodev (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_log_nosuid (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_log_audit_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Update mount_option_var_log_noexec (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_log_nodev (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_var_log_audit_noexec (Matthew Burket
<mburket@redhat.com>)
 - Update mount_option_var_log_audit_node (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_boot_nodev (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_tmp_noexec (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_tmp_noexec (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_tmp_nodev (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_home_nodev (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_dev_shm_nosuid (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_dev_shm_noexec (Matthew Burket <mburket@redhat.com>)
 - Update mount_option_dev_shm_nodev (Matthew Burket <mburket@redhat.com>)
 - Update disable_ctrlaltdel_reboot (Matthew Burket <mburket@redhat.com>)
 - Update service_fapolicyd_enabled (Matthew Burket <mburket@redhat.com>)
 - Update package_openssh-server_installed (Matthew Burket <mburket@redhat.com>)
 - Update package_crypto-policies_installed (Matthew Burket
<mburket@redhat.com>)
 - Update package_usbguard_installed (Matthew Burket <mburket@redhat.com>)
 - Update package_opensc_installed (Matthew Burket <mburket@redhat.com>)
 - Update ensure_gpgcheck_local_packages (Matthew Burket <mburket@redhat.com>)
 - Update package_fapolicyd_installed (Matthew Burket <mburket@redhat.com>)
 - Update package_subscription-manager_installed (Matthew Burket
<mburket@redhat.com>)
 - Update package_sudo_installed (Matthew Burket <mburket@redhat.com>)
 - Update package_chrony_installed (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to package_tmux_installed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_aide_installed (Matthew Burket
<mburket@redhat.com>)
 - Allow srg_rule_audit to audit a whole SRG (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to configure_bashrc_exec_tmux (Matthew Burket
<mburket@redhat.com>)
 - Fix usage of an undefined variable (Jan Černý <jcerny@redhat.com>)
 - Update configure_openssl_tls_crypto_policy (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - OCP4 STIG: Only use resource_requests_quota directly, not its subtests (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add package_tftp-server_removed to ANSSI (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Use Ansible from the Fedora repos in the nightly (Matthew Burket
<mburket@redhat.com>)
 - Remove unused utils (Jan Černý <jcerny@redhat.com>)
 - Add tests to file_ownership_var_log_audit_stig (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update file_ownership_var_log_audit_stig [rhel8] (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update file_ownership_var_log_audit_stig for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OL8 STIG profile comments (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update OL8 STIG profiles to reflect v1r2 revision (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update references in OL8 STIG rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Clean and update OL8 STIG profile (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add missing OL7 stig IDs (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Check for module blacklist on RHCOS4 (Watson Sato <wsato@redhat.com>)
 - Add fapolicyd_prevent_home_folder_access for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - add comment to audit rules which require blankline at the end (Vojtech
Polasek <vpolasek@redhat.com>)
 - strip trailing blank lines for some rules using audit-file_contents template
(Vojtech Polasek <vpolasek@redhat.com>)
 - Update SRG-APP-000101-CTR-000205 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000101)
 - Update no_host_based_files (Matthew Burket <mburket@redhat.com>)
 - Update no_user_host_based_files (Matthew Burket <mburket@redhat.com>)
 - Update tftpd_uses_secure_mode (Matthew Burket <mburket@redhat.com>)
 - Update display_login_attempts (Matthew Burket <mburket@redhat.com>)
 - Remove selinux_all_devicefiles_labeled from RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update installed_OS_is_vendor_supported (Matthew Burket <mburket@redhat.com>)
 - Update rpm_verify_hashes (Matthew Burket <mburket@redhat.com>)
 - Update security_patches_up_to_date (Matthew Burket <mburket@redhat.com>)
 - Add RHEL9 CCE to service_systemd-journald_enabled (Matthew Burket
<mburket@redhat.com>)
 - User urlencode filter in kubernetes remediation (Watson Sato
<wsato@redhat.com>)
 - Update SRG-APP-000023-CTR-000055 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000023)
 - Update the status with inherently met for OCP4 controls (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>)
 - Update the control status with not applicable (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>)
 - Select the correct macro for set_password_hashing_algorithm_passwordauth
(Marcus Burghardt <maburgha@redhat.com>)
 - The separate partition is to meet FMT_SMF_EXT.1's Configure local audit
storage capacity. (Jan Pazdziora <jpazdziora@redhat.com>)
 - products/alinux3: supports Alibaba Cloud Linux 3 (YiLin.Li
<YiLin.Li@linux.alibaba.com>)
 - Fix rule sysctl_kernel_yama_ptrace_scope and sysctl_kernel_core_pattern
(vincent <wenshen@redhat.com>)
 - Fix OCIL entry for world_writable_programs rule (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Introduce variable for user init files (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update accounts_user_dot_no_world_writable_programs (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Set missing_parameter_pass to false in auditd_local_events (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update SRG-OS-000269-GPOS-00103 (Matthew Burket <mburket@redhat.com>)
 - Update postfix_prevent_unrestricted_relay (Matthew Burket
<mburket@redhat.com>)
 - Update network_sniffer_disabled (Matthew Burket <mburket@redhat.com>)
 - Update network_configure_name_resolution (Matthew Burket
<mburket@redhat.com>)
 - Removed from libreswan_approved_tunnels from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix srg_requirement in service_firewalld_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add new rule configured_firewalld_default_deny (Matthew Burket
<mburket@redhat.com>)
 - Remove grub2_disable_interactive_boot from RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Remove grub2_kernel_trust_cpu_rng from RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add SRG-OS-000480-GPOS-00230 to fapolicyd rules (Matthew Burket
<mburket@redhat.com>)
 - Fail sshd_disable_compression if parameter missing (Watson Sato
<wsato@redhat.com>)
 - Remove rule harden_ssh_client_crypto_policy (Jan Černý <jcerny@redhat.com>)
 - Set var_system_crypto_policy=fips (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to package_crypto-policies_installed (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext for configure_crypto_policy (Jan Černý <jcerny@redhat.com>)
 - Address pull request feedback from #8960 (Matthew Burket
<mburket@redhat.com>)
 - Update file_group_ownership_var_log_audit tests (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update rule file_group_ownership_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update SRG-OS-000312-GPOS-00122 for the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000312-GPOS-00124 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Upate xwindows_runlevel_target (Matthew Burket <mburket@redhat.com>)
 - Remove use_kerberos_security_all_exports from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix boolean to string conversion caused by yaml.CSafeLoader (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fix CDumper issue where unexpected end-of-document three dots are inserted
(Jiri Odehnal <jodehnal@redhat.com>)
 - Fix formatting (Jiri Odehnal <jodehnal@redhat.com>)
 - Use Cloader and Cdumper in ssg.yaml and avoid error due to missing Cdumper
(Jiri Odehnal <jodehnal@redhat.com>)
 - Fix build profiling for targets with multiple outputs (Jiri Odehnal
<jodehnal@redhat.com>)
 - Update no_empty_passwords (Matthew Burket <mburket@redhat.com>)
 - Update sudo_restrict_privilege_elevation_to_authorized (Matthew Burket
<mburket@redhat.com>)
 - Upate sudoers_validate_passwd (Matthew Burket <mburket@redhat.com>)
 - Update no_shelllogin_for_systemaccounts (Matthew Burket <mburket@redhat.com>)
 - Update SRG file name to v2r3 (Jan Černý <jcerny@redhat.com>)
 - Improve the rule (Matej Tyc <matyc@redhat.com>)
 - Add the enable_authselect rule to profiles (Matej Tyc <matyc@redhat.com>)
 - Introduce authselect enabled rule (Matej Tyc <matyc@redhat.com>)
 - Update SRG-APP-000014-CTR-000035 for OCP4 STIG (Jakub Hrozek
<jhrozek@redhat.com>) (#PP-000014)
 - Properly exclude all files from analysis (Matej Tyc <matyc@redhat.com>)
 - Fix some whitespace and indentation issues (Matej Tyc <matyc@redhat.com>)
 - Call automatus, not test_suite.py (Matej Tyc <matyc@redhat.com>)
 - Rename gh actions to Automatus. (Matej Tyc <matyc@redhat.com>)
 - Refresh the script (Matej Tyc <matyc@redhat.com>)
 - Provide an adaptor to the legacy call of the test suite (Matej Tyc
<matyc@redhat.com>)
 - Introduce Automatus (Matej Tyc <matyc@redhat.com>)
 - Update SRG-APP-000089-CTR-000150 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000089)
 - Use CCI number instead of first identifier in the CCI column (Jan Černý
<jcerny@redhat.com>)
 - Use os.path for Python 2 compatibility (Jan Černý <jcerny@redhat.com>)
 - Remove fstring for Python 2 compatibility (Jan Černý <jcerny@redhat.com>)
 - Remove type annotations for Python 2 compatibility (Jan Černý
<jcerny@redhat.com>)
 - Unify 2 functions (Jan Černý <jcerny@redhat.com>)
 - Handle missing CCEs (Jan Černý <jcerny@redhat.com>)
 - Fix Python2 compatibility (Jan Černý <jcerny@redhat.com>)
 - Generate srgmap tables using Jinja (Jan Černý <jcerny@redhat.com>)
 - Update accounts_no_uid_except_zero (Matthew Burket <mburket@redhat.com>)
 - Update accounts_authorized_local_users (Matthew Burket <mburket@redhat.com>)
 - Update accounts_umask_interactive_users (Matthew Burket <mburket@redhat.com>)
 - Update accounts_user_interactive_home_directory_exists (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_umask_etc_bashrc (Matthew Burket <mburket@redhat.com>)
 - Update accounts_user_interactive_home_directory_defined (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_user_home_paths_only (Matthew Burket <mburket@redhat.com>)
 - Fix accounts_have_homedir_login_defs (Matthew Burket <mburket@redhat.com>)
 - Update accounts_user_dot_no_world_writable_programs (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_have_homedir_login_defs (Matthew Burket <mburket@redhat.com>)
 - Update aide_verify_ext_attributes (Matthew Burket <mburket@redhat.com>)
 - Override audisp_conf_path for OL7 and RHEL7 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update tests for audisp rules (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update remediations to use audisp_conf_path (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update OVAL checks to use audisp_conf_path (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update rule text to use audisp_conf_path (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add audisp_conf_path as an implied property (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update the status with does not meet for OCP4 controls (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>)
 - Increase the threshold for duplication detection (Matej Tyc
<matyc@redhat.com>)
 - Add shellcheck checks for our shell scripts (Matej Tyc <matyc@redhat.com>)
 - Further restrict files to analyze (Matej Tyc <matyc@redhat.com>)
 - remove automated field (Dhriti Shikhar <dhriti.shikhar.rokz@gmail.com>)
 - Add file_permissions_etc_passwd (anivan-suse <anastasija.ivanovic@suse.com>)
 - Include about me section in the template (Marcus Burghardt
<maburgha@redhat.com>)
 - Specify how merge rights should be requested (Marcus Burghardt
<maburgha@redhat.com>)
 - Include new issue template for requesting merge rights (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove the RHCOS4 OSPP profile (Jakub Hrozek <jhrozek@redhat.com>)
 - Move the definition of test data to template.py (Watson Sato
<wsato@redhat.com>)
 - sysctl template: Add tests for options in symlinks (Watson Sato
<wsato@redhat.com>)
 - sysctl template: Add tests for two sysctl options (Watson Sato
<wsato@redhat.com>)
 - sysctl template: Add test for option defined in two places (Watson Sato
<wsato@redhat.com>)
 - sysctl template: Add test for wrong .d option (Watson Sato
<wsato@redhat.com>)
 - sysctl template: Add test for wrong runtime value (Watson Sato
<wsato@redhat.com>)
 - sysctl template: Add test for wrong option (Watson Sato <wsato@redhat.com>)
 - sysctl template: Add test for line missing (Watson Sato <wsato@redhat.com>)
 - sysctl template: Add test for correct value (Watson Sato <wsato@redhat.com>)
 - sysctl template: Add test for commented option (Watson Sato
<wsato@redhat.com>)
 - Update SRG-APP-000014-CTR-000040 for OCP4 STIG (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>) (#PP-000014)
 - Don't add check for modprobe.conf on RHEL content (Watson Sato
<wsato@redhat.com>)
 - Update kernel_module_disabled documentation (Watson Sato <wsato@redhat.com>)
 - Add support for blacklist in kernel_module_disabled (Watson Sato
<wsato@redhat.com>)
 - Update directory_ownership_var_log_audit rule.yml (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update directory_ownership_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update directory_ownership_var_log_audit for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OVAL for enable_fips_mode (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add handling for blacklist in tests (Watson Sato <wsato@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - align rule fixtext and description (Vojtech Polasek <vpolasek@redhat.com>)
 - change OVAL (Vojtech Polasek <vpolasek@redhat.com>)
 - Configure the file analysis on a include basis (Matej Tyc <matyc@redhat.com>)
 - Update RHEL8 and RHEL9 links in sssd group.yml (Matus Marhefka
<mmarhefk@redhat.com>)
 - Remove check for disabled from SLE products (Watson Sato <wsato@redhat.com>)
 - Stop codecov for files that are not unit-testable (Matej Tyc
<matyc@redhat.com>)
 - Append email_mappings dict (Marcus Burghardt <maburgha@redhat.com>)
 - Add file_owner_etc_shadow to anssi (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Update README.md (Marcus Burghardt <maburgha@redhat.com>)
 - Update visible email in Contributors.md (Marcus Burghardt
<maburgha@redhat.com>)
 - Add ANSSI minimal profile to SLE12 (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add ensure_suse_gpgkey_installed rule to ansi sle minimal profile (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add missing cce for sle12 (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add SLE support for ensure_gpgcheck_never_disabled remediations (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Drop irrelevant rules for SLE platform (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Enable SLE12 for ANSSI minimal profile rules and add relevant CCEs (teacup-
on-rockingchair <strandjata@gmail.com>)
 - Enable timer_dnf-automatic_enabled for SLE12 platform (teacup-on-rockingchair
<strandjata@gmail.com>)
 - OCP:Fix rule kubelet_enable_streaming_connections (vincent
<wenshen@redhat.com>)
 - Add CCE to rule and this to RHEL8 sability test (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add rule to RHEL8 stability test (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Adjust for different syntax (Jan Černý <jcerny@redhat.com>)
 - OCP4: Split node and platform DISA STIG profiles (Jakub Hrozek
<jhrozek@redhat.com>)
 - Update aide_verify_acls (Matthew Burket <mburket@redhat.com>)
 - Remove aide_use_fips_hashes (Matthew Burket <mburket@redhat.com>)
 - Include SRG reference for dconf_gnome_disable_user_list (Marcus Burghardt
<maburgha@redhat.com>)
 - Update sysctl_kernel_randomize_va_space (Matthew Burket <mburket@redhat.com>)
 - Update sysctl_kernel_kptr_restrict (Matthew Burket <mburket@redhat.com>)
 - Update sysctl_user_max_user_namespaces (Matthew Burket <mburket@redhat.com>)
 - Update sysctl_net_core_bpf_jit_harden (Matthew Burket <mburket@redhat.com>)
 - Update sysctl_kernel_yama_ptrace_scope (Matthew Burket <mburket@redhat.com>)
 - Update sysctl_kernel_unprivileged_bpf_disabled (Matthew Burket
<mburket@redhat.com>)
 - Define grub2 uefi boot path for OL7 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add file system kernel modules rules to OL7 ncp (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add OL prodtype to rules and remediations (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add OL7 ncp profile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Update sysctl_kernel_kexec_load_disabled (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_ip_forward (Matthew Burket <mburket@redhat.com>)
 - Fix RHEL8 STIG ID for sysctl_net_ipv4_ip_forward (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_default_send_redirects (Matthew Burket
<mburket@redhat.com>)
 - Separate tests for blacklist and install (Watson Sato <wsato@redhat.com>)
 - Improve Ansible remediation for accounts_umask_etc_profile (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove double "that" from Ansible task title (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove harden_* rules (Jan Černý <jcerny@redhat.com>)
 - Update OCIL, add fixtext and srg in configure_ssh_crypto_policy (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext and SRG and update configure_openssl_tls_crypto_policy (Jan
Černý <jcerny@redhat.com>)
 - Add fixtext and SRG and update configure_openssl_crypto_policy (Jan Černý
<jcerny@redhat.com>)
 - Update sysctl_net_ipv4_conf_all_send_redirects (Matthew Burket
<mburket@redhat.com>)
 - Remove sysctl_net_ipv4_icmp_ignore_bogus_error_responses from RHEL9 STIG
(Matthew Burket <mburket@redhat.com>)
 - Update sysctl_net_ipv4_icmp_echo_ignore_broadcasts (Matthew Burket
<mburket@redhat.com>)
 - Pull the sysctl_net_ipv4_conf_default_* rules (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_default_accept_source_route (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_default_accept_redirects (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_kernel_core_pattern (Matthew Burket <mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_all_secure_redirects (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_all_rp_filter (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_all_log_martians (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_all_accept_source_route (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv4_conf_all_accept_redirects (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv6_conf_default_accept_source_route (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv6_conf_default_accept_redirects (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv6_conf_default_accept_ra (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv6_conf_all_forwarding (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv6_conf_all_accept_source_route (Matthew Burket
<mburket@redhat.com>)
 - Update sysctl_net_ipv6_conf_all_accept_redirects (Matthew Burket
<mburket@redhat.com>)
 - Add a missing new line at the end of the file (Jan Černý
<jcerny@redhat.com>)
 - Update sysctl_net_ipv6_conf_all_accept_ra (Matthew Burket
<mburket@redhat.com>)
 - Resolve the auditctl and augenrules conflict (Jan Černý
<jcerny@redhat.com>)
 - Update rule audit_rules_suid_privilege_function (Jan Černý
<jcerny@redhat.com>)
 - Include missing rule in STIG profile for RHEL7 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update partition_for_var_tmp (Matthew Burket <mburket@redhat.com>)
 - Update partition_for_var_log_adit (Matthew Burket <mburket@redhat.com>)
 - Update partition_for_var_log (Matthew Burket <mburket@redhat.com>)
 - Update partition_for_var (Matthew Burket <mburket@redhat.com>)
 - Update partition_for_tmp (Matthew Burket <mburket@redhat.com>)
 - Add macro srg_requirement_separate_partition (Matthew Burket
<mburket@redhat.com>)
 - Update partition_for_home (Matthew Burket <mburket@redhat.com>)
 - Add fixtext_separate_partition macro (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement (Jan Černý <jcerny@redhat.com>)
 - Use a specific value in auditd_data_disk_error_action_stig (Jan Černý
<jcerny@redhat.com>)
 - Use a Jinja macro istead of custom code (Jan Černý <jcerny@redhat.com>)
 - Add a new rule for audit max_log_file (Jan Černý <jcerny@redhat.com>)
 - Add a new rule for audit disk_full_action (Jan Černý <jcerny@redhat.com>)
 - Add a new rule for audit disk_error_action (Jan Černý <jcerny@redhat.com>)
 - Replace the operating system by full_name (Jan Černý <jcerny@redhat.com>)
 - Remove variable from the original file (Jan Černý <jcerny@redhat.com>)
 - Update OCIL and fixtext in auditd_data_retention_max_log_file_action (Jan
Černý <jcerny@redhat.com>)
 - Update OCIL and add fixtext for auditd_data_retention_max_log_file_action
(Jan Černý <jcerny@redhat.com>)
 - Remove duplicate text (Jan Černý <jcerny@redhat.com>)
 - Update OCIL and add fixtext for auditd_data_disk_full_action (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL and add fixtext for auditd_data_disk_error_action (Jan Černý
<jcerny@redhat.com>)
 - products/alinux2 && controls: Add CIS Alibaba Cloud Linux (Aliyun Linux) 2
profiles (YiLin.Li <YiLin.Li@linux.alibaba.com>)
 - Use target type instead of rule spec (Jan Černý <jcerny@redhat.com>)
 - Let's not Jinja expand Vi swp files (Watson Sato <wsato@redhat.com>)
 - Organize tests and objects to reduce check size (Watson Sato
<wsato@redhat.com>)
 - Merge test on similar objects to a single test (Watson Sato
<wsato@redhat.com>)
 - Update OCIL in unsuccessful syscall rules (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and srg_requirement for
audit_rules_unsuccessful_file_modification_open_by_handle_at (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and srg_requirement for
audit_rules_unsuccessful_file_modification_open (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and srg_requirement for
audit_rules_unsuccessful_file_modification_ftruncate (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and srg_requirement for
audit_rules_unsuccessful_file_modification_creat (Matthew Burket
<mburket@redhat.com>)
 - Update srg_requirement for audit_rules_unsuccessful_file_modification_openat
(Matthew Burket <mburket@redhat.com>)
 - Add ocil macros for unsuccessful syscall audits (Matthew Burket
<mburket@redhat.com>)
 - Fix docs for the srg_requirement_audit_syscall macro (Matthew Burket
<mburket@redhat.com>)
 - Add a macro for srg requirements for auditing  unsuccessful syscalls (Matthew
Burket <mburket@redhat.com>)
 - Remove duplicative audit rules in SRG-OS-000064-GPOS-00033 (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to
audit_rules_unsuccessful_file_modification_rename (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to
audit_rules_unsuccessful_file_modification_renameat (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to
audit_rules_unsuccessful_file_modification_unlink (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to
audit_rules_unsuccessful_file_modification_unlink (Matthew Burket
<mburket@redhat.com>)
 - Remove line before in macro srg_requirement_audit_syscall (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000064-GPOS-00033 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix spelling in titles in audit_rules_unsuccessful_* (Matthew Burket
<mburket@redhat.com>)
 - Update sshd_use_strong_rng rationale (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Set metadata for OL8 STIG_GUI profile (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add srg_requirement to rsyslog_remote_loghost (Matthew Burket
<mburket@redhat.com>)
 - Update rsyslog_nolisten (Matthew Burket <mburket@redhat.com>)
 - Update rsyslog_cron_logging (Matthew Burket <mburket@redhat.com>)
 - Update dconf_gnome_disable_ctrlaltdel_reboot (Matthew Burket
<mburket@redhat.com>)
 - Remove dconf_gnome_remote_access_encryption from the RHEL9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Fix bash in two rules to manage commented lines (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Relocate shebang in tests (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Remove dconf_gnome_disable_restart_shutdown from the RHEL9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Remove dconf_db_up_to_date from RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to auditd_write_logs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to auditd_log_format (Matthew Burket
<mburket@redhat.com>)
 - Remove auditd_data_retention_flush from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Address feedback in 10-ocil.jinja (Matthew Burket <mburket@redhat.com>)
 - Remove newline at the start of the systemd_ocil_service_disabled (Matthew
Burket <mburket@redhat.com>)
 - Fix docs on srg_requirement_service_disabled (Matthew Burket
<mburket@redhat.com>)
 - Fix up fixtext_service_disabled macro (Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to service_systemd-coredump_disabled (Matthew
Burket <mburket@redhat.com>)
 - Updatue service_firewalld_enabled for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update service_rsyslog_enabled for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update service_syslogng_enabled for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update service_debug-shell_disabled for the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update service_rngd_enabled for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to service_kdump_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext_service_disabled macro (Matthew Burket <mburket@redhat.com>)
 - Add sudo in the fixtext_service_enabled macro (Matthew Burket
<mburket@redhat.com>)
 - Add the macro ocil_clause_service_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add the macro srg_requirement_service_disabled (Matthew Burket
<mburket@redhat.com>)
 - Fix formatting for srg_requirement_service_enabled (Matthew Burket
<mburket@redhat.com>)
 - Fix OCIL and fixtext sshd_use_strong_rng (Matthew Burket
<mburket@redhat.com>)
 - Update sshd_x11_use_localhost (Matthew Burket <mburket@redhat.com>)
 - Update sshd_use_strong_rng (Matthew Burket <mburket@redhat.com>)
 - Remove sshd_use_priv_separation from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update sshd_rekey_limit (Matthew Burket <mburket@redhat.com>)
 - Update sshd_print_last_log (Matthew Burket <mburket@redhat.com>)
 - Remove sshd_enable_x11_forwarding from RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update sshd_enable_strictmodes (Matthew Burket <mburket@redhat.com>)
 - Update sshd_disable_x11_forwarding (Matthew Burket <mburket@redhat.com>)
 - Update sshd_disable_user_known_hosts (Matthew Burket <mburket@redhat.com>)
 - Update sshd_disable_root_login (Matthew Burket <mburket@redhat.com>)
 - Remove sshd_disable_rhosts_rsa from SRG-OS-000480-GPOS-00227 (Matthew Burket
<mburket@redhat.com>)
 - Update sshd_disable_rhosts (Matthew Burket <mburket@redhat.com>)
 - Update sshd_disable_kerb_auth (Matthew Burket <mburket@redhat.com>)
 - Update sshd_disable_gssapi_auth (Matthew Burket <mburket@redhat.com>)
 - Update sshd_disable_empty_passwords (Matthew Burket <mburket@redhat.com>)
 - Update shd_disable_compression (Matthew Burket <mburket@redhat.com>)
 - Make macros loading procedure deterministic and designate 01_general.jinja
file to be first in the sequence (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - ANSSI enabled for file_permissions_unaurorized_world_writable (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Update mount_option_nosuid_removable_partitions (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to mount_option_noexec_removable_partitions
(Matthew Burket <mburket@redhat.com>)
 - Update mount_option_nodev_removable_partitions (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to mount_option_nodev_nonroot_local_partitions (Matthew
Burket <mburket@redhat.com>)
 - Fix mount_option_home_nosuid (Matthew Burket <mburket@redhat.com>)
 - Fixup srg_requirement to mount_option_home_noexec (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to mount_option_boot_nosuid (Matthew Burket
<mburket@redhat.com>)
 - Add ensure_gpgcheck_never_disabled to STIG (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add macro srg_requirement_mount_option (Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to mount_option_nosuid_remote_filesystems
(Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to mount_option_noexec_remote_filesystems
(Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to mount_option_nodev_remote_filesystems
(Matthew Burket <mburket@redhat.com>)
 - Remove mount_option_krb_sec_remote_filesystems from SRG-OS-000480-GPOS-00227
(Matthew Burket <mburket@redhat.com>)
 - Enable all rhel8 profiles in centos8 product (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix srg_requirement_*_permission name (Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_ungroupowned (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_home_directories (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement file_groupownership_home_directories (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permission_user_init_files (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_sshd_private_key (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_sshd_private_key (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_sshd_config (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_sshd_config (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_groupowner_sshd_config (Matthew
Burket <mburket@redhat.com>)
 - Pull the cron.allow rules from the RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_cron_monthly (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_cron_weekly (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_crontab (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_cron_hourly (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_cron_daily (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_permissions_cron_d (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_directory_mode (Matthew Burket
<mburket@redhat.com>)
 - Fix directory mode commont (Matthew Burket <mburket@redhat.com>)
 - Add macro srg_requirement_file_mode (Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_crontab (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_cron_weekly (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_cron_monthly (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_cron_hourly (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_cron_daily (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_owner_cron_d (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_groupowner_crontab (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_groupowner_cron_weekly (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_groupowner_cron_monthly (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_groupowner_cron_hourly (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_groupowner_cron_daily (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to file_groupowner_cron_d (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_directory_group_owner (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_directory_owner (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_file_group_owner (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_file_owner (Matthew Burket <mburket@redhat.com>)
 - Add macro fixtext_file_permissions (Matthew Burket <mburket@redhat.com>)
 - Add macro fixtext_directory_permissions (Matthew Burket <mburket@redhat.com>)
 - Add macro fixtext_directory_group_owner (Matthew Burket <mburket@redhat.com>)
 - Add macro fixtext_directory_owner (Matthew Burket <mburket@redhat.com>)
 - Add macro fixtext_file_group_owner (Matthew Burket <mburket@redhat.com>)
 - Add macro fixtext_file_owner (Matthew Burket <mburket@redhat.com>)
 - Add new line to the end of files (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Apply CPEs for krb5 packages to rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Introduce applicability CPEs for krb5 packages (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix build issues with auditd_data_retention_admin_space_left_act and
auditd_data_retention_space_left_action (Matthew Burket <mburket@redhat.com>)
 - Fix template mode (Jan Černý <jcerny@redhat.com>)
 - Apply suggestions from code review (Matthew Burket <m@tthewburket.com>)
 - Update the fixtext for package installed and removed (Matthew Burket
<mburket@redhat.com>)
 - OCP4: Add compat rules for checking API server and kubelet TLS certs and keys
on OCP releases <= 4.8 (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: Don't use a list in platforms (Jakub Hrozek <jhrozek@redhat.com>)
 - Do not try to define the rc value in the Rule Test Suite mode. (Gabriel
Becker <ggasparb@redhat.com>)
 - unit test the new function derive_id_from_file_name (Vojtech Polasek
<vpolasek@redhat.com>)
 - extract the function which derives id from the file name (Vojtech Polasek
<vpolasek@redhat.com>)
 - correctly load files with multiple dots in file name (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add fixtext and srg_requirement to package_tuned_removed (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_scap-security-guide_installed
(Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_rng-tools_installed (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_openscap-scanner_installed
(Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_nss-tools_installed (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_gnutls-utils_installed (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_MFEhiplsm_installed (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_gdm_removed (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_policycoreutils-python-
utils_installed (Matthew Burket <mburket@redhat.com>)
 - Add fixtext and update srg_requirement for package_libreswan_installed
(Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_openssh-clients_installed (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_quagga_removed (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to package_tftp-server_removed (Matthew
Burket <mburket@redhat.com>)
 - Add a fixtext macro for package installed (Matthew Burket
<mburket@redhat.com>)
 - Clean up EOF on auditd_data_retention_space_left (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to auditd_data_retention_space_left_action (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to auditd_data_retention_space_left_percentage (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to auditd_data_retention_admin_space_left_action (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to auditd_data_retention_action_mail_acct (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to auditd_data_disk_full_action (Matthew Burket
<mburket@redhat.com>)
 - Remove obsolete rules from SRG-OS-000480-GPOS-00227. (Gabriel Becker
<ggasparb@redhat.com>)
 - Group rules from SRG-OS-000480-GPOS-00227 into categories. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add fixtext to auditd_data_retention_space_left_action (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to auditd_data_retention_space_left_percentage (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to auditd_data_retention_admin_space_left_action (Matthew Burket
<mburket@redhat.com>)
 - Upadate fixtext in auditd_data_retention_action_mail_acct (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000343-GPOS-00134 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update RHEL8 profile stability data (Watson Sato <wsato@redhat.com>)
 - Select correct rules for RHEL-07-010270 (Watson Sato <wsato@redhat.com>)
 - Remove RHEL7 stigid from rule audit rule (Watson Sato <wsato@redhat.com>)
 - Select rule for RHEL-07-010200 V-204415 (Watson Sato <wsato@redhat.com>)
 - Remove unsuccessful audit syscall rules from SRG-OS-000468-GPOS-00212.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove RHEL7 stigid from emergency target rule (Watson Sato
<wsato@redhat.com>)
 - Fix a python2 syntax issue in the Test Suite. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update SRG-OS-000392-GPOS-00172 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Remove RHEL7 stigid from rule (Watson Sato <wsato@redhat.com>)
 - Remove RHEL7 stigid from xorg-x11-server-commom removed (Watson Sato
<wsato@redhat.com>)
 - Fix typo in rule ID (Watson Sato <wsato@redhat.com>)
 - Apply suggestions from code review (Edgar Aguilar <xeicker@gmail.com>)
 - Update audit_immutable_login_uids yaml file (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - New issue template for Product Removal (Marcus Burghardt
<maburgha@redhat.com>)
 - Include an issue template for changes proposals (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove the new_rule issue template (Marcus Burghardt <maburgha@redhat.com>)
 - Remove stigid from SSHD rules not STIG selected (Watson Sato
<wsato@redhat.com>)
 - Remove stigids from abrt rules not STIG selected (Watson Sato
<wsato@redhat.com>)
 - Revert undesired change made in 6404c2075. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update docs/manual/developer/01_introduction.md (Gabriel Becker
<ggasparb@redhat.com>)
 - update documentation status to false (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>)
 - Fix a traceback in combined mode (Jan Černý <jcerny@redhat.com>)
 - k8scontent: Switch to using `metal-toolbox/container-push` workflow (Juan
Antonio Osorio <juan.osoriorobles@eu.equinix.com>)
 - Simplify the message around the label-less approach (Marcus Burghardt
<maburgha@redhat.com>)
 - Update creating DISA STIG docs (Matthew Burket <mburket@redhat.com>)
 - Update rule schema (Matthew Burket <mburket@redhat.com>)
 - Update the style guide on rules (Matthew Burket <mburket@redhat.com>)
 - Add pygithub to build guide (Matthew Burket <mburket@redhat.com>)
 - Get sphinxcontrib-napoleon from GitHub (Matthew Burket <mburket@redhat.com>)
 - Fix header underrun in docs (Matthew Burket <mburket@redhat.com>)
 - Revise the removal policy (Matthew Burket <mburket@redhat.com>)
 - Improve wording on the removal policy (Matthew Burket <m@tthewburket.com>)
 - Update audit_immutable_login_uids template (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update auditd_data_disk_error_action (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update auditd_data_disk_full_action (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Publish the coverage ID and restrict repo (Matej Tyc <matyc@redhat.com>)
 - Add 'key' parameter to macro ocil_audit_rules_unsuccessful_file_modification
(Jan Černý <jcerny@redhat.com>)
 - Rename SRG file according to latest SRG GPOS release. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update SRG GPOS to latest version V2R3. (Gabriel Becker
<ggasparb@redhat.com>)
 - Move join_list to general.jinja (Jan Černý <jcerny@redhat.com>)
 - Fix typo (Jan Černý <jcerny@redhat.com>)
 - Include guidelines for labels (Marcus Burghardt <maburgha@redhat.com>)
 - Incremented instructions to file issues (Marcus Burghardt
<maburgha@redhat.com>)
 - Add CCE for new audit rules in RHEL9 product. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use parenteshis in nist reference for new audit rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add CCE to rule and this to RHEL8 sability test (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Generate tmux applicability cpe (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add ol support in cpes_to_platform function (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Do not use block asignments (Jan Černý <jcerny@redhat.com>)
 - Change the macro to create a human readable sentence (Jan Černý
<jcerny@redhat.com>)
 - Remove rules not present in RHEL 8 (Jan Černý <jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Fix macro fixtext_audit_rules_unsuccessful_file_modification_rule_order (Jan
Černý <jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Fix macro fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write
(Jan Černý <jcerny@redhat.com>)
 - Fix macro fixtext_audit_rules_unsuccessful_file_modification_o_creat (Jan
Černý <jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Create OCIL macro for template
audit_rules_unsuccessful_file_modification_rule_order (Jan Černý
<jcerny@redhat.com>)
 - Use a more specific OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Create OCIL macro for template
audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý
<jcerny@redhat.com>)
 - Use macro ocil_audit_rules_unsuccessful_file_modification_o_creat (Jan
Černý <jcerny@redhat.com>)
 - Introduce macro ocil_audit_rules_unsuccessful_file_modification_o_creat (Jan
Černý <jcerny@redhat.com>)
 - Use the OCIL macro corresponding to the template (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL by using a more specific jinja macro (Jan Černý
<jcerny@redhat.com>)
 - Add OCIL macro (Jan Černý <jcerny@redhat.com>)
 - Align fixtext with bash remediation (Jan Černý <jcerny@redhat.com>)
 - Improve vertical whitespace (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_unlinkat (Jan
Černý <jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_unlink (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_renameat (Jan
Černý <jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_rename (Jan Černý
<jcerny@redhat.com>)
 - Allow to add the syscall grouping as a parameter (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_openat_rule_order
(Jan Černý <jcerny@redhat.com>)
 - Add fixtext to
audit_rules_unsuccessful_file_modification_openat_o_trunc_write (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_openat_o_creat (Jan
Černý <jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_open_rule_order
(Jan Černý <jcerny@redhat.com>)
 - Add a fixtext to
audit_rules_unsuccessful_file_modification_open_o_trunc_write (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_rules_unsuccessful_file_modification_open_o_creat (Jan
Černý <jcerny@redhat.com>)
 - Add a fixtext to
audit_rules_unsuccessful_file_modification_open_by_handle_at_rule_order (Jan
Černý <jcerny@redhat.com>)
 - Create a fixtext macro for template
audit_rules_unsuccessful_file_modification_rule_order (Jan Černý
<jcerny@redhat.com>)
 - Move a macro from bash.jinja to general.jinja (Jan Černý
<jcerny@redhat.com>)
 - Refactor: Extract macro
audit_remediation_unsuccessful_file_modification_detailed_audit_file_content
(Jan Černý <jcerny@redhat.com>)
 - Add fixtext to
audit_rules_unsuccessful_file_modification_open_by_handle_at_o_trunc_write (Jan
Černý <jcerny@redhat.com>)
 - Introduce macro
fixtext_audit_rules_unsuccessful_file_modification_o_trunc_write (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext in
audit_rules_unsuccessful_file_modification_open_by_handle_at_o_creat (Jan
Černý <jcerny@redhat.com>)
 - Introduce macro fixtext_audit_rules_unsuccessful_file_modification_o_creat
(Jan Černý <jcerny@redhat.com>)
 - Rename fixtext macro fixtext_audit_rules_unsuccessful_file_modification_creat
(Jan Černý <jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Add docs for srg_requirement_service_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_audit_installed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to service_auditd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement_service_enabled macro (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_package_installed (Matthew Burket
<mburket@redhat.com>)
 - Add severity to required attributes for rules schema (Matthew Burket
<mburket@redhat.com>)
 - Add reboot rules to SRG-OS-000477-GPOS-00222 (Matthew Burket
<mburket@redhat.com>)
 - Add new rule audit_privileged_commands_init (Matthew Burket
<mburket@redhat.com>)
 - Add a new rule aaudit_privileged_commands_poweroff (Matthew Burket
<mburket@redhat.com>)
 - Add new rule audit_privileged_commands_reboot (Matthew Burket
<mburket@redhat.com>)
 - Add rule audit_privileged_commands_shutdown (Matthew Burket
<mburket@redhat.com>)
 - Revise removal of products policy (Matthew Burket <mburket@redhat.com>)
 - Adjust formatting for product removal (Matthew Burket <m@tthewburket.com>)
 - Update tests for bash_ensure_ini_config (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ansible in sssd_enable_smartcards (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add OCIL, SRG Requirement, and fixtext to audit_rules_execution_restorecon
(Matthew Burket <mburket@redhat.com>)
 - Add does not meet text to SRG-OS-000274-GPOS-00104 (Matthew Burket
<mburket@redhat.com>)
 - Exclude files from Code Climate (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to auditd_local_events (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement and fixtext to configure_usbguard_auditbackend (Matthew
Burket <mburket@redhat.com>)
 - Update OCIL, Fix text, and SRG Requirement for
audit_rules_privileged_commands_pt_chown (Matthew Burket <mburket@redhat.com>)
 - Update OCIL, Fix text, and SRG Requirement for
audit_rules_privileged_commands_umount (Matthew Burket <mburket@redhat.com>)
 - Update OCIL, Fix text, and SRG Requirement for
audit_rules_privileged_commands_mount (Matthew Burket <mburket@redhat.com>)
 - Add fixtext to package_nfs-utils_removed (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to package_telnet-server_removed (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to package_sendmail_removed (Matthew Burket <mburket@redhat.com>)
 - Add fixtext to kernel_module_atm_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to kernel_module_can_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to kernel_module_ticp_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to kernel_module_cramfs_disabled (Matthew Burket
<mburket@redhat.com>)
 - Grammar fix in chronyd_no_chronyc_network (Matthew Burket
<mburket@redhat.com>)
 - Add for fixtext package_gssproxy_removed (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext for package_iprutils_removed (Matthew Burket
<mburket@redhat.com>)
 - Add fix text macro for kernel module removal (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext macro for package removal (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to package_iprutils_removed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_gssproxy_removed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_cramfs_disabled (Matthew Burket
<mburket@redhat.com>)
 - Update srg_requirement on kernel_module_bluetooth_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_tipc_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_sctp_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_rds_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_firewire-core_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_dccp_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_can_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_atm_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_telnet-server_removed (Matthew Burket
<mburket@redhat.com>)
 - Update ocil_clause on chronyd_client_only (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_nfs-utils_removed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_sendmail_removed (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_kernel_module_disable (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_package_removed (Matthew Burket
<mburket@redhat.com>)
 - Remove rules from  SRG-OS-000095-GPOS-00049 that are not in RHEL9 (Matthew
Burket <mburket@redhat.com>)
 - Upload artifacts for OCP4 SRG Mapping if its on a pull request (Matthew
Burket <mburket@redhat.com>)
 - Don not pass target as a parameter (Jan Černý <jcerny@redhat.com>)
 - Merge _iterate_over_rules in _get_rules_to_test (Jan Černý
<jcerny@redhat.com>)
 - update mapping of duplicate mails in contributors.py (Vojtech Polasek
<vpolasek@redhat.com>)
 - update contributors (Vojtech Polasek <vpolasek@redhat.com>)
 - Rename method (Jan Černý <jcerny@redhat.com>)
 - Split functions (Jan Černý <jcerny@redhat.com>)
 - Rename "target" (Jan Černý <jcerny@redhat.com>)
 - Improve handling templated test scenarios (Jan Černý <jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Move Rule to rule.py (Jan Černý <jcerny@redhat.com>)
 - Simplify condition (Jan Černý <jcerny@redhat.com>)
 - Do not duplicate check for the rule in the benchmark (Jan Černý
<jcerny@redhat.com>)
 - Check that rule exists in the benchmark sooner (Jan Černý
<jcerny@redhat.com>)
 - Inverse condition (Jan Černý <jcerny@redhat.com>)
 - Move the rule ID comparison sooner (Jan Černý <jcerny@redhat.com>)
 - Pass only the rule short ID (Jan Černý <jcerny@redhat.com>)
 - Move iterate_over_rules to RuleChecker class (Jan Černý
<jcerny@redhat.com>)
 - Split the decision if a rule should be tested (Jan Černý
<jcerny@redhat.com>)
 - Update description of the Rule named tuple fields (Jan Černý
<jcerny@redhat.com>)
 - Merge _get_all_rule_scenarios and fetch_test_scenarios (Jan Černý
<jcerny@redhat.com>)
 - Split responsibilities (Jan Černý <jcerny@redhat.com>)
 - Move scenario object creation (Jan Černý <jcerny@redhat.com>)
 - Move fetch_test_scenarios from common to rule (Jan Černý
<jcerny@redhat.com>)
 - Decouple responsibility for rules from scenarios (Jan Černý
<jcerny@redhat.com>)
 - Extract function fetch_test_scenarios (Jan Černý <jcerny@redhat.com>)
 - Pass rule into the Rule named tuple (Jan Černý <jcerny@redhat.com>)
 - Move test_config to the function where it's used (Jan Černý
<jcerny@redhat.com>)
 - Pass the template_builder from outside of iterate_over_rules (Jan Černý
<jcerny@redhat.com>)
 - Add local_env_yaml to Rule named tuple (Jan Černý <jcerny@redhat.com>)
 - Extract function fetch_local_test_scenarios (Jan Černý <jcerny@redhat.com>)
 - Extract function fetch_templated_test_scenarios (Jan Černý
<jcerny@redhat.com>)
 - Move definition of the template_name variable (Jan Černý
<jcerny@redhat.com>)
 - Separate profiles overriding to a special method (Jan Černý
<jcerny@redhat.com>)
 - Add unit test on Scenario class (Jan Černý <jcerny@redhat.com>)
 - Change methods in the Scenario class (Jan Černý <jcerny@redhat.com>)
 - Simplify code (Jan Černý <jcerny@redhat.com>)
 - Promote Scenario from named tuple to a class (Jan Černý
<jcerny@redhat.com>)
 - Extract Method _scenario_matches_platform (Jan Černý <jcerny@redhat.com>)
 - Extract function _scenario_matches_regex (Jan Černý <jcerny@redhat.com>)
 - Extract method _get_rule_scenarios (Jan Černý <jcerny@redhat.com>)
 - Change misleading named tuple member name (Jan Černý <jcerny@redhat.com>)
 - Remove parameters that are always class members (Jan Černý
<jcerny@redhat.com>)
 - Extract method _get_scenarios_by_rule_id (Jan Černý <jcerny@redhat.com>)
 - Rename method _get_scenarios to _filter_scenarios (Jan Černý
<jcerny@redhat.com>)
 - Remove unused parameter rule_dir (Jan Černý <jcerny@redhat.com>)
 - Update OCIL and fixtext in audit_rules_dac_modification_umount (Matthew
Burket <mburket@redhat.com>)
 - Update OCIL for audit_rules_execution_chacl (Matthew Burket
<mburket@redhat.com>)
 - Fix OCIL for audit_rules_execution_chcon (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and fixtext in audit_rules_execution_setfiles (Matthew Burket
<mburket@redhat.com>)
 - Fix doc error in fixtext_audit_rules_privileged_commands (Matthew Burket
<mburket@redhat.com>)
 - Fix EOF in a macro files (Matthew Burket <mburket@redhat.com>)
 - Fix paramter error in complete_ocil_entry_audit_privileged_commands macro
(Matthew Burket <mburket@redhat.com>)
 - Add a macro ocil_clause_audit (Matthew Burket <mburket@redhat.com>)
 - Fix doc error in complete_ocil_entry_audit_privileged_commands (Matthew
Burket <mburket@redhat.com>)
 - Add docs for fixtext_audit_rules_command macro (Matthew Burket
<mburket@redhat.com>)
 - Rename fixtext_privileged_commands to better fit (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and OCIL Clause in audit_rules_execution_setsebool (Matthew
Burket <mburket@redhat.com>)
 - Update OCIL and OCIL Clause in audit_rules_execution_setfiles (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and OCIL Clause in audit_rules_execution_semanage (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and OCIL Clause in audit_rules_execution_setfacl (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and OCIL Clause in audit_rules_execution_chacl (Matthew Burket
<mburket@redhat.com>)
 - Fix srg_rule_audit to also check for None values (Matthew Burket
<mburket@redhat.com>)
 - Add missing CCEs for RHEL9 (Matthew Burket <mburket@redhat.com>)
 - Clean up code climate issues (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_command_pam_timestamp_check (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_delete
(Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_finit
(Matthew Burket <mburket@redhat.com>)
 - Add fixtext and srg_requirement to audit_rules_kernel_module_loading_init
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_command_userhelper (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_command_unix_upate (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_command_unix_chkpwd (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_command_sudoedit (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_sudo
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_ssh-
keysign (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_su
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_command_ssh-
agent (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_command_postqueue (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_commands_postdrop (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_passwd
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_newgrp
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_kmod
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_commands_gpasswd (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_commands_crontab (Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_chsh
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext audit_rules_privileged_commands_chage
(Matthew Burket <mburket@redhat.com>)
 - Add OCIL, SRG Requirement, and fixtext
audit_rules_privileged_commands_usermod (Matthew Burket <mburket@redhat.com>)
 - Update OCIL, OCIL clause and add fixtext and srg_requirement to
audit_rules_media_export (Matthew Burket <mburket@redhat.com>)
 - Add ocil_fix_srg_privileged_command macro (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext_privileged_commands macro (Matthew Burket <mburket@redhat.com>)
 - Add complete_ocil_entry_audit_privileged_commands macro (Matthew Burket
<mburket@redhat.com>)
 - Add macro srg_requirement_audit_command (Matthew Burket <mburket@redhat.com>)
 - Fix doc string in srg_requirement_audit_syscall (Matthew Burket
<mburket@redhat.com>)
 - Add script to find rules needing keys for the STIG (Matthew Burket
<mburket@redhat.com>)
 - Update lineinfile documentation (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add tests to sssd_enable_smartcards (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add policy for removal of products (Matthew Burket <mburket@redhat.com>)
 - Update rule sssd_enable_smartcards (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update linux_os/guide/system/software/integrity/fips/enable_dracut_fips_modul
e/ansible/shared.yml (vojtapolasek <krecoun@gmail.com>)
 - no fatal fail when return code is 1 (Vojtech Polasek <vpolasek@redhat.com>)
 - Make the repository safe (Matěj Týč <matyc@redhat.com>)
 - Send coverage to Code Climate (Matěj Týč <matyc@redhat.com>)
 - Update tests directory_group_ownership_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update directory_group_ownership_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add the plugins to the config file (Matthew Burket <mburket@redhat.com>)
 - Update bash in rule to handle commented lines (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests of directory_permissions_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ocil and fixtext of rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add RHEL requirements for new rule (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update rule accounts_users_home_files_permissions (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update SRG references for audit permissions (Matthew Burket
<mburket@redhat.com>)
 - OCP4 build: Don't use fedora-33 anymore (Jakub Hrozek <jhrozek@redhat.com>)
 - Update SRG-OS-000258-GPOS-00099 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000257-GPOS-00098 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update PAM password hash algo remediation (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update SRG-OS-000066-GPOS-00034 and SRG-OS-000384-GPOS-00167. (Matthew Burket
<mburket@redhat.com>)
 - Added new rule sssd_has_trust_anchor (Matthew Burket <mburket@redhat.com>)
 - Update PAM password hashing algorithm for OL8 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update sssd_offline_cred_expiration description (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update docs to point to correct constants file path (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>)
 - Update docs to point to correct build_products file (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>)
 - update docs for creating product (Dhriti Shikhar
<dhriti.shikhar.rokz@gmail.com>)
 - Remove ol8 from rsyslog_remote_loghost fixes (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - update docs (Dhriti Shikhar <dhriti.shikhar.rokz@gmail.com>)
 - Update directory_permissions_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to directory_permissions_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update directory_permissions_var_log_audit[rhel8] (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update directory_permissions_var_log_audit [ol8] (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix sssd_enable_certmap OVAL (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update tests in dconf_gnome_disable_user_list (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add dconf_gnome_disable_user_list to STIG profile (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update file_permissions_var_log_audit description (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to file_permissions_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update file_permissions_var_log_audit bash[rhel8] (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update bash in file_permissions_var_log_audit (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update file_permissions_var_log_audit for rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update file_permissions_var_log_audit for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add fixtext and srg requirement to audit_rules_execution_setsebool. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fixtext and srg requirement to audit_rules_execution_setfiles. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fixtext and srg requirement to audit_rules_execution_semanage. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fixtext and srg requirement to audit_rules_execution_chcon. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fixtext and srg requirement to audit_rules_execution_setfacl. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fixtext and srg requirement to audit_rules_execution_chacl. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fixtext macro for audit system commands. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add fixtext and srg requirement to audit_rules_dac_modification_umount.
(Gabriel Becker <ggasparb@redhat.com>)
 - Only print group text if variable is defined in fixtext. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add fixtext and srg requirement to audit_rules_dac_modification_umount2.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add OCP4 STIG profile (Dhriti Shikhar <dhriti.shikhar.rokz@gmail.com>)
 - OCP NIST controls: Remove link to a PR (Jakub Hrozek <jhrozek@redhat.com>)
 - Presence of management function Configure host-based firewall is in
FMT_SMF_EXT.1.1, not in FMT_MOF_EXT.1. (Jan Pazdziora <jpazdziora@redhat.com>)
 - The debug-shell.target does not exist, the rule is about service. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Replace the system by full name (Jan Černý <jcerny@redhat.com>)
 - Apply suggestions from code review (Jan Černý <jcerny@redhat.com>)
 - Use a unique account name for the superusers account (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL (Jan Černý <jcerny@redhat.com>)
 - Use grub_command macro in rules in SRG-OS-000080-GPOS-00048 (Jan Černý
<jcerny@redhat.com>)
 - Add an update operation to macro grub_command (Jan Černý
<jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Add fixtext in grub2_uefi_password (Jan Černý <jcerny@redhat.com>)
 - Align OCIL with OVAL in grub2_uefi_password (Jan Černý <jcerny@redhat.com>)
 - Add fixtext in grub2_uefi_admin_username (Jan Černý <jcerny@redhat.com>)
 - Align OCIL with OVAL in grub2_uefi_admin_username (Jan Černý
<jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Add fixtext for grub2_password (Jan Černý <jcerny@redhat.com>)
 - Align OCIL with OVAL in grub2_password (Jan Černý <jcerny@redhat.com>)
 - Add fixtext for grub2_admin_username (Jan Černý <jcerny@redhat.com>)
 - Update OCIL in grub2_admin_username (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to require_singleuser_auth (Jan Černý <jcerny@redhat.com>)
 - Align OCIL with OVAL for require_singleuser_auth (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to require_emergency_target_auth (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL for require_emergency_target_auth (Jan Černý
<jcerny@redhat.com>)
 - Replace RHEL 9 by full name (Jan Černý <jcerny@redhat.com>)
 - Update OL8 STIG severities (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update set_password_hashing_min_rounds_logindefs (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Set check_root_user to true on multiple rules ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Apply suggestions from code review (Gabriel Becker <ggasparb@redhat.com>)
 - Update nightly build links to github actions generated artifacts. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update titles for nightly builds (Matthew Burket <mburket@redhat.com>)
 - Stop SSGTS when a wrong domain name is informed (Marcus Burghardt
<maburgha@redhat.com>)
 - Update tests for sssd_offline_cred_expiration (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OVAL for sssd_offline_cred_expiration (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update sssd_offline_cred_expiration OVAL [rhel8] (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update sssd_offline_cred_expiration OVAL for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add OCP4 to the SRG Mapping CI job (Matthew Burket <mburket@redhat.com>)
 - Add check and fixtext to Contributing content docs (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000379-GPOS-00164 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - In the docs Fix -> Fixtext (Matthew Burket <mburket@redhat.com>)
 - Add Code Climate config (Matthew Burket <mburket@redhat.com>)
 - Added a config for pycodestyle (Matthew Burket <mburket@redhat.com>)
 - Improve wording (Matěj Týč <matej.tyc@gmail.com>)
 - srg_gpos: Fix typos in attribute names (Jakub Hrozek <jhrozek@redhat.com>)
 - Do not include symlink_state in 5.10 content (Watson Sato <wsato@redhat.com>)
 - Adds ocp4 controls (Dhriti Shikhar <dhriti.shikhar.rokz@gmail.com>)
 - bump version to 0.1.63 (Vojtech Polasek <vpolasek@redhat.com>)
 - SUSE SLE15 create profile for hardening cloud images (sampsone
<esampson@suse.com>)
 - Rename test scenario with wrong extension (Watson Sato <wsato@redhat.com>)
 - Remove duplicated ocp4 test result (Watson Sato <wsato@redhat.com>)
 - Update rule to allow special bits in library dirs (Watson Sato
<wsato@redhat.com>)
 - Fix typo and update docs (Watson Yuuma Sato <wsato@redhat.com>)
 - Update linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabl
ed/rule.yml (Gabriel Becker <ggasparb@redhat.com>)
 - Update linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabl
ed/rule.yml (Gabriel Becker <ggasparb@redhat.com>)
 - Do not macro expand swap files of test scenarios (Watson Sato
<wsato@redhat.com>)
 - Improve fixtext in kernel_module_dccp_disabled (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL and fixtext in usbguard_generate_policy (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to service_usbguard_enabled (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to package_usbguard_installed (Jan Černý <jcerny@redhat.com>)
 - Apply suggestions from code review (Watson Yuuma Sato <wsato@redhat.com>)
 - Address review feedback (Watson Sato <wsato@redhat.com>)
 - Fix template not found error message (Watson Sato <wsato@redhat.com>)
 - Add RHEL9 package name into rule service_dhcpd_disabled (Matus Marhefka
<mmarhefk@redhat.com>)
 - Remove redundant service_disabled custom test scenarios (Matus Marhefka
<mmarhefk@redhat.com>)
 - Remove redundant service_enabled custom test scenarios (Matus Marhefka
<mmarhefk@redhat.com>)
 - Remove remaining rules (Jan Černý <jcerny@redhat.com>)
 - Change status to does not meet (Jan Černý <jcerny@redhat.com>)
 - Change fix to fixtext (Jan Černý <jcerny@redhat.com>)
 - Explicitely set variable in controls file (Jan Černý <jcerny@redhat.com>)
 - Add fix for accounts_tmout (Jan Černý <jcerny@redhat.com>)
 - Improve OCIL clause for accounts_tmout (Jan Černý <jcerny@redhat.com>)
 - Update SRG-OS-000163-GPOS-00072 for RHEL9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Split nightly builds (Matthew Burket <mburket@redhat.com>)
 - Added Nightly builds action (Matthew Burket <mburket@redhat.com>)
 - Be explicit about adding tests when rules need them (Matej Tyc
<matyc@redhat.com>)
 - Specify current version for Packit (Milan Lysonek <mlysonek@redhat.com>)
 - Introduce Testing Farm (Milan Lysonek <mlysonek@redhat.com>)
 - Introduce packit-as-a-service (Milan Lysonek <mlysonek@redhat.com>)
 - Revert efb925b462a541d55dffff2eab6a49b011e56ff3 (Matus Marhefka
<mmarhefk@redhat.com>)
 - SSGTS: update prefix name of the snapshots wrt podman limitation (Matus
Marhefka <mmarhefk@redhat.com>)
 - SSGTS: Extend cpes_to_platform function to handle CentOS (Matus Marhefka
<mmarhefk@redhat.com>)
 - Replace Scrutinizer badage with Code Climate (Matthew Burket
<mburket@redhat.com>)
 - Update README (Matthew Burket <mburket@redhat.com>)
 - Remove All Contributors from the README (Matthew Burket <mburket@redhat.com>)
 - clean_components_post_updating, enabe bash remediation for sle15 (sampsone
<esampson@suse.com>)
 - Add tests to rsyslog_cron_logging (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - OCP: Update file_groupowner_ovs_conf_db rule (vincent <wenshen@redhat.com>)
 - Update OVAl from rsyslog_cron_logging (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - make test scenarios modify all relevant directories (Vojtech Polasek
<vpolasek@redhat.com>)
 - Test (Gabriel Becker <ggasparb@redhat.com>)
 - Switch oscap-ssh in SSGTS GHA to maint-1.3. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add Centos Stream Dockerfiles and enable them in GHA for testing. (Gabriel
Becker <ggasparb@redhat.com>)
 - Enable recursivity for root_permissions_syslibrary_files rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Update shell_lineinfile OVAL template to handle escaping of dollar sign
(Matus Marhefka <mmarhefk@redhat.com>)
 - Add templated test scenarios for shell_lineinfile template (Matus Marhefka
<mmarhefk@redhat.com>)
 - Use correct path for sshd options in ansible remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Parametrize test suite name (Marcus Burghardt <maburgha@redhat.com>)
 - Remove similar test scenarios on rules templated by file_groupownership
(Marcus Burghardt <maburgha@redhat.com>)
 - drop custom test scenarios from kernel_module_disabled (Vojtech Polasek
<vpolasek@redhat.com>)
 - create tests for kernel_module_disabled template (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove redundant package_installed custom test scenarios (Matej Tyc
<matyc@redhat.com>)
 - Introduce a proper custom test scenario (Matej Tyc <matyc@redhat.com>)
 - add test scenarios covering missing files (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove redundant test scenario (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove redundant package_removed test scenarios (Matej Tyc
<matyc@redhat.com>)
 - Update ocp4_content fedora version to latest (Lance Bragstad
<lbragsta@redhat.com>)
 - Refactor snapshot prefix related functions (Marcus Burghardt
<maburgha@redhat.com>)
 - Point to new content gh pages. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove Link Checker from the README (Matthew Burket <mburket@redhat.com>)
 - Cleanup duplicate scenarios for sshd_lineinfile template (Matus Marhefka
<mmarhefk@redhat.com>)
 - Skip test scenarios when prep scripts fail (Matej Tyc <matyc@redhat.com>)
 - Include the keep-snapshots option to ssgts (Marcus Burghardt
<maburgha@redhat.com>)
 - Use secret token to publish pages to a different repository. (Gabriel Becker
<ggasparb@redhat.com>)
 - Simplify the snapshot_lookup function (Marcus Burghardt
<maburgha@redhat.com>)
 - Include snapshot cleanup functions for SSGTS (Marcus Burghardt
<maburgha@redhat.com>)
 - Update Fedora-based Actions to latest Fedora (Matthew Burket
<mburket@redhat.com>)
 - Sysctl: template Remediate files in /run/sysctl.d (Watson Sato
<wsato@redhat.com>)
 - Don't scan /usr/lib/sysctl.d/ for conf files (Watson Sato <wsato@redhat.com>)
 - Add templated tests for dconf_ini_file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Document recent changes to sysctl template (Watson Sato <wsato@redhat.com>)
 - Workaround for git unsafe repository CVE-2022-24765 (Milan Lysonek
<mlysonek@redhat.com>)
 - Publish content pages to a different repository. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add template mode to SSGTS (Watson Sato <wsato@redhat.com>)
 - Add ocil_clause to service_ufw_enabled (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add srg_requirement to aide_check_audit_tools (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sysctl_crypto_fips_enabled (Matthew Burket
<mburket@redhat.com>)
 - Fix fixtext in sysctl_crypto_fips_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to configure_gnutls_tls_crypto_policy (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dconf_gnome_disable_autorun (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dconf_gnome_disable_automount_open (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to selinux_state (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to package_policycoreutils_installed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to grub2_slub_debug_argument (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to service_autofs_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_usb-storage_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to root_permissions_syslibrary_files (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_permissions_library_dirs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_permissions_binary_dirs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_ownership_library_dirs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_ownership_binary_dirs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_groupownership_system_commands_dirs (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to dir_group_ownership_library_dirs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dir_perms_world_writable_sticky_bits (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to dir_perms_world_writable_root_owned (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sysctl_net_ipv4_tcp_syncookies (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_firewalld_installed (Matthew Burket
<mburket@redhat.com>)
 - Grammer fix in gid_passwd_group_same (Matthew Burket <mburket@redhat.com>)
 - Fix Jinja error force_opensc_card_drivers (Matthew Burket
<mburket@redhat.com>)
 - Clean up accounts_password_pam_lcredit (Matthew Burket <mburket@redhat.com>)
 - Update OCIL clause for accounts_password_pam_enforce_root (Matthew Burket
<mburket@redhat.com>)
 - Fix "the operating system" in fixtext for accounts_password_pam_dcredit
(Matthew Burket <mburket@redhat.com>)
 - Fix the check for SRG-OS-000191-GPOS-00080 (Matthew Burket
<mburket@redhat.com>)
 - Pull the explicit rules for USB guard (Matthew Burket <mburket@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml
(Marcus Burghardt <2074099+marcusburghardt@users.noreply.github.com>)
 - Remove html tags from fixtext and include sudo (Marcus Burghardt
<maburgha@redhat.com>)
 - Add a sentence into OCIL (Jan Černý <jcerny@redhat.com>)
 - Use a modern hash function (Jan Černý <jcerny@redhat.com>)
 - Use XCCDF Variable in fixtext (Jan Černý <jcerny@redhat.com>)
 - Separate decision on config file path (Jan Černý <jcerny@redhat.com>)
 - Remove quotes (Jan Černý <jcerny@redhat.com>)
 - Update OCIL and add fixtext to accounts_password_pam_unix_rounds_system_auth
(Jan Černý <jcerny@redhat.com>)
 - Update rule accounts_password_pam_unix_rounds_password_auth (Jan Černý
<jcerny@redhat.com>)
 - Use sudo with standard user prompt (Jan Černý <jcerny@redhat.com>)
 - Update OCIL and add fixtext to set_password_hashing_algorithm_systemauth (Jan
Černý <jcerny@redhat.com>)
 - Add OCIL and fixtext to set_password_hashing_algorithm_logindefs (Jan Černý
<jcerny@redhat.com>)
 - Improve OCIL and add fixtext in set_password_hashing_algorithm_libuserconf
(Jan Černý <jcerny@redhat.com>)
 - Remove var_system_crypto_policy (Jan Černý <jcerny@redhat.com>)
 - Fix missing new line at the of files. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove rules from SRG-OS-000458-GPOS-00203 that don't belong there. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove superfluous quotes (Jan Černý <jcerny@redhat.com>)
 - Add srg requirement text to deletion audit syscalls. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add fixtext to service_pcscd_enabled (Jan Černý <jcerny@redhat.com>)
 - Add reviewer comments (Matthew Burket <m@tthewburket.com>)
 - Add a fixtext to package_pcsc-lite_installed (Jan Černý
<jcerny@redhat.com>)
 - Add variable setting to SRG file (Jan Černý <jcerny@redhat.com>)
 - Remove unused cmake macros (Jiri Odehnal <jodehnal@redhat.com>)
 - Update fixtext and srg_requirement of creat/open/truncate syscalls (Gabriel
Becker <ggasparb@redhat.com>)
 - Add variable value (Jan Černý <jcerny@redhat.com>)
 - Restrict the symlink test to OVAL 5.11 (Watson Sato <wsato@redhat.com>)
 - Consider file/link/dir while applying ansible remediation on sysctl template.
(Gabriel Becker <ggasparb@redhat.com>)
 - Include relevant variables on SRG-OS-000077-GPOS-00045 (Marcus Burghardt
<maburgha@redhat.com>)
 - Update accounts_password_pam_pwhistory_remember rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Include fixtext on accounts_password_pam_unix_remember rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Include respective variables on SRG-OS-000021-GPOS-00005 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include fixtext in accounts_passwords_pam_faillock_interval rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Include fixtext in accounts_passwords_pam_faillock_enforce_local rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Small adjustment in description. (Marcus Burghardt <maburgha@redhat.com>)
 - Remove duplicated warning section (Marcus Burghardt <maburgha@redhat.com>)
 - Add srg_requirement to grub2_page_poison_argument (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to grub2_vsyscall_argument (Matthew Burket
<mburket@redhat.com>)
 - Add a warning about remediation to libreswan_approved_tunnels (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to libreswan_approved_tunnels (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to libreswan_approved_tunnels (Matthew Burket
<mburket@redhat.com>)
 - Improve the OCIL for libreswan_approved_tunnels (Matthew Burket
<mburket@redhat.com>)
 - Swap package_libreswan_installed for libreswan_approved_tunnels (Matthew
Burket <mburket@redhat.com>)
 - Pull duplicate rules for rsyslog encryption (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_rsyslog-gnutls_installed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sshd_enable_pubkey_auth (Matthew Burket
<mburket@redhat.com>)
 - Add rhel9 CCE to sshd_enable_pubkey_auth (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to gid_passwd_group_same (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL clause for group_unique_id (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to group_unique_id (Matthew Burket <mburket@redhat.com>)
 - Add CCE for RHEL9 on group_unique_id (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to force_opensc_card_drivers (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to configure_opensc_card_drivers (Matthew Burket
<mburket@redhat.com>)
 - Don't scan dir with preconfigured sysctls in RHEL (Watson Sato
<wsato@redhat.com>)
 - Remove package_krb5-workstation_removed from the STIG (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_krb5-workstation_removed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to kernel_module_bluetooth_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to grub2_pti_argument (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to chronyd_no_chronyc_network (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to chronyd_client_only (Matthew Burket
<mburket@redhat.com>)
 - Update enable_dracut_fips_module rule (Marcus Burghardt
<maburgha@redhat.com>)
 - ocil_file_permissions statement should be false on a correctly configured
system (Matthew Burket <mburket@redhat.com>)
 - Remove controls/stig_rhel9 (Jan Černý <jcerny@redhat.com>)
 - Update fixtext and srg_requirement of attr syscalls. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update fixtext and srg_requirement of chown syscalls. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update fixtext and srg_requirement of chmod syscalls. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove file_ownership_var_log_audit (Jan Černý <jcerny@redhat.com>)
 - Remove file_ownership_var_log_audit (Jan Černý <jcerny@redhat.com>)
 - Fix pidof path in ubuntu on chronyd_or_ntpd_set_maxpoll bash (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add Ubuntu platform to chronyd_or_ntpd_set_maxpoll bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add chronyd_sync_clock to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests to chronyd_sync_clock (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule chronyd_sync_clock (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update chrony tests to use chrony_conf_path (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update shared ansible to use chrony_conf_path (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update shared bash script to fix chronyd path (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Update shared ovals to use chrony_conf_path (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Update rule text to use chrony_conf_path (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Add overridden chrony_conf_path for Debian-likes (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Add chrony_conf_path as an implied property (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Add package_chrony_installed to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid to package_chrony_installed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Remove trailing white space in Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ufw_only_required_services to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule ufw_only_required_services (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ufw_rate_limit to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule ufw_rate_limit (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add service_ufw_enabled to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid, disa and srg to service_ufw_enabled (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add service_ufw_enabled for CIS 3.5.1.3 (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add package_ufw_installed to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid, disa and srg references to package_ufw_installed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add package_ufw_installed for CIS 3.5.1.1 (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Uncomplicated Firewall (ufw) group (Alexander Scheel
<alex.scheel@canonical.com>)
 - Use sudo in systemctl related OCIL macros (Jan Černý <jcerny@redhat.com>)
 - Style formatting in sysctl_crypto_fips_enabled rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve text of SRG fixtext macro title. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix no newline at the of the file. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove unrelated audit rules and add package audit rule to SRGs. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix typos. (Gabriel Becker <ggasparb@redhat.com>)
 - Change ocil_clause_entry_mount_option (Jan Černý <jcerny@redhat.com>)
 - Use sudo in OCIL (Jan Černý <jcerny@redhat.com>)
 - Remove variables from root file (Jan Černý <jcerny@redhat.com>)
 - Fix build due to symbol for accounts_password_set_min_life_existing (Matthew
Burket <mburket@redhat.com>)
 - Fix files without a newline at the end (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_password_set_max_life_existing (Matthew
Burket <mburket@redhat.com>)
 - Remove duplicate fixtext in accounts_maximum_age_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_maximum_age_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL for accounts_password_set_min_life_existing (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_set_min_life_existing (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_minimum_age_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to package_vsftpd_removed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_password_all_shadowed_sha512 (Matthew Burket
<mburket@redhat.com>)
 - Clean up the PAM credit OCIL (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_password_pam_enforce_root (Matthew Burket
<mburket@redhat.com>)
 - Addd srg_requirement to sssd_enable_certmap (Matthew Burket
<mburket@redhat.com>)
 - Addd srg_requirement to file_permissions_etc_audit_rulesd (Matthew Burket
<mburket@redhat.com>)
 - Addd srg_requirement to file_permissions_etc_audit_auditd (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to audit_immutable_login_uids (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to auditd_freq (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to file_ownership_var_log_audit_stig (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to file_group_ownership_var_log_audit (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to directory_permissions_var_log_audit (Matthew Burket
<mburket@redhat.com>)
 - Clean up OCIL clause in directory_permissions_var_log_audit (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to directory_ownership_var_log_audit (Matthew Burket
<mburket@redhat.com>)
 - Addd srg_requirement to directory_group_ownership_var_log_audit (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to file_permissions_var_log_audit (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to auditd_freq (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to audit_rules_usergroup_modification_opasswd (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to audit_rules_usergroup_modification_gshadow (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to audit_rules_usergroup_modification_group (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to audit_rules_sudoers_d (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to audit_rules_sudoers (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to audit_rules_login_events_tallylog (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to audit_rules_login_events_lastlog (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to audit_rules_login_events_faillock (Matthew Burket
<mburket@redhat.com>)
 - Add a macro file for srg_requirement (Matthew Burket <mburket@redhat.com>)
 - Add srg_requirement to package_audit_installed (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to service_auditd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to grub2_audit_argument (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to auditd_name_format (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to account_unique_id (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to accounts_passwords_pam_faillock_unlock_time (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_passwords_pam_faillock_interval (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_passwords_pam_faillock_deny_root (Matthew
Burket <mburket@redhat.com>)
 - Add srg_requirement to accounts_passwords_pam_faillock_deny (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requirement to sshd_set_loglevel_verbose (Matthew Burket
<mburket@redhat.com>)
 - Remove audit_rules_usergroup_modification from the GPOS SRG (Matthew Burket
<mburket@redhat.com>)
 - Filter out symlinks referencing default dirs (Watson Sato <wsato@redhat.com>)
 - Add tests to ensure valid symlinks are checked (Watson Sato
<wsato@redhat.com>)
 - Source requirement for SRG Export from rule or control (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requriment account_emergency_expire_date (Matthew Burket
<mburket@redhat.com>)
 - Add srg_requriment to rule (Matthew Burket <mburket@redhat.com>)
 - Update the describe_firewalld_allow macro (Marcus Burghardt
<maburgha@redhat.com>)
 - Separate the state from the object and check it (Watson Sato
<wsato@redhat.com>)
 - Restrict test to sysctl.conf and /usr/sysctl.d (Watson Sato
<wsato@redhat.com>)
 - Update SRG-OS-000297-GPOS-00115 for RHEL9 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove test scenarios from service_firewalld_enabled rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Use a full name in fixtexts (Jan Černý <jcerny@redhat.com>)
 - Add fixtext and update OCIL in accounts_password_pam_minclass (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext and update OCIL in accounts_password_pam_maxrepeat (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext and update OCIL in accounts_password_pam_maxclassrepeat (Jan
Černý <jcerny@redhat.com>)
 - Add fixtext and update OCIL in accounts_password_pam_difok (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to mount_option_var_tmp_nosuid (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_var_tmp_noexec (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_var_tmp_nodev (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_var_nodev (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_var_log_nosuid (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_var_log_noexec (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_var_log_nodev (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_var_log_audit_nosuid (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to mount_option_var_log_audit_noexec (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to mount_option_var_log_audit_nodev (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to mount_option_tmp_nosuid (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_tmp_noexec (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_tmp_nodev (Jan Černý <jcerny@redhat.com>)
 - Use jinja macro for fixtext in grub2_audit_backlog_limit_argument. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fixtext to mount_option_nodev_nonroot_local_partitions (Jan Černý
<jcerny@redhat.com>)
 - Add sudo to the command in OCIL (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_home_nosuid (Jan Černý <jcerny@redhat.com>)
 - Remove unnecessary blank space from jinja macro text. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add package_audit_installed rule to SRG-OS-000254-GPOS-00095 control.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update SRG section of audit package/service with latest RHEL8 STIG info.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add fixtext to mount_option_home_nodev (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_dev_shm_nosuid (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_dev_shm_nodev (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_boot_nosuid (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to mount_option_boot_nodev (Jan Černý <jcerny@redhat.com>)
 - Introduce macro fixtext_mount_option (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to root_permissions_syslibrary_files (Jan Černý
<jcerny@redhat.com>)
 - Add test scenarios for sysctl symlink (Watson Sato <wsato@redhat.com>)
 - Update OCIL in root_permissions_syslibrary_files (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext in file_permissions_library_dirs (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in file_permissions_library_dirs (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to file_permissions_binary_dirs (Jan Černý <jcerny@redhat.com>)
 - Update OCIL in file_permissions_binary_dirs (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to file_ownership_library_dirs (Jan Černý <jcerny@redhat.com>)
 - Update OCIL in file_ownership_library_dirs (Jan Černý <jcerny@redhat.com>)
 - Avoid using empty variable when no symlinks exist (Watson Sato
<wsato@redhat.com>)
 - Add new macro for audit configuration fixtext field. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add package_audit_installed to SRG-OS-000255-GPOS-00096. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add fixtext to file_ownership_binary_dirs (Jan Černý <jcerny@redhat.com>)
 - Update OCIL to file_ownership_binary_dirs (Jan Černý <jcerny@redhat.com>)
 - Add fixtext in file_groupownership_system_commands_dirs (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL in file_groupownership_system_commands_dirs (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to dir_ownership_library_dirs (Jan Černý <jcerny@redhat.com>)
 - Update OCIL in dir_ownership_library_dirs (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to dir_group_ownership_library_dirs (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL on dir_group_ownership_library_dirs (Jan Černý
<jcerny@redhat.com>)
 - Remove code duplication by using bash and ansible macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
restrictions/account_expiration/account_temp_expire_date/rule.yml (Gabriel
Becker <ggasparb@redhat.com>)
 - Update shared/macros/warning.jinja (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Create warning_rule_depracated_by macro. (Marcus Burghardt
<maburgha@redhat.com>)
 - Remediation and improvement for file_permissions_home_dirs rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Update controls/srg_gpos/SRG-OS-000112-GPOS-00057.yml (Gabriel Becker
<ggasparb@redhat.com>)
 - Filter out symlinks (Watson Sato <wsato@redhat.com>)
 - Use the XCCDF variable in fixtext (Jan Černý <jcerny@redhat.com>)
 - Clean up the text in account_temp_expire_date (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000024-GPOS-00007 (Matthew Burket <mburket@redhat.com>)
 - Add rationale to SRG-OS-000112-GPOS-00057 (Matthew Burket
<mburket@redhat.com>)
 - Move var_password_pam_ucredit to SRG-OS-000069-GPOS-00037 (Matthew Burket
<mburket@redhat.com>)
 - Fix typo in accounts_password_pam_ucredit (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL for accounts_password_pam_ucredit (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to accounts_password_pam_ucredit (Matthew Burket
<mburket@redhat.com>)
 - Add variables to SRG GPOS control according to RHEL9 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix title text of SRG-OS-000163-GPOS-00072. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add macroed ocil clause for service disabled rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Bump OL7 STIG version to v2r7 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add fixtext to audit_immutable_login_uids (Jan Černý <jcerny@redhat.com>)
 - Remove rule file_ownership_var_log_audit from SRG-OS-000057-GPOS-00027 (Jan
Černý <jcerny@redhat.com>)
 - Add OCIL and fixtext to directory_permissions_var_log_audit (Jan Černý
<jcerny@redhat.com>)
 - Add OCIL and fixtext to audit_rules_immutable (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to auditd_data_retention_action_mail_acct (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to rule audit_rules_system_shutdown (Jan Černý
<jcerny@redhat.com>)
 - Update the description to be aligned with Bash remediation (Jan Černý
<jcerny@redhat.com>)
 - Update postfix_client_configure_mail_alias for RHEL 9 STIG (Jan Černý
<jcerny@redhat.com>)
 - Fix grub_command macro for Ubuntu (Jan Černý <jcerny@redhat.com>)
 - Fix variable substitution in SRG export (Jan Černý <jcerny@redhat.com>)
 - Reformat OCIL text (Jan Černý <jcerny@redhat.com>)
 - Add a fixtext to configure_libreswan_crypto_policy (Jan Černý
<jcerny@redhat.com>)
 - Set variables (Jan Černý <jcerny@redhat.com>)
 - Add forgotten CCE ID for file_permissions_unauthorized_sgid (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Update OCIL clause and add fixtext for rsyslog_remote_loghost (Matthew Burket
<mburket@redhat.com>)
 - Initial definition of ANSSI BP28 minmal profile for SLE (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add OVAL for gitops_operator_exists rule (vincent <wenshen@redhat.com>)
 - Add a fixtext to sshd_rekey_limit (Jan Černý <jcerny@redhat.com>)
 - Remove mentions of 32 bits systems (Jan Černý <jcerny@redhat.com>)
 - Do not remove directory in audit_rules_sudoers empty.fail.sh (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_fs_protected_symlinks and sysctl_fs_protected_hardlinks to SRG-
OS-000312-GPOS-00123 (Matthew Burket <mburket@redhat.com>)
 - Document new Jinja macros (Jan Černý <jcerny@redhat.com>)
 - Use sudo in ocil_grub2_argument (Jan Černý <jcerny@redhat.com>)
 - Trim white space in grub_command (Jan Černý <jcerny@redhat.com>)
 - Fix broken grub2-mkconfig argument (Jan Černý <jcerny@redhat.com>)
 - Add fixtext for sudo_require_reauthentication (Watson Sato
<wsato@redhat.com>)
 - Add machine platform to xwindows_runlevel_target (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix incomplete SRG title (Jan Černý <jcerny@redhat.com>)
 - Replace operating system by full name (Jan Černý <jcerny@redhat.com>)
 - Complete dconf_ini_file_fix macro (Jan Černý <jcerny@redhat.com>)
 - Extend rationale (Jan Černý <jcerny@redhat.com>)
 - Add fix for dconf_gnome_disable_autorun (Jan Černý <jcerny@redhat.com>)
 - Add fix to dconf_gnome_disable_automount_open (Jan Černý
<jcerny@redhat.com>)
 - Add fix to service_autofs_disabled (Jan Černý <jcerny@redhat.com>)
 - Add OCIL clause in service_autofs_disabled (Jan Černý <jcerny@redhat.com>)
 - Add fix to kernel_module_usb-storage_disabled (Jan Černý
<jcerny@redhat.com>)
 - Add fix to usbguard_allow_hub (Jan Černý <jcerny@redhat.com>)
 - Add Ansible to usbguard_allow_hub (Jan Černý <jcerny@redhat.com>)
 - Add fix to usbguard_allow_hid_and_hub (Jan Černý <jcerny@redhat.com>)
 - Add Ansible to usbguard_allow_hid_and_hub (Jan Černý <jcerny@redhat.com>)
 - Add fix to usbguard_allow_hid (Jan Černý <jcerny@redhat.com>)
 - Add Ansible to usbguard_allow_hid (Jan Černý <jcerny@redhat.com>)
 - Assign a RHEL9 CPE to rule usbguard_allow_hid (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext for use_pam_wheel_for_su (Watson Sato <wsato@redhat.com>)
 - Add a grouping notice to fixtext (Jan Černý <jcerny@redhat.com>)
 - Align 64 bit system Ansible remediation (Jan Černý <jcerny@redhat.com>)
 - Remove sudo_require_authentication from control (Watson Sato
<wsato@redhat.com>)
 - Update RHEL8 STIG to v1r6 (Watson Sato <wsato@redhat.com>)
 - Update DISA STIG RHEL8 SCAP content to V1R5 (Watson Sato <wsato@redhat.com>)
 - Create macro ansible_grub2_bootloader_argument_absent (Jan Černý
<jcerny@redhat.com>)
 - Update DISA RHEL8 STIG manual benchmark to V1R6 (Watson Sato
<wsato@redhat.com>)
 - Create macro ansible_grub2_bootloader_argument (Jan Černý
<jcerny@redhat.com>)
 - Add OCIL and fixtext to rule bios_enable_execution_restrictions (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to sysctl_kernel_kptr_restrict (Jan Černý <jcerny@redhat.com>)
 - Update rule sysctl_kernel_exec_shield (Jan Černý <jcerny@redhat.com>)
 - Unify Bash remediations in GRUB templates (Jan Černý <jcerny@redhat.com>)
 - Remove duplicate platform (Jan Černý <jcerny@redhat.com>)
 - Use grub_command in grub2_bootloader_argument_remediation (Jan Černý
<jcerny@redhat.com>)
 - Unify grub_command macro arguments (Jan Černý <jcerny@redhat.com>)
 - Move macro grub_command to general macros (Jan Černý <jcerny@redhat.com>)
 - Refactor Jinja fixtext macros (Jan Černý <jcerny@redhat.com>)
 - Added control response for OCP:CM, MA, IA (vincent <wenshen@redhat.com>)
 - Update DISA CCI reference (Matthew Burket <mburket@redhat.com>)
 - OCP: Added control resonse for NIST AU (vincent <wenshen@redhat.com>)
 - Add fix text to rsyslog_encrypt_offload_actionsendstreamdrivermode (Matthew
Burket <mburket@redhat.com>)
 - Add fixtext to rsyslog_encrypt_offload_defaultnetstreamdriver (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to package_rsyslog_installed (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to rsyslog_encrypt_offload_actionsendstreamdriverauthmode
(Matthew Burket <mburket@redhat.com>)
 - Remove audispd rules from SRG-OS-000479-GPOS-00224 (Matthew Burket
<mburket@redhat.com>)
 - Remove empty rules file (Matthew Burket <mburket@redhat.com>)
 - fix: fedora: define login_defs in platform_package_overrides (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Add fix text to grub2_audit_backlog_limit_argument (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to partition_for_var_log_audit (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to auditd_audispd_configure_sufficiently_large_partition
(Matthew Burket <mburket@redhat.com>)
 - cleanup: use one space with # platform consistently (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - cleanup: auditd_audispd_encrypt_sent_records: if multi_platform_all no need
of others (Markus Linnala <Markus.Linnala@knowit.fi>)
 - cleanup: sshd_use_priv_separation: if multi_platform_all no need of others
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: display_login_attempts: ensure \s is before keyword (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Introduce fixtext macros for GRUB arguments (Jan Černý <jcerny@redhat.com>)
 - Check whole file path instead of its file name (Watson Sato
<wsato@redhat.com>)
 - Add tests for duplicate options (Watson Sato <wsato@redhat.com>)
 - Add comma to ocil question in the SRG mapping text. (Gabriel Becker
<ggasparb@redhat.com>)
 - Shade rows that don't have fix text (Matthew Burket <mburket@redhat.com>)
 - Apply suggestions from code review (Earl Sampson <ESampson@suse.com>)
 - bugfix: display_login_attempts: quote . in pam_lastlog.so when matching with
regex (Markus Linnala <Markus.Linnala@knowit.fi>)
 - Update SRG-OS-000358-GPOS-00145 to inherently met (Matthew Burket
<mburket@redhat.com>)
 - Use BaseLoader to variable support for SRG Export (Matthew Burket
<mburket@redhat.com>)
 - Remove extranious SRG ids from audit_rules_suid_privilege_function (Matthew
Burket <mburket@redhat.com>)
 - Update OCIL clause on audit_rules_suid_privilege_function (Matthew Burket
<mburket@redhat.com>)
 - change: use pkg_manager_config_file to allow fedora to work (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: ensure_gpgcheck_repo_metadata: support fedora (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - change: clean_components_post_updating: support fedora (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - cleanup: ensure_gpgcheck_globally_activated: all sle are zypper (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - cleanup: clean_components_post_updating: simplify yum platform rule (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: clean_components_post_updating: sle15 is zypper (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Fix firewalld command for adding services (Jan Černý <jcerny@redhat.com>)
 - Fix typo (Jan Černý <jcerny@redhat.com>)
 - Fix syscall name in macro text (Jan Černý <jcerny@redhat.com>)
 - Fix ansible remediation of dconf_gnome_screensaver_lock_delay. (Gabriel
Becker <ggasparb@redhat.com>)
 - Upgrade cosign-installer github action to v2.3.0 (Juan Antonio Osorio
<juan.osoriorobles@eu.equinix.com>)
 - Remove reference to SRG-OS-000467-GPOS-00211 (Jan Černý
<jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to audit_delete_success (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to audit_delete_failed (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to audit_rules_file_deletion_events_unlinkat (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_rules_file_deletion_events_unlink (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_rules_file_deletion_events_rmdir (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_rules_file_deletion_events_renameat (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to audit_file_deletion_events (Jan Černý <jcerny@redhat.com>)
 - Create a Jinja macro fixtext_audit_rules_file_deletion_events (Jan Černý
<jcerny@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_
quality_pwquality/accounts_password_pam_retry/rule.yml (Jan Černý
<jcerny@redhat.com>)
 - Exclude configure_usbguard_auditbackend from counting (vincent
<wenshen@redhat.com>)
 - Add unit tests for gnome screensaver settings. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix deduplication of parameters (Watson Sato <wsato@redhat.com>)
 - Simplify the regex for when SYSCTLVAL is defined (Watson Sato
<wsato@redhat.com>)
 - Avoid directly referencing empty object collections (Watson Sato
<wsato@redhat.com>)
 - Print rule identifiers in utils/compare_results.py (Milan Lysonek
<mlysonek@redhat.com>)
 - Change utils/compare_results.py to be albe analyse oscap --stig-viewer result
(Milan Lysonek <mlysonek@redhat.com>)
 - address review comments, remove unneeded space. (sampsone
<esampson@suse.com>)
 - SUSE enable remediation configure_openssl_crypto_policy (rebased) (sampsone
<esampson@suse.com>)
 - Change UMASK to uppercase (Jan Černý <jcerny@redhat.com>)
 - from code review, remove double comma (Earl Sampson <ESampson@suse.com>)
 - Test include with wildcarding (*.conf) (sampsone <esampson@suse.com>)
 - Add check for unique source of sysctl parameters (Watson Sato
<wsato@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_
quality_pwquality/accounts_password_pam_ocredit/rule.yml (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Fix pep issues. (Gabriel Becker <ggasparb@redhat.com>)
 - Add tests two definitions of sysctl parameters (Watson Sato
<wsato@redhat.com>)
 - Move the appropriate comment to a Jinja var (Watson Sato <wsato@redhat.com>)
 - products/alinux2: supports Alibaba Cloud Linux 2 (YiLin.Li
<YiLin.Li@linux.alibaba.com>)
 - configure_openssl_crypto_policy: OpenSSL v3.0 has = in include (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - Add ssh_client_rekey_limit to SRG-OS-000424-GPOS-00188 (Jan Černý
<jcerny@redhat.com>)
 - Replace the system by full name (Jan Černý <jcerny@redhat.com>)
 - Remove SRG-OS-000480-GPOS-00225 (Jan Černý <jcerny@redhat.com>)
 - Fix typo in accounts_passwords_pam_faillock_unlock_time ocil. (Gabriel Becker
<ggasparb@redhat.com>)
 - Kubernetes container image: Use lowercase for image repository (Juan Antonio
Osorio <juan.osoriorobles@eu.equinix.com>)
 - OCP: Added control response for SI group (vincent <wenshen@redhat.com>)
 - Update from review comments: (sampsone <esampson@suse.com>)
 - cleanup: auditing: remove unnecessary mkdir -p /etc/audit/rules.d (Markus
Linnala <Markus.Linnala@knowit.fi>)
 - fix: auditing: ensure audit package installed (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Add SUSE to remediation for: audit_rules_... (sampsone <esampson@suse.com>)
 - fix: audit_ospp_general/tests/correct_rules.pass.sh: add missing bash shebang
(Markus Linnala <Markus.Linnala@knowit.fi>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to ensure_redhat_gpgkey_installed (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to ensure_gpgcheck_never_disabled (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to ensure_gpgcheck_local_packages (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to ensure_gpgcheck_globally_activated (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to package_subscription-manager_installed (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to sysctl_kernel_kexec_load_disabled (Jan Černý
<jcerny@redhat.com>)
 - Update wording in OCIL clause in accounts_umask rules (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL and add fixtext accounts_umask_etc_profile (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL and add fixtext accounts_umask_etc_login_defs (Jan Černý
<jcerny@redhat.com>)
 - Update OCIL and add fixtext accounts_umask_etc_csh_cshrc (Jan Černý
<jcerny@redhat.com>)
 - Add variable var_accounts_user_umask to SRG (Jan Černý <jcerny@redhat.com>)
 - Update rule accounts_umask_etc_bashrc (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to accounts_logon_fail_delay (Jan Černý <jcerny@redhat.com>)
 - Add variable var_accounts_fail_delay to SRG (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to accounts_password_pam_retry (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to accounts_password_pam_dictcheck (Jan Černý
<jcerny@redhat.com>)
 - Remove rules from SRG files that are not expected to be there. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update controls/srg_gpos/SRG-OS-000266-GPOS-00101.yml (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Add fixtext to configure_gnutls_tls_crypto_policy (Jan Černý
<jcerny@redhat.com>)
 - Improve OCIL (Jan Černý <jcerny@redhat.com>)
 - Add missing prodtype (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to ssh_client_rekey_limit (Jan Černý <jcerny@redhat.com>)
 - Improve OCIL (Jan Černý <jcerny@redhat.com>)
 - Set variables used by rule ssh_client_rekey_limit (Jan Černý
<jcerny@redhat.com>)
 - Improve HTML string substitution when exporting the SRG mapping tables.
(Gabriel Becker <ggasparb@redhat.com>)
 - Moved rules to the public developer documentation (Matěj Týč
<matyc@redhat.com>)
 - Improved wording based on review feedback (Matěj Týč <matyc@redhat.com>)
 - Update .github/workflows/srg-mapping-table.yaml (Gabriel Becker
<ggasparb@redhat.com>)
 - Add fixtext for enable_fips_mode (Jan Černý <jcerny@redhat.com>)
 - Change status of SRG-OS-000472-GPOS-00217 to inherently met (Jan Černý
<jcerny@redhat.com>)
 - Improve fixtext to be more instructive (Watson Yuuma Sato <wsato@redhat.com>)
 - dconf_gnome_screensaver_lock_enabled: Ensure that dconf is installed (Arnaud
Patard <apatard@hupstream.com>)
 - linux_os/guide/system/*/*/*/dconf_*/oval/shared.xml: Try fixing wrong regexp
(Arnaud Patard <apatard@hupstream.com>)
 - Publish Kubernetes content container image on each commit (Juan Antonio
Osorio <juan.osoriorobles@eu.equinix.com>)
 - Add fixtext to rule service_sshd_enabled (Jan Černý <jcerny@redhat.com>)
 - Add OCIL clause to rule service_sshd_enabled (Jan Černý
<jcerny@redhat.com>)
 - Fix SRG mapping for rule service_sshd_enabled (Jan Černý
<jcerny@redhat.com>)
 - Remove rule dconf_gnome_enable_smartcard_auth from SRGs (Jan Černý
<jcerny@redhat.com>)
 - The SRG export needs a valid build for variables (Matthew Burket
<mburket@redhat.com>)
 - Fix permissions on disa-stig-rhel7-v3r7-xccdf-scap.xml (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext and improve OCIL (Watson Sato <wsato@redhat.com>)
 - Add fixtext and improve OCIL (Watson Sato <wsato@redhat.com>)
 - Update version of RHEL7 STIG profiles to V3R7. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA RHEL7 STIG manual benchmark to V3R7. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA STIG RHEL7 SCAP content to V3R7. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix PEP8 issues (Matthew Burket <mburket@redhat.com>)
 - Use the correct selector in SRG-OS-000356-GPOS-00144 (Matthew Burket
<mburket@redhat.com>)
 - Adds support for default values and using selectors in create_srg_export
(Matthew Burket <mburket@redhat.com>)
 - Address reviewer feedback (Matěj Týč <matyc@redhat.com>)
 - Fix style of SLE remediation (Matěj Týč <matyc@redhat.com>)
 - Fix Grub remediation (Matej Tyc <matyc@redhat.com>)
 - Indent macros to prevent YAML error (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to grub2_audit_argument (Jan Černý <jcerny@redhat.com>)
 - Add fixtext for audit_rules_login_events_tallylog (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext for audit_rules_login_events_lastlog (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext for audit_rules_login_events_faillock (Jan Černý
<jcerny@redhat.com>)
 - Fix typo (Jan Černý <jcerny@redhat.com>)
 - fix case of a package name (Vojtech Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
physical/grub2_disable_interactive_boot/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - Add fixtext to audit_rules_for_ospp (Jan Černý <jcerny@redhat.com>)
 - Add RHEL 9 CCE (Jan Černý <jcerny@redhat.com>)
 - Improve OCIL clause (Jan Černý <jcerny@redhat.com>)
 - Add fixtext for sysctl_kernel_randomize_va_space (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext for grub2_pti_argument (Jan Černý <jcerny@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
physical/grub2_disable_interactive_boot/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - Update remediation in rule.yml to match ansible and bash code (sampsone
<esampson@suse.com>)
 - Update rule configure_bind_crypto_policy (Jan Černý <jcerny@redhat.com>)
 - Add fixtext for rule package_openssh-server_installed (Jan Černý
<jcerny@redhat.com>)
 - Update rule sssd_certificate_verification (Jan Černý <jcerny@redhat.com>)
 - Add fix for dconf_gnome_enable_smartcard_auth (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext for package_opensc_installed (Jan Černý <jcerny@redhat.com>)
 - Set the var_password_pam_ocredit variable for SRG-OS-000266-GPOS-00101
(Marcus Burghardt <maburgha@redhat.com>)
 - Fix the title in SRG-OS-000355-GPOS-00143 (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to kernel_module_bluetooth_disabled (Matthew Burket
<mburket@redhat.com>)
 - Subtle update to the ocil_clause of accounts_password_pam_enforce_root
(Marcus Burghardt <maburgha@redhat.com>)
 - Check for a CNI that supports network policies (Lance Bragstad
<lbragsta@redhat.com>)
 - Update SRG-OS-000298-GPOS-00116 to inherently met (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000266-GPOS-00101 for RHEL9 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Add chronyd_server_directive to OL8 STIG profile (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add OL to chronyd_or_ntpd_set_maxpoll ansible (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add not applicable text to SRG-OS-000374-GPOS-00159 (Matthew Burket
<mburket@redhat.com>)
 - Use grub2-mkconfig must be used to handle GRUB_DISABLE_RECOVERY (sampsone
<esampson@suse.com>)
 - Fix typo. (Gabriel Becker <ggasparb@redhat.com>)
 - Update SRG-OS-000029-GPOS-00010 with new rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update SRG of dconf_gnome_screensaver_lock_locked. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update SRG-OS-000031-GPOS-00012 with a new rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove not applicable rules from SRG-OS-000029-GPOS-00010. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add SRG-OS-000031-GPOS-00012 to idle delay dconf rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove rules that do not belong to SRG-OS-000240-GPOS-00091. (Gabriel Becker
<ggasparb@redhat.com>)
 - Much less strange. (sampsone <esampson@suse.com>)
 - Ensure that ntp/chronyd_or_ntpd_set_maxpoll uses variables vs static value
(Matthew Burket <mburket@redhat.com>)
 - Remove rules that do not belong to SRG-OS-000240-GPOS-00090. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove SRG-OS-000359-GPOS-00146 in audit_rules_suid_privilege_function
(Matthew Burket <mburket@redhat.com>)
 - Update OCIL clause for package_audit_installed (Matthew Burket
<mburket@redhat.com>)
 - Exclude package_crypto-policies_installed removal tests (Milan Lysonek
<mlysonek@redhat.com>)
 - Define a variable in SRG-OS-000029-GPOS-00010. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update idle-delay dconf rules. (Gabriel Becker <ggasparb@redhat.com>)
 - consistent perm_x product filtering (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - use grub2_uefi_boot_path (Markus Linnala <Markus.Linnala@knowit.fi>)
 - bugfix: no_shelllogin_for_systemaccounts: value parsing fixes (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - double quote find command. (sampsone <esampson@suse.com>)
 - use mapfile to process find output to handle spell check errors. (sampsone
<esampson@suse.com>)
 - Restore double quotes in varible reference (sampsone <esampson@suse.com>)
 - Bad use of double quotes in rsyslog_files_permissions/bash/shared.sh
(sampsone <esampson@suse.com>)
 - Add SRG-OS-000312-GPOS-00123 to sysctl_fs_protected_symlinks (Matthew Burket
<mburket@redhat.com>)
 - Add SRG-OS-000312-GPOS-00123 to sysctl_fs_protected_hardlinks (Matthew Burket
<mburket@redhat.com>)
 - Add variables for SRG-OS-000078-GPOS-00046 (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to accounts_password_minlen_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Add fixtext to accounts_password_pam_minlen (Matthew Burket
<mburket@redhat.com>)
 - Add json output function to controleval script (vincent <wenshen@redhat.com>)
 - Update SRG-OS-000481-GPOS-000481 for RHEL9 STIG (Marcus Burghardt
<maburgha@redhat.com>)
 - Add fix text to aide_check_audit_tools (Matthew Burket <mburket@redhat.com>)
 - Add fix text to aide_periodic_cron_checking and update OCIL (Matthew Burket
<mburket@redhat.com>)
 - Update profile stability for RHEL 8 (Matthew Burket <mburket@redhat.com>)
 - Move aide_string to macros (Matthew Burket <mburket@redhat.com>)
 - Add commented out umask fai test (sampsone <esampson@suse.com>)
 - Update SRG-OS-000363-GPOS-00150 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000256-GPOS-00097 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add new rule file_audit_tools_group_ownership (Matthew Burket
<mburket@redhat.com>)
 - Add new rule file_audit_tools_permissions (Matthew Burket
<mburket@redhat.com>)
 - Add new rule for file_audit_tools_ownership (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to package_aide_installed (Matthew Burket <mburket@redhat.com>)
 - Apply suggestions from code review (Jan Černý <jcerny@redhat.com>)
 - Explicitely set a value (Jan Černý <jcerny@redhat.com>)
 - Add fixtext to sysctl_net_ipv4_tcp_invalid_ratelimit (Jan Černý
<jcerny@redhat.com>)
 - Add RHEL 9 CCE (Jan Černý <jcerny@redhat.com>)
 - Address review comments (sampsone <esampson@suse.com>)
 - Fix macro ocil_clause_file_owner (Jan Černý <jcerny@redhat.com>)
 - Improve fixtext (Jan Černý <jcerny@redhat.com>)
 - Improve HTML tag replacing during SRG mapping export. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update rule selection of SRG-OS-000239-GPOS-00089. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix macro ocil_clause_file_group_owner (Jan Černý <jcerny@redhat.com>)
 - Remove reference to SRG-OS-000206-GPOS-00084 (Jan Černý
<jcerny@redhat.com>)
 - Remove STIG id from audit_rules_usergroup_modification. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add fixtext for file_permissions_var_log_audit (Jan Černý
<jcerny@redhat.com>)
 - Add OCIL clause to file_permissions_var_log_audit (Jan Černý
<jcerny@redhat.com>)
 - Update SRG-OS-000024-GPOS-00007 and SRG-OS-000228-GPOS-00088. (Gabriel Becker
<ggasparb@redhat.com>)
 - Iterate over every rule in the control selections. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add OCIL and fixtext to file_group_ownership_var_log_audit (Jan Černý
<jcerny@redhat.com>)
 - Add fixtext to directory_ownership_var_log_audit (Jan Černý
<jcerny@redhat.com>)
 - Add ocil_clause to directory_ownership_var_log_audit (Jan Černý
<jcerny@redhat.com>)
 - Add OCIL and fixtext for directory_group_ownership_var_log_audit (Jan Černý
<jcerny@redhat.com>)
 - Align remediation with OVAL (Jan Černý <jcerny@redhat.com>)
 - Change fix to fixtext (Jan Černý <jcerny@redhat.com>)
 - Remove file_ownership_var_log_audit from SRG-OS-000206-GPOS-00084 (Jan
Černý <jcerny@redhat.com>)
 - Add fix for file_ownership_var_log_audit_stig (Jan Černý
<jcerny@redhat.com>)
 - Improve OCIL and align it with OVAL (Jan Černý <jcerny@redhat.com>)
 - Add fix to file_permissions_var_log_messages (Jan Černý
<jcerny@redhat.com>)
 - Add fix to file_owner_var_log_messages (Jan Černý <jcerny@redhat.com>)
 - Add fix to file_groupowner_var_log_messages (Jan Černý <jcerny@redhat.com>)
 - Add fix to file_permissions_var_log (Jan Černý <jcerny@redhat.com>)
 - Add fix to file_owner_var_log (Jan Černý <jcerny@redhat.com>)
 - Add fix to rule file_groupowner_var_log (Jan Černý <jcerny@redhat.com>)
 - SUSE audit_rules_privileged_commands_kmod add bash remediation SLE12/15
(sampsone <esampson@suse.com>)
 - Simplify ubuntu product checks. (sampsone <esampson@suse.com>)
 - SUSE enable remediiation for grub2_disable_interactive_boot (sampsone
<esampson@suse.com>)
 - Add fixtext to sssd_offline_cred_expiration (Matthew Burket
<mburket@redhat.com>)
 - Add var_accounts_max_concurrent_login_sessions to  SRG-OS-000057-GPOS-00027
(Matthew Burket <mburket@redhat.com>)
 - Add fix text to accounts_max_concurrent_login_sessions (Matthew Burket
<mburket@redhat.com>)
 - Update OCIL and add fixtext to chronyd_or_ntpd_set_maxpoll (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000356-GPOS-00144 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to package_sudo_install (Matthew Burket <mburket@redhat.com>)
 - Remove sebool_ssh_sysadm_login and selinux_user_login_roles from SRG-
OS-000324-GPOS-00125 (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000324-GPOS-00125 for RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to service_debug-shell_disabled (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to sysctl_fs_protected_hardlinks (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to sysctl_fs_protected_hardlinks (Matthew Burket
<mburket@redhat.com>)
 - Add macro for sysctl settings fix text (Matthew Burket <mburket@redhat.com>)
 - Add fix text to disable_ctrlaltdel_reboot (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to disable_ctrlaltdel_burstaction (Matthew Burket
<mburket@redhat.com>)
 - Update linux_os/guide/system/selinux/selinux_policytype/bash/shared.sh
(Gabriel Becker <ggasparb@redhat.com>)
 - Add fixtext to configure_firewalld_ports (Jan Černý <jcerny@redhat.com>)
 - Add OCIL clause and fix to firewalld_sshd_port_enabled (Jan Černý
<jcerny@redhat.com>)
 - Add firewalld_sshd_port_enabled to SRG-OS-000096-GPOS-00050 (Jan Černý
<jcerny@redhat.com>)
 - Disambiguate rules configure_firewalld_ports and firewalld_sshd_port_enabled
(Jan Černý <jcerny@redhat.com>)
 - Fix description (Jan Černý <jcerny@redhat.com>)
 - Add fix for kernel_module_dccp_disabled (Jan Černý <jcerny@redhat.com>)
 - Improve describe_module_disable macro (Jan Černý <jcerny@redhat.com>)
 - Add Ansible to chronyd_no_chronyc_network (Jan Černý <jcerny@redhat.com>)
 - Add fix and improve OCIL in chronyd_no_chronyc_network (Jan Černý
<jcerny@redhat.com>)
 - Add Ansible to chronyd_client_only (Jan Černý <jcerny@redhat.com>)
 - Add fix and improve OCIL in chronyd_client_only (Jan Černý
<jcerny@redhat.com>)
 - OCP: Added control response for SA group (vincent <wenshen@redhat.com>)
 - SUSE no_empty_passwords enable bash remediation. (sampsone
<esampson@suse.com>)
 - SUSE auditd_data_retention_flush enable bash remditaion (sampsone
<esampson@suse.com>)
 - SUSE enable selinux_policytype remediation bash and ansible (sampsone
<esampson@suse.com>)
 - SUSE enable no_rsh_trust_files remediation bash and ansible (sampsone
<esampson@suse.com>)
 - SUSE enable bash remediation for accounts_logon_fail_delay (sampsone
<esampson@suse.com>)
 - Update shared/macros/bash.jinja (Earl Sampson <ESampson@suse.com>)
 - Update OCIL for SSHD to consider default values. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add option in SSH rules to mark rule as default value is compliant. (Gabriel
Becker <ggasparb@redhat.com>)
 - Make sure test env doesn't have undesired ssh configuration. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove substring tests from ssh rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Introduce more templated tests for sshd line in file template. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove missing_parameter_pass from SSH rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix kubernets template removal. (Gabriel Becker <ggasparb@redhat.com>)
 - Fixed broken var reference with in grub2_bootloader_argument_remediation
(sampsone <esampson@suse.com>)
 - Update linux_os/guide/system/accounts/accounts-
physical/screen_locking/smart_card_login/smartcard_pam_enabled/bash/shared.sh
(Earl Sampson <ESampson@suse.com>)
 - Align the test audit.rules with the rule behavior (Watson Sato
<wsato@redhat.com>)
 - Ensure the appropriate lines get to the test (Watson Sato <wsato@redhat.com>)
 - Add debug profile for the srg_gpos controls. (Gabriel Becker
<ggasparb@redhat.com>)
 - Rename unit tests according to their meaning. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add unit tests for controls_dir option in controls files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Rename SRG policy control file. (Gabriel Becker <ggasparb@redhat.com>)
 - Add documentation about the controls_dir option in controls format. (Gabriel
Becker <ggasparb@redhat.com>)
 - Substitute operating system with full_name variable in SRG files. (Gabriel
Becker <ggasparb@redhat.com>)
 - Move SRG control files to a generic folder called srg_gpos. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add support to load control files from a specific folder. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix reference to Ansible macro reference (Watson Sato <wsato@redhat.com>)
 - Remove reference to section in index (Watson Sato <wsato@redhat.com>)
 - Update docs for general and highlevel jinja files (Watson Sato
<wsato@redhat.com>)
 - Add names to the toctree section (Watson Sato <wsato@redhat.com>)
 - OCP: Added Control Response for SC group (vincent <wenshen@redhat.com>)
 - Point the docs to new jinja macro files (Watson Sato <wsato@redhat.com>)
 - Exclude ClientAliveCountMax check in sshd_set_idle_timeout for RHEL9 (Milan
Lysonek <mlysonek@redhat.com>)
 - Cleanup sshd_set_idle_timeout test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - utils/compare_results.py specify column width (Milan Lysonek
<mlysonek@redhat.com>)
 - Refactor utils/compare_results.py (Milan Lysonek <mlysonek@redhat.com>)
 - Fix blank lines in general.jinja (Watson Sato <wsato@redhat.com>)
 - Rename macro to describe_kernel_build_config (Watson Sato <wsato@redhat.com>)
 - Rename and move warning macros to warning.jinja (Watson Sato
<wsato@redhat.com>)
 - Move describe macros to general.jinja file (Watson Sato <wsato@redhat.com>)
 - Rename and mov fix_sysctl macro to fixtext.jinja (Watson Sato
<wsato@redhat.com>)
 - Move OCIL Firefox macro to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL OC macros to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Remove unused macro ocil_xinetd_service_disabled (Watson Sato
<wsato@redhat.com>)
 - Move OCIL Kernel build config to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL sysctl options macros to ocil.jinja (Watson Sato
<wsato@redhat.com>)
 - Move OCIL File macros to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL Timer enabled macros to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL SELinux booleans macros to ocil.jinja (Watson Sato
<wsato@redhat.com>)
 - Move OCIL partition macros to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL Kernel modules macros to ocil.jinja (Watson Sato
<wsato@redhat.com>)
 - Move OCIL firewalld macro to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL audit syscall macros to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL Mount option macros to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL SSHD macros to ocil.jinja (Watson Sato <wsato@redhat.com>)
 - Move OCIL socket and service disabled to ocil.jinja (Watson Sato
<wsato@redhat.com>)
 - Move OCIL service disabled macros to ocil.jinja (Watson Sato
<wsato@redhat.com>)
 - Move OCIL service macros to ocil.jinja file (Watson Sato <wsato@redhat.com>)
 - Move OCIL package macros to the ocil.jinja file (Watson Sato
<wsato@redhat.com>)
 - Load all Jinja macros from shared/macros (Watson Sato <wsato@redhat.com>)
 - Add fix for encrypt_partitions (Jan Černý <jcerny@redhat.com>)
 - Update title for SRG-OS-000185-GPOS-00079 (Jan Černý <jcerny@redhat.com>)
 - Add CCE to the row if there is a rule (Matthew Burket <mburket@redhat.com>)
 - Refactor handle_output in create_srg_export.py (Matthew Burket
<mburket@redhat.com>)
 - Add openpyxl to dependancies in install doc (Matthew Burket
<mburket@redhat.com>)
 - Generalize changes in grub2_uefi_password (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update SRG-OS-000113-GPOS-00058 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000380-GPOS-00165 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - OCP: Add control response for RA-5(4) (vincent <wenshen@redhat.com>)
 - fix grub2 remediations for sle12 ans sle15 (sampsone <esampson@suse.com>)
 - Simplify gid handling (sampsone <esampson@suse.com>)
 - Update linux_os/guide/system/permissions/files/permissions_important_account_
files/file_etc_security_opasswd/bash/shared.sh (Earl Sampson
<ESampson@suse.com>)
 - Deduplicate values in the IA Control in create_srg_export (Matthew Burket
<mburket@redhat.com>)
 - bugfix: auditing: Fix documentation distro (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Fix doc indentation of Fix Text (Watson Sato <wsato@redhat.com>)
 - Move oval_affected macro to oval.jinja (Watson Sato <wsato@redhat.com>)
 - Rename macro files and align docs (Watson Sato <wsato@redhat.com>)
 - Rename the control fix key to fixtext (Watson Sato <wsato@redhat.com>)
 - change: encrypt_partitions: add fedora url (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: encrypt_partitions: use common . (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - SUSE disable_users_coredumps enable bash remediation for sle. (sampsone
<esampson@suse.com>)
 - Align kernel_module_loading remediations (Watson Sato <wsato@redhat.com>)
 - Rename Rule key fix to fixtext (Watson Sato <wsato@redhat.com>)
 - Standardize fixtext macro names with prefix (Watson Sato <wsato@redhat.com>)
 - Move fixtext macros to their file (Watson Sato <wsato@redhat.com>)
 - Add file to organize the fixtext macros (Watson Sato <wsato@redhat.com>)
 - Move macros to their on place in shared folder (Watson Sato
<wsato@redhat.com>)
 - For sle systems the etc shadow is group shadow (sampsone <esampson@suse.com>)
 - SUSE fix file_groupowner_backup_etc_shadow (sampsone <esampson@suse.com>)
 - SUSE add bash remediation for file_etc_security_opasswd (sampsone
<esampson@suse.com>)
 - SUSE add multi_platform_sle to audit_rules_file_deletion_events/bash.template
(sampsone <esampson@suse.com>)
 - SUSE SLE fix audit_rules_unsuccessful_file_modification_renameat2 (sampsone
<esampson@suse.com>)
 - Update accounts_umask_etc_profile remediation regex to handle comments
(sampsone <esampson@suse.com>)
 - Enable bash remediation for SUSE smartcard_pam_enabled (sampsone
<esampson@suse.com>)
 - Downgrade OCP4 builder image to fedora 34 (Lance Bragstad
<lbragsta@redhat.com>)
 - Enable for ansible and bash remediation for SLE15 and SLE12. (sampsone
<esampson@suse.com>)
 - Add docuemntion for Pandas dependancy (Matthew Burket <mburket@redhat.com>)
 - Fix duplicate SRG (Jan Černý <jcerny@redhat.com>)
 - Make HTML pages HTML5 compatible. (Gabriel Becker <ggasparb@redhat.com>)
 - Add rule package_policycoreutils_installed to SRG-OS-000134-GPOS-00068 for
RHEL 9 (Jan Černý <jcerny@redhat.com>)
 - Add rule selinux_state to SRG-OS-000134-GPOS-00068 for RHEL 9 (Jan Černý
<jcerny@redhat.com>)
 - Fix coding style (Jan Černý <jcerny@redhat.com>)
 - Remove IPv4 limitation (Jan Černý <jcerny@redhat.com>)
 - Fix gh-pages SRG mapping index page generation and deployment. (Gabriel
Becker <ggasparb@redhat.com>)
 - utils/compare_results.py returns 1 if results are not the same (Milan Lysonek
<mlysonek@redhat.com>)
 - Exclude package_libreport-plugin-rhtsupport_removed from stig_gui profile.
(Milan Lysonek <mlysonek@redhat.com>)
 - Add fix text to install_smartcard_packages (Matthew Burket
<mburket@redhat.com>)
 - Fix broken Oracle Linux doc links. (Gabriel Becker <ggasparb@redhat.com>)
 - bugfix: kernel_config_slub_debug: should be y (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Add error checking for HTML guide index page generation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Generate index.html page for SRG Mapping tables. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typos and improve grammar (Watson Yuuma Sato <wsato@redhat.com>)
 - Move the release docs to docs/ (Watson Sato <wsato@redhat.com>)
 - Add fix for sysctl_net_ipv4_tcp_syncookies (Jan Černý <jcerny@redhat.com>)
 - Add a jinja macro for fixing sysctl items (Jan Černý <jcerny@redhat.com>)
 - Change title in SRG-OS-000142-GPOS-00071 (Jan Černý <jcerny@redhat.com>)
 - typo: kernel_config_slub_debug Enale -> Enable (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Change title in SRG-OS-000134-GPOS-00068 (Jan Černý <jcerny@redhat.com>)
 - Add fix to grub2_slub_debug_argument (Jan Černý <jcerny@redhat.com>)
 - Add fix to grub2_page_poison_argument (Jan Černý <jcerny@redhat.com>)
 - Fix index page generation for guides artifacts. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Add fix for rule grub2_vsyscall_argument (Jan Černý <jcerny@redhat.com>)
 - Refactor HTML SRG exporting code to a separate python file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improve exception messages (Jan Černý <jcerny@redhat.com>)
 - Fix coding style (Jan Černý <jcerny@redhat.com>)
 - Change imports to not use "from" syntax (Jan Černý <jcerny@redhat.com>)
 - Specify output file explicitely (Jan Černý <jcerny@redhat.com>)
 - Exclude/remove package removal test scenarios that remove essential package
(Milan Lysonek <mlysonek@redhat.com>)
 - Remove unused file (Jan Černý <jcerny@redhat.com>)
 - Remove unused functions (Jan Černý <jcerny@redhat.com>)
 - Remove generate_fixes_xml.py (Jan Černý <jcerny@redhat.com>)
 - Add remediations to rules (Jan Černý <jcerny@redhat.com>)
 - Update the OCP e2e documentation (Lance Bragstad <lbragsta@redhat.com>)
 - Fix pep issues. (Gabriel Becker <ggasparb@redhat.com>)
 - Publish SRG mapping artifacts to github pages. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove unused release scripts (Watson Sato <wsato@redhat.com>)
 - Update release process documentation (Watson Sato <wsato@redhat.com>)
 - Add new GH job to generate XLSX table and HTML page with SRG mapping.
(Gabriel Becker <ggasparb@redhat.com>)
 - Handle variables in ocil_clause when generating the SRG spreadsheet. (Gabriel
Becker <ggasparb@redhat.com>)
 - Refactor SRG XLSX table creation. (Gabriel Becker <ggasparb@redhat.com>)
 - Apply suggestions from code review (Gabriel Becker <ggasparb@redhat.com>)
 - Fix ocil_clause of package installed rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Apply style suggestions (Jan Černý <jcerny@redhat.com>)
 - Add fix text sssd_enable_smartcards (Matthew Burket <mburket@redhat.com>)
 - Add fix text to sshd_enable_pubkey_auth (Matthew Burket <mburket@redhat.com>)
 - Update the proposal based on community suggestions. (Matej Tyc
<matyc@redhat.com>)
 - Update SRG-OS-000109-GPOS-00056 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000108-GPOS-00055 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000107-GPOS-00054 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000106-GPOS-00053 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Typo fix (Jan Černý <jcerny@redhat.com>)
 - Update SRG-OS-000105-GPOS-00052 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix for sysctl_crypto_fips_enabled (Jan Černý <jcerny@redhat.com>)
 - Add fix for sshd_enable_pam (Jan Černý <jcerny@redhat.com>)
 - Use correct separator macro sshd_lineinfile_fix (Jan Černý
<jcerny@redhat.com>)
 - Update title of SRG-OS-000125-GPOS-00065 (Jan Černý <jcerny@redhat.com>)
 - Add fix for package_krb5-workstation_removed (Jan Černý
<jcerny@redhat.com>)
 - Add fix to configure_kerberos_crypto_policy (Jan Černý <jcerny@redhat.com>)
 - Fix capital K (Jan Černý <jcerny@redhat.com>)
 - install_vm.py: update default Fedora version to 35 (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add fix for package_libreswan_installed (Jan Černý <jcerny@redhat.com>)
 - Update title in SRG-OS-000120-GPOS-00061 (Jan Černý <jcerny@redhat.com>)
 - Add fix to rsyslog_remote_tls (Jan Černý <jcerny@redhat.com>)
 - remove no longer needed rule from hipaa profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - align stability test (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rules from rhel8 ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - Add fix for package_rsyslog-gnutls_installed (Jan Černý
<jcerny@redhat.com>)
 - Add fix for accounts_password_all_shadowed_sha512 (Jan Černý
<jcerny@redhat.com>)
 - Add rules for 64b kernel (Watson Sato <wsato@redhat.com>)
 - Fix typos and improve rule descriptions (Watson Yuuma Sato
<wsato@redhat.com>)
 - Add fix for kerberos_disable_no_keytab (Jan Černý <jcerny@redhat.com>)
 - Improve OCIL clause in kerberos_disable_no_keytab (Jan Černý
<jcerny@redhat.com>)
 - Add Ansible for kerberos_disable_no_keytab (Jan Černý <jcerny@redhat.com>)
 - Add test scenarios for kerberos_disable_no_keytab (Jan Černý
<jcerny@redhat.com>)
 - Add rules for ARM64 kernel (Watson Sato <wsato@redhat.com>)
 - Add rules to configure Kernel panic behavior (Watson Sato <wsato@redhat.com>)
 - Add a custom sheet name and bug fixes (Matthew Burket <mburket@redhat.com>)
 - Apply suggestions from code review (Watson Yuuma Sato <wsato@redhat.com>)
 - Add a pass test for the quoted value (Watson Sato <wsato@redhat.com>)
 - Add test to ensure quote capturing behavior (Watson Sato <wsato@redhat.com>)
 - Fix handling of quotes matching against substrings (Watson Sato
<wsato@redhat.com>)
 - Add test for match against super strings (Watson Sato <wsato@redhat.com>)
 - Move kernel_config_rules to XCCDF variables (Watson Sato <wsato@redhat.com>)
 - Add fix text to gid_passwd_group_same (Matthew Burket <mburket@redhat.com>)
 - Add rules for kernel security options (Watson Sato <wsato@redhat.com>)
 - Add rules to check kernel IP stack configs (Watson Sato <wsato@redhat.com>)
 - Add rules for kernel compiler features (Watson Sato <wsato@redhat.com>)
 - Fix typos in rule descriptions (Watson Yuuma Sato <wsato@redhat.com>)
 - Add XCCDF variable support to kernel_build_config (Watson Sato
<wsato@redhat.com>)
 - Add rules for various kernel behaviors (Watson Sato <wsato@redhat.com>)
 - Add fix text to configure_opensc_card_drivers (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to force_opensc_card_drivers (Matthew Burket
<mburket@redhat.com>)
 - Update group_unique_id for RHEL9 STIG and add fix text (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000104-GPOS-00051 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add SRG mapping text to the STIG mapping table. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add rules for kernel module security (Watson Sato <wsato@redhat.com>)
 - Use GH team in codeowners (Jan Černý <jcerny@redhat.com>)
 - Fix typo (Watson Yuuma Sato <wsato@redhat.com>)
 - Update ansible in audit_rules_kernel_module rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests in audit_rules_kernel_module rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Move XLSX export to the SRG export script (Matthew Burket
<mburket@redhat.com>)
 - tests/ds_unselect_rules.sh: make unselecting of rules more robust (Matus
Marhefka <mmarhefk@redhat.com>)
 - Change OCIL clauses to negative form (Watson Sato <wsato@redhat.com>)
 - Add rule for kernel config_compat_bkr (Watson Sato <wsato@redhat.com>)
 - Add rules for kernel page poisoning build config (Watson Sato
<wsato@redhat.com>)
 - Change the OCIL clause to negative form (Watson Sato <wsato@redhat.com>)
 - Change OCIL clause to the negative form (Watson Sato <wsato@redhat.com>)
 - Fix typos from rule descriptions (Watson Yuuma Sato <wsato@redhat.com>)
 - Add rules to check SLUB kernel build config (Watson Sato <wsato@redhat.com>)
 - Add rules to check SLAB kernel build config (Watson Sato <wsato@redhat.com>)
 - Add rules for kernel data structure configs (Watson Sato <wsato@redhat.com>)
 - Set Benchmark's resolved attribute to true (Jan Černý <jcerny@redhat.com>)
 - Add CODEOWNERS (Jan Černý <jcerny@redhat.com>)
 - Add Centos Stream 8/9 support in install_vm script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ocil macro call for some kernel config rules (Watson Sato
<wsato@redhat.com>)
 - Fix typos in rule descriptions (Watson Yuuma Sato <wsato@redhat.com>)
 - Extend description of rule for CONFIG_COMPAT_VDSO (Watson Sato
<wsato@redhat.com>)
 - feat: OCP4 on HyperShift product definition (Takuya Mishina
<tmishina@jp.ibm.com>)
 - Update account_unique_id with warnings and fix text (Matthew Burket
<mburket@redhat.com>)
 - Add rules for kernel vsyscall configs (Watson Sato <wsato@redhat.com>)
 - Add rule for CONFIG_RETPOLINE (Watson Sato <wsato@redhat.com>)
 - Add rule to prevent unprivileged access to dmesg (Watson Sato
<wsato@redhat.com>)
 - Add rule for CONFIG_COMPAT_VDSO (Watson Sato <wsato@redhat.com>)
 - Add rule for CONFIG_PROC_KCORE (Watson Sato <wsato@redhat.com>)
 - Add rule for CONFIG_DEVKMEM (Watson Sato <wsato@redhat.com>)
 - Add rule for CONFIG_ACPI_CUSTOM_METHOD (Watson Sato <wsato@redhat.com>)
 - Add rule for kernel CONFIG_FORTIFY_SOURCE (Watson Sato <wsato@redhat.com>)
 - Add rule for kernel refcounting (Watson Sato <wsato@redhat.com>)
 - Update SRG-OS-000121-GPOS-00062 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add rule for CONFIG_VMAP_STACK (Watson Sato <wsato@redhat.com>)
 - Add rules for kernel hardened usercopy (Watson Sato <wsato@redhat.com>)
 - Remove a removed script from docs (Jan Černý <jcerny@redhat.com>)
 - Update contributors list for 0.1.61 release (Watson Sato <wsato@redhat.com>)
 - Fix PEP8 problem (Jan Černý <jcerny@redhat.com>)
 - Remove unused code (Jan Černý <jcerny@redhat.com>)
 - Stop using dedicated script (Jan Černý <jcerny@redhat.com>)
 - Add STIG references to compiled rules (Jan Černý <jcerny@redhat.com>)
 - Refactor: Extract function (Jan Černý <jcerny@redhat.com>)
 - Check kernel config CONFIG_SCHED_STACK_END_CHECK (Watson Sato
<wsato@redhat.com>)
 - Add rules for kernel build config stack protection (Watson Sato
<wsato@redhat.com>)
 - Add rule to check kernel config_debug_wx (Watson Sato <wsato@redhat.com>)
 - SRG-OS-000349-GPOS-00137 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add OCIL clause and update SRGs on service_auditd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000281-GPOS-00111 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - *.py: always use shebang /usb/bin/python3 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - bugfix: xml files do not need to be executable (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Update package_krb5-server_removed references (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update ansible in configure_ssh_crypto_policy (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Align pam_faillock bash macros to ansible macros (Marcus Burghardt
<maburgha@redhat.com>)
 - Compare number of kernels with number of configs (Watson Sato
<wsato@redhat.com>)
 - Add no remediation metadat to fail test scenario (Watson Sato
<wsato@redhat.com>)
 - Add tests for missing config (Watson Sato <wsato@redhat.com>)
 - Fix simple typo in test scenario (Watson Sato <wsato@redhat.com>)
 - Use behaviors to recurse down the directories (Watson Sato
<wsato@redhat.com>)
 - Add tests to check/ensure symlink behavior of OVAl (Watson Sato
<wsato@redhat.com>)
 - Only follow symlinks when they are the provided argument (Watson Sato
<wsato@redhat.com>)
 - All kernel config rules are machine only (Watson Sato <wsato@redhat.com>)
 - Clarify expected output of config grep command (Watson Sato
<wsato@redhat.com>)
 - Make config applicable to all products (Watson Sato <wsato@redhat.com>)
 - Clarify template documentation (Watson Sato <wsato@redhat.com>)
 - Update OVAL to also check for negative values (Watson Sato
<wsato@redhat.com>)
 - Default to input config in upper case letters (Watson Sato
<wsato@redhat.com>)
 - Add rule to disable kernel debugfs (Watson Sato <wsato@redhat.com>)
 - Make template check for "n" values (Watson Sato <wsato@redhat.com>)
 - Add rule to check Kernel config CONFIG_STRICT_KERNEL_RWX (Watson Sato
<wsato@redhat.com>)
 - Add template to check for kernel build configs (Watson Sato
<wsato@redhat.com>)
 - Use templated generated content instead of custom artifacts. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update profile_stability stigs data for rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Restore rule.yml description and rationale (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add CCE reference to package_krb5-server_removed (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update profile_stability stigs data for rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update package_krb5-server_removed (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Fix variable path access issue (Andrew Becker
<A-Beck@users.noreply.github.com>)
 - Refactoring for convert_srg_export_to_xlsx (Matthew Burket
<mburket@redhat.com>)
 - OCP4: Remove oval check from file_groupowner_proxy_kubeconfig and
file_owner_proxy_kubeconfig (vincent <wenshen@redhat.com>)
 - Freeze Header Row (Matthew Burket <m@tthewburket.com>)
 - Add utils/convert_srg_export_to_xlsx.py (Matthew Burket <mburket@redhat.com>)
 - Add CCE to rule and update profile_stability data (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update tests for configure_ssh_crypto_policy (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Introduce usbguard cpe (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update tests in audit_rules_kernel_module rules (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Use Jinja template (Jan Černý <jcerny@redhat.com>)
 - Simplify code (Jan Černý <jcerny@redhat.com>)
 - Remove unused update_sds_version.py (Jan Černý <jcerny@redhat.com>)
 - Build SCAP 1.2 and 1.3 using a single command (Jan Černý
<jcerny@redhat.com>)
 - Add option to build SCAP 1.3 (Jan Černý <jcerny@redhat.com>)
 - Rename the script (Jan Černý <jcerny@redhat.com>)
 - Fix spacing issue on ansible lint check. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improve pam_faillock macro remediation to fix wrong control (Marcus Burghardt
<maburgha@redhat.com>)
 - Invert singles with double quotes, and vice-versa (Watson Sato
<wsato@redhat.com>)
 - Replace 'find' module with CLI 'find' (Watson Sato <wsato@redhat.com>)
 - Organize creation of simbolic mode into functions (Watson Sato
<wsato@redhat.com>)
 - Quote the regular expressin in find --regex (Watson Sato <wsato@redhat.com>)
 - Follow symlink in the remediation (Watson Sato <wsato@redhat.com>)
 - Fix same shadow field bug in tests (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Change the file_permissions template to improve performance (Marcus Burghardt
<maburgha@redhat.com>)
 - Performance improvements for file_groupowner template (Marcus Burghardt
<maburgha@redhat.com>)
 - Performance improvements for file_owner template (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix macro bash_ensure_mount_option_for_vfstype (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add tests to mount_option_remote_filesystems (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix typo (Gabriel Becker <ggasparb@redhat.com>)
 - Reduce test time of test scenario (Watson Sato <wsato@redhat.com>)
 - Allow bash to tollerate stricter permission bits (Watson Sato
<wsato@redhat.com>)
 - Allow the Ansible to tolerate stricter permissions (Watson Sato
<wsato@redhat.com>)
 - Stop using Ansible Find module in file_permissions (Watson Sato
<wsato@redhat.com>)
 - Update comments in STIG profiles for OL8 & RHEL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update OVAL in dconf_gnome_screensaver_lock_delay (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add a rule to STIG profile in OL8 and RHEL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add rule vlock_installed to STIG profile in OL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add OL8 STIG ID to configure_crypto_policy (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update regex to detect nfs filesystems in fstab (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix typos and description of two sysctl_kernel rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update grub2_bootloader_argument template for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add Fix text and update OCIL on clean_components_post_updating (Matthew
Burket <mburket@redhat.com>)
 - Update configure_ssh_crypto_policy (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Like the docs requirments GitPod should also use https vs the lagecy git
protocol (Matthew Burket <mburket@redhat.com>)
 - Add text to selinux_state to fix and OCIL for better support to (Matthew
Burket <mburket@redhat.com>)
 - Add text to selinux_policytype to fix and OCIL for better support to (Matthew
Burket <mburket@redhat.com>)
 - Add variables for SRG-OS-000445-GPOS-00199 (Matthew Burket
<mburket@redhat.com>)
 - Update grub2_uefi_password to use CPE (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update grub2_uefi_admin_username to use CPE (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Apply grub2_uefi_password changes to rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Make grub2_uefi_password rule compliant for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Ensure that headers and the Requirement field for create_srg_export are
correct (Matthew Burket <mburket@redhat.com>)
 - Update accounts_password template OVAL for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Introduce CPE for tftp-server (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Remove shared_xccdf-removeaux.xslt (Jan Černý <jcerny@redhat.com>)
 - Use the correct command in bash to list fingerprint of RHEL9 gpg keys.
(Gabriel Becker <ggasparb@redhat.com>)
 - Stop using oscap xccdf resolve (Jan Černý <jcerny@redhat.com>)
 - Do not insist on resolved Benchmarks (Jan Černý <jcerny@redhat.com>)
 - Split command line arguments of add_stig_references.py (Jan Černý
<jcerny@redhat.com>)
 - Bump Fedora version, rawhide is now 37, drop 33 (Markus Linnala
<Markus.Linnala@knowit.fi>)
 - Add rule audit_rules_dac_modification_lsetxattr to SLE12 (Yavor Georgiev
<strandjata@gmail.com>)
 - Fix CCE key for sle12 with right notation (Yavor Georgiev
<strandjata@gmail.com>)
 - Update grub2_password to use CPE (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Make grub2_password rule compliant for rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Make grub2_password rule compliant for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Revert changes from OL8 STIG profile that cause conflict with master.
(Gabriel Becker <ggasparb@redhat.com>)
 - Define list of excluded users to check as shared variable (Milan Lysonek
<mlysonek@redhat.com>)
 - Ansible: When 'file_regex` is set, only operate on files (Watson Sato
<wsato@redhat.com>)
 - Exclude user nfsnobody when checking home directories (Milan Lysonek
<mlysonek@redhat.com>)
 - Update test scenario to align with OVAL behavior (Watson Sato
<wsato@redhat.com>)
 - Update SRG-OS-000364-GPOS-00151 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to package_fapolicyd_installed (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to service_fapolicyd_enabled (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000370-GPOS-00155 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix indentation in SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Prevent breaking the paths with spaces (Watson Sato <wsato@redhat.com>)
 - When 'file_regex' is set do not operate on symlinks (Watson Sato
<wsato@redhat.com>)
 - Update SRG-OS-000432-GPOS-00191 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000437-GPOS-00194 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to selinux_state (Matthew Burket <mburket@redhat.com>)
 - Update selinux_policytype for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000445-GPOS-00199 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000031-GPOS-00012 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to dconf_gnome_screensaver_mode_blank (Matthew Burket
<mburket@redhat.com>)
 - Disable templated tests for the rule (Matej Tyc <matyc@redhat.com>)
 - Enable templated test scenarios filtering (Matěj Týč <matyc@redhat.com>)
 - Rename a Rule property files (Matěj Týč <matyc@redhat.com>)
 - Revert "chore: temporaliry change catalog image to load latest CO image"
(Takuya Mishina <tmishina@jp.ibm.com>)
 - The mode should be interpreted as string (Watson Sato <wsato@redhat.com>)
 - Update SRG-OS-000030-GPOS-00011 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update test to reflect current rule behaviour (Watson Sato
<wsato@redhat.com>)
 - Make sure that path pattern_match is achored (Watson Sato <wsato@redhat.com>)
 - Document file only and directory only behavior (Watson Sato
<wsato@redhat.com>)
 - Bash: Make file_regex and recurse independent (Watson Sato
<wsato@redhat.com>)
 - Ansible: Only change files when they are incompliant (Watson Sato
<wsato@redhat.com>)
 - Ansible: Make file_regex and recurse independent in template (Watson Sato
<wsato@redhat.com>)
 - Bash: Only change ownership of incompliant files (Watson Sato
<wsato@redhat.com>)
 - Fix the ownership of the symlink (Watson Sato <wsato@redhat.com>)
 - Update create_srg_export based on feedback (Matthew Burket
<mburket@redhat.com>)
 - Add fix to gnome_gdm_disable_automatic_login (Matthew Burket
<mburket@redhat.com>)
 - Add fix to sshd_do_not_permit_user_env (Matthew Burket <mburket@redhat.com>)
 - Add fix and ocil clause to service_firewalld_enabled (Matthew Burket
<mburket@redhat.com>)
 - Add fix and update rationale in package_firewalld_installed (Matthew Burket
<mburket@redhat.com>)
 - Improve template checks to recurse and regex file names (Watson Sato
<wsato@redhat.com>)
 - Add test to check file permissions within dirs (Watson Sato
<wsato@redhat.com>)
 - Update RHEL9 auxiliary gpg key to auxiliary key 3. (Gabriel Becker
<ggasparb@redhat.com>)
 - explicit rule ordering for sshd_set_keepalive* and sshd_set_idle_timeout
(Vojtech Polasek <vpolasek@redhat.com>)
 - Mention compose_ds.py in docs (Jan Černý <jcerny@redhat.com>)
 - Remove sds_move_ocil_to_checks.py (Jan Černý <jcerny@redhat.com>)
 - Stop using oscap to compose data stream (Jan Černý <jcerny@redhat.com>)
 - Introduce script to compose data streams (Jan Černý <jcerny@redhat.com>)
 - Group rules for removexattr and setxattr under sam SUSE STIG IDs (Yavor
Georgiev <strandjata@gmail.com>)
 - Group chown syscall audit rules under same STIG ID dor SLE12 and SLE15 (Yavor
Georgiev <strandjata@gmail.com>)
 - Group init_module and finit_module audit rules. (Yavor Georgiev
<strandjata@gmail.com>)
 - Fix minor typo (Yavor Georgiev <strandjata@gmail.com>)
 - Add sudoers_default_includedir rule support to SLE12 and SLE15 platforms
(Yavor Georgiev <strandjata@gmail.com>)
 - Add fix text to sshd_disable_empty_passwords (Matthew Burket
<mburket@redhat.com>)
 - Add to fix disable_host_auth (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000480-GPOS-00229 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Prevent breaking file names if they have spaces (Watson Sato
<wsato@redhat.com>)
 - Update SRG-OS-000480-GPOS-00232 for RHEL 9 SRG (Matthew Burket
<mburket@redhat.com>)
 - Introduce new abrt related rules to replace obsolete packages. (Gabriel
Becker <ggasparb@redhat.com>)
 - One step in getting the docs to build again (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000123-GPOS-00064 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add variables for RHEL9 STIG Control (Matthew Burket <mburket@redhat.com>)
 - Add support for variables in create_srg_export (Matthew Burket
<mburket@redhat.com>)
 - HTML encode the < and > in accounts_password_set_max_life_existing (Matthew
Burket <mburket@redhat.com>)
 - Allow for HTML encoding of < and > in srg export (Matthew Burket
<mburket@redhat.com>)
 - Fix fix in dir_perms_world_writable_root_owned (Matthew Burket
<mburket@redhat.com>)
 - Update how the utils/create_srg_export.py sets the Requirement column
(Matthew Burket <mburket@redhat.com>)
 - Populate the IA Control column if using the GPOS SRG. (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000138-GPOS-00069 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000076-GPOS-00044 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_password_set_max_life_existing (Matthew Burket
<mburket@redhat.com>)
 - Add fix text rules under SRG-OS-000075-GPOS-00043 (Matthew Burket
<mburket@redhat.com>)
 - Add text for SRG-OS-000067-GPOS-00035 (Matthew Burket <mburket@redhat.com>)
 - Fix title in stig_rhel9 control (Matthew Burket <mburket@redhat.com>)
 - Ensure that full_name used in the RHEL9 STIG control (Matthew Burket
<mburket@redhat.com>)
 - Fix a couple of issues at create_srg_export (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000362-GPOS-00149 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000360-GPOS-00147 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000344-GPOS-00135 for RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000280-GPOS-00110 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000277-GPOS-00107 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000275-GPOS-00105 for RHEL 9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000205-GPOS-00083 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000184-GPOS-00078 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000132-GPOS-00067 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000079-GPOS-00047 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000066-GPOS-00034 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000024-GPOS-00007 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000001-GPOS-00001 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000395-GPOS-00175 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000362-GPOS-00149 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000279-GPOS-00109 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000276-GPOS-00106 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000275-GPOS-00105 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000191-GPOS-00080 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-0001320GPOS-00067 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000280-GPOS-00110 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000205-GPOS-00083 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000066-GPOS-00034 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update for SRG-OS-000344-GPOS-00135 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix issue with build due to rule SRG-OS-000126-GPOS-00066.yml (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000079-GPOS-00047 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000277-GPOS-00107 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000184-GPOS-00078 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000403-GPOS-00182 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000055-GPOS-00026 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - RHEL9 STIG SRG-OS-000024-GPOS-00007 (Matthew Burket <mburket@redhat.com>)
 - Remove the sshd_set_idle_timeout rule since idle timeout no longer works on
RHEL9. (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000360-GPOS-00147 for RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000001-GPOS-00001 for RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000001-GPOS-00001 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Updated SRG-OS-000079-GPOS-00047 for RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Fix missing "to" in account restriction warnings (Alexander Scheel
<alex.scheel@hashicorp.com>)
 - Initial version of project rules (Matej Tyc <matyc@redhat.com>)
 - Use UID field for bash remediation of homedirs (Alexander Scheel
<alex.scheel@hashicorp.com>)
 - Exclude  user nfsnobody who is equivalent to nobody (Watson Sato
<wsato@redhat.com>)
 - Update SRG-OS-000122-GPOS-00063 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - NIST: AC-18(4) ensure wireless capability is turned disabled using templating
(vincent <wenshen@redhat.com>)
 - Update SRG-OS-000118-GPOS-00060 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update account_disable_post_pw_expiration rationale and ocil_clause and add
fix (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000112-GPOS-00057 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update accounts_password_set_max_life_existing for RHEL 9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add fix text to accounts_maximum_age_login_defs (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000076-GPOS-00044 for RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000074-GPOS-00042 for RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Add fix text for package_vsftpd_removed (Matthew Burket <mburket@redhat.com>)
 - Include RBAC related information for AC-6(8) (TrilokGeer <tgeer@redhat.com>)
 - Update SRG-OS-000071-GPOS-00039 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to accounts_password_pam_dcredit (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000070-GPOS-00038 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text for accounts_password_pam_enforce_root (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to accounts_password_pam_lcredit (Matthew Burket
<mburket@redhat.com>)
 - Add CCE for RHEL9 on accounts_password_pam_enforce_root (Matthew Burket
<mburket@redhat.com>)
 - Add fix text for sssd_enable_certmap (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000068-GPOS-00036 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Move code (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add OCIL, OCIL Clause, Fix to file_permissions_etc_audit_rulesd (Matthew
Burket <mburket@redhat.com>)
 - Add OCIL and fix text to file_permissions_etc_audit_auditd (Matthew Burket
<mburket@redhat.com>)
 - Apply text suggestions (Watson Yuuma Sato <wsato@redhat.com>)
 - Apply text suggestions (Watson Yuuma Sato <wsato@redhat.com>)
 - Override dconf_gdm_dir for OL8 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Turn all wireless interfaces off (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Ignore commented lines in bash_fix_audit_watch_rule (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Audit changes to rsyslogd binary (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - OCP4: Add rules to check kubelet config file permission (vincent
<wenshen@redhat.com>)
 - Introduce rules for abrt packages (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update OL08-00-040001 requirement (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Allow auid to be not equal to -1 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Ignore comments in bash_fix_audit_syscall_rule (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add perm param for audit rules in OL8 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Fix language errors (Matěj Týč <matej.tyc@gmail.com>)
 - Update SRG-OS-000063-GPOS-00032 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000055-GPOS-00026 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRGs only containing service_auditd_enabled for RHEL9 STIG (Matthew
Burket <mburket@redhat.com>)
 - Add fix text to auditd_name_format (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000039-GPOS-00017 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000038-GPOS-00016 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to package_audit_installed (Matthew Burket <mburket@redhat.com>)
 - chore: temporaliry change catalog image to load latest CO image (Takuya
Mishina <tmishina@jp.ibm.com>)
 - Update test platform (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Add fix to service_auditd_enabled (Matthew Burket <mburket@redhat.com>)
 - Add macro to describe for how to enable a service for fix text (Matthew
Burket <mburket@redhat.com>)
 - Add tests to network_configure_name_resolution (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update network_configure_name_resolution (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add rule to prevent routing to loopback (Watson Sato <wsato@redhat.com>)
 - Move mount_option_proc_hidepid to related rule (Watson Sato
<wsato@redhat.com>)
 - Update control response for AC-6(8) (TrilokGeer <tgeer@redhat.com>)
 - Remove nonexistent package rules in recent distro releases. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove reference to a nonexistent file (Jan Černý <jcerny@redhat.com>)
 - Allow lines between pam_env.so and pam_pkcs11.so (Watson Sato
<wsato@redhat.com>)
 - Add <pre> tag HTML element to STIG mapping tables. (Gabriel Becker
<ggasparb@redhat.com>)
 - Override templated test for rule grub2_kernel_trust_cpu_rng (Watson Sato
<wsato@redhat.com>)
 - Refactor Bash macros for pam_faillock rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix ansible remediation of chronyd_or_ntpd_set_maxpoll. (Gabriel Becker
<ggasparb@redhat.com>)
 - Allow service disabled check pass when ActiveState is also failed. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add fix text to sshd_set_loglevel_verbose (Matthew Burket
<mburket@redhat.com>)
 - Add fix text to rsyslog_remote_access_monitoring (Matthew Burket
<mburket@redhat.com>)
 - Add macro for SSHD config fix text (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000032-GPOS-00013 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Skip comparison of non existent benchmark during compare ds. (Gabriel Becker
<ggasparb@redhat.com>)
 - Expand project guidelines (Matěj Týč <matyc@redhat.com>)
 - Fix traceback in SSGTS when packages can't be installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Unify a custom_command (Jan Černý <jcerny@redhat.com>)
 - Add rule to drop gratuitious ARP frames (Watson Sato <wsato@redhat.com>)
 - OCP: cluster version history bug fix (vincent <wenshen@redhat.com>)
 - Fix handling of missing limits.d/*.conf files (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix fix text macro in SRG-OS-000028-GPOS-00009 (Matthew Burket
<m@tthewburket.com>)
 - Remove one "oscap xccdf resolve" step (Jan Černý <jcerny@redhat.com>)
 - Refactor Bash remediation for pam_faillock rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor Ansible remediation for pam_faillock rules (Marcus Burghardt
<maburgha@redhat.com>)
 - SC-7(10) Control Response (vincent <wenshen@redhat.com>)
 - Bump version to 0.1.62 (Watson Sato <wsato@redhat.com>)
 - Remove sudo from bash command (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - OCP: Add vaiabled support for kubelet_configure_tls_cipher_suites (vincent
<wenshen@redhat.com>)
 - Update RHEL7 STIG references. (Gabriel Becker <ggasparb@redhat.com>)
 - Update RHEL8 STIG rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Add rule for sysctl arp (Watson Sato <wsato@redhat.com>)
 - Add rule for sysctl shared_media (Watson Sato <wsato@redhat.com>)
 - Add rule for net.ipv4.conf.all.accept_local (Watson Sato <wsato@redhat.com>)
 - fix: error on kubelet TLS config check in kubelet categoly (copied from api-
server rules) (Takuya Mishina <tmishina@jp.ibm.com>)
 - fix: error (lack of closing double quote) (Takuya Mishina
<tmishina@jp.ibm.com>)
 - feat: update kube scheduler rules (Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: update etcd rule (Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: update kube-controller-manager rules (Takuya Mishina
<tmishina@jp.ibm.com>)
 - feat: customization for ocp-api-server rule and openshift-api-server rule
(Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: hypershift customization for cert/key file locations (Takuya Mishina
<tmishina@jp.ibm.com>)
 - fix: now all rules are "pass" for regression test (Takuya Mishina
<tmishina@jp.ibm.com>)
 - feat: fix yamlpath of openshift-kube-apiserver rules (Takuya Mishina
<tmishina@jp.ibm.com>)
 - feat: fix yamlpath of openshift-kube-apiserver rules regarding
apiServerArguments (Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: fix yamlpath of openshift-kube-apiserver rules with "at least one"
(Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: fix yamlpath of openshift-kube-apiserver rules with "none satisfy"
(Takuya Mishina <tmishina@jp.ibm.com>)
 - chore: replace filepath (Takuya Mishina <tmishina@jp.ibm.com>)
 - chore: replace warnings element (Takuya Mishina <tmishina@jp.ibm.com>)
 - chore: add jinja variables after title (Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: customizable rule for api_server_admission_control_plugin_AlwaysAdmit
(Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: customizable rule for api_server_no_adm_ctrl_plugins_disabled (Takuya
Mishina <tmishina@jp.ibm.com>)
 - feat: support custom/default API path and filter (Takuya Mishina
<tmishina@jp.ibm.com>)
 - chore: rename jinja variable names (Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: customizable rule for api_server_no_adm_ctrl_plugins_disabled (Takuya
Mishina <tmishina@jp.ibm.com>)
 - feat: support distinct object path and dump path for
openshift_filtered_cluster_setting() (Takuya Mishina <tmishina@jp.ibm.com>)
 - Make taylor reg ex to /etc/group and /etc/passwd structure. (sampsone
<esampson@suse.com>)
 - Fix if statements with config_is_distributed (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update rule description for ol8 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Remove -F euid=0 parameter from a rule for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update regex in no_tmux_in_shells rule (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Remove unnecessary criterion from rule for rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Remove unnecessary criterion from rule for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix bash remediation of disable_users_coredumps (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update network_configure_name_resolution (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update network_configure_name_resolution for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix sshd_rekey_limit jinja if statements in OVAL (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Revert "Update sshd_oval_check related default constant" (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Allow variable expansion in grub2 template (Watson Sato <wsato@redhat.com>)
 - Avoid extra spaces in /etc/default/grub (Watson Sato <wsato@redhat.com>)
 - Decouple grub-tool from edition of /etc/default/grub (Watson Sato
<wsato@redhat.com>)
 - Edit /etc/default/grub ourselves on certain systems (Watson Sato
<wsato@redhat.com>)
 - Update OVAL in sshd_disable_compression for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update sshd_oval_check related default constant (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - make macros-bash.jinja more bash -e safe (sampsone <esampson@suse.com>)
 - Add auid criteria to rules required by rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add auid criteria to rule to meet OL08-00-030360 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add auid criteria to rule to meet OL08-00-030380 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add auid criteria to rule to meet OL08-00-030390 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix reference to local_variable (Watson Sato <wsato@redhat.com>)
 - Add rule for HWRNG contribution to pool entropy (Watson Sato
<wsato@redhat.com>)
 - Add rule for MDS vulnerability (Watson Sato <wsato@redhat.com>)
 - Update template_reference.md (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Add rule to force spectre_v2 mitigation (Watson Sato <wsato@redhat.com>)
 - Add rule to mitigate Spec Store Bypass vuln (Watson Sato <wsato@redhat.com>)
 - Add rule for l1tf mitigation (Watson Sato <wsato@redhat.com>)
 - grub2_audit_argument test scenarios cleanup (Milan Lysonek
<mlysonek@redhat.com>)
 - Update SRG-OS-000028-GPOS-00009 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add a macro for donf_ini_file_fix (Matthew Burket <mburket@redhat.com>)
 - Add rule sysctl_fs_protected_fifos (Marcus Burghardt <maburgha@redhat.com>)
 - Add custom ansible remediation for service_pcscd_enabled. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update accounts_umask_etc_bashrc/rule.yml to match rule and remediation
changes (sampsone <esampson@suse.com>)
 - Enable XCCDF variables substitution in Blueprints (Watson Sato
<wsato@redhat.com>)
 - Fix spacing and quoting in the Ansible template (Watson Sato
<wsato@redhat.com>)
 - Fix reporting of remediation errors (Matej Tyc <matyc@redhat.com>)
 - Add rule to configure kernel to panicking on oops (Watson Sato
<wsato@redhat.com>)
 - Replace Red Hat Enterprise Linux 7 with {{{ full_name }}} (Yavor Georgiev
<strandjata@gmail.com>)
 - Drop trailing whitespaces (Yavor Georgiev <strandjata@gmail.com>)
 - Added fix for rules SRG-OS-000023-GPOS-00006 (Matthew Burket
<mburket@redhat.com>)
 - Update SRG-OS-000023-GPOS-00006 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Add details to rationale on audit_rules_sudoers and audit_rules_sudoers
(Matthew Burket <mburket@redhat.com>)
 - Fix title and remove redundant rules in SRG-OS-000004-GPOS-00004 for RHEL9
STIG (Matthew Burket <mburket@redhat.com>)
 - Update chronyd_or_ntpd_set_maxpoll OVAL to check both configs (ntpd and
chronyd) (Milan Lysonek <mlysonek@redhat.com>)
 - Use FQDN comparison when finding the profile in STIG tailoring. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove RHEL7 platform from invalid_rescue.pass.sh (Milan Lysonek
<mlysonek@redhat.com>)
 - Remove grub2_pti_argument tests because they are templated (Milan Lysonek
<mlysonek@redhat.com>)
 - Delete test scenario that removes SSH keys from machine (Milan Lysonek
<mlysonek@redhat.com>)
 - For no_empty_passwords, move container note to warning section (Milan Lysonek
<mlysonek@redhat.com>)
 - Mark no_empty_passwords_etc_shadow as machine only (Milan Lysonek
<mlysonek@redhat.com>)
 - OCP4: Added control response for SI-4(24) (vincent <wenshen@redhat.com>)
 - On sle15 accounts_authorized_local_users removes accounts it should not
(sampsone <esampson@suse.com>)
 - OL8 STIG profile severity adjustments (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add rule sysctl_fs_protected_regular (Marcus Burghardt <maburgha@redhat.com>)
 - Update grub2_admin_username to use CPE (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - hidepid option compatibility with kernel > 5.8 (Marcus Burghardt
<maburgha@redhat.com>)
 - Include prodtype for mount_option_proc_hidepid (Marcus Burghardt
<maburgha@redhat.com>)
 - Adjust var_mount_option_proc_hidepid.var to string (Marcus Burghardt
<maburgha@redhat.com>)
 - Include rule mount_option_proc_hidepid (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix accounts_umask_etc_bashrc to work with sle12/15 (sampsone
<esampson@suse.com>)
 - gid_passwd_group_same oval does not allow ! in passwd field (sampsone
<esampson@suse.com>)
 - Fix prodtype sorting (Yavor Georgiev <strandjata@gmail.com>)
 - Update sle12 stig profile (Yavor Georgiev <strandjata@gmail.com>)
 - SLE 12 and 15 update STIG ID refs of unsuccessful file modification rules
(Yavor Georgiev <strandjata@gmail.com>)
 - SLE 12 and 15 update STIG ID refs of file modification rules (Yavor Georgiev
<strandjata@gmail.com>)
 - SLE 12 and 15 update STIG ID references of fchmod rules (Yavor Georgiev
<strandjata@gmail.com>)
 - Fix condition logic, CI shellcheck issue and add BATS tests (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add bash_ensure_ini_config macro I realized that having two different macros
for sssd was unnecessary, and so I replaced both of them with a general-purpose
macro bash_ensure_ini_config, which works with any ini-style config and combines
the functionality of both macros that it replaces. I moved chown and chmod
commands that were used on the output config file from the macro as it is an
edge case and causes issues with CI and BATS tests. If the resulting config file
must have different owner or permissions, this must be addressed in the specific
remediation script where the macro is invoked. (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add missing argument passed to macro tested in BATS (Jiri Odehnal
<jodehnal@redhat.com>)
 - Change BATS tests to create dummy sssd file (Jiri Odehnal
<jodehnal@redhat.com>)
 - fix require_singleuser_auth for sle12/sle15 (sampsone <esampson@suse.com>)
 - Update linux_os/guide/system/software/integrity/software-
integrity/aide/aide_build_database/ansible/shared.yml (Earl Sampson
<ESampson@suse.com>)
 - fix require_emergency_target_auth for sle12/sle15 (sampsone
<esampson@suse.com>)
 - no iptables.service in sle15 (sampsone <esampson@suse.com>)
 - Document 'arg_variable' in grub2_bootloader_argument (Watson Sato
<wsato@redhat.com>)
 - Add variable handling in templated test scenario (Watson Sato
<wsato@redhat.com>)
 - Add XCCDF variable support in grub2_bootlader_argument (Watson Sato
<wsato@redhat.com>)
 - Add rule for mce grub2 boot argument (Watson Sato <wsato@redhat.com>)
 - Add rule for slab_nomerge grub2 boot argument (Watson Sato
<wsato@redhat.com>)
 - Parametrize rule sysctl_kernel_ptr_restrict (Watson Sato <wsato@redhat.com>)
 - Extract macro update_etc_default_grub_manually() (Watson Sato
<wsato@redhat.com>)
 - fix aide_build_database rule and remediation to work with sles 12 and 15
(sampsone <esampson@suse.com>)
 - Change platform on some rules to multi_platform_all (Matthew Burket
<mburket@redhat.com>)
 - Align the bash grub2 macro and the template (Watson Sato <wsato@redhat.com>)
 - Remove sle files (anivan-suse <anastasija.ivanovic@suse.com>)
 - Update linux_os/guide/system/accounts/accounts-
restrictions/password_storage/no_empty_passwords_etc_shadow/rule.yml (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add rules for CIS EKS section 5.4 (Lance Bragstad <lbragsta@redhat.com>)
 - Remove kernel_module_vfat_disabled from controls/cis_sle_15.yml (sampsone
<esampson@suse.com>)
 - OCP4: AC-6(7) Control Response (vincent <wenshen@redhat.com>)
 - OCP4: AC-4(8) Control Response (vincent <wenshen@redhat.com>)
 - update SLE CIS profiles to specify cron service (sampsone
<esampson@suse.com>)
 - Update shared.yml (teacup-on-rockingchair <strandjata@gmail.com>)
 - Update linux_os/guide/system/accounts/accounts-
restrictions/password_storage/no_empty_passwords_etc_shadow/ansible/shared.yml
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Enforce parameter presence in a rule for RHEL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Enforce parameter presence in a rule for OL8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add disallow_bypass_password_sudo rule to SLE stig profiles (Yavor Georgiev
<strandjata@gmail.com>)
 - Add no_empty_passwords_etc_shadow rule to SLE stig profiles (Yavor Georgiev
<strandjata@gmail.com>)
 - Update GPOS SRG to v2r2 (Matthew Burket <mburket@redhat.com>)
 - Fix macro regex and add BATS unit tests (Jiri Odehnal <jodehnal@redhat.com>)
 - Remove profiles tag for CI to pass (Jiri Odehnal <jodehnal@redhat.com>)
 - Remove redundant argument in macro (Jiri Odehnal <jodehnal@redhat.com>)
 - Add new sssd config macro and use it in remediations; fix comments (Jiri
Odehnal <jodehnal@redhat.com>)
 - Simplify 4 legacy sssd remediations into a macro (Jiri Odehnal
<jodehnal@redhat.com>)
 - OCP4: AC-6(3) Control Response (vincent <wenshen@redhat.com>)
 - OCP4: Add control response for AC-12(1) (vincent <wenshen@redhat.com>)
 - Remove STIG profile from RHCOS4 (Matthew Burket <mburket@redhat.com>)
 - Ensure that get_implemented_stigs in utils/create_scap_delta_tailoring.py
works for all case (Matthew Burket <mburket@redhat.com>)
 - Adjsut partitions sizes to acomodate a GUI install (Watson Sato
<wsato@redhat.com>)
 - Ensure test scenarios work on containers too (Watson Sato <wsato@redhat.com>)
 - Add rule to check if SMAP is disabled (Watson Sato <wsato@redhat.com>)
 - Use grub2 arg absent template SMEP rule (Watson Sato <wsato@redhat.com>)
 - Document grub2_bootloader_argument_absent template (Watson Sato
<wsato@redhat.com>)
 - Modify template to check for absence of argument (Watson Sato
<wsato@redhat.com>)
 - Update template tests (Watson Sato <wsato@redhat.com>)
 - copy grub2_template_argument as grub2_template_argument_absent (Watson Sato
<wsato@redhat.com>)
 - Add rule to check if SMEP is disabled (Watson Sato <wsato@redhat.com>)
 - Improve remediations of pam rules (Matěj Týč <matyc@redhat.com>)
 - Added test scenario metadata (Matěj Týč <matyc@redhat.com>)
 - Remove the shellcheck cmake test that doesnt work (Matěj Týč
<matyc@redhat.com>)
 - Install shellcheck for the gating (Matej Tyc <matyc@redhat.com>)
 - Introduce the shellcheck test (Matej Tyc <matyc@redhat.com>)
 - Wording fixes (Matěj Týč <matej.tyc@gmail.com>)
 - Fixes in the Chromium product (Matěj Týč <matyc@redhat.com>)
 - Fix Firefox remediation (Matěj Týč <matyc@redhat.com>)
 - Introduce convenience macros for find and awk (Matěj Týč
<matyc@redhat.com>)
 - Add quoting (Matěj Týč <matyc@redhat.com>)
 - Update
linux_os/guide/system/software/integrity/fips/enable_fips_mode/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - Apply suggestions from code review (Edgar Aguilar <xeicker@gmail.com>)
 - Create tests to no_empty_passwords_etc_shadow (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to meet STIG ID OL07-00-010291 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Simplify generated expressions (Matej Tyc <matyc@redhat.com>)
 - chang warning and description (Vojtech Polasek <vpolasek@redhat.com>)
 - remove extend definition from ovals (Vojtech Polasek <vpolasek@redhat.com>)
 - Deference the for loop variable (Matěj Týč <matyc@redhat.com>)
 - Various quoting fixes (Matěj Týč <matyc@redhat.com>)
 - Fix the if condition (Matěj Týč <matyc@redhat.com>)
 - Fix handling of literal dollars (Matej Tyc <matyc@redhat.com>)
 - Fix the firewalld remediation (Matěj Týč <matyc@redhat.com>)
 - Add CPE to OCP profile filter (vincent <wenshen@redhat.com>)
 - Create tests to disallow_bypass_password_sudo (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Create rule to meet STIG ID OL07-00-010344 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add version to delta tailoring file name (Matthew Burket
<mburket@redhat.com>)
 - Remove tmux process runinng check from configure_bashrc_exec_tmux. (Gabriel
Becker <ggasparb@redhat.com>)
 - get_implemented_stigs in utils/create_scap_delta_tailoring.py should return
the implemented stig items (Matthew Burket <mburket@redhat.com>)
 - Generalize ol7 changes in sudoers_validate_passwd (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Add test scenario to sudoers_validate_passwd (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Fix spelling error in utils/create_srg_export.py (Matthew Burket
<mburket@redhat.com>)
 - Revert "Enforce rule to obtain results from only one file" (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update badge URLs to point to open-scap.org. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove broken Centos CI integration. (Gabriel Becker <ggasparb@redhat.com>)
 - fix storing of XML content for compiled platforms (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix ordering for stigids to match style guide (Lenox, Joseph D (Joseph)
<Joseph.Lenox@corp.rockwellcollins.com>)
 - Fix for bug 1195523 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Update fix (anivan-suse <anastasija.ivanovic@suse.com>)
 - setting stigid for rules to align to DISA V6R1 (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - remove duplicate ID (Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Remove old stigid for rules in favor of DISA rules; add prodtype for the
other ones we touched. (Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Ensure that create_srg_export only writes rules once (Matthew Burket
<mburket@redhat.com>)
 - In create_srg_export ensure that severity is always expressed in CAT I, CAT
II, and CATIII (Matthew Burket <mburket@redhat.com>)
 - Add rule for EKS CIS section 5.6 (Lance Bragstad <lbragsta@redhat.com>)
 - Add STIGID for new rules and a few old ones Set metadata for DISA version to
V6R1 (Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Add a rule for EKC CIS section 5.5 (Lance Bragstad <lbragsta@redhat.com>)
 - Add rule for EKS CIS section 5.3 (Lance Bragstad <lbragsta@redhat.com>)
 - Update fix (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add a rule for EKS CIS section 5.2 (Lance Bragstad <lbragsta@redhat.com>)
 - Update fix (anivan-suse <anastasija.ivanovic@suse.com>)
 - add rules to rhel9 ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add zipl variant (Vojtech Polasek <vpolasek@redhat.com>)
 - add grub2 variant (Vojtech Polasek <vpolasek@redhat.com>)
 - Do not remove krb5-workstation package on oVirt (Watson Sato
<wsato@redhat.com>)
 - Add newline in the RHEL9 OSPP description (Gabriel Becker
<ggasparb@redhat.com>)
 - update description of rhel9 ospp profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add rules for EKS CIS section 5.1 (Lance Bragstad <lbragsta@redhat.com>)
 - Ensure that policy loading in utils/create_srg_export.py uses env_yaml
(Matthew Burket <mburket@redhat.com>)
 - Add sudoers_default_includedir to ol7 STIG (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Generalize OpenShift groups (Lance Bragstad <lbragsta@redhat.com>)
 - Enforce rule to obtain results from only one file (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Enforce rule to obtain results from only one file (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Simply mask services that should be disabled (Watson Sato <wsato@redhat.com>)
 - Group RHEL7 STIG audit rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Group RHEL7 STIG audit rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Group RHEL7 STIG audit rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Group RHEL7 STIG audit rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Group RHEL7 STIG audit rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Group RHEL7 STIG audit rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Set var_time_service_set_maxpoll to 18_hours in RHEL7 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Assign RHEL-07-020029 to package_aide_installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improve error handling in the test suite (Matěj Týč <matyc@redhat.com>)
 - Assign RHEL-07-010339 to sudoers_default_includedir. (Gabriel Becker
<ggasparb@redhat.com>)
 - Set INACTIVE=035 in RHEL7 STIG profile as update of V3R6. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add Dockerfiles for OL7 and OL8 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - RHCOS: Control Response for AC-2(11) (vincent <wenshen@redhat.com>)
 - OCP: SI-7(2) Control response (vincent <wenshen@redhat.com>)
 - OCP4: add SC-6 rules under SC-6 controls (vincent <wenshen@redhat.com>)
 - Update the podman build command in OCP unit tests guide (Lance Bragstad
<lbragsta@redhat.com>)
 - trivial: Fix minor spelling issues in OCP4 unit test docs (Lance Bragstad
<lbragsta@redhat.com>)
 - Set prodtype for all new rules (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Handle case when /etc/sudoers.d doesn't exist (Watson Sato
<wsato@redhat.com>)
 - Introduce CPE for aarch64 and make package_rear_installed n/a aarch64.
(Gabriel Becker <ggasparb@redhat.com>)
 - add `prodtype: firefox` as workaround for diff system (Lenox, Joseph D
(Collins) <Joseph.Lenox@collins.com>)
 - Update shared/templates/firefox_lockparameter/tests/correct_value.pass.sh
(Joseph Lenox <joseph.lenox@collins.com>)
 - Update shared/templates/firefox_lockparameter/tests/wrong_value.fail.sh
(Joseph Lenox <joseph.lenox@collins.com>)
 - Fix Ansible remediation metadata (Watson Sato <wsato@redhat.com>)
 - Extend bash_package_remove macro in SSGTS context (Marcus Burghardt
<maburgha@redhat.com>)
 - Update RHEL8 STIG profile stability data (Watson Sato <wsato@redhat.com>)
 - Add SRG to sudoers_default_includedir (Watson Sato <wsato@redhat.com>)
 - Update rule catch and remove other sudo includes (Watson Sato
<wsato@redhat.com>)
 - Add tests for sudo file and dir includes in /etc/sudoers.d (Watson Sato
<wsato@redhat.com>)
 - Update RHEL-08-010385 to allow only one occurrence of config. (Gabriel Becker
<ggasparb@redhat.com>)
 - more modifications to description and ocil (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update shared/macros.jinja (vojtapolasek <krecoun@gmail.com>)
 - remove warnings from rules (Vojtech Polasek <vpolasek@redhat.com>)
 - fix an error in ubuntu version of macro (Vojtech Polasek
<vpolasek@redhat.com>)
 - use new jinja macros in all grub2 related rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix omission  in ocil jinja macro (Vojtech Polasek <vpolasek@redhat.com>)
 - use new macros in grub2_audit_argument (Vojtech Polasek
<vpolasek@redhat.com>)
 - create two macros (Vojtech Polasek <vpolasek@redhat.com>)
 - Correct test scenario metadata (Matěj Týč <matyc@redhat.com>)
 - Add support for checks of both BIOS/UEFI systems (Matej Tyc
<matyc@redhat.com>)
 - Improve the template further (Matěj Týč <matyc@redhat.com>)
 - Add SRG references to STIG rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Extend package_pam_pwquality_installed rule for RHEL (Marcus Burghardt
<maburgha@redhat.com>)
 - Change the default product setting (Matěj Týč <matyc@redhat.com>)
 - Change the grub2 bootloader argument template (Matej Tyc <matyc@redhat.com>)
 - Playbooks now contain ansible.builtin task definitions which requires ansible
2.9 or higher (Dan Clark <danclark@redhat.com>)
 - Fix for bug 1195652 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix bug 1195521 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add tests for the templated rules. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Trim unnecessary vars from rule yaml and fix oval template (Lenox, Joseph D
(Joseph) <Joseph.Lenox@corp.rockwellcollins.com>)
 - Fix build issues for firefox templated rules. (Lenox, Joseph D (Joseph)
<Joseph.Lenox@corp.rockwellcollins.com>)
 - Implement missing DISA Cat II rules and remediations for Firefox. (Lenox,
Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Add EKS CIS section 2.1.1 rule (Lance Bragstad <lbragsta@redhat.com>)
 - Fix build issues with template (Lenox, Joseph D (Joseph)
<Joseph.Lenox@corp.rockwellcollins.com>)
 - Convert to a templated rule (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Stub in check for firefox rule to check telemetry (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Add rule ensuring Chrony only uses server directive (Watson Sato
<wsato@redhat.com>)
 - Gitpod: Build OpenSCAP 1.3.6 so it can build OCP4 and EKS content. (Gabriel
Becker <ggasparb@redhat.com>)
 - Pass the rule when no time server nor pool is set (Watson Sato
<wsato@redhat.com>)
 - Update configure_bashrc_exec_tmux to include that tmux must be running.
(Gabriel Becker <ggasparb@redhat.com>)
 - Set tmux_not_running.fail.sh scenario to skip remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update tmux process running regex to match tmux without spaces as well.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix for bug 1195534 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Bug 1994609: OCP: Update SDN rules to the correct platform (vincent
<wenshen@redhat.com>)
 - OCP fix insecureEdgeTerminationPolicy check (vincent <wenshen@redhat.com>)
 - OCP enable variable support for sshd remediation (vincent
<wenshen@redhat.com>)
 - OCP fix rules resource_requests_quota and
configure_network_policies_namespaces (vincent <wenshen@redhat.com>)
 - OCP4: Fix api_server_no_adm_ctrl_plugins_disabled jq filter (vincent
<wenshen@redhat.com>)
 - Update STIG IDs for RHEL8 related to pam_pwquality rules (Marcus Burghardt
<maburgha@redhat.com>)
 - RHEL9 is supported (Matej Tyc <matyc@redhat.com>)
 - Introduce stig_gui profile for OL8 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add test and fix for case when the single includedir is wrong (Watson Sato
<wsato@redhat.com>)
 - Remove RHEL-08-010200 and RHEL-08-010201 from RHEL8 and RHEL9 STIG. (Gabriel
Becker <ggasparb@redhat.com>)
 - Select rule in RHEL8 STIG (Watson Sato <wsato@redhat.com>)
 - Add rule to check for default sudoers includedir (Watson Sato
<wsato@redhat.com>)
 - Do not require unique configuration of tmux in bashrc and profile.d. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix bug 1195525 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix typo in accounts_password_pam_unix_remember Ubuntu bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add CI registry to reject_unsigned_images_by_default manual remediation
(vincent <wenshen@redhat.com>)
 - Remove result_after_remediation for routes related rules (vincent
<wenshen@redhat.com>)
 - drop not needed rules (Vojtech Polasek <vpolasek@redhat.com>)
 - Update remediations of sudoers_validate_passwd to remove duplicates. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update RHEL-08-010383 to require only one occurrence of a config. (Gabriel
Becker <ggasparb@redhat.com>)
 - modify remaining files to be in sync with audit 3.0.7 upstream release
(Vojtech Polasek <vpolasek@redhat.com>)
 - Add rule accounts_password_pam_pwquality_password_auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Add rule accounts_password_pam_pwquality_system_auth (Marcus Burghardt
<maburgha@redhat.com>)
 - Update template accounts_password with single parameter for zero cmp.
(Gabriel Becker <ggasparb@redhat.com>)
 - Use the Jinja variable 'parameter' where applicable (Watson Sato
<wsato@redhat.com>)
 - Update ocil_clause of encrypt_partitions to exclude boot partition. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add brackets to remediations, solve CI error by changing macro (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fix formatting, readability and add changes from #8032 (Jiri Odehnal
<jodehnal@redhat.com>)
 - Remove unnecessary slash (Jiri Odehnal <jodehnal@redhat.com>)
 - Fix variable name (Jiri Odehnal <jodehnal@redhat.com>)
 - Use new jinja macro instead of repetitive remediation scripts (Jiri Odehnal
<jodehnal@redhat.com>)
 - Update accounts_password template to support zero boundary check. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove deselection of selinux_state RHEL8 ANSSI (Watson Sato
<wsato@redhat.com>)
 - SC-12: Add ingress_controller_certificate rule (Matt Rogers
<mrogers@redhat.com>)
 - Refactor arg_audit (Matthew Burket <mburket@redhat.com>)
 - remove extra tests for rhel9 case (Vojtech Polasek <vpolasek@redhat.com>)
 - unify content of file for rhel9 and rhel8 (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add test scenarios for rule ccounts_password_pam_maxclassrepeat. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add doc about new `non_zerocheck` attribute in accounts_password. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update RHEL8/9 profile file according to latest references in audit. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update reference in RHEL STIG profile file RHEL-08-020221. (Gabriel Becker
<ggasparb@redhat.com>)
 - Assign single STIGID to multiples syscalls rules dac modification group.
(Gabriel Becker <ggasparb@redhat.com>)
 - Assign single STIGID to multiples syscalls rules dac modification group.
(Gabriel Becker <ggasparb@redhat.com>)
 - Assign single STIGID to multiples syscalls rules file modification group.
(Gabriel Becker <ggasparb@redhat.com>)
 - Assign single STIGID to multiples syscalls rules file deletion group.
(Gabriel Becker <ggasparb@redhat.com>)
 - Assign single STIGID to multiples syscalls rules of *init group. (Gabriel
Becker <ggasparb@redhat.com>)
 - Assign single STIGID to multiples syscalls rules of *attr group. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add tests that check rule selection in controls (Watson Sato
<wsato@redhat.com>)
 - Update test scenarios to align with the rule (Watson Sato <wsato@redhat.com>)
 - Fix SSGTS platform machine overriding mechanism. (Gabriel Becker
<ggasparb@redhat.com>)
 - Assign RHEL-08-020221 to
accounts_password_pam_pwhistory_remember_password_auth (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix for bug 1195524 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix syntax in xwindows_remove_packages warning (Watson Yuuma Sato
<wsato@redhat.com>)
 - Fix for bug 1195520 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Update rule to only remove the graphical interface (Watson Sato
<wsato@redhat.com>)
 - Add RHEL-08-040321 to RHEL8 STIG profile (Watson Sato <wsato@redhat.com>)
 - Fix gh-pages build. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix the PR URL in the Gitpod workflow that adds the comment to a PR. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update accounts_password_pam_maxclassrepeat rule (Edgar Aguilar
<xeicker@gmail.com>)
 - Fix the directory for products stats script (Matthew Burket
<mburket@redhat.com>)
 - Update ensure_oracle_gpgkey_installed (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update accounts_authorized_local_users for OL (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update ol7 stig profile version info (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update STIG IDs to meet ol7 v2r6 (Edgar Aguilar <edgar.aguilar@oracle.com>)
 - Update vars in ol7 STIG profile to meet v2r6 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Select an older version of Fedora image (34) in gitpod. (Gabriel Becker
<ggasparb@redhat.com>)
 - Implement OVAL selinux_context_elevation_for_sudo (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Introduce nonzero_check to accounts_password (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Update denylisted folders in choosing_policy_page.py script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Evaluate EKS CIS benchmark section 4.1 (Lance Bragstad <lbragsta@redhat.com>)
 - Evaluate EKS CIS benchmark section 5.6 (Lance Bragstad <lbragsta@redhat.com>)
 - Evaluate EKS CIS benchmark section 5.5 (Lance Bragstad <lbragsta@redhat.com>)
 - Evaluate EKS CIS section 5.4 (Lance Bragstad <lbragsta@redhat.com>)
 - Add missing rsync dependency to gh-pages workflow. (Gabriel Becker
<ggasparb@redhat.com>)
 - Evaluate CIS EKS benchmark section 5.3 (Lance Bragstad <lbragsta@redhat.com>)
 - Evaluate CIS EKS benchmark section 5.2 (Lance Bragstad <lbragsta@redhat.com>)
 - Update rule to handle distributed config (Watson Sato <wsato@redhat.com>)
 - Add tests for distributed SSHD RekeyLimit config (Watson Sato
<wsato@redhat.com>)
 - Base the gh-pages workflow on Fedora. (Gabriel Becker <ggasparb@redhat.com>)
 - Evaluate EKS Section 5.1 (Lance Bragstad <lbragsta@redhat.com>)
 - Added utils/compare_disa_xml.py (Matthew Burket <mburket@redhat.com>)
 - Update configure_bashrc_exec_tmux to consider .d directory. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove duplicated STIG rule. RHEL-08-010560 is now removed from V1R5.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add script that generates an HTML page to display guides. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update EKS CIS section 2 (Lance Bragstad <lbragsta@redhat.com>)
 - Bump RHEL7 STIG profiles and docs to V3R6. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA RHEL7 STIG scap content to V3R6. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL7 STIG manual benchmark to V3R6. (Gabriel Becker
<ggasparb@redhat.com>)
 - Bump RHEL8 STIG profiles and docs to V1R5. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA RHEL8 STIG scap content to V1R4. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL8 STIG manual benchmark to V1R5. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update README page with new link to statistics workflow page. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add github workflow to publish statistics, guides and tables. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4 adds OVN,SDN networkType CPE (vincent <wenshen@redhat.com>)
 - Fixed target duplication in newer cmake versions (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fixed doc formatting (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed formatting, added documentation, fixed minor issues and used argparse
and argbash (Jiri Odehnal <jodehnal@redhat.com>)
 - implemented buildsystem profiling (Jiri Odehnal <jodehnal@redhat.com>)
 - add documentation to new macros (Vojtech Polasek <vpolasek@redhat.com>)
 - remove debug function (Vojtech Polasek <vpolasek@redhat.com>)
 - prevent repeated evaluation of platforms when reading compiled rules (Vojtech
Polasek <vpolasek@redhat.com>)
 - fix problem with building of ocp4 (Vojtech Polasek <vpolasek@redhat.com>)
 - fix pep8 issues (Vojtech Polasek <vpolasek@redhat.com>)
 - remove debug statements (Vojtech Polasek <vpolasek@redhat.com>)
 - update tests (Vojtech Polasek <vpolasek@redhat.com>)
 - env_yaml is not needed in some functions (Vojtech Polasek
<vpolasek@redhat.com>)
 - modify unit test to use pytest fixtures to prevent code duplication (Vojtech
Polasek <vpolasek@redhat.com>)
 - update unit tests (Vojtech Polasek <vpolasek@redhat.com>)
 - extract product_cpes from env_yaml (Vojtech Polasek <vpolasek@redhat.com>)
 - Improve test for ProductCPEs.get_cpe() (Jan Černý <jcerny@redhat.com>)
 - Change way the XML serialization is tested (Jan Černý <jcerny@redhat.com>)
 - Add a test for the dictionary representation (Jan Černý
<jcerny@redhat.com>)
 - Test product CPE (Jan Černý <jcerny@redhat.com>)
 - Remove superfluous parenthesis (Jan Černý <jcerny@redhat.com>)
 - Add tests for Platform class (Jan Černý <jcerny@redhat.com>)
 - Add tests for ProductCPEs class (Jan Černý <jcerny@redhat.com>)
 - Put spaces around bash operators (Jan Černý <jcerny@redhat.com>)
 - Fix unit tests for Ansible remediation generator (Jan Černý
<jcerny@redhat.com>)
 - remove one more deprecated function (Vojtech Polasek <vpolasek@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - fix pep8 (Vojtech Polasek <vpolasek@redhat.com>)
 - add remaining ansible conditionals (Vojtech Polasek <vpolasek@redhat.com>)
 - ignore CPE definitions with empty bash/ansible conditional (Vojtech Polasek
<vpolasek@redhat.com>)
 - ignore empty conditionals when creating remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - insert space around operators in ansible (Vojtech Polasek
<vpolasek@redhat.com>)
 - add several ansible conditionals (Vojtech Polasek <vpolasek@redhat.com>)
 - add new macro to create ansible conditional for packages (Vojtech Polasek
<vpolasek@redhat.com>)
 - reimplement generation of ansible remediations to honor new ansible
conditionals (Vojtech Polasek <vpolasek@redhat.com>)
 - drop obsolete function (Vojtech Polasek <vpolasek@redhat.com>)
 - eliminate empty bash conditionals (Vojtech Polasek <vpolasek@redhat.com>)
 - insert bash_conditionals to applicability definitions (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove debug statements and obsolete function and defitions (Vojtech Polasek
<vpolasek@redhat.com>)
 - align package checks with original ones (Vojtech Polasek
<vpolasek@redhat.com>)
 - improve jinja macros (Vojtech Polasek <vpolasek@redhat.com>)
 - reimplement bash remediation conditionals (Vojtech Polasek
<vpolasek@redhat.com>)
 - recreate the test object when reading platforms from the yaml file (Vojtech
Polasek <vpolasek@redhat.com>)
 - load compiled platforms when building remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - make sure that bash_conditionals are properly created (Vojtech Polasek
<vpolasek@redhat.com>)
 - rework process of parsing platforms (Vojtech Polasek <vpolasek@redhat.com>)
 - add attributes to hold cpe_names of inherited platforms (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new jinja macro (Vojtech Polasek <vpolasek@redhat.com>)
 - modify build system to parse also bash remediation conditionals (Vojtech
Polasek <vpolasek@redhat.com>)
 - fix saving of platforms (Vojtech Polasek <vpolasek@redhat.com>)
 - fix saving of compiled platforms (Vojtech Polasek <vpolasek@redhat.com>)
 - Add test for underscores and dashes for boolean_expression and fix the name
source for Symbol. (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - fix pep8 (Vojtech Polasek <vpolasek@redhat.com>)
 - load compiled platforms into env_yaml["product_cpes"].platforms (Vojtech
Polasek <vpolasek@redhat.com>)
 - introduce compiled platforms (Vojtech Polasek <vpolasek@redhat.com>)
 - monkey patch pkg_resources.safe_name to overcome problem with underscores in
platform namtes (Vojtech Polasek <vpolasek@redhat.com>)
 - change way of getting a CPEALFactref name (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove no longer used functions (Vojtech Polasek <vpolasek@redhat.com>)
 - demonstrate logical expression on chronyd_or_ntp_* rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix pep8 issues (Vojtech Polasek <vpolasek@redhat.com>)
 - modify build_yaml.py to correctly use platforms with logical expressions
(Vojtech Polasek <vpolasek@redhat.com>)
 - adding parsing of logical expressions into CPEAL* classes (Vojtech Polasek
<vpolasek@redhat.com>)
 - File template: Ansible remediation now considers hidden files. (Gabriel
Becker <ggasparb@redhat.com>)
 - Enable multi_platform_rhel in some file permissions test scenarios. (Gabriel
Becker <ggasparb@redhat.com>)
 - Assign RHEL-08-010341 and RHEL-08-010351 to rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Requirement of not losing data at least to a limit comes from FAU_STG family.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - Assign RHEL-08-010359 to package_aide_installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove more deprecated RHEL6 references from the project. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: Add Google IdP for CI testing for rule idp_is_configured (vincent
<wenshen@redhat.com>)
 - Set reboot meta parameter to true since we modify grub related rule Thanks to
@Mab879 for raising the issue (Yavor Georgiev <strandjata@gmail.com>)
 - Install html preview extension to Gitpod environment. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add rule to ol8 stig profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Rule selection change for OL8 STIG (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add sysctl_net_ipv6_conf_all_forwarding to OL8 stig profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add badge for gitpod. (Gabriel Becker <ggasparb@redhat.com>)
 - Integrate CTF with Gitpod and post as a comment to the pull request. (Gabriel
Becker <ggasparb@redhat.com>)
 - Make the product parameterized in gitpod config. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add docker support in the test_rule_in_container script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add gitpod support. (Gabriel Becker <ggasparb@redhat.com>)
 - remove it from the build config files (Vojtech Polasek <vpolasek@redhat.com>)
 - remove scripts for generating of benchmark (Vojtech Polasek
<vpolasek@redhat.com>)
 - Adding filtering for has_resource_request_limits.pass.sh test (Nagarjuna
Sarvepalli <snagarju@redhat.com>)
 - Correcting JQ filter, missing space . So it create wrong Hash value
(Nagarjuna Sarvepalli <snagarju@redhat.com>)
 - Make require_singleuser_auth compliant for rhel8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Make require_singleuser_auth compliant for ol8 (Edgar Aguilar
<edgar.aguilar@oracle.com>)
 - Bump version number 0.1.61 (Watson Sato <wsato@redhat.com>)
 - make rule names consistent (Vojtech Polasek <vpolasek@redhat.com>)
 - Ensure all processes are auditable and rules loaded for FAU_GEN.1 are
applied. (Jan Pazdziora <jpazdziora@redhat.com>)
 - remove rhel9 prodtype from the rule and remove it from stig profile (Vojtech
Polasek <vpolasek@redhat.com>)
 - Adapt to a shift to a simpler datatype (Matěj Týč <matyc@redhat.com>)
 - Correction in unit test: (Nagarjuna Sarvepalli <snagarju@redhat.com>)
 - Update shared/checks/oval/installed_env_has_polkit_package.xml (Watson Yuuma
Sato <wsato@redhat.com>)
 - Update shared/applicability/general.yml (vojtapolasek <krecoun@gmail.com>)
 - On OSPP installation, the primary reason for having rsyslog installed is to
enable the trusted channel for auditing. (Jan Pazdziora <jpazdziora@redhat.com>)
 - The write_logs is related to where audit records end up stored, not what
records get generated. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Amend OSPP references for rsyslog omfwd/gtls configuration. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Configuring the CA certificate targets the TLS "internal" requirements, so
FTP_ITC_EXT.1.1 is not needed. (Jan Pazdziora <jpazdziora@redhat.com>)
 - add polkit platform to network_nmcli_permissions (Vojtech Polasek
<vpolasek@redhat.com>)
 - add new platform for polkit package (Vojtech Polasek <vpolasek@redhat.com>)
 - Support for directory check in ansible_sshd_set macro (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix removal of line from config file in ansible_set_config_file_dir macro
(Milan Lysonek <mlysonek@redhat.com>)
 - Add python3-libselinux package for ensure_gpgcheck_local_packages tests
(Watson Sato <wsato@redhat.com>)
 - Update anssi kickstart files to use authselect profiles (Marcus Burghardt
<maburgha@redhat.com>)
 - Keep syntax in pkg_manager_config_file consistent (Watson Sato
<wsato@redhat.com>)
 - Apply the config to the correct pkg manager config (Watson Sato
<wsato@redhat.com>)
 - OCP4:fix controller_insecure_port_disabled rule (vincent
<wenshen@redhat.com>)
 - Unify the Ansible remediations for ensure_gpgcheck_globally_activated
(Matthew Burket <mburket@redhat.com>)
 - Add OL9 prodtype to rules part of standard profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Introduce OL9 product (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add python3-libselinux package for ensure_gpgcheck_globally_activated tests
(Matthew Burket <mburket@redhat.com>)
 - Update OVAL to acually check all NIC configuration (Watson Sato
<wsato@redhat.com>)
 - Update path where to look for NIC configuration (Watson Sato
<wsato@redhat.com>)
 - Correcting Unit test case in statefulsets (Nagarjuna Sarvepalli
<snagarju@redhat.com>)
 - Update control rules and response text for CM-8(3) (Swarup Ghosh
<swghosh@redhat.com>)
 - Update list of contributors for 0.1.60 release (Watson Sato
<wsato@redhat.com>)
 - adding Resource limits and requests for daemonset, Statfulset and deployment
(Nagarjuna Sarvepalli <snagarju@redhat.com>)
 - CFE-214 : Inital commmit with basic rule to validate resource requests &
limits (Nagarjuna Sarvepalli <snagarju@redhat.com>)
 - docs: Document boolean expressions in "platform" definitions (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - drop rules (Vojtech Polasek <vpolasek@redhat.com>)
 - add new rules to rhel9 ospp (Vojtech Polasek <vpolasek@redhat.com>)
 - add zipl_init_on_alloc_argument rule (Vojtech Polasek <vpolasek@redhat.com>)
 - add grub2_init_on_alloc rule (Vojtech Polasek <vpolasek@redhat.com>)
 - In SRG export script move some fields to the base rows and reword errors
(Matthew Burket <mburket@redhat.com>)
 - Add backends attribute to template in rules schema (Matthew Burket
<mburket@redhat.com>)
 - fix tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add different file content for rhel9 (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix a quite broken pam options template (Matěj Týč <matyc@redhat.com>)
 - drop no longer needed rules from ospp rhel9 profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - add ospp references to fips rules (Vojtech Polasek <vpolasek@redhat.com>)
 - modify vsyscall rules according to rhel9 ospp (Vojtech Polasek
<vpolasek@redhat.com>)
 - Include the checksum files in the Git Hub release (Watson Sato
<wsato@redhat.com>)
 - Generate a checksum of the content zipfiles (Watson Sato <wsato@redhat.com>)
 - Generate a SHA512 checksum of the source tarball (Watson Sato
<wsato@redhat.com>)
 - Revert temporary removal of rule (Matěj Týč <matyc@redhat.com>)
 - Fix require_emergency_target_auth and require_singleuser_auth in RHEL9.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix ansible remediation of accounts_umask_* rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update test kickstarts wrt password lifetime restrictions (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix missing argument for grep command in bash remediation (Marcus Burghardt
<maburgha@redhat.com>)
 - Add a script to audit the SRG export CSV (Matthew Burket
<mburket@redhat.com>)
 - Deprecated build_ds_container.sh (Lance Bragstad <lbragsta@redhat.com>)
 - Port build_ds_container.sh to python (Lance Bragstad <lbragsta@redhat.com>)
 - Update PAM rules related to pam_unix.so rounds parameter (Marcus Burghardt
<maburgha@redhat.com>)
 - add missing comma (Vojtech Polasek <vpolasek@redhat.com>)
 - Ensuring immutable UIDs is related to the subject identity required by
FAU_GEN.1.2, it does not affect for wihch events audit records will be
generated. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Clarify that log_format and name_format affects specifically information
included in the audit records, not events for which audit records get generated.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - These auditd configurations affect the whole SFR, not just its specific
parts. (Jan Pazdziora <jpazdziora@redhat.com>)
 - The audit package and auditd service are needed for FAU_GEN.1 SFR. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Increase audit_immutable_login_uids and audit_immutable_login_uids test
coverage (Milan Lysonek <mlysonek@redhat.com>)
 - override 2 tests for rhel9 (Vojtech Polasek <vpolasek@redhat.com>)
 - Exclude no-tabs rule from ansible-lint validation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Set pipefail in ansible snippet for ensure_suse_gpgkey_installed. (Gabriel
Becker <ggasparb@redhat.com>)
 - Do not select default variable as produces error on OpenSCAP. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add condition that will trigger when SCAP standard is updated. (Gabriel
Becker <ggasparb@redhat.com>)
 - Ubuntu-specific tests for dconf_gnome_login_banner_text (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Ubuntu-specific bash fix for dconf_gnome_login_banner_text (Richard Maciel
Costa <richard.maciel.costa@canonical.com>)
 - Specific Ubuntu OVAL for dconf_gnome_login_banner_text (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Specialize dconf_gnome_login_banner_text for Ubuntu (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Minor improvements in playbooks and typo fixes (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix remediation of display_login_attempts rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Set stabilize GHA job to run weekly on sunday. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add RHEL8 and RHEL9 specific grub configurations (Watson Sato
<wsato@redhat.com>)
 - Use env variable for SCAPVal artifacts. (Gabriel Becker
<ggasparb@redhat.com>)
 - General improvements for CTF usage in GHA jobs. (Gabriel Becker
<ggasparb@redhat.com>)
 - Expand stabilize GHA job to build SCAP 1.2 content with OVAL 5.10. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix OL7 CIS URI (Watson Sato <wsato@redhat.com>)
 - Enable more GHA jobs into the stabilization* branches. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo in test scenario for sshd_set_keepalive (Watson Sato
<wsato@redhat.com>)
 - Workaround kernel compile option in templated test (Watson Sato
<wsato@redhat.com>)
 - Assign RHEL-08-010331 to dir_permissions_library_dirs. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add the peer keyword to the maxpoll rule (Matěj Týč <matyc@redhat.com>)
 - Fix bash check to add maxpoll to peer as well (Alexander Scheel
<alex.scheel@canonical.com>)
 - Clarify maxpoll goes after server entries (Alexander Scheel
<alex.scheel@canonical.com>)
 - Close tempfiles (Matěj Týč <matyc@redhat.com>)
 - Update remediation and test scenarios for authselect (Marcus Burghardt
<maburgha@redhat.com>)
 - Update remediation and test scenarios for authselect (Marcus Burghardt
<maburgha@redhat.com>)
 - Assign RHEL-08-010287 to configure_ssh_crypto_policy. (Gabriel Becker
<ggasparb@redhat.com>)
 - Various trivial fixes (Matej Tyc <matyc@redhat.com>)
 - Added quoting to variable expansion (Matej Tyc <matyc@redhat.com>)
 - Use the new rule set_password_hashing_algorithm_passwordauth in profiles that
are relevant. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove shebangs from source (Matej Tyc <matyc@redhat.com>)
 - Add file_permissions_var_log_syslog to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add rule file_permissions_var_log_syslog (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu specific bash to file_permissions_var_log (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix permissions_local_var_log tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu specific bash for permissions_local_var_log (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make permissions_local_var_log use file_permissions template (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add file_permissions_audit_binaries to Ubuntu 20.04 stig profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add rule file_permissions_audit_binaries (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add dir_permissions_binary_dirs to Ubuntu 20.04 STIG Profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add rule dir_permissions_binary_dirs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests to file_permissions_binary_dirs and (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu platform to file_permissions_binary_dirs bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu platform to dir_permissions_library_dirs tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Improve file_permissions oval to exclude symlinks (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add new rule to cover RHEL-08-010160. (Gabriel Becker <ggasparb@redhat.com>)
 - Update accounts_password_pam_retry rule to use pwquality.conf file (Marcus
Burghardt <maburgha@redhat.com>)
 - Don't treat 'no_ovirt' and 'ovirt' as packages (Watson Sato
<wsato@redhat.com>)
 - Make the code compatible with Python<3.7 (Matej Tyc <matyc@redhat.com>)
 - fix blank lines in the hardcoded file content (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix blank lines in test data (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests which put into place rules shipped by audit package (Vojtech
Polasek <vpolasek@redhat.com>)
 - modify macros to stop stripping blank lines (Vojtech Polasek
<vpolasek@redhat.com>)
 - Apply suggestions from code review (Gabriel Becker <ggasparb@redhat.com>)
 - Improve missing_file_test.pass.sh in template file_owner (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix typos. (Gabriel Becker <ggasparb@redhat.com>)
 - Handle long diffs gracefully (Matej Tyc <matyc@redhat.com>)
 - mark rhel9 ospp and cui as draft in title (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add tests for new features in controls for STIG exports (Matthew Burket
<mburket@redhat.com>)
 - Rephrase informative messages for pam_faillock rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Rephrase informative messages for rule no_empty_passwords (Marcus Burghardt
<maburgha@redhat.com>)
 - Rephrase informative messages for rule accounts_password_pam_unix_remember
(Marcus Burghardt <maburgha@redhat.com>)
 - Add better error messages to utils/controleval.py and add does not meet
(Matthew Burket <mburket@redhat.com>)
 - Improve informative message and test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Change the remediation approach for authselect (Marcus Burghardt
<maburgha@redhat.com>)
 - Use authselect to edit pam files if it is present (Marcus Burghardt
<maburgha@redhat.com>)
 - Adjust pam_faillock warning message (Marcus Burghardt <maburgha@redhat.com>)
 - Adjust remediation for pam_faillock rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Adjust test scenarios for pam_faillock rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve remediation when authselect profile is not integer (Marcus Burghardt
<maburgha@redhat.com>)
 - Check all entries files in grub2_bootloader_argument (Matthew Burket
<mburket@redhat.com>)
 - In create_srg_export allow for overriding of status (Matthew Burket
<mburket@redhat.com>)
 - Add the ability to add fix and check to a control (Matthew Burket
<mburket@redhat.com>)
 - Improve missing_file_test_pass test in template file_groupowner (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Removed OSPP MLS from RHEL9 (Matthew Burket <mburket@redhat.com>)
 - Change the remediation approach for authselect (Marcus Burghardt
<maburgha@redhat.com>)
 - Suggest running command for setting grub2 password as root (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix OVAL for grub2_kernel_trust_cpu_rng for RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Remove some grubenv tests from RHEL9 (Matthew Burket <mburket@redhat.com>)
 - Clarify controleval.py help text (Lance Bragstad <lbragsta@redhat.com>)
 - OCP4: default_ingress_ca_replaced change manual remediation cert to a default
ingress cert (Vincent Shen <wenshen@redhat.com>)
 - Add templated tests for grub2_bootloader_argument (Matthew Burket
<mburket@redhat.com>)
 - Rename root_permissions_syslibrary_files tests to overwrite template (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Clarify local ssg package dependency (Lance Bragstad <lbragsta@redhat.com>)
 - Directory check related tests for sshd_set_idle_timeout (Milan Lysonek
<mlysonek@redhat.com>)
 - Add .d directory check support for sshd_set_idle_timeout (Milan Lysonek
<mlysonek@redhat.com>)
 - Use authselect and custom profile for pam_pwhistory (Marcus Burghardt
<maburgha@redhat.com>)
 - Add .d directory in OVAL check of sshd_set_keepalive. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: api_server_no_adm_ctrl_plugins_disabled ignore PodSecurity (Vincent
Shen <wenshen@redhat.com>)
 - Fix usage of super (Matěj Týč <matej.tyc@gmail.com>)
 - Fix wrongly used filepath value instead of directory in sshd_oval_check macro
(Milan Lysonek <mlysonek@redhat.com>)
 - Fix handling of ARF files (Matej Tyc <matyc@redhat.com>)
 - Ignore empty XCCDFEntity non-mandatory keys (Watson Sato <wsato@redhat.com>)
 - Add and use macro to filter RHV rules on RHEL8 (Watson Sato
<wsato@redhat.com>)
 - Add and use macro for RHV rule disabled warning (Watson Sato
<wsato@redhat.com>)
 - Don't disable IPv4 forwarding on systems with ovirt (Watson Sato
<wsato@redhat.com>)
 - Don't remove X11 libraries on a system with ovirt (Watson Sato
<wsato@redhat.com>)
 - Change oVirt CPE to identify both Host and Manager (Watson Sato
<wsato@redhat.com>)
 - Add RHV warnings to rules filtered out from STIG (Watson Sato
<wsato@redhat.com>)
 - Add RHV warning to sshd_disable_root_login (Watson Sato <wsato@redhat.com>)
 - Add CPE platform for ovirt-host package (Watson Sato <wsato@redhat.com>)
 - Update dconf_db_up_to_date description to include dconf specific dirs.
(Gabriel Becker <ggasparb@redhat.com>)
 - Dont crash the test suite if there is arf-to-graph isnt available (Matěj
Týč <matyc@redhat.com>)
 - Fix for literal-compare ansible lint rule (Yavor Georgiev
<strandjata@gmail.com>)
 - Add remediations metadata (Yavor Georgiev <strandjata@gmail.com>)
 - Update linux_os/guide/system/permissions/restrictions/enable_execshield_setti
ngs/sysctl_kernel_exec_shield/ansible/shared.yml (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add sysctl_kernel_exec_shield to HIPAA profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Use template variable for grub config path to improve portability of the OVAL
rule (Yavor Georgiev <strandjata@gmail.com>)
 - Fix Profile title Node instead of Platform (Karen McCarron
<kmccarro@redhat.com>)
 - Fix/Update CIS references and related rules. (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Change version to correct CIS Benchmark version. (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Update sle15 control scheme (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Update CIS profiles to fit control file setup (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Add copy of sle12 control file as sle15 base. (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - OCP4: Add SI-6(d) comliance_notification_enabled (Vincent Shen
<wenshen@redhat.com>)
 - Remove DRAFT from profiles that are defined for RHEL9 (Matěj Týč
<matyc@redhat.com>)
 - Add documentation about oval-graph into the tests README (Matěj Týč
<matyc@redhat.com>)
 - Update sysctl template remediation to comment parameters from .d (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix small typo in compare_results.py description (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix confusing wording in var_accounts_tmout (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Move automated:yes to status:automated (Watson Sato <wsato@redhat.com>)
 - Align RHEL7 and 8 CIS requirement for .rhosts file (Watson Sato
<wsato@redhat.com>)
 - Mark Manual RHEL7 CIS items as manual (Watson Sato <wsato@redhat.com>)
 - Add CCE in rule file_ownership_home_directories (Watson Sato
<wsato@redhat.com>)
 - Add to incomplete items references to issues (Watson Sato <wsato@redhat.com>)
 - Select rules for home dirpermission and owners (Watson Sato
<wsato@redhat.com>)
 - Mark Manual RHEL8 CIS items as... manual (Watson Sato <wsato@redhat.com>)
 - Add "Manual" control status (Watson Sato <wsato@redhat.com>)
 - Checkout specifically the PR SHA commit. (Gabriel Becker
<ggasparb@redhat.com>)
 - Delete a previously put comment if a new comparison outputs nothing. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove OpenStack products and checks (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Add additonal control response for SA-10(1) integrity check (Vincent
Shen <wenshen@redhat.com>)
 - Modify grub2_bootloader_argument to add support for RHEL 9 (Matthew Burket
<mburket@redhat.com>)
 - Select rules for home dirpermission and owners (Watson Sato
<wsato@redhat.com>)
 - Select rules for RHEL7 CIS 5.1.9 - restrict at (Watson Sato
<wsato@redhat.com>)
 - Add rules for users' min/max password age (Watson Sato <wsato@redhat.com>)
 - Item 5.7 is not fully automatable (Watson Sato <wsato@redhat.com>)
 - Clarify expected crypto-policies in RHEL8 CIS (Watson Sato
<wsato@redhat.com>)
 - Update tests/unselect_rules_list with accounts_password_set_max_life_existing
rule (Milan Lysonek <mlysonek@redhat.com>)
 - Update
linux_os/guide/system/software/integrity/fips/enable_fips_mode/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - Fix ocil syntax error (Vincent Shen <wenshen@redhat.com>)
 - Improve comments and small updates after review (Marcus Burghardt
<maburgha@redhat.com>)
 - Adjust pam_faillock test scenarios scripts for containers (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve Ansible and Bash remediation for pam_faillock rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Update stig profiles and controls related to pam_faillock rules (Marcus
Burghardt <maburgha@redhat.com>)
 - Update the accounts_passwords_pam_faillock_enforce_local rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Update the accounts_passwords_pam_faillock_deny_root rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the accounts_passwords_pam_faillock_unlock_time rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the accounts_passwords_pam_faillock_interval rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Update the accounts_passwords_pam_faillock_deny rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Remove RHEL9 profiles that are not intended to be shipped. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add oval-graph support for the test suite (Matej Tyc <matyc@redhat.com>)
 - OCP4: Fix syntax error in `file_integrity_notification_enabled` OCIL (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - fix_rules.py: Set subcommand required. (Gabriel Becker <ggasparb@redhat.com>)
 - sort openshift references (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Add SRG references from NIST (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP/EKS: Add unit tests for `kubelet_enable_cert_rotation` (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - EKS: Provide assessments and rules for CIS section 3 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - update rule description (Vojtech Polasek <vpolasek@redhat.com>)
 - Use product defined dconf dir in dconf_db_up_to_date check. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo in OCIL of coreos_slub_debug_kernel_argument (Jakub Hrozek
<jhrozek@redhat.com>)
 - instantiate the variable in Ansible remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix typo in configure_usbguard_auditbackend rule (Anderson Sasaki
<33833274+ansasaki@users.noreply.github.com>)
 - Add EKS to Fedora gating build/test. (Gabriel Becker <ggasparb@redhat.com>)
 - Exclude EKS content from validation and scap_val SRC-329. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add java protocol handler for cases when using OpenJRE. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix OCP4 and EKS SCAP validation. (Gabriel Becker <ggasparb@redhat.com>)
 - Set default product name when loading product yaml (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add rationale to controls (Matthew Burket <mburket@redhat.com>)
 - Update SRG-OS-000004-GPOS-00004 for RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix the metadata propagation of SCE checks (THOBY Simon
<Simon.THOBY@viveris.fr>)
 - OCP4: Clean up `file_permissions_worker_kubeconfig` (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - EKS: Introduce CIS controls file and take it into use (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Fix RHEL9 rule auditd_audispd_syslog_plugin_activated. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: Add documentation how to write unit test for rule uses jq filter
(Vincent Shen <wenshen@redhat.com>)
 - Improve docs for STIG controls (Matthew Burket <mburket@redhat.com>)
 - Add root_permissions_syslibrary_files to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Make root_permissions_syslibrary_files tests work in ubuntu (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Remove duplicated audit/remediation from templated rules (Alexander Scheel
<alex.scheel@canonical.com>)
 - Make root_permissions_syslibrary_files use file_groupowner template (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add stigid@ubuntu2004 to root_permissions_syslibrary_files (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype in root_permissions_syslibrary_files (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add dir_groupownership_binary_dirs to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add rule dir_groupownership_binary_dirs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add file_groupowner_var_log_syslog to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add rule file_groupowner_var_log_syslog (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add file_groupownership_audit_binaries to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add rule file_groupownership_audit_binaries (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add file_groupownership_audit_configuration to Ubuntu 20.04 STIG profile
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add tests to file_groupownership_audit_configuration (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule file_groupownership_audit_configuration (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make file_groupownership_system_commands_dirs tests work in ubuntu (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu to file_groupownership_system_commands_dirs bash script (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Adapt file_groupowner_var_log to accept other gids (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update profiles metadata. (Gabriel Becker <ggasparb@redhat.com>)
 - OCP4: Add unit test documentation (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Start docs on creating controls for DISA STIG (Matthew Burket
<mburket@redhat.com>)
 - Add fix text and better OCIL text for RHEL9 STIG SRG-OS-000021-GPOS-00005
(Matthew Burket <mburket@redhat.com>)
 - Add fix text for SRG-OS-000004-GPOS-00004 in RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix output help texet in utils/create_srg_export.py (Matthew Burket
<mburket@redhat.com>)
 - Fix configure_firewalld_ports bash to use jinja custom syntax. (Gabriel
Becker <ggasparb@redhat.com>)
 - Apply suggestions from code review (Edgar Aguilar <xeicker@gmail.com>)
 - Remediation improvements for file_permissions_home_directories (Marcus
Burghardt <maburgha@redhat.com>)
 - Fix issues with dividing a str by str in `utils/render-policy.py` (Matthew
Burket <mburket@redhat.com>)
 - In create_srg_export convert `<tt>` to `"` (Matthew Burket
<mburket@redhat.com>)
 - Add "Does Not Meet" to the possible status for create_srg_exports (Matthew
Burket <mburket@redhat.com>)
 - Use OCIL clause in finding in create_srg_export (Matthew Burket
<mburket@redhat.com>)
 - Improve error messages and help text in create_srg_export (Matthew Burket
<mburket@redhat.com>)
 - Allow for override of the Severity in the control in create_srg_export
(Matthew Burket <mburket@redhat.com>)
 - EKS: Add appropriate descriptions to CIS profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/build_ds_container.sh: Add option to push to any image repository (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Dockerfiles: Include EKS in Compliance Operator-related dockerfiles (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Update reference to disa-os-srg file (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Remove file from commit (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix typo (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix file formatting on ol7 v2r5 PR (Edgar Miguel Aguilar Diaz
<edgar.aguilar@oracle.com>)
 - Update ol7 stig profile to v2r5 (Edgar Miguel Aguilar Diaz
<edgar.aguilar@oracle.com>)
 - Create selinux_context_elevation_for_sudo rule (Edgar Miguel Aguilar Diaz
<edgar.aguilar@oracle.com>)
 - Create selinux_confine_to_least_privilege rule (Edgar Miguel Aguilar Diaz
<edgar.aguilar@oracle.com>)
 - Add sebool_ssh_sysadm_login rule to stig ol7 profile (Edgar Miguel Aguilar
Diaz <edgar.aguilar@oracle.com>)
 - Update grub admin username rules (Edgar Miguel Aguilar Diaz
<edgar.aguilar@oracle.com>)
 - Remove grub password legacy rules from stig ol7 (Edgar Miguel Aguilar Diaz
<edgar.aguilar@oracle.com>)
 - compare-ds job: Do not post empty comments. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix CVE data URL (Jan Černý <jcerny@redhat.com>)
 - Add Amazon EKS platform and initial profiles for the CIS benchmark (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Fix OVAL comments so they can be parsed by CTF tool. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add ansible remediation for grub2 rule (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add OL8 platform to remediation content (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add missing OL8 prodtype (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add pam pwhistory remember rules to OL7 stig (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Make sure /etc/selinux/config exists (Jan Černý <jcerny@redhat.com>)
 - Fix typos from previous PRs (Watson Sato <wsato@redhat.com>)
 - Clean in utils/create_srg_export.py (Matthew Burket <mburket@redhat.com>)
 - Add control for RHEL9 draft (Matthew Burket <mburket@redhat.com>)
 - When building the STIG control place the controls in a list (Matthew Burket
<mburket@redhat.com>)
 - Allow controls with directories not have controls in the main file (Matthew
Burket <mburket@redhat.com>)
 - Improve error message in utils/create_srg_export.py (Matthew Burket
<mburket@redhat.com>)
 - Update utils/create_srg_export.py based on feedback in #7775 (Matthew Burket
<mburket@redhat.com>)
 - Remove RHEL9 control file. Will be added later (Matthew Burket
<mburket@redhat.com>)
 - Refactor utils/create_srg_export.py (Matthew Burket <mburket@redhat.com>)
 - utils/create_srg_export.py: Remove HTML from csv (Matthew Burket
<mburket@redhat.com>)
 - Add does not meet status (Matthew Burket <mburket@redhat.com>)
 - Add more fileds and the abitily not have rules to SRG export (Matthew Burket
<mburket@redhat.com>)
 - Update package_install_tmux to use fix (Matthew Burket <mburket@redhat.com>)
 - Added need fields for Control to spreadsheet (Matthew Burket
<mburket@redhat.com>)
 - Add fix to rule (Matthew Burket <mburket@redhat.com>)
 - Fix build issues with having two DISA OS SRG xml files (Matthew Burket
<mburket@redhat.com>)
 - Added first draft of control to SRG script (Matthew Burket
<mburket@redhat.com>)
 - Fix jinja issue on fedora rawhide. (Gabriel Becker <ggasparb@redhat.com>)
 - File attributes template: Create directory first if doesn't exist. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix broken test scenario (Jan Černý <jcerny@redhat.com>)
 - Use forking point commit as base for compare ds job. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add comment explaining why profiles are kept in CentOS Stream 9. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add CentOS Stream 9 derivative product from RHEL9. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add rule file_integrity_notification_enabled for PCI-DSS: Req-11.5.1 &
12.10.5 (Vincent Shen <wenshen@redhat.com>)
 - Add stig_gui profile for ol7 (Edgar Miguel Aguilar Diaz
<edgar.aguilar@oracle.com>)
 - Add rule to hipaa.profile (anivan-suse <anastasija.ivanovic@suse.com>)
 - HIPAA Rules in test (anivan-suse <anastasija.ivanovic@suse.com>)
 - Move conditionals for sshd config file to a macro (Watson Sato
<wsato@redhat.com>)
 - Make SSH's default behavior more clear (Watson Sato <wsato@redhat.com>)
 - Describe correct file to check/remediate in SSH OCIL (Watson Sato
<wsato@redhat.com>)
 - Parametrize SSHD distributed config in product.yml (Watson Sato
<wsato@redhat.com>)
 - Assess PCI-DSS:Req-1.3.5 (Vincent Shen <wenshen@redhat.com>)
 - NIST SC-7(5): route_ip_whitelist (Vincent Shen <wenshen@redhat.com>)
 - Add OL8 STIG IDs (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add initial draft OL8 stig v1r1 profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update RHEL8 STIG profile artifacts and version to V1R4. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add RHEL-08-020353 to more rules and select them into RHEL8 STIG. (Gabriel
Becker <ggasparb@redhat.com>)
 - Improved docs and usability for utils/build_stig_control.py (Matthew Burket
<mburket@redhat.com>)
 - fix ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - fix bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Bump version to 0.1.60 (Watson Sato <wsato@redhat.com>)
 - Remove mentions of RHEL-08-010180 since it was removed from RHEL8 STIG.
(Gabriel Becker <ggasparb@redhat.com>)
 - Specify the Fedora version for the release builds (Watson Sato
<wsato@redhat.com>)
 - Update OL7 030360 DISA requirement (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update list of contributors for 0.1.59 release (Watson Sato
<wsato@redhat.com>)
 - banner_etc_issue: Make it clearer that /etc/issue should not be modified on
RHCOS (Jakub Hrozek <jhrozek@redhat.com>)
 - Describe where the distributed ssh config is added (Watson Sato
<wsato@redhat.com>)
 - Fix default value of LogLevel in sshd_set_loglevel_verbose (Watson Sato
<wsato@redhat.com>)
 - Document default SSHD parameters in description (Watson Sato
<wsato@redhat.com>)
 - modify tests (Vojtech Polasek <vpolasek@redhat.com>)
 - allow both cases of y in oval (Vojtech Polasek <vpolasek@redhat.com>)
 - Update from code review (Luigi Mario Zuccarelli <luzuccar@redhat.com>)
 - CP4/PCI-DSS: Update section-8 (Luigi Mario Zuccarelli <luzuccar@redhat.com>)
 - Update audit rule description with perm=x in audit template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update restorecon and seunshare audit rules description to match OVAL.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix typo in new_rule.md (Ikko Ashimine <eltociear@gmail.com>)
 - add warning section to audit_basic_configuration rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add rule for SC-5: resource_requests_quota (Vincent Shen
<wenshen@redhat.com>)
 - Fix bash remediation (Yavor Georgiev <strandjata@gmail.com>)
 - Add the maxpoll option to chrony pool directives (Watson Sato
<wsato@redhat.com>)
 - use libera.chat instead of freenode (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rhel9 prodtype from abrt related rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove abrt related rules from rhel9 profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add SI-6(d) file_integrity_notification_enabled (Vincent Shen
<wenshen@redhat.com>)
 - Add ansible,bash remediation and tests for use_kerberos_security_all_exports
(Yavor Georgiev <strandjata@gmail.com>)
 - Add use_kerberos_security_all_exports to SLE15 HIPAA profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add the ability split the control utils/build_stig_control.py in many files
(Matthew Burket <mburket@redhat.com>)
 - Document utils/build_stig_control.py (Matthew Burket <mburket@redhat.com>)
 - Improve help message in utils/build_stig_control.py (Matthew Burket
<mburket@redhat.com>)
 - Added utils/compare_results.py (Matthew Burket <mburket@redhat.com>)
 - Drop RHEL9 OSPP rule for chrony network management (Watson Sato
<wsato@redhat.com>)
 - align grub2_password with grub2_uefi_password (Vojtech Polasek
<vpolasek@redhat.com>)
 - make final modifications to grub2_uefi_password (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update profile stability data (Watson Sato <wsato@redhat.com>)
 - Rename/remove rule for package abrt-addon-python (Watson Sato
<wsato@redhat.com>)
 - Introduce handling of versioned Boolean algebra expressions (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - OCP4: Fix typos in etcd cipher (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - More Python2 fixes (Matej Tyc <matyc@redhat.com>)
 - Fix remediation for accounts_umask_interactive_users (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4: Fix description and instructions in `audit_error_alert_exists` (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4:include sc-5 and sc5(2) in routes_rate_limit (Vincent Shen
<wenshen@redhat.com>)
 - Add utils/__init__.py for python2 compatibility. (Gabriel Becker
<ggasparb@redhat.com>)
 - Make the table-generating code Python2-compat (Matej Tyc <matyc@redhat.com>)
 - OCP: Use Fedora 35 for base container images (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add RHEL9 platform to some tests. (Gabriel Becker <ggasparb@redhat.com>)
 - Add HIPAA Rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add tests for loading controls from a directory (Matthew Burket
<mburket@redhat.com>)
 - Remove type hint in utils/fix_rules.py (Matthew Burket <mburket@redhat.com>)
 - Remove sle12, sle15, and ubuntu from CentOS 7 build (Matthew Burket
<mburket@redhat.com>)
 - Make OSCI question text unicode (Matthew Burket <mburket@redhat.com>)
 - Fix typo in audit_immutable_login_uids (Matthew Burket <mburket@redhat.com>)
 - Build everything on CentOS 7 (Matthew Burket <mburket@redhat.com>)
 - Convert utils/create_scap_delta_tailoring.py (Matthew Burket
<mburket@redhat.com>)
 - Refactoring of table generation (Matěj Týč <matyc@redhat.com>)
 - Substituted old template generation with the new one (Matěj Týč
<matyc@redhat.com>)
 - Integrate mass ref table build into the build system (Matěj Týč
<matyc@redhat.com>)
 - Add a possibility to generate multiple ref tables at once (Matěj Týč
<matyc@redhat.com>)
 - Generate new tables for the RHEL8 product (Matej Tyc <matyc@redhat.com>)
 - Add new table generation macros to our current CMake library (Matej Tyc
<matyc@redhat.com>)
 - Deduce template directory (Matej Tyc <matyc@redhat.com>)
 - Implement alternative way of generating tables (Matej Tyc <matyc@redhat.com>)
 - Fix tests for rule configure_firewalld_ports (Matthew Burket
<mburket@redhat.com>)
 - Update RHEL9 profile descriptions and remove RHEL8 references. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add CentOS 7 build to CI (Matthew Burket <mburket@redhat.com>)
 - Fix ansible remediation of grub2_bootloader_argument. (Gabriel Becker
<ggasparb@redhat.com>)
 - fix description also for grub_password (Vojtech Polasek
<vpolasek@redhat.com>)
 - OCP/RHCOS: Kick off NIST High Impact profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add the ability to load controls from folder (Matthew Burket
<mburket@redhat.com>)
 - Remove outdated rules from RHEL9 (Matthew Burket <mburket@redhat.com>)
 - Add test for configure_firewalld_ports (Matthew Burket <mburket@redhat.com>)
 - Fix configure_firewalld_ports bash remedation fer RHEL9 (Matthew Burket
<mburket@redhat.com>)
 - Changed many rules to multi_platform_rhel vs rhel8 only (Matthew Burket
<mburket@redhat.com>)
 - Fix spelling error in accounts_authorized_local_users (Matthew Burket
<mburket@redhat.com>)
 - Remove rules not supported in RHEL9 in RHEL9 STIG (Matthew Burket
<mburket@redhat.com>)
 - Fix up GRUB template for RHEL9 (Matthew Burket <mburket@redhat.com>)
 - Align the RHEL8 STIG to the RHEL9 STIG (Matthew Burket <mburket@redhat.com>)
 - Add a Fedora Rawhide CI test (Matthew Burket <mburket@redhat.com>)
 - SLE15 drop unused service_crond_enabled from HIPAA profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add service related rules to SLE15 HIPAA profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Refactor: Extract functions (Jan Černý <jcerny@redhat.com>)
 - Add description (Jan Černý <jcerny@redhat.com>)
 - Rename to match the script name (Jan Černý <jcerny@redhat.com>)
 - Rename CMake macros and combine_remediations.py (Jan Černý
<jcerny@redhat.com>)
 - Use env_yaml for loading rules (Jan Černý <jcerny@redhat.com>)
 - Rewrite combine_remediations.py (Jan Černý <jcerny@redhat.com>)
 - Refactor: Extract function write_fix_to_file (Jan Černý
<jcerny@redhat.com>)
 - Change behavior of process() (Jan Černý <jcerny@redhat.com>)
 - Use Rule object to associate rule with remediation (Jan Černý
<jcerny@redhat.com>)
 - Execute combine_remediations.py only once (Jan Černý <jcerny@redhat.com>)
 - Allow generating multiple remediation types (Jan Černý <jcerny@redhat.com>)
 - Remove the language part of the directory path (Jan Černý
<jcerny@redhat.com>)
 - Remove support for multiple directories (Jan Černý <jcerny@redhat.com>)
 - Remove shared directory (Jan Černý <jcerny@redhat.com>)
 - Add ignore_errors to grub2 bootloader template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add RHEL9 to jinja inline if statements when applicable. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP/PCI-DSS: Address Req-10.5.4 with audit_log_forwarding_enabled (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Make generate-ssg-delta-${PRODUCT}-${PROFILE} no longer need rule_dirs.json
(Matthew Burket <mburket@redhat.com>)
 - Add rule for SC-5(1): enable routes rate limit (Vincent Shen
<wenshen@redhat.com>)
 - SLE15 Add selinux rules to HIPAA profile (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add rule schema (Matthew Burket <mburket@redhat.com>)
 - OCP/PCI-DSS: Add responses for Req-12 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Mark Req-2.1.1 as not applicable (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP/PCI-DSS: Add responses for Req-11 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/controleval.py: Output missing controls (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix issues in CMake macro ssg_build_disa_delta (Matthew Burket
<mburket@redhat.com>)
 - More to more compatible action for create_scap_delta_tailoring.py quiet flag
(Matthew Burket <mburket@redhat.com>)
 - Add type hints and fix PEP8 issues in utils/create_scap_delta_tailoring.py
(Matthew Burket <mburket@redhat.com>)
 - Use specific commit sha when pulling out the branch for compare_ds job.
(Gabriel Becker <ggasparb@redhat.com>)
 - Edit ssg_build_disa_delta per reviewer comments (Matthew Burket
<mburket@redhat.com>)
 - Add a flag to make create_scap_delta_tailoring.py not output (Matthew Burket
<mburket@redhat.com>)
 - Add install for ssg_build_disa_delta (Matthew Burket <mburket@redhat.com>)
 - Fix banner deregexify to address change in PR #7784 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Revert: Fix banner regex to address change in PR #7784 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Do not show diff for rule security_patches_up_to_date. (Gabriel Becker
<ggasparb@redhat.com>)
 - Sort CPEs before adding them to the datastream. (Gabriel Becker
<ggasparb@redhat.com>)
 - update description (Vojtech Polasek <vpolasek@redhat.com>)
 - Update tests for package_crypto-policies_installed (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix scenarios for file_permissions_etc_audit_rulesd (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix comment replacement in Compare DS GH action. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP/PCI-DSS: Add responses for Req-7.3 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP/PCI-DSS: Add responses for Req-7.2.x (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Add responses for Req-7.1.{2..4} (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Add response for Req-7.1.1 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/add_platform_rule.py: Fix create option and enhance it (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Improved remediation with conditionals (Marcus Burghardt
<maburgha@redhat.com>)
 - Minor tweaking the name of test script files. From id to uid. (Marcus
Burghardt <maburgha@redhat.com>)
 - OVAL, tests and remediation for the rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for the rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for the rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP/RHCOS: Mark SC-7(18) as `not applicable` (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Improved the remediation and rule description (Marcus Burghardt
<maburgha@redhat.com>)
 - Add DISA delta tailoring files to the build system (Matthew Burket
<mburket@redhat.com>)
 - Added DISA SCAP content to references for delta files (Matthew Burket
<mburket@redhat.com>)
 - Implement PCIDSS Section 4 (Luigi Mario Zuccarelli <luzuccar@redhat.com>)
 - Remove comments and documentation (Matěj Týč <matyc@redhat.com>)
 - Add these rules as valid for RHEL9 (Pat Riehecky <riehecky@fnal.gov>)
 - Fix compatibility with python < 3.5 (Watson Sato <wsato@redhat.com>)
 - OVAL, tests and remediation for the rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for the rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - Relax remediation metadata (Matej Tyc <matyc@redhat.com>)
 - Fix banner regex to address change in PR #7784 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - OCP/PCI-DSS: Add note to Req-3.6 (Juan Osorio Robles <jaosorior@gmail.com>)
 - OCP/PCI-DSS: Mark overall req 3.6 as `not applicable` (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - OCP: Make `storageclass_encryption_enabled` applicable to AWS only (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP/macros: Support array of dics in `openshift_filtered_cluster_setting`
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - F33 will EOL soon due to the release of F35 (Matthew Burket
<mburket@redhat.com>)
 - OVAL, tests and remediation for rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for rule: (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP: Add Azure and GCP disk encryption rules to `machine_volume_encrypted`
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP: Ensure `ebs_encryption_enabled_on_machinesets` on AWS only (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add unit tests for kubelet_enable_iptables_util_chains (vincent
<wenshen@redhat.com>)
 - OCP/PCI-DSS: Fix typo in controls (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP/PCI-DSS: Add response for 6.4.6 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP/PCI-DSS: Add mention of automatic back-up in OCP (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - OCP/PCI-DSS: Apply corrections to Req-6.x (Juan Osorio Robles
<jaosorior@gmail.com>)
 - OCP/PCI-DSS: Add evaluation for the rest of the Req-6 section (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Update rule.yml (teacup-on-rockingchair <strandjata@gmail.com>)
 - SLE15 Add rsh and talk server remove rules to HIPAA profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Fix ansible-lint lint issues (Matthew Burket <mburket@redhat.com>)
 - SSGTS GH Action: Print common logs in case of failure. (Gabriel Becker
<ggasparb@redhat.com>)
 - Cache CTF output to be used among different SSGTS GH Jobs. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add notes and status for requirements 3.5, 3.6 and 3.7 of PCIDSS (Sherine
Khoury <skhoury@redhat.com>)
 - OCP/PCI-DSS: Mark Req-6.2 as inherently met (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Mark req-6.1 as not applicable (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - tests/install_vm.py: add timeouted wait for VM to shutdown (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix kube_apipath in test files (Sherine Khoury <skhoury@redhat.com>)
 - Add unit tests for rules fips_mode_enabled_on_all_nodes,
luks_enabled_on_all_nodes, ebs_encryption_enabled_on_machinesets,
storageclass_encryption_enabled Fix json filter error on
fips_mode_enabled_on_all_nodes (Sherine Khoury <skhoury@redhat.com>)
 - Move regex_escape to ansible_set_config_file_dir (Matthew Burket
<mburket@redhat.com>)
 - Removed tests that are not needed (Matej Tyc <matyc@redhat.com>)
 - Remove testoval (Matej Tyc <matyc@redhat.com>)
 - Introduced graphs in the documentation (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4: Add rules for AWS and GCP disk encryption (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix duplication of rule reference for luks_enabled_on_all_nodes (Sherine
Khoury <skhoury@redhat.com>)
 - Update template.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Tools: Compare rule's platform in compare_ds.py (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Run ./utils/fix_rules.py sort_prodtypes (Matthew Burket <mburket@redhat.com>)
 - Run ./utils/fix_rules.py sort_subkeys (Matthew Burket <mburket@redhat.com>)
 - Make fix rules exit correctly (Matthew Burket <mburket@redhat.com>)
 - Update shared/macros.jinja with reviewer suggestions (Matthew Burket
<m@tthewburket.com>)
 - Add --verbose to Content-Test-Filtering GH Action job. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add More HIPAA Rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add responses to NIST controls SC-12,SC-12(2) and SC-12(3) (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add rule storageclass_encryption_enabled (Sherine Khoury
<skhoury@redhat.com>)
 - Add HIPAA Rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix escaping in ansible_lineinfile macro (Matthew Burket
<mburket@redhat.com>)
 - fix title and description for ebs_encryption_enabled &
fips_mode_enabled_on_all_nodes (Sherine Khoury <skhoury@redhat.com>)
 - Remove mentions of shorthand2xccdf in docs (Watson Sato <wsato@redhat.com>)
 - Fix a couple more issuse in jinja docs (Matthew Burket <mburket@redhat.com>)
 - Move benchmark metadata handling to its own func (Watson Sato
<wsato@redhat.com>)
 - Move processing of references to its own function (Watson Sato
<wsato@redhat.com>)
 - Address reviewer comments on Jinja docs (Matthew Burket <mburket@redhat.com>)
 - Rename ebs_encrypted_or_fips_enabled rule to machine_volume_encrypted
(Sherine Khoury <skhoury@redhat.com>)
 - Chnage back xhtml namespace prefix to html (Watson Sato <wsato@redhat.com>)
 - Only add compiled groups to the Benchmark (Watson Sato <wsato@redhat.com>)
 - Only compile groups with applicable prodtype (Watson Sato <wsato@redhat.com>)
 - Update isa-62443-2013 and isa-62443-2009 uris (Watson Sato
<wsato@redhat.com>)
 - Fix pythoncode styles (Watson Sato <wsato@redhat.com>)
 - Remove XSLT transformation from shorthand to XCCDF (Watson Sato
<wsato@redhat.com>)
 - Remove processing of complex-check/oval via XSLT (Watson Sato
<wsato@redhat.com>)
 - Remove reference expansion via XSLT (Watson Sato <wsato@redhat.com>)
 - Remove oval expansion via XSLT (Watson Sato <wsato@redhat.com>)
 - Remove ident expanstion via XSLT (Watson Sato <wsato@redhat.com>)
 - Drop requires/conflicts attribute rename in XSLT (Watson Sato
<wsato@redhat.com>)
 - Remove ordering of Group elements via XSLT (Watson Sato <wsato@redhat.com>)
 - Remove orderering of Rule elements via XSLT (Watson Sato <wsato@redhat.com>)
 - Remove XSLT templatee for Benchmark metadata (Watson Sato <wsato@redhat.com>)
 - Remove XSLT template for Benchmark status date (Watson Sato
<wsato@redhat.com>)
 - Move benchmark ID to product yaml (Watson Sato <wsato@redhat.com>)
 - Add Benchmark version directly into the shorthand (Watson Sato
<wsato@redhat.com>)
 - Move xhtml namespacing from XSLT to shorthand (Watson Sato
<wsato@redhat.com>)
 - Register namespaces before outputting shorthand (Watson Sato
<wsato@redhat.com>)
 - Separate namespace registration into own function (Watson Sato
<wsato@redhat.com>)
 - Don't add prodtype to shorthand (Watson Sato <wsato@redhat.com>)
 - Renamed rules fips_mode_enabled_on_workers and luks_enabled_on_workers into
fips_mode_enabled_on_all_nodes and luks_enabled_on_all_node resp. (Sherine
Khoury <skhoury@redhat.com>)
 - Remove rule fips_mode_enable from PCIDSS req3.6.1 for now - keeping this PR
to handle up to 3.4.1 only (Sherine Khoury <skhoury@redhat.com>)
 - OCP4/e2e: Tolerate INCONSISTENT for file_permissions_var_log_kube_audit (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Add responses to Requirement 5 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add CCE ids for SLE15 platform for some HIPAA related rules (Yavor Georgiev
<strandjata@gmail.com>)
 - utils/add_platform_rule.py: Allow specifying scan type (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Update platform handling in the test suite (Matěj Týč <matyc@redhat.com>)
 - remove some logic around logical operators which are not implemented yet
(Vojtech Polasek <vpolasek@redhat.com>)
 - remove parsing of logical operators in platform definitions - not implemented
yet (Vojtech Polasek <vpolasek@redhat.com>)
 - move parse_platform_definition function out of the class (Vojtech Polasek
<vpolasek@redhat.com>)
 - move convert_platform_to_id function out of the class (Vojtech Polasek
<vpolasek@redhat.com>)
 - extracted the parse_platform_line function (Vojtech Polasek
<vpolasek@redhat.com>)
 - move check for duplicate platforms into the add_platform function (Vojtech
Polasek <vpolasek@redhat.com>)
 - make sure that platform is added to global list of platforms (Vojtech Polasek
<vpolasek@redhat.com>)
 - make sure that multiple AND operators are handled correctly (Vojtech Polasek
<vpolasek@redhat.com>)
 - get rid of cpe_names object for groups and rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix assigning of platform ids (Vojtech Polasek <vpolasek@redhat.com>)
 - fix platform inheritance also for rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix inheriting of platforms among groups (Vojtech Polasek
<vpolasek@redhat.com>)
 - update test for machine-only rules (Vojtech Polasek <vpolasek@redhat.com>)
 - rename CPEALTest to CPEALLogicalTest (Vojtech Polasek <vpolasek@redhat.com>)
 - shorten variable names (Vojtech Polasek <vpolasek@redhat.com>)
 - correctly reference CPE platforms with hash sign (Vojtech Polasek
<vpolasek@redhat.com>)
 - simplify return statement (Vojtech Polasek <vpolasek@redhat.com>)
 - use defined value for cpe-lang napespace (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove debug statements and fix pep8 (Vojtech Polasek <vpolasek@redhat.com>)
 - fix build of products which ahve no platform (currently in groups or rules)
(Vojtech Polasek <vpolasek@redhat.com>)
 - remove definitions of check-fact-ref class (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix generation of cpe dictionary (Vojtech Polasek <vpolasek@redhat.com>)
 - fix comparison of CPE AL tests (Vojtech Polasek <vpolasek@redhat.com>)
 - make groups also use new platforms (Vojtech Polasek <vpolasek@redhat.com>)
 - platforms build but applicability seems broken (Vojtech Polasek
<vpolasek@redhat.com>)
 - modified build_cpe.py to skip over cpe_platform definitions when constructing
CPE dictionary (Vojtech Polasek <vpolasek@redhat.com>)
 - fix build (Vojtech Polasek <vpolasek@redhat.com>)
 - create first prototype (Vojtech Polasek <vpolasek@redhat.com>)
 - add xml output methods to new classes (Vojtech Polasek <vpolasek@redhat.com>)
 - introduce new classes for CPEAL (Vojtech Polasek <vpolasek@redhat.com>)
 - Update links for isa-62443-2013 and isa-62443-2009 (Matthew Burket
<mburket@redhat.com>)
 - Fix directories count in docs/manual/developer/03_creating_content.md
(Matthew Burket <mburket@redhat.com>)
 - Assign new RHEL7 STIG id RHEL-07-020022 to sebool_ssh_sysadm_login. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update RHEL7 STIG to V3R5. (Gabriel Becker <ggasparb@redhat.com>)
 - Improve rule ebs_encrypted_or_fips_enabled" (Sherine Khoury
<skhoury@redhat.com>)
 - Implement partially Req 3.4 PCIDSS (Sherine Khoury <skhoury@redhat.com>)
 - Fix kubelet_enable_iptables_util_chains (vincent <wenshen@redhat.com>)
 - OCP4: Allow cluster filtering macros to work accross rules (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Add version dependency requirement to usbguard remediation (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Introduce "OCP4 on AWS" CPE (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Improve datastream matching when building man page (Watson Sato
<wsato@redhat.com>)
 - Properly add local_variables to cpe-oval component (Watson Sato
<wsato@redhat.com>)
 - Ensure that two blank lines are between macros. (Matthew Burket
<mburket@redhat.com>)
 - Clean up issues in oval macros (Matthew Burket <mburket@redhat.com>)
 - Add docstrings to main macros file (Matthew Burket <mburket@redhat.com>)
 - Add a section for Jinja macros in style guide (Matthew Burket
<mburket@redhat.com>)
 - Various improvements in the style guide (Matthew Burket <mburket@redhat.com>)
 - Update docs for highlevel macros (Matthew Burket <mburket@redhat.com>)
 - Update oval macros docs (Matthew Burket <mburket@redhat.com>)
 - Update ansible macros docs (Matthew Burket <mburket@redhat.com>)
 - Update docs for bash macros (Matthew Burket <mburket@redhat.com>)
 - Handle empty ocil_clause (Jan Černý <jcerny@redhat.com>)
 - Refactor the export_ocil_to_file method (Jan Černý <jcerny@redhat.com>)
 - Rename CMake target (Jan Černý <jcerny@redhat.com>)
 - Generate OCIL alongside shorthand XML (Jan Černý <jcerny@redhat.com>)
 - Add ability to generate OCIL directly (Jan Černý <jcerny@redhat.com>)
 - Compare OCIL checks in compare_ds.py (Jan Černý <jcerny@redhat.com>)
 - DISA STIG reference update for SLE12 and SLE15 (Alexander Bergmann
<abergmann@suse.com>)
 - Fix a couple items from reviewers on ansible_lineinfile escaping (Matthew
Burket <mburket@redhat.com>)
 - Add KubeletConfig Remdiation Support for Kubelet Eviction Configurations
(vincent <wenshen@redhat.com>)
 - Add dir_ownership_binary_dirs to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule dir_ownership_binary_dirs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add file_owner_var_log_syslog to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule file_owner_var_log_syslog (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add file_ownership_audit_binaries to Ubuntu 20.04 STIG (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule file_ownership_audit_binaries (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add file_ownership_audit_configuration to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add tests to file_ownership_audit_configuration (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule file_ownership_audit_configuration (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix bug in ansible remediation of file_owner template (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make sure files have newline during bash lineinfile remediation. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix bash remediation spurious variable substitution (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - fix configure_network_policies_namespaces rule.yaml to compare netpol's
namespace name instead of netpol name (Felix Krohn <felix.krohn@helvetia.ch>)
 - fix configure_network_policies_namespaces check to compare netpol's namespace
name instead of netpol name (Felix Krohn <felix.krohn@helvetia.ch>)
 - Add github workflow action to output the diff of datastreams. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add recursive parameter to templates documentation (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add recursive parameter to file templates ansible remediation (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - accounts_no_uid_except_zero: Don't run passwd if awk returns nothing (Matthew
Burket <mburket@redhat.com>)
 - Always esacpe parameter in ansible_set_config_file (Matthew Burket
<mburket@redhat.com>)
 - Update templated service disabled/enabled test scenarios (Matus Marhefka
<mmarhefk@redhat.com>)
 - Introduced DEFAULT_GID_MIN constant (Marcus Burghardt <maburgha@redhat.com>)
 - Fixed missing space warned by Lint Ansible Role test (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for file_permissions_home_directories rule
(Marcus Burghardt <maburgha@redhat.com>)
 - Included test scenarios for and fixed OVAL logic (Marcus Burghardt
<maburgha@redhat.com>)
 - OVAL, tests and remediation for file_groupownership_home_directories rule
(Marcus Burghardt <maburgha@redhat.com>)
 - OVAL, tests and remediation for file_ownership_home_directories rule (Marcus
Burghardt <maburgha@redhat.com>)
 - Remove product option definition from SSGTS GH integration. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add HIPAA profile to SLE15 platform and initialize it with already supported
rules (Yavor Georgiev <strandjata@gmail.com>)
 - Use different path to configure overflow_action in RHEL7/OL7 (Gabriel Becker
<ggasparb@redhat.com>)
 - Show custom targets in dependency graphs (Jan Černý <jcerny@redhat.com>)
 - Change dependencies of resolved rules (Jan Černý <jcerny@redhat.com>)
 - Remove file-level dependencies (Jan Černý <jcerny@redhat.com>)
 - Add custom_target for derivative products (Jan Černý <jcerny@redhat.com>)
 - Add separate targets for -ds-base.xml and -ds-1.2.xml (Jan Černý
<jcerny@redhat.com>)
 - Wrap compile_all.py in a custom_target (Jan Černý <jcerny@redhat.com>)
 - Remove unused variable BASH_REMEDIATION_FNS_DEPENDS (Jan Černý
<jcerny@redhat.com>)
 - Add type hints to style guide (Matthew Burket <m@tthewburket.com>)
 - Add var_sshd_set_keepalive to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add recursive parameter to file_permissions template (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - OCP4: Optimize `Dockerfiles/ocp4_content` for caching (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add recursive parameter to file_owner template (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add recursive parameter to dir_group_ownership_library_dirs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add recursive parameter to file_groupowner template (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add references to OL8 profiles (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Ubuntu 20.04 selects and uses 'sshd_set_keepalive' (Watson Sato
<wsato@redhat.com>)
 - Reorder platforms in audit_rules_login_events bash template (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Move from auditd_data_retention_space_left to
auditd_data_retention_space_left_percentage (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add pkgname@ubuntu for package_audit-audispd-plugins_installed (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add au-remote.conf check to auditd_audispd_configure_remote_server oval
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add au-remote.conf logic to auditd_audispd_configure_remote_server bash
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Improve template file_groupowner tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Improve file_owner tests (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Improve file_permissions tests to consider list of filepaths (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Avoid trailing '/' in OVAL results (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Remove bash, ansible and oval from dir_group_ownership_library_dirs (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Assign dir_group_ownership_library_dirs to UBTU-20-010431 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make dir_group_ownership_library_dirs use file_groupowner template (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype in dir_group_ownership_library_dirs (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add stigid@ubuntu2004 to dir_group_ownership_library_dirs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update template documentation for multi-file ACLs (Alexander Scheel
<alex.scheel@canonical.com>)
 - Refactor into check_conflict_regex_directory (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix pep8 issues (Alexander Scheel <alex.scheel@canonical.com>)
 - Simplify file_groupowner templates (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Simplify file_owner templates (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Simplify file_permission templates (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Adapt file_groupowner to work with list of filepaths (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Adapt file_owner to deal with a list of filepaths (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix bug in file_permissions and make ansible work with lists (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Adapt file_permissions template to handle list of filepaths (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ubuntu2004 remove duplicate variable assignment (Watson Sato
<wsato@redhat.com>)
 - Add compatibility layer for Python2 unicode strings (Matěj Týč
<matyc@redhat.com>)
 - Add error handling to file loading (Matej Tyc <matyc@redhat.com>)
 - Use Python2-compat syntax for dictionary inheritance (Matej Tyc
<matyc@redhat.com>)
 - Add a compatibility layer for older libyaml (Matej Tyc <matyc@redhat.com>)
 - OCP4: Add CPEs for further versions (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix debian gh action job. (Gabriel Becker <ggasparb@redhat.com>)
 - Add NERC-CIP profiles for OCP4 and RHCOS (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - PCI-DSS: Update link in `shared/transforms` (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - NERC-CIP: Update CIP-009-3 references to CIP-009-6 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - NERC-CIP: Update CIP-005-3a references to CIP-005-6 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - NERC-CIP: Update CIP-004-3 references to CIP-004-6 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - NERC-CIP: Update CIP-003-3 references to CIP-003-8 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - NERC-CIP: Update CIP-002-3 references to CIP-002-5 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - RHCOS4: Still allow group access for ssh key (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS4/OCP4: Add answer for SI-10 NIST control (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update interface of LinearLoader (Matej Tyc <matyc@redhat.com>)
 - Remove SSH user inactivity timeout rules (Watson Sato <wsato@redhat.com>)
 - Fix RHEL9 SSH idletimeout, keepalive inconsistency (Watson Sato
<wsato@redhat.com>)
 - Remove duplicated variable refinement (Watson Sato <wsato@redhat.com>)
 - Set sshd_set_idle_timeout to require sshd_set_keepalive_0 (Watson Sato
<wsato@redhat.com>)
 - Fixed regex used in OVAL related to audit rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Improve handing of whitespaces in jinja templpate (Yavor Georgiev
<strandjata@gmail.com>)
 - Move file_at_deny_not_exist and file_cron_deny_not_exist to templates
(Matthew Burket <mburket@redhat.com>)
 - Update shared/templates/pam_options/bash.template (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add github actions to build the content for Debian (9, 10 and 11) (Marco De
Donno <mdedonno1337@gmail.com>)
 - Make utils/create_scap_delta_tailoring.py only outputs the delta of the rules
(Matthew Burket <mburket@redhat.com>)
 - Update user_guide.adoc section 6.1 (dperrone <dperrone@redhat.com>)
 - Bash Remediation for smartcard_configure_ca (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Small improvements (Matej Tyc <matyc@redhat.com>)
 - OCP4/PCI-DSS: Add response for Requirement 2.2.4 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP: Fix OCIL description of configure_network_policies_namespaces (Jakub
Hrozek <jhrozek@redhat.com>)
 - Consolidate the compile_all script (Matej Tyc <matyc@redhat.com>)
 - Set sshd priv keys permissions 600 for all products. (Gabriel Becker
<ggasparb@redhat.com>)
 - sshd_set_idle_timeout: remove profile metadata from pass scenario (Matus
Marhefka <mmarhefk@redhat.com>)
 - OCP4/PCI-DSS: Add rules for 2.3 requirement (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Add response for Req 2.2.5 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add grub2 rules for systems prior to 7.2 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add RHEL-7 CCEs to rsyslog rules (Watson Sato <wsato@redhat.com>)
 - Add rsyslog tls config rules to rhel7 (Watson Sato <wsato@redhat.com>)
 - Return rule package_rsyslog-gnutls_installed to RHEL7 (Jan Černý
<jcerny@redhat.com>)
 - Add bash remediation for the pam_options template (Yavor Georgiev
<strandjata@gmail.com>)
 - Assign the quick label to unit tests (Matěj Týč <matyc@redhat.com>)
 - Remove the dependency on directories (Matej Tyc <matyc@redhat.com>)
 - Extracted the selection handling functionality (Matej Tyc <matyc@redhat.com>)
 - Various updates (Matej Tyc <matyc@redhat.com>)
 - Forget about the legacy shorthand (Matej Tyc <matyc@redhat.com>)
 - Compile everything and generate shorthand (Matej Tyc <matyc@redhat.com>)
 - Change controls resolution (Matěj Týč <matyc@redhat.com>)
 - Compile everything at the beginning (Matěj Týč <matyc@redhat.com>)
 - Optimize rule dump in the benchmark (Matěj Týč <matyc@redhat.com>)
 - Fix an exc handling (Matěj Týč <matyc@redhat.com>)
 - Remove an unused class (Matěj Týč <matyc@redhat.com>)
 - Refactor SCAP data structures (Matěj Týč <matyc@redhat.com>)
 - Fix indentation ... tabs are evil (Yavor Georgiev <strandjata@gmail.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attem
pts/accounts_password_pam_unix_remember/bash/shared.sh (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/locking_out_password_attem
pts/accounts_password_pam_unix_remember/bash/shared.sh (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Changes based on reviewers' comments: (Matthew Burket <mburket@redhat.com>)
 - Enforce usage of product (fedora) option when running SSGTS on Github
actions. (Gabriel Becker <ggasparb@redhat.com>)
 - Add rule group_unique_id (Matthew Burket <mburket@redhat.com>)
 - sshd_set_idle_timeout: update pass scenario for both RHEL7 and RHEL8 (Matus
Marhefka <mmarhefk@redhat.com>)
 - OCP4/PCI-DSS: Add rules for Req-2.2.3 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Add response for Req-2.2.3 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Add response for Req-2.2.2 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Add response for Req-2.2.1 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Set banner setting in controls/nist_rhcos4.yml (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS: Add sysctl_kernel_core_pattern to controls (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS: Fix typo in usbguard audit backend rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS: Add rules to SC-39 as appropriately (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS4: mark coreos_vsyscall_kernel_argument as unscored (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - OCP4: Add prodtype to partition_for_var_log_* rules (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - RHCOS4: Add missing NIST references from rules and add the missing ones to
the controls (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4: add appropriate references to ocp_allowed_registries* (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Fix partition_for_var_log_* rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4 & RHCOS4: Migrate OpenControl evaluations to controls structure (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Patch the name of the package and service for syslog-ng (Marco De Donno
<mdedonno1337@gmail.com>)
 - Fix regex on rsyslog_remote_loghost (Matthew Burket <mburket@redhat.com>)
 - Remove remediation_functions from clean_components_post_updating bash
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add tests for clean_components_post_updating (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu specific OVAL for clean_components_post_updating (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu specific bash for clean_components_post_updating (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Bypass platform in clean_components_post_updating (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - SELinux docs: fix RHEL7 link, add RHEL8 link (Matus Marhefka
<mmarhefk@redhat.com>)
 - Selcet service_slapd_disabled for RHEL8 CIS (Matthew Burket
<mburket@redhat.com>)
 - Incorporate reviewer comments (Matthew Burket <mburket@redhat.com>)
 - Add kubeadmin_removed to relevant profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Automate the kubeadmin_removed rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add new template to check that Compliance Operator returned NotFound (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Update CONTRIBUTING.md (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Fix tests for file_cron_deny_not_exist (Matthew Burket <mburket@redhat.com>)
 - Update Centos8 Dockerfile to enable powertools and ninja-build correctly (Dan
Clark <danclark@redhat.com>)
 - SSGTS: Only process slice options when subcommand is rule or combined.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add the check for official repositories for Debian 11 (Marco De Donno
<mdedonno1337@gmail.com>)
 - Add bash_provide_pam_module_options macro (Yavor Georgiev
<strandjata@gmail.com>)
 - Remove redundant include (teacup-on-rockingchair <strandjata@gmail.com>)
 - Rework bash remediation for accounts_password_pam_unix_remember rule to
support the case when pam config file does not exist (Yavor Georgiev
<strandjata@gmail.com>)
 - Add condtitions to prevent set remember value when the there is no remember
configuration (Yavor Georgiev <strandjata@gmail.com>)
 - Replace bash_ensure_pam_module_options macro with hopefully more accurate
(Yavor Georgiev <strandjata@gmail.com>)
 - Add bash_provide_pam_module_options macro (Yavor Georgiev
<strandjata@gmail.com>)
 - Remove redundant include (teacup-on-rockingchair <strandjata@gmail.com>)
 - Rework bash remediation for accounts_password_pam_unix_remember rule to
support the case when pam config file does not exist (Yavor Georgiev
<strandjata@gmail.com>)
 - Add utils/create_scap_delta_tailoring.py (Matthew Burket
<mburket@redhat.com>)
 - Patch test utils file (Marco De Donno <mdedonno1337@gmail.com>)
 - Add support for Debian 11 (Marco De Donno <mdedonno1337@gmail.com>)
 - OCP4/PCI-DSS: Add audit_log_forwarding_enabled to Req-10.5.3 (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - OCP4/PCI-DSS add verbiage to address Req-2.2 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Take CIS profiles into use for PCI-DSS (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Add relevant PCI-DSS references to CIS-related rules (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Add NIST reference to api_server_tls_cipher_suites (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Migrate Satellite 6 NIST evaluation from OpenControl to controls structure
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Migrate Ansible Tower NIST evaluation from OpenControl to controls structure
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Migrate RH IdM NIST evaluation from OpenControl to controls structure (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Migrate RHACM NIST evaluation from OpenControl to controls structure (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add mock rule directories for get_rule_by_path_id (Watson Sato
<wsato@redhat.com>)
 - Add headers to auditd_offload_logs tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make sure that the ID mismatch has a trailing newline (Matěj Týč
<matej.tyc@gmail.com>)
 - the requirement checks for a different package now (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fixed ansible remediation macro for login banners (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4/PCI-DSS: Move requirement 2.6 out of the base level (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Mark Req-2.5 as not applicable (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Mark Req-2.4 as not applicable. (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix utils/controleval.py (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Remove NCP profile (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - RHCOS4: Remove NCP profile (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - banner_etc_motd rule reviewed and properly adjusted (Marcus Burghardt
<maburgha@redhat.com>)
 - Defined login_banner_text for rhcos4 moderate profile (Marcus Burghardt
<maburgha@redhat.com>)
 - More flexibility for login banners (Marcus Burghardt <maburgha@redhat.com>)
 - Added ability to slice SSGTS rule checking runs (Marek Haicman
<mhaicman@redhat.com>)
 - Add auditd_offload_logs to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests to auditd_offload_logs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add remediation for audit profile set (vincent <wenshen@redhat.com>)
 - Add missing disk full action variable to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Move warning message out from the relevant function (Jan Černý
<jcerny@redhat.com>)
 - Handle references with commmas in utils/build_stig_control.py (Matthew Burket
<mburket@redhat.com>)
 - Add rule accounts_root_gid_zero (Matthew Burket <mburket@redhat.com>)
 - Add --only-rules option to utils/compare_ds.py (Milan Lysonek
<mlysonek@redhat.com>)
 - Add rule service_slapd_disabled (Matthew Burket <mburket@redhat.com>)
 - Add packages so that test suite pass in a container (Matthew Burket
<mburket@redhat.com>)
 - Selected rsyslog_remote_loghost on RHEL7 and RHEL8 CIS. (Matthew Burket
<mburket@redhat.com>)
 - Update rsyslog_remote_loghost to match STIG and CIS (Matthew Burket
<mburket@redhat.com>)
 - Added automated checkes for RHEL8 CIS 5.1.8 (Matthew Burket
<mburket@redhat.com>)
 - Update RHEL7 CIS 5.1.8 (Matthew Burket <mburket@redhat.com>)
 - Add rule file_cron_deny_not_exist (Matthew Burket <mburket@redhat.com>)
 - Add rule file_at_deny_not_exist (Matthew Burket <mburket@redhat.com>)
 - Check all accounts, even the ones without password (Watson Sato
<wsato@redhat.com>)
 - Add ubuntu specific description and ocil
auditd_audispd_configure_remote_server (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu platform to shared audit fixes (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Unset variables in macros bash to avoid leakage (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add audit platform_package_overrides to make audit rules work (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu to audit_rules_privileged_commands bash and oval (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu as supported audit_rules_* platform (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update test scenarios variables to align with STIG (Watson Sato
<wsato@redhat.com>)
 - Fix test for maximum min password age (Watson Sato <wsato@redhat.com>)
 - Remove blank passwords check with textfilecontent (Watson Sato
<wsato@redhat.com>)
 - Fix typos and comment message (Watson Sato <wsato@redhat.com>)
 - Add rule journald_storage (Matthew Burket <mburket@redhat.com>)
 - Test if cce_identifiers is defined before using it. (Gabriel Becker
<ggasparb@redhat.com>)
 - DISA STIG SLE 12/15 release update (Alexander Bergmann <abergmann@suse.com>)
 - Select account_unique_id for RHEL8 CIS 6.2.15 (Matthew Burket
<mburket@redhat.com>)
 - Add SSH LoginGraceTime rule (Matthew Burket <mburket@redhat.com>)
 - Add rule journald_compress (Matthew Burket <mburket@redhat.com>)
 - Add rule journald_forward_to_syslog (Matthew Burket <mburket@redhat.com>)
 - Update bios_enable_execution_restrictions test (Gabriel Becker
<ggasparb@redhat.com>)
 - Add group for systemd-journald (Matthew Burket <mburket@redhat.com>)
 - Add cap_sys_admin to SSGTS podman so it can mount partitions. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove CCENUM leftovers. (Gabriel Becker <ggasparb@redhat.com>)
 - SLES-15-030720 all fixes (rchikov <rumen.chikov@suse.com>)
 - Use env parameter to define env variables (Gabriel Becker
<ggasparb@redhat.com>)
 - Extend gate workflow with more dependencies and cmake options. (Gabriel
Becker <ggasparb@redhat.com>)
 - bios_enable_execution_restrictions: fix test scenarios logic based on OVAL
check (Matus Marhefka <mmarhefk@redhat.com>)
 - fixed cmdline (ayfantis <ayfantis@localhost.localdomain>)
 - Fixing logic (root <root@localhost.localdomain>)
 - Fixed bats tests and made builder arguments clearer (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fixing pass scenarion, adding tabs for easier reading, fixing sed flags on
fail (ayfantis <ayfantis@localhost.localdomain>)
 - Add new rule to fix #5232 (Matthew Burket <mburket@redhat.com>)
 - Add rule for RHEL8 CIS 5.2.16 and RHEL7 CIS 5.3.19 (Matthew Burket
<mburket@redhat.com>)
 - Add an SSGTS option to inject a product to the FIPS certified check. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix issues in playbook_builder_data (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Make `filter_rules` work for regular profiles too (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add rule "Ensure All Groups on the System Have Unique Group Names" to fix
\#5500 (Matthew Burket <mburket@redhat.com>)
 - Fixed line length again (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed line length (Jiri Odehnal <jodehnal@redhat.com>)
 - created pass case for this test (ayfantis <ayfantis@localhost.localdomain>)
 - Changed set_cce_value and bash_replace_or_append macros to avoid unnecessary
code in remediations if cce not set (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed cce insertion for templated rules (Jiri Odehnal <jodehnal@redhat.com>)
 - newline at the end (ayfantis <ayfantis@localhost.localdomain>)
 - Simplified script due to the nature of the test execution (ayfantis
<ayfantis@localhost.localdomain>)
 - Fix wrong grep, remove /n, optimized IFs (ayfantis
<ayfantis@localhost.localdomain>)
 - Enable test suite to run ocp4 unit tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Add rule to check that the default policy is to reject images (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - updated cpuinfo test to include all possible outcomes (ayfantis
<ayfantis@localhost.localdomain>)
 - Remove STIG ref RHEL-07-040510 as its no longer in the STIG (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL8 FIPS STIG ID to few rules (Matthew Burket <mburket@redhat.com>)
 - updating script to not completely alter the desired files (ayfantis
<ayfantis@localhost.localdomain>)
 - test can work for any profile (ayfantis <ayfantis@localhost.localdomain>)
 - Clarify doc for check-export in SCE. (mgjadoul <marc.jadoul@gmail.com>)
 - adding default general case test (ayfantis <ayfantis@localhost.localdomain>)
 - service_rsyncd_disabled: remove test scenarios (Matus Marhefka
<mmarhefk@redhat.com>)
 - OCP4: Fix PCI-DSS profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Remove leftover remediation_functions calls (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - fixed platform (ayfantis <ayfantis@localhost.localdomain>)
 - temp (ayfantis <ayfantis@localhost.localdomain>)
 - added profile metadata to pass case (ayfantis
<ayfantis@localhost.localdomain>)
 - Add Blueprint remediation templates (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Add 'min_size' argument to the 'mount' rule template (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Fix variable expansion in awk expression (Watson Sato <wsato@redhat.com>)
 - Put existing users withing age min-max range (Watson Sato <wsato@redhat.com>)
 - Put existing users withing age min-max range (Watson Sato <wsato@redhat.com>)
 - Set tests for min_life_existing to "pre-remediate" the existing accounts with
large numbers. (Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Set tests for max_life_existing to "pre-remediate" the existing accounts with
small numbers. Make the fail a large number. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Fix typos in test scripts. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Play nice with the SSGTS by creating an entry in /etc/passwd and pre-
remediating existing users to have a password change of "today" (Lenox, Joseph D
(Collins) <Joseph.Lenox@collins.com>)
 - test fix: rememediate existing accounts before adding a failure. (Lenox,
Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Clean up tests for min/max password life to trash all noninteractive users
before adding entries to make test. (Lenox <jdlenox@labnet.rockwellcollins.lab>)
 - Fix issues from review for min/max password life * Change behavior of
passwd_has_interactive_users.     - Now returns True if any users with a
password set are present in the shadow file.     - Cleaned up unussed tests. *
set_min_life_existing     - Fix comments, etc to correctly refer to minimum
life.     - Remove unneeded check for blank min life.     - Use shadow object
instead of password.     - Negate common has_interactive_users. *
set_max_life_existing     - Negate common has_interactive_users.     - Change to
use shadow object instead of password. (Lenox
<jdlenox@labnet.rockwellcollins.lab>)
 - Correct description tag placement from review. (Lenox
<jdlenox@labnet.rockwellcollins.lab>)
 - Add metadata flag explicitly for shared segment. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Push OVAL check for interactive users into `shared/checks/oval`. (Lenox,
Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Add tests for upstream environment. (Lenox, Joseph D (Collins)
<Joseph.Lenox@collins.com>)
 - Revise check for min/max password age to not duplicate check items. (Lenox,
Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Add initial scan and remediation for setting shadow account passwords min/max
lifespans. Signed-off-by: Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>
(Lenox, Joseph D (Collins) <Joseph.Lenox@collins.com>)
 - Added Build, Test on OpenSUSE Leap 15 on pull requests (Matthew Burket
<mburket@redhat.com>)
 - Add rule to stig.profiles (anivan-suse <anastasija.ivanovic@suse.com>)
 - Alter file_ownership_var_log_audit_stig tests to check log_file (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Alter file_ownership_var_log_audit_stig description to mention log_file
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Adapt file_group_ownership_var_log_audit tests to check log_file (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Alter rule description on file_group_ownership_var_log_audit to mention
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Fix for issue  #7655 (Marc Jadoul <mgjadoul@laptomatic.auth-o-matic.corp>)
 - Enable bash remediation support of accounts_authorized_local_users rule for
SLE platforms (Yavor Georgiev <strandjata@gmail.com>)
 - Enable bash remediation support of accounts_passwords_pam_faildelay_delay
rule for SLE platforms (Yavor Georgiev <strandjata@gmail.com>)
 - Fix typo (ayfantis <ayfantis@localhost.localdomain>)
 - Test not applicable since we dont support 32bit architectures (ayfantis
<ayfantis@localhost.localdomain>)
 - fixing the value array (ayfantis <ayfantis@localhost.localdomain>)
 - Implementing fail scenarios for tests that read /proc/cpuinfo (ayfantis
<ayfantis@localhost.localdomain>)
 - Add only_allow_dod_certs to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fixing value (ayfantis <ayfantis@localhost.localdomain>)
 - Add rule only_allow_dod_certs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Delete history.txt (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Add package_mcafeetp_installed to Ubuntu 20.04 STIG Profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make package_mcafeetp_installed work on Ubuntu (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add prevent_direct_root_logins to Ubuntu 20.04 STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule prevent_direct_root_logins (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ensure_sudo_group_restricted to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add ensure_sudo_group_restricted rule (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Making the fail test multi_platform, fixing the value check in the correct
test (ayfantis <ayfantis@localhost.localdomain>)
 - Rename test scenarios (Jan Černý <jcerny@redhat.com>)
 - Bump version to 0.1.59 (Watson Sato <wsato@redhat.com>)
 - Limit ntpd_specify_remote_server remediations to fedora and rhel7 (Matus
Marhefka <mmarhefk@redhat.com>)
 - Created pass/fail scripts for rule sshd_use_approved_macs for cis on rhel7
(ayfantis <ayfantis@localhost.localdomain>)
 - Fix regular expression (Jan Černý <jcerny@redhat.com>)
 - Use --duplicate-templates in SSGTS integration with Github. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add oval for auditd_offload_logs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule auditd_offload_logs (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Removing multiplatform for fedora (ayfantis <ayfantis@localhost.localdomain>)
 - Update list of contributors for 0.1.58 release (Watson Sato
<wsato@redhat.com>)
 - service_enabled test scenarios templates (Milan Lysonek
<mlysonek@redhat.com>)
 - Fixing the platform variable for applicable OS versions (ayfantis
<ayfantis@localhost.localdomain>)
 - tests/shared/group_updating_utils.sh: which is not available in a container
env (Matus Marhefka <mmarhefk@redhat.com>)
 - Fix typo in audit_perm_change_success rule (Anderson Sasaki
<33833274+ansasaki@users.noreply.github.com>)
 - Removed XSLT template for CCE replacement; fixed unit tests for
bash_replace_or append; fixed comments and macro invocations (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fix path to kickstart files (Watson Sato <wsato@redhat.com>)
 - Add sphinx missing dependency in the developer guide. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add file_permissions_etc_audit_* rules to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add stigid@ubunt2004 (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Removed the CCENUM argument from the rest of bash_replace_or_append macro
invocations (Jiri Odehnal <jodehnal@redhat.com>)
 - Added multiplatform support (ayfantis <ayfantis@localhost.localdomain>)
 - Removed the CCENUM argument from some bash_replace_or_append macro
invocations (Jiri Odehnal <jodehnal@redhat.com>)
 - Add directory_permissions_var_log_audit to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add tests to directory_permissions_var_log_audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make directory_permissions_var_log_audit check log_file parameter (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Added if removed by mistake, removed correct one (ayfantis
<ayfantis@localhost.localdomain>)
 - removing unecessary part of code (ayfantis <ayfantis@localhost.localdomain>)
 - Fixing the naming to remove cis reference and add the .pass value (ayfantis
<ayfantis@localhost.localdomain>)
 - Alter bash to support ubuntu and to check log_file parameter (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add DISA reference to directory_permissions_var_log_audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid@ubuntu2004 to directory_permissions_var_log_audit (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Included test scenarios for CIS (Marcus Burghardt <maburgha@redhat.com>)
 - Created jinja macro for setting cce values and modified build script to
provide the necessary values (Jiri Odehnal <jodehnal@redhat.com>)
 - Add file_group_ownership_var_log_audit to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Alter oval to check log_file configuration (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Alter bash to get audit log files location from log_file (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Alter ocil in file_group_ownership_var_log_audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Adding specific rhel version (ayfantis <ayfantis@localhost.localdomain>)
 - Add stigid@ubuntu2004 in file_group_ownership_var_log_audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype in file_group_ownership_var_log_audit (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add a fail test for accounts_password_all_shadowed (Jan Černý
<jcerny@redhat.com>)
 - Implementing test ssh_set_max_sessions for rhel7 profiles (ayfantis
<ayfantis@localhost.localdomain>)
 - Add file_ownership_var_log_audit_stig to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Alter file_ownership_var_log_audit_stig oval so it can check log_file
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Alter bash to get audit log files location from log_file (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Alter ocil in file_ownership_var_log_audit_stig (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid@ubuntu2004 in file_ownership_var_log_audit_stig (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype in file_ownership_var_log_audit_stig (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Updated style guide to define test scripts header (Marcus Burghardt
<maburgha@redhat.com>)
 - Add file_permissions_var_log_audit to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Update test scenarios of ensure_gpgcheck_globally_activated to work on Fedora
(Matus Marhefka <mmarhefk@redhat.com>)
 - Add tests to file_permissions_var_log_audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make file_permissions_var_log_audit oval check log_file in auditd.conf
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add shared check auditd_conf_log_file_not_set (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix typos (Jan Černý <jcerny@redhat.com>)
 - Add test scenarios for ensure_gpgcheck_never_disabled (Matus Marhefka
<mmarhefk@redhat.com>)
 - Create test scenarios for rule gid_passwd_group_same (Jan Černý
<jcerny@redhat.com>)
 - Add multi_platform_ubuntu to bash in file_permissions_var_log_audit (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Make file_permissions_var_log_audit bash script address log_file (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Adjust file_permissions_var_log_audit ocil (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid@ubuntu2004 to file_permissions_var_log_audit (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype on file_permissions_var_log_audit (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add bios_enable_execution_restrictions to Ubuntu 20.04 STIG profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Make bios_enable_execution_restrictions oval check for dmesg instead of
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add disa and stigid references to bios_enable_execution_restrictions (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype in bios_enable_execution_restrictions (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Fix issues with configure_crypto_policy when running in container (Matus
Marhefka <mmarhefk@redhat.com>)
 - Add test scenarios specific for CIS (Jan Černý <jcerny@redhat.com>)
 - Add ntpd_specify_remote_serve tests (Milan Lysonek <mlysonek@redhat.com>)
 - Add ntpd_specify_remote_serve Bash and Ansible remediations (Milan Lysonek
<mlysonek@redhat.com>)
 - Update chronyd_specify_remote_server test platform and remove unnecessary
empty lines (Milan Lysonek <mlysonek@redhat.com>)
 - RHCOS4: Mark wireless_disable_interfaces as NOT-APPLICABLE in e2e tests (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Introduced documentation for ansible-role-openscap (Marcus Burghardt
<maburgha@redhat.com>)
 - moved the tests to the correct folder (bash -> tests) (ayfantis
<ayfantis@localhost.localdomain>)
 - removed line for specific cis profile to make test work with every profile
(ayfantis <ayfantis@localhost.localdomain>)
 - removed the pass/fail tests, kept a single test (ayfantis
<ayfantis@localhost.localdomain>)
 - Add initial support kube remediation templating (Vincent Shen
<47534281+Vincent056@users.noreply.github.com>)
 - Add packages metadata to configure_crypto_policy test scenarios (Matus
Marhefka <mmarhefk@redhat.com>)
 - remove rule from rhel7 cis (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix yaml indentation in pcidss_ocp4.yml (Sherine Khoury <skhoury@redhat.com>)
 - Add audit_sudo_log_events to Ubuntu STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule audit_sudo_log_events (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add audit_rules_privileged_commands_fdisk to ubuntu stig profile (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Update linux_os/guide/system/auditing/configure_auditd_data_retention/var_aud
itd_max_log_file_action.var (Marcus Burghardt
<2074099+marcusburghardt@users.noreply.github.com>)
 - Fix requirements of section3 (Sherine Khoury <skhoury@redhat.com>)
 - Add tests for audit_rules_privileged_commands_fdisk (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add oval for audit_rules_privileged_commands_fdisk (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add bash for audit_rules_privileged_commands_fdisk (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Introduce templated test scenarios for package_removed rules (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add rule audit_rules_privileged_commands_fdisk (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule audit_rules_privileged_commands_unix_update to ubuntu stig (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu prodtype and references to
audit_rules_privileged_commands_unix_update (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add audit_rules_privileged_commands_apparmor_parser to ubuntu stig (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add rule audit_rules_privileged_commands_apparmor_parser (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - controls: PCI-DSS section 10 (Matt Rogers <mrogers@redhat.com>)
 - fix mistake in documentation of high level jinja macros (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix wrong references (Vojtech Polasek <vpolasek@redhat.com>)
 - extract template reference documentation into a separate file (Vojtech
Polasek <vpolasek@redhat.com>)
 - mention blueprint remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add link to content labs (Vojtech Polasek <vpolasek@redhat.com>)
 - move instruction for creating of new product to readthedocs (Vojtech Polasek
<vpolasek@redhat.com>)
 - add doc strings to high level macros and link to it from the main docs
(Vojtech Polasek <vpolasek@redhat.com>)
 - Add test scenarios for configure_crypto_policy and CIS profiles (Matus
Marhefka <mmarhefk@redhat.com>)
 - Add warning on why no_duplicate_uids doesn't have remediation (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - remove hardcoded macro descriptions and link to generated references (Vojtech
Polasek <vpolasek@redhat.com>)
 - remove info about copr as we no longer maintain it (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove reference to readme.md (Vojtech Polasek <vpolasek@redhat.com>)
 - profile_tool.py: Update fields displayed in HTML. (Gabriel Becker
<ggasparb@redhat.com>)
 - Included missing test scenarios for 2 rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Initialize CombinedChecker run_aborted property (Watson Sato
<wsato@redhat.com>)
 - Enable bash remediation for aide_check_audit_tools rule on SLE platform
(Yavor Georgiev <strandjata@gmail.com>)
 - Add rules to Ubuntu STIG profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid@ubuntu2004 to sshd_enable_warning_banner_net (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add sshd_enable_warning_banner_net for CIS 5.2.18 (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for banner_etc_issue_net (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add OVAL for banner_etc_issue_net (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add bash remediation for banner_etc_issue_net (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule banner_etc_issue_net (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - use `{"__builtins__": None}` in rules_filter eval (Juan Osorio Robles
<jaosorior@gmail.com>)
 - removed if-elfif (ayfantis <ayfantis@localhost.localdomain>)
 - SSGTS: Update message when a rule has no test scenarios. (Gabriel Becker
<ggasparb@redhat.com>)
 - updating cis profile rule: require_singleuser_auth created pass and fail
script (ayfantis <ayfantis@localhost.localdomain>)
 - cis rhel7 upgdate, test require_emergency_target_auth: scripts for pass.fail
added. (ayfantis <ayfantis@localhost.localdomain>)
 - Fix action and add 1.2 validation (Matthew Burket <mburket@redhat.com>)
 - Restrict the check to OVAL 5.11 (Watson Sato <wsato@redhat.com>)
 - Fix test scenarios of selinux_state rule (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add sshd_enable_pubkey_auth to ubuntu2004 stig profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests for sshd_enable_pubkey_auth (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add rule sshd_enable_pubkey_auth (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add sshd_enable_pam to ubuntu2004 stig profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid, disa and srg to sshd_enable_pam (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Align Ansible remediation with Bash (Watson Sato <wsato@redhat.com>)
 - Added test scenarios for root_path_no_dot rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Add tests to sshd_enable_pam (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add sshd_enable_pam for CIS 5.2.19 (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update RHEL8 STIG control (Matthew Burket <mburket@redhat.com>)
 - Add STIG references for FIPS (Matthew Burket <mburket@redhat.com>)
 - OCP4: Simply moderate profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Increased converage of test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Align sshd_set_idle_timeout test scenario to OSPP (Watson Sato
<wsato@redhat.com>)
 - Fix PEP8 problems (Jan Černý <jcerny@redhat.com>)
 - Add a warning (Jan Černý <jcerny@redhat.com>)
 - Improvements on wireless_disable_interfaces rule (Marcus Burghardt
<maburgha@redhat.com>)
 - Refactor: Extract function (Jan Černý <jcerny@redhat.com>)
 - Break the shared bash install_smartcard_packages remediation (Yavor Georgiev
<strandjata@gmail.com>)
 - Fix control unit tests. (Gabriel Becker <ggasparb@redhat.com>)
 - Improvements on file permissions test scenarios (Marcus Burghardt
<maburgha@redhat.com>)
 - Implement `filter_rules` for Profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add no_duplicate_uid to ubuntu2004 stig profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid, disa and srg references to no_duplicate_uids (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Removed more unnecessary code from build script and cmake files; Modified
documentation to reflect removal of shared bash remediations (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fix RHEL8 CIS reference of mount_option_dev_shm_nodev (Matus Marhefka
<mmarhefk@redhat.com>)
 - Started removing dependencies on the removed remediation functions directory
from the cmake files; removed obsolete build script (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add tests for no_duplicate_uids (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add OVAL for no_duplicate_uids (Alexander Scheel <alex.scheel@canonical.com>)
 - Add no_duplicate_uids for CIS 6.2.13 (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add verify_use_mappers to ubuntu stig profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests to verify_use_mappers (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add verify_use_mappers rule (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add variables needed for bash remediations for
accounts_max_concurrent_login_sessions and accounts_password_pam_unix_remember
rules (Yavor Georgiev <strandjata@gmail.com>)
 - Enable bash remediation support for accounts_max_concurrent_login_sessions
and accounts_password_pam_unix_remember rules for SLE platforms (Yavor Georgiev
<strandjata@gmail.com>)
 - Enable bash remediation support of account_disable_post_pw_expiration rule
for SLE platforms (Yavor Georgiev <strandjata@gmail.com>)
 - Add STIG references to package_apparmor_installed (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add package_apparmor_installed to ubuntu stig profile (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests for package_apparmor_installed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add package_apparmor_installed for CIS 1.7.1.1 (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add ubuntu platform to apparmor_configured tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu platform to apparmor_configured bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add packagename@ubuntu to apparmor_configured (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix shebang in tests/run_scapval.py (Matthew Burket <mburket@redhat.com>)
 - Add ubuntu platform to approved fips ciphers and macs bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Use authselect when authconfig is not available (Watson Sato
<wsato@redhat.com>)
 - Install wget to fix the tests pass on stabilization (Matthew Burket
<mburket@redhat.com>)
 - Add ubuntu platform to rsyslog_remote_access_monitoring tests (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu to shared bash script in rsyslog_remote_access_monitoring (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Enable bash remediation support of sysctl rules for SLE platforms (Yavor
Georgiev <strandjata@gmail.com>)
 - Add sle support for install_smartcard_packages bash remediation (Yavor
Georgiev <strandjata@gmail.com>)
 - Add sle support for audit_rules_login_events template bash remediation (Yavor
Georgiev <strandjata@gmail.com>)
 - Add profile and remediation header section (Matthew Burket
<mburket@redhat.com>)
 - Add ubuntu platform to accounts-restrictions and accounts-session rules
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Force masking of ctrl-alt-del.target (Watson Sato <wsato@redhat.com>)
 - Fix typo in rsyslog streamdriver remediations (Watson Sato
<wsato@redhat.com>)
 - Remove unnecessary debug task (Watson Sato <wsato@redhat.com>)
 - Add PCI-DSS remediations to some rules (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add metadata to chronyd or ntpd remediations (Watson Sato <wsato@redhat.com>)
 - Enable gating tests on PRs for stabilization (Watson Sato <wsato@redhat.com>)
 - Use correct packages keyword in test scenarios metadata. (Gabriel Becker
<ggasparb@redhat.com>)
 - Removed unnecessary line in macros-bash.jinja (Jiri Odehnal
<jodehnal@redhat.com>)
 - Added gitkeep to deprecated folder to remove cmake issues; fixed
documentation to better reflect changes made to build script (Jiri Odehnal
<jodehnal@redhat.com>)
 - OCP4: Add assessment for section 1 for PCI-DSS (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Improved file ownership test scenario coverage (Marcus Burghardt
<maburgha@redhat.com>)
 - Expanded markdown section and other minor changes to style guide (Matthew
Burket <mburket@redhat.com>)
 - Update STIG control to new status format (Matthew Burket
<mburket@redhat.com>)
 - Added script that will bulid the controls section for a STIG control.
(Matthew Burket <mburket@redhat.com>)
 - Update incorrect_min_pass_age.fail.sh (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Differentiate build time Jinja processing from test time processing (Watson
Sato <wsato@redhat.com>)
 - sshd_use_approved_ciphers: Rule is no longer part of STIG, remove STIG test
scenarios (Matus Marhefka <mmarhefk@redhat.com>)
 - Treatment to remove protected packages with yum or dnf (Marcus Burghardt
<maburgha@redhat.com>)
 - OCP4: Add platform to rules that need it (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fixes in SLES-15-030730-40-50 (rchikov <rumen.chikov@suse.com>)
 - Add Fedora Rawhide support (Alex Haydock <alex@alexhaydock.co.uk>)
 - Removed redundant code from the build script (Jiri Odehnal
<jodehnal@redhat.com>)
 - removed unnecessary sourcing of deprecated directory (Jiri Odehnal
<jodehnal@redhat.com>)
 - fixed two chromium remediation scripts and added a var file (Jiri Odehnal
<jodehnal@redhat.com>)
 - changed populate to bash_instantiate_variables macro and removed unnecessary
sourcing (Jiri Odehnal <jodehnal@redhat.com>)
 - removed populate.sh and modified build script accordingly (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add templated test scenarios for sshd rules (Matus Marhefka
<mmarhefk@redhat.com>)
 - Test scenarios for audit converted to templates (Marcus Burghardt
<maburgha@redhat.com>)
 - sshd_use_approved_ciphers: Add test scenarios for RHEL7 CIS (Matus Marhefka
<mmarhefk@redhat.com>)
 - products/sle15/product.yml: Fix grub.cfg path (Arnaud Patard
<apatard@hupstream.com>)
 - Fix set_tests_properties for fix_rules-sort_prodtypes (Matthew Burket
<mburket@redhat.com>)
 - Tests for accounts_passwords_pam_tally2 rule (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Fix remediation script for accounts_passwords_pam_tally2 (Richard Maciel
Costa <richard.maciel.costa@canonical.com>)
 - accounts_passwords_pam_tally2 OVAL changed to use variable (Richard Maciel
Costa <richard.maciel.costa@canonical.com>)
 - Fixed rule accounts_password_pam_tally2 (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Add shebang to tests in style guide (Matthew Burket <mburket@redhat.com>)
 - aide_periodic_cron_checking: Ensure cron presence (Arnaud Patard
<apatard@hupstream.com>)
 - aide_periodic_cron_checking: SLE: Fix aide path (Arnaud Patard
<apatard@hupstream.com>)
 - Release Tools: Get rid of the COPR-related files and information (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Release Tools: Clean up the release_content script and update the README
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Add tests for accounts_password_pam_enforcing (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu platform to accounts_password_pam_retry tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests to smartcard_pam_enabled (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add more information for Ubuntu smartcard login setup (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu specific bash for smartcard_pam_enabled (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu specific oval for smartcard_pam_enabled (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests for smartcard_configure_crl (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Improve ubuntu bash for smartcard_configure_crl (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add oval to smartcard_configure_crl (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu bash to smartcard_configure_crl (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Assign smartcard_configure_crl to UBTU-20-010066 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add smartcard_configure_crl (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add tests for smartcard_configure_cert_checking (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Improve ubuntu bash for smartcard_configure_cert_checking (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu specific bash for smartcard_configure_cert_checking (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add tests to smartcard_configure_ca (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Included CPE applicability test for audit rules (Marcus Burghardt
<maburgha@redhat.com>)
 - Added missing indent filters (Jiri Odehnal <jodehnal@redhat.com>)
 - Expand Fedora OVAL check to include Fedora 33, 34, 35 (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Fix `render-policy.py` to use `products/` directory (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add script to get statistics out of a control file (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - New test cases for audit rules (Marcus Burghardt <maburgha@redhat.com>)
 - GH Actions: Add scapval 1.3 job to the stabilization workflow (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - GH Actions: Add stabilization workflow (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - GH Actions: Add release workflow (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - GH Actions: Rename gating workflows (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Expand style guide and update contributing guide (Matthew Burket
<mburket@redhat.com>)
 - SLES-15-010100: Fix check (Arnaud Patard <apatard@hupstream.com>)
 - Add python3-pytest python3-pytest-cov to gating (Matthew Burket
<mburket@redhat.com>)
 - Add bats to build and docs (Matthew Burket <mburket@redhat.com>)
 - Update ansible.template (teacup-on-rockingchair <strandjata@gmail.com>)
 - Fix bash unit test (Matthew Burket <mburket@redhat.com>)
 - Expand Fedora CPE range to cover currently supported Fedora releases (Alex
Haydock <alex@alexhaydock.co.uk>)
 - Add ubuntu platform to disable_ctrlaltdel_reboot tests (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add multi_platform_ubuntu to bash script of ctrl-alt-del rules (Vern Hart
<vern.hart@canonical.com>)
 - Add a check for ubuntu2004 in warnings section of ctrl-alt-del rule (Vern
Hart <vern.hart@canonical.com>)
 - Add more content to style guide (Matthew Burket <mburket@redhat.com>)
 - SLES15 STIG : products/sle15/profiles/stig.profile: Fix value for
SLES-15-030590 (Arnaud Patard <apatard@hupstream.com>)
 - Automatically sorted prodtypes (Matthew Burket <mburket@redhat.com>)
 - Improve ubuntu bash for smartcard_configure_ca (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add Ubuntu specific bash to smartcard_configure_ca (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix ubuntu2004 smartcard package (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - ssg/build_yaml.py: Remove unused import (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Adjust display_login_attempts tests for ubuntu (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu bits to display_login_attempts bash and oval (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - SLES-15-030360: add missing umount2 checks (Arnaud Patard
<apatard@hupstream.com>)
 - SLES-15-030730,030740,030750 corrections (rchikov <rumen.chikov@suse.com>)
 - Create ubuntu specific bash for accounts_password_pam_retry (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Adapt accounts_password_pam_retry oval for ubuntu2004 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Adapt accounts_password_pam_retry description for ubuntu2004 (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - install_smartcard_packages: SLE15: don't check coolkey package presence
(Arnaud Patard <apatard@hupstream.com>)
 - Alphabetize reviewer findings. (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Allows logging stderr for remote commands in ssg_test_suite (Marcus Burghardt
<maburgha@redhat.com>)
 - Fix function call introduced by PR #7488 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Expand style guide (Matthew Burket <mburket@redhat.com>)
 - Add --no-reports option for SSGTS rule and combined modes (Milan Lysonek
<mlysonek@redhat.com>)
 - Change path in require_singleuser_auth for RHEL7 (Matthew Burket
<mburket@redhat.com>)
 - Move the templated sshd OVAL check to a macro (Matěj Týč
<matyc@redhat.com>)
 - NIST: Add SI-4(23) reference to the relevant rules (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Fix prodtypes and CIS references (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Fix two more duplicate subkeys. (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Fix duplicate subkeys found in online test. (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Fix typo in 'file_groupowner_at' (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Fix issues, that caused build to fail. (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Completed CIS Chapters 4-6 Build currently failing. (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Add Controls for sle12 CIS and update references for CIS Chapter 1-3 (Nico
Truzzolino <nico.truzzolino@gmx.de>)
 - Add sle12 cis base profile (Nico Truzzolino <nico.truzzolino@gmx.de>)
 - Removed Python3 constructs from the script (Matěj Týč <matyc@redhat.com>)
 - Enable bash remediation support of audit_rules_privileged_commands rules for
SLE platforms (Yavor Georgiev <strandjata@gmail.com>)
 - Enable bash remediation support of audit_rules_dac_modification rules for SLE
platforms (Yavor Georgiev <strandjata@gmail.com>)
 - Start of the style guide (Matthew Burket <mburket@redhat.com>)
 - Resolve conflict (Yavor Georgiev <strandjata@gmail.com>)
 - Add  configure_opensc_card_drivers, force_opensc_card_drivers and
install_smartcard_packages rules to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add SLE15 support for configure_opensc_card_drivers and
force_opensc_card_drivers rules (Yavor Georgiev <strandjata@gmail.com>)
 - OCP4: Update OpenShift CIS Benchmark version (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/PCI-DSS: Set most states to pending and use sub-control structure (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add bash remediation for sle15 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix test scenarios which should remove libselinux package (Matus Marhefka
<mmarhefk@redhat.com>)
 - Update docs/manual/developer/03_creating_content.md (Juan Osorio Robles
<jaosorior@gmail.com>)
 - OCP4: Mark all PCI-DSS section 9 as `not applicable` (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Come up with a more exhaustive error message (Matěj Týč
<matyc@redhat.com>)
 - Add audit_rules_networkconfig_modification rule to SLE15 PCI-DSS profile
(Yavor Georgiev <strandjata@gmail.com>)
 - Add audit_rules_session_events rule to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add audit_rules_media_export rule to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add audit_rules_mac_modification rule to SLE15 PCI-DSS profile (Yavor
Georgiev <strandjata@gmail.com>)
 - Fix syntax error in ansible rule (Yavor Georgiev <strandjata@gmail.com>)
 - Add audit_rules_immutable rule to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add audit-audispd-plugins_installed rule to SLE15 PCI-DSS profile (Yavor
Georgiev <strandjata@gmail.com>)
 - Add grub2_bootloader_argument rule to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Move the templated sshd OVAL check to a macro (Matej Tyc <matyc@redhat.com>)
 - controls: Don't default to `automated: yes` (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - controls: Replace `automated: partial` for `status: partial` (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - controls: Replace `automated: yes` instances for `status: automated` (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - controls: Implement status parsing and replace `automated` key (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Change the offline firewalld remediation (Matej Tyc <matyc@redhat.com>)
 - Add an offline env bash test (Matej Tyc <matyc@redhat.com>)
 - Update incorrect_max_pass_age.fail.sh (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Update correct_max_pas_age.pass.sh (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Update shared.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Add ol8 prodtype to install_smartcard_packages (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Fix typo in accounts_authorized_local_users (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - OL7 DISA STIG v2r4 update (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Update rsyslog_cron_logging remediation (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update accounts_users_home_files_ownership (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - SLES-15-010060 corrections (rchikov <rumen.chikov@suse.com>)
 - Converted function and its calls to jinja macro (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fix wrong expected test scenario results (Jan Černý <jcerny@redhat.com>)
 - Converted function syntax and calls to macro; deleted old function (Jiri
Odehnal <jodehnal@redhat.com>)
 - Convert function syntax to macro (Jiri Odehnal <jodehnal@redhat.com>)
 - Removed unnecessary indentation of rules; added better macro description
(Jiri Odehnal <jodehnal@redhat.com>)
 - Added macro error raise and fixed formatting (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add audit_rules_dac_modification_umount specific rule only for 32bit arch
(Yavor Georgiev <strandjata@gmail.com>)
 - Added test cases related to files permissions and ownership (Marcus Burghardt
<maburgha@redhat.com>)
 - Add docs on status proposal for controls structure (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Fix a failing test scenarios (Jan Černý <jcerny@redhat.com>)
 - OL8 was prevent build all from working (Matthew Burket <mburket@redhat.com>)
 - Automatically sorted prodtypes (Matthew Burket <mburket@redhat.com>)
 - Add sort_prodtypes to fix_rules (Matthew Burket <mburket@redhat.com>)
 - Edited documentation to reflect the deletion of die.sh script (Jiri Odehnal
<jodehnal@redhat.com>)
 - Bug 1942281 - Set postfix rules to notapplicable when package is not
installed (Marcus Burghardt <maburgha@redhat.com>)
 - Removed unused die.sh function (Jiri Odehnal <jodehnal@redhat.com>)
 - Converted create_audit_remediation_unsuccessful_file_modification_detailed
and its calls to a jinja macro; removed the old function (Jiri Odehnal
<jodehnal@redhat.com>)
 - Allow HID USB in the ISM profile (Matej Tyc <matyc@redhat.com>)
 - removed declare -a (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed array initialization (Jiri Odehnal <jodehnal@redhat.com>)
 - Removed old function; changed semantics to jinja; changed function calls to
macro invocations (Jiri Odehnal <jodehnal@redhat.com>)
 - Converted function syntax to macro (Jiri Odehnal <jodehnal@redhat.com>)
 - Added quoting to bash variable (Jiri Odehnal <jodehnal@redhat.com>)
 - Update shared.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Modified logic to remove exit; added documentation of arguments (Jiri Odehnal
<jodehnal@redhat.com>)
 - Added missing documentation (Matej Tyc <matyc@redhat.com>)
 - Remove STIG id RHEL-07-010090 from package_screen_installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable auditd_name_format in RHEL7 and select it in STIG. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable auditd_overflow_action in RHEL7 and select it in STIG. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable accounts_authorized_local_users in RHEL7 and select it in STIG.
(Gabriel Becker <ggasparb@redhat.com>)
 - Enable sudo_require_reauthentication in RHEL7 and select it in STIG. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix up for the fix_rules.py script. (Gabriel Becker <ggasparb@redhat.com>)
 - Changed function calls to macro invocations; deleted the function file (Jiri
Odehnal <jodehnal@redhat.com>)
 - Converted the semantics to a jinja macro (Jiri Odehnal <jodehnal@redhat.com>)
 - Began converting ensure_pam_module_options to a jinja macro (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fixed another if condition (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed if condition again (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed if condition (Jiri Odehnal <jodehnal@redhat.com>)
 - Converted if-else to a jinja condition; fixed formatting (Jiri Odehnal
<jodehnal@redhat.com>)
 - Converted function calls to macro invocations; removed the old function;
fixed comment in macro file (Jiri Odehnal <jodehnal@redhat.com>)
 - Changed macro logic to remove returns (Jiri Odehnal <jodehnal@redhat.com>)
 - Converted fix_audit_syscall_rule syntax to a jinja macro (Jiri Odehnal
<jodehnal@redhat.com>)
 - Document and make grub config paths explicit (Watson Sato <wsato@redhat.com>)
 - linux_os/guide/system/accounts/accounts-
pam/locking_out_password_attempts/accounts_password_pam_unix_remember/: handle
pwhistory.so (Arnaud Patard <apatard@hupstream.com>)
 - Fix typo in var_sshd_set_maxstartups.var. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add ensure_suse_gpgkey_installed rule to SLE15 to PCI-DSS profile (Yavor
Georgiev <strandjata@gmail.com>)
 - PCI-DSS Add more auditd rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fixed formatting; added documentation (Jiri Odehnal <jodehnal@redhat.com>)
 - PCI-DSS add audit time rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add package_aide_installed to SLE15 PCI-DSS (Yavor Georgiev
<strandjata@gmail.com>)
 - Add audit data retnetion rules to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add password hashing rules to SLE15 PCI DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Sort alphabetically references (Yavor Georgiev <strandjata@gmail.com>)
 - Add chronyd_specify_remote_server to SLE15 pci-dss (Yavor Georgiev
<strandjata@gmail.com>)
 - Add ansible remediation and enable bash for
chronyd_or_ntpd_specify_multiple_servers (Yavor Georgiev <strandjata@gmail.com>)
 - Add definition of var_multiple_time_servers for SUSE (Yavor Georgiev
<strandjata@gmail.com>)
 - Add chronyd_or_ntpd_specify_multiple_servers to SUSE SLE15 PCI-DSS profile
(Yavor Georgiev <strandjata@gmail.com>)
 - Add ensure_gpgcheck_globally_activated to SLE15 PCI-DSS profile (Yavor
Georgiev <strandjata@gmail.com>)
 - Add security_patches_up_to_date to pci dss profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Fixed formatting, changed variable names, added comments to clarify (Jiri
Odehnal <jodehnal@redhat.com>)
 - Added indent filter for nice macro expansion (Jiri Odehnal
<jodehnal@redhat.com>)
 - Fixed the rest of macro invocations (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed parameters and logic in the macros; fixed some macro invocations (Jiri
Odehnal <jodehnal@redhat.com>)
 - Converted the include library to separate macros; transformed one macro
invocation (Jiri Odehnal <jodehnal@redhat.com>)
 - Changed unnecessary sourcing to macro invocation (Jiri Odehnal
<jodehnal@redhat.com>)
 - Converted include_mount_options_functions.sh to a jinja macro (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add sssd_enable_smartcards to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Make sure sssd domain section is edited only if not commented (Yavor Georgiev
<strandjata@gmail.com>)
 - Update controls/pcidss_ocp4.yml with newer PCI-DSS version (Juan Osorio
Robles <jaosorior@gmail.com>)
 - PCI-DSS Add two more dconf rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - PCI-DSS Add dconf rules remediation (anivan-suse
<anastasija.ivanovic@suse.com>)
 - OCP4: Introduce PCI-DSS controls file (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix the OVAL path/filepath/filename terminology (Matěj Týč
<matyc@redhat.com>)
 - FedRAMP SC-17: Add Ingress CA replacement rule (Matt Rogers
<mrogers@redhat.com>)
 - OCP4: Also point out OAuth server unit conversion in the
oauth_or_oauthclient_inactivity_timeout rule (Jakub Hrozek <jhrozek@redhat.com>)
 - Add rule for disable default IPv6 interfaces (Watson Sato <wsato@redhat.com>)
 - Update rule text for disable all IPv6 interfaces (Watson Sato
<wsato@redhat.com>)
 - Improved exception message (Matěj Týč <matyc@redhat.com>)
 - Add a missing import (Matěj Týč <matyc@redhat.com>)
 - Moved CCE-related code to a separate module (Matěj Týč <matyc@redhat.com>)
 - Adapt invocation of the fix tool (Matěj Týč <matyc@redhat.com>)
 - Exposed cce adding functionality as a separate subcommand (Matěj Týč
<matyc@redhat.com>)
 - Improve script. (Matěj Týč <matyc@redhat.com>)
 - Add CCE addition support. (Matěj Týč <matyc@redhat.com>)
 - Remove package applicability from s390x_arch generated remediations. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix Libreswan (anivan-suse <anastasija.ivanovic@suse.com>)
 - Move rule names to correct spot (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix unique-cce failed test (anivan-suse <anastasija.ivanovic@suse.com>)
 - PCI-DSS Configure Rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add a new selector for var_system_crypto_policy and use it RHEL8 CIS.
(Gabriel Becker <ggasparb@redhat.com>)
 - Removed unused bash function library include_merge_files_by_lines.sh (Jiri
Odehnal <jodehnal@redhat.com>)
 - Increase partition size for CIS kickstarts (Matej Tyc <matyc@redhat.com>)
 - Run the linter on rule playbooks from all profile (Watson Sato
<wsato@redhat.com>)
 - Don't check all product's playbooks for every product (Watson Sato
<wsato@redhat.com>)
 - Add tests to accounts_passwords_pam_faildelay_delay (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add bash script for accounts_passwords_pam_faildelay_delay (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make description of accounts_passwords_pam_faildelay_delay generic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add logic to config file path in accounts_password_pam_unix_remember (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add Ubuntu specific bash and oval to accounts_password_pam_unix_remember
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - OCP4: Kickstart PCI-DSS profile (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Make possible to use pip3 installed modules when packaging (Marcus Burghardt
<maburgha@redhat.com>)
 - disable_ctrlaltdel_reboot: disable service before masking during test
scenario setup. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix RHEL7 documentation link. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix tests for aide_periodic_cron_checking (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Changed fix script to adequate for Ubuntu style (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Enhanced aide_periodic_cron_checking rule (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Import new OVAL for aide_periodic_cron_checking (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove exit 0 from aide_periodic_cron_checking bash (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update AIDE checking rules for Ubuntu (Alexander Scheel
<alex.scheel@canonical.com>)
 - Mark agent_mfetpd_running as machine only. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add aide_conf_path to aide_check_audit_tools bash (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu platform to aide_check_audit_tools bash remediation (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Use aide_conf_path in aide_check_audit_tools oval (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Use aide_conf_path in aide_check_audit_tools rule (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Specify aide_conf_path for ubuntu2004 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add constant aide_conf_path and define DEFAULT_AIDE_CONF_PATH (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Fix aide_string for ubuntu (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix remaining audit rule files permissions. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add CCEs (Matěj Týč <matyc@redhat.com>)
 - Update existing rules for RHEL-07-010492 and RHEL-07-010482 (Matthew Burket
<mburket@redhat.com>)
 - Add RHEL9 CIS kickstarts (Matej Tyc <matyc@redhat.com>)
 - Add missing unit test playbook (Watson Sato <wsato@redhat.com>)
 - Fix cce issue (anivan-suse <anastasija.ivanovic@suse.com>)
 - Update the verbiage of rhel profiles (Watson Sato <wsato@redhat.com>)
 - Add PCI-DSS file rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Revert "Fix combined mode execution in SSGTS" (Watson Yuuma Sato
<wsato@redhat.com>)
 - OCP4: Add rule that checks for audit error alerts (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix CCE id (Yavor Georgiev <strandjata@gmail.com>)
 - Add ansible remdiation (Yavor Georgiev <strandjata@gmail.com>)
 - Add SUSE support for bash remediation (Yavor Georgiev <strandjata@gmail.com>)
 - Add service_chronyd_or_ntpd_enabled rule to SUSE SLE15 PCI-DSS profile (Yavor
Georgiev <strandjata@gmail.com>)
 - Add package_strongswan_installed rule to SUSE SLE15 PCI-DSS profile (Yavor
Georgiev <strandjata@gmail.com>)
 - Add rule for SLES-12-030365 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add rsyslog_files_groupownership and rsyslog_files_permissions to SLE15 PCI-
DSS profile (Yavor Georgiev <strandjata@gmail.com>)
 - Add support for the rsyslog_files_permissions bash remediation for SUSE
platform (Yavor Georgiev <strandjata@gmail.com>)
 - Add multi_platform_sle relevance for rsyslog_files_groupownership and
rsyslog_files_permissions tests (Yavor Georgiev <strandjata@gmail.com>)
 - Improve regex rules to handle more complicated rules (Yavor Georgiev
<strandjata@gmail.com>)
 - Add ensure_rsyslog_log_file_configuration rule to SUSE SLE15 PCI DSS profile
(Yavor Georgiev <strandjata@gmail.com>)
 - Add PCI-DSS file Rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Added rule for RHEL-08-010400 (Matthew Burket <mburket@redhat.com>)
 - Add new rule for RHEL-07-030330 and RHEL-08-030730 (Matthew Burket
<mburket@redhat.com>)
 - Base the RHEL9 CIS preview on RHEL8 (Matěj Týč <matyc@redhat.com>)
 - Fix Ansible linter issue (Watson Sato <wsato@redhat.com>)
 - Added back sourcing for bash_instantiate_variables, which uses populate
function from remediation functions directory (Jiri Odehnal
<jodehnal@redhat.com>)
 - Add a new rules RHEL-08-010001 and RHEL-07-020019 (Matthew Burket
<mburket@redhat.com>)
 - Fix typos in task titles (Watson Sato <wsato@redhat.com>)
 - Remove trailing space from perm field (Watson Sato <wsato@redhat.com>)
 - Added else branch to CCE check (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed empty cce arg handling (Jiri Odehnal <jodehnal@redhat.com>)
 - Removed unnecessary if-else branch; hardcoded case insensitive options as
they never changed (Jiri Odehnal <jodehnal@redhat.com>)
 - Create audit rules without permissions for others (Watson Sato
<wsato@redhat.com>)
 - PCI-DSS file rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix the sshd directory config check (Matěj Týč <matyc@redhat.com>)
 - Come up with a better basename (Matěj Týč <matyc@redhat.com>)
 - OCP4: Don't use variables for kubelet threshold checks (Jakub Hrozek
<jhrozek@redhat.com>)
 - Update libuserconf rule (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add PCI-DSS rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Reset the tracking of syscalls found per file (Watson Sato
<wsato@redhat.com>)
 - Fix RHEL7 documentation links. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix typo in the CIS kickstart (Gabriel Becker <ggasparb@redhat.com>)
 - Fix typo in audit task block title (Watson Sato <wsato@redhat.com>)
 - Improve task titles of audit macros and templates (Watson Sato
<wsato@redhat.com>)
 - Add readthedocs integration badge. (Gabriel Becker <ggasparb@redhat.com>)
 - Check all relevant syscalls in Ansible macro (Watson Sato <wsato@redhat.com>)
 - Fix typo in Ansible remediarion for unsuccessful_file_modification (Watson
Sato <wsato@redhat.com>)
 - Fix pep8 issues (Alexander Scheel <alex.scheel@canonical.com>)
 - Show aggregate stats in profile_tool.py output (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update build_renumber to find nested checks (Alexander Scheel
<alex.scheel@canonical.com>)
 - Generated complex-checks in shorthand (Alexander Scheel
<alex.scheel@canonical.com>)
 - Generate templated SCE content from build_sce.py (Alexander Scheel
<alex.scheel@canonical.com>)
 - Refactor SCE shorthand to occur before OVAL (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add templated SCE content to SCE metadata (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add SCE (Bash) as supported template language (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix typo in check title (Watson Yuuma Sato <wsato@redhat.com>)
 - Python style fixes (Watson Sato <wsato@redhat.com>)
 - Update directory_access_var_log_audit to use Ansible macro (Watson Sato
<wsato@redhat.com>)
 - Include overview to the project with useful links (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update Ansible audit_rules_kernel_module_loading_* to use macros (Watson Sato
<wsato@redhat.com>)
 - Add additional communication channels (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove extra comment about max 3 nested subdirs (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update documentation to reflect new product layout (Alexander Scheel
<alex.scheel@canonical.com>)
 - Mention help text (Alexander Scheel <alex.scheel@canonical.com>)
 - Move template audit_rules_file_deletion_events to Ansible macro (Watson Sato
<wsato@redhat.com>)
 - Move template audit_rules_privileged_commands to Ansible macro (Watson Sato
<wsato@redhat.com>)
 - Add syscall_groups to unsuccessful_file_mofication rules (Watson Sato
<wsato@redhat.com>)
 - Move template audit_rules_unsuccessfull_file_modification to Ansible macro
(Watson Sato <wsato@redhat.com>)
 - Move template audit_rules_dac_modification to Ansible macro (Watson Sato
<wsato@redhat.com>)
 - Move template audit_rules_path_syscall to Ansible macro (Watson Sato
<wsato@redhat.com>)
 - Improve audit syscall rule macro to group syscalls (Watson Sato
<wsato@redhat.com>)
 - Remove rhel8 from smartcard_configure_cert_checking (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Deleted set_faillock_option_to_value_in_pam_file function as it is not used
anywhere (Jiri Odehnal <jodehnal@redhat.com>)
 - Remove kubelet_disable_hostname_override rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Put back sourcing of /usr/share/scap-security-guide/remediation_functions in
two files (Jiri Odehnal <jodehnal@redhat.com>)
 - Quote reference to avoid it being interpreted as an integer (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Add missing CIS references for RHEL 8 rules (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Fix rules with missing CCEs for RHEL8 (Alex Haydock <alex@alexhaydock.co.uk>)
 - Fixed nested braces (Jiri Odehnal <jodehnal@redhat.com>)
 - OCP4: Wait longer for the File Integrity Operator to be available (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Update linux_os/guide/system/network/network-
firewalld/ruleset_modifications/configure_firewalld_ports/bash/shared.sh (j-ode
<jodehnal@redhat.com>)
 - SLES-12-010599 - remove rule from the STIG (rchikov <rumen.chikov@suse.com>)
 - Added tests with non-empty files (Jiri Odehnal <jodehnal@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-restrictions/password_expirati
on/accounts_password_set_min_life_existing/tests/correct_min_pas_age.pass.sh
(rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Fix combined mode execution in SSGTS (Alexander Scheel
<alex.scheel@canonical.com>)
 - Disable kubelet_disable_hostname_override OVAL and update verbiage (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Remove a spurious whitespace trim (Matej Tyc <matyc@redhat.com>)
 - Added tests for bash_replace_or_append that run under bash-unit-tests (Jiri
Odehnal <jodehnal@redhat.com>)
 - Fixed another variable in bash_append_or_replace jinja macro missed in commit
b16e15e (Jiri Odehnal <jodehnal@redhat.com>)
 - Fixed variable in bash_append_or_replace jinja macro missed in commit
57b4cbb (Jiri Odehnal <jodehnal@redhat.com>)
 - Add ISM Official kickstarts (Matej Tyc <matyc@redhat.com>)
 - linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/acc
ounts_password_pam_unix_remember/oval/shared.xml: Fix for SLE15 (Arnaud Patard
<apatard@hupstream.com>)
 - products/sle15/profiles/stig.profile: Update according to U_SLES_15_STIG_V1R3
Manual (Arnaud Patard <apatard@hupstream.com>)
 - Removed unnecessary sourcing of the /usr/share/scap-security-
guide/remediation_functions directory (Jiri Odehnal <jodehnal@redhat.com>)
 - Style improvements (Matej Tyc <matyc@redhat.com>)
 - Reflect fusion of rhel9 packages (Matej Tyc <matyc@redhat.com>)
 - Add the sshd directory configuration rule (Matej Tyc <matyc@redhat.com>)
 - Update the grub config path (Matej Tyc <matyc@redhat.com>)
 - extended tests to test for multiple overridden variables (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix overriding of variables (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove zipl CPE platform (Watson Sato <wsato@redhat.com>)
 - Add cpe platform for s390x arch (Watson Sato <wsato@redhat.com>)
 - get rid of one ordereddict (Vojtech Polasek <vpolasek@redhat.com>)
 - automate 6.2.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - partially cover 5.5.1.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule for 3.5.1.5 - firewalld default zone (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove automated: yes for 1.1.6, rule is missing (Vojtech Polasek
<vpolasek@redhat.com>)
 - add kickstarts for rhel8 CIS profiles (Vojtech Polasek <vpolasek@redhat.com>)
 - Mention Ansible static yamlpath test in docs (Watson Sato <wsato@redhat.com>)
 - Unit tests the function for file removed and added (Watson Sato
<wsato@redhat.com>)
 - Add test for ansible files removed and readded (Watson Sato
<wsato@redhat.com>)
 - add rhel7 kickstarts for cis (Vojtech Polasek <vpolasek@redhat.com>)
 - Add ensure_logrotate_activated rule to SLES15 PCI-DSS (Yavor Georgiev
<strandjata@gmail.com>)
 - Reflect availability of rear on s390x in RHEL8.5 (Matej Tyc
<matyc@redhat.com>)
 - make overriding of variables hardcoded when requesting controls of a certain
level (Vojtech Polasek <vpolasek@redhat.com>)
 - update tests to check that overriding of variables works (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fixed quoting issues 3 (Jiri Odehnal <jodehnal@redhat.com>)
 - Fix remediation platforms of RHEL9 rules (Matej Tyc <matyc@redhat.com>)
 - Enable more RHEL9 content (Matej Tyc <matyc@redhat.com>)
 - Fixed quoting issues 2 (Jiri Odehnal <jodehnal@redhat.com>)
 - Revert "Fixed quoting issues" - accidentally removed name of macros (Jiri
Odehnal <jodehnal@redhat.com>)
 - Fixed quoting issues (Jiri Odehnal <jodehnal@redhat.com>)
 - Converted the rest of function calls to macros (Jiri Odehnal
<jodehnal@redhat.com>)
 - Removed replace_or_append.sh; Converted some function calls to macros (Jiri
Odehnal <jodehnal@redhat.com>)
 - Rule SLES-15-030310 - a typo correction (rchikov <rumen.chikov@suse.com>)
 - Converted replace_or_append.sh to a jinja macro (Jiri Odehnal
<jodehnal@redhat.com>)
 - fix a typo (Vojtech Polasek <vpolasek@redhat.com>)
 - Control to disable IPv6 should not be automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Correct value of SSH MaxSessions based on upstream Draft Benchmark 1.1.0
(Alex Haydock <alex@alexhaydock.co.uk>)
 - Use only 'related_rules' and not 'rules' when a control is not automated
(Alex Haydock <alex@alexhaydock.co.uk>)
 - We cannot use audit_rules_kernel_module_loading because it also checks for
finit_module syscall (Alex Haydock <alex@alexhaydock.co.uk>)
 - Rules exist for RHEL 8 CIS 6.2.20 but without OVAL checks or remediations
(Alex Haydock <alex@alexhaydock.co.uk>)
 - Rules exist for RHEL 8 CIS 6.2.7 and 6.2.8 but without OVAL checks or
remediations (Alex Haydock <alex@alexhaydock.co.uk>)
 - Rules exist which satisfy RHEL 8 CIS 6.2.3 (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.7 can be partially satisfied by use_pam_wheel_for_su (Alex
Haydock <alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.5.5 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.5.3 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.5.2 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Set SSH idle timeout to 15 minutes (Alex Haydock <alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.5.1.4 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.5.1.3 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.5.1.2 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.5.1.1 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.4.4 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Import logic for the "Ensure password reuse is limited" rule from RHEL 7
(Alex Haydock <alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 5.4.1 is only partially automated (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Remove misaligned rules from RHEL 8 CIS 5.4.2 (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Fix rule ID for 5.3.3 (Alex Haydock <alex@alexhaydock.co.uk>)
 - Update SSH MaxSessions to match the value CIS audits for vs the one in the
control title (Alex Haydock <alex@alexhaydock.co.uk>)
 - Add explicit variable definition for SSH MaxStartups rule in RHEL 8 CIS
profile (Alex Haydock <alex@alexhaydock.co.uk>)
 - Disable SSH warning banner rule in RHEL 8 CIS (uses wrong path) (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Set SSH loglevel to VERBOSE in RHEL 8 CIS controls file (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Align RHEL 8 Chrony configuration rule more closely with CIS benchmark (Alex
Haydock <alex@alexhaydock.co.uk>)
 - Ensure var_sshd_set_keepalive variable gets used properly (Alex Haydock
<alex@alexhaydock.co.uk>)
 - 5.2.4 is only partially automated (Alex Haydock <alex@alexhaydock.co.uk>)
 - Disable 4.2.1.5 and 5.2.3 as they do not align perfectly with the benchmark
(Alex Haydock <alex@alexhaydock.co.uk>)
 - Disable the rsyslog_files_permissions rule as it does not align with the
benchmark (Alex Haydock <alex@alexhaydock.co.uk>)
 - Remove opinionated rule from CIS 4.1.14 as it does not align with the
benchmark (Alex Haydock <alex@alexhaydock.co.uk>)
 - Disable automation for control 4.1.13 as it does not align exactly with the
benchmark (Alex Haydock <alex@alexhaydock.co.uk>)
 - Use "partially" rather than "partial" for automation key (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Remove opinionated rule from CIS 4.1.10 as it does not align with the
benchmark (Alex Haydock <alex@alexhaydock.co.uk>)
 - RHEL CIS control 4.1.7 is missing a rule to achieve full automation (Alex
Haydock <alex@alexhaydock.co.uk>)
 - The audit_rules_time_settimeofday rule does not directly align with CIS (Alex
Haydock <alex@alexhaydock.co.uk>)
 - Explicitly set the number of auditd logs to keep to 6 (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Explicitly set var_auditd_max_log_file_action (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Update controls/cis_rhel8.yml (Alex Haydock <alex@alexhaydock.co.uk>)
 - Add EFI GRUB rules to RHEL 8 CIS control 1.5.1 (Alex Haydock
<alex@alexhaydock.co.uk>)
 - RHEL 8 CIS 1.5.1 is only partially automated currently (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Update controls/cis_rhel8.yml (Alex Haydock <alex@alexhaydock.co.uk>)
 - Update RHEL 8 CIS Section 3 rules (Alex Haydock <alex@alexhaydock.co.uk>)
 - Update RHEL 8 CIS Section 2 rules (Alex Haydock <alex@alexhaydock.co.uk>)
 - Allow DEFAULT crypto policy for RHEL 8 CIS (conditional on merge of #7226)
(Alex Haydock <alex@alexhaydock.co.uk>)
 - Updates to address comments on RHEL 8 CIS PR (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Tweak RHEL8 CIS control file to satisfy yamllint (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Add RHEL 8 Section 6 to CIS control file (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Add RHEL 8 Section 5 to CIS control file (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Add RHEL 8 Sections 3 & 4 to CIS control file (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Add CIS control file for RHEL 8 (Alex Haydock <alex@alexhaydock.co.uk>)
 - Split RHEL 8 CIS profile into modular files per-benchmark (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Clean Up pci-dss rules (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add cosmetic improvement (anivan-suse <anastasija.ivanovic@suse.com>)
 - Remove unneeded multi_platform_sle (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add PCI DSS Rules for SLE15 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Remove inexistent and/or duplicated STIG references. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove RHEL-07-030730 from rule as it doesn't exist anymore in the STIG.
(Gabriel Becker <ggasparb@redhat.com>)
 - Rule SLES-12-010270 extended with ansible, bash and tests (rchikov
<rumen.chikov@suse.com>)
 - Remove RHEL-08-040162 from STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Small corrections according to proposed minor changes (rchikov
<rumen.chikov@suse.com>)
 - Add new rule for RHEL-08-030720 (Matthew Burket <mburket@redhat.com>)
 - Allow set_config_file bash macro and lineinfile to set a custom sed path
separator (Matthew Burket <mburket@redhat.com>)
 - Rule SLES-12-010290 - added ansible,bash and tests (rchikov
<rumen.chikov@suse.com>)
 - Change id to not conflict with smartcard_auth (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Create /etc/audit/rules.d/ folder in audit_time_rules tests (Milan Lysonek
<mlysonek@redhat.com>)
 - Add pam platform to accounts_password_pam_dictcheck (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add stigid@ubuntu2004 to accounts_password_pam_dictcheck (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add srg reference to accounts_password_pam_dictcheck (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to prodtype in accounts_password_pam_dictcheck (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Add accounts_password_pam_dictcheck to UBTU-20-010056 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Adjust smartcard_configure_cert_checking OVAL for other distros (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Adjust vlock_installed for Ubuntu (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add missing rules to UBTU-20-010057 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add accounts_password_pam_enforcing rule (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add package_pam_pwquality_installed rule (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add SRG for accounts_password_pam_dictcheck (Milan Lysonek
<mlysonek@redhat.com>)
 - Add SRG for sssd_enable_certmap (Milan Lysonek <mlysonek@redhat.com>)
 - Fix pci-dss.profiles (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add rpm rule (anivan-suse <anastasija.ivanovic@suse.com>)
 - pcidss for accounts_password rules (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Add missing ansible remediation metadata (Milan Lysonek
<mlysonek@redhat.com>)
 - Update RHEL 8 CIS references to match benchmark 1.0.1 (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Add rhel7 specific test kickstart (Milan Lysonek <mlysonek@redhat.com>)
 - Select sysctl_net_core_bpf_jit_harden for RHEL-08-040286 (Matthew Burket
<mburket@redhat.com>)
 - Add rule for RHEL-08-020320 (Matthew Burket <mburket@redhat.com>)
 - Update CCEs and identifiers on rules that make up RHEL 8 CIS 4.1.15 (Alex
Haydock <alex@alexhaydock.co.uk>)
 - Update products/sle12/profiles/stig.profile (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Update linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disa
ble_unattended_automatic_login/rule.yml (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Rule SLES-12-010890 added bash (rchikov <rumen.chikov@suse.com>)
 - Rule SLES-12-020130 added ansible, bash and tests (rchikov
<rumen.chikov@suse.com>)
 - Update couple of references for RHEL8 STIG (Matthew Burket
<mburket@redhat.com>)
 - Split RHEL-08-040280 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-040250 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-040240 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-040210 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010151 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010130 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010050 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-020330 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-040135 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010150 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010141 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010200 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010471 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-010521 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-030180 (Matthew Burket <mburket@redhat.com>)
 - Update remediarions for time syscalls rules (Watson Sato <wsato@redhat.com>)
 - make overriding of variables optional (Vojtech Polasek <vpolasek@redhat.com>)
 - Corrections in stig.profile and in ansible (rchikov <rumen.chikov@suse.com>)
 - Replace mount/umount command related rules to syscall rules in sle15 stig
profile (Yavor Georgiev <strandjata@gmail.com>)
 - Move reference of stigid SLES-15-030360 and related ids from
audit_rules_privileged_commands_umount to audit_rules_dac_modification_umount
rule (Yavor Georgiev <strandjata@gmail.com>)
 - Move stig reference id SLES-15-030350 and related ids from
audit_rules_privileged_commands_mount to audit_rules_media_export rule (Yavor
Georgiev <strandjata@gmail.com>)
 - Move suid_privileged_function to new fix_audit_sycall_rule (Watson Sato
<wsato@redhat.com>)
 - Enhance fix_audit_syscall_rule to handle rules without auid (Watson Sato
<wsato@redhat.com>)
 - Enhance fix_audit_syscall_rule to handle multiple syscalls (Watson Sato
<wsato@redhat.com>)
 - Handle cases where the rule has no syscall (Watson Sato <wsato@redhat.com>)
 - Print filenames in sed command (Watson Sato <wsato@redhat.com>)
 - Set syscall grouping for create, open and truncate rules (Watson Sato
<wsato@redhat.com>)
 - Set syscall groupings for remove and delete rules (Watson Sato
<wsato@redhat.com>)
 - Set syscall groupings for set/remove xattr rules (Watson Sato
<wsato@redhat.com>)
 - Set syscall grouping for chown rules (Watson Sato <wsato@redhat.com>)
 - Set syscall grouping for chmod rules (Watson Sato <wsato@redhat.com>)
 - Change fix_audit_syscall_rule to group syscalls (Watson Sato
<wsato@redhat.com>)
 - Split RHEL-08-040140 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-040100 (Matthew Burket <mburket@redhat.com>)
 - Split the rule for RHEL-08-020040 (Matthew Burket <mburket@redhat.com>)
 - Split RHEL-08-040100 into two rules (Matthew Burket <mburket@redhat.com>)
 - Add file_groupowner_grub2_cfg to SLES15 PCI-DSS (Yavor Georgiev
<strandjata@gmail.com>)
 - Add file_owner_grub2_cfg to SLES15 PCI-DSS (Yavor Georgiev
<strandjata@gmail.com>)
 - Add gid_passwd_group_same to SLES15 PCI-DSS (Yavor Georgiev
<strandjata@gmail.com>)
 - utils/add_platform_rule.py: fix selfLink discovery (Matt Rogers
<mrogers@redhat.com>)
 - Add accounts_password_all_shadowed to SLES15 PCI-DSS (Yavor Georgiev
<strandjata@gmail.com>)
 - Add account_unique_name to SLES15 PCI-DSS (Yavor Georgiev
<strandjata@gmail.com>)
 - Update STIG mapping table to reflect statistics of coverage. (Gabriel Becker
<ggasparb@redhat.com>)
 - update version of rhel7 stig_gui profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - add tests for defining of variables (Vojtech Polasek <vpolasek@redhat.com>)
 - rework handling of variables when returning all controls of a level (Vojtech
Polasek <vpolasek@redhat.com>)
 - Fix check and remediations of auditd_overflow_action. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable check_root_user for RHEL9 in audit rules dac. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove SUSE keyword verbiage from rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update SRG mapping of chronyd_or_ntpd_set_maxpoll. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update audit rules description with regards to -F perm=x parameter. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix RHEL8 STIG id of audit_rules_privileged_commands_passwd. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL8 STIG profiles stability test data. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add two new rules to cover STIG req based on existing rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add new STIG audit rule audit_rules_privileged_commands_unix_update. (Gabriel
Becker <ggasparb@redhat.com>)
 - Define template data using product qualifiers instead of macros. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix RHEL8 STIG id references in audit rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove rule that is selected twice in RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update audit_rules_dac_modification rules description. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update audit_rules_dac_modification ansible remediation with auid=0 fix.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix audit bash remediation to remove the auid!=unset when using auid=0.
(Gabriel Becker <ggasparb@redhat.com>)
 - Simplify perm=x code around audit_rules_privileged_commands template.
(Gabriel Becker <ggasparb@redhat.com>)
 - Extend audit_rules_dac_modification to support auid=0 checking. (Gabriel
Becker <ggasparb@redhat.com>)
 - Use audit template in kmod privileged command. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove remediation that copies entire ospp audit rules file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update audit template to include perm=x for binaries. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable audit rules in RHEL8 STIG. (Gabriel Becker <ggasparb@redhat.com>)
 - Move a SLES-12-010380 requirement from one rule to another (rchikov
<rumen.chikov@suse.com>)
 - use ordered sets emulated by ordereddict (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add comments on why continue-on-error option is used. (Gabriel Becker
<ggasparb@redhat.com>)
 - Bug 1857179 - Improved ansible fix for banner files. Replace files only when
necessary. (Marcus Burghardt <marcus@mbsec.com.br>)
 - Fixup SSGTS GH integration. (Gabriel Becker <ggasparb@redhat.com>)
 - Assign RHEL-08-020240 to account_unique_id and add test scenarios. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix typo in tests/ssg_test_suite/combined.py (Watson Yuuma Sato
<wsato@redhat.com>)
 - Update RHEL8 STIG files to V1R3. (Gabriel Becker <ggasparb@redhat.com>)
 - Add description of shorthand per @jan-cerny's suggestion (Alexander Scheel
<alex.scheel@canonical.com>)
 - Don't remediate when it is inappropriate (Matej Tyc <matyc@redhat.com>)
 - Add service_pcscd_enabled to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - add details about gpgkey package for rhel9 (Vojtech Polasek
<vpolasek@redhat.com>)
 - Switch log message to warning when there is nothing to test. (Gabriel Becker
<ggasparb@redhat.com>)
 - Apply suggestions from @jan-cerny's code review (Alexander Scheel
<alex.scheel@canonical.com>)
 - Apply suggestions from @jan-cerny's code review (Alexander Scheel
<alex.scheel@canonical.com>)
 - Make FIPS mode check idempotent (justchris1 <justchris1@justchris1.email>)
 - Fix a python2 issue with STIG overlay generation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add rule for RHEL-08-020090 (Matthew Burket <mburket@redhat.com>)
 - bump version to 0.1.58 (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove Travis CI Badge from README (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix pep8 issues (Alexander Scheel <alex.scheel@canonical.com>)
 - Add new manual section on the build system (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add inline documentation to ssg/build_sce.py (Alexander Scheel
<alex.scheel@canonical.com>)
 - Document build_sce.py and metadata.json (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add commentary to ssg/SSGCommon.cmake (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update build scripts to point to CaC not SSG (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update XSLT to point to CaC not SSG (Alexander Scheel
<alex.scheel@canonical.com>)
 - Removed devault values that are variables from Jinja (Matěj Týč
<matyc@redhat.com>)
 - Improved error reporting related to macros. (Matěj Týč <matyc@redhat.com>)
 - Introduced the sshd_use_directory_configuration rule. (Matěj Týč
<matyc@redhat.com>)
 - Improved the lineinfile template. (Matěj Týč <matyc@redhat.com>)
 - Updated checks and remediations of the sshd template. (Matěj Týč
<matyc@redhat.com>)
 - Update docs & README to point to CaC, not SSG (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix repo name in CMakeLists.txt (Alexander Scheel
<alex.scheel@canonical.com>)
 - Terminate the combined mode with one command (Watson Sato <wsato@redhat.com>)
 - Add multi profile support to combined mode (Watson Sato <wsato@redhat.com>)
 - Add documentation on SCE content (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Gitter badge (The Gitter Badger <badger@gitter.im>)
 - Use --rule CTF option in the SSGTS GH Actions integration. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix wrongly referenced python variable. (Gabriel Becker
<ggasparb@redhat.com>)
 - Ensure test scenarios and scripts are excutable (Watson Sato
<wsato@redhat.com>)
 - Add an option to not run duplicate templated tests (Alexander Scheel
<alex.scheel@canonical.com>)
 - Use process_file_with_macros rather than process_file (Alexander Scheel
<alex.scheel@canonical.com>)
 - Template tests with matching prodtype (Alexander Scheel
<alex.scheel@canonical.com>)
 - Correctly handle generation of templated tests (Alexander Scheel
<alex.scheel@canonical.com>)
 - Document new JINJA/Template testing scenarios (Alexander Scheel
<alex.scheel@canonical.com>)
 - Only template rules with variables (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove unnecessary _rel_abs_path (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove unnecessary assertion (Alexander Scheel <alex.scheel@canonical.com>)
 - Refactor template_rule_tests into write_* helpers (Alexander Scheel
<alex.scheel@canonical.com>)
 - Split template_tests into template_rule_tests (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix pep8 issues (Alexander Scheel <alex.scheel@canonical.com>)
 - Make sure we read all test contents with Jinja (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update rule execution to support templated tests (Alexander Scheel
<alex.scheel@canonical.com>)
 - Teach iterate_over_rules about templated tests (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add templated tests into templated directory (Alexander Scheel
<alex.scheel@canonical.com>)
 - Support templating test content (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove incorrect tests for package installation (Alexander Scheel
<alex.scheel@canonical.com>)
 - Refactor ssg/templates.py generation (SCE) (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for package_installed template (Alexander Scheel
<alex.scheel@canonical.com>)
 - Try and make <check-import> and <check-export> self-closing (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove extraneous CMake deps between targets (Alexander Scheel
<alex.scheel@canonical.com>)
 - Allow conditional building of SCE content (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix pep8speaks issues (Alexander Scheel <alex.scheel@canonical.com>)
 - Add SCE content to installation (Alexander Scheel
<alex.scheel@canonical.com>)
 - Drop ##ssg## prefix on metadata (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix prodtype checking; simplify for templating (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add accounts_users_own_home_directories to standard profile (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add accounts_user_own_home_directories as SCE example (Alexander Scheel
<alex.scheel@canonical.com>)
 - Teach profile_tool about SCEs (Alexander Scheel <alex.scheel@canonical.com>)
 - Update verify_references to support SCE checks (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add unused SCE constant in case XSLT is used in the future (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add generated SCE to shorthand (Alexander Scheel <alex.scheel@canonical.com>)
 - Add build script to macro-ize and export SCEs (Alexander Scheel
<alex.scheel@canonical.com>)
 - Find external SCE content for rules (Alexander Scheel
<alex.scheel@canonical.com>)
 - Sort service_auditd_enabled identifiers (Alexander Scheel
<alex.scheel@canonical.com>)
 - Enforce cross-product uniqueness of rule ids (Alexander Scheel
<alex.scheel@canonical.com>)
 - Allow building MacOS products (Alexander Scheel <alex.scheel@canonical.com>)
 - Rename service_auditd_enabled -> service_com_apple_auditd_enabled (Alexander
Scheel <alex.scheel@canonical.com>)
 - Add some login related rules to SLE15 PCI-DSS profile -
account_disable_post_pw_expiration - accounts_maximum_age_login_defs -
no_empty_passwords - sshd_set_idle_timeout - sshd_set_keepalive_0 Add also some
variables related to those rules (Yavor Georgiev <strandjata@gmail.com>)
 - Add some audit rules to SLE15 PCI-DSS profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add display_login_attempts to PCI-DSS SLE15 profile (Yavor Georgiev
<strandjata@gmail.com>)
 - Add accounts_passwords_pam_faillock_deny to PCI-DSS SLE15 profile (Yavor
Georgiev <strandjata@gmail.com>)
 - Add accounts_password_pam_unix_remember rule to SLE15 PCI-DSS profile (Yavor
Georgiev <strandjata@gmail.com>)
 - Add accounts_passwords_pam_faillock_unlock_time rule to SLE15 PCI-DSS profile
(Yavor Georgiev <strandjata@gmail.com>)
 - Add rule to PCI DSS profile for SUSE SLES15 product (Yavor Georgiev
<strandjata@gmail.com>)
 - Add SUSE Linux enterprise to platforms supported by the ansible and bash
templates for accounts_password (Yavor Georgiev <strandjata@gmail.com>)
 - Add CCE sle15 id to rule accounts_password_pam_lcredit (Yavor Georgiev
<strandjata@gmail.com>)
 - Remove FragmentPath check from service_disabled (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update Mailing list location in docs (Matthew Burket <mburket@redhat.com>)
 - Fix STIG XSLT transformation to show important and correct information.
(Gabriel Becker <ggasparb@redhat.com>)
 - Skip tasks in case there are no changes detected by CTF. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add SSGTS GH Actions integration. (Gabriel Becker <ggasparb@redhat.com>)
 - Add rule for RHEL-08-020300 (Matthew Burket <mburket@redhat.com>)
 - Document search order of rule content (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add log-dir option to test_rule_in_container.sh script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Extend test_suite.py script to support comma separated list of rules.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove specific metadata in shared Bash remediations (Matěj Týč
<matyc@redhat.com>)
 - Enable rules for stable components for RHEL9 (Matěj Týč
<matyc@redhat.com>)
 - Sort prodtypes of rules in RHEL9 profiles (Matěj Týč <matyc@redhat.com>)
 - Enabled Chrony rules for RHEL9 (Matěj Týč <matyc@redhat.com>)
 - Enable Tmux rules for RHEL9 (Matěj Týč <matyc@redhat.com>)
 - Remove strong entropy rules from profile drafts (Matěj Týč
<matyc@redhat.com>)
 - Updated smartcard rules and enabled them in RHEL9 (Matěj Týč
<matyc@redhat.com>)
 - Enabled generic rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Updated tests (Matěj Týč <matyc@redhat.com>)
 - Enabled dconf-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Changed the gdm dconf directory to distro.d (Matěj Týč <matyc@redhat.com>)
 - Remove documentation on how to manually generate stig_overlay.xml files.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update DISA STIG Chrome manual benchmark file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA STIG JRE manual benchmark file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA STIG Firefox manual benchmark file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove stig_overlay.xml files as they are generated during build time.
(Gabriel Becker <ggasparb@redhat.com>)
 - Generate STIG overlay files during build time. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add quiet mode for create-stig-overlay.py script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Do not add rule id based on SRG mapping to STIG tables. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix create-stig-overlay.py script to extract correct identifiers. (Gabriel
Becker <ggasparb@redhat.com>)
 - OCP4: Add rules to check if each API server has a separate partition for
auditing (Jakub Hrozek <jhrozek@redhat.com>)
 - RHCOS4: Remove several partition rules that will never be set on RHCOS4
(Jakub Hrozek <jhrozek@redhat.com>)
 - RHCOS4: Enable rules to mount /var/log and /var/log/audit on a separate
partition (Jakub Hrozek <jhrozek@redhat.com>)
 - Update rule aide_check_audit_tools for RHEL-08-030650 (Matthew Burket
<mburket@redhat.com>)
 - update contributors (Vojtech Polasek <vpolasek@redhat.com>)
 - Add bios_enable_execution_restrictions SRG reference (Milan Lysonek
<mlysonek@redhat.com>)
 - Add new rule for RHEL-08-030710 (Matthew Burket <mburket@redhat.com>)
 - Replace deprecated command in RHEL8/9 kickstart files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update test scenario (Carlos Matos <cmatos@redhat.com>)
 - Disable ctrl-alt-del.target before masking it (Watson Sato
<wsato@redhat.com>)
 - Align no_rsh_trust_files rule OVAL and remediations (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add tests for rule no_rsh_trust_files (Matus Marhefka <mmarhefk@redhat.com>)
 - Remove remediation for openssl_tls_crypto_policy (Watson Sato
<wsato@redhat.com>)
 - New rule for RHEL-08-020270 (Carlos Matos <cmatos@redhat.com>)
 - Update regex for openssl TLS MinProtocol parameter (Watson Sato
<wsato@redhat.com>)
 - Add rhel9 platform to crypto policy rule test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - SSGTS - add install command for RHEL9 (Milan Lysonek <mlysonek@redhat.com>)
 - Improve tests for RHEL-08-030700 (Matthew Burket <mburket@redhat.com>)
 - Update package_vim_installed to point to vim-enhanced package. (Gabriel
Becker <ggasparb@redhat.com>)
 - OCP4: Add a note about OAuth server converting the inactivity timeout to
human-readable format (Jakub Hrozek <jhrozek@redhat.com>)
 - Add /var/log/audit individual ownership rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ansible remediation of display_login_attempts. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: The moderate profile requires the audit profile to be
WriteRequestBodies (Jakub Hrozek <jhrozek@redhat.com>)
 - Move content-test-filtering github action job to a separate file. (Gabriel
Becker <ggasparb@redhat.com>)
 - Improvements on RHEL-08-030700 (Carlos Matos <cmatos@redhat.com>)
 - Add rule new for RHEL-08-030700 (Matthew Burket <mburket@redhat.com>)
 - OCP4: fips_mode_enabled rule relates to IA-7 (Jakub Hrozek
<jhrozek@redhat.com>)
 - Sorted refs, updated test scenario, fixed duplicate CCE (Carlos Matos
<cmatos@redhat.com>)
 - Replace MACs verbiage with ciphers (Carlos Matos <cmatos@redhat.com>)
 - Fixed issue with oval not checking for commented out line, and updated
remediations (Carlos Matos <cmatos@redhat.com>)
 - replaced MACs with Ciphers (Carlos Matos <cmatos@redhat.com>)
 - New rules for RHEL-08-010291 (Carlos Matos <cmatos@redhat.com>)
 - Updated wording - replaced daemon with server (Carlos Matos
<cmatos@redhat.com>)
 - Fixed issue with CCE (Carlos Matos <cmatos@redhat.com>)
 - Sorted refs (Carlos Matos <cmatos@redhat.com>)
 - Mark as machine rules that collect password_object (Watson Sato
<wsato@redhat.com>)
 - Fixed issue with oval not checking for commented out line, and updated
remediations (Carlos Matos <cmatos@redhat.com>)
 - last changes to support opensshserver.conf plus testing (Carlos Matos
<cmatos@redhat.com>)
 - finished changes for openssh.conf file (Carlos Matos <cmatos@redhat.com>)
 - New rules for RHEL-08-010290 (Carlos Matos <cmatos@redhat.com>)
 - Rename test cases to expected values (Alexander Scheel
<alex.scheel@canonical.com>)
 - Allow duplicate optional/required form rules (Alexander Scheel
<alex.scheel@canonical.com>)
 - Be consistent about parsing of MOUNTOPTION (Alexander Scheel
<alex.scheel@canonical.com>)
 - remove broken links to support.ntp.org (Vojtech Polasek
<vpolasek@redhat.com>)
 - Set package_rear_installed to notapplicable on s390x (Jan Černý
<jcerny@redhat.com>)
 - Add ubuntu2004 prodtype, cis reference to existing cron rules (Alexander
Scheel <alex.scheel@canonical.com>)
 - Update CIS Level 1 Server profile with cron, at (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add templated rule for file_groupowner_at_allow (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add templated rule for file_owner_at_allow (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add templated rule for file_permissions_at_allow (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add templated rule for file_permissions_cron_allow (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix wrong_value and add empty kernel module tests (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for file_permissions_etc_issue (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for file_owner_etc_issue (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for file_groupowner_etc_issue (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for file_groupowner_etc_motd (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for file_owner_etc_motd (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for file_permissions_etc_motd (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update tests for file_permissions_grub2_cfg for ubuntu (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update file_owner_grub2_cfg tests for ubuntu (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add oval check for bios_enable_execution_restrictions (Matthew Burket
<mburket@redhat.com>)
 - Add more checks for bios_enable_execution_restrictions to ensure we don't
miss anything (Matthew Burket <mburket@redhat.com>)
 - Use apt for aide_periodic_cron_checking/tests/aide_not_installed.fail.sh
(Alexander Scheel <alex.scheel@canonical.com>)
 - Update tests for package_aide_installed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for sudo_add_use_pty (Alexander Scheel <alex.scheel@canonical.com>)
 - Add tests for kernel_module_hfsplus_disabled (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for kernel_module_hfs_disabled (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for kernel_module_jffs2_disabled (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add tests for kernel_module_freevxfs_disabled (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add checks to go up to RHEL 8.10 (Matthew Burket <mburket@redhat.com>)
 - Add rules for RHEL-08-030610 (Matthew Burket <mburket@redhat.com>)
 - Remove autorefer.py documentation (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add documentation about mod_checks.py, mod_fixes (Alexander Scheel
<alex.scheel@canonical.com>)
 - Document rule.yml modification utilities (Alexander Scheel
<alex.scheel@canonical.com>)
 - audit_rules_file_deletion_events rules for SLES15 PCI-DSS (Viktors Trubovics
<viktors.trubovics@suse.com>)
 - Correct some issues with the CIS ICMP redirects rule on RHEL 7/8 (Alex
Haydock <alex@alexhaydock.co.uk>)
 - Check if the file exists (Jan Černý <jcerny@redhat.com>)
 - Use globs instead of ls (Jan Černý <jcerny@redhat.com>)
 - Automatically sort subkeys (Alexander Scheel <alex.scheel@canonical.com>)
 - Manually fix duplicated subkeys (Alexander Scheel
<alex.scheel@canonical.com>)
 - Use cached product_yaml, local_env instead (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update fix_rules.py for products/ move (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Don't execute fix_rule in dry_run mode (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Add print_function to fix_rules.py (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Update fix_rules.py to read rule_dirs.json (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Add more helpful error for duplicate keys (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Ignore rule files in build/ when fixing rules (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Add utils/fix_rules.py --dry-run to test suite (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Add --dry-run option to fix_rules.py (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Remove extraneous space from YAML keys (Alexander Scheel
<alex.scheel@canonical.com>)
 - Move fix-rules -> fix_rules to help imports (Alexander Scheel
<alex.scheel@canonical.com>)
 - fix-rules: sorting identifiers, remove duplicates (Alexander Scheel
<alex.scheel@canonical.com>)
 - Make SSG_ROOT optional in fix_rules.py (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Fixed the remediations when there are no previous kernelopts (Matej Tyc
<matyc@redhat.com>)
 - Added RHEL9 kickstarts (Matej Tyc <matyc@redhat.com>)
 - Add stigid references to STIG rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to STIG rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add initial STIG profile to Ubuntu 20.04 (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Update 'Configure Notification of Post-AIDE Scan Details' (Matthew Burket
<mburket@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - fix ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - install_vm.py: add --console option (Matus Marhefka <mmarhefk@redhat.com>)
 - rewrite ansible remediation with jinja macros (Vojtech Polasek
<vpolasek@redhat.com>)
 - add bash remediations to rules (Vojtech Polasek <vpolasek@redhat.com>)
 - add rhel platform to ansible remediations so that they are applicable on rhel
products (Vojtech Polasek <vpolasek@redhat.com>)
 - Adding cpe's to product.yml (Carlos Matos <cmatos@redhat.com>)
 - Add RHEL-08-010590 STIG to existing rule (Matthew Burket
<mburket@redhat.com>)
 - Add Jinja-based RHEL 8 minor check (Matthew Burket <mburket@redhat.com>)
 - Added recommended $ to end of regex pattern to properly match dirs (Carlos
Matos <cmatos@redhat.com>)
 - Updated test for nobody_group_owned_dir rule (Carlos Matos
<cmatos@redhat.com>)
 - Replace gpg keys to support Fedora 33 to 35 (Eryx Paredes <eryxp@lyft.com>)
 - Add NERC CIP references for Linux and OCP (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Enable remediations for crypto policy settings (Matej Tyc <matyc@redhat.com>)
 - Pass the input directory explicitly (Matej Tyc <matyc@redhat.com>)
 - make variable for sudo log file explicit (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix wrong variable for ssh approved macs (Vojtech Polasek
<vpolasek@redhat.com>)
 - Updated existing rules for syslibrary files/dirs (Carlos Matos
<cmatos@redhat.com>)
 - Initial commit for RHEL-08-010350 STIG rule (Carlos Matos
<cmatos@redhat.com>)
 - Add rhel9 Dockerfile for the test suite (Matus Marhefka
<mmarhefk@redhat.com>)
 - tests/install_vm.py: add rhel9 into distro choices (Matus Marhefka
<mmarhefk@redhat.com>)
 - Adding findutils to test_suite-fedora Dockerfile (Carlos Matos
<cmatos@redhat.com>)
 - ensure that higher policy levels can override variables of lower levels
(Vojtech Polasek <vpolasek@redhat.com>)
 - fix duplicate cce (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 6.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - Add a little more determinism to rule ordering (Alexander Scheel
<alex.scheel@canonical.com>)
 - Prioritize install_smartcard_packages like package_*_installed (Alexander
Scheel <alex.scheel@canonical.com>)
 - Generate more reproducible remediations (Alexander Scheel
<alex.scheel@canonical.com>)
 - cover section 6.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 5.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 5.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 4.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - Select two more rules in RHEL7 STIG. (Gabriel Becker <ggasparb@redhat.com>)
 - Unify display_login_attempts artifacts among different products. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update ansible remediation (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - update bash remediation (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - display_login_attempts - DISA STIG compliance (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add openscap-scanner to the dependencies list (Trevor Vaughan
<tvaughan@onyxpoint.com>)
 - fix typo srgid vs srg (Vojtech Polasek <vpolasek@redhat.com>)
 - fix wrong wording (Vojtech Polasek <vpolasek@redhat.com>)
 - remopve mention of a rule which is eventually not good enough (Vojtech
Polasek <vpolasek@redhat.com>)
 - use pam_pwhistory for password remembering check (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rule for sshd max startups (Vojtech Polasek <vpolasek@redhat.com>)
 - add rules for ssh approved macs and ciphers (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix non-unique cces (Vojtech Polasek <vpolasek@redhat.com>)
 - add more rules to section 5, auotmating some controls partially (Vojtech
Polasek <vpolasek@redhat.com>)
 - fix references (Vojtech Polasek <vpolasek@redhat.com>)
 - finish section 5 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 5.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 5.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - Correct product_base to use dirname (Alexander Scheel
<alex.scheel@canonical.com>)
 - cover section 5.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 5.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove ospp profile from sshd_set_keepalive tests metadata (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix autodetection of product from implicit datastream (Alexander Scheel
<alex.scheel@canonical.com>)
 - Template tests prior to building tarball (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add --product argument to SSGTS (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add ubuntu to description for audit_rules_privileged_commands_usermod
(Eduardo Barretto <eduardo.barretto@canonical.com>)
 - Add ubuntu2004 to display_login_attempts description (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu to clean_components_post_updating description (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Fix sshd service name in Ubuntu (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - OCP4: Write rule to check audit log forwarding uses TLS (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Improve OVAL pattern match for ensure_rtc_utc_configuration (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add bash script for ensure_rtc_utc_configuration (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - OCP4: Add manual rule that indicates folks to remove the kubeadmin user (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add ubuntu logic to fix description on grub2 rules (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Add ubuntu to grub2_bootloader_argument templates (Eduardo Barretto
<eduardo.barretto@canonical.com>)
 - Make policy_temp_passwords_immediate_change description generic (Eduardo
Barretto <eduardo.barretto@canonical.com>)
 - Make description for auditd_audispd_configure_sufficiently_large_partition
generic (Eduardo Barretto <eduardo.barretto@canonical.com>)
 - OCP4: Add rule that checks cluster-wide proxy (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Tag the network policy rule with SC-7 (Jakub Hrozek
<jhrozek@redhat.com>)
 - Drop irrelevant reference cci, it should be disa only (Yavor Georgiev
<strandjata@gmail.com>)
 - Map stig id SLES-12-010883 to dir_system_commands_group_root_owned (Yavor
Georgiev <strandjata@gmail.com>)
 - Map stig id SLES-12-010882 to file_groupownership_system_commands_dirs (Yavor
Georgiev <strandjata@gmail.com>)
 - Map stig id SLES-15-010881 to dir_system_commands_root_owned (Yavor Georgiev
<strandjata@gmail.com>)
 - Map stig id  SLES-12-010879 to file_ownership_binary_dirs rule (Yavor
Georgiev <strandjata@gmail.com>)
 - Map SLES-12-010878 to file_permissions_binary_dirs rule (Yavor Georgiev
<strandjata@gmail.com>)
 - Add implementation of dir_group_ownership_library_dirs rule (Yavor Georgiev
<strandjata@gmail.com>)
 - Map sudo_require_reauthentication to SLES-12-010113 (Yavor Georgiev
<strandjata@gmail.com>)
 - Add OVAL feed to Ubuntu 20.04 product.yml (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add cis reference to CIS Level 2 Server rules (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add cis reference to CIS Level 1 Server rules (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add ubuntu2004 to CIS Level 2 Server rules (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add ubuntu2004 to CIS Level 1 Server rules (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add initial CIS profiles to Ubuntu 20.04 (Alexander Scheel
<alex.scheel@canonical.com>)
 - fix non-unique cces (Vojtech Polasek <vpolasek@redhat.com>)
 - Select new CCE identifiers for SSH MaxStartups rule (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Remove local_variable to allow merge (Alex Haydock <alex@alexhaydock.co.uk>)
 - Add validity check for sshd MaxStartups value (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Address comments on code review for PR 7069 (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Update linux_os/guide/services/ssh/ssh_server/sshd_set_maxstartups/rule.yml
(Alex Haydock <alex@alexhaydock.co.uk>)
 - Address code review for PR 7069 (Alex Haydock <alex@alexhaydock.co.uk>)
 - Use variable selector correctly (Alex Haydock <alex@alexhaydock.co.uk>)
 - Build without specifying variable value directly in profile (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Address variable causing build failure (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Reference correct variable name in CIS profiles (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Make MaxStartups variable interactive (Alex Haydock <alex@alexhaydock.co.uk>)
 - Add rule to configure MaxStartups for sshd (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Fix description for auditd max_log_file variable (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Expand valid values for var_auditd_num_logs (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Fix SRG identifier reference. (Gabriel Becker <ggasparb@redhat.com>)
 - OCP4: Add e2e test for scc_limit_container_allowed_capabilities (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - remove extraneous audit rule checking for session info (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rule for clock_settime audit syscall (Vojtech Polasek
<vpolasek@redhat.com>)
 - add more audit rules to section 4.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 4.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 4.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - OCP4: Add rule to verify networkpolicies exist (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - GH Actions: Lint AR only for PRs, minor fixes (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - GH Actions: Trigger on push to master and stabilization-* branches, don't try
to post to the PR (results in log) (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Map SLES-12-010877 to file_permissions_system_commands_dirs rule (Yavor
Georgiev <strandjata@gmail.com>)
 - Fixed issue with correct_groupownership.pass.sh test (Carlos Matos
<cmatos@redhat.com>)
 - Adding test profiles for stigs (Carlos Matos <cmatos@redhat.com>)
 - Adding file_groupownership_system_commands_dirs to RHEL8 STIG (Carlos Matos
<cmatos@redhat.com>)
 - Update rule.yml (teacup-on-rockingchair <strandjata@gmail.com>)
 - Update rule.yml (teacup-on-rockingchair <strandjata@gmail.com>)
 - Fix typo in SLES-12-030364 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add SLES-12-030364 rule sysctl_net_ipv6_conf_all_forwarding (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Enable templates for RHEL9. (Matej Tyc <matyc@redhat.com>)
 - Fix possible issue in harden_openssl_crypto_policy remediation (Milan Lysonek
<mlysonek@redhat.com>)
 - Create a copy of the jinja env dict so it can properly render files. (Gabriel
Becker <ggasparb@redhat.com>)
 - use new macro in non-rhel products (Vojtech Polasek <vpolasek@redhat.com>)
 - use new macro in rhel products (Vojtech Polasek <vpolasek@redhat.com>)
 - extract command for building html stig reference tables to separate macro
(Vojtech Polasek <vpolasek@redhat.com>)
 - Map root_permissions_syslibrary_files to SLES-12-010875 (Yavor Georgiev
<strandjata@gmail.com>)
 - Map dir_ownership_library_dirs to SLES-12-010874 (Yavor Georgiev
<strandjata@gmail.com>)
 - Map file_ownership_library_dirs to SLES-12-010873 (Yavor Georgiev
<strandjata@gmail.com>)
 - Fix rule titles in stig.profile (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add SLES-12-030362 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Add SLES-12-030362 to sysctl_net_ipv6_conf_default_accept_source_route
(anivan-suse <anastasija.ivanovic@suse.com>)
 - Add SLES-12-030363 (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix NIST id to platform independent (Yavor Georgiev <strandjata@gmail.com>)
 - Add SLES-12-010112 (Yavor Georgiev <strandjata@gmail.com>)
 - Enable sudo_require_reauthentication in RHEL8 (Gabriel Becker
<ggasparb@redhat.com>)
 - Map dir_permissions_library_dirs to SLES-12-010872 (Yavor Georgiev
<strandjata@gmail.com>)
 - Map file_permissions_library_dirs to SLES-12-010871 (Yavor Georgiev
<strandjata@gmail.com>)
 - Map no_shelllogin_for_systemaccounts rule to SLES-12-010631 (Yavor Georgiev
<strandjata@gmail.com>)
 - OCP4: Add rules to verify OCP and OAuth audit logs (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add rule sudo_restrict_privilege_elevation_to_authorized as SLES-12-010111
(Yavor Georgiev <strandjata@gmail.com>)
 - Add sshd_x11_use_localhost rule to SLE12 stig profile (Yavor Georgiev
<strandjata@gmail.com>)
 - modify platform and description (Vojtech Polasek <vpolasek@redhat.com>)
 - OCP4: Fix kubelet cert/key matching rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Resolved chrony vs ntp rules. (Matěj Týč <matyc@redhat.com>)
 - Added RHEL9 CCEs. (Matěj Týč <matyc@redhat.com>)
 - Added note that the profile is a RHEL9 draft. (Matěj Týč
<matyc@redhat.com>)
 - Added RHEL9 profiles that are based on RHEL8 profiles. (Matěj Týč
<matyc@redhat.com>)
 - OCP4: Add macro for filtered OCP and implement SCC capabilities rule (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Fix regex in dconf ansible remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Adding package_vsftpd_removed to stig profile for SLES12 (anivan-suse
<anastasija.ivanovic@suse.com>)
 - Adding SLES-12-030011 to rule (anivan-suse <anastasija.ivanovic@suse.com>)
 - Fix bash remediation of sudo_defaults_option. (Gabriel Becker
<ggasparb@redhat.com>)
 - Increase /var/log/audit partition size to 10GB in STIG GUI KS file. (Milan
Lysonek <mlysonek@redhat.com>)
 - WIP: OCP4: Add enforcement remediations for etcd encryption (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add new Red Hat CCEs. (Matěj Týč <matyc@redhat.com>)
 - Use a copy of the env_yaml in the rule yaml expansion. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP: Add SA-4(8) to the list of controls addressed by having compliance
operator (Jakub Hrozek <jhrozek@redhat.com>)
 - Add rule_id to env_yml when jinja processing yaml rule files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use quoted boolean for missing_parameter_pass. (Gabriel Becker
<ggasparb@redhat.com>)
 - change vim package name to vim-common (Vojtech Polasek <vpolasek@redhat.com>)
 - prefer firewalld in section 3.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - Add policy version number profile description (Watson Sato
<wsato@redhat.com>)
 - OCP4: Add rules to verify integrity of the Kubernetes apiserver audit logs
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Converge legal notice checks into one rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - fix typos in variable definitions (Vojtech Polasek <vpolasek@redhat.com>)
 - A consolidated commit SLES-15-030390-changes/updates according to requested
proposals SLES-15-010100 - extends existing rule SLES-12-010060 (rchikov
<rumen.chikov@suse.com>)
 - AC-12: Check that either the OAuth server or any of the clients have token
max age set (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: Add oauth login template rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Move classification banner to general group (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Add to verify OpenShift's motd (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - cover section 3.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 3.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 3.3 and add variables to 3.2 (Vojtech Polasek
<vpolasek@redhat.com>)
 - cover section 3.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 3.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - Only show SUSE link in AppArmor group on SUSE (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix description, package name for package_opensc_installed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add default CIS banner to login_banner_text.var (Alexander Scheel
<alex.scheel@canonical.com>)
 - Allow missing /etc/motd file for Ubuntu CIS (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix file permissions on sshd private keys for Ubuntu (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix indentation in package_httpd_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - add ntp platform to ntp only rules (Vojtech Polasek <vpolasek@redhat.com>)
 - swap misplaced cces (Vojtech Polasek <vpolasek@redhat.com>)
 - fix cces after rebase (Vojtech Polasek <vpolasek@redhat.com>)
 - covering section 2.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - covering section 2.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 2.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 2.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - remove colon from profile titles, it breaks Ansible roles (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix OCP worker group name (Matt Rogers <mrogers@redhat.com>)
 - reword profile descriptions (Vojtech Polasek <vpolasek@redhat.com>)
 - GH Actions: Reintroduce independent AR linter for RHELs (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Fix bogus conflict resolution in cce-redhat-avail file. (Gabriel Becker
<ggasparb@redhat.com>)
 - utils/add_platform_rule.py: Fix products path (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix typo modeprobe->modprobe (Alexander Scheel <alex.scheel@canonical.com>)
 - Copied same references for password-auth as system-auth rule (Carlos Matos
<cmatos@redhat.com>)
 - Adding package pam meta to test scenarios (Carlos Matos <cmatos@redhat.com>)
 - updated ansible remediation to shorten name description (Carlos Matos
<cmatos@redhat.com>)
 - moved changes to 2 new rules, rather than overwriting existing
pam_unix_remember rule (Carlos Matos <cmatos@redhat.com>)
 - updated tests to ensure -z if statement uses proper bracket notation (Carlos
Matos <cmatos@redhat.com>)
 - fixed ansible-lint warning (Carlos Matos <cmatos@redhat.com>)
 - Fixing issue associated with #6955 + significant overhaul (Carlos Matos
<cmatos@redhat.com>)
 - Removing profiles that aren't needed. (Carlos Matos <cmatos@redhat.com>)
 - fix cce (Vojtech Polasek <vpolasek@redhat.com>)
 - update profile titles to show the CIS level (Vojtech Polasek
<vpolasek@redhat.com>)
 - explain configuration of selinux mode (Vojtech Polasek <vpolasek@redhat.com>)
 - add helper rule to reload dconf databases (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix typos (Vojtech Polasek <vpolasek@redhat.com>)
 - fix problems with cces (Vojtech Polasek <vpolasek@redhat.com>)
 - create 3 remaining cis profiles (Vojtech Polasek <vpolasek@redhat.com>)
 - cover sections 1.8 and 1.9 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 1.7 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 1.6 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 1.5 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 1.4 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 1.3 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 1.2 (Vojtech Polasek <vpolasek@redhat.com>)
 - cover section 1.1 (Vojtech Polasek <vpolasek@redhat.com>)
 - change cis rhel7 profile to use policy and represent l1 server (Vojtech
Polasek <vpolasek@redhat.com>)
 - Adding test scenarios to rule (Carlos Matos <cmatos@redhat.com>)
 - Adding RHEL-08-010120 to RHEL 8 STIG profile (Carlos Matos
<cmatos@redhat.com>)
 - Fix STIG reference in profile file. (Gabriel Becker <ggasparb@redhat.com>)
 - Increase /var/log/audit partition size to 10GB in STIG KS file. (Gabriel
Becker <ggasparb@redhat.com>)
 - Enable auditd_audispd_configure_sufficiently_large_partition in RHEL8.
(Gabriel Becker <ggasparb@redhat.com>)
 - OCP4: Use minute notation for inactivity timeout setting (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add single quotes to dconf value "lock-screen". (Gabriel Becker
<ggasparb@redhat.com>)
 - GH Actions/Build: Remove Ansible Roles Lint (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - OCP4: Re-enable usbguard rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ensure_pam_module_options now fix empty option value (Richard Maciel Costa
<richard.maciel.costa@canonical.com>)
 - Adding rules to tests rhel8 profiles (Carlos Matos <cmatos@redhat.com>)
 - New rsyslog rule per RHEL-08-010070 STIG (Carlos Matos <cmatos@redhat.com>)
 - Fix utilities after product move (Alexander Scheel
<alex.scheel@canonical.com>)
 - Typo: SMNP -> SNMP (Alexander Scheel <alex.scheel@canonical.com>)
 - Add more Ubuntu-specific package names (Alexander Scheel
<alex.scheel@canonical.com>)
 - Make sure remediation of usbguard_generate_policy check for the package.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add new rule to generate initial usbguard policy. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix covscan shell findings (Milan Lysonek <mlysonek@redhat.com>)
 - Adapted cmake DEPENDS statements to the relocation. (Matej Tyc
<matyc@redhat.com>)
 - Adopted the source code to the products relocation. (Matěj Týč
<matyc@redhat.com>)
 - Moved products to a separate directory. (Matěj Týč <matyc@redhat.com>)
 - Fix OVAL issues of the no_shelllogin_for_systemaccounts rule (Richard Maciel
Costa <richard.maciel.costa@canonical.com>)
 - Guard ansible syntax check test on playbooks per profile with CMake option.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix gdm3 package name in installed_env_has_gdm_package (Alexander Scheel
<alex.scheel@canonical.com>)
 - GH Actions/Build: Add CTF (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Only enable ansible/yaml lint tests when playbooks are built. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: Check that either the OAuth server or any of the clients have
inactivity timeout set (Jakub Hrozek <jhrozek@redhat.com>)
 - add tests for multiple chained inheritance (Vojtech Polasek
<vpolasek@redhat.com>)
 - cosmetic fixes (Vojtech Polasek <vpolasek@redhat.com>)
 - apply suggested changes to documentation (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix documentation formatting (Vojtech Polasek <vpolasek@redhat.com>)
 - Update control rendering template (Vojtech Polasek <vpolasek@redhat.com>)
 - fix pep8 and typo (Vojtech Polasek <vpolasek@redhat.com>)
 - update documentation to use list of inherited levels (Vojtech Polasek
<vpolasek@redhat.com>)
 - make inherited_from list as well (Vojtech Polasek <vpolasek@redhat.com>)
 - Update documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - remove leftover debug statements (Vojtech Polasek <vpolasek@redhat.com>)
 - Update ssg unit tests (Vojtech Polasek <vpolasek@redhat.com>)
 - Modify existing ANSSI policy to use the new format of levels (Vojtech Polasek
<vpolasek@redhat.com>)
 - Modify the build system to handle changed structure of controls file (Vojtech
Polasek <vpolasek@redhat.com>)
 - GH Actions/Build: Update and consolidate actions (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Specify sshd_allow_only_protocol2 test scenarios platform (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix SSG test suite support for setting variables (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged
_commands/audit_rules_privileged_commands_insmod/rule.yml (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add test cases for sudo logfile with second parameter (Alexander Scheel
<alex.scheel@canonical.com>)
 - Switch to more robust logfile option_regex_suffix (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add option_regex_suffix to sudo_defualts_options docs (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add test cases for sudo_custom_logfile (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add option_regex_suffix to sudo_defaults_option template (Alexander Scheel
<alex.scheel@canonical.com>)
 - Extend openshift_cluster_setting macro to support lists. (Gabriel Becker
<ggasparb@redhat.com>)
 - For 'ALL' rules, select only those that are present in currenct benchmark
(Milan Lysonek <mlysonek@redhat.com>)
 - Remove nonexistent branch from build workflow file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Attempt to detect issues with sed substitution (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix sed invocation in kernel_module_disable (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update package installation text for package_openldap-servers_removed
(Alexander Scheel <alex.scheel@canonical.com>)
 - Add Ubuntu package names for package_gdm_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu package names for package_xorg-x11-server-common_removed
(Alexander Scheel <alex.scheel@canonical.com>)
 - Add Ubuntu package names for package_net-snmp_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu package names for package_rsh_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu package name for package_openldap-servers_removed (Alexander
Scheel <alex.scheel@canonical.com>)
 - Add Ubuntu package names for package_openldap-clients_removed (Alexander
Scheel <alex.scheel@canonical.com>)
 - Add Ubuntu package names for package_dovecot_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu package name for package_httpd_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu package name for package_bind_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu package names for package_dhcp_removed (Alexander Scheel
<alex.scheel@canonical.com>)
 - Kubernetes Remediations: Add YAML separator (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update Ubuntu and Debian path for accounts_password_pam_pwquality (Alexander
Scheel <alex.scheel@canonical.com>)
 - Add Ubuntu to security_patches_up_to_date (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu paths to OCIL entry of aide_periodic_cron_checking (Alexander
Scheel <alex.scheel@canonical.com>)
 - Update aide_build_database path for Ubuntu (Alexander Scheel
<alex.scheel@canonical.com>)
 - Correct Avahi package name for Ubuntu (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Update rule.yml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - SLES-15-010361-corrections according to upstream's recommendations (rchikov
<rumen.chikov@suse.com>)
 - Fix import of open_environment method (Watson Sato <wsato@redhat.com>)
 - OCP4: Add check that a FIO object exists in the cluster (Jakub Hrozek
<jhrozek@redhat.com>)
 - Don't mistake ':' in variable selector for control (Watson Sato
<wsato@redhat.com>)
 - Update
linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml
(vtrubovics <82443408+vtrubovics@users.noreply.github.com>)
 - Enabled Grub cmdline rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled more audit rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled zIPL rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - More various rules. (Matěj Týč <matyc@redhat.com>)
 - Enabled service-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled package installed rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enable AIDE rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enable update-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - SLES-15-020102 var_sudo_timestamp_timeout.var description fix based on
review. (Viktors Trubovics <viktors.trubovics@suse.com>)
 - Update sle15/profiles/stig.profile (vtrubovics
<82443408+vtrubovics@users.noreply.github.com>)
 - OCP4: Upgrade builder and target images (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix oval check in uefi_no_removeable_media (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add new line before template (yarunachalam <yarunachalam@suse.com>)
 - OCP4: check for an LDAP-based provider NOT using the insecure flag (Jakub
Hrozek <jhrozek@redhat.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_sess
ion_events_btmp/rule.yml (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Remove sle15 prodtype from rule and update profile (Nico Truzzolino
<nico.truzzolino@gmx.de>)
 - Update rule.yml (vtrubovics <82443408+vtrubovics@users.noreply.github.com>)
 - SLES-15-020102 fixes based on review. (Viktors Trubovics
<viktors.trubovics@suse.com>)
 - Allow users to override sudo logfile location with tailoring (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Remove deprecated install command from RHEL8 kickstarts (Matus Marhefka
<mmarhefk@redhat.com>)
 - install_vm.py: increase memory (Matus Marhefka <mmarhefk@redhat.com>)
 - Fixed issue with duplicating commit messages when no changes were found
(Carlos Matos <cmatos@redhat.com>)
 - Move product dependency closer to declaration (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix path of gathered ansible playbooks per rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Put CIS references in correct place for sudo use_pty rule (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Add missing CCE identifiers to sudo logfile rule (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Update
linux_os/guide/system/software/sudo/sudo_require_reauthentication/rule.yml
(vtrubovics <82443408+vtrubovics@users.noreply.github.com>)
 - Add package_pam_apparmor_installed to sle stig profiles (Yavor Georgiev
<strandjata@gmail.com>)
 - Fix rules style (Yavor Georgiev <strandjata@gmail.com>)
 - Drop unneeded backslash (Yavor Georgiev <strandjata@gmail.com>)
 - Remove irrelevant file (Yavor Georgiev <strandjata@gmail.com>)
 - Use references field for CIS rather than identifiers (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Use references field for CIS rather than identifiers (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Update rule with OCIL parameters (Alex Haydock <alex@alexhaydock.co.uk>)
 - Add sudo custom logfile control for RHEL 8 CIS (Alex Haydock
<alex@alexhaydock.co.uk>)
 - Select rule for RHEL8 CIS 1.3.2 (Alex Haydock <alex@alexhaydock.co.uk>)
 - Update cis sle15 profile to better represent the released version 1.0.0 (Nico
Truzzolino <nico.truzzolino@gmx.de>)
 - Add support rule package_pam_apparmor_installed Add rule for installing
apparmor package together together with service enabling in the context of
SLES-12-010600 and SLES-15-010390 (Yavor Georgiev <strandjata@gmail.com>)
 - Use macros for ocil and description clauses in the rule Thanks to
@vojtapolasek for the help (Yavor Georgiev <strandjata@gmail.com>)
 - Update linux_os/guide/system/apparmor/group.yml (teacup-on-rockingchair
<strandjata@gmail.com>)
 - SLES-15-020102 new STIG rule (Viktors Trubovics <viktors.trubovics@suse.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Fix syntax XML error in criteria element (Gabriel Becker
<ggasparb@redhat.com>)
 - Update linux_os/guide/system/software/gnome/gnome_login_screen/gnome_gdm_disa
ble_unattended_automatic_login/rule.yml (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - remove extended oval check - not needed for this rule (Carlos Matos
<cmatos@redhat.com>)
 - Print message for CMake option enable ansible playbooks per rule. (Gabriel
Becker <ggasparb@redhat.com>)
 - Guard build of playbooks per rule by a new CMake Option. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: Add ocp4-moderate-node profile (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - OCP4: Disable usbguard rules from RHCOS4 moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - made changes to the remediation to handle test cases better (Carlos Matos
<cmatos@redhat.com>)
 - Fix idle-activation-enabled typo in rule and Ansible (Watson Sato
<wsato@redhat.com>)
 - Move product base ds to product dir (Watson Sato <wsato@redhat.com>)
 - Fix order in which SCAP 1.2 and 1.3 are generated (Watson Sato
<wsato@redhat.com>)
 - Bump version to 0.1.57 (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix output declararation of command generating ds (Watson Sato
<wsato@redhat.com>)
 - updated oval and remediation checks to be more agnostic (Carlos Matos
<cmatos@redhat.com>)
 - Update sle15/profiles/stig.profile (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Rename ansible per rule cmake option. (Gabriel Becker <ggasparb@redhat.com>)
 - fixed issue with ordering of when clause, plus minor readme template change
(Carlos Matos <cmatos@redhat.com>)
 - SLES-12-010420 and SLES-15-010510 rules (rchikov <rumen.chikov@suse.com>)
 - OCP4: Port ocp4-cis rules to moderate profile (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - ocp4: Temporarily disable usbguard tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update linux_os/guide/system/apparmor/apparmor_configured/rule.yml (teacup-
on-rockingchair <strandjata@gmail.com>)
 - Add option to enable installation of individual ansible tasks per rule.
(Gabriel Becker <ggasparb@redhat.com>)
 - OCP4: Tag file_permissions_openshift_pki_key_files as related to IA-5(2)
(Jakub Hrozek <jhrozek@redhat.com>)
 - OCP4: Link ocp_idp_no_htpasswd with IA-5(4) (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4: Add control to verify that the Compliance Operator is scanning (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Address SC-8 by checking OpenShift routes and add needed references
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Introduce FIPS check for MachineConfigs (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - templates/yamlfile_value: Add 'check_existence_yamlpath' argument to the
template (#7007) (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Add Rule for SLES-12-010600 and SLES-15-010390 (Yavor Georgiev
<strandjata@gmail.com>)
 - Update NIST references for audit log forwarding and IDPs (#7029) (Jakub
Hrozek <jhrozek@redhat.com>)
 - updated oval and added rhel8 test scenarios (Carlos Matos
<cmatos@redhat.com>)
 - Make check for chrony vs ntp product independent (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add bash package installation macro (Alexander Scheel
<alex.scheel@canonical.com>)
 - Use noninteractive front-end to apt (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix disable_users_coredumps's limits.d exists (Alexander Scheel
<alex.scheel@canonical.com>)
 - updated srg ref, updated platform for remediations (Carlos Matos
<cmatos@redhat.com>)
 - Update
linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Add options for Bash and Ansible to build_product (Jan Černý
<jcerny@redhat.com>)
 - Add audit_rules_privileged_commands_unix2_chkpwd rule (Yavor Georgiev
<strandjata@gmail.com>)
 - Add basic test scenarios for audit_rules_privileged_commands_unix_chkpwd
(Yavor Georgiev <strandjata@gmail.com>)
 - Revert changes in the audit_rules_privileged_commands template (Yavor
Georgiev <strandjata@gmail.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/password_quality/password_
quality_pwquality/accounts_password_pam_retry/oval/shared.xml (Carlos Matos
<cmatos@redhat.com>)
 - Updating to support rhel8 stig requirements (Carlos Matos
<cmatos@redhat.com>)
 - Add kickstart files for RHEL7 STIG and STIG with GUI. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add option to disable SCAP 1.2 data streams (Jan Černý <jcerny@redhat.com>)
 - Do not build HTML guide for the virtual default profile (Jan Černý
<jcerny@redhat.com>)
 - Add options for building Ansible and Bash content (Jan Černý
<jcerny@redhat.com>)
 - fix script for generation of contributors list (Vojtech Polasek
<vpolasek@redhat.com>)
 - update contributors (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix issue 7019 (sampsone <esampson@suse.com>)
 - Fix href of added derivative cpe-item (Watson Sato <wsato@redhat.com>)
 - Fix OVAL 5.10 build. (Gabriel Becker <ggasparb@redhat.com>)
 - updated tests, fixed ansible when clause, added rhel8 test profiles (Carlos
Matos <cmatos@redhat.com>)
 - Initial commit for configuring RHEL-08-010295 (Carlos Matos
<cmatos@redhat.com>)
 - Add bash remediation for audit_rules_suid_privilege_function. (Gabriel Becker
<ggasparb@redhat.com>)
 - Point RHEL-08-030000 to the correct rule that checks for execve. (Gabriel
Becker <ggasparb@redhat.com>)
 - Enabled various rules for RHEL9 (Matěj Týč <matyc@redhat.com>)
 - Remove audit_privileged_commands from RHEL7 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Mention CPE_NAME (Jan Černý <jcerny@redhat.com>)
 - Fix `ocil` clause (teacup-on-rockingchair <strandjata@gmail.com>)
 - Update
linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Update
linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Update
linux_os/guide/system/permissions/files/permissions_local_var_log/rule.yml
(teacup-on-rockingchair <strandjata@gmail.com>)
 - Merge NIST and DISA reference ids (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Merge SRG with existing SRG references (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add rule for SLES-15-030110 (teacup-on-rockingchair <strandjata@gmail.com>)
 - OCP4: Add relevant NIST references for SC-28 (#6992) (Juan Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Add NIST reference CM-5(1) to relevant rule (#7001) (Juan Osorio Robles
<jaosorior@redhat.com>)
 - Remove redundant gui rules from STIG profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Enable rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled low-level rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enable service disabled rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled integrity-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Add stig_gui kickstart file. (Gabriel Becker <ggasparb@redhat.com>)
 - Describe scenarios that need to be skipped (Jan Černý <jcerny@redhat.com>)
 - Add information about remediation none (Jan Černý <jcerny@redhat.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - SLES-15-010360 rule with integrated changes (rchikov <rumen.chikov@suse.com>)
 - Update R5 notes and rule selection (Watson Sato <wsato@redhat.com>)
 - Update R1 notes and selected rule (Watson Sato <wsato@redhat.com>)
 - Fix typos and improve language (Watson Yuuma Sato <wsato@redhat.com>)
 - Update linux_os/guide/system/permissions/files/permissions_within_important_d
irs/file_permissions_system_commands_dirs/rule.yml (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Update linux_os/guide/system/permissions/files/permissions_within_important_d
irs/file_permissions_system_commands_dirs/ansible/shared.yml (rumch-se <77793453
+rumch-se@users.noreply.github.com>)
 - Improve test suite documentation (Jan Černý <jcerny@redhat.com>)
 - OCP4: Link ocp_idp_no_htpasswd to AC-7 (Jakub Hrozek <jhrozek@redhat.com>)
 - Increase /usr size in SSGTS kickstart to be able to install F34 with GUI
(Matus Marhefka <mmarhefk@redhat.com>)
 - OCP4: Add NIST references for audit profile setting (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - install_vm.py: switch to Fedora 34 by default (Matus Marhefka
<mmarhefk@redhat.com>)
 - install_vm.py: add possibility to install GUI system (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix dconf_gnome_login_retries bash remediation (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - OL7 DISA STIG v2r3 update (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Undraft RHEL ANSSI High profiles (Watson Sato <wsato@redhat.com>)
 - Update metadata of other ANSSI hardening levels (Watson Sato
<wsato@redhat.com>)
 - Update ANSSI metadata for High level hardening (Watson Sato
<wsato@redhat.com>)
 - Disable anaconda remediation of package_gssproxy_removed. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: Add missing NIST audit references (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Replace rhel7 by product (Jan Černý <jcerny@redhat.com>)
 - Update and select seboolean rules for R67 (Watson Sato <wsato@redhat.com>)
 - Improve SSG Test suite documentation (Jan Černý <jcerny@redhat.com>)
 - Add rule sudo_add_passwd_timeout (Watson Sato <wsato@redhat.com>)
 - Fix loading OVAL without full jinja environment (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fix correctness bug in rule_dir_json.py (Alexander Scheel
<alexander.m.scheel@gmail.com>)
 - Clarify warning output in rule_dir_json.py (Alexander Scheel
<alex.scheel@canonical.com>)
 - Updated lineinfile to use regex, to prevent duplicate values being written to
file (Carlos Matos <cmatos@redhat.com>)
 - ensuring accounts_tmout tests actually create profile.d file (Carlos Matos
<cmatos@redhat.com>)
 - Adding tests for testing deduplication of values macro changes (Carlos Matos
<cmatos@redhat.com>)
 - Updating macros to support idempotency when deduplicating values (Carlos
Matos <cmatos@redhat.com>)
 - Fix autoprodtyper's open_environment call (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove unwanted space (yarunachalam <yarunachalam@suse.com>)
 - Removed unwanted space (yarunachalam <yarunachalam@suse.com>)
 - Updated correct CCE id (yarunachalam <yarunachalam@suse.com>)
 - Fixed Review comments - Added Blank line before template - updated CCE id for
uniqueness (yarunachalam <yarunachalam@suse.com>)
 - Revert "Remove `package_gssproxy_removed` from STIG GUI profile" (Carlos
Matos <cmatos@redhat.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_sess
ion_events_wtmp/rule.yml (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Update grub2_bootloader_argument to use grub2_boot_path (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update shared bash script to fix grub2 path (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update shared ovals to use grub2_boot_path (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update rule text to use grub2_boot_path (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add overridden grub2_boot_path for Debian-likes (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add grub2_boot_path as an implied property (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add pam->libpam-runtime mapping to debian, ubuntu (Alexander Scheel
<alex.scheel@canonical.com>)
 - ad comment to the class (Vojtech Polasek <vpolasek@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - Add rules to remove setroubleshoot packages (Watson Sato <wsato@redhat.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - add support for blueprint templates (Vojtech Polasek <vpolasek@redhat.com>)
 - rename fix type to blueprint (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rule for SLES-15-010354 (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add rule for SLES-15-030380 stig id (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Fix groupowner/permissions for ubuntu2004 (Alexander Scheel
<alex.scheel@canonical.com>)
 - Check libpam-runtime on Ubuntu (Alexander Scheel <alex.scheel@canonical.com>)
 - Improve error report. (Matěj Týč <matyc@redhat.com>)
 - Use a more compatible approach to parse subprocess output. (Matěj Týč
<matyc@redhat.com>)
 - Improve the test suite wrapper. (Matěj Týč <matyc@redhat.com>)
 - OCP4: Link audit_log_forwarding_enabled with AC-2(12) (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4: Add metadata and control references to ocp_idp_no_htpasswd (Jakub
Hrozek <jhrozek@redhat.com>)
 - SLES-15-030400 new tests added (rchikov <rumen.chikov@suse.com>)
 - fix pep8 (Vojtech Polasek <vpolasek@redhat.com>)
 - change urn for the new remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Update shared.xml (rumch-se <77793453+rumch-se@users.noreply.github.com>)
 - Remove RHEL>7 prodtypes from docker-related rules (Matěj Týč
<matej.tyc@gmail.com>)
 - Update linux_os/guide/system/permissions/files/permissions_within_important_d
irs/root_permissions_syslibrary_files/rule.yml (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Update linux_os/guide/system/permissions/files/permissions_within_important_d
irs/root_permissions_syslibrary_files/rule.yml (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - Update linux_os/guide/system/permissions/files/permissions_within_important_d
irs/root_permissions_syslibrary_files/rule.yml (rumch-se <77793453+rumch-
se@users.noreply.github.com>)
 - SLES-15-010362 (rchikov <rumen.chikov@suse.com>)
 - Enabled kernel module disable rules for RHEL9. (Matěj Týč
<matyc@redhat.com>)
 - Enable sysctl-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Remove package_gssproxy_removed from STIG GUI profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - fix ansible message (Vojtech Polasek <vpolasek@redhat.com>)
 - Merge duplicate disa (CCI) reference in package_audit_installed. (Gabriel
Becker <ggasparb@redhat.com>)
 - add remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove code from OCP4 e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Clarify what fixes for AIDE acl and xattrs do (Watson Sato
<wsato@redhat.com>)
 - SLES-15-010361 rule (rchikov <rumen.chikov@suse.com>)
 - update stig manual and overlay (Vojtech Polasek <vpolasek@redhat.com>)
 - Enable SELinux rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Fix description of SELinux rules. (Matěj Týč <matyc@redhat.com>)
 - Move rule to grub2_bootloader_argument template (Watson Sato
<wsato@redhat.com>)
 - Removing macro change, putting that in separate PR (Carlos Matos
<cmatos@redhat.com>)
 - Fixed ansible macro that works with duplicate values and corrected macro
values being passed in. (Carlos Matos <cmatos@redhat.com>)
 - updated remediations to use macros + updated test profiles (Carlos Matos
<cmatos@redhat.com>)
 - Adding compiled file refs (Carlos Matos <cmatos@redhat.com>)
 - Adding new rule for RHEL-08-010294 (Carlos Matos <cmatos@redhat.com>)
 - SLES-15-010357 rule (rchikov <rumen.chikov@suse.com>)
 - Fix typo in rule description (Jakub Hrozek <jhrozek@redhat.com>)
 - bump rhel7 stig version to v3r3 (Vojtech Polasek <vpolasek@redhat.com>)
 - Update rule.yml (Carlos Matos <cmatos@redhat.com>)
 - Remove Red Hat (Jan Černý <jcerny@redhat.com>)
 - Update linux_os/guide/system/permissions/files/permissions_within_important_d
irs/dir_permissions_library_dirs/rule.yml (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Print all rules and groups missing platform (Watson Sato <wsato@redhat.com>)
 - Extend machine-only test to check rule platforms (Watson Sato
<wsato@redhat.com>)
 - Address NIST SP 800-32 control CM-8(3) with usbguard (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Update VSEL references to remove qualifier from global references. (Gabriel
Becker <ggasparb@redhat.com>)
 - Apply review suggestions (Jan Černý <jcerny@redhat.com>)
 - Rename test scripts to follow correct convention (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Drop dir_object_file_permissions_lib_files rule (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Fix misspelling in the test script (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Platform specification needs to be multi_platform_sle (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Remove distribution specific notes from the rule description (teacup-on-
rockingchair <strandjata@gmail.com>)
 - Add rule for SLES-15-10352 Clone implementation of
file_permissions_library_dirs to dir_permissions_library_dirs (teacup-on-
rockingchair <strandjata@gmail.com>)
 - React to feedback (Jan Černý <jcerny@redhat.com>)
 - SLES-15-010355 rule (rchikov <rumen.chikov@suse.com>)
 - Show which OVAL fails during parsing (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add vmmsrg to the list of global references. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove product qualifier from global reference. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enhance output message and make the test to catch every product. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix a pep8 line length issue. (Gabriel Becker <ggasparb@redhat.com>)
 - Prevent global references to use product-qualifiers. (Gabriel Becker
<ggasparb@redhat.com>)
 - make sure that rule platforms is a set (Vojtech Polasek
<vpolasek@redhat.com>)
 - Enabled some package install rules for RHEL9. (Matěj Týč
<matyc@redhat.com>)
 - Update dpkg package installed command (Alexander Scheel
<alex.scheel@canonical.com>)
 - Enabled package removed rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled mount option rule for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled file permission rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled package management rules for RHEL9 (Matěj Týč <matyc@redhat.com>)
 - Enabled audit-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled usbguard-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled PAM-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enabled RPM-related rules for RHEL9 (Matěj Týč <matyc@redhat.com>)
 - Enabled rsyslog rules for RHEL9 (Matěj Týč <matyc@redhat.com>)
 - Enabled fapolicyd-related rules for RHEL9. (Matěj Týč <matyc@redhat.com>)
 - Enable Crypto Policy-related rules for RHEL9. (Matěj Týč
<matyc@redhat.com>)
 - Print the ID of the group with unsupported platform (Watson Sato
<wsato@redhat.com>)
 - Convert platforms to cpe_names when adding a rule (Watson Sato
<wsato@redhat.com>)
 - Make profile-tool product-aware (Alexander Scheel
<alex.scheel@canonical.com>)
 - Make refchecker aware of control files (Alexander Scheel
<alex.scheel@canonical.com>)
 - Refactor compile_profiles.py controls logic (Alexander Scheel
<alex.scheel@canonical.com>)
 - Check all rules in profile for required reference (Alexander Scheel
<alex.scheel@canonical.com>)
 - Update linux_os/guide/system/accounts/accounts-pam/set_password_hashing_algor
ithm/set_password_hashing_algorithm_commonauth/rule.yml (teacup-on-rockingchair
<strandjata@gmail.com>)
 - Add rule for SLES-15-010340 (teacup-on-rockingchair <strandjata@gmail.com>)
 - Update linux_os/guide/system/software/sudo/sudo_restrict_privilege_elevation_
to_authorized/rule.yml (vojtapolasek <krecoun@gmail.com>)
 - Drop duplicate functionality in oval and ansible (teacup-on-rockingchair
<strandjata@gmail.com>)
 - add rule to stability test for stig_gui (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix disa reference (Vojtech Polasek <vpolasek@redhat.com>)
 - update one more test applicability (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule to rhel8 stig (Vojtech Polasek <vpolasek@redhat.com>)
 - update rule also for rhel8 (Vojtech Polasek <vpolasek@redhat.com>)
 - update test applicability (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule to the profile (Vojtech Polasek <vpolasek@redhat.com>)
 - fix sle15 reference (Vojtech Polasek <vpolasek@redhat.com>)
 - add rhel7 stig references and update description (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add Rule,Remediation and Test for SLES-15-030780 (yarunachalam
<yarunachalam@suse.com>)
 - Add Rule,Remediation and Test for SLES-15-030770 (yarunachalam
<yarunachalam@suse.com>)
 - Aligning and updating RHEL 8 STIG w/ V1R2 (Carlos Matos <cmatos@redhat.com>)
 - SLES-15-030400 rule (rchikov <rumen.chikov@suse.com>)
 - Fixed review comments: updated nist,disa and srg records as a product
independent. (yarunachalam <yarunachalam@suse.com>)
 - Update linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_
screensaver_mode_blank/rule.yml (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Remove support statement from the manual page (Jan Černý
<jcerny@redhat.com>)
 - Revert STIG id for require_emergency_target_auth. (Gabriel Becker
<ggasparb@redhat.com>)
 - modified wrong path file for wrong test (yarunachalam
<yarunachalam@suse.com>)
 - Modified the test to be more appropriate as per the rule. (yarunachalam
<yarunachalam@suse.com>)
 - Remove old developer guide contents (Alexander Scheel
<alex.scheel@canonical.com>)
 - Remove empty references section (Alexander Scheel
<alex.scheel@canonical.com>)
 - Fixed review comments: removed sle15 for srg and nist records. updated test
scripts to align with rule desciription for path file. (yarunachalam
<yarunachalam@suse.com>)
 - Remove bogus nist: FOO-1(a) references (Alexander Scheel
<alex.scheel@canonical.com>)
 - For clarity, rename function to load_product_yaml (Watson Sato
<wsato@redhat.com>)
 - Only convert platform names when products match (Watson Sato
<wsato@redhat.com>)
 - merge duplicated srg and disa references and sort them (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix product specific disa and srg references (Vojtech Polasek
<vpolasek@redhat.com>)
 - Document controls (Jan Černý <jcerny@redhat.com>)
 - add remediation to test rule and add rule to example profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - add support for osbuild blueprint remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4: Enhance group ownership checks openvswitch processes pid files (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Notate that Ubuntu is a FIPS-certified OS (Alexander Scheel
<alex.scheel@canonical.com>)
 - Automatically prodtype rules in a profile (Alexander Scheel
<alex.scheel@canonical.com>)
 - Updated auditd service reference (Carlos Matos <cmatos@redhat.com>)
 - Ensuring stigid's are set where appropriate (Carlos Matos
<cmatos@redhat.com>)
 - Fix usbguard match-all syntax for HID rule (Nick Maludy <nmaludy@gmail.com>)
 - OCP: Fix description and OCIL in proxy-kubeconfig rules (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add updated manual DISA STIG XML reference files (Alexander Bergmann
<abergmann@suse.com>)
 - Fixed review comments: Updated DISA and SRG to be product independent Updated
oval test comments to be unique. (yarunachalam <yarunachalam@suse.com>)
 - Address style issues (Watson Sato <wsato@redhat.com>)
 - Incorporate ProductCPEs in product_yaml (Watson Sato <wsato@redhat.com>)
 - Fix scripts follow to env and product yaml split (Watson Sato
<wsato@redhat.com>)
 - Reorganize the env_yaml and product_yaml (Watson Sato <wsato@redhat.com>)
 - OCP: Fix description of kubelet TLS cipher suites (Jakub Hrozek
<jhrozek@redhat.com>)
 - Align ism_o profile with latest SSP (shaneboulden <shane.boulden@gmail.com>)
 - Fixed the syntax error (yarunachalam <yarunachalam@suse.com>)
 - Fix the syntax error (yarunachalam <yarunachalam@suse.com>)
 - Fixed build error. (yarunachalam <yarunachalam@suse.com>)
 - Fix the extra line. (yarunachalam <yarunachalam@suse.com>)
 - Modified Description text to fix specific steps for SLE15 and SLE12 stig
rules (yarunachalam <yarunachalam@suse.com>)
 - Modified the description text for sle15 and sle12. (yarunachalam
<yarunachalam@suse.com>)
 - Modified the description according to the stig rule. (yarunachalam
<yarunachalam@suse.com>)
 - Added profile in sle15 stig (yarunachalam <yarunachalam@suse.com>)
 - add rule to rhel7 and rhel8 stig profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - make rule and tests applicable to more products (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix ocil and add correct rhel8 stigid (Vojtech Polasek <vpolasek@redhat.com>)
 - Fixed ocil record (yarunachalam <yarunachalam@suse.com>)
 - Apply suggestions from code review (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Updated review comments: (yarunachalam <yarunachalam@suse.com>)
 - Apply suggestions from code review (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Fix remediation to match stig (yarunachalam <yarunachalam@suse.com>)
 - Update linux_os/guide/system/software/sudo/sudoers_validate_passwd/rule.yml
(yarunachalam <40246855+yarunachalam@users.noreply.github.com>)
 - Address upstream comments (yarunachalam <yarunachalam@suse.com>)
 - Update ssg/templates.py (Alexander Scheel <alexander.m.scheel@gmail.com>)
 - Relax version checks for Oracle JRE only (Joseph Lenox
<lordofhyphens@gmail.com>)
 - Remove rules related to gnome/dconf (Watson Sato <wsato@redhat.com>)
 - Simplify the policy renderer. (Matěj Týč <matyc@redhat.com>)
 - Update
linux_os/guide/system/software/updating/ensure_fedora_gpgkey_installed/rule.yml
(Alexander Scheel <alexander.m.scheel@gmail.com>)
 - Fix rule (teacup-on-rockingchair <strandjata@gmail.com>)
 - Renamed unattend to unattended word for readability. (yarunachalam
<yarunachalam@suse.com>)
 - Add Rule,Test for SLES-15-020103 (yarunachalam <yarunachalam@suse.com>)
 - Apply suggestions from wsato's code review (Alexander Scheel
<alex.scheel@canonical.com>)
 - Replace unqualified CIS references with qualified (Alexander Scheel
<alex.scheel@canonical.com>)
 - Prevent unqualified CIS and STIGID references (Alexander Scheel
<alex.scheel@canonical.com>)
 - Show which rule failed during template builds (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add missing rule references check to ctest (Milan Lysonek
<mlysonek@redhat.com>)
 - SLES-15-010250 add rule, remediation and tests. (sampsone
<esampson@suse.com>)
 - Add test that checks missing rule references for specific profiles. (Milan
Lysonek <mlysonek@redhat.com>)
 - Introduce @ form in all template fields (Alexander Scheel
<alex.scheel@canonical.com>)
 - SLES-15-030520 add to existing rule, audit_rules_kernel_module_loading_delete
(sampsone <esampson@suse.com>)
 - Fix RHEL8 STIG with GUI stable profile data. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add anaconda remediation for xwindows_remove_packages. (Gabriel Becker
<ggasparb@redhat.com>)
 - Updated metadata version to V3R2 on stig_gui profile (Carlos Matos
<cmatos@redhat.com>)
 - Add Rules,Remediation and Tests for SLES-15-040430 (yarunachalam
<yarunachalam@suse.com>)
 - Add Rule,Remediation and Test for SLES-15-030760 (yarunachalam
<yarunachalam@suse.com>)
 - Add Rule for SLES-15-010140  & SLES-12-010100 (yarunachalam
<yarunachalam@suse.com>)
 - Adjust the profile to RHVH (Watson Sato <wsato@redhat.com>)
 - Introduce RHV4 PCI-DSS profile based on RHEL8 (Watson Sato
<wsato@redhat.com>)
 - Code improvements. (Matěj Týč <matyc@redhat.com>)
 - Updated metadata version to V3R2 (Carlos Matos <cmatos@redhat.com>)
 - Added versioning info to title/description (Carlos Matos <cmatos@redhat.com>)
 - remove unneeded rules (Vojtech Polasek <vpolasek@redhat.com>)
 - Updated fail script syntax error (yarunachalam <yarunachalam@suse.com>)
 - Rename OVAL ids from file_permissions_local_var_log_messages rule. (Gabriel
Becker <ggasparb@redhat.com>)
 - Added test scritp (yarunachalam <yarunachalam@suse.com>)
 - Added STIG ID comment to be inline with main profile (Carlos Matos
<cmatos@redhat.com>)
 - Creating new RHEL 7 STIG GUI profile (Carlos Matos <cmatos@redhat.com>)
 - Update rule.yml (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Delete e2e.yml (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Update 30-ospp-v42-4-delete-success.rules (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Update 30-ospp-v42-4-delete-failed.rules (yarunachalam
<40246855+yarunachalam@users.noreply.github.com>)
 - Creating new RHEL 8 STIG GUI profile (Carlos Matos <cmatos@redhat.com>)
 - Select file permissions rules for /var/log into RHEL8 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add new rules to cover file/dir permissions for /var/log/messages. (Gabriel
Becker <ggasparb@redhat.com>)
 - Rename file_permissions_var_log_messages to
file_permissions_local_var_log_messages. (Gabriel Becker <ggasparb@redhat.com>)
 - Update ssg/build_remediations.py (Gabriel Becker <ggasparb@redhat.com>)
 - rewrite ansible loop to list of packages (Vojtech Polasek
<vpolasek@redhat.com>)
 - rename rule (Vojtech Polasek <vpolasek@redhat.com>)
 - update profile stability test (Vojtech Polasek <vpolasek@redhat.com>)
 - remove cces from references (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule into stig profiles (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - add check (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix ansible remediation applicability. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove harden_sshd_crypto_policy from RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Updating RHEL8 STIG profile for readability changes (Carlos Matos
<cmatos@redhat.com>)
 - Add HIPAA references to configure_ssh_crypto_policy (Milan Lysonek
<mlysonek@redhat.com>)
 - Add HIPAA references to configure_crypto_policy (Milan Lysonek
<mlysonek@redhat.com>)
 - Add HIPAA references to dconf_db_up_to_date (Milan Lysonek
<mlysonek@redhat.com>)
 - Check gdm database for OL on dconf_db_up_to_date (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update ol8 cjis profile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add ol7 cjis profile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - update ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - update bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - update rule description (Vojtech Polasek <vpolasek@redhat.com>)
 - Add CIS URI to SLE products. (Gabriel Becker <ggasparb@redhat.com>)
 - Add CCI reference to package_gssproxy_removed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove sshd_allow_only_protocol2 from RHEL8 STIG. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improved the rendering functionality. (Matěj Týč <matyc@redhat.com>)
 - Fix ansible lint issue in ensure_rtc_utc_configuration. (Gabriel Becker
<ggasparb@redhat.com>)
 - update to use watch_rule macro (sampsone <esampson@suse.com>)
 - Fix pep8 lint issues in OSPP profile parts in build-scripts/profile_tool.py
and in ssg/build_profile.py (Milan Lysonek <mlysonek@redhat.com>)
 - Update OL8 e8 profile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add OL7 e8 profile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Extend profile_tool.py with option to check for missing CUI references (Milan
Lysonek <mlysonek@redhat.com>)
 - Checking CUI missing references in ssg/build_profile.py (Milan Lysonek
<mlysonek@redhat.com>)
 - RHCOS/OCP: Add more detailed instructions for more OCIL instances (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - update tests to test also for files in /etc/profile.d directory (Vojtech
Polasek <vpolasek@redhat.com>)
 - restore package_vsftpd_removed in sle15 stig.profile (sampsone
<esampson@suse.com>)
 - Fix CIS-CSC URI (Alexander Scheel <alex.scheel@canonical.com>)
 - Add OCIL to sshd_limit_user_access (Jakub Hrozek <jhrozek@redhat.com>)
 - CIS: Add OCIL to kubelet_configure_tls_cipher_suites (Jakub Hrozek
<jhrozek@redhat.com>)
 - RHCOS4: Add relevant instructions and e2e test for banner_etc_issue (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Extend profile_tool.py with option to check for missing OSPP references
(Milan Lysonek <mlysonek@redhat.com>)
 - Checking OSPP missing references in ssg/build_profile.py (Milan Lysonek
<mlysonek@redhat.com>)
 - Add CCEs for RHEL9 rsyslog rules (Watson Sato <wsato@redhat.com>)
 - SLES-15-010220 updates for firewalld (sampsone <esampson@suse.com>)
 - fix service_sshd_enabled for SLE-15 (sampsone <esampson@suse.com>)
 - Select dconf_gnome_lock_screen_on_smartcard_removal in STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix NIST id format Thanks to @brett060102 (teacup-on-rockingchair
<strandjata@gmail.com>)
 - SLES-15-030730 'Record Unsuccessul Delete Attempts to Files - renameat2'
(yarunachalam <yarunachalam@suse.com>)
 - Remove extra new line (yarunachalam <yarunachalam@suse.com>)
 - Address upstream comments (yarunachalam <yarunachalam@suse.com>)
 - Render rules related to a component. (Matěj Týč <matyc@redhat.com>)
 - Extract the functionality for rendering compiled resources. (Matěj Týč
<matyc@redhat.com>)
 - use version 5.11 (Earl Sampson <ESampson@suse.com>)
 - Add dconf_gnome_lock_screen_on_smartcard_removal to cover RHEL-08-020050.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add service_nfs_disabled test scenarios (Milan Lysonek <mlysonek@redhat.com>)
 - Remove sle15 prodtype from service_nfs_disabled rule (Milan Lysonek
<mlysonek@redhat.com>)
 - Change nfs service name to nfs-server in service_nfs_disabled rule (Milan
Lysonek <mlysonek@redhat.com>)
 - OCP4: Add applicability warnings (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/e2e tests: Add ability to do per-version tests (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add rule for SLES-15-010030 Map package_vsftpd_removed rule to STIG ID
SLES-15-010030 (teacup-on-rockingchair <strandjata@gmail.com>)
 - Add rule file_ownership_library_dirs for SLES-15-010353     Map
SLES-15-010353 references and ids to file_ownership_library_dirs rule (teacup-
on-rockingchair <strandjata@gmail.com>)
 - Update OL8 hipaa profile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add OL7 hipaa profile (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Update OL cui profiles (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Add OL anssi profiles (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - restore dropped file (sampsone <esampson@suse.com>)
 - command should not include the output (Earl Sampson <ESampson@suse.com>)
 - SLES-15-030390 update. Tests added (rchikov <rumen.chikov@suse.com>)
 - SLES-15-030390 update. Tests added (rchikov <rumen.chikov@suse.com>)
 - build-scripts/profile_tool.py - add option to not show overall statistics of
benchmark (Milan Lysonek <mlysonek@redhat.com>)
 - add suse specific info to description (sampsone <esampson@suse.com>)
 - Disable OCP4 building on older OpenSCAP releases (Alexander Scheel
<alex.scheel@canonical.com>)
 - Enable dir_perms_world_writable_sticky_bits ansible remediation in RHEL.
(Gabriel Becker <ggasparb@redhat.com>)
 - Updates to support ansible_playbook_to_role utility (Carlos Matos
<cmatos@redhat.com>)
 - Add rotate option to var_auditd_disk_full_action variable (Milan Lysonek
<mlysonek@redhat.com>)
 - Add ignore option to auditd and audispd variables (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix typos and make language more clear (Watson Yuuma Sato <wsato@redhat.com>)
 - Add OVAL Limitations and pitfalls sections (Watson Sato <wsato@redhat.com>)
 - Update OVAL checks docs section (Watson Sato <wsato@redhat.com>)
 - Create CPE per OCP4 version to handle deprecations (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Use v1beta1 for api_server_api_priority_flowschema_catch_all object (Matt
Rogers <mrogers@redhat.com>)
 - Add Rule for SLES-15-040382 (yarunachalam <yarunachalam@suse.com>)
 - use when not jinja if to match other code (Earl Sampson <ESampson@suse.com>)
 - change shell to command (Vojtech Polasek <vpolasek@redhat.com>)
 - rhcos4: Add relevant instructions to configure_crypto_policy rule (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - remove xtra newline (Earl Sampson <ESampson@suse.com>)
 - remove extra new line (Earl Sampson <ESampson@suse.com>)
 - remove extra newline (Earl Sampson <ESampson@suse.com>)
 - remove extra newline (Earl Sampson <ESampson@suse.com>)
 - remove extra newline (Earl Sampson <ESampson@suse.com>)
 - Update linux_os/guide/system/network/network-
firewalld/firewalld_activation/service_firewalld_enabled/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - Update linux_os/guide/system/network/network-
firewalld/firewalld_activation/service_firewalld_enabled/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - Update
linux_os/guide/system/software/disk_partitioning/encrypt_partitions/rule.yml
(Earl Sampson <ESampson@suse.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_user
group_modification_opasswd/rule.yml (Earl Sampson <ESampson@suse.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_mod
ule_loading/audit_rules_kernel_module_loading_init/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_mod
ule_loading/audit_rules_kernel_module_loading_finit/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - Update linux_os/guide/system/auditing/auditd_configure_rules/audit_execution_
selinux_commands/audit_rules_execution_chcon/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - Update linux_os/guide/system/accounts/accounts-restrictions/password_expirati
on/accounts_password_set_min_life_existing/rule.yml (Earl Sampson
<ESampson@suse.com>)
 - increase /usr partition size in testing kicstart (Vojtech Polasek
<vpolasek@redhat.com>)
 - Enabled rules for RHEL9 to get consistent product build. (Matěj Týč
<matyc@redhat.com>)
 - Add the RHEL9 product. (Matěj Týč <matyc@redhat.com>)
 - Revert "make build system handle inherited platforms also for groups"
(vojtapolasek <krecoun@gmail.com>)
 - Add rhcos4-specific instructions in the ocil_service_(enabled|disabled)
macros (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Modify `describe_service_disabled` template for RHCOS4 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Modify `describe_service_enabled` template for RHCOS4 (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - rhcos4: Replace repetitive MachineConfig footer with macro (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add better instructions for `package_usbguard_installed` (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add better instructions for `disable_ctrlaltdel_burstaction` (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add better instructions for `disable_ctrlaltdel_reboot` (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add rules for SLES-12-010060 (sampsone <esampson@suse.com>)
 - Add CPE OVAL check for SLES for SAP 12 and 15. (sampsone <esampson@suse.com>)
 - SLES-15 add checks and remediations. (sampsone <esampson@suse.com>)
 - remove service_nfs_disabled sle15/profiles/cis.profile (sampsone
<esampson@suse.com>)
 - Fixed the Example product. (Matěj Týč <matyc@redhat.com>)
 - Altered prodtypes to prevent OVAL inconsistencies. (Matěj Týč
<matyc@redhat.com>)
 - Dont tolerate missing extending definitions. (Matěj Týč
<matyc@redhat.com>)
 - Abort the build if an OVAL is not included due to extend_definition. (Matěj
Týč <matyc@redhat.com>)
 - SLES-15-030390 add rule, remediation and test (sampsone <esampson@suse.com>)
 - Update Ubuntu CPEs to match published CPEs (Alexander Scheel
<alex.scheel@canonical.com>)
 - Add Ubuntu as a known platform for ssg_test_suite (Alexander Scheel
<alex.scheel@canonical.com>)
 - Allow product-version-agnostic checks/remediations (Alexander Scheel
<alex.scheel@canonical.com>)
 - rhcos4/e8: Use individual kernel module load audit rules (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add recommended chrony config (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - remove added new line (Earl Sampson <ESampson@suse.com>)
 - fix spacing (Earl Sampson <ESampson@suse.com>)
 - remove {} around grep piped (sampsone <esampson@suse.com>)
 - idle-delay moved to org.gnome.desktop.session (sampsone <esampson@suse.com>)
 - missed a couple of spaces in nist records (sampsone <esampson@suse.com>)
 - remove spaces from nist records (sampsone <esampson@suse.com>)
 - Make test conditional OVAL version 5.11 or greater (sampsone
<esampson@suse.com>)
 - fix more spacing (Earl Sampson <ESampson@suse.com>)
 - dropped more | after shell (Earl Sampson <ESampson@suse.com>)
 - dropped | on shell (Earl Sampson <ESampson@suse.com>)
 - fix spacing (Earl Sampson <ESampson@suse.com>)
 - add more pipefail. (sampsone <esampson@suse.com>)
 - don't use noqa, comments stripped before ansible-lint runs (sampsone
<esampson@suse.com>)
 - Update package metadata in environment preparation phase in test scenarios
where we want to test installation of a package (Milan Lysonek
<mlysonek@redhat.com>)
 - rhcos4: Remove ssh crypto policy hardening from moderate policy (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Code style fixes (Watson Sato <wsato@redhat.com>)
 - rhcos4: Add recommended configuration and e2e test for logrotate (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - RHCOS4: Remediation and e2e test for `disable_ctrlaltdel_reboot` (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Rework get_rule_path_by_id() to work with python2 (Watson Sato
<wsato@redhat.com>)
 - Fix scripts that use f-strings (Watson Sato <wsato@redhat.com>)
 - Add Control based ANSSI profiles to RHCOS4 (Watson Sato <wsato@redhat.com>)
 - Align the prodtype with the rsyslog tls rules (Watson Sato
<wsato@redhat.com>)
 - RHCOS4:  Remove account_disable_post_pw_expiration from moderate profile
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Remove rhcos4 prodtype from service_rsyncd_disabled (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_rsyncd_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Change rsync service name to rsync-daemon in service_rsyncd_disabled rule
(Milan Lysonek <mlysonek@redhat.com>)
 - fix duplicate CCE IDs (sampsone <esampson@suse.com>)
 - RHCOS4: Add recommended auditd.conf remediation (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add service_chronyd_enabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_cups_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_dovecot_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_httpd_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_vsftpd_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_rhnsd_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_rpcbind_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_snmpd_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_smb_disabled test scenarios (Milan Lysonek <mlysonek@redhat.com>)
 - Add service_named_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_autofs_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - refactor passing of inherited platforms (Vojtech Polasek
<vpolasek@redhat.com>)
 - RHCOS4: Fix singleuser_auth rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - pipefail not really compatible with grep (Earl Sampson <ESampson@suse.com>)
 - Add more SLE-15 stigs abd CCE IDs to existing rules (sampsone
<esampson@suse.com>)
 - RHCOS4: Remove rules that use rpmverifypackage_test (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add test for auditd_data_retention_admin_space_left_action and CIS profile
(Matus Marhefka <mmarhefk@redhat.com>)
 - rhcos4: Remove sssd configuration check from moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add remediation and e2e test for auditing access to audit logs (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - make build system handle inherited platforms also for groups (Vojtech Polasek
<vpolasek@redhat.com>)
 - rhcos4: Add e2e tests for audit rule order rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS4: Explicitly use OSPP profile for rules covered by it (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add Rules for SLES-12-010080/SLES-15-010120 (yarunachalam
<yarunachalam@suse.com>)
 - RHCOS4: Remove instances of audit_rules_privileged_commands (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add remediation and e2e test for audit_rules_time_watch_localtime
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add assorted remediations and e2e tests for syscalls (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add remediation and e2e test for audit_rules_sysadmin_actions (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: add remediation and e2e test for audit_rules_session_events (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add e2e test and remediation for audit_rules_mac_modification (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add e2e tests and remediations for
audit_rules_kernel_module_loading_* rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - rhcos4: Add remediation and e2e test for audit_rules_immutable (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add Rule for SLES-12-030310 and SLES-15-010410 (yarunachalam
<yarunachalam@suse.com>)
 - Update tests of accounts_tmout to work when overriding profiles (Matus
Marhefka <mmarhefk@redhat.com>)
 - read platform and platforms when parsing profile yaml files (Vojtech Polasek
<vpolasek@redhat.com>)
 - store platforms as set instead of lists (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add service_dhcpd_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Change rhel8 dhcp server package name to dhcp-server (Milan Lysonek
<mlysonek@redhat.com>)
 - Add plaform machine to wireless_disable_interfaces. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add service_crond_enabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_rsyslog_enabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add service_auditd_enabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - During a service enablement remediation, first unmask the service and then
start it (Milan Lysonek <mlysonek@redhat.com>)
 - Update linux_os/guide/system/software/sudo/sudo_restrict_privilege_elevation_
to_authorized/rule.yml (Earl Sampson <ESampson@suse.com>)
 - fix build system to correctly parse platforms (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4: Switch to using the `platforms` construct (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS: Temporarily remove UEFI password rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Improve devel documentation. (Gabriel Becker <ggasparb@redhat.com>)
 - Add documentation links for OL7 and OL8 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update tests of account_disable_post_pw_expiration (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add package_sudo_installed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_setroubleshoot_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_mcstrans_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_libselinux_installed test scenario (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_firewalld_installed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_audit_installed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_xorg-x11-server-common_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_telnet_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_ypbind_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_squid_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_chrony_installed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_xinetd_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add package_openldap-clients_removed test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add tests for rule accounts_password_pam_minlen (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add tests for rule accounts_no_uid_except_zero (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add accounts_password_pam_minclass test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Case sensitive umask in accounts_umask_etc_bashrc check (Milan Lysonek
<mlysonek@redhat.com>)
 - Add accounts_umask_etc_bashrc test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add tests for rule account_unique_name (Matus Marhefka <mmarhefk@redhat.com>)
 - initialize platforms to None (Vojtech Polasek <vpolasek@redhat.com>)
 - Macro-ize sudoers check (sampsone <esampson@suse.com>)
 - Add rule for RHCOS to check for interactive boot being disabled (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Fix typo in the coreos_kernel_option template doc. (Gabriel Becker
<ggasparb@redhat.com>)
 - rhcos4: Add check for nousb kernel argument (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix more OL7 doc links. (Gabriel Becker <ggasparb@redhat.com>)
 - fix ansible lint error (sampsone <esampson@suse.com>)
 - Update OL OSPP profiles (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Switch to generic python shebang (Alexander Scheel
<alex.scheel@canonical.com>)
 - make warning multiline (Earl Sampson <ESampson@suse.com>)
 - Add tests for rule no_netrc_files (Matus Marhefka <mmarhefk@redhat.com>)
 - Update docs/manual/developer/06_contributing_with_content.md (Juan Osorio
Robles <jaosorior@gmail.com>)
 - Fix oracle documentation links. (Gabriel Becker <ggasparb@redhat.com>)
 - Update linux_os/guide/system/software/sudo/sudo_restrict_privilege_elevation_
to_authorized/rule.yml (Earl Sampson <ESampson@suse.com>)
 - Add tests for rule file_permissions_ungroupowned (Matus Marhefka
<mmarhefk@redhat.com>)
 - Update descriptions of file_permissions_ungroupowned and
no_files_unowned_by_user (Matus Marhefka <mmarhefk@redhat.com>)
 - Add tests for rule no_files_unowned_by_user (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add documentation for `coreos_kernel_option` template (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add rule for checking selinux is not disabled in coreos (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add tests for rule accounts_minimum_age_login_defs (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add tests for rule accounts_password_warn_age_login_defs (Matus Marhefka
<mmarhefk@redhat.com>)
 - SLES-15-020101 add rule and tests, no remediation. (sampsone
<esampson@suse.com>)
 - Add tests for rule set_password_hashing_algorithm_systemauth (Matus Marhefka
<mmarhefk@redhat.com>)
 - Updated test scenarios to work on containers. (Matěj Týč
<matyc@redhat.com>)
 - ocp4/moderate: Add e2e tests for rules that pass by default (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/etcd: Fix rule checks for 4.8 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Need to set pipefail when using shell in ansible (sampsone
<esampson@suse.com>)
 - Add mount_option_dev_shm_* test scenarios that test when partition is not in
fstab (Milan Lysonek <mlysonek@redhat.com>)
 - Update mount_option template to be able fixing cases when mountpoint is not
in fstab (Milan Lysonek <mlysonek@redhat.com>)
 - Add accounts_umask_etc_profile test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Bump version to 0.1.56 (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove CIS references from rules not selected in CIS profiles (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix audit CIS references (Matus Marhefka <mmarhefk@redhat.com>)
 - Remove Jinja expresssions from control files (Watson Sato <wsato@redhat.com>)
 - Log Controls rules skipped by unmatched prodtype (Watson Sato
<wsato@redhat.com>)
 - Add Control rules based on the product being built (Watson Sato
<wsato@redhat.com>)
 - Add sysctl_net_ipv6_conf_all_forwarding test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv6_conf_default_accept_redirects test scenarios (Milan
Lysonek <mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_all_rp_filter test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv6_conf_default_accept_ra test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_all_accept_redirects test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv6_conf_all_accept_ra test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv6_conf_default_accept_source_route test scenarios (Milan
Lysonek <mlysonek@redhat.com>)
 - Add sysctl_net_ipv6_conf_all_accept_redirects test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_default_accept_redirects test scenarios (Milan
Lysonek <mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_all_accept_source_route test scenarios (Milan
Lysonek <mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_default_log_martians test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_icmp_echo_ignore_broadcasts test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_default_accept_source_route test scenarios (Milan
Lysonek <mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_all_log_martians test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_default_rp_filter test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_tcp_syncookies test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_icmp_ignore_bogus_error_responses test scenarios (Milan
Lysonek <mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_all_send_redirects test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_conf_default_send_redirects test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_net_ipv4_ip_forward test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add sysctl_fs_suid_dumpable test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add SUSE Linux Enterprise Server (SLES) to README (sampsone
<esampson@suse.com>)
 - update list of contributors (Vojtech Polasek <vpolasek@redhat.com>)
 - Updated CIS references to align with RHEL7 v2.2.0 and RHEL8 v1.0.0 benchmarks
(Matus Marhefka <mmarhefk@redhat.com>)
 - Use helper function when parsing template boolean options. (Gabriel Becker
<ggasparb@redhat.com>)
 - CIS: Fix api_server_admission_control_plugin_AlwaysAdmit value (Matt Rogers
<mrogers@redhat.com>)
 - CIS 1.2.12: Add check and test for AlwaysPullImages (Matt Rogers
<mrogers@redhat.com>)
 - Add tests for rsyslog_nolisten (Matus Marhefka <mmarhefk@redhat.com>)
 - Improve source doc in allow_stricter_permissions option. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add tests for rsyslog_remote_loghost (Matus Marhefka <mmarhefk@redhat.com>)
 - Revert template changes to valid OVAL code. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix file permission template when checking directories. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add postfix_network_listening_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add set_firewalld_default_zone test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - fix ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - fix bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - fix test (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix file template parameter parsing. (Gabriel Becker <ggasparb@redhat.com>)
 - ocp4: Add relevant for protectKernelDefaults rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - CIS 5.2, 5.4, and 5.6 updates (Matt Rogers <mrogers@redhat.com>)
 - Add rpm_verify_ownership test scenarios (Milan Lysonek <mlysonek@redhat.com>)
 - Ignore trailing whitespaces in unique references test. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove trailing whitespace in audit_rules_privileged_commands_usermod
(Gabriel Becker <ggasparb@redhat.com>)
 - sshd_approved_macs not used by sshd_use_approved_macs_ordered_stig (sampsone
<esampson@suse.com>)
 - Improved the wrapper script. (Matěj Týč <matyc@redhat.com>)
 - Updated the readme. (Matěj Týč <matyc@redhat.com>)
 - Refreshed the container test wrapper. (Matěj Týč <matyc@redhat.com>)
 - Fixed machine-only handling in the test suite. (Matěj Týč
<matyc@redhat.com>)
 - add info about bugfix label (Vojtech Polasek <vpolasek@redhat.com>)
 - Add OCIL for the selinux_confinement_of_daemons (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix comments in selinux_confinement_of_daemons OVAL (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add tests for selinux_confinement_of_daemons (Matus Marhefka
<mmarhefk@redhat.com>)
 - Update selinux_confinement_of_daemons to use correct context (Matus Marhefka
<mmarhefk@redhat.com>)
 - fix another dangling space (sampsone <esampson@suse.com>)
 - Address upstream comments: (sampsone <esampson@suse.com>)
 - kernel_module_dccp_disabled pulled from sle12 (sampsone <esampson@suse.com>)
 - Do lazy umount when cleaning up partition in test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_var_tmp_nosuid test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_var_tmp_nodev test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_dev_shm_nodev test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_tmp_nosuid test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_tmp_nodev test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_nosuid_removable_partitions test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_nodev_removable_partitions test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Change mount_option_dev_shm_noexec test scenarios to scenarios that actually
adjust a machine instead of testing default state (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_dev_shm_nosuid test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_home_nodev test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - start service in test (Vojtech Polasek <vpolasek@redhat.com>)
 - remove the rule from sle15 cis profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rule from rhel7 and rhel8 cis profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix oval (Vojtech Polasek <vpolasek@redhat.com>)
 - fix: rule for kubelet_authorization_mode (Takuya Mishina
<tmishina@jp.ibm.com>)
 - Correct platform string (sampsone <esampson@suse.com>)
 - Add SES-15 STIGs to exiting rules. (sampsone <esampson@suse.com>)
 - CIS 5.1 and 5.2: More ocil updates (Matt Rogers <mrogers@redhat.com>)
 - Add file_permissions_grub2_cfg test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add file_owner_grub2_cfg test scenarios (Milan Lysonek <mlysonek@redhat.com>)
 - Add file_groupowner_grub2_cfg test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add dir_perms_world_writable_sticky_bits test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - ocp4/e2e: fix classification_banner remediation (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add ansible and bash remediation for wireless_disable_interfaces. (Gabriel
Becker <ggasparb@redhat.com>)
 - change default for allow_stricter_permissions to true (Vojtech Polasek
<vpolasek@redhat.com>)
 - Added test scenarios for partition rules (Matus Marhefka
<mmarhefk@redhat.com>)
 - Update kernel_module_ipv6_option_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add kernel_module_sctp_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add kernel_module_tipc_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add kernel_module_rds_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add kernel_module_dccp_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add kernel_module_udf_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add kernel_module_squashfs_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add kernel_module_cramfs_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Update kernel_module_usb-storage_disabled test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - drop mistakingly added import (Vojtech Polasek <vpolasek@redhat.com>)
 - ocp4: Fix audit log forwarding rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - changes file extension (Samuel Warren <swarren@redhat.com>)
 - Use FUTURE system crypto policy in RHEL8 CIS profile (Milan Lysonek
<mlysonek@redhat.com>)
 - fix compiled rules which are used for ssg test suite unit tests (Vojtech
Polasek <vpolasek@redhat.com>)
 - use platforms in sample rule (Vojtech Polasek <vpolasek@redhat.com>)
 - fix sc2235 (Vojtech Polasek <vpolasek@redhat.com>)
 - remove leftover debug statements (Vojtech Polasek <vpolasek@redhat.com>)
 - fix pep8 errors (Vojtech Polasek <vpolasek@redhat.com>)
 - update documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - apply logical expressions correctly when generating ansible remediations
(Vojtech Polasek <vpolasek@redhat.com>)
 - fix logical expressions in bash remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - modify build system so that it accepts list of platforms (Vojtech Polasek
<vpolasek@redhat.com>)
 - create-stig-overlay.py: Create overlay directory if it doesn't exist.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add initial sle15 STIG overlay. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix disa STIG uri reference in SLE15 transforms. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use oval_metadata macro in susefirewall2_ddos_protection. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add sle12 initial STIG overlay. (Gabriel Becker <ggasparb@redhat.com>)
 - fix sle15/transforms/xccdf-apply-overlay-stig.xslt (sampsone
<esampson@suse.com>)
 - Fix SLE15 ssg_build_html_stig_tables (sampsone <esampson@suse.com>)
 - CIS: Update 5.1.2 clause and typo (Matt Rogers <mrogers@redhat.com>)
 - CIS: Update 5.1.1 rule (Matt Rogers <mrogers@redhat.com>)
 - Adds group.yml file (Samuel Warren <swarren@redhat.com>)
 - Create SLE12 and SL15 Stig tables, and enable one SL15 rule (sampsone
<esampson@suse.com>)
 - Fix test scenario of rpm_verify_permissions rule (Matus Marhefka
<mmarhefk@redhat.com>)
 - Update license. (Gabriel Becker <ggasparb@redhat.com>)
 - Adds classification banner to moderate profile, add folder structure (Samuel
Warren <swarren@redhat.com>)
 - ocp4/e2e: Replace instances of SKIP for NOT-APPLICABLE (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Initial support for SUSE SLE-15 (sampsone <esampson@suse.com>)
 - Add new SLE-12 rules to stig and fix a couple of bugs (sampsone
<esampson@suse.com>)
 - adds regex to rule.yml, adds e2e tests for rule (Samuel Warren
<swarren@redhat.com>)
 - cleaned up commit history for this branch -tvh (tom
<tom@localhost.localdomain>)
 - Update rule.yml (Brian Turek <brian.turek@gmail.com>)
 - Update
linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/oval/shared.xml (Brian
Turek <brian.turek@gmail.com>)
 - SLES-12 add checks and remediations. (sampsone <esampson@suse.com>)
 - Updated stable profiles. (Matěj Týč <matyc@redhat.com>)
 - Add temporary CIS reference link to OCP4 content (Watson Sato
<wsato@redhat.com>)
 - Add ANSSI references for Enhanced Level (Watson Sato <wsato@redhat.com>)
 - Add ANSSI references for Intermediary Level (Watson Sato <wsato@redhat.com>)
 - Add ANSSI references for Minimal Level (Watson Sato <wsato@redhat.com>)
 - Fix HIPAA and ANSSI references print message (Watson Sato <wsato@redhat.com>)
 - Add CIS references for assorted rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for accounts rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for rsyslog rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for partition rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references to audit rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references to kernel module rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for mount option rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for sysctl rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for package rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for service rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references to assorted rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references to No Execute bit rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references to pam password rules (Watson Sato <wsato@redhat.com>)
 - Add CIS references for banner/dconf related rules (Watson Sato
<wsato@redhat.com>)
 - Add reference checks for CIS, HIPAA and ANSSI (Watson Sato
<wsato@redhat.com>)
 - SLES-12 add checks and remediations. (sampsone <esampson@suse.com>)
 - SLES-12 add checks and remediations. (sampsone <esampson@suse.com>)
 - SLES-12 add checks and remediations. (sampsone <esampson@suse.com>)
 - SLES-12 add checks and remediations. (sampsone <esampson@suse.com>)
 - Minor adjustments to the devel documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Profiles update. (Matěj Týč <matyc@redhat.com>)
 - CIS 1.2.4: Add api_server_https_for_kubelet_conn rule (Matt Rogers
<mrogers@redhat.com>)
 - Add devel doc section about reproducible builds. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add formatting sections to the project's building documentation. (Gabriel
Becker <ggasparb@redhat.com>)
 - Change instances of cis to cis@ocp4 for openshift (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp: Add two missing OCILs (Jakub Hrozek <jhrozek@redhat.com>)
 - Add missing ol platform to remediations (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - utils: Allow setting openscap verbosity when running
utils/add_platform_rule.py test (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Fix test location and content of kubelet_configure_tls_cipher_suites
(Jakub Hrozek <jhrozek@redhat.com>)
 - Sort file lists (Bernhard M. Wiedemann <bwiedemann@suse.de>)
 - rhcos4: Add remediation for usbguard_allow_hid_and_hub rule (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - rhcos4: Add remediation for usbguard audit backend (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - kubernetes: Get rid of unit tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP: Add OVAL for api_server_anonymous_auth (Jakub Hrozek
<jhrozek@redhat.com>)
 - usbguard: Take rules.d directory into account (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/e2e: Check for remediation dependencies and re-scan (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - rhcos4: Add remediations and rules to enable usbguard (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Mark the e2e tests results of tests without OVAL as MANUAL (Jakub Hrozek
<jhrozek@redhat.com>)
 - Allow to override build date with SOURCE_DATE_EPOCH (Bernhard M. Wiedemann
<bwiedemann@suse.de>)
 - Add SRG to the partition_for_var_tmp rule (Milan Lysonek
<mlysonek@redhat.com>)
 - Don't instruct to run "oc" commands on specific nodes (Jakub Hrozek
<jhrozek@redhat.com>)
 - Remove unused rule api_server_authorization_mode (Jakub Hrozek
<jhrozek@redhat.com>)
 - ocp4/e2e: Pin gitlab docker image to 13.8.4-ce.0 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix STIG id reference for sshd_x11_use_localhost. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4/unit: Get rid of MachineConfig specific tests (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4/moderate: Add remediations for audit_file_deletion_events (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Enable checks and remediations for the following SLES-12 STIGs: (sampsone
<esampson@suse.com>)
 - reverts previous e2e test changes (Samuel Warren <swarren@redhat.com>)
 - ocp4/moderate: Add tests and remediations for usergroup_modification rules
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/moderate: Add tests and remediation for
audit_rules_unsuccessful_file_modification_* (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/moderate: Add remediations & tests for
audit_rules_unsuccessful_file_modification rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/moderate: Add remediations & tests for audit_rules_path_syscall rules
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - fix rule description (Vojtech Polasek <vpolasek@redhat.com>)
 - make some rules machine only (Vojtech Polasek <vpolasek@redhat.com>)
 - adds e2e.yml (Samuel Warren <swarren@redhat.com>)
 - merges upstream (root <root@ip-10-0-8-36.ec2.internal>)
 - adds result_after_remediation (root <root@ip-10-0-8-36.ec2.internal>)
 - Change CCE numbers to avoid duplicates (Brian Turek <brian.turek@gmail.com>)
 - ocp4: Add e2e for no_direct_root_logins (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/moderate: Add checks to cover SC-8(1) (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Add NIST reference to TLS-related checks (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - docs: add term "Operator" to their title and description (Takuya Mishina
<tmishina@jp.ibm.com>)
 - adds remediation for 1.2.25 api_server_audit_log_maxsize (Samuel Warren
<swarren@redhat.com>)
 - Require separate filesystem for /var/tmp (Seth Kress <seth.kress@dsainc.com>)
 - Remove auditd_data_retention_space_left from RHEL8 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - ocp4: Enable etcd encryption checks in ocp4 moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4: etcd encryption: add NIST control reference (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - feat: add rule "kubelet_configure_tls_cipher_suites" to CIS node profile
(Takuya Mishina <tmishina@jp.ibm.com>)
 - feat: section 4.2.13 rule: check Kubelet TLS cipher suites (Takuya Mishina
<tmishina@jp.ibm.com>)
 - feat: rules for ingress/kubeapi/openshiftapiserver (Takuya Mishina
<tmishina@jp.ibm.com>)
 - move ssh_client_rekey_limit to correct group (Vojtech Polasek
<vpolasek@redhat.com>)
 - Clone hardcoded sshd_set_keepalive to sshd_set_keepaliv_0 (Brian Turek
<brian.turek@gmail.com>)
 - Add severity according RHEL8 STIG for rules that had unknown severity.
(Gabriel Becker <ggasparb@redhat.com>)
 - Restore deleted tests (Brian Turek <brian.turek@gmail.com>)
 - Fix RHEL8 STIG ID references. (Gabriel Becker <ggasparb@redhat.com>)
 - Update RHEL8 STIG profile stability test data. (Gabriel Becker
<ggasparb@redhat.com>)
 - remove mrules disabling vfat file systems from cis profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add missing SRG mapping for RHEL8 STIG profile rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Disable audit rules from RHEL8 STIG profile temporarily. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove postfix_prevent_unrestricted_relay from RHEL8 STIG profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update RHEL8 STIG profile stability test data. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL8 STIG profile with FIPS rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add bootloader password to RHEL8 STIG kickstart example. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix duplicated CCE. (Gabriel Becker <ggasparb@redhat.com>)
 - Update RHEL8 STIG profile stability data. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove draft verbiage from description in RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add package_rng-tools_installed because it is dependency of rngd service.
(Gabriel Becker <ggasparb@redhat.com>)
 - Increase size of /var partition in RHEL8 STIG kickstart. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove one file based audit rule from RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove duplicate rule gssproxy package removed from STIG. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove conflicting rules from RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Set openssl-pkcs11 as default package for install_smartcard_packages.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update RHEL8 STIG profile stability data. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add correct variables to RHEL8 STIG missing from OSPP. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add initial RHEL8 STIG V1R1 profile. (Gabriel Becker <ggasparb@redhat.com>)
 - Add space before and after variable (Watson Sato <wsato@redhat.com>)
 - Add Ansible for mount_option_nodev_nonroot_local_partitions (Watson Sato
<wsato@redhat.com>)
 - Add mount_option_nodev_nonroot_local_partitions test scenarios (Milan Lysonek
<mlysonek@redhat.com>)
 - Add mount_option_nodev_nonroot_local_partitions bash remediation (Milan
Lysonek <mlysonek@redhat.com>)
 - Add nodev,nosuid,noexec options to /boot in ANSSI kickstart (Milan Lysonek
<mlysonek@redhat.com>)
 - Add newline to end of the OL7 STIG profile file. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4/CIS 4.1.3 & 4.1.4: Add rule and justifications (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - OL7 DISA STIG v2r2 update (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Align ANSSI Kickstarts with high level (Watson Sato <wsato@redhat.com>)
 - Align ANSSI kickstarts with enhanced level (Watson Sato <wsato@redhat.com>)
 - Align ANSSI kickstarts with intermediary level (Watson Sato
<wsato@redhat.com>)
 - Remove extra configurations from ANSSI minimal ks (Watson Sato
<wsato@redhat.com>)
 - Update OL pci-dss profiles (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Update OL standard profiles (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Fix single quote in ANSSI name (Watson Sato <wsato@redhat.com>)
 - Fix ANSSI document number for consistency (Watson Sato <wsato@redhat.com>)
 - Enable checks and remediations for the following SLES-12 STIGs: (Guang Yee
<guang.yee@suse.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - fix typos (Vojtech Polasek <vpolasek@redhat.com>)
 - fix wrong list declaration (Vojtech Polasek <vpolasek@redhat.com>)
 - adjust the OVAL data urls for SLE12 and SLE15 to current locations (Marcus
Meissner <meissner@suse.de>)
 - Extend /var partition to 3GB in rhel8 kickstarts (Milan Lysonek
<mlysonek@redhat.com>)
 - Update ASD crypto guidelines refs (shaneboulden <shane.boulden@gmail.com>)
 - ocp: Add missing reference to idp_is_configured (Jakub Hrozek
<jhrozek@redhat.com>)
 - CIS 1.2.21: Ensure that the metrics are protected by RBAC (Jakub Hrozek
<jhrozek@redhat.com>)
 - Bump version to 0.1.55 (Vojtech Polasek <vpolasek@redhat.com>)
 - Add missing hyphen in ANSSI profiles descriptions (Watson Sato
<wsato@redhat.com>)
 - Update title and descriptions of ANSSI profiles (Watson Sato
<wsato@redhat.com>)
 - Remove extends key from ANSSI intermediary profile (Watson Sato
<wsato@redhat.com>)
 - update list of contributors for 0.1.54 (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4: Add link to documentation for etcd encryption (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Improve yamlfile_value template. (Gabriel Becker <ggasparb@redhat.com>)
 - ocp4/CIS: Address 3.2 (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add warning why rule has no remediation (Watson Sato <wsato@redhat.com>)
 - Use NOSHA1 crypto policy for e8/rhcos (shaneboulden
<shane.boulden@gmail.com>)
 - CIS 1.2.35: Add check for api_server_tls_cipher_suites (Matt Rogers
<mrogers@redhat.com>)
 - Add additional RBAC/SCC controls to OCP e8 profile (shaneboulden
<shane.boulden@gmail.com>)
 - Remove unnecessary rules from RHCOS e8 profile (shaneboulden
<shane.boulden@gmail.com>)
 - Drop remediation for sysctl_kernel_modules_disabled (Watson Sato
<wsato@redhat.com>)
 - ocp4/CIS: Complete 1.3.1 (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - fix find command in test (Vojtech Polasek <vpolasek@redhat.com>)
 - fix find command in remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - remove debug task (Vojtech Polasek <vpolasek@redhat.com>)
 - Update SLES12 STIG to version v2r2 (guangyee <gyee@suse.com>)
 - change ansible remediation back to shell command (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove bogus output of ansible remediation for
dir_perms_world_writable_root_owned (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove rule for /boot noauto from R13 (Watson Sato <wsato@redhat.com>)
 - Enable checks and remediations for the following SLES-12 STIGs: (Guang Yee
<guang.yee@suse.com>)
 - Add kickstarts for each ANSSI hardening level (Watson Sato
<wsato@redhat.com>)
 - OCP4/CIS 3.1.1: Write rule to ensure IdP has been configured (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Bump RHEL7 STIG version to v3r2. (Gabriel Becker <ggasparb@redhat.com>)
 - remove "noauto" option from boot partition in anssi kickstarts (Vojtech
Polasek <vpolasek@redhat.com>)
 - make remediation also check for sgids (Vojtech Polasek <vpolasek@redhat.com>)
 - add test for nonlocal filesystem (Vojtech Polasek <vpolasek@redhat.com>)
 - fix remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Add sudo_add_noexec rule to list of rules that should be unselected for
testing (Milan Lysonek <mlysonek@redhat.com>)
 - CIS: Update api_server_request_timeout description and check (Matt Rogers
<mrogers@redhat.com>)
 - update bash remediation and test script to include sshfs (Vojtech Polasek
<vpolasek@redhat.com>)
 - ignore remote file systems when remediating audit_rules_privileged_commands
(Vojtech Polasek <vpolasek@redhat.com>)
 - Unselect rule mount_option_boot_noauto in ANSSI (Watson Sato
<wsato@redhat.com>)
 - remove noauto for boot partition from test kickstart (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4/e2e: Link test failure with sub-tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update template data for
kubelet_eviction_thresholds_set_soft_memory_available. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use yamlfile_value template for api_server_request_timeout. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add variable support for yamlfile_value. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4/CIS 1.3.1: Add rules for eviction thresholds (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: openvswitch's conf.db and lock are now owned by a different group (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - CIS 1.2.34: update api_server_encryption_provider_cipher (Matt Rogers
<mrogers@redhat.com>)
 - Reassign a new unique CCE identifier to approved macs STIG rule. (Gabriel
Becker <ggasparb@redhat.com>)
 - fix ansible incompatibilities (Vojtech Polasek <vpolasek@redhat.com>)
 - small fixes to ansible (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix some typos. (Gabriel Becker <ggasparb@redhat.com>)
 - add fuse.sshfs to excluded file systems (Vojtech Polasek
<vpolasek@redhat.com>)
 - rename tests (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Add cap_audit_write to be able to run sshd in containers (Matus Marhefka
<mmarhefk@redhat.com>)
 - Drop remediation for sudo_dedicated_group (Watson Sato <wsato@redhat.com>)
 - Update testing kickstart file partitions to be aligned with ANSSI profiles
(Milan Lysonek <mlysonek@redhat.com>)
 - Add missing rules to OL7 stig profile (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Update OL7 stig overlay to match v2r1 (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - OL7 DISA STIG v2r1 update (Federico Ramirez <federico.r.ramirez@oracle.com>)
 - Check if Ansible variable is defined before use (Watson Sato
<wsato@redhat.com>)
 - Fix syntax issue in when clause (Watson Sato <wsato@redhat.com>)
 - one more small fix to oval regex (Vojtech Polasek <vpolasek@redhat.com>)
 - simplify oval and bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - make bash remediation more readable (Vojtech Polasek <vpolasek@redhat.com>)
 - simplify regex (Vojtech Polasek <vpolasek@redhat.com>)
 - Add variable selector and notes for R29 (Watson Sato <wsato@redhat.com>)
 - RHCOS4: Fix audit_privileged_commands remediations (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Very important update of utils/render-policy.py (Matěj Týč
<matej.tyc@gmail.com>)
 - Improved HTML template wrt validity. (Matěj Týč <matyc@redhat.com>)
 - Select rules for ANSSI R37 (Watson Sato <wsato@redhat.com>)
 - Add metadata to ANSSI R35 (Watson Sato <wsato@redhat.com>)
 - remove rhel7 stigid from sshd_use_approved_macs (Vojtech Polasek
<vpolasek@redhat.com>)
 - modify rhel7 stig profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule and remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - fix and add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - fix remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - fix oval (Vojtech Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers_order
ed_stig/rule.yml (vojtapolasek <krecoun@gmail.com>)
 - Disable unique-stigids test. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove tests that are not relevant anymore. (Gabriel Becker
<ggasparb@redhat.com>)
 - change rule id (Vojtech Polasek <vpolasek@redhat.com>)
 - Supress Ansible lint error 503 (Jan Černý <jcerny@redhat.com>)
 - remove stigid from old rule (Vojtech Polasek <vpolasek@redhat.com>)
 - fix cce (Vojtech Polasek <vpolasek@redhat.com>)
 - change rule in rhel7 stig profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Improved UX based on review feedback. (Matěj Týč <matyc@redhat.com>)
 - Add extended definition to check for OpenSSH 7.4 in sshd_disable_compression.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update metadata for a few miminal and intermediary requirements (Watson Sato
<wsato@redhat.com>)
 - Select rules for password strenght management (Watson Sato
<wsato@redhat.com>)
 - var pam unix remember, add selector (Watson Sato <wsato@redhat.com>)
 - RHEL-07-040710 now configures X11Forwarding to disable. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update linux_os/guide/services/ssh/ssh_server/sshd_x11_use_localhost/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - Improved regex and tests. (Matěj Týč <matyc@redhat.com>)
 - Changed the rule ID to a more descriptive form. (Matěj Týč
<matyc@redhat.com>)
 - Improve the check regex (Matěj Týč <matej.tyc@gmail.com>)
 - return erroneously removed cces (Vojtech Polasek <vpolasek@redhat.com>)
 - remove cces from pool (Vojtech Polasek <vpolasek@redhat.com>)
 - Improved PR according to the feedback. (Matej Tyc <matyc@redhat.com>)
 - add rule to the stig profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Added Python shebang. (Matěj Týč <matyc@redhat.com>)
 - Added a script that renders policy YAML into HTML. (Matěj Týč
<matyc@redhat.com>)
 - Extended metadata collected by the build system. (Matěj Týč
<matyc@redhat.com>)
 - add rule to anssi profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - add test (Vojtech Polasek <vpolasek@redhat.com>)
 - relax oval to allow white spaces after the policy name (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add sshd_set_keepalive PCI DSS requirement reference (Milan Lysonek
<mlysonek@redhat.com>)
 - Enable checks and remediations for the following SLES-12 STIGs: (Guang Yee
<guang.yee@suse.com>)
 - modify profile stability test (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rule from rhel8 stig (Vojtech Polasek <vpolasek@redhat.com>)
 - Added rule CCEs. (Matej Tyc <matyc@redhat.com>)
 - Added sudoers_no_command_args to the r63 control. (Matej Tyc
<matyc@redhat.com>)
 - Add the sudoers_no_command_args rule - ANSSI R63 (Matěj Týč
<matyc@redhat.com>)
 - Updating Stable Profiles for RHEL 8 OSPP and STIG (Seth Kress
<seth.kress@dsainc.com>)
 - Add documentation for dconf_ini_file template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Require separate filesystem for /var/tmp (Seth Kress <seth.kress@dsainc.com>)
 - Clarify reasons why R14 is not automated (Watson Yuuma Sato
<wsato@redhat.com>)
 - Fix typos in notes and descriptions (Watson Yuuma Sato <wsato@redhat.com>)
 - Add RHEL CCEs to sudoers rules (Watson Sato <wsato@redhat.com>)
 - Add notes and automated tags to varios ANSSI reqs (Watson Sato
<wsato@redhat.com>)
 - Add notes and rule for sudo requirements (Watson Sato <wsato@redhat.com>)
 - Add rule prefer_64bit_os for R10 (Watson Sato <wsato@redhat.com>)
 - Update rationale for not supporting default value (Watson Sato
<wsato@redhat.com>)
 - Simplify the Ansible remediation (Watson Sato <wsato@redhat.com>)
 - Use more explicit breakline in documentation (Watson Sato <wsato@redhat.com>)
 - Select the new rules in ANSSI (Watson Sato <wsato@redhat.com>)
 - remove extraneous empty lines (Vojtech Polasek <vpolasek@redhat.com>)
 - update anssi policy with info about the rule for /proc filesystem (Vojtech
Polasek <vpolasek@redhat.com>)
 - Change /tmp-inst to /tmp/tmp-inst (Jan Černý <jcerny@redhat.com>)
 - Add a RHEL 8 CCE for rule sebool_polyinstantiation_enabled (Jan Černý
<jcerny@redhat.com>)
 - Add rules for ANSSI R39 (Jan Černý <jcerny@redhat.com>)
 - Add missing Ansible task metadata (Jan Černý <jcerny@redhat.com>)
 - Add tests for enable_pam_namespace (Jan Černý <jcerny@redhat.com>)
 - Add rule accounts_polyinstantiated_var_tmp (Jan Černý <jcerny@redhat.com>)
 - Add rule accounts_polyinstantiated_tmp (Jan Černý <jcerny@redhat.com>)
 - New rule enable_pam_namespace (Jan Černý <jcerny@redhat.com>)
 - Add openSUSE Leap 15.2 Dockerfile (guangyee <gyee@suse.com>)
 - Introduce new template for dconf configuration files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update anssi.yml (François Duthilleul <francoisduthilleul@gmail.com>)
 - ard r12 (Vojtech Polasek <vpolasek@redhat.com>)
 - add missing anssi references and cces to rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update configure_crypto_policy test scenario comment (Milan Lysonek
<mlysonek@redhat.com>)
 - add R23 rules (Vojtech Polasek <vpolasek@redhat.com>)
 - use jinja macro in bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Enable checks and remediations for the following SLES-12 STIGs: (Guang Yee
<guang.yee@suse.com>)
 - Add initial artifacts to support RHEL8 STIG content. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update usage of printf. (Matěj Týč <matyc@redhat.com>)
 - complete Anssi requirement 40 (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix jinja expansion on installed_OS_is_vendor_supported. (Gabriel Becker
<ggasparb@redhat.com>)
 - change remediation platforms to multi_platform_all (Vojtech Polasek
<vpolasek@redhat.com>)
 - update Anssi R49 (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - extend platforms so that remediations work on rhel (Vojtech Polasek
<vpolasek@redhat.com>)
 - extend description and add anssi reference (Vojtech Polasek
<vpolasek@redhat.com>)
 - make the variable interactive (Vojtech Polasek <vpolasek@redhat.com>)
 - add anssi reference (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - fix oval (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix Ansible sudo_defaults_option validate call (Watson Sato
<wsato@redhat.com>)
 - Add support for parametes in sudo_defaults_option template (Watson Sato
<wsato@redhat.com>)
 - Add tests for sudo_add_umask (Watson Sato <wsato@redhat.com>)
 - Add rule and var for sudo umask (Watson Sato <wsato@redhat.com>)
 - add remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Use control selectors in RHEL8 ANSSI profiles. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add dconf update to ansible fix for dconf rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improve configure_crypto_policy test scenario to ensure that both files have
same timestamp (Milan Lysonek <mlysonek@redhat.com>)
 - Use no_extra_spaces option in dconf_gnome_disable_user_list ansible fix.
(Gabriel Becker <ggasparb@redhat.com>)
 - update epel7 patch (Vojtech Polasek <vpolasek@redhat.com>)
 - fix wording and capitalization (Vojtech Polasek <vpolasek@redhat.com>)
 - Extend acronyms and fix typos in prefer_64bit_os (Watson Sato
<wsato@redhat.com>)
 - Update regex groups (Matěj Týč <matej.tyc@gmail.com>)
 - Improve bash resilience of sudo_defaults_option (Watson Sato
<wsato@redhat.com>)
 - Enhance "Defaults" regex in sudo_defaults_option template (Watson Sato
<wsato@redhat.com>)
 - Incorporated review feedback: (Matěj Týč <matyc@redhat.com>)
 - Add the sudoers_no_command_negation rule - ANSSI R62 (Matěj Týč
<matyc@redhat.com>)
 - Updated e8 profiles to use correct link to E8 Linux guide (Carlos Matos
<cmatos@redhat.com>)
 - Add OVAL for prefer_64bit_os (Watson Sato <wsato@redhat.com>)
 - Add rule for prefered OS bit mode (Watson Sato <wsato@redhat.com>)
 - Apply suggestions from code review (Watson Yuuma Sato <wsato@redhat.com>)
 - Restrict default enabled verbiage to rhel (Watson Sato <wsato@redhat.com>)
 - Added a test scenario. (Matej Tyc <matyc@redhat.com>)
 - Add a sudoers_no_root rule - ANSSI R60 (Matěj Týč <matyc@redhat.com>)
 - Remove default selector from rsyslog_remote_loghost_address in ANSSI.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove ANSSI profile test stability data. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add ctest tests execution in build workflow. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable build workflow for policy_source branch. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add build workflow. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix yaml formatting issue. (Gabriel Becker <ggasparb@redhat.com>)
 - Update controls/anssi.yml (Watson Yuuma Sato <wsato@redhat.com>)
 - Add justification for rules for ANSSI R15 (Watson Sato <wsato@redhat.com>)
 - Select sshd_set_keepalive in ANSSI R29. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add rules for R22 (Jan Černý <jcerny@redhat.com>)
 - Add file_permissions_sshd_private_key to R36 (Jan Černý
<jcerny@redhat.com>)
 - Fixes to build RHEL7. (Gabriel Becker <ggasparb@redhat.com>)
 - Update variable selector for remote_loghost_address (Watson Sato
<wsato@redhat.com>)
 - add rule for r59 (Vojtech Polasek <vpolasek@redhat.com>)
 - Analyze ANSSI R43 and the reference document (Watson Sato <wsato@redhat.com>)
 - Update ANSSI R67 notes and selections (Watson Sato <wsato@redhat.com>)
 - Select rules for ANSSI R7 (Watson Sato <wsato@redhat.com>)
 - Update ANSSI R69 requirement description (Watson Sato <wsato@redhat.com>)
 - Select rule for ANSSI R13 (Watson Sato <wsato@redhat.com>)
 - Add note and rules for ANSSI R19 (Watson Sato <wsato@redhat.com>)
 - Select rule for ANSSI R48 (Watson Sato <wsato@redhat.com>)
 - Update controls/anssi.yml (Jan Černý <jcerny@redhat.com>)
 - Select rule for R47 - dedicated partition for logs (Watson Sato
<wsato@redhat.com>)
 - Add note and select rules for ANSSI R9 (Watson Sato <wsato@redhat.com>)
 - Select rules for R32 (Watson Sato <wsato@redhat.com>)
 - ANSSI R8: Add rules for dnf automatic updates (Watson Sato
<wsato@redhat.com>)
 - Comment out the new rules (Jan Černý <jcerny@redhat.com>)
 - Add profile stability test data (Jan Černý <jcerny@redhat.com>)
 - Fix PEP8 problems (Jan Černý <jcerny@redhat.com>)
 - Transform ANSSI High profile (Jan Černý <jcerny@redhat.com>)
 - Transform Enhanced profile to MRPSDF (Jan Černý <jcerny@redhat.com>)
 - Remove a duplicate key (Jan Černý <jcerny@redhat.com>)
 - Remove example profile (Jan Černý <jcerny@redhat.com>)
 - Fix a typo in rule id (Jan Černý <jcerny@redhat.com>)
 - Set allowed values of key automated (Jan Černý <jcerny@redhat.com>)
 - Discuss and expand selection of rules for ANSSI R5 (Watson Sato
<wsato@redhat.com>)
 - Increase controls handling robustness. (Matěj Týč <matyc@redhat.com>)
 - Updated the profile titles from NT to BP (Matěj Týč <matyc@redhat.com>)
 - Renamed ANSSI policy file to more appropriate anssi.yml (Matěj Týč
<matyc@redhat.com>)
 - Expand and discuss first 3 ANSSI requirements (Watson Sato
<wsato@redhat.com>)
 - Added support for notes in controls. (Matěj Týč <matyc@redhat.com>)
 - Ported the ANSSI intermediary profile to policies/controls. (Matěj Týč
<matyc@redhat.com>)
 - Implemented concept of levels. (Matěj Týč <matyc@redhat.com>)
 - Improved the ANSSI policy-profile integration. (Matěj Týč
<matyc@redhat.com>)
 - Added policy content for ANSSI minimal. (Matěj Týč <matyc@redhat.com>)
 - Use ProfileWithInlinePolicies for controls in profiles (Jan Černý
<jcerny@redhat.com>)
 - Fix security_patches_up_to_date rule ID (Jan Černý <jcerny@redhat.com>)
 - Streamlined controls processing. (Matěj Týč <matyc@redhat.com>)
 - Improvements (Matěj Týč <matyc@redhat.com>)
 - Increase flexibility of profile with policies implementation. (Matěj Týč
<matyc@redhat.com>)
 - Add abcd-all.profile to tests data (Jan Černý <jcerny@redhat.com>)
 - Extract method resolve_controls (Jan Černý <jcerny@redhat.com>)
 - Add option to select all controls (Jan Černý <jcerny@redhat.com>)
 - Resolve controls during profile compilation (Jan Černý <jcerny@redhat.com>)
 - Extend profiles (Jan Černý <jcerny@redhat.com>)
 - Add support for variables in profiles (Jan Černý <jcerny@redhat.com>)
 - Resolve controls to rule selections (Jan Černý <jcerny@redhat.com>)
 - Pass controls manager to be used in resolve method (Jan Černý
<jcerny@redhat.com>)
 - Use the ResolvableProfile class in our tests (Jan Černý
<jcerny@redhat.com>)
 - Parse 'policies' YAML key during profile parsing (Jan Černý
<jcerny@redhat.com>)
 - Add 'policies' key to profile YAML files (Jan Černý <jcerny@redhat.com>)
 - Add support for variables in controls (Jan Černý <jcerny@redhat.com>)
 - Add class method for creating Control objects (Jan Černý
<jcerny@redhat.com>)
 - Process Jinja macros in control files (Jan Černý <jcerny@redhat.com>)
 - Add a class for processing controls files (Jan Černý <jcerny@redhat.com>)
 - Add RHEL8 CCE to ANSSI selected rules. (Gabriel Becker <ggasparb@redhat.com>)
 - update documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - modify patch for epel7 to disable ocp4 product (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove patch for epel6 (Vojtech Polasek <vpolasek@redhat.com>)
 - Add `overwrite: true` to all ignition configurations (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add bootloader password to RHEL8 ANSSI kickstart file. (Gabriel Becker
<ggasparb@redhat.com>)
 - add rule restring cpu usage of perf (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule limitting perf max sample rate (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rule increasing kernel.pid_max (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rule to configure group owner of /usr/bin/sudo (Watson Sato
<wsato@redhat.com>)
 - add rule to prevent mmapping of low virtual memory (Vojtech Polasek
<vpolasek@redhat.com>)
 - Validate /etc/sudoers file after remediation (Watson Sato <wsato@redhat.com>)
 - Fix sudo_defaults_option OVAL template description (Watson Sato
<wsato@redhat.com>)
 - Document template sudo_defaults_option (Watson Sato <wsato@redhat.com>)
 - Add rules for sudo option ignore_dot and env_reset (Watson Sato
<wsato@redhat.com>)
 - Add rules enabling sudo requiretty and use_pty (Watson Sato
<wsato@redhat.com>)
 - Make a template for sudo Defaults options (Watson Sato <wsato@redhat.com>)
 - add sysrq rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rule to enable sudo noexec option (Watson Sato <wsato@redhat.com>)
 - Fix PEP8 (Jan Černý <jcerny@redhat.com>)
 - Fix typos and improve comments (Jan Černý <jcerny@redhat.com>)
 - Add OVAL for the second rule covering CIS 4.2.10 (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add noauto option to /boot in ANSSI kickstart files. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP: Add a manual remediation+warning into kubelet_configure_event_creation
(Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Remove some more /etc/kubernetes/kubernetes.conf references (Jakub
Hrozek <jhrozek@redhat.com>)
 - E2E: Match the role against scan name, not the whole rule name (Jakub Hrozek
<jhrozek@redhat.com>)
 - Test new parameters of sysctl template (Jan Černý <jcerny@redhat.com>)
 - Add rules for net.ipv6.conf.all/default.max_addresses (Jan Černý
<jcerny@redhat.com>)
 - Add rules for net.ipv6.conf.all/default.autoconf (Jan Černý
<jcerny@redhat.com>)
 - Add rules for accept_ra_defrtr (Jan Černý <jcerny@redhat.com>)
 - Add rules for accept_ra_pinfo (Jan Černý <jcerny@redhat.com>)
 - Add rules for accept_ra_rtr_pref (Jan Černý <jcerny@redhat.com>)
 - Add rules for IPv6 router solicitations (Jan Černý <jcerny@redhat.com>)
 - Add rule sysctl_net_ipv4_ip_local_port_range (Jan Černý
<jcerny@redhat.com>)
 - Add more parameters to sysctl template (Jan Černý <jcerny@redhat.com>)
 - Add rule sysctl_net_ipv4_tcp_rfc1337 (Jan Černý <jcerny@redhat.com>)
 - Add nosuid to /srv and /opt partitions in RHEL7/8 ANSSI KS. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable checks and remediations for the following SLES-12 STIGs: (Guang Yee
<guang.yee@suse.com>)
 - Fix OCIL for rbac_pod_creation_access (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Minor fixes to kubelet rules (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Minor cleanups in etcd rules (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Clean up CIS 1.1.19, .20, .21: cert and keys permissions on master nodes
(Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Clean up CIS 1.1.17, .18: controller-manager-kubeconfig (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up 1.1.15, .16: scheduler kubeconfig (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up CIS 1.1.13, .14: admin kubeconfig permissions and ownership
(Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Clean up CIS 1.1.11, .12: etcd data directory permissions (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up 1.1.9, .10: CNI rules (Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Clean up 1.1.7, 8: etcd_member static pod definition (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up 1.1.5, .5: kube-scheduler config (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up 1.1.2, .3: kube-controller-manager config (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up 1.1.1, .2: kube-apiserver config (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Fixup but disable api_server_request_timeout (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: One does not simply run an oc command on master node(s) (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add /usr /opt /srv in a different partition for ANSSI KS. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add kickstart files for RHEL7 and RHEL8 ANSSI BP28 High profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - OCP4 CIS: Temporarily disable api_server_profiling (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up the api_server_insecure_port (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clean up api_server_insecure_bind_address (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Fix typo in api_server_admission_control_plugin_NodeRestriction (Jakub
Hrozek <jhrozek@redhat.com>)
 - OCP: Fix typo in api_server_admission_control_plugin_NamespaceLifecycle
(Jakub Hrozek <jhrozek@redhat.com>)
 - OCP: Disable the api_server_admission_control_plugin_AlwaysPullImages rule in
the CIS profile (Jakub Hrozek <jhrozek@redhat.com>)
 - Use stricter permissions template option in file_permissions_multus_conf.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add stricter permissions option for file permissions template. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add s390x (IBM Z) as a 64bit architecture (Renaud Métrich
<rmetrich@redhat.com>)
 - OCP: Fix typo in api_server_admission_control_plugin_AlwaysAdmit (Jakub
Hrozek <jhrozek@redhat.com>)
 - OCP: Fix typo in api_server_api_priority_gate_enabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clarify that OCP does not support token auth at all (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Clarify that OCP does not support basic auth at all (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP: Reconcile the api_server_anonymous_auth rule with OCP4 reality (Jakub
Hrozek <jhrozek@redhat.com>)
 - Fix FIPS checks for RHCOS (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4: Add CCEs to rules used by the CIS profile (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - CIS: Add two missing OCILs (Jakub Hrozek <jhrozek@redhat.com>)
 - Support SLES-12-010380, SLES-12-010110, and SLES-12-030150 (Guang Yee
<guang.yee@suse.com>)
 - disable_ctrlaltdel_burstaction: Take into account `.d/` directory too (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Fix CentOS 8 CPE (Jan Černý <jcerny@redhat.com>)
 - Add ignition version to coreos_kernel_option template (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Use ignition v3.1.0 in service_disabled template (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Removed inconsistencies in SUSE products. (Matěj Týč <matyc@redhat.com>)
 - Fixed shared OVAL checks. (Matěj Týč <matyc@redhat.com>)
 - Removed irrelevant claim that some rules dont reference PCI-DSS. (Matěj
Týč <matyc@redhat.com>)
 - Remove build-time messages that dont add any value. (Matěj Týč
<matyc@redhat.com>)
 - Dont warn about every rule without an OVAL check. (Matěj Týč
<matyc@redhat.com>)
 - OCP: Add missing tests for two rules that are passing by default (Jakub
Hrozek <jhrozek@redhat.com>)
 - Fix RHEL8 CIS Benchmark version (Watson Sato <wsato@redhat.com>)
 - Added an applicability check sudo installed. (Matěj Týč
<matyc@redhat.com>)
 - Set platform package mapping to None for not_s390x_arch CPE. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add platform_package_overrides to OL7 and OL8 (Federico Ramírez
<federico.r.ramirez@oracle.com>)
 - Add supported languages doc for lineinfile template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Check kernel osrelease instead of using uname test (Watson Sato
<wsato@redhat.com>)
 - compliance-operator: Prepare rules and profiles for productization (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add OCIL clauses to several openshift rules (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add kubernetes remediation for sysctl_kernel_randomize_va_space (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add false negative test scenario (Watson Sato <wsato@redhat.com>)
 - Update SUSE Linux Enterprise Server 12 STIG XML (Guang Yee
<guang.yee@suse.com>)
 - ocp4: Add tests for rhcos4 kernel arguments (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - kubernetes: Fix kernel argument template (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - rhcos4: Add missing sysctl remediations (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - RHCOS4: Fix sysctl remediations and add unit tests (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Update SMEs and owners (Gabe <redhatrises@gmail.com>)
 - Translate CPE check ids for derivative products. (Gabriel Becker
<ggasparb@redhat.com>)
 - Validate the CVE Feed URL in the Python code. (Matěj Týč
<matyc@redhat.com>)
 - ocp4/CIS 1.2.10: Enable checks (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Add check for audit log forwarding. (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Add automatic remediation for etcd encryption provider (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4: ovs conf.db: tighten file permissions (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - fix wrong rule name in oval and change platform to machine (Vojtech Polasek
<vpolasek@redhat.com>)
 - add ospp reference (Vojtech Polasek <vpolasek@redhat.com>)
 - add new platform to usbguard group (Vojtech Polasek <vpolasek@redhat.com>)
 - fix efinition class in oval (Vojtech Polasek <vpolasek@redhat.com>)
 - add cpe (Vojtech Polasek <vpolasek@redhat.com>)
 - create oval (Vojtech Polasek <vpolasek@redhat.com>)
 - Made sure that the template module is imported to a clean slate. (Matěj
Týč <matyc@redhat.com>)
 - Ported suitable rules to the lineinfile template. (Matěj Týč
<matyc@redhat.com>)
 - Added a simple lineinfile template. (Matěj Týč <matyc@redhat.com>)
 - Add new test scenarios for accounts_tmout (Jan Černý <jcerny@redhat.com>)
 - Bump RHEL7 STIG version to V3R1 and update stig_overlay.xml. (Gabriel Becker
<ggasparb@redhat.com>)
 - Stop calculating the time difference to current time (Watson Sato
<wsato@redhat.com>)
 - Fix wording of a warning in cases of absent CVE feed (Matěj Týč
<matej.tyc@gmail.com>)
 - Moved OVAL CVE Feed metadata from the rule to individual products. (Matěj
Týč <matyc@redhat.com>)
 - Propagated possibility to select the remediation backend. (Matěj Týč
<matyc@redhat.com>)
 - Revert hardcoding of ClientAliveCountMax to 0 in order to support new openssh
versions (Brian Turek <brian.turek@gmail.com>)
 - Skip irrelevant template directories. (Matěj Týč <matyc@redhat.com>)
 - Add new rule dir_perms_world_writable_system_owned_group. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add test to grub2_enable_fips_mode to check if /etc/system-fips exists.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove unrelated fix content from file_permissions_var_log_audit bash.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update RHEL7 STIG profile with /var/log/audit related rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typos in comments for rules' priority_order (Watson Yuuma Sato
<wsato@redhat.com>)
 - Fix up the templating documentation in readthedocs format. (Gabriel Becker
<ggasparb@redhat.com>)
 - fix names (Vojtech Polasek <vpolasek@redhat.com>)
 - allow higher entropy (Vojtech Polasek <vpolasek@redhat.com>)
 - add second rule  checking the csh file (Vojtech Polasek
<vpolasek@redhat.com>)
 - move rule to the new group and start splitting it (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update linux_os/guide/system/software/integrity/crypto/ssh_client_use_strong_
rng/rule.yml (vojtapolasek <krecoun@gmail.com>)
 - add rule into ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Add Ubuntu support to several remediations (Brian Turek
<brian.turek@gmail.com>)
 - Fix debian/ubuntu if statements and remove unnecessary explicit fedora if
(Brian Turek <brian.turek@gmail.com>)
 - Remove standard profile for RHCOS (Gabe <redhatrises@gmail.com>)
 - Enable rules and fix zipl template for RHCOS (Gabe <redhatrises@gmail.com>)
 - Add SRG overlay (Gabe <redhatrises@gmail.com>)
 - Add RHCOS STIG content and enable for NIST (Gabe <redhatrises@gmail.com>)
 - Fix accounts_tmout remediation script (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Modify accounts_tmout oval definition regex (Federico Ramirez
<federico.r.ramirez@oracle.com>)
 - Add docs/.gitignore file to ignore temporary files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add xwindows_runlevel_target to RHEL7 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL7 STIG benchmark reference from v2r8 to v3r1. (Gabriel Becker
<ggasparb@redhat.com>)
 - Change severity of rules according STIG V3R1. (Gabriel Becker
<ggasparb@redhat.com>)
 - rename the rule (Vojtech Polasek <vpolasek@redhat.com>)
 - move rule to bootloader-grub2 group (Vojtech Polasek <vpolasek@redhat.com>)
 - change platform to grub2 (Vojtech Polasek <vpolasek@redhat.com>)
 - Use common KubeletConfig for e2e remediations (Matt Rogers
<mrogers@redhat.com>)
 - Document that the datastream option can be left out. (Matěj Týč
<matyc@redhat.com>)
 - Allow the test suite to apply machine-only remediations. (Matěj Týč
<matyc@redhat.com>)
 - Add SRG to ssh_client_rekey_limit (Milan Lysonek <mlysonek@redhat.com>)
 - Move uefi_no_removeable_media tests to correct place. (Gabriel Becker
<ggasparb@redhat.com>)
 - copy documentation also into the readthedocs format (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove no longer valid statement that template.py has to exist (Vojtech
Polasek <vpolasek@redhat.com>)
 - Added convenience test suite scripts. (Matěj Týč <matyc@redhat.com>)
 - Use correct parameter for name field in issue template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Rename .github/issue_template folder to .github/ISSUE_TEMPLATE (Gabriel
Becker <ggasparb@redhat.com>)
 - OCP4/CIS: kubelet_configure_event_creation e2e remediation (Matt Rogers
<mrogers@redhat.com>)
 - Update .github/issue_template/new_rule.md (vojtapolasek <krecoun@gmail.com>)
 - update documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - add template.yml files (Vojtech Polasek <vpolasek@redhat.com>)
 - implement support for template.yml (Vojtech Polasek <vpolasek@redhat.com>)
 - ocp4/e2e: Increase timeout for manual remediations (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - remove template.py if not needed (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite for compatibility with python 2.7 (Vojtech Polasek
<vpolasek@redhat.com>)
 - update documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - rename template language files (Vojtech Polasek <vpolasek@redhat.com>)
 - remove no longer used template decorator function (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix pep8 (Vojtech Polasek <vpolasek@redhat.com>)
 - change names of anaconda remediation files to lower case (Vojtech Polasek
<vpolasek@redhat.com>)
 - update docs on creating of new templates (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove forgotten debug functionality (Vojtech Polasek <vpolasek@redhat.com>)
 - removed no longer used template (Vojtech Polasek <vpolasek@redhat.com>)
 - restructure the templates folder (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite templates.py (Vojtech Polasek <vpolasek@redhat.com>)
 - OCP4/CIS: tidy etcd_unique_ca text (Matt Rogers <mrogers@redhat.com>)
 - make examples into comments (Vojtech Polasek <vpolasek@redhat.com>)
 - ocp4/e2e: Only apply manual remediations once (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: use --server-side flag for `oc apply` (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/CIS: Add e2e remediation (Matt Rogers <mrogers@redhat.com>)
 - OCP4/CIS 4.2.6: add kubelet_enable_protect_kernel_defaults (Matt Rogers
<mrogers@redhat.com>)
 - OCP4/CIS 2.7: Check that etcd has its own CA (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/e2e: Add support for differentiating results from node roles (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Correct capitalization to match other rules (Brian Turek
<brian.turek@gmail.com>)
 - Add Ubuntu 20.04 as a build target (Brian Turek <brian.turek@gmail.com>)
 - Remove severity adjustments on OL7 STIG profile (federami
<federico.r.ramirez@oracle.com>)
 - OCP4/CIS 4.2.9: Update kubelet_configure_event_creation rule (Matt Rogers
<mrogers@redhat.com>)
 - ocp4/CIS 1.1.20: Fix references in rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix developer documentation link in frontpage. (Gabriel Becker
<ggasparb@redhat.com>)
 - Tweak ID names per suggestions (Brian Turek <brian.turek@gmail.com>)
 - Update service_apport_disabled rule description (Brian Turek
<brian.turek@gmail.com>)
 - Remove comments that trick readthedocs jinja doc parser. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add test scenario for mixed case sensitivity. (Gabriel Becker
<ggasparb@redhat.com>)
 - Make rsyslog_remote_tls regex case insensitive for rsyslogs parameters.
(Gabriel Becker <ggasparb@redhat.com>)
 - create new issue template for requesting a rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add rule to disable Apport so fs.suid_dumpable can persist (Brian Turek
<brian.turek@gmail.com>)
 - Added JRE8-UX-000160 control, plus new stig_overlay (Carlos Matos
<cmatos@redhat.com>)
 - Make Bash Jinja macros documentation pretty. (Gabriel Becker
<ggasparb@redhat.com>)
 - fix pep8 (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix typos in CPE applicability devel documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Port devel documentation from #6304 to readthedocs structure. (Gabriel Becker
<ggasparb@redhat.com>)
 - replace hardcoded version for new bump_version commit with dynamic one
(Vojtech Polasek <vpolasek@redhat.com>)
 - exclude profiles from tests folder while generating changelog (Vojtech
Polasek <vpolasek@redhat.com>)
 - Fix typos in CPE Applicability devel documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Include a header title in the project's documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Import tests/README.me and release_tools/README.adoc to readthedocs. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add ubuntu2004 to prodtype so ssh checks work (Brian Turek
<brian.turek@gmail.com>)
 - Add ubuntu2004 to prodtype so ssh checks work (Brian Turek
<brian.turek@gmail.com>)
 - Fix rsyslog perm checks for Ubuntu 20.04 (Brian Turek
<brian.turek@gmail.com>)
 - Add a few more ubuntu2004 references (Brian Turek <brian.turek@gmail.com>)
 - First semi-working Ubuntu 20.04 Standard Profile (Brian Turek
<brian.turek@gmail.com>)
 - OCP4/CIS: Update 4.2.8 check (Matt Rogers <mrogers@redhat.com>)
 - Bump version to 0.1.54 (Vojtech Polasek <vpolasek@redhat.com>)
 - Update test scenario variables parameter documentation (Gabriel Becker
<ggasparb@redhat.com>)
 - Flush out the adding content section (Gabe <redhatrises@gmail.com>)
 - Clean up structure and make the document easier to understand in english
(Gabe <redhatrises@gmail.com>)
 - Update CONTRIBUTING.md (Gabe Alford <redhatrises@gmail.com>)
 - Update CONTRIBUTING.md (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update CONTRIBUTING.md (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update CONTRIBUTING.md (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update CONTRIBUTING.md (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Create CONTRIBUTING.md (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Add new pwquality.conf and faillock.conf rules (Gabe <redhatrises@gmail.com>)
 - update contributors for 0.1.53 (Vojtech Polasek <vpolasek@redhat.com>)
 - Second part of remediation updates/additions for Java JRE (Carlos Matos
<cmatos@redhat.com>)
 - Add documentation for variables option in test scenarios. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4/CIS: Add missing e2e test for openshift_api_server_audit_log_path rule
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4: Add e2e test to api_server_insecure_bind_address rule (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Evaluate first the rules from rpm_verification grp (Watson Sato
<wsato@redhat.com>)
 - Reorganize group priority comments (Watson Sato <wsato@redhat.com>)
 - ocp4/CIS 1.2: Add missing e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add rule to drop sudo 'other' execution permisson (Watson Sato
<wsato@redhat.com>)
 - CIS 1.2.8: Minor fixups to the text and test stub (Jakub Hrozek
<jhrozek@redhat.com>)
 - ocp4/CIS 1.2.13: Fix SecurityContextDeny check (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/CIS: Add tests for 4.2 checks (Matt Rogers <mrogers@redhat.com>)
 - Fixed test broken test conditional. (Matěj Týč <matyc@redhat.com>)
 - Implement variable metadata for test scenarios. (Matěj Týč
<matyc@redhat.com>)
 - CIS/1.2: Add some missing e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4 CIS 1.2.30: Tidy up the rules and add tests (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4 CIS 1.2.5: Tidy up the rules and add tests (Jakub Hrozek
<jhrozek@redhat.com>)
 - OCP4 CIS 1.2.4: The API servers must be TLS servers (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add SRG references for use_pam_wheel_for_su rule (Milan Lysonek
<mlysonek@redhat.com>)
 - CIS 1.2.16: Ensure that a SCC admission control plugin is set (Jakub Hrozek
<jhrozek@redhat.com>)
 - CIS 1.2.13-17: Add a rule that checks no admission plugins have been disabled
(Jakub Hrozek <jhrozek@redhat.com>)
 - CIS 1.2.10: Add a rule with disabled OVAL to check for API priority and
fairness (Jakub Hrozek <jhrozek@redhat.com>)
 - CIS 1.2.9: Ensure that the --authorization-mode argument includes RBAC (Jakub
Hrozek <jhrozek@redhat.com>)
 - CIS 1.2.6: Fix the rule for 4.6-specific keys and values, add a test stub
(Jakub Hrozek <jhrozek@redhat.com>)
 - CIS 1.2: Minor fixups and adding tests (Jakub Hrozek <jhrozek@redhat.com>)
 - ocp4/CIS: Remove file ownership sentences (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/CIS 1.1.13 & 1.1.14: Add checks for kubeconfigs with admin privileges
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Part 1 of remediation updates/additions for Java JRE (Carlos Matos
<cmatos@redhat.com>)
 - Fix bash_dconf_settings to grep whole keyword alike. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4: Fix typo in comment (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4: Add missing openshift_cluster_setting entries (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - OCP4/CIS: Add test for kubelet_configure_client_ca (Matt Rogers
<mrogers@redhat.com>)
 - OCP4/CIS: Add template for kubelet_authorization_mode and enable in profile
(Matt Rogers <mrogers@redhat.com>)
 - ocp4/CIS 1.2.25: Add check for OpenShift APIServer audit-log-maxsize (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.2.25: Fix description and add check for audit-log-maxsize setting
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.2.24: Add check for OpenShift APIServer audit-log-maxbackup (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.2.24: Fix description and add rule for audit-log-maxbackup (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.20 & 1.1.21: Add checks for Etcd pki cert files (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - OCP4/CIS 1.1.20 & 1.1.21: Add checks for OpenShift PKI cert files (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - OCP4/CIS 1.1.19 & 1.1.21: Add checks for OpenShift PKI keys (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add sshd_set_idle_timeout as requirement for sshd_set_keepalive. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix RHEL8 PCI-DSS profile document reference. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: Rename wrongly added e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Remove requirement from rationale in ocp content (Gabe
<redhatrises@gmail.com>)
 - OCP4/CIS: Add test for kubelet_anonymous_auth (Matt Rogers
<mrogers@redhat.com>)
 - ocp4/cis: Fix typos in ovs-related rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Fix typo in controller-manager-kubeconfig check (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4: Fix typo in ip allocations rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/CIS 1.1.17 & 1.1.18: Add checks for controller manager's kubeconfig
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.15 & 1.1.16: Add checks for scheduler's kubeconfig (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS: Fix etcd checks (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS: Fix regexes which were implemented as wildcards (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Remove test profile (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4: Fix wrong owner references (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Small fix in developer guide references. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add reference to the stability test profile data for PCI-DSS. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4/CIS: Add 4.1.7 file_permissions_worker_ca to node profile (Matt Rogers
<mrogers@redhat.com>)
 - Fix file_groupowner_multus_conf rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Fix typo in rules (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4: cni conf files must be there (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/CIS 1.1.11 & 1.1.12: Add checks for etcd database files (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10: Add checks for OVSDB server PID File (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10: Add check for vswitchd PID File (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10: Check OVS conf.db lock file (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10: Add checks for OVS system-id.conf (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10 Check for OVS conf.db File (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10: Add check for Open vSwitch PID file (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10: Add checks for ocp cniserver config files (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 and 1.1.10: Add checks for ip allocation files (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9 & 1.1.10: Add checks for multus plugin files (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.10: Fix references, add OVAL and add checks to profile (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.9: Fix reference, check and add it to cis-node profile (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.7 & 1.1.8: Fix descriptions and add missing OVAL checks (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4/CIS 1.1.6 add mising OVAL checks and fix descriptions (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Select sshd_set_keepalive where sshd_set_idle_timeout is selected. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove capture_output option from subprocess.run in SSGTS (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix an omission when removing template parameter MASK_SERVICE. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix cross reference. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove pip command for python3 specific package. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add instructions on how to build Sphinx documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove reference of deprecated developer_guide.adoc. (Gabriel Becker
<ggasparb@redhat.com>)
 - Backport developer doc changes from #6325. (Gabriel Becker
<ggasparb@redhat.com>)
 - Backport developer guide changes from #6293. (Gabriel Becker
<ggasparb@redhat.com>)
 - Backport changes from #6298. (Gabriel Becker <ggasparb@redhat.com>)
 - Update HTML statistics build instructions. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix trailing spaces in dev docs. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix typo in yamlfile_value template documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Indent correctly yamlfile_value template documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Shorten "List of available templates" to "Available Templates. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update dev doc with regards newer way python modules are organized. (Gabriel
Becker <ggasparb@redhat.com>)
 - Port documentation #6319 to newer documentation format. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add CMake custom target docs to build sphinx html documentation. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add full requirements for sphinx documentation build. (Gabriel Becker
<ggasparb@redhat.com>)
 - Create index for list of available templates. (Gabriel Becker
<ggasparb@redhat.com>)
 - Reorganize sphinx documentation and add support to python modules. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add readthedocs links in README and older developer_guide.adoc. (Gabriel
Becker <ggasparb@redhat.com>)
 - Port oval_check_config_file jinja macro documentation to docstring format.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update readthedocs config file. (Gabriel Becker <ggasparb@redhat.com>)
 - Add readthedocs documentation for jinja macros. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add readthedocs documentation support. (Gabriel Becker <ggasparb@redhat.com>)
 - add the ocp4 test profile to gitignore (Jakub Hrozek <jhrozek@redhat.com>)
 - Split cpes.yml into multiple file (Watson Sato <wsato@redhat.com>)
 - Mention cpes_root in the examples readme (Watson Sato <wsato@redhat.com>)
 - Remove product to CPE names mapping (Watson Sato <wsato@redhat.com>)
 - Use ProductCPEs when dumping Profiles to xml (Watson Sato <wsato@redhat.com>)
 - Fix insertion of derivative CPE into dictionary (Watson Sato
<wsato@redhat.com>)
 - Extend CPE documentation (Watson Sato <wsato@redhat.com>)
 - Parametrize CPEs source file (Watson Sato <wsato@redhat.com>)
 - Change CPE declaration syntax for readability (Watson Sato
<wsato@redhat.com>)
 - Document CPEsx (Watson Sato <wsato@redhat.com>)
 - Add cpes key to cpes.yml file for readability (Watson Sato
<wsato@redhat.com>)
 - Move product CPEs to their product.ymls (Watson Sato <wsato@redhat.com>)
 - Drop use of XCCDF_PLATFORM_TO_CPE (Watson Sato <wsato@redhat.com>)
 - Fix definition of ocp4 CPES (Watson Sato <wsato@redhat.com>)
 - Sort the cpe-items before generating the cpe-list (Watson Sato
<wsato@redhat.com>)
 - Reformat cpes.yml for readability (Watson Sato <wsato@redhat.com>)
 - Decouple the CPE ref from the OVAL filename (Watson Sato <wsato@redhat.com>)
 - Generate the cpe-dictionary dynamically (Watson Sato <wsato@redhat.com>)
 - add mount_option_boot_noauto (Vojtech Polasek <vpolasek@redhat.com>)
 - remove rhel6 references (Vojtech Polasek <vpolasek@redhat.com>)
 - Refactored interaction with the tested machine. (Matěj Týč
<matyc@redhat.com>)
 - fix typos and wording (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rule for password-auth pam_unix rounds option (Watson Sato
<wsato@redhat.com>)
 - Add rule for system-auth pam_unix rounds option (Watson Sato
<wsato@redhat.com>)
 - add more rules for partitions (Vojtech Polasek <vpolasek@redhat.com>)
 - add new mount_option rules (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove leftovers of BIOS labels. (Gabriel Becker <ggasparb@redhat.com>)
 - Set uefi and non-uefi CPE package mapping to None. (Gabriel Becker
<ggasparb@redhat.com>)
 - Rename bios platform to non-uefi and move non-uefi rules to correct dir.
(Gabriel Becker <ggasparb@redhat.com>)
 - Moved BIOS unrelated rules out of the bios group. (Gabriel Becker
<ggasparb@redhat.com>)
 - Allow parenthesis in no_removeable_media rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Split uefi and bios rules into two separate group. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove RHEL6 content (Gabe <redhatrises@gmail.com>)
 - Add file_permissions_kubelet_conf check to CIS node profile (Matt Rogers
<mrogers@redhat.com>)
 - Deduplicate STIG ID in gnome automount rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ansible remediation for dconf gnome disable mount rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use oval_metadata macro in some dconf gnome rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Escape bracket character in dconf automount rules regexes. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use bash function to install required testing packages. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL7 NCP profile with new rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update RHEL7 STIG profile with new rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Break dconf_gnome_disable_automount down into three separate rules. (Gabriel
Becker <ggasparb@redhat.com>)
 - ocp4/CIS 2.6: Fix description and add check (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/CIS 2.5: Fix descriptions and add checks (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/CIS 2.4: Fix descriptions and add checks (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/CIS 2.2: Fix check and add OVAL (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Set the sshd_set_keepalive rule to set the option to zero. (Matěj Týč
<matyc@redhat.com>)
 - Fixed the sshd_set_idle_timeout rule. (Matej Tyc <matyc@redhat.com>)
 - Fixed documentation for the sshd_lineinfile template. (Matej Tyc
<matyc@redhat.com>)
 - OCP4/CIS 4.1.5: kubelet.conf required permissions are 644 (Matt Rogers
<mrogers@redhat.com>)
 - OCP4/CIS: Add more tests for CIS 4.1 items (Matt Rogers <mrogers@redhat.com>)
 - Add check for the scheduler having its port set to zero (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add check for the scheduler not having the bind address set (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Check for correct file mode for file_permissions_worker_ca (Matt Rogers
<mrogers@redhat.com>)
 - Add tests for CIS 4.1 items (Matt Rogers <mrogers@redhat.com>)
 - Indent correctly parameters of yamlfile_value template documentation.
(Gabriel Becker <ggasparb@redhat.com>)
 - OCP4/CIS 2.3: Fix OCIL statement and add test (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/CIS 2.1: Add check for etcd key rule (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4/CIS 2.1: Fix audit command (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Evaluate default added variable conditionals first (Watson Sato
<wsato@redhat.com>)
 - OCP4/CIS 1.4.1: Remove invalid rule and add reference to actual check (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Update shared/bash_remediation_functions/perform_audit_rules_privileged_comma
nds_remediation.sh (vojtapolasek <krecoun@gmail.com>)
 - fix typos in comments (Vojtech Polasek <vpolasek@redhat.com>)
 - Clean up from OCP rule locations (Gabe <redhatrises@gmail.com>)
 - Remove unused RHEL7 profiles (Gabe <redhatrises@gmail.com>)
 - Point to main webpage of openscap and scap-workbench instead of direct
manuals. (Gabriel Becker <ggasparb@redhat.com>)
 - Added JRE update and clean prev version controls (Carlos Matos
<cmatos@redhat.com>)
 - update tests (Vojtech Polasek <vpolasek@redhat.com>)
 - update ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - update bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - modify bash remediation to better handle rules with perm flag (Vojtech
Polasek <vpolasek@redhat.com>)
 - CIS 1.3.2 Add OCIL and fix yamltemplate (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Add e2e tests for rules in section 1.3 of the CIS benchmark (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add e2e test metadata for OCP rules in CIS 1.1 (Jakub Hrozek
<jhrozek@redhat.com>)
 - ocp4: Add documentation for e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Add manual remediation capabilities to e2e tests (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - CIS 1.1.4: file_owner_kube_controller_manager: Use a wildcard file path for
OVAL and OCIL (Jakub Hrozek <jhrozek@redhat.com>)
 - CIS 1.1.4: file_groupowner_kube_controller_manager: Use a wildcard file patch
for OVAL and OCIL (Jakub Hrozek <jhrozek@redhat.com>)
 - Bump scap-workbench and openscap version in README doc. (Gabriel Becker
<ggasparb@redhat.com>)
 - OCP4: Enhance e2e tests to check individual rules (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - CIS 1.1.3: file_permissions_kube_controller_manager: Fix filepath in OCIL and
description (Jakub Hrozek <jhrozek@redhat.com>)
 - CIS 1.1.2: file_groupowner_kube_apiserver: Use a wildcard file path in OCIL
and template (Jakub Hrozek <jhrozek@redhat.com>)
 - CIS 1.1.2: file_owner_kube_apiserver: Use a wildcard file path in both OCIL
and template (Jakub Hrozek <jhrozek@redhat.com>)
 - utils/build_ds_container.sh: Enable in-cluster builds (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4: Use Fedora 33 for container files (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Specify the applicable OpenShift version for the CIS profiles (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Change Docker images to use Fedora 32 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Updating the stig_overlay.xml file for JRE (Carlos Matos <cmatos@redhat.com>)
 - Adding app-security-dev to stig_ns for JRE updates (Carlos Matos
<cmatos@redhat.com>)
 - Apply suggestions from code review (Carlos Matos <cmatos@redhat.com>)
 - Update jre/guide/java/java_jre_blacklist_check/rule.yml (Carlos Matos
<cmatos@redhat.com>)
 - Added the rest of the new controls - as well as updated other existing
controls (Carlos Matos <cmatos@redhat.com>)
 - Split controller bind-address rule in two (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4: Verify CIS 1.3 section (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update e8 references (shaneboulden <shane.boulden@gmail.com>)
 - Drop ocp3 specific cce and conditional (Jakub Hrozek <jhrozek@redhat.com>)
 - Fix indentation in CIS 1.3.6 (Jakub Hrozek <jhrozek@redhat.com>)
 - Fix warning conflicts in controller_rotate_kubelet_server_certs/rule.yml
(Gabe <redhatrises@gmail.com>)
 - Update applications/openshift/controller/controller_rotate_kubelet_server_cer
ts/rule.yml (Juan Osorio Robles <jaosorior@gmail.com>)
 - created by add_platform_rule.py for CIS 1.3.6 (piggyvenus
<piggyvenus@gmail.com>)
 - revert changes on this file, changes was for my local env (piggyvenus
<piggyvenus@gmail.com>)
 - CIS 1.3.6 (piggyvenus <piggyvenus@gmail.com>)
 - Remove bash remediations from applications/openshift (Jakub Hrozek
<jhrozek@redhat.com>)
 - Remove ansible remediations from openshift (Jakub Hrozek
<jhrozek@redhat.com>)
 - Remove some leftover if product==ocp4 conditionals (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add machine platform for rule kernel_trust_cpu_rng (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add --now option to disable service description. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix wrong indentation. (Gabriel Becker <ggasparb@redhat.com>)
 - ocp4: Use ScanSettingBindings for e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update compliance-operator e2e go module (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Remove OCP3 content (Gabe <redhatrises@gmail.com>)
 - Force services to always use mask operation for disabling. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove disable_prelink rule from rhv4 and sle15 profiles (Matus Marhefka
<mmarhefk@redhat.com>)
 - Added more JRE controls along with updated oval/bash remediations (Carlos
Matos <cmatos@redhat.com>)
 - Adding more changes to Java JRE content (Carlos Matos <cmatos@redhat.com>)
 - fix remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Add simple tests for login.def hashing algorithms (Watson Sato
<wsato@redhat.com>)
 - Parametrize set_password_hashing_algorithm_logindefs (Watson Sato
<wsato@redhat.com>)
 - change rule description (Vojtech Polasek <vpolasek@redhat.com>)
 - fix remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - modify tests (Vojtech Polasek <vpolasek@redhat.com>)
 - Add workround to skip non package CPEs (Watson Sato <wsato@redhat.com>)
 - fix typo in oval (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove disable_prelink rule from profile stability test (Matus Marhefka
<mmarhefk@redhat.com>)
 - Remove disable_prelink rule also from ol8 profiles (Matus Marhefka
<mmarhefk@redhat.com>)
 - As of ansible 2.10, adding 2 more additional container facts as part of the
latest linux virtual_facts (Carlos Matos <cmatos@redhat.com>)
 - Remove disable_prelink rule from Fedora and RHEL8 profiles (Matus Marhefka
<mmarhefk@redhat.com>)
 - Change filter to verify SecurityContexDeny (Rodrigo Alvares
<ralvares@redhat.com>)
 - Minor update to jre oval check (Carlos Matos <cmatos@redhat.com>)
 - fix pep8 long lines (Vojtech Polasek <vpolasek@redhat.com>)
 - add feature to documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - add support for creating of UEFI based machines (Vojtech Polasek
<vpolasek@redhat.com>)
 - Use Fedora specific filepath in UEFI file_permissions rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Refactor rpminfo_state so that all rpminfo tests for valid version (Carlos
Matos <cmatos@redhat.com>)
 - Adjust cis-5.2.9 for recent changes in the yaml probe (Jakub Hrozek
<jhrozek@redhat.com>)
 - CIS 5.2.9 - Add template to check for dropped capabilities (Lokesh Mandvekar
<lsm5@fedoraproject.org>)
 - Adjust cis-5.2.7 for recent changes in the yaml probe (Jakub Hrozek
<jhrozek@redhat.com>)
 - CIS 5.2.7 - Add template to check if NET_RAW or ALL are dropped (Lokesh
Mandvekar <lsm5@fedoraproject.org>)
 - Initial commit of Java JRE 8 draft update (Carlos Matos <cmatos@redhat.com>)
 - Add rule for 5.2.1 (Ade Lee <alee@redhat.com>)
 - Update linux_os/guide/services/ntp/package_chrony_installed/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - Fix typo in the description (Jakub Jelen <jjelen@redhat.com>)
 - Update linux_os/guide/system/bootloader-
grub2/uefi_no_removeable_media/oval/shared.xml (Gabriel Becker
<ggasparb@redhat.com>)
 - fix srgs for new rhel8 stig rules (Vojtech Polasek <vpolasek@redhat.com>)
 - unify rule key for ansible remediation of audit_rules_privileged_commands
(Vojtech Polasek <vpolasek@redhat.com>)
 - Add entity_check for record and for its fields in yamlfile_value template
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Fix typo in templates section from developer guide. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improve template data in file_permissions grub2 rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo in installed_env_has_grub2_package OVAL definition. (Gabriel Becker
<ggasparb@redhat.com>)
 - Create custom OVAL check for uefi_no_removeable_media. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove extra single quote from OVAL macros. (Gabriel Becker
<ggasparb@redhat.com>)
 - align with other rules fixing auditing of privileged commands (Vojtech
Polasek <vpolasek@redhat.com>)
 - remove perm=x from ansible, oval and rule.yaml (Vojtech Polasek
<vpolasek@redhat.com>)
 - OCP4 - CIS 1.1.5 Add check (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4 - CIS 1.1.3 Add check (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OCP4 - CIS 1.1.1 Add check (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update etcd_auto_tls rule for OCP4 CIS 2.3 (Matt Rogers <mrogers@redhat.com>)
 - Implementation of rules api_server_tls_cert api_server_tls_private_key for
cis profile 1.2.30 (Khary Mendez <kharyam@gmail.com>)
 - Rename filepath_regex to filepath_is_regex in file permissions template.
(Gabriel Becker <ggasparb@redhat.com>)
 - Adding rules for OCP4 CIS 1.2.5 (Greg Tinsley <gtinsley@redhat.com>)
 - Add option to enable filepath regex in file permissions template. (Gabriel
Becker <ggasparb@redhat.com>)
 - Implementation of rules api_server_etcd_cert api_server_etcd_key for cis
profile 1.2.29 (Khary Mendez <kharyam@gmail.com>)
 - Adding 1.2.33 control for OCP4 (Greg Tinsley <gtinsley@redhat.com>)
 - Add rule for OCP4 CIS 1.3.2 (Matt Rogers <mrogers@redhat.com>)
 - Add rule to check SCC privilege escalation for CIS OCP4 profile (CIS 5.2.5)
(Nathan Kinder <nkinder@redhat.com>)
 - Add rule to check SCC host network access for CIS OCP4 profile (CIS 5.2.4)
(Nathan Kinder <nkinder@redhat.com>)
 - Add rule to check SCC IPC access for CIS OCP4 profile (CIS 5.2.3) (Nathan
Kinder <nkinder@redhat.com>)
 - Swap OCP4 CIS 5.2.8 and 5.2.9 rules (Nathan Kinder <nkinder@redhat.com>)
 - Update build-scripts/profile_tool.py (Gabriel Becker <ggasparb@redhat.com>)
 - Instruct to run .pyenv.sh if ssg import failed (Watson Sato
<wsato@redhat.com>)
 - Move python shebang to python3 (Watson Sato <wsato@redhat.com>)
 - Print help when subcommand is not provided (Watson Sato <wsato@redhat.com>)
 - OCP4 - CIS 1.2.33 Add ocp4-relevant info (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Add --datastream-only flag to helpers (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - add rule into rhel8 ospp (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Anaconda moved to pykickstart. (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - Update rule descriptions (Khary Mendez <kharyam@gmail.com>)
 - update description to new location of client-ca-file option (Dale Bewley
<dale@bewley.net>)
 - remove dangling comment (Khary Mendez <kharyam@gmail.com>)
 - add etcd-cafile check for ocp4 (Dale Bewley <dale@bewley.net>)
 - Additional rules for cis profile 1.2.4 (Khary Mendez <kharyam@gmail.com>)
 - Additional rules for cis profile 1.2.4 (Khary Mendez <kharyam@gmail.com>)
 - fix typo (Jakub Hrozek <jhrozek@redhat.com>)
 - Rename quick option to datastream-only in build_product. (Gabriel Becker
<ggasparb@redhat.com>)
 - Surround array expansion with double quotes. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add rule for 5.2.2 (Ade Lee <alee@redhat.com>)
 - add client-ca-file check for ocp4 (Dale Bewley <dale@bewley.net>)
 - Fix entity_check location (Watson Sato <wsato@redhat.com>)
 - ocp4: Add check for CIS 1.2.19 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Revert changes and move new rule to the new group openshift-api-server.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update api_server_audit_log_path to use different apiserver conf file.
(Gabriel Becker <ggasparb@redhat.com>)
 - Rename variable in build_product to a more meaningful name. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use array for quick option in build_product. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4: Add check for CIS 1.2.20 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add commented section for OCP4 CIS etcd node checks (Lance Bragstad
<lbragstad@gmail.com>)
 - ocp4/e2e - WORKAROUND: Use suffix to detect scan type (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add key escaping for yamlfile_value macro, fix keys (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Add option quick to build_product script. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4: Add checkf or CIS 1.2.18 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Add check for 1.2.17 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Enhance regex and template data for api_server_kubelet_certificate_authority.
(Gabriel Becker <ggasparb@redhat.com>)
 - rpm_verify_permissions - update shared.sh to handle files managed by more the
one RPM and use --restore rather then --setperms (Ian Tewksbury
<itewk@redhat.com>)
 - Fix rule api_server_admission_control_plugin_SecurityContextDeny for ocp4
(Rodrigo Alvares <ralvares@redhat.com>)
 - cover case when the option is compiled but boot param overrides it (Vojtech
Polasek <vpolasek@redhat.com>)
 - Add documentation for yamlfile_value key (Watson Sato <wsato@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - Fix duplicate CCE assignment (Watson Sato <wsato@redhat.com>)
 - Add kubelet client cert rotation rules for OCP4 CIS profile (CIS 4.2.11)
(Nathan Kinder <nkinder@redhat.com>)
 - Add rule for 4.2.5 (Ade Lee <alee@redhat.com>)
 - Updated rule api_server_service_account_public_key for OCP 4 (Khary Mendez
<kharyam@gmail.com>)
 - Add OCP4 1.3.7 Benchmark (Lance Bragstad <lbragstad@gmail.com>)
 - Add rule for 4.2.7 (Ade Lee <alee@redhat.com>)
 - Use correct values (Khary Mendez <kharyam@gmail.com>)
 - CIS Node 4.2.3 - add template to kubelet_configure_client_ca/rule.yml (Lokesh
Mandvekar <lsm5@fedoraproject.org>)
 - add rule to ocp4/cis profile (Dale Bewley <dale@bewley.net>)
 - Add list of possible values (Watson Sato <wsato@redhat.com>)
 - rm cruft (Dale Bewley <dale@bewley.net>)
 - complete rationale and ocil (Dale Bewley <dale@bewley.net>)
 - ocp4: Add api_server_admission_control_plugin_NamespaceLifecycle rule (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add OCP4 1.3.5 benchmark (Lance Bragstad <lbragstad@gmail.com>)
 - WIP: api_server_kubelet_https rule (Khary Mendez <kharyam@gmail.com>)
 - Add kubelet cert rotation rule for OCP4 CIS profile (CIS 4.1.12) (Nathan
Kinder <nkinder@redhat.com>)
 - ocp4: fix api_server_admission_control_plugin_ServiceAccount rule (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add api_server_auth_mode_node rule to ocp4/cis profile (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Update applications/openshift/api-
server/api_server_admission_control_plugin_AlwaysAdmit/rule.yml (Juan Osorio
Robles <jaosorior@gmail.com>)
 - Add rule for CIS 4.1.9 (Ade Lee <alee@redhat.com>)
 - Revert Webhook authorization_mode back to OCP3 product (Marek Haicman
<mhaicman@redhat.com>)
 - Add CIS 1.2.7 for OCP4 product (Marek Haicman <mhaicman@redhat.com>)
 - Decorate my recently added OCP4 CIS rules with CCE identifiers (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add CCE identifiers for OCP4 CIS 4.1.10 rules (Nathan Kinder
<nkinder@redhat.com>)
 - CIS Node 4.1.6 - Add kubelet.conf ownership scans to OCP4 cis-node.profile
(Lokesh Mandvekar <lsm5@fedoraproject.org>)
 - drop inconsistently supported 'required' flag from argparse add_subparsers
call (Dale Bewley <dale@bewley.net>)
 - Add yamlfile_value template to api_server_kubelet_certificate_authority.
(Gabriel Becker <ggasparb@redhat.com>)
 - testing (Dale Bewley <dale@bewley.net>)
 - Completed an existing ocp4 rule. (Matěj Týč <matyc@redhat.com>)
 - CIS OCP4 benchmark: 1.3.3 (Matt Rogers <mrogers@redhat.com>)
 - Add rules for worker node kubeconfig ownership to CIS OCP4 profile (CIS
4.1.10) (Nathan Kinder <nkinder@localhost.localdomain>)
 - ocp4: Fix api_server_admission_control_plugin_AlwaysAdmit rule (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add rule for CIS 4.1.9 (Ade Lee <alee@redhat.com>)
 - Add CCEs for ocp4 cis-node 4.1.8 (Watson Sato <wsato@redhat.com>)
 - Select rules for ocp4 cis-node 4.1.8 (Watson Sato <wsato@redhat.com>)
 - Fix rule api_server_token_auth for ocp4 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - e2e/ocp4: Display more verbose logs for e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - remove package_tuned_removed from rhel8 ospp (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rule to profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add ospp reference (Vojtech Polasek <vpolasek@redhat.com>)
 - Fixed the referenced check ID. (Matěj Týč <matyc@redhat.com>)
 - Update prodtypes of rules that have their OVAL reused. (Matěj Týč
<matyc@redhat.com>)
 - add rule to profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule and oval (Vojtech Polasek <vpolasek@redhat.com>)
 - docs: add missing commas to fix typos in "references" section (Takuya Mishina
<tmishina@jp.ibm.com>)
 - Improve the description of ocp_allowed_registries tests (Jakub Hrozek
<jhrozek@redhat.com>)
 - Improve Bash machine platform check (Watson Sato <wsato@redhat.com>)
 - Make sure aide_build_database scenarios do not fail when database doesn't
exist (Matus Marhefka <mmarhefk@redhat.com>)
 - Add example rules for section 4.2 of the ocp4 CIS benchmark (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add example rules for cis-node profile section 4.1 (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add some more example ocp4 cis profile rules (Jakub Hrozek
<jhrozek@redhat.com>)
 - update profile stability test (Vojtech Polasek <vpolasek@redhat.com>)
 - update ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - updated ospp references (Vojtech Polasek <vpolasek@redhat.com>)
 - Convert rule file_owner_worker_service to work with ocp4 (Jakub Hrozek
<jhrozek@redhat.com>)
 - add_platform_rule: Set the platform explicitly, too (Jakub Hrozek
<jhrozek@redhat.com>)
 - ocp4: Set platform explicitly for ocp4 profiles (Jakub Hrozek
<jhrozek@redhat.com>)
 - Include the ocp4-node cpe in the ocp4 cpe dictionary mapping (Watson Sato
<wsato@redhat.com>)
 - Introduce ability to set check_existence to yaml template (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Do not platform wrap empty Bash remediation (Watson Sato <wsato@redhat.com>)
 - Require oscap 1.3.4 for ocp4 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - add_platform_rule.py: Use the newer openscap release (Jakub Hrozek
<jhrozek@redhat.com>)
 - utils/add_platform_rule: Fix created rule identation (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4: Mark cis-node with documentation_complete (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add sample profile for ocp4-node product (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add support for adding "platform" to Profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - add ocp4-node product (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Adopt changes in yamlfilecontent_* check for yamlfile_value template (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - fix references (Vojtech Polasek <vpolasek@redhat.com>)
 - update profile stability test (Vojtech Polasek <vpolasek@redhat.com>)
 - Revert "remove rsyslog rules from ospp" (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove SLE11 (Gabe <redhatrises@gmail.com>)
 - Set the OVAL ID of templated OVALs to the rule ID (Matěj Týč
<matyc@redhat.com>)
 - OCP: Remove jinja references to ocp4 in ocp3 OVAL files (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Remove platform net-snmp from the group and use it in individual rules.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove occurrences of Debian 8 from the new product example page. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove occurrences of debian8 and ubuntu1404 from build_product. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add ism references (shaneboulden <shane.boulden@gmail.com>)
 - Remove Ubuntu 14.04 (Gabe <redhatrises@gmail.com>)
 - OCP4: Mark CIS profile as documentation complete (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - OpenShift: Move all OVAL to be ocp3 specific (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Don't fail on transcient error (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: fix basic-auth check (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - remove rngd related rules from rhcos profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/build_ds_container: Fix creating profilebundles (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - kube: Replace explicit kernel argument remediations for template (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Change rhcos4 kernel argument checks to use coreos-specific checks (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Small fixes for *argument_value_in_line* macros and better 'escape_id'
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Rename *argument_in_file* macros to *argument_value_in_line* (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - remove rngd related rules from rhel8 ospp and stig (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove package_iptables_installed from rhel8 ospp and stig (Vojtech Polasek
<vpolasek@redhat.com>)
 - Craft exclusive OVAL check for RHEL6 package_rsyslog_installed. (Gabriel
Becker <ggasparb@redhat.com>)
 - Removed profile metadata from sysctl rules that are not parametrized. (Matěj
Týč <matyc@redhat.com>)
 - Handle exception of grub2-coomon in ppc64le (Watson Sato <wsato@redhat.com>)
 - Check for grub2-common instead of grub2-pc (Watson Sato <wsato@redhat.com>)
 - Fix regex in aide rules to consider first letter as uppercase. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove profiles metadata from test scenarios of sysctl rules (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add CentOS8 test GPG key in ensure_redhat_gpgkey_installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Adds a BuildConfig for OpenShift (Jakub Hrozek <jhrozek@redhat.com>)
 - Remove severity refinement from profile and change on a rule level. (Gabriel
Becker <ggasparb@redhat.com>)
 - Revert to previous severity since what's in the STIG takes precedence.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fixed indentation. (Matěj Týč <matyc@redhat.com>)
 - SSGTS combined mode: use all profile where applicable (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix test scenarios for aide_periodic_cron_checking rule (Matus Marhefka
<mmarhefk@redhat.com>)
 - utils/add_platform_rule: Add support for writing rules in groups (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Enhance output of utils/add_platform_rule's create command (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - utils/add_platform_rule: Up timeout for scan to two minutes (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Remove profile metadata for auditd_data_retention_space_left_action (Matus
Marhefka <mmarhefk@redhat.com>)
 - utils/add_platform_rule: Take groups into account (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/build_ds_container: Remove rhel7 from default products built (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - utils/add_platform_rule: Reduce default products built (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - utils/build_ds_container: Allow specifying product to build (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - utils/build_ds_container.sh: Document -d option (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/add_platform_rule: Enhance output of cluster-test subcommand (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - utils/add_platform_rule: Move OCP validations to decorators (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - utils/add_platform_rule: Fix undefined variable (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/add_platform_rule: Change mock OCP version (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - utils/add_platform_rule: Change case for YAML boolean (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - utils/add_platform_rule: Do env check after parsing params (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Remove Debian8 (Gabe <redhatrises@gmail.com>)
 - Use rsyslog7 package name in RHEL6 package_rsyslog_installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Propagated rule mode refactoring to the combined mode. (Matěj Týč
<matyc@redhat.com>)
 - Remove profile metadata for auditd_data_retention_num_logs (Matus Marhefka
<mmarhefk@redhat.com>)
 - Remove profile metadata for auditd_data_retention_max_log_file_action (Matus
Marhefka <mmarhefk@redhat.com>)
 - Remove profile metadata for auditd_data_retention_max_log_file (Matus
Marhefka <mmarhefk@redhat.com>)
 - Remove profile metadata for auditd_data_retention_admin_space_left_action
(Matus Marhefka <mmarhefk@redhat.com>)
 - Redesigned platform detection. (Matěj Týč <matyc@redhat.com>)
 - Remove profile metadata for auditd_data_retention_action_mail_acct (Matus
Marhefka <mmarhefk@redhat.com>)
 - ocp4/utils: specify the namespace when creating the profilebundles (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Remove profile metadata for account_disable_post_pw_expiration (Matus
Marhefka <mmarhefk@redhat.com>)
 - OCP: Fix typo in ProfileBundle definition (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Remove profile metadata for accounts_passwords_pam_faillock_deny (Matus
Marhefka <mmarhefk@redhat.com>)
 - remove deprecated Follow argument from ansible remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - Converted explicit package installs to package metadata. (Matěj Týč
<matyc@redhat.com>)
 - Ported a couple of the scenarios to the new metadata. (Matěj Týč
<matyc@redhat.com>)
 - Implemented packages: metadata. (Matěj Týč <matyc@redhat.com>)
 - Refactored sending of files to test systems. (Matěj Týč
<matyc@redhat.com>)
 - Fix, improve and document oval_argument_in_file* macros (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Refine banner_regixify (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Remove redundant rule_id argument from oval_file_absent* macros (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Introduce 'oval_argument_in_file_criterion', 'oval_argument_in_file_test' and
high-level 'oval_argument_in_file' macros (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Introduce 'escape_id' and 'escape_regex' functions to ssg/utils.py, and use
it as custom Jinja filter and across the code for ID sanitizing and regular
expression escaping unification. (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Move 'bash_sssd_ldap_config' macros from macros-oval.jinja to macros-
bash.jinja (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update test scenarios for sysctl_net_ipv4_conf_default_secure_redirects rule
(Matus Marhefka <mmarhefk@redhat.com>)
 - Update test scenarios for sshd_rekey_limit rule (Matus Marhefka
<mmarhefk@redhat.com>)
 - Update test scenarios for sshd_use_approved_ciphers rule (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add test to check for duplicated STIG ids. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove platform all from kubernetes remediation templates. (Gabriel Becker
<ggasparb@redhat.com>)
 - utils/build_ds_container.sh: Check for content build errors (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Update shared.xml (Jessicahfy <Jessicahfy@users.noreply.github.com>)
 - Update ANSSI refs (Gabe <redhatrises@gmail.com>)
 - Update create-stig-overlay to pretty print the XML content. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix zIPL package mapping (Watson Sato <wsato@redhat.com>)
 - Move grub2_vsyscall_argument to grub2 group (Watson Sato <wsato@redhat.com>)
 - Added scenarios to accounts_umask_etc_login_defs (Matěj Týč
<matyc@redhat.com>)
 - Removed profile from test metadata where not needed. (Matěj Týč
<matyc@redhat.com>)
 - Add placeholders for CIS profile checks in ocp4 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix test scenario for snmpd_not_default_password. (Gabriel Becker
<ggasparb@redhat.com>)
 - Tolerate trancient errors when waiting for MCP (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update ocp4 e2e test dependencies (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - remove deprecated sshd config from hipaa profiles (shaneboulden
<shane.boulden@gmail.com>)
 - remove deprecated sshd config from e8 profiles (shaneboulden
<shane.boulden@gmail.com>)
 - SSGTS: do not run remediation stage when rule result is notapplicable (Matus
Marhefka <mmarhefk@redhat.com>)
 - SSGTS: assert notapplicable rule results as warnings (Matus Marhefka
<mmarhefk@redhat.com>)
 - SSGTS: update combined mode to skip not applicable scenarios (Matus Marhefka
<mmarhefk@redhat.com>)
 - update upstream release documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - Add net-snmp CPE entry to detect if package is installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix snmpd_not_default_password ansible remediation when file doesn't exist.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update documentation of additional_content_directories keyword. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove JBoss EAP6 (Gabe <redhatrises@gmail.com>)
 - Update shared.xml (Jessicahfy <Jessicahfy@users.noreply.github.com>)
 - change jinja conditional to prodtype (Vojtech Polasek <vpolasek@redhat.com>)
 - add conditional conflict only for rhel and ol (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove conflict keyword (Vojtech Polasek <vpolasek@redhat.com>)
 - make rule templated (Vojtech Polasek <vpolasek@redhat.com>)
 - modify install_mcafee_hbss_hips (Vojtech Polasek <vpolasek@redhat.com>)
 - add require directive (Vojtech Polasek <vpolasek@redhat.com>)
 - reword (vojtapolasek <krecoun@gmail.com>)
 - update description stressing that value of 0 should be configured (Vojtech
Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - add warning to sshd_set_idle_timeout (Vojtech Polasek <vpolasek@redhat.com>)
 - change jinja macro used (Vojtech Polasek <vpolasek@redhat.com>)
 - use xccdf variable in the rule.yml (Vojtech Polasek <vpolasek@redhat.com>)
 - Use oval_metadata macro and update text of rule
sssd_ldap_configure_tls_reqcert. (Gabriel Becker <ggasparb@redhat.com>)
 - Introduce new rule sssd_ldap_configure_tls_reqcert. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ansible remediation for dconf gnome rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Revert severity of some rules and refine on a profile basis. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix severity of RHEL 7 STIG rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Add grub2 cpe entry to rhcos4 cpe dicitionary. (Gabriel Becker
<ggasparb@redhat.com>)
 - Throw warning when ocp4 and rhcos4 content fail on scapval. (Gabriel Becker
<ggasparb@redhat.com>)
 - Check CCEs also on RHEL 9 (Jan Černý <jcerny@redhat.com>)
 - Remove zIPL rule for PTI bootloader option (Watson Sato <wsato@redhat.com>)
 - Fix Python 2.6 compatibility (Jan Černý <jcerny@redhat.com>)
 - Bump version to 0.1.53 (Vojtech Polasek <vpolasek@redhat.com>)
 - Add a test for missing CCEs (Jan Černý <jcerny@redhat.com>)
 - Escape xml unsafe character in profile references (Watson Sato
<wsato@redhat.com>)
 - Update CIS references (Watson Sato <wsato@redhat.com>)
 - Add SME to OSPP profile (Watson Sato <wsato@redhat.com>)
 - Add profile metadata to Public Sector profiles (Watson Sato
<wsato@redhat.com>)
 - Fix typo in doc (Watson Sato <wsato@redhat.com>)
 - Add metadata to HIPAA profiles (Watson Sato <wsato@redhat.com>)
 - Add metadata to CIS profiles (Watson Sato <wsato@redhat.com>)
 - Add metadata to E8 and ISM profiles (Watson Sato <wsato@redhat.com>)
 - Add profile NIST moderate profile metadata (Watson Sato <wsato@redhat.com>)
 - Carve out reference from profile metadata (Watson Sato <wsato@redhat.com>)
 - Fix Essential Eight reference (Watson Sato <wsato@redhat.com>)
 - Export the Profile metadata reference to XML (Watson Sato <wsato@redhat.com>)
 - Fix error in exception message (Watson Sato <wsato@redhat.com>)
 - Change profile maintainer for SME (Watson Sato <wsato@redhat.com>)
 - Update Profile selection field description (Watson Yuuma Sato
<wsato@redhat.com>)
 - Update field names in docs as well (Watson Sato <wsato@redhat.com>)
 - Fix RHCOS4 moderate profile reference (Watson Sato <wsato@redhat.com>)
 - Extend the descripton of maintainers field (Watson Sato <wsato@redhat.com>)
 - Update field names (Watson Sato <wsato@redhat.com>)
 - Document the Profile YAML file (Watson Sato <wsato@redhat.com>)
 - Add metadata to a few profiles (Watson Sato <wsato@redhat.com>)
 - Remove 'policy' key from the profile before build (Watson Sato
<wsato@redhat.com>)
 - Update DISA STIG RHEL7 reference files to latest version (v2r8). (Gabriel
Becker <ggasparb@redhat.com>)
 - The pigz package was prohibited on RHEL-8.1 because of bug 1624161. (Matěj
Týč <matyc@redhat.com>)
 - Fix missing CCE in rules selected by RHEL6 profiles. (Gabriel Becker
<ggasparb@redhat.com>)
 - update contributors (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix PCRE_ERROR_MATCHLIMIT in PASS_MAX_DAYS (Watson Sato <wsato@redhat.com>)
 - Force shutdown of VM if it cannot be shutdown gracefully. (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix deploy_compliance_operator.sh script (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Add option to create profile bundles for the build_ds_container.sh
script (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Fix SRG mapping. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove esc required package from install_smartcard_packages. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4: Enhance build_ds_container.sh script with parmeter parsing (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4 utils: Create ImageStream with local lookup policy (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Remove extra ocil statement from service_cockpit_disabled. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove rhel8 COPY statement from ocp4_content and quay_publish Dockerfiles
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Fix text according to review feedback (Matěj Týč <matej.tyc@gmail.com>)
 - Change OCP4 (RHCOS) audit=1 kernel option rule to check only the latest boot
entry (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Remove accounts_user_interactive_home_directory_defined from RHEL7 STIG.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update accounts_tmout rule with regards to latest RHEL7 STIG revision.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update text of rule account_disable_post_pw_expiration. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix description typo (Matěj Týč <matej.tyc@gmail.com>)
 - Fix regex pattern in jinja macros for sudo related rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Change package_dhcp_removed RHEL8 CCE to avoid duplicited CCE (Milan Lysonek
<mlysonek@redhat.com>)
 - Use resolved profiles in rule playbooks (Jan Černý <jcerny@redhat.com>)
 - Add missing RHEL8 CCEs (Milan Lysonek <mlysonek@redhat.com>)
 - OCP4: Turn off documentation complete for CIS profile (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Fix wrong type of var_tftpd_secure_directory in tftpd_uses_secure_mode rule
(Milan Lysonek <mlysonek@redhat.com>)
 - Apply fixes suggested by the code review (Matěj Týč <matej.tyc@gmail.com>)
 - Adapt testoval to jinja macros. (Matěj Týč <matyc@redhat.com>)
 - Added a newline to the oval_metadata macro. (Matěj Týč <matyc@redhat.com>)
 - Add key fingerprints to rhcos4 product. (Matěj Týč <matyc@redhat.com>)
 - Remove the OVAL boilerplate in favor of the oval_metadata macro. (Matěj
Týč <matyc@redhat.com>)
 - Replaced XCCDF value instantiation in Ansible by a macro call. (Matěj Týč
<matyc@redhat.com>)
 - Replaced XCCDF value instantiation in Bash by a macro call. (Matěj Týč
<matyc@redhat.com>)
 - Replace XCCDF value substitution code by a macro. (Matěj Týč
<matyc@redhat.com>)
 - Migrate MachineConfigs to use ignition 3.1.0 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - remove forgotten commented lines (Vojtech Polasek <vpolasek@redhat.com>)
 - add ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - change wrong srg (Vojtech Polasek <vpolasek@redhat.com>)
 - remove package_screen_installed from rhel7 stig (Vojtech Polasek
<vpolasek@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Document the perils of indenting wrapped Bash fixes (Watson Sato
<wsato@redhat.com>)
 - Fix python2 compat and improve code readability (Watson Sato
<wsato@redhat.com>)
 - Check if remediation has associated rule before use (Watson Sato
<wsato@redhat.com>)
 - Handle Bash platform wrapping in xccdf expansion (Watson Sato
<wsato@redhat.com>)
 - Align Bash applicability with CPE platform (Watson Sato <wsato@redhat.com>)
 - Create bash and ansible macro for sudo related rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add bash remediation for sudo_remove_nopasswd. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add ansible remediation for sudo_remove_nopasswd. (Gabriel Becker
<ggasparb@redhat.com>)
 - add bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix SRG mapping of audit rules. (Gabriel Becker <ggasparb@redhat.com>)
 - Set a lower bound value for accounts_passwords_pam_faillock_deny check.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix ocp datastream build configuration (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Use ansible find module in accounts_max_concurrent_login_sessions. (Gabriel
Becker <ggasparb@redhat.com>)
 - rename variable (Vojtech Polasek <vpolasek@redhat.com>)
 - add variables (Vojtech Polasek <vpolasek@redhat.com>)
 - ocp4/e2e: Remove waitForNodesToBeReady function (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix ansible remediation of accounts_max_concurrent_login_sessions. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove rhel8 from OCP container iamges (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Improved descriptions based on code review (Matěj Týč
<matej.tyc@gmail.com>)
 - Implement quasi-applicability check to the ini file bash remediation. (Matěj
Týč <matyc@redhat.com>)
 - Update rule description. (Matěj Týč <matej.tyc@gmail.com>)
 - Add Bash and Ansible remediations as Jinja macros. (Matěj Týč
<matyc@redhat.com>)
 - Introduced rule to disable XDMCP in gdm. (Matěj Týč <matyc@redhat.com>)
 - Fix load of product platform mapping (Watson Sato <wsato@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix bash remediation for rule accounts_no_uid_except_zero. (Gabriel Becker
<ggasparb@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - update bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - update oval (Vojtech Polasek <vpolasek@redhat.com>)
 - introduce variable (Vojtech Polasek <vpolasek@redhat.com>)
 - Add sssd-ldap platform to sssd_ldap_configure_tls_ca. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix sssd ldap test scenarios. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix typos (Jan Černý <jcerny@redhat.com>)
 - Exempted the audit_delete_success from remediation syntax checks. (Matěj
Týč <matyc@redhat.com>)
 - Converted kube remediation to use the macro. (Matěj Týč
<matyc@redhat.com>)
 - tests/ocp4e2e: Wait for MCP to update (Jakub Hrozek <jhrozek@redhat.com>)
 - Do not create sssd.conf file when remediating sssd ldap rules. (Gabriel
Becker <ggasparb@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - update severity, fix ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - Use lower case in value for sssd_ldap_start_tls rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Install required sssd package in sssd ldap test scenarios. (Gabriel Becker
<ggasparb@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - make oval regex stricter (Vojtech Polasek <vpolasek@redhat.com>)
 - Allow override of default platform package mapping (Watson Sato
<wsato@redhat.com>)
 - Move platform to cpe mappings to ssg/constants (Watson Sato
<wsato@redhat.com>)
 - Introduce platform_package_overrides (Watson Sato <wsato@redhat.com>)
 - NT28 is now BP28 (Gabe <redhatrises@gmail.com>)
 - Add ANSSI BP28 Profiles (Gabe <redhatrises@gmail.com>)
 - remove srgs (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove duplicated test scenario from sssd_ldap_start_tls. (Gabriel Becker
<ggasparb@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - update ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix typo in SLES12 STIG ID reference. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix bash remediation for rule sssd_ldap_configure_tls_ca_dir. (Gabriel Becker
<ggasparb@redhat.com>)
 - add CUI kickstart for rhel8 (Vojtech Polasek <vpolasek@redhat.com>)
 - Minor ansible changes that fix failing rules after remediations (Carlos Matos
<cmatos@redhat.com>)
 - Fix RHEL7 STIG ID for rule sssd_ldap_configure_tls_ca_dir. (Gabriel Becker
<ggasparb@redhat.com>)
 - Create bash and ansible jinja macros for sssd ldap rules. (Gabriel Becker
<ggasparb@redhat.com>)
 - Introduce a new CPE to test if SSSD is configure to use LDAP. (Gabriel Becker
<ggasparb@redhat.com>)
 - change platform of some tests to fedora (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update text of rule sssd_ldap_start_tls. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update sssd_ldap_start_tls OVAL, bash and ansible remediations. (Gabriel
Becker <ggasparb@redhat.com>)
 - Revert back OVAL check for sshd_disable_compression to use xccdf variable.
(Gabriel Becker <ggasparb@redhat.com>)
 - Code style and grammar changes (Watson Sato <wsato@redhat.com>)
 - Improve inherihted and rule's platforms handling (Watson Sato
<wsato@redhat.com>)
 - Add ansible remediation for sshd_use_priv_separation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add Fedora product to security_patches_up_to_date rule.yml (Milan Lysonek
<mlysonek@redhat.com>)
 - Align Fedora PCI DSS profile with RHEL8 PCI DSS profile (Milan Lysonek
<mlysonek@redhat.com>)
 - Fix ocp4 e2e tests (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Fix compliance-operator installation (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add when clauses for inherited platforms too (Watson Sato <wsato@redhat.com>)
 - Add inherited_platform to Rule (Watson Sato <wsato@redhat.com>)
 - Align Ansible task applicability with CPE platform (Watson Sato
<wsato@redhat.com>)
 - Update sshd_disable_compression rule to use variable in ansible fix. (Gabriel
Becker <ggasparb@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - fix regex in oval check (Vojtech Polasek <vpolasek@redhat.com>)
 - unify bash remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - Select sshd_disable_user_known_hosts in RHEL7 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo in rationale. (Gabriel Becker <ggasparb@redhat.com>)
 - Remove Fedora platform from tests working with FIPS:OSPP crypto policy (Milan
Lysonek <mlysonek@redhat.com>)
 - Select sshd_disable_rhosts in RHEL7 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add Fedora product to package_bind_removed rule prodtype (Milan Lysonek
<mlysonek@redhat.com>)
 - Set sshd_do_not_permit_user_env to pass even with missing parameter. (Gabriel
Becker <ggasparb@redhat.com>)
 - remove redundant remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - fix ocil and description (Vojtech Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/system/network/network_sniffer_disabled/rule.yml
(vojtapolasek <krecoun@gmail.com>)
 - Check sssd conf.d files and fix bash remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Updating when clause to prevent issue with tasks not being applied on vm's
(Carlos Matos <cmatos@redhat.com>)
 - Labelled tests that are quick to pass with a quick label. (Matěj Týč
<matyc@redhat.com>)
 - Extended build_product, so it can build all products easily. (Matěj Týč
<matyc@redhat.com>)
 - Update sle15 product with specific package names and permissions. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update RHEL7 STIG id for grub2_uefi_password to match RHEL >= 7.2. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update RHEL7 STIG id to match with item applicable for RHEL >= 7.2. (Gabriel
Becker <ggasparb@redhat.com>)
 - Added SRG to configure_ssh_crypto_policy (Matěj Týč <matyc@redhat.com>)
 - ocp4/e2e: Up timeout when waiting for nodes to be ready (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add a missing Crypto Policy rule to OSPP. (Matěj Týč <matyc@redhat.com>)
 - ocp4/e2e test: Take into account if node is unschedulable (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Fix comments and clarify language (Watson Sato <wsato@redhat.com>)
 - Remove SCAP-1.3 SCAPVAL workarounds (Watson Sato <wsato@redhat.com>)
 - Fix descripton of OVAL check (Watson Sato <wsato@redhat.com>)
 - Ensure unlock_time values are evaluated individually (Watson Sato
<wsato@redhat.com>)
 - unlock_time: Update check to cover string never (Watson Sato
<wsato@redhat.com>)
 - Add tests for unlock_time never (Watson Sato <wsato@redhat.com>)
 - Standardize naming of the objects (Watson Sato <wsato@redhat.com>)
 - Unify unlock_time state based on the var (Watson Sato <wsato@redhat.com>)
 - Capture anything after unlock_time (Watson Sato <wsato@redhat.com>)
 - Fix unlock_time check logic (Watson Sato <wsato@redhat.com>)
 - Add tests for faillock unlock_time (Watson Sato <wsato@redhat.com>)
 - modify severity (Vojtech Polasek <vpolasek@redhat.com>)
 - remove nonexisting srgs (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - update ocil per stig (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests to audit_rules_kernel_module_loading_finit (Vojtech Polasek
<vpolasek@redhat.com>)
 - remov nonexistent srg (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests to audit_rules_usergroup_modifications_passwd (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix minor description issue in dconf_gnome_login_banner_text. (Gabriel Becker
<ggasparb@redhat.com>)
 - Introduced a macro for the whole OVAL metadata section. (Matěj Týč
<matyc@redhat.com>)
 - Select dconf_gnome_login_banner_text in RHEL7 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update remediations and OVAL check for dconf_gnome_disable_ctrlaltdel_reboot.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update shared.sh (Matěj Týč <matej.tyc@gmail.com>)
 - remove prodtype from audit_rules_media_export (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove extra zero on SRG ref mapping from kernel_module_dccp_disabled.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add RHEL7 STIG ID to sysctl_net_ipv4_conf_default_rp_filter. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add RHEL7 STIG ID to sysctl_net_ipv4_conf_all_rp_filter. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove duplicated STIG ID entry in libreswan_approved_tunnels. (Gabriel
Becker <ggasparb@redhat.com>)
 - Select uefi_no_removeable_media on RHEL7 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA STIG references for uefi_no_removeable_media. (Gabriel Becker
<ggasparb@redhat.com>)
 - add missing rule to profile (Vojtech Polasek <vpolasek@redhat.com>)
 - make audit_rules_media_export templated (Vojtech Polasek
<vpolasek@redhat.com>)
 - change title of oval to ease templating (Vojtech Polasek
<vpolasek@redhat.com>)
 - add references to audit_rules_privileged_commands_mount (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix descriptions in batch (Vojtech Polasek <vpolasek@redhat.com>)
 - change threat to threats it sounds better (Vojtech Polasek
<vpolasek@redhat.com>)
 - add relax-and-recover to e8 profiles (shaneboulden <shane.boulden@gmail.com>)
 - initial support for relax-and-recover (shaneboulden
<shane.boulden@gmail.com>)
 - fix wrong file paths to binaries in descriptions (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix typo and allign description with remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add Fedora platform to accounts_have_homedir_login_defs rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA CCI for rpm_verify_hashes. (Gabriel Becker <ggasparb@redhat.com>)
 - add tests which test this template (Vojtech Polasek <vpolasek@redhat.com>)
 - remove redundant task (Vojtech Polasek <vpolasek@redhat.com>)
 - remove redundant white spaces (Vojtech Polasek <vpolasek@redhat.com>)
 - Updated centos6 to 8 since that's the only docker file in the directory now
(Carlos Matos <cmatos@redhat.com>)
 - Simplified find invocation (Matěj Týč <matej.tyc@gmail.com>)
 - Revert "Remove wrong CCI number from no_files_unowned_by_user." (Gabriel
Becker <ggasparb@redhat.com>)
 - Revert "Remove wrong CCI number from file_permissions_ungroupowned." (Gabriel
Becker <ggasparb@redhat.com>)
 - Update OVAL check and remediation for aide_use_fips_hashes. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update shared.sh (Matěj Týč <matyc@redhat.com>)
 - Use helper functions to install dconf and gdm. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add Fedora platform to bash remediation in
dconf_gnome_screensaver_idle_activation_locked. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add ansible remediation for dconf_gnome_screensaver_idle_activation_locked
(Gabriel Becker <ggasparb@redhat.com>)
 - Add ansible remediation for accounts_have_homedir_login_defs. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update platforms applicability for accounts_have_homedir_login_defs. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add RHEL8 CCE identifier for accounts_have_homedir_login_defs. (Gabriel
Becker <ggasparb@redhat.com>)
 - Use helper functions to install dconf and gdm. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix syntax in OCIL checking command for
accounts_user_dot_no_world_writable_programs. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo in OCIL checking command for file_groupownership_home_directories.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove wrong CCI number from file_permissions_ungroupowned. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove wrong CCI number from no_files_unowned_by_user. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update kernel_module_disabled template to add modules into exclude list.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix typo in grub password rules. (Gabriel Becker <ggasparb@redhat.com>)
 - remove srg mapping (Vojtech Polasek <vpolasek@redhat.com>)
 - Add RHEL8 CCE for dconf_gnome_screensaver_idle_activation_locked. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add ansible remediation for dconf_gnome_screensaver_lock_locked. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update dconf_db_up_to_date to check for gdm.d in RHEL8. (Gabriel Becker
<ggasparb@redhat.com>)
 - update wording for rhel8 profile (Vojtech Polasek <vpolasek@redhat.com>)
 - update wording for rhel7 profile (Vojtech Polasek <vpolasek@redhat.com>)
 - modify rest of templated rules (Vojtech Polasek <vpolasek@redhat.com>)
 - modified one sample rule including tests (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove perm=x from templates (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove CCE from shorthand and remediations (Gabe <redhatrises@gmail.com>)
 - Update test for correct references (Gabe <redhatrises@gmail.com>)
 - Update VSEL refs (Gabe <redhatrises@gmail.com>)
 - Remove duplicate disa line in service_auditd_enabled (Gabe
<redhatrises@gmail.com>)
 - Update apple idents and refs (Gabe <redhatrises@gmail.com>)
 - Fix typo (Gabe <redhatrises@gmail.com>)
 - Update references and idents in other applications (Gabe
<redhatrises@gmail.com>)
 - -Update applications references (Gabe <redhatrises@gmail.com>)
 - Update STIGID, CCE, and CCI to match the remaining references (Gabe
<redhatrises@gmail.com>)
 - Update STIGID, CCE, and CCI to match the remaining references (Gabe
<redhatrises@gmail.com>)
 - Fix wrong STIG IDs and STIG product mapping (Gabe <redhatrises@gmail.com>)
 - Use full CCE idents and get rid of ident boilerplate code (Gabe
<redhatrises@gmail.com>)
 - Use full CCI and STIG identifiers (Gabe <redhatrises@gmail.com>)
 - Change the location of generated mapping. (Matěj Týč
<matej.tyc@gmail.com>)
 - allign variable options with real options described in man page (Vojtech
Polasek <vpolasek@redhat.com>)
 - improvements using jinja variables (Vojtech Polasek <vpolasek@redhat.com>)
 - remove redundand blank lines (Vojtech Polasek <vpolasek@redhat.com>)
 - extract file path as a variable (Vojtech Polasek <vpolasek@redhat.com>)
 - add xccdf variable into ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - Add grub2 platform to grub2 kernel option rules (Watson Sato
<wsato@redhat.com>)
 - remove profile metadata from tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - update affected products in oval (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove --noconfig option from rpm_verify_hashes rule text in RHEL6. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add documentation on why is RHEL6 ansible remediation disabled for
rpm_verify_hashes. (Gabriel Becker <ggasparb@redhat.com>)
 - Github Actions to build Ansible Roles and validate them (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Remove RHEL6 from rpm_verify_hashes since it's not compatible. (Gabriel
Becker <ggasparb@redhat.com>)
 - Do not use --noconfig RPM option on RHEL6. (Gabriel Becker
<ggasparb@redhat.com>)
 - Introduced a minimal reference-rule mapping generator. (Matěj Týč
<matyc@redhat.com>)
 - Add RHEL8 CCE to install_antivirus. (Gabriel Becker <ggasparb@redhat.com>)
 - Update OVAL and Bash from aide_verify_ext_attributes to support mixed cases.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add RHEL CCE identifier for aide_verify_ext_attributes. (Gabriel Becker
<ggasparb@redhat.com>)
 - bump version to 0.1.52 (Vojtech Polasek <vpolasek@redhat.com>)
 - update contributors for 0.1.51 (Vojtech Polasek <vpolasek@redhat.com>)
 - Update aide_verify_acls OVAL and bash to consider all cases. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add RHEL8 CCE identifier for aide_verify_acls. (Gabriel Becker
<ggasparb@redhat.com>)
 - Rules that force specific authentication implement the implicitly satisfied
FIA_UAU.1, not FIA_AFL.1 which deals with authentication failures. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - The rules enable expected seeding, not handling of authentication failures.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - The problem with Kerberos and OSPP is in the trusted channel requirement not
allowing it, not in handling authentication failures. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Update rpm_verify_hashes according STIG RHEL7 v2r7. (Gabriel Becker
<ggasparb@redhat.com>)
 - The problem with Kerberos and OSPP is in the trusted channel requirement not
allowing it, not really in the crypto. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Reference relevant OSPP requirements that depend on correct crypto-policy
selection via var_system_crypto_policy. (Jan Pazdziora <jpazdziora@redhat.com>)
 - The OSPP requirements for cryptographically verifying the integrity of
updates are FPT_TUD_EXT.1.2 and FPT_TUD_EXT.2.2. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - The CC/OSPP requirement for handling authentication failures is FIA_AFL.1.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - The CC/OSPP requirement for the TOE access banner is FTA_TAB.1. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - update rule references (Vojtech Polasek <vpolasek@redhat.com>)
 - fix typos (vojtapolasek <krecoun@gmail.com>)
 - fix for another variable (Vojtech Polasek <vpolasek@redhat.com>)
 - Update file_regex template attribute documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add double quotes in bash for statements. (Gabriel Becker
<ggasparb@redhat.com>)
 - fix ansible remediation for zipl_bootmap_is_up_to_date (Vojtech Polasek
<vpolasek@redhat.com>)
 - Encode special characters in ansible role's description (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Minor grammar fixes to README (Carlos
<64919342+carlosmmatos@users.noreply.github.com>)
 - Fix SCAPVAL error SRC-15 (Jan Černý <jcerny@redhat.com>)
 - Use ResolvableProfile class (Jan Černý <jcerny@redhat.com>)
 - Move ResolvableProfile class to the same file as its parent class (Jan
Černý <jcerny@redhat.com>)
 - Enabled support for both podman2 in the ssg test suite. (Matěj Týč
<matyc@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - update references (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove listing functions from yaml_to_shorthand.py (Jan Černý
<jcerny@redhat.com>)
 - zipl_bls_entries_option: Supress grep error messages (Watson Sato
<wsato@redhat.com>)
 - Update file_groupowner and file_owner template to better support file regex.
(Gabriel Becker <ggasparb@redhat.com>)
 - Reenable bash remediation for OCP3 rule file_permissions_master_openvswitch.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update file_permissions template to better support file regex. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update comment in OVAL zipl_bls_entries_option (Watson Yuuma Sato
<wsato@redhat.com>)
 - Extend scenarios platform and allow remediation (Watson Sato
<wsato@redhat.com>)
 - zipl_bls_entries_option: Fix sed in test scenario (Watson Sato
<wsato@redhat.com>)
 - Improve conditional check for the grubby command (Watson Sato
<wsato@redhat.com>)
 - zipl_bls_entries_option: Remove hardcoded values (Watson Sato
<wsato@redhat.com>)
 - Disable bash remediation since it doesn't support checking of base filename.
(Gabriel Becker <ggasparb@redhat.com>)
 - zipl_bls_entries_option: Add test scenarios (Watson Sato <wsato@redhat.com>)
 - Fix file regex in OCP3 content. (Gabriel Becker <ggasparb@redhat.com>)
 - Update stable test for OSPP Profile (Watson Sato <wsato@redhat.com>)
 - document blocked registries (shaneboulden <shane.boulden@gmail.com>)
 - add allowed registries check to e8 and moderate (shaneboulden
<shane.boulden@gmail.com>)
 - add eval for container runtime allowed registries (shaneboulden
<shane.boulden@gmail.com>)
 - Undo rule refinements done to zIPL rules (Watson Sato <wsato@redhat.com>)
 - Extend Profile resolution to undo rule refinements (Watson Sato
<wsato@redhat.com>)
 - Add stigid reference to rpm_verify_ownership according STIG RHEL7 v2r7.
(Gabriel Becker <ggasparb@redhat.com>)
 - Add version field to STIG generated table. (Gabriel Becker
<ggasparb@redhat.com>)
 - update URI for rhel6 and rhel8 (Vojtech Polasek <vpolasek@redhat.com>)
 - Select zipl BLS option rules in OSPP Profile (Watson Sato <wsato@redhat.com>)
 - Add CCEs to zIPL argument rules (Watson Sato <wsato@redhat.com>)
 - zipl_slub_debug_argument: Fix description (Watson Sato <wsato@redhat.com>)
 - zipl_audit_backlog_limit_argument: Fix OCIL typo (Watson Sato
<wsato@redhat.com>)
 - Enable zIPL in argument rules (Watson Sato <wsato@redhat.com>)
 - zipl_bls_entries_option: Add Ansible and Bash (Watson Sato
<wsato@redhat.com>)
 - zipl_bls_entries_option: check opts after install (Watson Sato
<wsato@redhat.com>)
 - Kickstart zipl_bls_entries_option template (Watson Sato <wsato@redhat.com>)
 - Revert "Fixed 'etcd_auto_tls' and 'etcd_peer_auto_tls' rules" (Renaud
Métrich <rmetrich@redhat.com>)
 - python3 support for ansible roles builder [2/2] (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - python3 support for ansible roles builder [1/2] (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - reformat rule, fix wrong ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - fix separator regex in oval (Vojtech Polasek <vpolasek@redhat.com>)
 - remove blank line from remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - create rule, check, bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Unselect zIPL rules from STIG Profile (Watson Sato <wsato@redhat.com>)
 - Incorporate OSPP selection changes to profile test (Watson Sato
<wsato@redhat.com>)
 - change URI to CIS reference to general one (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add CCE identifiers to bootmap and bls only rules (Watson Sato
<wsato@redhat.com>)
 - zipl_bls_entries_only: check file /etc/zipl.conf (Watson Sato
<wsato@redhat.com>)
 - zipl_bls_entries_only: there can be leading spaces (Watson Sato
<wsato@redhat.com>)
 - Fix path to zipl binary in Bash remediation (Watson Sato <wsato@redhat.com>)
 - added missing cces to rules in ism_o profile (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add zipl to CPE dictionaries in all Linux products (Jan Černý
<jcerny@redhat.com>)
 - Print different command to get IP address when using fish shell. (Gabriel
Becker <ggasparb@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - updated oval to check only device files (Vojtech Polasek
<vpolasek@redhat.com>)
 - modify rule description and ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - add Ignition support for setting user umask. (Jonathan Sturges
<jsturges@redhat.com>)
 - Select zIPL specific rules in OSPP profile (Watson Sato <wsato@redhat.com>)
 - zipl_bootmap_is_up_to_date: Add remediations (Watson Sato <wsato@redhat.com>)
 - zipl_bootmap_is_up_to_date: Add mock tests (Watson Sato <wsato@redhat.com>)
 - zipl_bootmap_is_up_to_date: Add OVAL check (Watson Sato <wsato@redhat.com>)
 - Add rule to check hotness of zIPL bootmap (Watson Sato <wsato@redhat.com>)
 - zipl_bls_entries_only: Add no-remediation warning (Watson Sato
<wsato@redhat.com>)
 - zipl_bls_entries_only: Add OVAL and tests (Watson Sato <wsato@redhat.com>)
 - Add rule to check for zIPL conformance to BLS (Watson Sato
<wsato@redhat.com>)
 - Update RHEL7 disa stig manual reference to v2r7. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update CPE Dictionaries (Watson Sato <wsato@redhat.com>)
 - Move grub2_disable_interactive_boot to grub2 platform (Watson Sato
<wsato@redhat.com>)
 - Add check for grub2 installed (Watson Sato <wsato@redhat.com>)
 - Set zipl and machine platforms for zipl content (Watson Sato
<wsato@redhat.com>)
 - Add check for zipl installed (Watson Sato <wsato@redhat.com>)
 - fix another occurence of screen (vojtapolasek <vpolasek@redhat.com>)
 - edit rhel6 oval for gconf_gnome_screen_locking_keybindings (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - Create shared.sh (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - Convert ocp_allowed_registries_for_import into templated rule (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Update shared.sh (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - Update RHEL7 documentation link for grub2_uefi_admin_username. (Gabriel
Becker <ggasparb@redhat.com>)
 - Change the CPE identifier for RHCOS to indicate it's an OS (Jakub Hrozek
<jhrozek@redhat.com>)
 - Update task name to reflect correct opensslcnf.config file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Updated var_system_crypto_policy=fips (wcushen
<54533890+wcushen@users.noreply.github.com>)
 - updated tests (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed description, oval, ansible, bash (Vojtech Polasek
<vpolasek@redhat.com>)
 - Use cmake variable SSG_PRODUCT_DEFAULT for VSEL product. (Gabriel Becker
<ggasparb@redhat.com>)
 - Updated smartcard (MFA) refs (wcushen
<54533890+wcushen@users.noreply.github.com>)
 - Update ism_o.profile (wcushen <54533890+wcushen@users.noreply.github.com>)
 - Added crypto_policy and var_crypto_policy (wcushen
<54533890+wcushen@users.noreply.github.com>)
 - profile_tool.py: No Bash, no Ansible parity (Watson Sato <wsato@redhat.com>)
 - Update ism_o.profile (Will Cushen <wcushen@redhat.com>)
 - Add ocp rules to cis profile (Gabe <redhatrises@gmail.com>)
 - profile_tool.py: All stats means all stats (Watson Sato <wsato@redhat.com>)
 - Add 'bls_audit_option' rule for checking BLS-compatible boot loader entries
for presence of audit=1 parameter. The rule is based on the 'bls_entries_option'
template. (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Update CMakeLists.txt (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - Create shared.sh (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - Add support for ansible-parity in html format. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add SSG content for McAfee VSEL (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - profile_tool.py: Measure gap in Ansible parity (Watson Sato
<wsato@redhat.com>)
 - utils: update add_platform_rule.py (Matt Rogers <mrogers@redhat.com>)
 - Fixed 'api_server_experimental_encryption_provider_config' rule (Renaud
Métrich <rmetrich@redhat.com>)
 - Fixed 'etcd_auto_tls' and 'etcd_peer_auto_tls' rules (Renaud Métrich
<rmetrich@redhat.com>)
 - Fixed 'api_server_encryption_provider_config' rule (Renaud Métrich
<rmetrich@redhat.com>)
 - Fixed 'api_server_kubelet_https' rule (Renaud Métrich <rmetrich@redhat.com>)
 - Fixed 'api_server_service_account_private_key' rule (Renaud Métrich
<rmetrich@redhat.com>)
 - Fixed 'file_permissions_master_openvswitch' rule (Renaud Métrich
<rmetrich@redhat.com>)
 - Fixed 'file_permissions_openshift_node_client_crt' rule (Renaud Métrich
<rmetrich@redhat.com>)
 - Fixed 'api_server_anonymous_auth' rule (Renaud Métrich
<rmetrich@redhat.com>)
 - Fixed 'api_server_admission_control_plugin_NamespaceLifecycle' rule (Renaud
Métrich <rmetrich@redhat.com>)
 - Edited existing PR changes (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - Allow regex patterns with the yamlfile_value template (Matt Rogers
<mrogers@redhat.com>)
 - Updating Firefox content (cyarbrough76
<42849651+cyarbrough76@users.noreply.github.com>)
 - Use yamlfile_value template for ocp_idp_no_htpasswd  rule (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Update anonymous auth rule and remove whitespacing (Gabe
<redhatrises@gmail.com>)
 - add registry group description (shaneboulden <shane.boulden@gmail.com>)
 - Enable kubelet group (Gabe <redhatrises@gmail.com>)
 - Remove incompatible rule from OCP4 (Gabe <redhatrises@gmail.com>)
 - More CIS checks (Gabe <redhatrises@gmail.com>)
 - Remove grub documentation links from RHEL7 rationale (Gabe
<redhatrises@gmail.com>)
 - Update OCP permissions add master, worker, and general content changes (Gabe
<redhatrises@gmail.com>)
 - Add OCP4 CIS API server checks (Gabe <redhatrises@gmail.com>)
 - Condition build of bash roles to a CMake variable (Watson Sato
<wsato@redhat.com>)
 - Include OCP4 CPE check only into OCP4 datastream. (Gabriel Becker
<ggasparb@redhat.com>)
 - add ocp_allowed_registries_for_import to profiles (shaneboulden
<shane.boulden@gmail.com>)
 - Define easy to check CMake remediation variables (Watson Sato
<wsato@redhat.com>)
 - Move "ignition" remediations to "kubernetes" ones (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - remove identifier (shaneboulden <shane.boulden@gmail.com>)
 - restructure and update test description (shaneboulden
<shane.boulden@gmail.com>)
 - initial allowed registries test (shaneboulden <shane.boulden@gmail.com>)
 - Update restrict token OCIL for OCP4 (Gabe <redhatrises@gmail.com>)
 - Add OCP XCCDF CIS policy rules (Gabe <redhatrises@gmail.com>)
 - Document PRODUCT_REMEDIATION_LANGUAGES (Watson Sato <wsato@redhat.com>)
 - Limit OCP4 to ignition and kubernetes fixes (Watson Sato <wsato@redhat.com>)
 - ocp4: Generalize e2e tests (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - test_parse_affected.py: Handle empty rendered content (Watson Sato
<wsato@redhat.com>)
 - ocp4 e2e: Add a basic guard e2e for platform-moderate (Matt Rogers
<mrogers@redhat.com>)
 - Remove unnecessary profiles and add dummy rule to existing profiles (Gabe
<redhatrises@gmail.com>)
 - Add OCP4 rule (Gabe <redhatrises@gmail.com>)
 - Fix fetch of objects used by variables in cpe-oval (Watson Sato
<wsato@redhat.com>)
 - Change ocp_data_root from /tmp to /kubernetes-api-resources (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Hardcode file path for kubernetes api resources (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Change oval check to verify if we're in OCP4 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Remove OCP enablement of linux rules as these are now under RHCOS (Gabe
<redhatrises@gmail.com>)
 - Condition building playbooks on ansible remediation (Watson Sato
<wsato@redhat.com>)
 - Update OCP profiles (Gabe <redhatrises@gmail.com>)
 - Update CoreOS profile to short name (Gabe <redhatrises@gmail.com>)
 - Build remediations based on remediation languages (Watson Sato
<wsato@redhat.com>)
 - Put list of remediation languages in a variable (Watson Sato
<wsato@redhat.com>)
 - Add add_platform_rule.py section to dev guide (Matt Rogers
<mrogers@redhat.com>)
 - fix for older python versions lacking .iter method (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add dev_shm rules to rhel7 stig profile (George Campbell
<gcampbell@palantir.com>)
 - add simple tests for sshd_do_not_permit_user_env (Vojtech Polasek
<vpolasek@redhat.com>)
 - Added more checks to CIS profile (eradot4027 <jrtonmac@gmail.com>)
 - Added more checks to CIS Profile for SLE15 (eradot4027 <jrtonmac@gmail.com>)
 - Add test scenario for sshd_rekey_limit to cover OSPP profile (Matus Marhefka
<mmarhefk@redhat.com>)
 - rhcos4: Remove checks for nmcli permissions (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add error message to the remediation if there is a problem with the update-
crypto-policies script. (Matěj Týč <matyc@redhat.com>)
 - Change regex to match 1.2 datastreams on compare_generated script. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add new types of remediation for the get-only-remediations-sorted XLST
transformation. (Gabriel Becker <ggasparb@redhat.com>)
 - Sort ansible tags before writing into the playbook. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update CMake file to use correct dir options when building rule playbooks.
(Gabriel Becker <ggasparb@redhat.com>)
 - Enable sshd_set_idle_timeout remediation and make the setting match (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - fix typos and wording (Vojtech Polasek <vpolasek@redhat.com>)
 - Enable exceptions for YAML checks in ocp4 unit tests (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add Kubernetes fix for sshd_set_keepalive (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - fix remaining getchildren and getiterator functions (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4: Fix platform check helper script (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update devel doc with information regarding kubernetes jinja macros. (Gabriel
Becker <ggasparb@redhat.com>)
 - Rename kubernetes macro to kubernetes_machine_config_file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Create high level jinja macro for kubernetes SSH daemon configuration.
(Gabriel Becker <ggasparb@redhat.com>)
 - Move source of sshd_config file to a macro. (Gabriel Becker
<ggasparb@redhat.com>)
 - Create kubernetes macros and use it on sshd_config template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use templates to generate Machineconfigs (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - fix deprecated getiterator function (Vojtech Polasek <vpolasek@redhat.com>)
 - fix deprecated instance of element.getchildren (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix python imports of ElementTree (Vojtech Polasek <vpolasek@redhat.com>)
 - fix typos and wording (Vojtech Polasek <vpolasek@redhat.com>)
 - Use specific OVAL check to verify that a system is RHCOS4 (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Fail the build when some of html guides was not generated properly (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - update release readme, add patch (Vojtech Polasek <vpolasek@redhat.com>)
 - utils: Add a helper script for creating platform checks (Matt Rogers
<mrogers@redhat.com>)
 - Remove result files when test scenarios pass. (Gabriel Becker
<ggasparb@redhat.com>)
 - Avoid duplicates in the srg mapping table (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Remove unneeded parameter (Šimon Lukašík <isimluk@fedoraproject.org>)
 - no_shelllogin_for_systemaccounts: Fix text shebangs (Watson Sato
<wsato@redhat.com>)
 - extend description and ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - add more tests (Vojtech Polasek <vpolasek@redhat.com>)
 - reqrite remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite oval to check for multiple locations (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add RHEL content to quay_publish container image (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - no_shelllogin_for_systemaccounts: simplify check for range of UIDs (Watson
Sato <wsato@redhat.com>)
 - no_shelllogin_for_systemaccounts: add tests (Watson Sato <wsato@redhat.com>)
 - missed a couple firewalld references (eradot4027 <jrtonmac@gmail.com>)
 - commented out firewalld until adding check (eradot4027 <jrtonmac@gmail.com>)
 - Fixed users settings (eradot4027 <jrtonmac@gmail.com>)
 - Fixed system files section (eradot4027 <jrtonmac@gmail.com>)
 - Fixed user account section (eradot4027 <jrtonmac@gmail.com>)
 - Fixed PAM section (eradot4027 <jrtonmac@gmail.com>)
 - Editied SSH Section (eradot4027 <jrtonmac@gmail.com>)
 - Finished auditing section (eradot4027 <jrtonmac@gmail.com>)
 - Finished auditing update (eradot4027 <jrtonmac@gmail.com>)
 - Updated some auditing configuration (eradot4027 <jrtonmac@gmail.com>)
 - Changes to firewall section (eradot4027 <jrtonmac@gmail.com>)
 - Updated firewall config numbers (eradot4027 <jrtonmac@gmail.com>)
 - Fixed sections in section 3 (eradot4027 <jrtonmac@gmail.com>)
 - Updated Section 2.2 (eradot4027 <jrtonmac@gmail.com>)
 - Fixed Section 2.2.1 (eradot4027 <jrtonmac@gmail.com>)
 - Fixed Section 2.1 (eradot4027 <jrtonmac@gmail.com>)
 - Added Section 1.10 (eradot4027 <jrtonmac@gmail.com>)
 - Updated MAC Section (eradot4027 <jrtonmac@gmail.com>)
 - Modifications to section 1.6 (eradot4027 <jrtonmac@gmail.com>)
 - Updated Section 2.1 (eradot4027 <jrtonmac@gmail.com>)
 - Resolved updates in section 1.1 (eradot4027 <jrtonmac@gmail.com>)
 - Added /dev/shm actions to 1.1.6 (eradot4027 <jrtonmac@gmail.com>)
 - Fixed Section 1.1.1 (eradot4027 <jrtonmac@gmail.com>)
 - pkgname@debian auditd (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - Update unowned user rule warning (Gabe <redhatrises@gmail.com>)
 - Fix remaining reference to ocp4 in rhcos4/CMakeLists.txt (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - enable build_ds_container.sh script to build all relevant ocp4 content (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Point ocp4 e2e tests to use rhcos content (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add RHCOS4 product (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - zipl_vsyscall_argument: Fix rationale (Watson Sato <wsato@redhat.com>)
 - ocp4: Test amount of check results for scans (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - fix test to use default value, remove rule from stig (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix tests and ansible (Vojtech Polasek <vpolasek@redhat.com>)
 - improve description of variables (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule to rhel8 ospp, update stable profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule, variables, check, remediations (Vojtech Polasek
<vpolasek@redhat.com>)
 - Delete ignition remediation for sysctl_net_ipv4_ip_forward (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4: add sshd golden config as sshd_set_loglevel_info remediation (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Fix formatting of zIPL rules (Watson Sato <wsato@redhat.com>)
 - Add RHEL datastream to ocp4 content image (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Change sshd rekey limit to 1G 1 hour in rhel8 OSPP (#5782) (vojtapolasek
<vpolasek@redhat.com>)
 - ocp4: Create complianceSuites in debug mode (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - devguide: Add Kubernetes as the supported platform for several templates
(Jakub Hrozek <jhrozek@redhat.com>)
 - Enhance output of utils/deploy_compliance_operator.sh (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Stop using generated name for operatorgroup (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Sleep after creating namespace (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Quick fixes to utils/deploy_compliance_operator.sh script (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4: Check for diminishing failures in e2e test (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add few more zIPL kernel option rules (Watson Sato <wsato@redhat.com>)
 - Add zIPL rule for early audit capability (Watson Sato <wsato@redhat.com>)
 - ocp4: Change auditd flush frequency to incremental_async by default (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Use variable substitutions for auditd ignition remediations (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Add k8s remediations for rules based on the audit_rules_login_events template
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add a k8s remediation for the audit_rules_usergroup_modification rule (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add a k8s remediation for the audit_rules_networkconfig_modification rule
(Jakub Hrozek <jhrozek@redhat.com>)
 - Autogenerate k8s remediations for the audit_rules_privileged_commands
template (Jakub Hrozek <jhrozek@redhat.com>)
 - Autogenerate k8s remediations for the audit_rules_dac_modification template
(Jakub Hrozek <jhrozek@redhat.com>)
 - Remediation requires reboot. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix ansible lint spacing issues. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix ansible/bash remediation for rule grub2_enable_selinux. (Gabriel Becker
<ggasparb@redhat.com>)
 - Create macro for selinux ansible/bash remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Template for yamlfilecontent checks (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Add zIPL bootloader group (Watson Sato <wsato@redhat.com>)
 - add hipaa kickstarts for rhel7 and rhel8 (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add missing CCEs for RHEL8 (Watson Sato <wsato@redhat.com>)
 - Improved the OVAL according to the review feedback. (Matěj Týč
<matyc@redhat.com>)
 - Fixed Bash and Ansible remediations. (Matěj Týč <matyc@redhat.com>)
 - Improved how variables are handled in remediations. (Matěj Týč
<matyc@redhat.com>)
 - Fix TM typo in RHEL7 CIS (Watson Sato <wsato@redhat.com>)
 - Attribute content to CIS (Watson Sato <wsato@redhat.com>)
 - add tests for no_direct_root_logins (Vojtech Polasek <vpolasek@redhat.com>)
 - change name of libsemanage python bindings for rhel8 (Vojtech Polasek
<vpolasek@redhat.com>)
 - simplify ansible remediation of no_direct_root_logins (Vojtech Polasek
<vpolasek@redhat.com>)
 - dconf_gnome_banner_enabled: no spaces around '=' (Watson Sato
<wsato@redhat.com>)
 - Added a condition to fail if the dump file doesnt exist. (Matěj Týč
<matyc@redhat.com>)
 - Move ocp_idp_no_htpasswd to a platform-moderate profile (Matt Rogers
<mrogers@redhat.com>)
 - Incorporated reviewer feedback. (Matěj Týč <matyc@redhat.com>)
 - Improved CMake validation tests handling. (Matěj Týč <matyc@redhat.com>)
 - Small fixes. (Matěj Týč <matyc@redhat.com>)
 - Disabled validation of ocp4 content on openscap<1.3.3 (Matěj Týč
<matyc@redhat.com>)
 - Added prodtype. (Matěj Týč <matyc@redhat.com>)
 - Added the data retreival comment into the description. (Matěj Týč
<matyc@redhat.com>)
 - Moved the OCP rule into the OCP tree. (Matěj Týč <matyc@redhat.com>)
 - Updated applicable_platforms to be able to accept OVAL version. (Matěj Týč
<matyc@redhat.com>)
 - Introduced a rule that uses non-standard yaml checks. (Matěj Týč
<matyc@redhat.com>)
 - account_unique_name: Improve description, rationale and OCIL (Watson Sato
<wsato@redhat.com>)
 - Partially cover umask requirements (Watson Sato <wsato@redhat.com>)
 - No shelllogin for system accounts (Watson Sato <wsato@redhat.com>)
 - Select rule to check useradd INACTIVE setting (Watson Sato
<wsato@redhat.com>)
 - Configure password reuse (Watson Sato <wsato@redhat.com>)
 - Configure password lockout (Watson Sato <wsato@redhat.com>)
 - Select rules for password requirements (Watson Sato <wsato@redhat.com>)
 - Audit rules should be immutable (Watson Sato <wsato@redhat.com>)
 - Audit kernel module loads (Watson Sato <wsato@redhat.com>)
 - Audit file deletion events (Watson Sato <wsato@redhat.com>)
 - Audit privileged commands (Watson Sato <wsato@redhat.com>)
 - Audit successful system mounts (Watson Sato <wsato@redhat.com>)
 - Select rules for user/group modification (Watson Sato <wsato@redhat.com>)
 - Select rules for unsuccessful modification (Watson Sato <wsato@redhat.com>)
 - Select Audit DAC rules for RHEL8 CIS (Watson Sato <wsato@redhat.com>)
 - Select sysctl rules for secure ICMp redirects (Watson Sato
<wsato@redhat.com>)
 - Update time synchonization rule selections (Watson Sato <wsato@redhat.com>)
 - Add auxiliary rule for dconf settings (Watson Sato <wsato@redhat.com>)
 - Upgrade compliance-operator golang dependencies (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Upgrade to using compliance-operator v0.1.9 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Updated stable profile definitions. (Matěj Týč <matyc@redhat.com>)
 - Made the rule sshd_rekey_limit parametrized. (Matěj Týč
<matyc@redhat.com>)
 - misc cis8 updates (Shawn Wells <shawn@shawndwells.io>)
 - update CIS RHEL8 profile (Shawn Wells <shawn@redhat.com>)
 - Fix db in which remediation sets banner_enable (Watson Sato
<wsato@redhat.com>)
 - Remove misleading comments in system shutdown fix (Watson Sato
<wsato@redhat.com>)
 - Use https and .com for openssh website. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix ansible lint issue. (Gabriel Becker <ggasparb@redhat.com>)
 - Ansible mount_option: split mount and option task (Watson Sato
<wsato@redhat.com>)
 - Extend OVAL fix to groupownership and ownership (Watson Sato
<wsato@redhat.com>)
 - Make regex for include file more strict (Watson Sato <wsato@redhat.com>)
 - Fix permissions of files referenced by include() (Watson Sato
<wsato@redhat.com>)
 - Bump version to 0.1.51 (Vojtech Polasek <vpolasek@redhat.com>)
 - Clarify audit_rules_immutable Ansible task name (Watson Sato
<wsato@redhat.com>)
 - Add Ansible for audit_rules_system_shutdown (Watson Sato <wsato@redhat.com>)
 - audit_rules_system_shutdown: Don't remove unrelated line (Watson Sato
<wsato@redhat.com>)
 - update contributors for 0.1.50 (Vojtech Polasek <vpolasek@redhat.com>)
 - reorder groups because of permissions verification (Vojtech Polasek
<vpolasek@redhat.com>)
 - Do not take paths from include or IncludeConfig (Watson Sato
<wsato@redhat.com>)
 - add more tests (Vojtech Polasek <vpolasek@redhat.com>)
 - simplified regexes (Vojtech Polasek <vpolasek@redhat.com>)
 - Add remediations for sshd_set_max_sessions (Watson Sato <wsato@redhat.com>)
 - Add simple tests for sshd_set_max_sessions (Watson Sato <wsato@redhat.com>)
 - Modify ubuntu 19.08 to 18.04 (Willumpie <willumpie@xs4all.nl>)
 - reorder items of crypto policy according to strength (Vojtech Polasek
<vpolasek@redhat.com>)
 - complete cis profile for ubuntu 1804 (Willumpie <willumpie@xs4all.nl>)
 - Remove extra whitespace (Willumpie <willumpie@xs4all.nl>)
 - Add cis profile (Willumpie <willumpie@xs4all.nl>)
 - improv regex in ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - prevent duplicate remediation also for bash remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - make oval regex stricter (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests to grub2_audit_backlog_limit_argument (Vojtech Polasek
<vpolasek@redhat.com>)
 - Warning readability changes (Watson Sato <wsato@redhat.com>)
 - Warn about findings from rpm_verify_ownership (Watson Sato
<wsato@redhat.com>)
 - fix remediation for rhel8 (Vojtech Polasek <vpolasek@redhat.com>)
 - fix regex for rhel7 (Vojtech Polasek <vpolasek@redhat.com>)
 - Warn about findings from rpm_verify_permissions (Watson Sato
<wsato@redhat.com>)
 - Add test for ensure_logrotate_activated (Watson Sato <wsato@redhat.com>)
 - Check all tabfiles when entry in fstab can be created by Ansible (Watson Sato
<wsato@redhat.com>)
 - Update mount_option template documentation (Watson Sato <wsato@redhat.com>)
 - Add tests for mount option noexed in /dev/shm (Watson Sato
<wsato@redhat.com>)
 - Add Ansible for ensure_logrotate_activated (Watson Sato <wsato@redhat.com>)
 - Fix task naming in Ansible mount option template (Watson Sato
<wsato@redhat.com>)
 - Keep any already defined mount options (Watson Sato <wsato@redhat.com>)
 - Do not duplicate mount point options (Watson Sato <wsato@redhat.com>)
 - restore mount_option_tmp_noexec changes (Willumpie <willumpie@xs4all.nl>)
 - remove duplicate CIS@Ubuntu1804 entry (Willumpie <willumpie@xs4all.nl>)
 - Fix Ansible linting issues [E206]. (Gabriel Becker <ggasparb@redhat.com>)
 - reword jenkins permissions (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rules for paritions to ubuntu (Willumpie <willumpie@xs4all.nl>)
 - Add cis partitions rules (Willumpie <willumpie@xs4all.nl>)
 - Fix incomplete temporary file (Jan Černý <jcerny@redhat.com>)
 - Provide --dry-run option to the Ansible Role generator script (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Disable golang test caching (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Add unit test that verifies that files are equal (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add fixes to unit test ignition vendored schema (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Commit sha is needed for updating remote repo (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Move new file generation to the AnsiblePlaybookToRoleConverter (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Rename class to enable reader orient themselves better (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Extract const (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Refactor: Expand method (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Get a rid of some unneeded variables at the Role class (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Consolidate and simplify added_variables processing (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Refactor: Replace instance variable with memoized property (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Replace instance variable with memoized property (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: consolidate description handling to a single place (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Refactor: Extract property: _raw_playbook (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Replace instance variable with cached property (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Extract property: description_md (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Replace instance variable with cached property (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - update test scenarios (Vojtech Polasek <vpolasek@redhat.com>)
 - update pubkey alrogithms in check, remediation and rule.yml (Vojtech Polasek
<vpolasek@redhat.com>)
 - Replace tasks_data variable by memoized property (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Remove instance variables that are no longer needed (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Replace variable by memoized property (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Move all the other post-processing down to the convertor class
(Šimon Lukašík <isimluk@fedoraproject.org>)
 - Refactor: Move task_local_content down to the ansible converter (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Refactor: simplify logic so that my eyes stop bleeding (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Move defaults variable handling up to the converter class (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Remove overabundant variable, not used (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Extract class PlaybookToRoleConverter (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Consolidate description handling to a single place (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Refactor: Consolidate Role class initialization (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: replace add_task_variables_to_default_variables_if_needed by
generic method (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Get a rid of repo_status variable, it is no longer needed (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: replace _update_meta_content_if_needed by generic method (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Refactor: replace _update_readme_content_if_needed by generic method (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Refactor: Replace _update_vars_contetn_if_needed by generic method (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Refactor: Make _update_content_if_needed generic and re-usable (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - exclude profile files from profile_stability folder (Vojtech Polasek
<vpolasek@redhat.com>)
 - update release documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - simplify remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove outdated OSPP metadata from test scenario for
audit_rules_privileged_commands. (Gabriel Becker <ggasparb@redhat.com>)
 - Add Ansible for kernel_module_ipv6_option_disabled (Watson Sato
<wsato@redhat.com>)
 - Fix broken file update (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Fix ansible upload script to not break when capitalization of profile id
changes (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Add ignition and kubernetes remediation type into html statistics page.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove ignition remediation for service_systemd-coredump_disabled (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - kube/ignition: Add service_disabled template definition (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - do not use explaining comment in ansible remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4: Fix ignition remediation to disable user coredumps (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Revert adding xwindows_runlevel_target (Shawn Wells <shawn@redhat.com>)
 - Revert "Add xwindows runlevel target to STIG profile" (Shawn Wells
<shawn@shawndwells.io>)
 - Fix arch parameter and useless arch task (Watson Sato <wsato@redhat.com>)
 - Improve macro documenation and clarify var name (Watson Sato
<wsato@redhat.com>)
 - fix metadata and rewrite remediation to use newer macro (Vojtech Polasek
<vpolasek@redhat.com>)
 - improve tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix regex spacing between fields and the key (Watson Sato <wsato@redhat.com>)
 - Add Ansible for audit syscall clock_settime (Watson Sato <wsato@redhat.com>)
 - Add tests for audit_rules_time_clock_settime (Watson Sato <wsato@redhat.com>)
 - Fix spacing between syscalls and fields (Watson Sato <wsato@redhat.com>)
 - Add fields arg to ansbile audit syscall macros (Watson Sato
<wsato@redhat.com>)
 - Add Ansible remedation to watch for time changes (Watson Sato
<wsato@redhat.com>)
 - time_adjtimex: Rename, simplify and add tests (Watson Sato
<wsato@redhat.com>)
 - Add Ansible remediations for syscall time changes (Watson Sato
<wsato@redhat.com>)
 - use variable, remove duplicate code (Vojtech Polasek <vpolasek@redhat.com>)
 - fix task names (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite rule (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrite macro (Vojtech Polasek <vpolasek@redhat.com>)
 - disable not working checks for ubuntu1804 (Willumpie <willumpie@xs4all.nl>)
 - att tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Fixed minor defects. (Matěj Týč <matyc@redhat.com>)
 - Update argument description. (Matěj Týč <matej.tyc@gmail.com>)
 - Improvements based on review feedback. (Matěj Týč <matyc@redhat.com>)
 - Take advantage of namespace-prefix refactoring. (Matěj Týč
<matyc@redhat.com>)
 - AAdded possibility of the test suite to expand applicability of the
benchmark. (Matěj Týč <matyc@redhat.com>)
 - Add file_permissions_sshd_config to ocp4 benchmark (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add file_owner_sshd_config rule to ocp4 benchmark (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add file_groupowner_sshd_config rule to ocp4 benchmark (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add ocp4 to prodtypes in service_bluetooth_disabled rule (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4: Add missing AC-1 checks to moderate profile (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - disable check for /etc/modprobe.conf. This is disabled by default in
Ubuntu1804 (Willumpie <willumpie@xs4all.nl>)
 - ocp4/utils: Enable build_ds_container.sh to create images in other namespaces
(Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - remove mention of modules from task description (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix regex and remove recurse from tasks (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove recurse from tasks, fix regex (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests for augen-rules (Vojtech Polasek <vpolasek@redhat.com>)
 - enable kernel_module_udf for ubuntu1804 (Willumpie <willumpie@xs4all.nl>)
 - enable kernel_module_hfsplus for ubuntu1804 (Willumpie <willumpie@xs4all.nl>)
 - enable kernel_module_hfs for ubuntu1804 (Willumpie <willumpie@xs4all.nl>)
 - enable kernel_module_jffs2 rule for ubuntu1804 (Willumpie
<willumpie@xs4all.nl>)
 - enable kernel-module-freevxfs rule for ubuntu1804 (Willumpie
<willumpie@xs4all.nl>)
 - enable kernel_module_cramfs_disabled rule for ubuntu1804 (Willumpie
<willumpie@xs4all.nl>)
 - remove arch argument from macros (Vojtech Polasek <vpolasek@redhat.com>)
 - add documentation, fix task naming (Vojtech Polasek <vpolasek@redhat.com>)
 - use macro in example rule (Vojtech Polasek <vpolasek@redhat.com>)
 - create macro (Vojtech Polasek <vpolasek@redhat.com>)
 - Select xwindows_runlevel_target rule in STIG profiles. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix SSGTS when running with python3 and writing binary data to file. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add missing CCE for sshd_set_max_sessions rule. (Milan Lysonek
<mlysonek@redhat.com>)
 - fix regex to prevent duplicate lines (Vojtech Polasek <vpolasek@redhat.com>)
 - fix task names (Vojtech Polasek <vpolasek@redhat.com>)
 - rename macros, fix task names (Vojtech Polasek <vpolasek@redhat.com>)
 - revert platform:machine for package_abrt-addon-kerneloops_removed (Shawn
Wells <shawn@shawndwells.io>)
 - revert platform:machine for package_abrt_removed (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_kernel_yama_ptrace_scope (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_kernel_unprivileged_bpf_disabled (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_kernel_perf_event_paranoid (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_kernel_kexec_load_disabled (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_kernel_dmesg_restrict (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_kernel_kptr_restrict (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_fs_protected_symlinks (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_fs_protected_hardlinks (Shawn Wells
<shawn@shawndwells.io>)
 - update prodtype for sysctl_net_ipv4_ip_forward (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_default_send_redirects (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_all_send_redirects (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_tcp_syncookies (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_icmp_ignore_bogus_error_responses (Shawn
Wells <shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_icmp_echo_ignore_broadcasts (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_default_secure_redirects (Shawn
Wells <shawn@shawndwells.io>)
 - sysctl_net_ipv4_conf_default_rp_filter (Shawn Wells <shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_default_log_martians (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_default_accept_source_route (Shawn
Wells <shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_default_accept_redirects (Shawn
Wells <shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_all_secure_redirects (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_all_rp_filter (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_all_log_martians (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_all_accept_source_route (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition for sysctl_net_ipv4_conf_all_accept_redirects (Shawn Wells
<shawn@shawndwells.io>)
 - update ignition platforms for
sysctl_net_ipv6_conf_default_accept_source_route (Shawn Wells
<shawn@shawndwells.io>)
 - add ignition for sysctl_net_ipv6_conf_default_accept_ra (Shawn Wells
<shawn@shawndwells.io>)
 - update sysctl_net_ipv6_conf_all_accept_source_route ignition platforms (Shawn
Wells <shawn@shawndwells.io>)
 - Reference should not point to OS version. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Fix location of symlink created by test scenario for
xwindows_runlevel_target. (Gabriel Becker <ggasparb@redhat.com>)
 - Update command output from instructions on how to manually set multi-
user.target. (Gabriel Becker <ggasparb@redhat.com>)
 - OVAL Check for xwindows_runlevel_target consider files from both /usr and
/lib directory prefix. (Gabriel Becker <ggasparb@redhat.com>)
 - Update rule package_xorg-x11-server-common_removed metadata. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update ansible remediation for xwindows_runlevel_target to use file module.
(Gabriel Becker <ggasparb@redhat.com>)
 - Update list of available CCE. (Gabriel Becker <ggasparb@redhat.com>)
 - Simplify xwindows_runlevel_target artifacts. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add check and remediation for xwindows_runlevel_target. (Gabriel Becker
<ggasparb@redhat.com>)
 - Added a warning to rules about only local user backends being considered.
(Matěj Týč <matyc@redhat.com>)
 - shared/partition.sh: Increase the size of a test device (Matus Marhefka
<mmarhefk@redhat.com>)
 - reorder tasks to improve readability (Vojtech Polasek <vpolasek@redhat.com>)
 - fix regex and task descriptions (Vojtech Polasek <vpolasek@redhat.com>)
 - fix wording (Vojtech Polasek <vpolasek@redhat.com>)
 - add documentation, rename variables (Vojtech Polasek <vpolasek@redhat.com>)
 - switch example rule to macro (Vojtech Polasek <vpolasek@redhat.com>)
 - add macro for ansible remediation of audit watches (Vojtech Polasek
<vpolasek@redhat.com>)
 - rewrite audit_rules_kernel_module_loading remediation to be effective
(Vojtech Polasek <vpolasek@redhat.com>)
 - fix metadata in tests (Vojtech Polasek <vpolasek@redhat.com>)
 - Add DISA STIG OL7 v1r1 stig_overlay (Ilya Okomin <ilya.okomin@oracle.com>)
 - New Ignition files for audit and SSHD (#5640) (anixon-rh <55244503+anixon-
rh@users.noreply.github.com>)
 - Create machine configuration for the rule no tmux in shells (#5641)
(Christopher Lee <Crleekwc@gmail.com>)
 - fix wording (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix audit_basic_configuration (#5642) (Jakub Hrozek <jhrozek@redhat.com>)
 - remove remediations, add warning (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix the audit_ospp_general ignition remediation (Jakub Hrozek
<jhrozek@redhat.com>)
 - Fix the audit_module_load ignition remediation (Jakub Hrozek
<jhrozek@redhat.com>)
 - Fix the audit_modify_failed ignition remediation (Jakub Hrozek
<jhrozek@redhat.com>)
 - make audit_rules_kernel_module_loading ansible remediation robust (Vojtech
Polasek <vpolasek@redhat.com>)
 - ocp4: remove user namespaces check from coreos-ncp profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - use freq param for both 'incremental' and 'incremental_async' of
var_auditd_flush (Nick Gompper <forestgomp@yahoo.com>)
 - Add yum CPE entry for SLE15 product. (Gabriel Becker <ggasparb@redhat.com>)
 - ocp4: Expand unit tests to validate profile selections (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - cosmetic fixes (Vojtech Polasek <vpolasek@redhat.com>)
 - fix audit_rules_media_export ansible remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update link to debian packaging tools. (Gabriel Becker <ggasparb@redhat.com>)
 - feedback to review (Vojtech Polasek <vpolasek@redhat.com>)
 - Add multi_platform_rhel,multi_platform_fedora to the rest of the ignition
remediations (Jakub Hrozek <jhrozek@redhat.com>)
 - check for already existing rule before remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4/e2e: Remove references to catalogSourceConfig object (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Fix missing ignition remediations (#5644) (Juan Osorio Robles
<jaosorior@redhat.com>)
 - SSGTS: Encode string to UTF-8 before writing into file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add warning to package_xorg-x11-server-common_removed. (Gabriel Becker
<ggasparb@redhat.com>)
 - add ansible remediation to audit_rules_kernel_module_loading (#5594)
(vojtapolasek <vpolasek@redhat.com>)
 - Add support for kubernetes remediation type (#5633) (Juan Osorio Robles
<jaosorior@redhat.com>)
 - Fix invalid ignition file (#5643) (Juan Osorio Robles <jaosorior@redhat.com>)
 - Add html tables for ol7 and ol8 (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add ol7 and ol8 transforms (Ilya Okomin <ilya.okomin@oracle.com>)
 - User strong rng. (crleekwc <crleekwc@gmail.com>)
 - Resolved peer review issues (Khary Mendez <kmendez@redhat.com>)
 - Fix malformed MachineConfigs (#5637) (Juan Osorio Robles
<jaosorior@redhat.com>)
 - OL7 stig profile update to align to DISA STIG for OL7 v1r1 (#5631) (Ilya
Okomin <ilya.okomin@oracle.com>)
 - Added ignition files for disable_ctrlaltdel_burstaction and disable_u…
(#5604) (anixon-rh <55244503+anixon-rh@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - Update platform metadata in tests for auditd_data_retention_flush rule
(#5635) (Matus Marhefka <mmarhefk@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - create tests (Vojtech Polasek <vpolasek@redhat.com>)
 - Add unit test for kubernetes object remediations (#5636) (Juan Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Enable ipv4-specific sysctl checks in moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4: Enable ipv6-specific sysctl checks in moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Added SLE15 per review conversation (eradot4027 <jrtonmac@gmail.com>)
 - Del SLE15 from check phase as it is not FIPS yet (eradot4027
<jrtonmac@gmail.com>)
 - Added SLE15 to support string (eradot4027 <jrtonmac@gmail.com>)
 - Fixed typo in Germany (eradot4027 <jrtonmac@gmail.com>)
 - Added more SLES Support (eradot4027 <jrtonmac@gmail.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - Added ignition for chronyd_client_only and chronyd_no_chronyc_network (Khary
Mendez <kmendez@redhat.com>)
 - Fix test scenarios for auditd_data_retention_flush rule (Matus Marhefka
<mmarhefk@redhat.com>)
 - create new ignition files for /etc/audit/auditd.conf (Nick Poyant
<npoyant@redhat.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - add missing cce (Vojtech Polasek <vpolasek@redhat.com>)
 - Change permissions to 644 for passwd- file from rule
file_permissions_backup_etc_passwd. (Gabriel Becker <ggasparb@redhat.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - Delete shared.yml (Christopher Lee <Crleekwc@gmail.com>)
 - Create rule for audit ospp general (crleekwc <crleekwc@gmail.com>)
 - Create rule for audit module_load (crleekwc <crleekwc@gmail.com>)
 - Created ignition for audit_modify_success (Khary Mendez <kmendez@redhat.com>)
 - Create rule for audit modify failed (crleekwc <crleekwc@gmail.com>)
 - Created ignition for audit_create_failed (Khary Mendez <kmendez@redhat.com>)
 - Create rule for audit basic configuration (crleekwc <crleekwc@gmail.com>)
 - Update linux_os/guide/system/permissions/restrictions/coredumps/group.yml
(Shawn Wells <shawn@redhat.com>)
 - Correct CIS reference number for RHEL7. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add CCE identifiers to sshd_disable_x11_forwarding. (Gabriel Becker
<ggasparb@redhat.com>)
 - Renamed rule, editied CIS profiles, fixed wording (eradot4027
<jrtonmac@gmail.com>)
 - Fixed reference, renamed tests, added RHEL profile (eradot4027
<jrtonmac@gmail.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Fixed misspelling (eradot4027 <jrtonmac@gmail.com>)
 - Added tests (eradot4027 <jrtonmac@gmail.com>)
 - Fixed misspelling in OCIL (eradot4027 <jrtonmac@gmail.com>)
 - Adde Disable AllowTcpForwarding check (eradot4027 <jrtonmac@gmail.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - Update linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net
_ipv6_conf_default_accept_redirects/ignition/shared.yml (Nick
<npoyant@redhat.com>)
 - Update linux_os/guide/system/network/network-kernel/network_host_parameters/s
ysctl_net_ipv4_ip_forward/ignition/75-sysctl_net_ipv4_ip_forward.conf (Nick
<npoyant@redhat.com>)
 - Update linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_patt
ern/ignition/shared.yml (Nick <npoyant@redhat.com>)
 - Update linux_os/guide/system/permissions/restrictions/sysctl_user_max_user_na
mespaces/ignition/shared.yml (Nick <npoyant@redhat.com>)
 - update to include limits.d (Shawn Wells <shawn@redhat.com>)
 - ./linux_os/guide/system/network/network-kernel/network_host_parameters/sysctl
_net_ipv4_ip_forward/ignition/75-sysctl_net_ipv4_ip_forward.conf (Nick Poyant
<npoyant@redhat.com>)
 - add ./linux_os/guide/system/network/network-ipv6/configuring_ipv6/sysctl_net_
ipv6_conf_default_accept_redirects/ignition/shared.yml (Nick Poyant
<npoyant@redhat.com>)
 - add ./linux_os/guide/system/permissions/restrictions/sysctl_user_max_user_nam
espaces/ignition/shared.yml (Nick Poyant <npoyant@redhat.com>)
 - Use jinja macros for bash remediation in rule sshd_set_keepalive. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add ansible and bash remediation for rule sshd_set_max_auth_tries. (Gabriel
Becker <ggasparb@redhat.com>)
 - add linux_os/guide/system/permissions/restrictions/sysctl_kernel_core_pattern
/ignition/shared.yml (Nick Poyant <npoyant@redhat.com>)
 - Missed changed is SLE15 standard profile (eradot4027 <jrtonmac@gmail.com>)
 - Changes per pull request review (eradot4027 <jrtonmac@gmail.com>)
 - ocp4: enable sysctl_kernel_core_pattern check in moderate profile (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - ocp4: Enable sysctl file system settings in moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4: enable sysctl security settings in moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix covscan issues. (Gabriel Becker <ggasparb@redhat.com>)
 - add oval_affected jinja macro (Vojtech Polasek <vpolasek@redhat.com>)
 - Merge ol7 srg and disa refs with global (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add ignition stats to profile_tool.py (Shawn Wells <shawn@redhat.com>)
 - Create rule to enable ssh daemon (crleekwc <crleekwc@gmail.com>)
 - Disable sshd service in linux_os (crleekwc <crleekwc@gmail.com>)
 - resolved per review (eradot4027 <jrtonmac@gmail.com>)
 - Added MaxSession count of 4 per CIS (eradot4027 <jrtonmac@gmail.com>)
 - Changes per comments, update OCIL clause (eradot4027 <jrtonmac@gmail.com>)
 - ocp4/e2e: display remediations for second scan (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - sshd_allow_only_protocol2 revert from template to individual check and
remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - Modified RHEL8 CIS Profile for support (eradot4027 <jrtonmac@gmail.com>)
 - Fix the profile compilation. (Matěj Týč <matyc@redhat.com>)
 - fix wordings (Vojtech Polasek <vpolasek@redhat.com>)
 - ocp4: Comment out sysctl checks (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Disable slub debug check for moderate profile (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4: e2e test continuation (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Added SLE15 support for checks (eradot4027 <jrtonmac@gmail.com>)
 - Resolved comment issue (eradot4027 <jrtonmac@gmail.com>)
 - Added check to RHEL8 CIS Profile (eradot4027 <jrtonmac@gmail.com>)
 - Added suport for Se15 in checks (eradot4027 <jrtonmac@gmail.com>)
 - Reloacted variable file and other text corrections (eradot4027
<jrtonmac@gmail.com>)
 - Fixed variable value reference (eradot4027 <jrtonmac@gmail.com>)
 - Resolved issues with OVAL (eradot4027 <jrtonmac@gmail.com>)
 - Added SLE15 support in oval check (eradot4027 <jrtonmac@gmail.com>)
 - Modified OCIL to use variable (eradot4027 <jrtonmac@gmail.com>)
 - Oval check and variable definition (eradot4027 <jrtonmac@gmail.com>)
 - Added SSHD MaxSessions check (eradot4027 <jrtonmac@gmail.com>)
 - Added more support for SL15 for installed_OS (eradot4027
<jrtonmac@gmail.com>)
 - Added Software Update check to standard profile (eradot4027
<jrtonmac@gmail.com>)
 - Permission checks and aide (eradot4027 <jrtonmac@gmail.com>)
 - Permisions, SELinux,and integrity (eradot4027 <jrtonmac@gmail.com>)
 - Permission and network check support (eradot4027 <jrtonmac@gmail.com>)
 - IPv4 Support (eradot4027 <jrtonmac@gmail.com>)
 - IPv6 checks (eradot4027 <jrtonmac@gmail.com>)
 - Audit and grub checks (eradot4027 <jrtonmac@gmail.com>)
 - Audit and Banner checks (eradot4027 <jrtonmac@gmail.com>)
 - Checks for services (eradot4027 <jrtonmac@gmail.com>)
 - Update ol7 severity refinement (Ilya Okomin <ilya.okomin@oracle.com>)
 - Added SLE15 support for SSHD checks (eradot4027 <jrtonmac@gmail.com>)
 - Added more SLE15 support for obsolete daemons (eradot4027
<jrtonmac@gmail.com>)
 - Added SLE15 support for cron checks (eradot4027 <jrtonmac@gmail.com>)
 - More check support for platform to enable CIS Profile Draft (eradot4027
<jrtonmac@gmail.com>)
 - MORE CIS Support (eradot4027 <jrtonmac@gmail.com>)
 - More SLE15 CIS Benchmark support (eradot4027 <jrtonmac@gmail.com>)
 - Still add check support for SLE15 CIS Benchmark (eradot4027
<jrtonmac@gmail.com>)
 - Continue adding SLE support in checks for CIS Benchmark Draft (eradot4027
<jrtonmac@gmail.com>)
 - Added CIS Benchmark profile draft for SLE15 (eradot4027 <jrtonmac@gmail.com>)
 - fix ansible remediation to correctly add new line at the end (Vojtech Polasek
<vpolasek@redhat.com>)
 - improvements (Vojtech Polasek <vpolasek@redhat.com>)
 - don't add boot UUID if same as root UUID (Nick Gompper
<forestgomp@yahoo.com>)
 - Use pythonic way of comparing empty string. (Gabriel Becker
<ggasparb@redhat.com>)
 - merge tests together (Vojtech Polasek <vpolasek@redhat.com>)
 - explain and make reordering pretty (Vojtech Polasek <vpolasek@redhat.com>)
 - Revert "add one more reordering" (Vojtech Polasek <vpolasek@redhat.com>)
 - add one more reordering (Vojtech Polasek <vpolasek@redhat.com>)
 - add regression tests (Vojtech Polasek <vpolasek@redhat.com>)
 - rename rhel7 tests and make them applicable for rhel8 too (Vojtech Polasek
<vpolasek@redhat.com>)
 - force ordering of account and audit group (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix regex in remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - Adjust ol7 stig rules severity and srg (Ilya Okomin <ilya.okomin@oracle.com>)
 - Update references and severity for ol7 (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add ol product support to sysctl_net_ipv4_tcp_invalid_ratelimit rule (Ilya
Okomin <ilya.okomin@oracle.com>)
 - Add ol product support to configure_firewalld_rate_limiting rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add ol product support to install_antivirus rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Update references with ol7 stig ids (Ilya Okomin <ilya.okomin@oracle.com>)
 - Incorporate reviewer suggestions. (Matěj Týč <matyc@redhat.com>)
 - change rules for disabling ipv6 (Vojtech Polasek <vpolasek@redhat.com>)
 - Skip generation of remediation when using special the default profile.
(Gabriel Becker <ggasparb@redhat.com>)
 - sleep 60 seconds after reboot (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix profile metadata in test scenarios for
auditd_audispd_syslog_plugin_activated (Matus Marhefka <mmarhefk@redhat.com>)
 - Add ol product support to stig rules remediation and oval content (Ilya
Okomin <ilya.okomin@oracle.com>)
 - Add ol product support to stig rules (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add e8 profile for ocp4 (Jack Adolph <jack.adolph@gmail.com>)
 - Removed OVAL in favor of template (eradot4027 <jrtonmac@gmail.com>)
 - ocp4: fix image pullspec output from build_ds_container.sh (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Added OVAL and tests (eradot4027 <jrtonmac@gmail.com>)
 - ocp4: Upgrade to compliance-operator v0.1.8 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: Upgrade compliance-operator used for testing to v0.1.7 (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Imcremental improvements. (Matěj Týč <matyc@redhat.com>)
 - Fix ol8 condition in accounts-physical rules (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Fixed OCIL Clause (eradot4027 <jrtonmac@gmail.com>)
 - Fix grub path in grub2_enable_fips_mode bash script (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Fix rsyslog_nolisten regex to match rule description (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add ol7 stigid prefix mapping (Ilya Okomin <ilya.okomin@oracle.com>)
 - Added check to RHEL7,8 CIS Profile per request (eradot4027
<jrtonmac@gmail.com>)
 - Modified per comment (eradot4027 <jrtonmac@gmail.com>)
 - Modified per pull request comments. (eradot4027 <jrtonmac@gmail.com>)
 - MOre CIS References (eradot4027 <jrtonmac@gmail.com>)
 - CIS RHEL 7 Benchmark Reference (eradot4027 <jrtonmac@gmail.com>)
 - Added CIS Reference (eradot4027 <jrtonmac@gmail.com>)
 - Haven't found references except for Solaris 11.  Remove reference section
(eradot4027 <jrtonmac@gmail.com>)
 - Initial commit of rule for issue 5524 (eradot4027 <jrtonmac@gmail.com>)
 - Make the datastream namespaces readable again. (Matěj Týč
<matyc@redhat.com>)
 - Document RHV el7 and el8 support (Watson Sato <wsato@redhat.com>)
 - Allow RHEL8 as a Host (Watson Sato <wsato@redhat.com>)
 - Make rhv4 product applicable to versions 4.4+ (Watson Sato
<wsato@redhat.com>)
 - Update CPE hypervisor version (Watson Sato <wsato@redhat.com>)
 - Remove not applicable rules from rhv4 (Watson Sato <wsato@redhat.com>)
 - Remove configure_opensc_nss_db from rhv4 (Watson Sato <wsato@redhat.com>)
 - Move rhv4 ensure_redhat_gpgkey_installed to rhel8 (Watson Sato
<wsato@redhat.com>)
 - Move rhv4 grub2_bootloader_argument rules to rhel8 (Watson Sato
<wsato@redhat.com>)
 - Remove rules for packages deprecated in RHEL8 (Watson Sato
<wsato@redhat.com>)
 - Update applicability of audispd rules for RHV4 (Watson Sato
<wsato@redhat.com>)
 - Install audisp plugin to be able to configure it (Watson Sato
<wsato@redhat.com>)
 - Select crypto-policy rules in RHV4 Profiles (Watson Sato <wsato@redhat.com>)
 - Select rhel8 FIPS rules in RHV4 profiles (Watson Sato <wsato@redhat.com>)
 - removed zypper check as it was invalid.  Updated standard profile to reflect
(eradot4027 <jrtonmac@gmail.com>)
 - added zypper config file (eradot4027 <jrtonmac@gmail.com>)
 - added Ensure auditd Collects File Deletion Events by User to standard profile
(eradot4027 <jrtonmac@gmail.com>)
 - Resolved per pull request. removed openSSH check and removed ssh from cpe
(eradot4027 <jrtonmac@gmail.com>)
 - Resolved pull per (eradot4027 <jrtonmac@gmail.com>)
 - Resolved CPE per pull comment (eradot4027 <jrtonmac@gmail.com>)
 - Resolved incorrect CPE per pull comments (eradot4027 <jrtonmac@gmail.com>)
 - removed merged duplicates in cpe dictionary ssgs validate now for SLE15
(eradot4027 <jrtonmac@gmail.com>)
 - Fixed issues with cpe dictionary and added zypper check (eradot4027
<jrtonmac@gmail.com>)
 - Added support fo SLE15 to kernel modules loading init and finit (eradot4027
<jrtonmac@gmail.com>)
 - Added multi_platform_sle to audit check shared check for kernel module
loading (eradot4027 <jrtonmac@gmail.com>)
 - added gdm cpe (eradot4027 <jrtonmac@gmail.com>)
 - Fixed CPE for SSH (eradot4027 <jrtonmac@gmail.com>)
 - Added correct CPE for OpenSSH to check (eradot4027 <jrtonmac@gmail.com>)
 - Forgoet to add file (eradot4027 <jrtonmac@gmail.com>)
 - added cpe and checks for openssh (eradot4027 <jrtonmac@gmail.com>)
 - Resolved typos for zypper (eradot4027 <jrtonmac@gmail.com>)
 - adde zypper checks, and updated cpe (eradot4027 <jrtonmac@gmail.com>)
 - Fixed CPE definition in check. (eradot4027 <jrtonmac@gmail.com>)
 - Reverted to CPE 2 (eradot4027 <jrtonmac@gmail.com>)
 - Added CPE 2.3 from NIST (eradot4027 <jrtonmac@gmail.com>)
 - Updated constans with correct cpe from SLES.prod (eradot4027
<jrtonmac@gmail.com>)
 - Updated constans with correct cpe from SLES.prod (eradot4027
<jrtonmac@gmail.com>)
 - Fixed cpe definition in installed OS check (eradot4027 <jrtonmac@gmail.com>)
 - Fixed CPE according to products (eradot4027 <jrtonmac@gmail.com>)
 - Updated to reflect cpe in /etc/product.d/* on SLES machine (eradot4027
<jrtonmac@gmail.com>)
 - removed prodtyoe from group beacuse I didn't read the docs (eradot4027
<jrtonmac@gmail.com>)
 - Added product types to ensure log rotation check on sle12,15 (eradot4027
<jrtonmac@gmail.com>)
 - Added more auditing for SLE15 (eradot4027 <jrtonmac@gmail.com>)
 - Added audit configurations (eradot4027 <jrtonmac@gmail.com>)
 - Added comment for Kernel Options (eradot4027 <jrtonmac@gmail.com>)
 - Added more ssh options and comment fields (eradot4027 <jrtonmac@gmail.com>)
 - Added ssh and http daemon stuff to tandard.profile and enabled it in the
checks (eradot4027 <jrtonmac@gmail.com>)
 - Added HTML guide generation and a few more checks to standard profile
(eradot4027 <jrtonmac@gmail.com>)
 - fixed spelling error (eradot4027 <jrtonmac@gmail.com>)
 - Added firewalld checks to standard profile as pr SUSE Hardening Guide
(eradot4027 <jrtonmac@gmail.com>)
 - fixed variable value issues (eradot4027 <jrtonmac@gmail.com>)
 - Added password variables to SUSE Hardening Guide's values (eradot4027
<jrtonmac@gmail.com>)
 - ocp4/e2e: Add Makefile variable to optionally skip the operator install (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - make oval ids use _ instead of . (Vojtech Polasek <vpolasek@redhat.com>)
 - add escaped dot only in arg_name_value (Vojtech Polasek
<vpolasek@redhat.com>)
 - adjust cis profiles (Vojtech Polasek <vpolasek@redhat.com>)
 - rename rule, add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - modify templates (Vojtech Polasek <vpolasek@redhat.com>)
 - Add RHEL7 CCEs to chronyd_specify_remote_server, package_chrony_installed,
and service_chronyd_enabled. (Milan Lysonek <mlysonek@redhat.com>)
 - add kickstarts for cis into rhel7 and rhel8 (Vojtech Polasek
<vpolasek@redhat.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - linting (Shawn Wells <shawn@redhat.com>)
 - Update for iokomin (Shawn Wells <shawn@redhat.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: create .all-contributorsrc [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - docs: update README.md [skip ci] (allcontributors[bot]
<46447321+allcontributors[bot]@users.noreply.github.com>)
 - ansible remediation checks for package presence (Vojtech Polasek
<vpolasek@redhat.com>)
 - ocp4: Remove fapolicyd checks from RHCOS moderate profile (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - Revert "changed missing parameter pass from true to false per stig 40440"
(Gabriel Gaspar Becker <ggasparb@redhat.com>)
 - add configure_etc_hosts_deny to ignored rules because it breaks ssh
connections (Vojtech Polasek <vpolasek@redhat.com>)
 - Comment out not applicable requirements (Watson Sato <wsato@redhat.com>)
 - Select rule to disable wireless interfaces (Watson Sato <wsato@redhat.com>)
 - Select newly developed rules in rhel7 CIS (Watson Sato <wsato@redhat.com>)
 - macOS build fixes (Gabe <redhatrises@gmail.com>)
 - Macro Fixes (Gabe <redhatrises@gmail.com>)
 - Use compliance type language in descriptions (Gabe <redhatrises@gmail.com>)
 - ocp4: Upgrade to using compliance-operator v0.1.6 (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: reset client in e2e tests after installing operator (Juan Antonio
Osorio Robles <jaosorior@redhat.com>)
 - ocp4: fixes to build_ds_container.sh (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - rename rules to minimize confusion (Vojtech Polasek <vpolasek@redhat.com>)
 - fix cces (Vojtech Polasek <vpolasek@redhat.com>)
 - add rules to rhel7 and rhel8 cis profiles (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rule for /etc/shadow (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule for /etc/group (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule for passwd (Vojtech Polasek <vpolasek@redhat.com>)
 - fix cces (Vojtech Polasek <vpolasek@redhat.com>)
 - fix rationale (Vojtech Polasek <vpolasek@redhat.com>)
 - fix wording in oval and rule.yml (vojtapolasek <krecoun@gmail.com>)
 - add test for empty option array (Vojtech Polasek <vpolasek@redhat.com>)
 - fix cce (Vojtech Polasek <vpolasek@redhat.com>)
 - add one more test (Vojtech Polasek <vpolasek@redhat.com>)
 - fix ansible (Vojtech Polasek <vpolasek@redhat.com>)
 - wip ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add check and bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - fix cce (Vojtech Polasek <vpolasek@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - fix cce (Vojtech Polasek <vpolasek@redhat.com>)
 - update tests to install the package (Vojtech Polasek <vpolasek@redhat.com>)
 - finish rule ntpd_configure_restrictions (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - make description and ocil clearer (Vojtech Polasek <vpolasek@redhat.com>)
 - change severity, reorder prodtypes, and add sudo instead of root (Vojtech
Polasek <vpolasek@redhat.com>)
 - fix wording in rule.yml (vojtapolasek <krecoun@gmail.com>)
 - add rule to rhel7 and rhel8 cis (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix typo in ocil clause (Watson Sato <wsato@redhat.com>)
 - Fix typo in CCE assignment (Watson Sato <wsato@redhat.com>)
 - ocp4: Add go dependencies to test directory (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4 test: Take IMAGE_FORMAT env variable into use (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Fix typo in title of rule (Watson Yuuma Sato <wsato@redhat.com>)
 - Update linux_os/guide/system/accounts/accounts-
banners/file_groupowner_etc_motd/rule.yml (Watson Yuuma Sato <wsato@redhat.com>)
 - Describe different permissions of shadow files (Watson Sato
<wsato@redhat.com>)
 - ocp4 content image: Use fedora image registry instead of docker.io (Juan
Antonio Osorio Robles <jaosorior@redhat.com>)
 - Describe different group owners of shadow files (Watson Sato
<wsato@redhat.com>)
 - Fix language and inconsistencies in rationale (Watson Sato
<wsato@redhat.com>)
 - Select rules for backup of account files (Watson Sato <wsato@redhat.com>)
 - Add rules for /etc/gshadow- permissions and owner (Watson Sato
<wsato@redhat.com>)
 - Add rules for /etc/group- permissions and owner (Watson Sato
<wsato@redhat.com>)
 - Add rules for /etc/shadow- permissions and owner (Watson Sato
<wsato@redhat.com>)
 - Add rules to check owners of /etc/motd (Watson Sato <wsato@redhat.com>)
 - Add rules to check owners of /etc/issue (Watson Sato <wsato@redhat.com>)
 - fix typo (vojtapolasek <krecoun@gmail.com>)
 - Add initial macOS content (Gabe <redhatrises@gmail.com>)
 - Add CPE entries for sle15 product. (Gabriel Becker <ggasparb@redhat.com>)
 - add rule to rhel7 cis profile (Vojtech Polasek <vpolasek@redhat.com>)
 - create rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Extend timeout for VM restarts. (Milan Lysonek <mlysonek@redhat.com>)
 - Select rules for backup account files (Watson Sato <wsato@redhat.com>)
 - Select rule for Chrony and fix rhel7 references (Watson Sato
<wsato@redhat.com>)
 - Add a few more selections to rhel7 profile (Watson Sato <wsato@redhat.com>)
 - add rule to cis rhel8 profile, fix prodtype sorting (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove sshd_enable_x11_forwarding (Watson Sato <wsato@redhat.com>)
 - add missing prodtype (Vojtech Polasek <vpolasek@redhat.com>)
 - Update linux_os/guide/services/ldap/openldap_client/package_openldap-
clients_removed/rule.yml (vojtapolasek <krecoun@gmail.com>)
 - Rewrite title of ownership rules (Watson Sato <wsato@redhat.com>)
 - Add missing CCEs for rules from CIS profile in RHEL8. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add missing CCEs for rules from CIS profile in RHEL7. (Milan Lysonek
<mlysonek@redhat.com>)
 - Restrict service_rsyncd_disabled as machine only. (Milan Lysonek
<mlysonek@redhat.com>)
 - Restrict kernel_module_* rules as machine only. (Milan Lysonek
<mlysonek@redhat.com>)
 - Revert "changed missing parameter pass to false per stig requirement" (Shawn
Wells <shawn@redhat.com>)
 - ocp4: Add initial e2e test (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix service check service_chronyd_enabled to use proper rhel package name
(Klaas Demter <Klaas-@users.noreply.github.com>)
 - Fix cce assignmetns and references (Watson Sato <wsato@redhat.com>)
 - Rules for /etc/hosts.deny permissions and owner (Watson Sato
<wsato@redhat.com>)
 - Rules for /etc/hosts.allow permissions and owner (Watson Sato
<wsato@redhat.com>)
 - add rule to cis rhel8 profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Mention Compliance as Code blog in main README page. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove test that doesn't make sense (Watson Sato <wsato@redhat.com>)
 - Use profile "all" to test banner_etc_motd (Watson Sato <wsato@redhat.com>)
 - Add Ansible for banner_etc_motd (Watson Sato <wsato@redhat.com>)
 - Make banner_etc_motd like banner_etc_issue (Watson Sato <wsato@redhat.com>)
 - Updated description per comment (Jon Thmpson <jrtonmac@gmail.com>)
 - Add rules for /etc/passwd- permissions and owner (Watson Sato
<wsato@redhat.com>)
 - change wording of rationale (Vojtech Polasek <vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Remove incorrect rule selection and its references (Watson Sato
<wsato@redhat.com>)
 - add rule to rhel8 cis profile (Vojtech Polasek <vpolasek@redhat.com>)
 - add new rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Add RHEL7 CIS references for login events rules (Watson Sato
<wsato@redhat.com>)
 - Improved handling of grub2 password/admin checks. (Matěj Týč
<matyc@redhat.com>)
 - Streamlined description by removing ineffective escape sequences. (Matěj
Týč <matej.tyc@gmail.com>)
 - Continued adding requirements to the standard profile and updated the rules
for product support. (Jon Thmpson <jrtonmac@gmail.com>)
 - Resolved mistakes adding prodtype to rules (Jon Thmpson <jrtonmac@gmail.com>)
 - Adding SLE15 support to rules and updating SLE15 Standard Profile (Jon
Thmpson <jrtonmac@gmail.com>)
 - Reverted SLES11 STIG because of errant edit (Jon Thmpson
<jrtonmac@gmail.com>)
 - Merged SUSE Hardening profile with Standard and removed hardening per
comment. (Jon Thmpson <jrtonmac@gmail.com>)
 - Added dmesg Restrictions per SHG 2.9.11 (Jon Thmpson <jrtonmac@gmail.com>)
 - Added file system hardening SHG 2.9.10 (Jon Thmpson <jrtonmac@gmail.com>)
 - Modified for sle15 support (Jon Thmpson <jrtonmac@gmail.com>)
 - Added sle15 to product for these network-kernel rules (Jon Thmpson
<jrtonmac@gmail.com>)
 - Modified for Hardening profile creation (Jon Thmpson <jrtonmac@gmail.com>)
 - Started profile based on SUSE Hardening Guide (Jon Thmpson
<jrtonmac@gmail.com>)
 - changed missing parameter pass to false per stig requirement (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - Add Initial CIS profile (Watson Sato <wsato@redhat.com>)
 - remove ntp mention from rule title (Vojtech Polasek <vpolasek@redhat.com>)
 - Parametrized the sshd_use_approved_ciphers rule. (Matěj Týč
<matyc@redhat.com>)
 - fix remediations to remove any previous user configuration (Vojtech Polasek
<vpolasek@redhat.com>)
 - Improved macros comments/descriptions according to review feedback. (Matěj
Týč <matyc@redhat.com>)
 - fix and add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - fix wording and ansible (Vojtech Polasek <vpolasek@redhat.com>)
 - Added tests for the new check/remediation pair. (Matěj Týč
<matyc@redhat.com>)
 - small wording changes (Vojtech Polasek <vpolasek@redhat.com>)
 - Removed sles15_product.sh per request (Jon Thmpson <jrtonmac@gmail.com>)
 - changed missing parameter pass from true to false per stig 40440 (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - Update CIS references for sshd_config (Watson Sato <wsato@redhat.com>)
 - Select rules for /etc/cron.d permissions (Watson Sato <wsato@redhat.com>)
 - Select rules for /etc/cron.monthly permissions (Watson Sato
<wsato@redhat.com>)
 - Select rules for /etc/cron.weekly permissions (Watson Sato
<wsato@redhat.com>)
 - Select rules for /etc/cron.daily permissions (Watson Sato <wsato@redhat.com>)
 - Select rules for /etc/cron.hourly permissions (Watson Sato
<wsato@redhat.com>)
 - Select rules for /etc/crontab permissions (Watson Sato <wsato@redhat.com>)
 - fix cces (Vojtech Polasek <vpolasek@redhat.com>)
 - fix description (Vojtech Polasek <vpolasek@redhat.com>)
 - fix remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - modify bash macro not to add iburst (Vojtech Polasek <vpolasek@redhat.com>)
 - make oval accept also pool (Vojtech Polasek <vpolasek@redhat.com>)
 - make rules available for all platforms (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix typos and fix oval affected products (Vojtech Polasek
<vpolasek@redhat.com>)
 - add tests and ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - create new chrony rules for CIS (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rule for permissions of /etc/issue (Watson Sato <wsato@redhat.com>)
 - Add rule for permissions of /etc/motd (Watson Sato <wsato@redhat.com>)
 - Add return statement after final scan on libvirt-based. (Gabriel Becker
<ggasparb@redhat.com>)
 - Edited label for stig values in .var, now nonspecific to OS (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - Changed var argument to stig to match edited .var entry (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - Update references for rpm_verification rules (Watson Sato <wsato@redhat.com>)
 - Select rules for system file permissions (Watson Sato <wsato@redhat.com>)
 - Allowed oval inspection utility to deduce rule IDs. (Matěj Týč
<matyc@redhat.com>)
 - added value for rhel7 current stig requirements (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - added reference to approved macs .var file in rhel7 stig profile (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - Fix typos in CIS references (Watson Sato <wsato@redhat.com>)
 - add ntp and chrony cpes (Vojtech Polasek <vpolasek@redhat.com>)
 - Rewrote OVAL checks to use macros. (Matěj Týč <matyc@redhat.com>)
 - Increased accuracy of the  description. (Matěj Týč <matej.tyc@gmail.com>)
 - Moved warnings from description to the warnings section. (Matěj Týč
<matyc@redhat.com>)
 - Incorporated review feedback. (Matěj Týč <matyc@redhat.com>)
 - Update OVAL description. (Matěj Týč <matej.tyc@gmail.com>)
 - Extracted a grub superuser username rule from the grub2_password rule.
(Matěj Týč <matyc@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - add oval check (Vojtech Polasek <vpolasek@redhat.com>)
 - add remediations (Vojtech Polasek <vpolasek@redhat.com>)
 - add chrony cpe to rhel7, rhel8, fedora (Vojtech Polasek
<vpolasek@redhat.com>)
 - add rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Removed test stig (Jon Thmpson <jrtonmac@gmail.com>)
 - Modified product.yml with correct package manager (Jon Thmpson
<jrtonmac@gmail.com>)
 - Added SLE15 to build_product (Jon Thmpson <jrtonmac@gmail.com>)
 - Added SLE15 to constants.py file (Jon Thmpson <jrtonmac@gmail.com>)
 - Added SLE 15 products (Jon Thmpson <jrtonmac@gmail.com>)
 - Added check of installed OS file for SLED/SLES 15 (Jon Thmpson
<jrtonmac@gmail.com>)
 - Changing Oval check to Jinja macro format (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - Select rules for SSH and add references (Watson Sato <wsato@redhat.com>)
 - Add package_audit_installed (Watson Sato <wsato@redhat.com>)
 - Select rules for audit login events (Watson Sato <wsato@redhat.com>)
 - SSGTS: addressed incompatibilities with python2 (Matus Marhefka
<mmarhefk@redhat.com>)
 - Update audit data retention selects and variables (Watson Sato
<wsato@redhat.com>)
 - Add ignition remediation for grub2_page_poison_argument (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for grub2_slub_debug_argument (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for grub2_pti_argument (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for grub2_audit_backlog_limit_argument (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for grub2_audit_argument (Jakub Hrozek
<jhrozek@redhat.com>)
 - Initial RHEL8 CIS profile (Shawn Wells <shawn@redhat.com>)
 - Simple tests for audit_rules_sysadmin_actions (Watson Sato
<wsato@redhat.com>)
 - Add Ansible for audit_rules_sysadmin_actions (Watson Sato <wsato@redhat.com>)
 - Fix remediatino for /etc/sudoers.d/ and OVAL check (Watson Sato
<wsato@redhat.com>)
 - Bump version to 0.1.50 (Vojtech Polasek <vpolasek@redhat.com>)
 - Improved the text based on the reviewer feedback. (Matěj Týč
<matyc@redhat.com>)
 - update list of contributors (Vojtech Polasek <vpolasek@redhat.com>)
 - Add XCCDF conflicts and requires (Gabe <redhatrises@gmail.com>)
 - Re-order shorthand2xccdf.xslt elements for OpenSCAP validation hack (Gabe
<redhatrises@gmail.com>)
 - adding oval check for rule (Ultra IA
<42849651+cyarbrough76@users.noreply.github.com>)
 - Fix multiple banner regex stripping (Watson Sato <wsato@redhat.com>)
 - SSGTS: catch timeout exceptions in case of VM reboot timeouts (Matus Marhefka
<mmarhefk@redhat.com>)
 - Fix call of banner_anchor_wrap (Watson Sato <wsato@redhat.com>)
 - test_suite.py: add help output about unselecting rules which might break ssh
access (Matus Marhefka <mmarhefk@redhat.com>)
 - Clear up coreos profile titles and descriptions (Gabe
<redhatrises@gmail.com>)
 - Add ignition remediation for kernel_module_squashfs_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_cramfs_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_bluetooth_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_tipc_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_sctp_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_firewire-core_disabled (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_can_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_atm_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_vfat_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_usb-storage_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Wrap banner text with regex anchors (Watson Sato <wsato@redhat.com>)
 - Update comments (Jan Černý <jcerny@redhat.com>)
 - Add ignition remediation for kernel_module_udf_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_jffs2_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Improved the OCIL entry for sysctl rules. (Matěj Týč <matyc@redhat.com>)
 - Add ignition remediation for kernel_module_hfsplus_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_hfs_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for kernel_module_freevxfs_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add resources to install the compliance-operator (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Fix ansible linting issue on rule ensure_gpgcheck_never_disabled. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add dconf_db_up_to_date to RHEL8 STIG profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - ssg_test_suite/virt.py: add debug logging for timeout events (Matus Marhefka
<mmarhefk@redhat.com>)
 - The whole /etc/issue file should be evaluated (Watson Sato
<wsato@redhat.com>)
 - Fix template mount_option_removable_partitions (Jan Černý
<jcerny@redhat.com>)
 - regexify_banner.py: Set x permission and shebang (Watson Sato
<wsato@redhat.com>)
 - Add ignition remediation for sysctl_kernel_yama_ptrace_scope (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_kernel_unprivileged_bpf_disabled (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_kernel_perf_event_paranoid (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_kernel_kexec_load_disabled (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_kernel_kptr_restrict (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_kernel_dmesg_restrict (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_fs_protected_symlinks (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_fs_protected_hardlinks (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_default_send_redirects
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_all_send_redirects (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_tcp_syncookies (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for
sysctl_net_ipv4_icmp_ignore_bogus_error_responses (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_icmp_echo_ignore_broadcasts
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_default_secure_redirects
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_default_rp_filter (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_default_log_martians (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_default_accept_source_route
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_default_accept_redirects
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_all_secure_redirects (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_all_rp_filter (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_all_log_martians (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_all_accept_source_route
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv4_conf_all_accept_redirects (Jakub
Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv6_conf_default_accept_source_route
(Jakub Hrozek <jhrozek@redhat.com>)
 - Add ignition remediation for sysctl_net_ipv6_conf_all_accept_source_route
(Jakub Hrozek <jhrozek@redhat.com>)
 - Added support for rawhide gpgkey check/remediation. (Matěj Týč
<matyc@redhat.com>)
 - Fix the utils/ignition-remediation.py helper script (Jakub Hrozek
<jhrozek@redhat.com>)
 - ocp4: Remove the rule that disables user namespaces (Jakub Hrozek
<jhrozek@redhat.com>)
 - Fix description of sysctl rules. (Matěj Týč <matyc@redhat.com>)
 - Fix broken incomplete profiles build (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - check for all digits and make the group noncapturing (Vojtech Polasek
<vpolasek@redhat.com>)
 - tests/ssg_test_suite: addressed various pep8 code issues (Matus Marhefka
<mmarhefk@redhat.com>)
 - SSGTS: profile mode extended to reboot VM before performing the final scan
(Matus Marhefka <mmarhefk@redhat.com>)
 - add negative lookahead to OVAL template making it smarter (Vojtech Polasek
<vpolasek@redhat.com>)
 - Code style fixes (Watson Sato <wsato@redhat.com>)
 - Document the new macros, filter and utility (Watson Sato <wsato@redhat.com>)
 - Automatically escape regex unsafe chars in banner (Watson Sato
<wsato@redhat.com>)
 - Move the macro to be a Jinja2 filter (Watson Sato <wsato@redhat.com>)
 - Add utility to regexify a login banner (Watson Sato <wsato@redhat.com>)
 - Remove unecessary escapping in short banner (Watson Sato <wsato@redhat.com>)
 - Move the DoD banners into jinja variables (Watson Sato <wsato@redhat.com>)
 - Move ansible banner deregexification to macros (Watson Sato
<wsato@redhat.com>)
 - Move bash banner deregexification to macros (Watson Sato <wsato@redhat.com>)
 - Use latest DISA SRG mapping available (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Move common variables to the single place (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Update reference RHEL8 STIG profile (Watson Sato <wsato@redhat.com>)
 - Add Ansible remediation for banner_etc_issue (Watson Sato <wsato@redhat.com>)
 - Fix banner regex stripping for Ansible (Watson Sato <wsato@redhat.com>)
 - Fix Ansible for dconf banner-message-text lock (Watson Sato
<wsato@redhat.com>)
 - ocp4: Remove bind crypto policy check (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4: remove libreswan related checks from profiles (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4: Remove firewalld checks from profiles (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add rule to check dconf banner (Watson Sato <wsato@redhat.com>)
 - Document what the regexes do in the banner (Watson Sato <wsato@redhat.com>)
 - Simplify banner remediation regexes (Watson Sato <wsato@redhat.com>)
 - Make banner compatible with console and dconf (Watson Sato
<wsato@redhat.com>)
 - Fix text of banners, remove space after dash (Watson Sato <wsato@redhat.com>)
 - Update test scenario metadata for banner tests (Watson Sato
<wsato@redhat.com>)
 - Fix test scenarios for OSPP profile (Watson Sato <wsato@redhat.com>)
 - Fix stripping of short banner from dod_banners (Watson Sato
<wsato@redhat.com>)
 - Create macro to translate text to banner text. (Marek Haicman
<mhaicman@redhat.com>)
 - tests/install_vm.py: updated url to point to Fedora 31 (Matus Marhefka
<mmarhefk@redhat.com>)
 - fix wrong value in test scenario (Vojtech Polasek <vpolasek@redhat.com>)
 - Added a reminder about possible relationship of changed profiles. (Matěj
Týč <matyc@redhat.com>)
 - Update ssg/build_yaml.py (vojtapolasek <krecoun@gmail.com>)
 - Streamlined profile compilation. (Matěj Týč <matyc@redhat.com>)
 - force order of disabling_ipv6 group before configuring_ipv6 group (Vojtech
Polasek <vpolasek@redhat.com>)
 - Updated tests feedback. (Matěj Týč <matyc@redhat.com>)
 - Enable rule installed_OS_is_FIPS_certified in OL8 (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Adjust OL8 OSPP profile (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add OL8 Essential Eight profile (Ilya Okomin <ilya.okomin@oracle.com>)
 - Handle refinements in profiles correctly. (Matěj Týč <matyc@redhat.com>)
 - Addressed review feedback. (Matěj Týč <matyc@redhat.com>)
 - Added a test of profile stability + included it in the test suite. (Matěj
Týč <matyc@redhat.com>)
 - Integrated profile precompilation into the build system. (Matěj Týč
<matyc@redhat.com>)
 - Added script to compile profiles. (Matěj Týč <matyc@redhat.com>)
 - Modified the build code to work with subclasses. (Matěj Týč
<matyc@redhat.com>)
 - Sort prodtypes lexicographically. (Matěj Týč <matyc@redhat.com>)
 - Improve the mass prodtype changing script. (Matěj Týč <matyc@redhat.com>)
 - Add rule for sshd PermitRootLogin = prohibit-password (Pat Riehecky
<riehecky@fnal.gov>)
 - Update GNOME group text for OL products (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Make audit_file_modification remediation content product intependent (Ilya
Okomin <ilya.okomin@oracle.com>)
 - Fix grub2_bootloader_argument bash template comment (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Make perform_audit_rules_privileged_commands_remediation shared function
platform independent (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add OL support to permissions_within_important_dirs rules (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to software sudo rules (Ilya Okomin <ilya.okomin@oracle.com>)
 - Update rpm_verification group rules (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add OL8 support to partition_for_var_tmp rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to kernel_module_cramfs_disabled rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to disable_users_coredumps rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to audit_rules_for_ospp rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Fix newline discrepancies in jinja macros for file content (Matus Marhefka
<mmarhefk@redhat.com>)
 - force strict ordering in group network-firewalld (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add OL support to missing ospp profile packages rules (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to network_sniffer_disabled rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to package_quagga_removed rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to disabling_squid rules (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to service_avahi-daemon_disabled rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to package_pigz_removed rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL8 support to service_fapolicyd_enabled rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to policy audit rules (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add OL support to configuring_ipv6 rules (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to the partitions mount rules (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add OL support to accounts user_umask rules (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Also remove 389-ds LDAP server (Pat Riehecky <riehecky@fnal.gov>)
 - Add check for read-write SNMP users (Pat Riehecky <riehecky@fnal.gov>)
 - Fix pcre_exec pattern validation in rsyslog rules (Watson Sato
<wsato@redhat.com>)
 - Add rsyslog include object support in rsyslog_files OVALs (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add RADIUS group and rule to remove server (Pat Riehecky <riehecky@fnal.gov>)
 - Permit setting sshd GSSAPI to yes (Pat Riehecky <riehecky@fnal.gov>)
 - Relabel IDs of object_references (Watson Sato <wsato@redhat.com>)
 - Update OL8 PCI-DSS profile (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add network_host_and_router_parameters group to machine-only platform. (Milan
Lysonek <mlysonek@redhat.com>)
 - Add CCE identifier for openssh-server installed (Watson Sato
<wsato@redhat.com>)
 - Remove krb5-server (Pat Riehecky <riehecky@fnal.gov>)
 - rephrase some rationales, fix SFR (Vojtech Polasek <vpolasek@redhat.com>)
 - Permit enforcement of nosuid on /var (Pat Riehecky <riehecky@fnal.gov>)
 - add rules to rhel8 stig profile (Vojtech Polasek <vpolasek@redhat.com>)
 - modify ospp profile (Vojtech Polasek <vpolasek@redhat.com>)
 - create new rules, add missing reference to older rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove dot from yum.repos.d path (Caitlin Macleod <caitelatte@gmail.com>)
 - indicate in tests that there is no remediation (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update gpgcheck never disabled to use ini_file (Caitlin Macleod
<caitelatte@gmail.com>)
 - fix typos in rule titles (Vojtech Polasek <vpolasek@redhat.com>)
 - create tests (Vojtech Polasek <vpolasek@redhat.com>)
 - create oval checks (Vojtech Polasek <vpolasek@redhat.com>)
 - Map missing SRG rules (Watson Sato <wsato@redhat.com>)
 - Set no_extra_spaces when enabling gpgcheck (Orion Poplawski <orion@nwra.com>)
 - Add "Scientific" to Ensure GPG check Enabled for Local Packages check (Orion
Poplawski <orion@nwra.com>)
 - Jinja code style improvements (Watson Yuuma Sato <wsato@redhat.com>)
 - Map package_pigz_removed to ADSLR SRG item (Watson Sato <wsato@redhat.com>)
 - Same SRG mapping as package_subscription-manager_installed (Watson Sato
<wsato@redhat.com>)
 - Map strong entopy rules to SRG-OS-000480-GPOS-00227 (Watson Sato
<wsato@redhat.com>)
 - Add and fix few entries of SRG mapping. (Gabriel Becker
<ggasparb@redhat.com>)
 - Re-add configure_firewalld_rate_limiting to rhel7 stig profile (Gabe
<redhatrises@gmail.com>)
 - Update SRG mapping after split of audit_rule_for_ospp (Watson Sato
<wsato@redhat.com>)
 - make test precise, style fixes (Vojtech Polasek <vpolasek@redhat.com>)
 - Add rules to configure rsyslog TLS (Watson Sato <wsato@redhat.com>)
 - fix regex in oval and update test (Vojtech Polasek <vpolasek@redhat.com>)
 - utils: A helper script to generate remediations for files (Jakub Hrozek
<jhrozek@redhat.com>)
 - Fix regular expression for RHCOS 4.4 OVAL check (test_rhel8_coreos) (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - add ocp4 to applicable products (vojtapolasek <krecoun@gmail.com>)
 - Update Fedora GPG Keys (Jan Černý <jcerny@redhat.com>)
 - add service_auditd_enabled ignition remediation (Matt Rogers
<mrogers@redhat.com>)
 - Add Kickstart file for STIG profile (Watson Sato <wsato@redhat.com>)
 - fix long lines and missing empty line (Vojtech Polasek <vpolasek@redhat.com>)
 - use variable in sysctl_net_ipv4_tcp_invalid_ratelimit (Vojtech Polasek
<vpolasek@redhat.com>)
 - Remove template files from checksum approach (Watson Sato <wsato@redhat.com>)
 - Update docs for template audit_file_contents (Watson Sato <wsato@redhat.com>)
 - Re-assign CCEs to rules with CCE conflict (Watson Sato <wsato@redhat.com>)
 - Fix template decorator name (Watson Sato <wsato@redhat.com>)
 - Make file_contents template specific for audit (Watson Sato
<wsato@redhat.com>)
 - Make macros out of the file_contents template (Watson Sato
<wsato@redhat.com>)
 - Prevent variable expansion in file_contents (Watson Sato <wsato@redhat.com>)
 - Updated OCIL clause (Watson Sato <wsato@redhat.com>)
 - Add tests comparing with actual filed copied (Watson Sato <wsato@redhat.com>)
 - Add reference audit sample files (Watson Sato <wsato@redhat.com>)
 - Fix file path of rules (Watson Sato <wsato@redhat.com>)
 - remove checksums from descriptions and ocils (Vojtech Polasek
<vpolasek@redhat.com>)
 - Force absolute import on template.py (Watson Sato <wsato@redhat.com>)
 - Add simple test scenarios for audit_delete_success (Watson Sato
<wsato@redhat.com>)
 - Add split audit rules to ospp profile (Watson Sato <wsato@redhat.com>)
 - Unscape contents' special xml char in remediations (Watson Sato
<wsato@redhat.com>)
 - Move rules to file_contents template (Watson Sato <wsato@redhat.com>)
 - Move all sample rule contents to Jinja variables (Watson Sato
<wsato@redhat.com>)
 - Blank lines don't need to indentend (Watson Sato <wsato@redhat.com>)
 - Use template file_contents in rule basic_audit_configuration (Watson Sato
<wsato@redhat.com>)
 - Move 10-base-config contents to a Jinja variable (Watson Sato
<wsato@redhat.com>)
 - Add file_contents template (Watson Sato <wsato@redhat.com>)
 - rewrite rule definitions (Vojtech Polasek <vpolasek@redhat.com>)
 - fix typo in test (Vojtech Polasek <vpolasek@redhat.com>)
 - improve the sample rule description and ocil (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix duplicate cces and broken rule.yml (Vojtech Polasek
<vpolasek@redhat.com>)
 - rewrite first audit rule (Vojtech Polasek <vpolasek@redhat.com>)
 - Keep audit_rules_for_ospp in ospp profile (Watson Sato <wsato@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - document the template (Vojtech Polasek <vpolasek@redhat.com>)
 - add macros to template (Vojtech Polasek <vpolasek@redhat.com>)
 - modify SRG references for splitted rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - create rest of rules based on the 10-base-config one (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix reused cce (Polášek Vojtěch <Vojtech.Polasek@gmail.com>)
 - added tests (Vojtech Polasek <vpolasek@redhat.com>)
 - write new template audit_rules_rule_file (Vojtech Polasek
<vpolasek@redhat.com>)
 - remove rsyslog rules from ospp (Polášek Vojtěch
<Vojtech.Polasek@gmail.com>)
 - Update ISACA COBIT URI. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix typo in openshift content. (Gabriel Becker <ggasparb@redhat.com>)
 - Rule and remediation wording improvements. (Matěj Týč <matyc@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - fix oval, remove rule from rhel8 (Vojtech Polasek <vpolasek@redhat.com>)
 - reword rationale, change file name (Vojtech Polasek <vpolasek@redhat.com>)
 - remove blank=true from  jinja macro as rhel6 and rhel7 do not support it
(Vojtech Polasek <vpolasek@redhat.com>)
 - add tests (Vojtech Polasek <vpolasek@redhat.com>)
 - create checks, remediations, (Vojtech Polasek <vpolasek@redhat.com>)
 - Add a rule for the openssl strong entropy wrapper. (Matěj Týč
<matyc@redhat.com>)
 - Create script to build datastream images from source (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - use --file Dockerfiles/ubuntu instead (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - replace pip3 install will python3-libs and add -DPYTHON_EXECUTABLE (Thomas
Sjögren <konstruktoid@users.noreply.github.com>)
 - add check, remediation and tests (Vojtech Polasek <vpolasek@redhat.com>)
 - Don't use f-Strings in core build-system scripts (Watson Sato
<wsato@redhat.com>)
 - Add debug-shell, autofs, systemd-coredump service/socket disabled ignition
scriptlets (Gabe <redhatrises@gmail.com>)
 - docker -> Docker (Thomas Sjögren <konstruktoid@users.noreply.github.com>)
 - update the Dockerfiles to match documentation (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - update developer_guide.adoc regarding Docker (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - CentOS 6 is soon EOL (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - Revert oval_affected macro for templates package and services. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add ignition remediations fore coredump (Watson Sato <wsato@redhat.com>)
 - fix the configure_firewalld_rate_limiting rule.yml (Vojtech Polasek
<vpolasek@redhat.com>)
 - Use oval_affected macro and enable rules in OCP4. (Gabriel Becker
<ggasparb@redhat.com>)
 - Print out where Jinja expansion may have gone wrong (Watson Sato
<wsato@redhat.com>)
 - Fix Ignition templates enablement. (Gabriel Becker <ggasparb@redhat.com>)
 - Apply suggestions from code review (vojtapolasek <krecoun@gmail.com>)
 - fix cce and add a line break (Vojtech Polasek <vpolasek@redhat.com>)
 - create new rule for ipv4 tcp rate limiting through sysctl (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix broken yaml indentation (Gabe <redhatrises@gmail.com>)
 - Update OVAL templates with oval_affected macro. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add CCE identifiers to OCP moderate profile rules (Gabe
<redhatrises@gmail.com>)
 - Fix comments for kerberos_disable_no_keytab. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - ocp4/moderate: Remove check for AIDE package (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Update developer documentation with regards to Ignition remediation. (Gabriel
Becker <ggasparb@redhat.com>)
 - add new CCE allocation into pool (Shawn Wells <shawn@redhat.com>)
 - Enable templates for Ignition remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Drop metadata section from Ignition remediations. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add Ignition remediation for no_empty_passwords. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add ocp4 prod to grub2_enable_fips_mode (Matt Rogers <mrogers@redhat.com>)
 - Made the affected OVAL metadata macro-generated in shared OVALs. (Matěj
Týč <matyc@redhat.com>)
 - Use kind MachineConfig in Ignition remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Enable rules that cover AU-9 better in OCP4 moderate profile (Nathan Kinder
<nkinder@redhat.com>)
 - Use the OVAL affected macro for templated rules. (Matěj Týč
<matyc@redhat.com>)
 - Add support to Ignition remediation type. (Gabriel Becker
<ggasparb@redhat.com>)
 - ocp4/moderate: Enable more kernel module checks (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - Add ansible remediation for configure_openssl_crypto_policy rule. (Milan
Lysonek <mlysonek@redhat.com>)
 - ocp4: Add controls that cover AC-2 better (Jakub Hrozek <jhrozek@redhat.com>)
 - Add CoreOS CCE for service_auditd_enabled (Shawn Wells <shawn@redhat.com>)
 - Create root level docker file for publishing content in container image
(Šimon Lukašík <isimluk@fedoraproject.org>)
 - ocp4/moderate: Add check for squashfs disabled. (Juan Antonio Osorio Robles
<jaosorior@redhat.com>)
 - ocp4/moderate: enable usb-storage kernel module checking (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - ocp4/moderate: enable the service_autofs_disabled check (Juan Antonio Osorio
Robles <jaosorior@redhat.com>)
 - Add moderate profile (Juan Antonio Osorio Robles <jaosorior@redhat.com>)
 - Add a few nist mappings to audit related rules (Watson Sato
<wsato@redhat.com>)
 - Add a shell_lineinfile template exemplary rule. (Matěj Týč
<matyc@redhat.com>)
 - Shell lineinfile macros and templates style fixes. (Matěj Týč
<matyc@redhat.com>)
 - PCI-DSS profile should install audispd plugins (Watson Sato
<wsato@redhat.com>)
 - Fixed jinja macros (Matěj Týč <matyc@redhat.com>)
 - Fixed the templated string evaluation. (Matěj Týč <matyc@redhat.com>)
 - Added the shell lineinfile template. (Matěj Týč <matyc@redhat.com>)
 - Skip only only tests/logs/ from project root (Watson Sato <wsato@redhat.com>)
 - Added tests for shell lineinfile. (Matěj Týč <matyc@redhat.com>)
 - Added lineinfile shell assignment support to our macros. (Matěj Týč
<matyc@redhat.com>)
 - Don't check for path len of logs directory (Watson Sato <wsato@redhat.com>)
 - Remove configure_crypto_policy test scenarios (Watson Sato
<wsato@redhat.com>)
 - Update configure_crypto_policy test scenarios (Watson Sato
<wsato@redhat.com>)
 - Do not attempt to run remediation in the test suite (Jan Černý
<jcerny@redhat.com>)
 - Check EKU in rsyslog remote configuration (Jan Černý <jcerny@redhat.com>)
 - audit package on ubuntu* is auditd. (Thomas Sjögren
<konstruktoid@users.noreply.github.com>)
 - Python code style fixes (Watson Sato <wsato@redhat.com>)
 - Updated README docs (Watson Sato <wsato@redhat.com>)
 - Create branch and commit to bump version (Watson Sato <wsato@redhat.com>)
 - Fix product error message (Watson Sato <wsato@redhat.com>)
 - Use the head from stabilization branch for release (Watson Sato
<wsato@redhat.com>)
 - Download handle multiple artifacts per job (Watson Sato <wsato@redhat.com>)
 - Fails in green Jenkins jobs don't imply blocker (Watson Sato
<wsato@redhat.com>)
 - Improve error handling of uploading assets (Watson Sato <wsato@redhat.com>)
 - Bump version to 0.1.49 (Watson Sato <wsato@redhat.com>)
 - Update list of contributors (Watson Sato <wsato@redhat.com>)
 - Update commands in README (Watson Sato <wsato@redhat.com>)
 - Color code job statuses (Watson Sato <wsato@redhat.com>)
 - Rework building and status printing of build jobs (Watson Sato
<wsato@redhat.com>)
 - fix remediation of config_firewalld_ports (Vojtech Polasek
<vpolasek@redhat.com>)
 - Parametrize build with statibilization branch (Watson Sato
<wsato@redhat.com>)
 - Add Jenkins jobs to check before release (Watson Sato <wsato@redhat.com>)
 - Fix check_rhel_stig script to build products (Watson Sato <wsato@redhat.com>)
 - Incorprate cleanup.sh into release_content.py (Watson Sato
<wsato@redhat.com>)
 - Update reference URL for gconf (Watson Sato <wsato@redhat.com>)
 - Build the release assets from the release branch (Watson Sato
<wsato@redhat.com>)
 - Add entries for Highlighted release notes (Watson Sato <wsato@redhat.com>)
 - Reuse milestone if next one is already created (Watson Sato
<wsato@redhat.com>)
 - Incorprate release.sh into release_content.py (Watson Sato
<wsato@redhat.com>)
 - Incorprate release_notes.sh into release_content.py (Watson Sato
<wsato@redhat.com>)
 - Move creation of JenkinsCI to dedicated function (Watson Sato
<wsato@redhat.com>)
 - Move creation of GitHub repo to dedicated function (Watson Sato
<wsato@redhat.com>)
 - Incorprate build.sh into release_content.py (Watson Sato <wsato@redhat.com>)
 - Incorprate check.sh into release_content.py (Watson Sato <wsato@redhat.com>)
 - Better name function for release existance check (Watson Sato
<wsato@redhat.com>)
 - Parse version from CMakeLists.txt from python (Watson Sato
<wsato@redhat.com>)
 - Load and use the env file from python (Watson Sato <wsato@redhat.com>)
 - Add relase_content to orchestrate the release (Watson Sato
<wsato@redhat.com>)
 - Fix code style issues (Watson Sato <wsato@redhat.com>)
 - Add instructions how to use release tools (Watson Sato <wsato@redhat.com>)
 - Ignore release data (Watson Sato <wsato@redhat.com>)
 - Cleanup and bump after release (Watson Sato <wsato@redhat.com>)
 - Create release in GitHub (Watson Sato <wsato@redhat.com>)
 - Add capability to download artifacts from Jenkins (Watson Sato
<wsato@redhat.com>)
 - Add Script to move issues and prs to next milestone (Watson Sato
<wsato@redhat.com>)
 - Generate Release Notes from PRs closed in milestone (Watson Sato
<wsato@redhat.com>)
 - Build Jenkins jobs for the release (Watson Sato <wsato@redhat.com>)
 - Add scripts to check status of repo and Jenkins (Watson Sato
<wsato@redhat.com>)
 - Add security autoupdates to the RHEL8 E8 profile. (Matěj Týč
<matyc@redhat.com>)
 - E8: ensure there is a single account with uid zero (shaneboulden
<shane.boulden@gmail.com>)
 - Marked NFS service-related rules as machine-only. (Matěj Týč
<matyc@redhat.com>)
 - Added machine-only CPEs to rules relevant to containers. (Matěj Týč
<matyc@redhat.com>)
 - Fix: Yield empty table columns explicitly (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - RHEL supports account management functions (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Use 'Applicable - Inherently Meets' language in the srgmap (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Provide empty overlay file for EAP6 (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Provide SRG overlay file for RHEL 8 (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Do not show leading colon for overlayed rules (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Show status=N/A when using overlay Rule to map given SRG (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Re-implement SRG overlay (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Rename shadow-utils oval check to reflect changes (Jesse Roland
<j.roland277@gmail.com>)
 - Update shadow-utils oval and CPE to handle Ubuntu an Debian's alternative
packaging for files (Jesse Roland <j.roland277@gmail.com>)
 - STIG overlay XCCDF shall include Benchmark/@id (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Change gpgcheck = 1 to gpgcheck=1 to match style (Caitlin Macleod
<caitelatte@gmail.com>)
 - Replace gpgcheck with gpgcheck = 1 (Caitlin Macleod <caitelatte@gmail.com>)
 - Made FIPS mode Crypto Policy check module-aware. (Matěj Týč
<matyc@redhat.com>)
 - Fix broken OCIL in STIG overlay guide (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Bugfix overlay XSLT to include original SRG rule title (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Use replace module in gpgcheck ansible (Caitlin Macleod
<caitelatte@gmail.com>)
 - Add missing CCE for package_telnetd_removed rule. (Milan Lysonek
<mlysonek@redhat.com>)
 - Delete some rules in favour of package_subscription-manager_installed
(Gabriel Becker <ggasparb@redhat.com>)
 - Set sshd private key permission to 0600 for Ubuntu 18.04 (Jesse Roland
<j.roland277@gmail.com>)
 - Corrected ocil rule (Jesse Roland <jesse.roland@onyxpoint.com>)
 - PermitUserEnvironment Checks For Incorrect Setting (Jesse Roland
<j.roland277@gmail.com>)
 - Add F31 and F32 CPEs (Jan Černý <jcerny@redhat.com>)
 - Update NIST 800-53 mappings (Shawn Wells <shawn@redhat.com>)
 - Fixed incorrect fips=1 comment in test_grub2_enable_force_iommu_default (Jake
Stookey <jakestookey@gmail.com>)
 - update debian10 apt_sources_list security regex to contain missing url
pattern (Bryan Schneiders <pschneiders@trisept.com>)
 - Add debian10 content (Bryan Schneiders <pschneiders@trisept.com>)
 - NIST 800-53 mappings (Shawn Wells <shawn@redhat.com>)
 - Ensure that the crypto group always comes before the FIPS group. (Matěj
Týč <matyc@redhat.com>)
 - Refactored rule/group reordering tuning. (Matěj Týč <matyc@redhat.com>)
 - Update ds_unselect_rules.sh (jiatianzhen <jiatianzhen@cmss.chinamobile.com>)
 - Set correct SUSE package manager (Alexander Bergmann <abergmann@suse.com>)
 - Add SLES 12 STIG rule security_patches_up_to_date (Alexander Bergmann
<abergmann@suse.com>)
 - Revert "WIP: Split audit rules" (Shawn Wells <shawn@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - document the template (Vojtech Polasek <vpolasek@redhat.com>)
 - add macros to template (Vojtech Polasek <vpolasek@redhat.com>)
 - modify SRG references for splitted rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - create rest of rules based on the 10-base-config one (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix reused cce (Polášek Vojtěch <Vojtech.Polasek@gmail.com>)
 - added tests (Vojtech Polasek <vpolasek@redhat.com>)
 - write new template audit_rules_rule_file (Vojtech Polasek
<vpolasek@redhat.com>)
 - add ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - document the template (Vojtech Polasek <vpolasek@redhat.com>)
 - add macros to template (Vojtech Polasek <vpolasek@redhat.com>)
 - modify SRG references for splitted rules (Vojtech Polasek
<vpolasek@redhat.com>)
 - create rest of rules based on the 10-base-config one (Vojtech Polasek
<vpolasek@redhat.com>)
 - fix reused cce (Polášek Vojtěch <Vojtech.Polasek@gmail.com>)
 - Extend installed_OS_is_rhel8.xml to include test_rhvh4_version. (Gabriel
Becker <ggasparb@redhat.com>)
 - Extended the OVAL to work with crypto policy modules. (Matěj Týč
<matyc@redhat.com>)
 - Use the DEFAULT:NO-SHA1 Crypto Policy for the E8 profile. (Matěj Týč
<matyc@redhat.com>)
 - Do not add platform if current platforms contain multi_platform_all. (Gabriel
Becker <ggasparb@redhat.com>)
 - Removed OSPP rules that are replaced with OSPP Crypto module. (Matěj Týč
<matyc@redhat.com>)
 - Change the Crypto Policy rule to support Crypto Policy modules. (Matěj Týč
<matyc@redhat.com>)
 - Fix more remediation applicability for RHV4 product. (Gabriel Becker
<ggasparb@redhat.com>)
 - Change mod_fixes.py to parse files without expanding jinja macros. (Gabriel
Becker <ggasparb@redhat.com>)
 - Avoid duplicating title elements (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Avoid duplicating Overlay elements (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Avoid adding duplicate VMSinfo elements (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Update archived reference to RHEL7 DISA STIG V2R5. (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Update rhel7 stig overlay with latest (V2R5) content from DoD (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Remove unused variable (Šimon Lukašík <isimluk@fedoraproject.org>)
 - Reformant rhel7 overlay file to be human readable (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - added tests (Vojtech Polasek <vpolasek@redhat.com>)
 - create rule usbguard_allow_hid_and_hub (Vojtech Polasek
<vpolasek@redhat.com>)
 - Enable ansible template for service_fapolicyd_enable rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - rewrite usbguard_allow_hid and usbguard_allow_hub to use match-all keyword
(Vojtech Polasek <vpolasek@redhat.com>)
 - oscap: modify using variables in the printf format (tianzhenjia
<jiatianzhen@cmss.chinamobile.com>)
 - write new template audit_rules_rule_file (Vojtech Polasek
<vpolasek@redhat.com>)
 - Mark rules as platform: machine. (Gabriel Becker <ggasparb@redhat.com>)
 - Fixed the broken fix, when greedy regex ate the whole file. (Matěj Týč
<matyc@redhat.com>)
 - Update api-server XCCDF and OVAL for ocp4-isms (Gabe <redhatrises@gmail.com>)
 - Fix applicability of disable_ctrl_altdel_reboot (Watson Sato
<wsato@redhat.com>)
 - Make rule install PAE kernel applicable to RHV4 (Watson Sato
<wsato@redhat.com>)
 - Fix XML "parsing" of the remediation functions file. (Matěj Týč
<matyc@redhat.com>)
 - Remediation was already enabled for RHV (Watson Sato <wsato@redhat.com>)
 - Delete rule configure_fapolicyd_mounts. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove configure_fapolicyd_mounts rules from profiles. (Gabriel Becker
<ggasparb@redhat.com>)
 - Mark these ansible fixes as applicable to RHV4 (Watson Sato
<wsato@redhat.com>)
 - Mark these bash fixes as applicable to RHV4 (Watson Sato <wsato@redhat.com>)
 - Generate extended checks by enable rules for RHV4 (Watson Sato
<wsato@redhat.com>)
 - Mark these extendedable shared checks as applicable to RHV4 (Watson Sato
<wsato@redhat.com>)
 - Mark these checks as applicable to RHV4 (Watson Sato <wsato@redhat.com>)
 - Fix missing import for rule_dir_stats.py (Watson Sato <wsato@redhat.com>)
 - Fix bug in rule guide when generating rule json (Watson Sato
<wsato@redhat.com>)
 - Reorder alphabetically product directories constant. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add rhv4 and ocp4 dir entry to product_directories constant. (Gabriel Becker
<ggasparb@redhat.com>)
 - Move main text one column to the left on the flat map (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Fix table header of srgmap.html (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Add TBD item to the matching rows as we have same TBD on non-matching rows
(Šimon Lukašík <isimluk@fedoraproject.org>)
 - SRG Mapping: Do not flip CCI and SRGID when we don not have content (Šimon
Lukašík <isimluk@fedoraproject.org>)
 - Show OCIL question text in the SRG Mapping document (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Pass in an OCIL document to the SRG Map template (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Refactor: Extract template for ocil (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Add missing RHEL8 CCEs for rules added to RHELH-STIG profile. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add single quotes to banner text (Watson Sato <wsato@redhat.com>)
 - Add new CPE entries to OCP4 product. (Gabriel Becker <ggasparb@redhat.com>)
 - Testing revealed that 30 seconds is not enough for slow machines - extends
time to 120 seconds. (Milan Lysonek <mlysonek@redhat.com>)
 - Add draft RHELH content for rhel8 (Gabe <redhatrises@gmail.com>)
 - Make RHV4 DS applicable to RHVH only (Watson Sato <wsato@redhat.com>)
 - update SRG XSLT (Shawn Wells <shawn@redhat.com>)
 - Update ETCD XCCDF and OVAL for ocp4-isms (Gabe <redhatrises@gmail.com>)
 - Remove duplicate IDs (Gabe <redhatrises@gmail.com>)
 - OCP nitpicks and typos (Gabe <redhatrises@gmail.com>)
 - Update api-server rules (Gabe <redhatrises@gmail.com>)
 - Call out profile explicitly for each SRG mapping we build (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Do not select all rules for the srgmaps (Šimon Lukašík
<isimluk@fedoraproject.org>)
 - Update the crypto policy and rationale. (Matěj Týč <matyc@redhat.com>)
 - Remove SSSD rules from OSPP profile (Watson Sato <wsato@redhat.com>)
 - Fixed indentation of Firefox jinja macros. (Matěj Týč <matyc@redhat.com>)
 - Fixed Firefox OVALs. (Matěj Týč <matyc@redhat.com>)
 - Fixed Jinja Bash Firefox macros (Matěj Týč <matyc@redhat.com>)
 - Allowed raising exceptions from inside Jinja. (Matěj Týč
<matyc@redhat.com>)
 - Update CoreOS NCP profile (Gabe <redhatrises@gmail.com>)
 - Enable rules for OCP4 building (Gabe <redhatrises@gmail.com>)
 - Re-enable some CoreOS NCP profile rules and fix TBD severity typo (Gabe
<redhatrises@gmail.com>)
 - Update tests README (Jan Černý <jcerny@redhat.com>)
 - SSGTS: Use wildcards instead of matching substring (Jan Černý
<jcerny@redhat.com>)
 - FIX SRG tables (Gabe <redhatrises@gmail.com>)
 - Enable more STIG/SRG table builds in RHEL8 (Gabe <redhatrises@gmail.com>)
 - Updated title. (Robert McAllister <rmcallis@redhat.com>)
 - "Updated title (Robert McAllister <rmcallis@redhat.com>)
 - added more meaningful description (Robert McAllister <rmcallis@redhat.com>)
 - made permissions match numberic permissions (Robert McAllister
<rmcallis@redhat.com>)
 - Removed RHEL7 product from rule that doesn't work on RHEL7. (Matěj Týč
<matyc@redhat.com>)
 - Added proper quoting of bash array expansion. (Matěj Týč
<matyc@redhat.com>)
 - Move the low level macros to the end of file (Jan Černý
<jcerny@redhat.com>)
 - Use single quotes to quote regular expressions (Jan Černý
<jcerny@redhat.com>)
 - Updated the e8 profile for RHEL8. (Matěj Týč <matyc@redhat.com>)
 - Split macro to 3 low-level macros (Jan Černý <jcerny@redhat.com>)
 - created a better description (Robert McAllister <rmcallis@redhat.com>)
 - removed reference to rhel6 and replaced it with rhel generally, not a
reference to a specific version (Robert McAllister <rmcallis@redhat.com>)
 - added quotes (Robert McAllister <rmcallis@redhat.com>)
 - fixed. changed no to not (Robert McAllister <rmcallis@redhat.com>)
 - deleted extraneous title (Robert McAllister <rmcallis@redhat.com>)
 - changed from RHOSP13 to RHSOP10 (Robert McAllister <rmcallis@redhat.com>)
 - Add waiting for RUNNING state of virtual machine. (Milan Lysonek
<mlysonek@redhat.com>)
 - Improve array definition (Jan Černý <jcerny@redhat.com>)
 - Add missing CCEs to rules from STIG profile. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add link to oscap-anaconda-addon documentation (Watson Sato
<wsato@redhat.com>)
 - ComplianceAsCode:modify not in usage (tianzhenjia
<jiatianzhen@cmss.chinamobile.com>)
 - Fixed sshd_use_strong_ciphers. (Matěj Týč <matyc@redhat.com>)
 - Updated kickstart documenation link for el8 (Watson Sato <wsato@redhat.com>)
 - Use authselect for el8 kickstart (Watson Sato <wsato@redhat.com>)
 - Refactor (Jan Černý <jcerny@redhat.com>)
 - Replace bash function set_faillock_option by a Jinja macro (Jan Černý
<jcerny@redhat.com>)
 - Fix PEP8 problems (Jan Černý <jcerny@redhat.com>)
 - Add some NIST mappings for FISMA high (Gabe <redhatrises@gmail.com>)
 - Updated SRG mappings (Shawn Wells <shawn@redhat.com>)
 - Fix RHEL7 rules sshd_use_strong_macs and sshd_use_strong_ciphers. (Matěj
Týč <matyc@redhat.com>)
 - Use template mount_option_remote_filesystems for rule
mount_option_krb_sec_remote_filesystems. (Gabriel Becker <ggasparb@redhat.com>)
 - added one test and modified description (Vojtech Polasek
<vpolasek@redhat.com>)
 - Update etcd rules (Gabe <redhatrises@gmail.com>)
 - Fix template_ANSIBLE_mount_option_remote_filesystems (Jan Černý
<jcerny@redhat.com>)
 - Add simple kickstart file for e8 profiles (Watson Sato <wsato@redhat.com>)
 - Prevent fails in check mode (Jan Černý <jcerny@redhat.com>)
 - Prevent fails in check mode (Jan Černý <jcerny@redhat.com>)
 - Add "check_mode: no" everywhere possible (Jan Černý <jcerny@redhat.com>)
 - Run the command also in check mode (Jan Černý <jcerny@redhat.com>)
 - Update linux_os/guide/system/software/integrity/crypto/harden_ssh_client_cryp
to_policy/rule.yml (tedbrunell <tbrunell@redhat.com>)
 - Fix typo (Gabe <redhatrises@gmail.com>)
 - Mostly updates to previously submitted SRG mappings (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - DISA STIG SRG mappings for package-related rules (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - RHEL 8 DISA STIG - SRG mappings for disabling kernel modules and mount
options. (Ted Brunell <tbrunell@tbrunell.corp.redhat.com>)
 - updated to previous PR (and a couple of new files) (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - adding DISA SRG references to rules found in the OSPP profile (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - Add draft RHEL8 STIG profile (Gabe <redhatrises@gmail.com>)
 - Small Bash style fixes. (Matěj Týč <matyc@redhat.com>)
 - Add two initial rules to make the OCP4 coreos-ncp profile build (Jakub Hrozek
<jhrozek@redhat.com>)
 - ocp4/profiles/coreos-ncp.profile: disable all the rules (Jakub Hrozek
<jhrozek@redhat.com>)
 - Add a dummy severity and rationaly to linux_os/guide/system/network/network-
ipv6/configuring_ipv6/disabling_ipv6_autoconfig/rule.yml (Jakub Hrozek
<jhrozek@redhat.com>)
 - Replace function ensure_there_are_servers_... by Jinja macro (Jan Černý
<jcerny@redhat.com>)
 - add double quote for rule to prevent globbing and word splitting (tianzhenjia
<jiatianzhen@cmss.chinamobile.com>)
 - Remove coreos-fedramp profile (Gabe <redhatrises@gmail.com>)
 - Use service_facts to get services in template_ANSIBLE_service_disabled (Gabe
<redhatrises@gmail.com>)
 - Fix command module typo (Gabe <redhatrises@gmail.com>)
 - Bump version, next release is 0.1.48 (Watson Sato <wsato@redhat.com>)
 - fixed oval comments (Vojtech Polasek <vpolasek@redhat.com>)
 - modified oval checks for other locations (Vojtech Polasek
<vpolasek@redhat.com>)
 - rewrote oval check, extended remediation, wrote tests (Vojtech Polasek
<vpolasek@redhat.com>)
 - tried to update regex (Vojtech Polasek <vpolasek@redhat.com>)
 - OCP4 content cleanup (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Verified that proper SRGs are in rules that need to be added (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - Added SRG rule for auditd_audispd_configure_remote_server (Derek Thurston
<thegrit@gmail.com>)
 - Add dracut-fips-aesni package to grub2_enable_fips_mode anaconda remediation.
(Gabriel Becker <ggasparb@redhat.com>)
 - Invert logic when testing for prelink package presence. (Gabriel Becker
<ggasparb@redhat.com>)
 - removed weird merge code (Robert McAllister <rmcallis@redhat.com>)
 - removed weird merge stuff (Robert McAllister <rmcallis@redhat.com>)
 - added cui reference (Robert McAllister <rmcallis@redhat.com>)
 - added cui reference (Robert McAllister <rmcallis@redhat.com>)
 - added cui references (Robert McAllister <rmcallis@redhat.com>)
 - additional srg mappings (Ted Brunell <tbrunell@tbrunell.corp.redhat.com>)
 - added SRG rule for Exec Shield (Derek Thurston <thegrit@gmail.com>)
 - Day 2 - Yasir's Contributions (Yasir Imam <yimam@redhat.com>)
 - day 2 changes to rules with SRG info (Sebastian Dunne <sdunne@redhat.com>)
 - add srg-os-000378-GPOS-00163 reference to usbguard install and enable
(Jonathan Sturges <jsturges@jsturges.remote.csb>)
 - fix for configure_bind_crypto_policy (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - fix for configure_bind_crypto_policy (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - SRG Mapping for OSPP Profile (Ted Brunell
<tbrunell@tbrunell.corp.redhat.com>)
 - swapped out cinder_file_perms for cinder_conf_file_perms (Robert McAllister
<rmcallis@redhat.com>)
 - removed cinder_file_perms and added conder_conf_file_perms (Robert McAllister
<rmcallis@redhat.com>)
 - removed osp10 for testing (Robert McAllister <rmcallis@redhat.com>)
 - added prodtype and changed title (Robert McAllister <rmcallis@redhat.com>)
 - changed title (Robert McAllister <rmcallis@redhat.com>)
 - added # platform = Red Hat OpenStack Platform 10 (Robert McAllister
<rmcallis@redhat.com>)
 - using ocil for rule (Robert McAllister <rmcallis@redhat.com>)
 - reverted change (Robert McAllister <rmcallis@redhat.com>)
 - changed to check multiple files (Robert McAllister <rmcallis@redhat.com>)
 - added reference to cui 3.1.5 (Robert McAllister <rmcallis@redhat.com>)
 - removes swhitespace (Robert McAllister <rmcallis@redhat.com>)
 - added cui references (Robert McAllister <rmcallis@redhat.com>)
 - chenged STIG to CUI (Robert McAllister <rmcallis@redhat.com>)
 - renamed 800-53.profile to cui.profile (Robert McAllister
<rmcallis@redhat.com>)
 - added cui 3.1.7 for testing (Robert McAllister <rmcallis@redhat.com>)
 - Initial commit for rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added RHOSP10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 to prodtype (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - Updated to include SRG number (Mark Shoger <mshoger@redhat.com>)
 - Fix OCP4 SCAP content validation problem (#4961) (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Added SRG to rules (ghylock <ghylock@gmail.com>)
 - mapped ipv4 and ipv6 SRGs to rules (Sebastian Dunne <sdunne@redhat.com>)
 - add SRG to rule (Jonathan Sturges <jsturges@jsturges.remote.csb>)
 - using ocil for rule (Robert McAllister <rmcallis@redhat.com>)
 - Pass SSHD keys rules when they don't exist (Watson Sato <wsato@redhat.com>)
 - Allow *_cron_allow rules to pass when file missing (Watson Sato
<wsato@redhat.com>)
 - Introduce 'missing_file_pass' in OVAL file_* templates (Watson Sato
<wsato@redhat.com>)
 - Update test scenarios for chronyd_or_ntpd_set_maxpoll for RHEL8 (Jan Černý
<jcerny@redhat.com>)
 - DISA STIG SRG mappings - updates (Mike Ralph <mralph@redhat.com>)
 - Add Network Policies rule to OCP (Gabe <redhatrises@gmail.com>)
 - reverted change (Robert McAllister <rmcallis@redhat.com>)
 - changed to check multiple files (Robert McAllister <rmcallis@redhat.com>)
 - Add test scenario for multiple entries in mtab (Jan Černý
<jcerny@redhat.com>)
 - Fix parse-affected unit test to handle DocumentationNotComplete. (Gabriel
Becker <ggasparb@redhat.com>)
 - Added a link to RHEL8 SSSD IdM-related documentation resource. (Matěj Týč
<matyc@redhat.com>)
 - Made the former disabling_ipv6_autoconfig group a stub of a rule. (Matěj
Týč <matyc@redhat.com>)
 - Changed the GRUB2 group title to match actual contents. (Matěj Týč
<matyc@redhat.com>)
 - Fixed weblink macro call. (Matěj Týč <matyc@redhat.com>)
 - added reference to cui 3.1.5 (Robert McAllister <rmcallis@redhat.com>)
 - removes swhitespace (Robert McAllister <rmcallis@redhat.com>)
 - added cui references (Robert McAllister <rmcallis@redhat.com>)
 - chenged STIG to CUI (Robert McAllister <rmcallis@redhat.com>)
 - renamed 800-53.profile to cui.profile (Robert McAllister
<rmcallis@redhat.com>)
 - Use only first occurence from /etc/mtab (Jan Černý <jcerny@redhat.com>)
 - Make comments the same (Jan Černý <jcerny@redhat.com>)
 - Add 'additional_content_directories' key to the OCP4 product (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - Add optional 'additional_content_directories' key to product.yml (Evgeny
Kolesnikov <ekolesni@redhat.com>)
 - added cui 3.1.7 for testing (Robert McAllister <rmcallis@redhat.com>)
 - Remove audit_rules_for_ospp from RHEL 7 OSPP (Jan Černý
<jcerny@redhat.com>)
 - Add missing CCEs to rules from e8 profile. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add missing CCEs to rules from C2S profile. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add missing CCEs to rules from anssi_nt28_high profile. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add missing CCEs to rules from rhelh-stig profile. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add missing CCEs to rules from ncp profile. (Milan Lysonek
<mlysonek@redhat.com>)
 - Allow incomplete rules. (Matěj Týč <matyc@redhat.com>)
 - ssg_test_suite: Fix SSH port option duplication for Podman-based test
invocations (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Catch exception (Jan Černý <jcerny@redhat.com>)
 - Provide a real reationale (Jan Černý <jcerny@redhat.com>)
 - Set default to match syslog default (Pat Riehecky <riehecky@fnal.gov>)
 - Fill in the samples with the value from our variable (Pat Riehecky
<riehecky@fnal.gov>)
 - Make rule package_pigz_removed relevant only for rhel8 (Jan Černý
<jcerny@redhat.com>)
 - Add rule package_pigz_removed (Jan Černý <jcerny@redhat.com>)
 - Extend RHEL8 OSPP SSHD idle timeout  to 14 minutes (Watson Sato
<wsato@redhat.com>)
 - Add rule package_nss-tools_installed (Jan Černý <jcerny@redhat.com>)
 - Add rule package_gnutls-utils_installed (Jan Černý <jcerny@redhat.com>)
 - Add postfix relayhost check (Pat Riehecky <riehecky@fnal.gov>)
 - Add check to set /etc/motd similar to /etc/issue (Pat Riehecky
<riehecky@fnal.gov>)
 - Fail when the rule provided by --rule-id doesn't exist (Jan Černý
<jcerny@redhat.com>)
 - Ignore quotes when checking openshift audit log path (Nathan Kinder
<nkinder@redhat.com>)
 - Fix regex for OpenShift auditConfig related checks (Nathan Kinder
<nkinder@redhat.com>)
 - Remove openshift api_server_profiling check from ocp3 CIS profile (Nathan
Kinder <nkinder@redhat.com>)
 - DISA STIG SRG mappings (Mike Ralph <mralph@redhat.com>)
 - Initial commit for rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added RHOSP10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 to prodtype (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - added rhosp10 (Robert McAllister <rmcallis@redhat.com>)
 - Add rule to check cockpit service status (Pat Riehecky <riehecky@fnal.gov>)
 - Add sub groups after any current level group rules (Watson Sato
<wsato@redhat.com>)
 - ocp4: Initial build system support for the OCP4 product (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - add debian8 in apt conf prodtype (DominiqueDevinci
<dominique.blaze@edu.devinci.fr>)
 - pep8 compliance (dom <dominique.blaze@devinci.fr>)
 - fix missing oval checks for debian9 (dom <dominique.blaze@devinci.fr>)
 - add rsyslog_files_groupownership for debian and ubuntu based systems (dom
<dominique.blaze@devinci.fr>)
 - update anssi/nist refs for debian9 (dom <dominique.blaze@devinci.fr>)
 - adapt template rules to debian9 (dom <dominique.blaze@devinci.fr>)
 - factorize debian oval checks (dom <dominique.blaze@devinci.fr>)
 - adapt transforms for debian9 (dom <dominique.blaze@devinci.fr>)
 - add debian9 in CMakeList.txt (dom <dominique.blaze@devinci.fr>)
 - message details in build system (dom <dominique.blaze@devinci.fr>)
 - adapt cpe dictionary and related oval checks (dom
<dominique.blaze@devinci.fr>)
 - copy from debian 8 (dom <dominique.blaze@devinci.fr>)
 - Update upload_ansible_roles_to_galaxy.py (Gabe <redhatrises@gmail.com>)
 - Removed a package_installed rule for a package not present in RHEL8. (Matěj
Týč <matyc@redhat.com>)
 - Add missing prodtypes for apt rules (Matus Marhefka <mmarhefk@redhat.com>)
 - Set rule service_timesyncd_enabled prodtype to ubuntu 16.04 and 18.04 (Matus
Marhefka <mmarhefk@redhat.com>)
 - Add prodtype (Jan Černý <jcerny@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Fix OCIL (Jan Černý <jcerny@redhat.com>)
 - Change 'whitelists' to 'considers authorized' (Jan Černý
<jcerny@redhat.com>)
 - Describe the logic of the check in rule description (Jan Černý
<jcerny@redhat.com>)
 - Compare suid/sgid files with the RPM database (Jan Černý
<jcerny@redhat.com>)
 - Add CCE identifiers to sshd_disable_pubkey_authentication. (Gabriel Becker
<ggasparb@redhat.com>)
 - Change platform in OVAL according to prodtype (Jan Černý
<jcerny@redhat.com>)
 - Fix missing OVAL in rule network_disable_ddns_interfaces (Jan Černý
<jcerny@redhat.com>)
 - Fix platform in OVAL for accounts_logon_fail_delay (Jan Černý
<jcerny@redhat.com>)
 - Fix prodtype for cracklib rules (Jan Černý <jcerny@redhat.com>)
 - Fix PEP8 (Jan Černý <jcerny@redhat.com>)
 - Document decorators in Developer Guide (Jan Černý <jcerny@redhat.com>)
 - Fail if a template is missing (Jan Černý <jcerny@redhat.com>)
 - Remove dead code (Jan Černý <jcerny@redhat.com>)
 - Use Python decorators on template callbacks (Jan Černý <jcerny@redhat.com>)
 - Remove old templating from Developer Guide (Jan Černý <jcerny@redhat.com>)
 - Add rule for sshd_pubkey_auth (Pat Riehecky <riehecky@fnal.gov>)
 - Prevent an exception when processing empty derived profiles (Chuck Atkins
<chuck.atkins@kitware.com>)
 - Fix unclosed capture group & subexpression (Alexis Facques
<alexis.facques@mythalesgroup.io>)
 - Added missing CCEs. (Matěj Týč <matyc@redhat.com>)
 - Update docs/manual/developer_guide.adoc (Jan Černý <jcerny@redhat.com>)
 - yamllint: revert line length to 160. (Gabriel Becker <ggasparb@redhat.com>)
 - Revert Ansible syntax check to per profile. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fixed the remediation for rsyslog_files_permissions (Matěj Týč
<matyc@redhat.com>)
 - ansible-checks: move checks to a per rule basis instead of per profile.
(Gabriel Becker <ggasparb@redhat.com>)
 - yamllint: Increase maximum line length to 180. (Gabriel Becker
<ggasparb@redhat.com>)
 - yamllint: disable document start header (---). (Gabriel Becker
<ggasparb@redhat.com>)
 - Address review feedback in developer guide (Jan Černý <jcerny@redhat.com>)
 - Update docs/manual/developer_guide.adoc (Jan Černý <jcerny@redhat.com>)
 - Update docs/manual/developer_guide.adoc (Jan Černý <jcerny@redhat.com>)
 - Update docs/manual/developer_guide.adoc (Jan Černý <jcerny@redhat.com>)
 - Update docs/manual/developer_guide.adoc (Jan Černý <jcerny@redhat.com>)
 - Remove parameters UNIX_DIR and UNIX_FILENAME (Jan Černý
<jcerny@redhat.com>)
 - Generate OCIL check for cramfs kernel module (Watson Sato <wsato@redhat.com>)
 - Remove things needed for the old templating from example product (Jan Černý
<jcerny@redhat.com>)
 - Remove old templating core (Jan Černý <jcerny@redhat.com>)
 - Remove unused template_OVAL_var_accounts_user_umask_as_number (Jan Černý
<jcerny@redhat.com>)
 - Remove unused template file_regex_permissions (Jan Černý
<jcerny@redhat.com>)
 - Remove unused template OVAL_umask (Jan Černý <jcerny@redhat.com>)
 - Remove create_ Python scripts (Jan Černý <jcerny@redhat.com>)
 - Remove .gitkeeps (Jan Černý <jcerny@redhat.com>)
 - Remove CSV files (Jan Černý <jcerny@redhat.com>)
 - Remove old templating from CMake (Jan Černý <jcerny@redhat.com>)
 - Document new templating system in Developer Guide (Jan Černý
<jcerny@redhat.com>)
 - ansible-lint: ignore rule 301. (Gabriel Becker <ggasparb@redhat.com>)
 - ansible-lint: remove blank lines from templated playbook. (Gabriel Becker
<ggasparb@redhat.com>)
 - ansible-lint: Do not compare to boolean within "when" statements (601).
(Gabriel Becker <ggasparb@redhat.com>)
 - ansible-lint: exclude rules from test (Gabriel Becker <ggasparb@redhat.com>)
 - Added OCIL for mount option-type of rules. (Matěj Týč <matyc@redhat.com>)
 - Until they are removed, update mount option CSV (Watson Sato
<wsato@redhat.com>)
 - /tmp in RHEL is not a tmpfs (Watson Sato <wsato@redhat.com>)
 - Fix test scenario profile metadata (Watson Sato <wsato@redhat.com>)
 - Added packagename to the SSSD OVAL template arg. (Matěj Týč
<matyc@redhat.com>)
 - Fix NTP-Chrony remediation + check. (Matěj Týč <matyc@redhat.com>)
 - Add basic test scenarios for audit rules (Watson Sato <wsato@redhat.com>)
 - Fixed reset-fail argument to be a macro arg, not variable value. (Matěj
Týč <matyc@redhat.com>)
 - Removed stray whitespace discard directive. (Matěj Týč <matyc@redhat.com>)
 - Document in code why order rules within a group (Watson Sato
<wsato@redhat.com>)
 - Use new templating system by default (Jan Černý <jcerny@redhat.com>)
 - Add WRLinux 10.19 to prodtype (Jan Černý <jcerny@redhat.com>)
 - Add the system group before services group (Watson Sato <wsato@redhat.com>)
 - Withing a group, add priority rules first (Watson Sato <wsato@redhat.com>)
 - Made the new templating system work with Python2.6. (Matěj Týč
<matyc@redhat.com>)
 - Added possibility to use env var to tune CMake invocation. (Matěj Týč
<matyc@redhat.com>)
 - Add a comment and rename a variable (Jan Černý <jcerny@redhat.com>)
 - Generate OVAL definition without need for a rule (Jan Černý
<jcerny@redhat.com>)
 - Stop excessive usage of variables (Jan Černý <jcerny@redhat.com>)
 - Refactor: move code (Jan Černý <jcerny@redhat.com>)
 - Refactor: extract method build_all_rules (Jan Černý <jcerny@redhat.com>)
 - Refactor: extract variables (Jan Černý <jcerny@redhat.com>)
 - Substitute variable rule_id (Jan Černý <jcerny@redhat.com>)
 - Refactor: move code (Jan Černý <jcerny@redhat.com>)
 - Merge templates file_permissions and file_regex_permissions (Jan Černý
<jcerny@redhat.com>)
 - Map AC-6(5) and add AC-6(9) audit rules to CoreOS (Gabe
<redhatrises@gmail.com>)
 - Map AC-17 (Gabe <redhatrises@gmail.com>)
 - Map AC-6(9) (Gabe <redhatrises@gmail.com>)
 - Add rule for NIST AC-18(4) (Gabe <redhatrises@gmail.com>)
 - Map AC-17(2) to crypto SSH policies (Gabe <redhatrises@gmail.com>)
 - added tests to the grub2_pti_argument rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - removed hardcoded audit=1 from the template and replace with right macro
(Vojtech Polasek <vpolasek@redhat.com>)
 - Run tmux only right after sshd/login (Jiri Jaburek <jjaburek@redhat.com>)
 - Map AU-7 to audit package (Gabe <redhatrises@gmail.com>)
 - Add rule for NIST AC-18(4) (Gabe <redhatrises@gmail.com>)
 - Update regex to match multiple syscall args (Watson Sato <wsato@redhat.com>)
 - Update coreos-ncp profile and map AU-12(1) (Gabe <redhatrises@gmail.com>)
 - Add tests for acceptable rule syntax for arufm (Watson Sato
<wsato@redhat.com>)
 - Remove installation of packages from RHEL7 kickstarts as it is handled by
rules (Matus Marhefka <mmarhefk@redhat.com>)
 - Remove installation of packages from RHEL8 kickstarts as it is handled by
rules (Matus Marhefka <mmarhefk@redhat.com>)
 - Remove slash from audit rules login failock (Watson Sato <wsato@redhat.com>)
 - Fix templates file_owner and file_groupowner (Jan Černý
<jcerny@redhat.com>)
 - Add WRLinux 10.19 to some rules (Jan Černý <jcerny@redhat.com>)
 - Do not generate Anaconda remediation only on RHEL 7 and 8 (Jan Černý
<jcerny@redhat.com>)
 - Add Fedora and SLE12 to rule pacakge_vsftpd_removed (Jan Černý
<jcerny@redhat.com>)
 - Change prodtype in audit_rules_file_deletion_events_* (Jan Černý
<jcerny@redhat.com>)
 - Add RHEL6 to audit_rules_login_events_* rules (Jan Černý
<jcerny@redhat.com>)
 - Add RHEL 6 to service_pcscd_enabled prodtype (Jan Černý
<jcerny@redhat.com>)
 - Add -t parameter for readarray to remove trailing newline. (Milan Lysonek
<mlysonek@redhat.com>)
 - removed ospp profile from test metadata of service_atd_siabled (Vojtech
Polasek <vpolasek@redhat.com>)
 - Map AU-5(2) for CoreOS (Gabe <redhatrises@gmail.com>)
 - Map AU-9(3) for CoreOS (Gabe <redhatrises@gmail.com>)
 - Add tests scenarios for rsyslog_remote_tls_cacert (Watson Sato
<wsato@redhat.com>)
 - Remove "*.*" when setting rsyslog CA Certificate (Watson Sato
<wsato@redhat.com>)
 - Update provider of software updates in OSPP (Watson Sato <wsato@redhat.com>)
 - Remove package_libreswan_installed from OSPP (Watson Sato <wsato@redhat.com>)
 - Double quote value when setting runtime sysctl configuration. (Gabriel Becker
<ggasparb@redhat.com>)
 - Check sanity of sebool_bool value (Jan Černý <jcerny@redhat.com>)
 - Add rules for FISMA Low to CoreOS NCP (Gabe <redhatrises@gmail.com>)
 - Fix rhel6 nist mapping typo (Gabe <redhatrises@gmail.com>)
 - Fix typo in installed_OS_is_rhv4.xml file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Use correct function to handle wrong args in build_product. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update template data with new rules (Watson Sato <wsato@redhat.com>)
 - Update template data after fixing handling of dirs (Watson Sato
<wsato@redhat.com>)
 - Add data for permissions directory correctly (Watson Sato <wsato@redhat.com>)
 - Update template data after reordering (Watson Sato <wsato@redhat.com>)
 - Systctl has only one template now sysctl (Watson Sato <wsato@redhat.com>)
 - Rename file_regex_permissions filepath to path (Watson Sato
<wsato@redhat.com>)
 - Keep order of template data (Watson Sato <wsato@redhat.com>)
 - Add mount_options data in logical order (Watson Sato <wsato@redhat.com>)
 - Update CSV data to remove default mask_service value (Watson Sato
<wsato@redhat.com>)
 - Do not add mask_service if its value is default (Watson Sato
<wsato@redhat.com>)
 - Fix csv parsers for audit and sshd lineinfile (Watson Sato
<wsato@redhat.com>)
 - Add callback for sebool template (Jan Černý <jcerny@redhat.com>)
 - Rename template sebool_var to sebool (Jan Černý <jcerny@redhat.com>)
 - Merge template sebool and sebool_ver to a single template (Jan Černý
<jcerny@redhat.com>)
 - Move openssh-server to product specific CSV (Watson Sato <wsato@redhat.com>)
 - Update platform applicability of Ubuntu shared checks (Watson Sato
<wsato@redhat.com>)
 - Update Emergency Target rule with new CCE (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Use defaults/main.yml and not vars/main.yml (Gabe <redhatrises@gmail.com>)
 - Map OCP SCC to Kubernetes benchmark (Gabe <redhatrises@gmail.com>)
 - Fix playbook permissions for audisp when creating configuration file (Gabe
<redhatrises@gmail.com>)
 - Added RHEL7 CCEs for rules audit_rules_for_ospp and
installed_OS_is_vendor_supported (Matus Marhefka <mmarhefk@redhat.com>)
 - Handle version mapping of ubuntu products (Watson Sato <wsato@redhat.com>)
 - Add coreos NCP profile (Gabe <redhatrises@gmail.com>)
 - Add Essential Eight profiles (shaneboulden <shane.boulden@gmail.com>)
 - Add coreos to RHEL8 installed checks (Gabe <redhatrises@gmail.com>)
 - Update platform applicability of Ubuntu checks (Watson Sato
<wsato@redhat.com>)
 - Fix full name mapping of WRLinux (Watson Sato <wsato@redhat.com>)
 - Remove unused private check for wrlinux (Watson Sato <wsato@redhat.com>)
 - Update platform applicability of WRLinux 8 checks (Watson Sato
<wsato@redhat.com>)
 - Fix directory csvs for cron checks (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Fix rationales for cron checks (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Generate only the test, object and state (Jan Černý <jcerny@redhat.com>)
 - Migrate OCP runtime check template to a Jinja macro (Jan Černý
<jcerny@redhat.com>)
 - Enable permissions checks of directories (Jan Černý <jcerny@redhat.com>)
 - Fix applicability of package_openssh.*_installed rules (Jan Černý
<jcerny@redhat.com>)
 - Do not use macro for approved_ciphers check (Watson Sato <wsato@redhat.com>)
 - Add/update regulatory warning for FIPS rules (Watson Sato <wsato@redhat.com>)
 - Ported the template filename change to the legacy template system. (Matěj
Týč <matyc@redhat.com>)
 - Convert mount_option template family to the new system. (Matěj Týč
<matyc@redhat.com>)
 - Enable file permissions templates in new templating system (Jan Černý
<jcerny@redhat.com>)
 - Add Owner/Group/Permissions checks for cron.d (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add Owner/Group/Permissions checks for cron.monthly (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add Owner/Group/Permissions checks for cron.weekly (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add Owner/Group/Permissions checks for cron.daily (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add Owner/Group/Permissions checks for cron.hourly (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add Owner/Group/Permissions checks for crontab (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Fix OCIL clause (Jan Černý <jcerny@redhat.com>)
 - Add rules to check if OpenSSH is removed (Jan Černý <jcerny@redhat.com>)
 - Add callbacks for templates auditd_lineinfile and sshd_lineinfile (Jan
Černý <jcerny@redhat.com>)
 - Add some variables to the env_yaml dict (Jan Černý <jcerny@redhat.com>)
 - Fix wrong template names (Jan Černý <jcerny@redhat.com>)
 - added same check to template_oval_service_enabled (Vojtech Polasek
<vpolasek@redhat.com>)
 - added a specific test which led to discovery of this bug (Vojtech Polasek
<vpolasek@redhat.com>)
 - made regex even stricter by adding $ at the end (Vojtech Polasek
<vpolasek@redhat.com>)
 - fixed regex in the template (Vojtech Polasek <vpolasek@redhat.com>)
 - Fix sourcing of shared functions in test scenarios for gui_login_banner group
(Matus Marhefka <mmarhefk@redhat.com>)
 - made fips rules passing for rhel8 (Vojtech Polasek <vpolasek@redhat.com>)
 - Make template_OVAL_service_enabled self-contained (Jan Černý
<jcerny@redhat.com>)
 - Make template_OVAL_service_disabled self-contained (Jan Černý
<jcerny@redhat.com>)
 - Fix disappeared OVALs for audit_rules_execution.* rules (Jan Černý
<jcerny@redhat.com>)
 - Fix PEP8 problems (Jan Černý <jcerny@redhat.com>)
 - Add a callback for rule timer_enabled (Jan Černý <jcerny@redhat.com>)
 - Add a callback for template service_enabled (Jan Černý <jcerny@redhat.com>)
 - Add a callback for template service_disabled (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template package_removed (Jan Černý <jcerny@redhat.com>)
 - Add a callback for template kernel_module_disabled (Jan Černý
<jcerny@redhat.com>)
 - Add callback for template audit_rules_unsuccessful_file_modification (Jan
Černý <jcerny@redhat.com>)
 - Add callback for templates for detailed auti rules (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template audit_rules_file_deletion_events (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template audit_rules_dac_modification (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template mount (Jan Černý <jcerny@redhat.com>)
 - Add a callback for template grub2_bootloader_argument (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template audit_rules_usergroup_modification (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template audit_rules_path_syscall (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template audit_rules_login_events (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template audit_rules_privileged_commands (Jan Černý
<jcerny@redhat.com>)
 - Add a callback for template accounts_password (Jan Černý
<jcerny@redhat.com>)
 - Update Require Single User Auth OVAL regex (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add emergency service single user mode check (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add SLES 12 STIG rule installed_OS_is_vendor_supported (Alexander Bergmann
<abergmann@suse.com>)
 - Update Require Single User Auth to conform to RH defaults and CIS (Jayson
Cofell <1051437+70k10@users.noreply.github.com>)
 - Ported the sysctl macros to the new system. (Matěj Týč <matyc@redhat.com>)
 - Add SUSE Linux Enterprise Server 12 STIG XML document (Alexander Bergmann
<abergmann@suse.com>)
 - Script polish. (Matěj Týč <matyc@redhat.com>)
 - added example commands (Vojtech Polasek <vpolasek@redhat.com>)
 - Modify postfix network disable oval check and CCEs (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Change postfix network disable to variable and update RHEL6 STIG instead.
(Jayson Cofell <1051437+70k10@users.noreply.github.com>)
 - Change Postfix Ansible remediation to template (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Update postfix network check and remediation for CIS (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - A couple of minor upload_ansible_roles_to_galaxy fixes (Gabe
<redhatrises@gmail.com>)
 - Made templates product-specific. (Matěj Týč <matyc@redhat.com>)
 - update rsyslog rules (Polášek Vojtěch <Vojtech.Polasek@gmail.com>)
 - fixed indentation (Polášek Vojtěch <Vojtech.Polasek@gmail.com>)
 - updated the rule description (Polášek Vojtěch <Vojtech.Polasek@gmail.com>)
 - Skip content generation when callback isn't implemented (Jan Černý
<jcerny@redhat.com>)
 - Updated template data after accounts_password template name fix (Watson Sato
<wsato@redhat.com>)
 - Fix template name of accounts_password template (Watson Sato
<wsato@redhat.com>)
 - Streamlined handling of template variable value not specified. (Matěj Týč
<matyc@redhat.com>)
 - Unified OVAL sysctl templates and outputs to one file. (Matěj Týč
<matyc@redhat.com>)
 - Update template data in rules after timers_enabled fix (Watson Sato
<wsato@redhat.com>)
 - Fix var name for timers_enabled template (Watson Sato <wsato@redhat.com>)
 - Update template data in rules after cleanup fix (Watson Sato
<wsato@redhat.com>)
 - Improve clean up to also remove vars with same value (Watson Sato
<wsato@redhat.com>)
 - Update template data in rules after backend fixes (Watson Sato
<wsato@redhat.com>)
 - Incorporate backends merge logic into main loop (Watson Sato
<wsato@redhat.com>)
 - Fix merge of backends, rule_a was not defined (Watson Sato
<wsato@redhat.com>)
 - Use backends key, instead of template_backends (Watson Sato
<wsato@redhat.com>)
 - Break out api_server_service_account_key into multiple rules (Gabe
<redhatrises@gmail.com>)
 - Add openvswitch permission rules (Gabe <redhatrises@gmail.com>)
 - Add data from CSV to rules (Watson Sato <wsato@redhat.com>)
 - Fix rhel6 packagename for services_disabled (Watson Sato <wsato@redhat.com>)
 - Remove empty product specific data (Watson Sato <wsato@redhat.com>)
 - Remove redundant data for some templates (Watson Sato <wsato@redhat.com>)
 - Also merge template_backends, not just vars (Watson Sato <wsato@redhat.com>)
 - Fix multiple pycode style issues (Watson Sato <wsato@redhat.com>)
 - Strip last value after removing except-for comment (Watson Sato
<wsato@redhat.com>)
 - Make template data keys lowercase (Watson Sato <wsato@redhat.com>)
 - Keep order of insertion of template data key (Watson Sato <wsato@redhat.com>)
 - Add template_backend key to template data (Watson Sato <wsato@redhat.com>)
 - Simplified the test_suite command-line. (Matěj Týč <matyc@redhat.com>)
 - Revert portion of AIDE cron check (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Rename SSG_NEW_TEMPLATING to SSG_NEW_TEMPLATING_ENABLED (Jan Černý
<jcerny@redhat.com>)
 - Do not add empty values in certain conditions (Watson Sato
<wsato@redhat.com>)
 - Walk through benchmarks adding template data (Watson Sato <wsato@redhat.com>)
 - Fix typo in lineinfile template name (Watson Sato <wsato@redhat.com>)
 - Make disabled language name the key of dictionary (Watson Sato
<wsato@redhat.com>)
 - More regex fixes in RHEL8 file_dir_permission CSV (Watson Sato
<wsato@redhat.com>)
 - Merge all csv_data into shared and resolve it (Watson Sato
<wsato@redhat.com>)
 - Add functionality to dump loaded CSV data (Watson Sato <wsato@redhat.com>)
 - Strip mount options (Watson Sato <wsato@redhat.com>)
 - Make data format closer to specs (Watson Sato <wsato@redhat.com>)
 - Simplify data loaded into rule.yml (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for timer_enabled (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for sysctl_values (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for services_enabled (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for services_disabled (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for selinux_booleans (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for file_dir_permissions (Watson Sato <wsato@redhat.com>)
 - Small fixes in RHEL8 file_dir_permission CSV (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for ocp_service_runtime_config (Watson Sato
<wsato@redhat.com>)
 - Add CSV parser for mounts (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for mount_options (Watson Sato <wsato@redhat.com>)
 - Let CSV parser decide template_name (Watson Sato <wsato@redhat.com>)
 - Let the CSV parser add the rule into csv_data (Watson Sato
<wsato@redhat.com>)
 - Make csv_data rule_id centric, not template centric (Watson Sato
<wsato@redhat.com>)
 - Add CSV parser for linefinfile (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for kernel_modules_disabled (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for grub2_bootloader_argument (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for audit_rules_usergroup_modification (Watson Sato
<wsato@redhat.com>)
 - Add CSV parser for audit_rules_unsuccessful_file_modification_detailed
(Watson Sato <wsato@redhat.com>)
 - Add CSV parser for audit_rules_unsuccessful_file_modification (Watson Sato
<wsato@redhat.com>)
 - Add CSV parser for audit_rules_path_syscall (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for audit_rules_login_events (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for audit_rules_file_deletion_events (Watson Sato
<wsato@redhat.com>)
 - Add CSV parser for audit_rules_dac_modification (Watson Sato
<wsato@redhat.com>)
 - Add CSV parser for audit_rules_execution and privileged_commands (Watson Sato
<wsato@redhat.com>)
 - Load shared CSVs as if it were a product (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for accounts_password (Watson Sato <wsato@redhat.com>)
 - Skip empty lines in CSV files (Watson Sato <wsato@redhat.com>)
 - Add CSV parser for packages_removed (Watson Sato <wsato@redhat.com>)
 - Add split some lines and add blank lines (Watson Sato <wsato@redhat.com>)
 - Improve check for CSVs we know how to load (Watson Sato <wsato@redhat.com>)
 - Initial script to mass migrate CSV data into rules (Watson Sato
<wsato@redhat.com>)
 - Fix typo and add ocil clause to package_audit_installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Ignore Visual Studio Code configuration files (Jan Černý
<jcerny@redhat.com>)
 - Add new Bash Jinja macros to developer guide (Alexander Scheel
<ascheel@redhat.com>)
 - Add bash_firefox_cfg_setting Jinja macro (Alexander Scheel
<ascheel@redhat.com>)
 - Add bash_firefox_js_setting Jinja macro (Alexander Scheel
<ascheel@redhat.com>)
 - Add bash_service_command Jinja macro (Alexander Scheel <ascheel@redhat.com>)
 - Fix kubelet_enable_streaming_connections Rule (Gabe <redhatrises@gmail.com>)
 - Modify AIDE cron test regex to allow blank user (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Fix shellcheck errors in service_command.sh (Alexander Scheel
<ascheel@redhat.com>)
 - Fix wording in AIDE cron check (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Move FAT disable directory for templating (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Fix OCP runtime template (Gabe <redhatrises@gmail.com>)
 - insecure-port should not be configured (Gabe <redhatrises@gmail.com>)
 - Update linux_os/guide/services/ssh/file_owner_sshd_config/rule.yml (Shawn
Wells <shawn@redhat.com>)
 - Fix CCE number fail (Jayson Cofell <1051437+70k10@users.noreply.github.com>)
 - Fix PEP8 problems (Jan Černý <jcerny@redhat.com>)
 - Change the template arguments keys (Jan Černý <jcerny@redhat.com>)
 - Change the template keys format (Jan Černý <jcerny@redhat.com>)
 - Process template arguments for each template separately (Jan Černý
<jcerny@redhat.com>)
 - Introduce new templating system (Jan Černý <jcerny@redhat.com>)
 - Add CCEs to FAT module disable (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Assign CCEs to SSH permission checks (Shawn Wells <shawn@redhat.com>)
 - Add DISA severity levels to Developer Guide (Gabe <redhatrises@gmail.com>)
 - update kubelet_enable_streaming_connections variable handling (Gabe
<redhatrises@gmail.com>)
 - update api_server_audit_log_path to evaluate any log path (Gabe
<redhatrises@gmail.com>)
 - Use int zero (0) for never in unlock_time setting for pam_faillock (Gabe
<redhatrises@gmail.com>)
 - Disable FAT filesystem module (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Update sshd_config permission rules with requested changes (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Fix /etc/shadow permissions documentation (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Add sshd_config permissions checks to C2S profile (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Convert sshd_config check to use template (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - SSG Test Suite: Continue even when rule is not found on benchmark. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix sshd groupowner variable (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Verify Group on SSH Server config file (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Verify Owner on SSH Server config file (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - Ensure permissions on sshd_config (Jayson Cofell
<1051437+70k10@users.noreply.github.com>)
 - ansible_set_sshd: add before first commented Match (Alexander Scheel
<ascheel@redhat.com>)
 - Fix regex and escape correctly (Gabe <redhatrises@gmail.com>)
 - Rename disable_prelink -> bash_disable_prelink (Alexander Scheel
<ascheel@redhat.com>)
 - Concatenate all text within a fix element (Jan Černý <jcerny@redhat.com>)
 - Add a break (Jan Černý <jcerny@redhat.com>)
 - ssg_test_suite: Update Test Suite usage documentation with the information
about rootless podman backend (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Improved the build_product script. (Matěj Týč <matyc@redhat.com>)
 - moved test scenarios into new directories (Vojtech Polasek
<vpolasek@redhat.com>)
 - showing parts of rule for relevant product fixed (Vojtech Polasek
<vpolasek@redhat.com>)
 - ansible remediation fixed (Vojtech Polasek <vpolasek@redhat.com>)
 - implemented suggestions from comments WIP! (Vojtech Polasek
<vpolasek@redhat.com>)
 - updated ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - update the rule file (Vojtech Polasek <vpolasek@redhat.com>)
 - ansible remediation working (Vojtech Polasek <vpolasek@redhat.com>)
 - initial change of ansible remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrote to work on rhel7 and rhel8 (Vojtech Polasek <vpolasek@redhat.com>)
 - oval check and tests finalized (Vojtech Polasek <vpolasek@redhat.com>)
 - initial commit (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed hostkeyalgorithms in the ocil clause (Vojtech Polasek
<vpolasek@redhat.com>)
 - changed hostkeyalgorithms to be alligned with the target (Vojtech Polasek
<vpolasek@redhat.com>)
 - SSG Test Suite: Make sure that strings are properly quoted for oscap.
(Gabriel Becker <ggasparb@redhat.com>)
 - Remove profile IDs from the scenarios headers (Jan Černý
<jcerny@redhat.com>)
 - Changed owner of files in the test suite tarball. (Matěj Týč
<matyc@redhat.com>)
 - Make --old and --new optional arguments (Jan Černý <jcerny@redhat.com>)
 - Rename function compare_remediation_contents to compare_fix_texts (Jan
Černý <jcerny@redhat.com>)
 - Refactor: extract function compare_fix_elements (Jan Černý
<jcerny@redhat.com>)
 - Refactor: Extract functions get_rules_to_compare and compare_rules (Jan
Černý <jcerny@redhat.com>)
 - Use constants from ssg.constants module whenever possible (Jan Černý
<jcerny@redhat.com>)
 - ssg_test_suite: Fix regression for rootful podman backend (Evgeny Kolesnikov
<ekolesni@redhat.com>)
 - Clean up partition before performing test for mount_option_tmp_noexec rule.
(Milan Lysonek <mlysonek@redhat.com>)
 - Fix parameter and profile in sysctl_kernel_dmesg_restrict test scenario.
(Milan Lysonek <mlysonek@redhat.com>)
 - SSG Test Suite: Fix an omission when processin profile id. (Gabriel Becker
<ggasparb@redhat.com>)
 - SSG Test Suite: Set result-id empty string. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add test scenarios for rsyslog_remote_tls (Jan Černý <jcerny@redhat.com>)
 - SSG Test Suite: Switch off adding single quotes to (all) profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Use named parameters for class Rule (Jan Černý <jcerny@redhat.com>)
 - Improve doctext for iterate_over_rules (Jan Černý <jcerny@redhat.com>)
 - Document /tests/shared in README (Jan Černý <jcerny@redhat.com>)
 - Move test scenarios to the rule folder (Jan Černý <jcerny@redhat.com>)
 - Modify test suite scripts (Jan Černý <jcerny@redhat.com>)
 - Rule harden_sshd_crypto_policy added to the unselect_rules_list (Matus
Marhefka <mmarhefk@redhat.com>)
 - SSG Test Suite: Fix (all) profile when running rule mode. (Gabriel Becker
<ggasparb@redhat.com>)
 - ssg_test_suite: Fix SSH port handling in all ssh/scp calls (via
SSH_ADDITIONAL_OPTS) (Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Disable Kerberos by removing host keytab. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Update identifers and references in rule section of documentation (Gabe
<redhatrises@gmail.com>)
 - Remove shell module usage for rpm verification tasks (Gabe
<redhatrises@gmail.com>)
 - Remove usage of shell module in gpgkey install Ansible snippet (Gabe
<redhatrises@gmail.com>)
 - Use command and mount module instead of shell (Gabe <redhatrises@gmail.com>)
 - Remove usage of the SHELL module or get rid of pipe usage (Gabe
<redhatrises@gmail.com>)
 - Improved Bash code based on shellcheck feedback. (Matěj Týč
<matyc@redhat.com>)
 - Add a tool to test generated datastreams (Jan Černý <jcerny@redhat.com>)
 - ssg_test_suite: Fix SSH port handling for podman backend in rootless mode
(Evgeny Kolesnikov <ekolesni@redhat.com>)
 - Match the action even when writen across multiple lines. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Next release version is 0.1.47 (Watson Sato <wsato@redhat.com>)
 - Configure CA certificate for rsyslog remote logging. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Configure TLS for rsyslog remote logging. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Fail rpm_verify ansible fixes only if rc returns error code greater than 1
(Gabe <redhatrises@gmail.com>)
 - Move audit rules to correct group (Gabe <redhatrises@gmail.com>)
 - Unselect rule directory_access_var_log_audit (Watson Sato <wsato@redhat.com>)
 - Fix up 1.2 DS dependencies (Watson Sato <wsato@redhat.com>)
 - Copy 1.2 Datastream to the zipfile (Watson Sato <wsato@redhat.com>)
 - Install the 1.2 Datastreams (Watson Sato <wsato@redhat.com>)
 - Excluding /run and /sys* from filesystems watched by the fapolicyd. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Gracefully (fail, not error) handle empty fapolicyd.mounts file. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Gracefully (fail, not error) handle missing fapolicyd.mounts file. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Enable fapolicyd to watch all system mountpoints. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Remove rule configure_opensc_nss_db from RHEL8 product. (Gabriel Becker
<ggasparb@redhat.com>)
 - Revert PR #4766 (Gabe <redhatrises@gmail.com>)
 - Add bash_ prefix to Jinja Dconf Bash macros (Jan Černý <jcerny@redhat.com>)
 - Ensure rsyslog-gnutls is installed. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Remove Ansible from rule service_fapolicyd_enabled (Jan Černý
<jcerny@redhat.com>)
 - Update contributors list for 0.1.46 (Watson Sato <wsato@redhat.com>)
 - Bump version, next release is 0.1.46 (Watson Sato <wsato@redhat.com>)
 - Removed irrelevant criteria tags from OVAL definition. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typos in SSG manpage template. (Gabriel Becker <ggasparb@redhat.com>)
 - Update SSG manpage to reference newest version of DISA STIG (V2R4). (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix variable reference in create-stig-overlay python script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update stig_overlay.xml file against DISA STIG V2R4. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update DISA STIG RHEL7 file to V2R4. (Gabriel Becker <ggasparb@redhat.com>)
 - Authorize Human Interface Devices in USBGuard daemon. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Authorize USB hubs in USBGuard daemon. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Fix description of test when parameter is default (Watson Sato
<wsato@redhat.com>)
 - Include misisng macro for sshd_required_or_unset (Watson Sato
<wsato@redhat.com>)
 - Always define criteria for application configured (Watson Sato
<wsato@redhat.com>)
 - Add macro for sshd_required_or_requirement_unset (Watson Sato
<wsato@redhat.com>)
 - Fix FAQ IASE URL in WRLinux DISA STIG profile (Watson Sato
<wsato@redhat.com>)
 - Fix IASE reference in exmaple product (Watson Sato <wsato@redhat.com>)
 - Update stig transformation info (Watson Sato <wsato@redhat.com>)
 - Update reference URL to virt STIG (Watson Sato <wsato@redhat.com>)
 - Remove duplicate handling of DISA CCI references (Watson Sato
<wsato@redhat.com>)
 - Update CCI namespace in transfors (Watson Sato <wsato@redhat.com>)
 - Remove 'set -o pipefail' command from ansible remediation for
rpm_verify_hashes and rpm_verify_permissions rules. (Milan Lysonek
<mlysonek@redhat.com>)
 - IASE was migrated to DOD Cyber Exchange (Watson Sato <wsato@redhat.com>)
 - Create _is_remediation_available method for checking remediation and update
_check_rule call. (Milan Lysonek <mlysonek@redhat.com>)
 - Deduplicate rule grub2_enable_fips_mode in RHEL7 OSPP profile. (Gabriel
Becker <ggasparb@redhat.com>)
 - Removed commented-out selections. (Matěj Týč <matyc@redhat.com>)
 - Adjusts the RHEL7 and RHEL8 OSPP profiles to have the same structure. (Matěj
Týč <matyc@redhat.com>)
 - python-rhsm is not available for RHEL8 (Watson Sato <wsato@redhat.com>)
 - Screen is not available for RHEL8 (Watson Sato <wsato@redhat.com>)
 - Remove rules that rely on pam_pkcs11 from RHEL8 (Watson Sato
<wsato@redhat.com>)
 - Add csv for selinux_booleans template (Watson Sato <wsato@redhat.com>)
 - Add `create` in templates where missing (Jan Černý <jcerny@redhat.com>)
 - updated ocil (Vojtech Polasek <vpolasek@redhat.com>)
 - improved documentation (Vojtech Polasek <vpolasek@redhat.com>)
 - NCP profile is extension of OSPP (Marek Haicman <mhaicman@redhat.com>)
 - Change title of NCP profile (Marek Haicman <mhaicman@redhat.com>)
 - oval check is finished (Vojtech Polasek <vpolasek@redhat.com>)
 - Mark grub2_vsyscall as informational in OSPP (Watson Sato <wsato@redhat.com>)
 - Validate if rule being refined is selected (Watson Sato <wsato@redhat.com>)
 - Simplify the regular expression. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Simplify the regular expression. (Jan Pazdziora <jpazdziora@redhat.com>)
 - WIP, does not pass all tests (Vojtech Polasek <vpolasek@redhat.com>)
 - Update CSRF cookie secure (Gabe <redhatrises@gmail.com>)
 - Remove unused parameter from python function. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove vendor-zipfile from ALL target (Watson Sato <wsato@redhat.com>)
 - Document vendor zipfile targets (Watson Sato <wsato@redhat.com>)
 - Separate vendor-zipfile target for each vendor (Watson Sato
<wsato@redhat.com>)
 - Change nist-zipfile to be about vendor-zipfile (Watson Sato
<wsato@redhat.com>)
 - Merge nist zip commands via filename suffix var (Watson Sato
<wsato@redhat.com>)
 - Yet another typo on cmake command comment (Watson Yuuma Sato
<wsato@redhat.com>)
 - Fix ds suffix in scapval test (Watson Sato <wsato@redhat.com>)
 - Fix typos. (Matěj Týč <matyc@redhat.com>)
 - Create configuration files if they don't exist (Jan Černý
<jcerny@redhat.com>)
 - Fix command to generate 1.2 derivative content (Watson Sato
<wsato@redhat.com>)
 - Fix typo in  ds-1.2 cmake command comment (Watson Yuuma Sato
<wsato@redhat.com>)
 - Improve formatting and quoting (Jan Černý <jcerny@redhat.com>)
 - SSG Test Suite: Run find remediation only once per rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update linux_os guide for ol8 (Ilya Okomin <ilya.okomin@oracle.com>)
 - XMLint the 1.2 datastream as well (Watson Sato <wsato@redhat.com>)
 - Included only compliant datastream in NIST zipfile (Watson Sato
<wsato@redhat.com>)
 - Add ctest validation for 1.2 datastream (Watson Sato <wsato@redhat.com>)
 - Add tests for rule_rsyslog_files_permissions (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add tests for rule_rsyslog_files_ownership (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Add tests for rule_rsyslog_files_groupownership (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Create configuration files if they don't exist (Jan Černý
<jcerny@redhat.com>)
 - typos fixed and description slightly extended (Vojtech Polasek
<vpolasek@redhat.com>)
 - added test cases for the case where the CP is customized (Vojtech Polasek
<vpolasek@redhat.com>)
 - get the pattern match on file path working (Vojtech Polasek
<vpolasek@redhat.com>)
 - adding missing check="all" (Vojtech Polasek <vpolasek@redhat.com>)
 - adding the unix preposition to objects and tests (Vojtech Polasek
<vpolasek@redhat.com>)
 - initial try of drop in file check (Vojtech Polasek <vpolasek@redhat.com>)
 - started rewriting the configure_crypto_policy oval check (Vojtech Polasek
<vpolasek@redhat.com>)
 - DevGuide: How to build compliant SCAP 1.2 content (Watson Sato
<wsato@redhat.com>)
 - DevGuide: Add ssg-product-ds-1.2.xml into build ouput section (Watson Sato
<wsato@redhat.com>)
 - Remove mentions of RPM from task names (Jan Černý <jcerny@redhat.com>)
 - Substitute option --scap12 by --oval510 (Watson Sato <wsato@redhat.com>)
 - Enable timer only if package providing the timer is installed (Jan Černý
<jcerny@redhat.com>)
 - Build SCAP 1.3 (default) and 1.2 content (Watson Sato <wsato@redhat.com>)
 - rewrote the description (Vojtech Polasek <vpolasek@redhat.com>)
 - Add test scenarios for configure_usbguard_auditbackend rule. (Milan Lysonek
<mlysonek@redhat.com>)
 - Remove remaining CCE identifiers from RHEL derivatives. (Gabriel Becker
<ggasparb@redhat.com>)
 - added one more test (Vojtech Polasek <vpolasek@redhat.com>)
 - Use product attribute to build OVAL check which checks for Redhat gpgpkey.
(Gabriel Becker <ggasparb@redhat.com>)
 - Use Ansible package_facts module instead of package module (Jan Černý
<jcerny@redhat.com>)
 - fixed typos and added clarifications (Vojtech Polasek <vpolasek@redhat.com>)
 - Use single quotes to avoid double backslashes (Jan Černý
<jcerny@redhat.com>)
 - Use quotes around variable expansion (Jan Černý <jcerny@redhat.com>)
 - Validate the property being refined (Watson Sato <wsato@redhat.com>)
 - Validate the rule being refined (Watson Sato <wsato@redhat.com>)
 - Support multiple property refinements (Watson Sato <wsato@redhat.com>)
 - Introduce basic rule refinement to CaC build system (Watson Sato
<wsato@redhat.com>)
 - improved documentation and readability (Vojtech Polasek
<vpolasek@redhat.com>)
 - added more tests (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrote the regex so that only the first config item is evaluated (Vojtech
Polasek <vpolasek@redhat.com>)
 - strengthening check for case where Match final all is not at the begining
(Vojtech Polasek <vpolasek@redhat.com>)
 - put the rule in the profile into the right place (Vojtech Polasek
<vpolasek@redhat.com>)
 - fixed rhel8 profile (Vojtech Polasek <vpolasek@redhat.com>)
 - tests added (Vojtech Polasek <vpolasek@redhat.com>)
 - added remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - added missing criteria macros (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed test id in state (Vojtech Polasek <vpolasek@redhat.com>)
 - updated macros to catch up with changes in master (Vojtech Polasek
<vpolasek@redhat.com>)
 - added more checks (Vojtech Polasek <vpolasek@redhat.com>)
 - written rule description (Vojtech Polasek <vpolasek@redhat.com>)
 - added remaining checks (Vojtech Polasek <vpolasek@redhat.com>)
 - rewrote the state macro to use unique names (Vojtech Polasek
<vpolasek@redhat.com>)
 - adding second config option (Vojtech Polasek <vpolasek@redhat.com>)
 - initial oval check builds (Polášek Vojtěch <Vojtech.Polasek@gmail.com>)
 - oval check in progress (Vojtech Polasek <vpolasek@redhat.com>)
 - adding second macro (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed quote and new line (Vojtech Polasek <vpolasek@redhat.com>)
 - initial commit, testing (Vojtech Polasek <vpolasek@redhat.com>)
 - DISA STIG updated its language to be less specific about antivirus. Updating
our language to match. (Gabe <redhatrises@gmail.com>)
 - Prevent failures of Ansible task for service_enabled (Jan Černý
<jcerny@redhat.com>)
 - Log USBGuard daemon audit events using Linux Audit. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Renamed the package_auditd_installed to package_audit_installed. (Matěj
Týč <matyc@redhat.com>)
 - Fixed errors. (Matěj Týč <matyc@redhat.com>)
 - Fix missing commas (Jan Černý <jcerny@redhat.com>)
 - Ensure that no rule has multiple STIG IDs (Jan Černý <jcerny@redhat.com>)
 - Fix STIG IDs reference processing. (Jan Černý <jcerny@redhat.com>)
 - Do not use prefixed format in unit tests (Jan Černý <jcerny@redhat.com>)
 - Convert include_dconf_settings.sh to Jinja macros (Jan Černý
<jcerny@redhat.com>)
 - Remove vim swo file that shouldn't be there (Watson Sato <wsato@redhat.com>)
 - Add test for presence of 30-ospp-v42.rules (Watson Sato <wsato@redhat.com>)
 - Unify and simplify tests (Watson Sato <wsato@redhat.com>)
 - Do not hardcode audit version in rule description (Watson Sato
<wsato@redhat.com>)
 - Do not dump 30-ospp-v42.rules file, copy it (Watson Sato <wsato@redhat.com>)
 - Use bash globbing to account for vesioned docs (Watson Sato
<wsato@redhat.com>)
 - Dont check hash of audit rules files, compare them (Watson Sato
<wsato@redhat.com>)
 - Replace Bash function disable_prelink by Jinja macro (Jan Černý
<jcerny@redhat.com>)
 - Prevent user from disabling the screen lock. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Configure tmux to lock session after inactivity (Jan Pazdziora
<jpazdziora@redhat.com>)
 - sshd_use_priv_separation: use bash/OVAL macros (Malte Kraus
<malte.kraus@suse.com>)
 - Support session locking with tmux. (Jan Pazdziora <jpazdziora@redhat.com>)
 - sshd_do_not_permit_user_env: text improvements (Malte Kraus
<malte.kraus@suse.com>)
 - fix more NIST references (Malte Kraus <malte.kraus@suse.com>)
 - remove wrong NIST mappings (Malte Kraus <malte.kraus@suse.com>)
 - introduce a var_sshd_disable_compression variable (Malte Kraus
<malte.kraus@suse.com>)
 - sshd_approved_macs: add new option for value mandated by SLE12 STIG (Malte
Kraus <malte.kraus@suse.com>)
 - sshd_set_idle_timeout: remove SUSE conditional text (Malte Kraus
<malte.kraus@suse.com>)
 - sshd_enable_warning_banner on SLE12: remove one of the STIG IDs (Malte Kraus
<malte.kraus@suse.com>)
 - Revert "sshd_use_approved_ciphers for SLE12" (Malte Kraus
<malte.kraus@suse.com>)
 - introduce var_sshd_priv_separation (Malte Kraus <malte.kraus@suse.com>)
 - SLE SSH rules: don't change variable defaults (Malte Kraus
<malte.kraus@suse.com>)
 - consolidate sshd_use_approved_macs SRG lists (Malte Kraus
<malte.kraus@suse.com>)
 - proof-read ssh rules (Malte Kraus <malte.kraus@suse.com>)
 - remove duplicated STIG ID (Malte Kraus <malte.kraus@suse.com>)
 - fix handling of multiple STIG IDs per rule (Malte Kraus
<malte.kraus@suse.com>)
 - ssh: fix SLE warnings from rule_dir_stats (Malte Kraus
<malte.kraus@suse.com>)
 - fix missing dependencies during SLE12 build (Malte Kraus
<malte.kraus@suse.com>)
 - add second SLE12 stigid to sshd_enable_warning_banner (Malte Kraus
<malte.kraus@suse.com>)
 - service_sshd_enabled for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_enable_x11_forwarding for SLE12 (Alexander Bergmann
<abergmann@suse.com>)
 - sshd_disable_compression for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_use_priv_separation for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_enable_strictmodes for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - file_permissions_sshd_private_key for SLE12 (Alexander Bergmann
<abergmann@suse.com>)
 - file_permissions_sshd_pub_key for SLE12 (Alexander Bergmann
<abergmann@suse.com>)
 - sshd_disable_user_known_hosts for SLE12 (Alexander Bergmann
<abergmann@suse.com>)
 - sshd_set_keepalive for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_set_idle_timeout for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_use_approved_macs for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_use_approved_ciphers for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_do_not_permit_user_env for SLE12 (Alexander Bergmann
<abergmann@suse.com>)
 - sshd_disable_empty_passwords for SLE12 (Alexander Bergmann
<abergmann@suse.com>)
 - sshd_disable_root_login for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_print_last_log for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - sshd_set_loglevel_verbose for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - Expanded and cleaned up csv templates. (Matěj Týč <matyc@redhat.com>)
 - sshd_enable_warning_banner for SLE12 (Alexander Bergmann
<abergmann@suse.com>)
 - Check manually using diff instead of hashes (Watson Sato <wsato@redhat.com>)
 - Actual OSPP version is 4.2.1 (Watson Sato <wsato@redhat.com>)
 - Make a macro for the hashes output (Watson Sato <wsato@redhat.com>)
 - Add description instructions how to remediate (Watson Sato
<wsato@redhat.com>)
 - Parametrize audit docs dir with jinja variable (Watson Sato
<wsato@redhat.com>)
 - Do not remove all other audit rules (Watson Sato <wsato@redhat.com>)
 - Add comment for RHEL7 ospp rules (Watson Sato <wsato@redhat.com>)
 - Always set audit_dir in fix for audit_rules_for_ospp (Watson Sato
<wsato@redhat.com>)
 - Select audit_rules_for_ospp in RHEL7 (Watson Sato <wsato@redhat.com>)
 - Remove individual audit rules from rhel8 OSPP profile (Watson Sato
<wsato@redhat.com>)
 - Add rhel8 function to dump OSPP audit rules (Watson Sato <wsato@redhat.com>)
 - Add tests for OSPP audit rules (Watson Sato <wsato@redhat.com>)
 - Add rhel7 remediation (Watson Sato <wsato@redhat.com>)
 - Add remediation for audit_rules_for_ospp (Watson Sato <wsato@redhat.com>)
 - Add OVAL for audit_rules_for_ospp (Watson Sato <wsato@redhat.com>)
 - Add to configure OSSP v4.2 audit rules (Watson Sato <wsato@redhat.com>)
 - package_openssh_installed for SLE12 (Alexander Bergmann <abergmann@suse.com>)
 - Fix section titles. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Get rid of negation and simplify the code (Jan Černý <jcerny@redhat.com>)
 - Remove watches since syscall rules cover all cases. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Enable the rngd service for OSPP. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Adding SELinux rules into OSPP profile (Marek Haicman <mhaicman@redhat.com>)
 - Use SSG constants in xml_operations.py script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove excess escape characters (Jan Černý <jcerny@redhat.com>)
 - change - to _ (Jan Černý <jcerny@redhat.com>)
 - Describe SSG_TARGET_OVAL_*VERSION (Jan Černý <jcerny@redhat.com>)
 - Add documentation to known issue in the test suite. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improve build section in developer guide. (Milan Lysonek
<mlysonek@redhat.com>)
 - Document building SCAP 1.2 content instead of SCAP 1.3 (Jan Černý
<jcerny@redhat.com>)
 - ds_unselect_rules.sh: updated to work with namespaced SCAP 1.3 datastreams
(Matus Marhefka <mmarhefk@redhat.com>)
 - SSG Test suite: Add function to find remediation in the datastream. (Gabriel
Becker <ggasparb@redhat.com>)
 - Move some system-tools rules to organized with their respective configuration
rules (Gabe <redhatrises@gmail.com>)
 - Update disk configuration in kickstart file used by the test suite. (Gabriel
Becker <ggasparb@redhat.com>)
 - Update disk configuration in RHEL7 OSPP kickstart file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add SSG profile prefix back to RHEL7 kickstart files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Updated Fedora GPG info. (Matěj Týč <matyc@redhat.com>)
 - Remove GNOME rules from rhel7/ospp (Jiri Jaburek <jjaburek@redhat.com>)
 - The use of ed25519 is disabled via HostKeyAlgorithms in FIPS crypto policy.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - Profile created for Common Criteria is strictly following the guidance of
OSPP v4.2.1. There should be nothing more and nothing less. (Marek Haicman
<mhaicman@redhat.com>)
 - As the USGCB profile is much more than implementation of OSPP guidance, we
are moving it to another identifier. (Marek Haicman <mhaicman@redhat.com>)
 - Always set OVAL version in the CACHE (Watson Sato <wsato@redhat.com>)
 - Fix identifiers section to have the correct name. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update OL CJIS profile (Ilya Okomin <ilya.okomin@oracle.com>)
 - Update OL HIPAA profile (Ilya Okomin <ilya.okomin@oracle.com>)
 - Set number of records to cause an explicit flush to audit logs. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Update OL OSPP profile (Ilya Okomin <ilya.okomin@oracle.com>)
 - Add OL support for dconf_gnome_disable_user_admin rule (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Select OL8 OSPP rules to audit /etc/shadow and /etc/gshadow (Ilya Okomin
<ilya.okomin@oracle.com>)
 - Fix disk configuration in OSPP anaconda kickstart file. (Gabriel Becker
<ggasparb@redhat.com>)
 - Set number of records to cause an explicit flush to audit logs. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - When HostbasedAuthentication is disabled using disable_host_auth,
sshd_disable_rhosts and sshd_disable_user_known_hosts are redundant. (Jan
Pazdziora <jpazdziora@redhat.com>)
 - Convert Bash functions package_install|remove to Jinja macros (Jan Černý
<jcerny@redhat.com>)
 - Removed dead code. (Matěj Týč <matyc@redhat.com>)
 - Bash formal style fixes. (Matěj Týč <matyc@redhat.com>)
 - Match values with spaces in them. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Add test scenarios for sshd_set_keepalive rule (Milan Lysonek
<mlysonek@redhat.com>)
 - Changed True/False to true/false. (Matěj Týč <matyc@redhat.com>)
 - Removed the shared bash remediation function. (Matěj Týč
<matyc@redhat.com>)
 - Force frequent session key renegotiation. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Minor whitespace Bash macros improvements. (Matěj Týč <matyc@redhat.com>)
 - Added support for jinja-expansion of BATS tests. (Matěj Týč
<matyc@redhat.com>)
 - Shared bash remediations are now jinja-processed. (Matěj Týč
<matyc@redhat.com>)
 - Disable client alive messages. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Add option in build_product to build SCAP 1.2 content. (Gabriel Becker
<ggasparb@redhat.com>)
 - Resolve information before writing to audit logs. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Fix typo in api_server_admission_control_plugin_NodeRestriction description.
(Jan Pazdziora <jpazdziora@redhat.com>)
 - Updated the Bash guide wrt introduction of bash jinja macros. (Matěj Týč
<matyc@redhat.com>)
 - Fix typos in auditd_local_events texts. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Use the auditd_lineinfile.csv mechanism for auditd_write_logs. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Added stripping of new line when obtaining IP addr by podman inspect (Matus
Marhefka <mmarhefk@redhat.com>)
 - Pass target SCAP version to update script (Watson Sato <wsato@redhat.com>)
 - Update title+description for rhel7/ccc (Jiri Jaburek <jjaburek@redhat.com>)
 - Clean up comments in rhel7/ccc (Jiri Jaburek <jjaburek@redhat.com>)
 - Remove audisp via rsyslog from rhel7/ccc (Jiri Jaburek <jjaburek@redhat.com>)
 - Simplify the set_config_file macro (Jan Černý <jcerny@redhat.com>)
 - Remove unused include_lineinfile (Jan Černý <jcerny@redhat.com>)
 - Implemented indentation control using the indent filter. (Matěj Týč
<matyc@redhat.com>)
 - Convert functions from include_lineinfile.sh to Jinja macros (Jan Černý
<jcerny@redhat.com>)
 - Unify zipfile command (Watson Sato <wsato@redhat.com>)
 - Fix typo in SCAP 1.3 convertion ouput filename (Watson Sato
<wsato@redhat.com>)
 - Add variable to control target SCAP version (Watson Sato <wsato@redhat.com>)
 - Generate only 1.3 DS (Watson Sato <wsato@redhat.com>)
 - Remove used CCE from pool. (Gabriel Becker <ggasparb@redhat.com>)
 - Change logging prefix for not applicable platform in test suite from "INFO"
to "WARNING". (Milan Lysonek <mlysonek@redhat.com>)
 - Change logging prefix for missing profile in test suite from "ERROR" to
"WARNING". (Milan Lysonek <mlysonek@redhat.com>)
 - Add verbose option (Jan Černý <jcerny@redhat.com>)
 - Extract test data to a separate file (Jan Černý <jcerny@redhat.com>)
 - Introduce tests for macro that generates OVAL (Jan Černý
<jcerny@redhat.com>)
 - Filter out subkey in RHEL8 GPG key query. (Gabriel Becker
<ggasparb@redhat.com>)
 - Updated a Fedora remediation. (Matěj Týč <matyc@redhat.com>)
 - Added Jinja support for bash content. (Matěj Týč <matyc@redhat.com>)
 - Add final steps on how to create new product documentation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Reintroduce crypto policy rules in the OSPP profile for RHEL8 (Matus Marhefka
<mmarhefk@redhat.com>)
 - Delete unused/unwanted dconf_use_text_backend rule. (Gabriel Becker
<ggasparb@redhat.com>)
 - Parameterize Red Hat's GPG release public key. (Gabriel Becker
<ggasparb@redhat.com>)
 - Removed redundant RHEL-06- from RHEL6 STIG IDs. (Matěj Týč
<matyc@redhat.com>)
 - Added duplicated unqualified references. (Matěj Týč <matyc@redhat.com>)
 - Made STIG IDs product-qualified. (Matěj Týč <matyc@redhat.com>)
 - Implemented product-only references. (Matěj Týč <matyc@redhat.com>)
 - Refactored STIG ID handling. (Matěj Týč <matyc@redhat.com>)
 - Removed unused code. (Matěj Týč <matyc@redhat.com>)
 - Adapted the Ansible remediations generation. (Matěj Týč
<matyc@redhat.com>)
 - Preprocess references and identifiers during the build time. (Matěj Týč
<matyc@redhat.com>)
 - fixed typo in file path (Vojtech Polasek <vpolasek@redhat.com>)
 - made solution description more generic (Vojtech Polasek
<vpolasek@redhat.com>)
 - rewrote solution (Vojtech Polasek <vpolasek@redhat.com>)
 - moved the paragraph to better section (Vojtech Polasek <vpolasek@redhat.com>)
 - update tests readme with advice on nested vmx (Vojtech Polasek
<vpolasek@redhat.com>)
 - Add sysclt entries for file system (Watson Sato <wsato@redhat.com>)
 - Generate content to check for partition existence (Watson Sato
<wsato@redhat.com>)
 - Use crypto-policies to configure RHEL8 sshd algos (Watson Sato
<wsato@redhat.com>)
 - Account for /tmp being on tmpfs in rhel8 (Jiri Jaburek <jjaburek@redhat.com>)
 - Add more sections in the how to create new product documentation. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add test scenarios for ensure_redhat_gpgkey_installed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo in ensure_redhat_gpgkey_installed rule description. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add check for auxiliary rpm gpg key on RHEL8. (Gabriel Becker
<ggasparb@redhat.com>)
 - Test suite: Set additional SSH options when testing ansible remediations
(Matus Marhefka <mmarhefk@redhat.com>)
 - wording fixes (Vojtech Polasek <vpolasek@redhat.com>)
 - fix typos (Vojtech Polasek <vpolasek@redhat.com>)
 - Add new package installed rule specific for RHEL8. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove "example of usage" from sshd template. (Milan Lysonek
<mlysonek@redhat.com>)
 - Rephrase find_test message and fix minor issues in README. (Milan Lysonek
<mlysonek@redhat.com>)
 - quoting variables in remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - changed wording and styling in the rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - Fix wording in README for finding test scenarios. (Milan Lysonek
<mlysonek@redhat.com>)
 - Enable rsyslog in packages_installed.csv for RHEL8. (Gabriel Becker
<ggasparb@redhat.com>)
 - Update open_tests function at documentation to find_tests. (Milan Lysonek
<mlysonek@redhat.com>)
 - tests created (Vojtech Polasek <vpolasek@redhat.com>)
 - added ocil to rule.yaml (Vojtech Polasek <vpolasek@redhat.com>)
 - replaced duplicate reference (Vojtech Polasek <vpolasek@redhat.com>)
 - added missing space in rule.yaml (Vojtech Polasek <vpolasek@redhat.com>)
 - removed badly named file (Vojtech Polasek <vpolasek@redhat.com>)
 - completed the rule.yaml file (Vojtech Polasek <vpolasek@redhat.com>)
 - added actual environment variable (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed variable name (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed writing into file (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed a typo (Vojtech Polasek <vpolasek@redhat.com>)
 - initial commit for bash remediation (Vojtech Polasek <vpolasek@redhat.com>)
 - check done (Vojtech Polasek <vpolasek@redhat.com>)
 - initial commit of harden_sshd_crypto_policy rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - added the severity key to rule.yml (Vojtech Polasek <vpolasek@redhat.com>)
 - fixed typo in rule file name (Vojtech Polasek <vpolasek@redhat.com>)
 - initial commit of harden_sshd_crypto_policy rule (Vojtech Polasek
<vpolasek@redhat.com>)
 - Change path description of `data` folder and make rule finding as globbing
pattern. (Milan Lysonek <mlysonek@redhat.com>)
 - Manual page create_module(2) says that this system call is present only in
kernels before Linux 2.6. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Use sshd_lineinfile template for sshd rules. (Milan Lysonek
<mlysonek@redhat.com>)
 - Fixed the case-sensitive test case. (Matěj Týč <matyc@redhat.com>)
 - Fixed the CMake setup. (Matěj Týč <matyc@redhat.com>)
 - Add testing of set_config_file function with BATS. (Milan Lysonek
<mlysonek@redhat.com>)
 - Remove trailing spaces and update doc to lineinfile csv. (Gabriel Becker
<ggasparb@redhat.com>)
 - Quick fix for combined mode _modify_parameters() (Watson Sato
<wsato@redhat.com>)
 - Fix PEP8 issues. (Gabriel Becker <ggasparb@redhat.com>)
 - Exit build when csv template file is malformed. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add LineinfileGenerator super class for lineinfile template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix python compatibility issue. (Gabriel Becker <ggasparb@redhat.com>)
 - Fix case sensitivity regex in auditd ansible remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add OVAL,Bash,Ansible template for Auditd configuration files. (Gabriel
Becker <ggasparb@redhat.com>)
 - Add OVAL,Bash,Ansible template for SSHD configuration files. (Gabriel Becker
<ggasparb@redhat.com>)
 - Collect all objects that match the pattern (Watson Sato <wsato@redhat.com>)
 - Be conservative about missing [Coredump] section. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Improve wording of test scenario directories (Jan Černý
<jcerny@redhat.com>)
 - Document where test scenarios are located (Jan Černý <jcerny@redhat.com>)
 - Disable acquiring, saving, and processing core dumps. (Jan Pazdziora
<jpazdziora@redhat.com>)
 - Disable storing core dumps. (Jan Pazdziora <jpazdziora@redhat.com>)
 - Polished wording and handling of directories. (Matěj Týč
<matyc@redhat.com>)
 - Test suite: set bash and ansible remediation to verbose mode. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fixed an omission. (Matěj Týč <matyc@redhat.com>)
 - Test suite auto-detect datastream. (Matěj Týč <matyc@redhat.com>)
 - List remediation build artifacts (Watson Sato <wsato@redhat.com>)
 - Add four more items to the How to create new product documentation. (Gabriel
Becker <ggasparb@redhat.com>)
 - Document --url and --extra-repo of install_vm.py script (Matus Marhefka
<mmarhefk@redhat.com>)
 - Add headers and ls output to artifacts documented (Watson Sato
<wsato@redhat.com>)
 - Fix link to building CaC section (Watson Sato <wsato@redhat.com>)
 - Use shell instead of command in ansible services disabled template. (Gabriel
Becker <ggasparb@redhat.com>)
 - Remove unnecessary failed condition from ansible services disabled. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix ansible remediation for services disabled template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix a typo (Jan Černý <jcerny@redhat.com>)
 - Add new rule auditd_write_logs (Jan Černý <jcerny@redhat.com>)
 - Add documentation headers to all timers_enabled.csv files (Jan Černý
<jcerny@redhat.com>)
 - Remove a space (Jan Černý <jcerny@redhat.com>)
 - Add test for multiple assignments of local_events (Watson Sato
<wsato@redhat.com>)
 - Use start instead of enable in upstart service enabled. (Gabriel Becker
<ggasparb@redhat.com>)
 - Raise exception when fail to parse services enabled input. (Gabriel Becker
<ggasparb@redhat.com>)
 - Remove unused supported_platforms parameter in OVAL macros. (Gabriel Becker
<ggasparb@redhat.com>)
 - Set Bash to service to enable instead of disable. (Gabriel Becker
<ggasparb@redhat.com>)
 - Check FragmentPath instead of UnitFileState in OVAL service disabled.
(Gabriel Becker <ggasparb@redhat.com>)
 - Fix ansible remediation when socket does not exist. (Gabriel Becker
<ggasparb@redhat.com>)
 - Ensure /etc/audit/auditd.conf exists (Jan Černý <jcerny@redhat.com>)
 - Remove CCE from the OSPP profile (Jan Černý <jcerny@redhat.com>)
 - Raise CSVLineError when CSV is malformed (Jan Černý <jcerny@redhat.com>)
 - Remove CCEs from profile (Jan Černý <jcerny@redhat.com>)
 - Refactor disabling/masking service ansible remediation. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add stop service to test scenarios avahi and debug-shell. (Gabriel Becker
<ggasparb@redhat.com>)
 - Improved masking support. (Matěj Týč <matyc@redhat.com>)
 - Support case insensivity in auditd.conf OVAL checks (Jan Černý
<jcerny@redhat.com>)
 - Change sshd_disable_empty_passwords OVAL to lineinfile macro. (Milan Lysonek
<mlysonek@redhat.com>)
 - Change sshd disable_root_login, disable_user_known_hosts and
enable_x11_forwarding OVALs to lineinfile macro. (Milan Lysonek
<mlysonek@redhat.com>)
 - Add OVAL 5.10 version for systemd timer template (Jan Černý
<jcerny@redhat.com>)
 - Fix wrong newline and quoting (Jan Černý <jcerny@redhat.com>)
 - Add test scenarios for rule rule_timer_dnf-automatic_enabled (Jan Černý
<jcerny@redhat.com>)
 - New rule "Enable dnf-automatic Timer" (Jan Černý <jcerny@redhat.com>)
 - Create a template for enabling SystemD timers (Jan Černý
<jcerny@redhat.com>)
 - Apply dnf-automatic only on Fedora, RHEL8 and related (Jan Černý
<jcerny@redhat.com>)
 - Fix ansible remediation when disabling/masking services. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix bash remediation for service disabled template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Change dont_mask_service to mask_service with true as default. (Gabriel
Becker <ggasparb@redhat.com>)
 - Pass when parameter is missing (Jan Černý <jcerny@redhat.com>)
 - Fix long line PEP issue. (Gabriel Becker <ggasparb@redhat.com>)
 - Update service disabled test scenario (avahi-daemon). (Gabriel Becker
<ggasparb@redhat.com>)
 - Update inline doc text for services disabled csv template file. (Gabriel
Becker <ggasparb@redhat.com>)
 - Make masking service default behavior when disabling service. (Gabriel Becker
<ggasparb@redhat.com>)
 - New rule auditd_local_events (Jan Černý <jcerny@redhat.com>)
 - Add mask_service parameter to services disabled template. (Gabriel Becker
<ggasparb@redhat.com>)
 - Add missing wrlinux8 to prodtype at rule.yml. (Milan Lysonek
<mlysonek@redhat.com>)
 - Tests for sshd_disable_gssapi_auth rule passes with default value. (Milan
Lysonek <mlysonek@redhat.com>)
 - Replace some OVALs for sshd rules with oval_sshd_config jinja macro. (Milan
Lysonek <mlysonek@redhat.com>)
 - Add section to add new product into build_product script. (Gabriel Becker
<ggasparb@redhat.com>)
 - Fix typo. (Gabriel Becker <ggasparb@redhat.com>)
 - Make the new product code additions bold. (Gabriel Becker
<ggasparb@redhat.com>)
 - Initial documentation on how to add a new product to the project. (Gabriel
Becker <ggasparb@redhat.com>)
 - Fix reference and typos in new product doc. (Gabriel Becker
<ggasparb@redhat.com>)
 - Correct git repo, see #VSTOR-115549 (#VSTOR-115549)

Listing created by Repoview-0.6.6.1-1.vl7