{"push_id":1709576369,"size":44,"distinct_size":44,"ref":"refs/heads/master","head":"70183ef05365dec29cb6623690e273a8ac0d85b5","before":"214d82e5f94757a69ca51f8927959f1f4ed26f9c","commits":[{"sha":"0f1745bb5e1e7724d2b6916303418bc5809ba8b3","author":{"name":"Watson Sato","email":"bdd8379eafd688f6169b02f446a349130870b905@redhat.com"},"message":"Improve reliability of smartcard_auth remediation\n\nAvoid adding\n'auth [success=done authinfo_unavail=ignore ignore=ignore default=die]\npam_pkcs11.so nodebug'\nafter every occurence of\n'auth [success=1 default=ignore] pam_succeed_if.so service notin\nlogin:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensaver quiet use_uid'\n\nThere can be situations in witch the PAM stack is already configured\nwith a pam_succeed_if.so module exactly like that.\n\nAddresses comment 9 of https://bugzilla.redhat.com/show_bug.cgi?id=1357019","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/0f1745bb5e1e7724d2b6916303418bc5809ba8b3"},{"sha":"bb58de381226b7435ba4c97cd2f89fcf1e7679a0","author":{"name":"hex2a","email":"7d8555e68a28b18b62aa7bbb8775be574b618c61@users.noreply.github.com"},"message":"update sshd xccdf/oval rules\n\nrename XCCDF/OVAL enable_x11_forwarding to sshd_enable_x11_forwarding\nmove sshd_enable_x11_forwarding OVAL to shared\nadded XCCDF/OVAL sshd_set_max_auth_tries / sshd_set_loglevel_info\nchange Cipher pattern in sshd_use_approved_ciphers OVAL to reflect description (only\nCTR mode)\nadded XCCDF/OVAL sshd_use_strong_ciphers / sshd_use_strong_macs (similar to\nsshd_use_approved_*, but without FIPS certification)","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/bb58de381226b7435ba4c97cd2f89fcf1e7679a0"},{"sha":"0fe72d4a259c3d0a623dc7403b9d231b3ff7ee60","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"adding initial SELinux booleans to OSPP","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/0fe72d4a259c3d0a623dc7403b9d231b3ff7ee60"},{"sha":"b645244de07b4661873fccfc9d3bb7efbd6f6fe9","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"removing duplicate sebool_fips","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/b645244de07b4661873fccfc9d3bb7efbd6f6fe9"},{"sha":"44b80aa0f0c64828e0b4858a62f6bd5be99aebbd","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"update SSH checks with full list of FIPS Ciphers and MACs","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/44b80aa0f0c64828e0b4858a62f6bd5be99aebbd"},{"sha":"627c5438e386a43d0a079085b9bbed4a6d75a553","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"updated xccdf for MACs","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/627c5438e386a43d0a079085b9bbed4a6d75a553"},{"sha":"fbaf8313acedcba7b7d2800e3dd81196b269e098","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"nosuid on /home","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/fbaf8313acedcba7b7d2800e3dd81196b269e098"},{"sha":"6b53248ab77ec5688dcd5abbd28524e009f4631a","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"add to stig profile","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/6b53248ab77ec5688dcd5abbd28524e009f4631a"},{"sha":"1b273ce35b3175d419ab165ca245c51f85c1f73f","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"add stigid to mount_option_home_nosuid","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/1b273ce35b3175d419ab165ca245c51f85c1f73f"},{"sha":"a273e7f64dd5b6a372e5b3b7c53c2391f7508c02","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"update platform tags to rhel and fedora","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/a273e7f64dd5b6a372e5b3b7c53c2391f7508c02"},{"sha":"e731cc0938262671693b8c2618a5052e664f2b22","author":{"name":"hex2a","email":"7d8555e68a28b18b62aa7bbb8775be574b618c61@users.noreply.github.com"},"message":"change title/description for sshd_use_strong_ciphers / sshd_use_strong_macs","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/e731cc0938262671693b8c2618a5052e664f2b22"},{"sha":"31c915cfeaf308a8e96f88ccdfcd7f110a80e3c2","author":{"name":"Gabe","email":"b29fbd051b01302d37a91d98ead4194dcf79a8ba@gmail.com"},"message":"Use variables in SELinux boolean OVAL content and enable in XCCDF","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/31c915cfeaf308a8e96f88ccdfcd7f110a80e3c2"},{"sha":"8b77cad0606ccb3679711f67dae17e8ab3341066","author":{"name":"Martin Preisler","email":"ea98e1d0a9a4d10e3af04e16be88050749615623@preisler.me"},"message":"Merge pull request #1971 from redhatrises/selinux_checks_variable\n\nUse variables in SELinux boolean OVAL content and enable in XCCDF","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/8b77cad0606ccb3679711f67dae17e8ab3341066"},{"sha":"a839ea5edaa2e0b5b42d956979bb94174b53557a","author":{"name":"Martin Preisler","email":"37841e29a4a631ce8bc34221c86809154ee91d50@redhat.com"},"message":"Use @CCENUM@ instead of $CCENUM for the token replacement\n\nThis avoids confusing ShellCheck and also prevents possible bugs with\nvariable substitution - sometimes devs forget that '$VAR' is different\nfrom \"$VAR\".","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/a839ea5edaa2e0b5b42d956979bb94174b53557a"},{"sha":"8ee3f8123f5d7b72e149887a43b43a0f88ac59ff","author":{"name":"Watson Sato","email":"bdd8379eafd688f6169b02f446a349130870b905@redhat.com"},"message":"Update contributors list","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/8ee3f8123f5d7b72e149887a43b43a0f88ac59ff"},{"sha":"cba0030ae631687213371ce70421b7366c6f12b3","author":{"name":"Marek Haičman","email":"d3835b93c7783cf06aaa79c1ffd1d7edb945a1c7@users.noreply.github.com"},"message":"Merge pull request #1967 from yuumasato/rhel7-smartcard_auth-rem_fix\n\nImprove reliability of smartcard_auth remediation","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/cba0030ae631687213371ce70421b7366c6f12b3"},{"sha":"fd3194410f8d29eaeb2f510a76091d12ba8d1a71","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"Merge pull request #1973 from yuumasato/update-contributors\n\nUpdate contributors list","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/fd3194410f8d29eaeb2f510a76091d12ba8d1a71"},{"sha":"928a92dd91f0b13ad39f18e61f74a8d9785b947a","author":{"name":"Watson Yuuma Sato","email":"bdd8379eafd688f6169b02f446a349130870b905@redhat.com"},"message":"Merge pull request #1972 from mpreisler/avoid_bash_substitution_with_ccenum\n\nUse @CCENUM@ instead of $CCENUM for the token replacement","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/928a92dd91f0b13ad39f18e61f74a8d9785b947a"},{"sha":"9506264c0959ccfd3d15248b3bdd422de6708d2f","author":{"name":"Gabe","email":"b29fbd051b01302d37a91d98ead4194dcf79a8ba@gmail.com"},"message":"Evaluate if var_ntp_set_maxpoll is less than or equal\n\n- Fixes #1948","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/9506264c0959ccfd3d15248b3bdd422de6708d2f"},{"sha":"150f4223170fa9d9134809959219d6184508bf9e","author":{"name":"Shawn Wells","email":"1ba305e3abcdbdd4a853e81615dfcbc6c9692d58@redhat.com"},"message":"Updated sshd_use_strong_ciphers to use multi_platform_all","distinct":true,"url":"https://api.github.com/repos/hex2a/scap-security-guide/commits/150f4223170fa9d9134809959219d6184508bf9e"}]}
{"actor":{"display_login":"hex2a"}}