|
1 | 1 | # Changelog
|
2 | 2 |
|
| 3 | +## [0.27.1](https://github.com/plus3it/watchmaker/releases/tag/0.27.1) |
| 4 | + |
| 5 | +**Released**: 2023.05.08 |
| 6 | + |
| 7 | +**Summary**: |
| 8 | + |
| 9 | +* Fixes typo in upload of Windows standalone binary to GitHub Releases |
| 10 | +* Documents known/spurious EL8 findings that scanning utilities may flag |
| 11 | + erroneously |
| 12 | +* Fixes the check that skips reinstalling salt when the correct version is |
| 13 | + already installed |
| 14 | +* Publishes EL8 scap scans as a release artifact to `watchmaker.cloudarmor.io`, |
| 15 | + alongside the standalone binaries |
| 16 | +* Updates scap pillar in default salt content to run scans properly on CentOS |
| 17 | + Stream and scap version 1.3 |
| 18 | +* ash-linux-formula |
| 19 | + - Fixes oscap remediation on CentOS Stream 8 and Oracle Linux 8 |
| 20 | + - Addresses numerous additional STIG findings on EL8 systems that were not |
| 21 | + addressed with oscap remediation |
| 22 | + - Attempts to address EL8 issue with aws-cli, where fapolicyd blocks execution |
| 23 | +* forescout-secure-connector-formula |
| 24 | + - Establishes symlink so logs are written to `/var/log` partition |
| 25 | +* scap-formula |
| 26 | + - Updates openscap content to v0.1.67, using scap 1.3 datastreams |
| 27 | + |
3 | 28 | ## [0.27.0](https://github.com/plus3it/watchmaker/releases/tag/0.27.0)
|
4 | 29 |
|
5 | 30 | **Released**: 2023.03.31
|
|
9 | 34 | * Releases support for EL8 platforms, to include Red Hat 8, CentOS 8 Stream, and
|
10 | 35 | Oracle Linux 8. Future work may also add support for Rocky Linux 8 and Alma
|
11 | 36 | Linux 8
|
12 |
| - - CAVEAT: With this release, the Watchmaker standalone binary for EL8 |
13 |
| - **does not** work when the system is FIPS-enabled. The problem is not yet |
14 |
| - entirely understood. Further investigation is needed before this issue |
15 |
| - can be resolved |
| 37 | + - CAVEAT: With this release, on FIPS-enabled EL8 systems, please use the |
| 38 | + [PyPi install or the source install methods](https://watchmaker.cloudarmor.io/en/stable/installation.html). |
| 39 | + Currently, the standalone method for EL8 **does not** work when the system |
| 40 | + is FIPS-enabled. The problem is not yet entirely understood. Further investigation |
| 41 | + is needed before this issue can be resolved |
16 | 42 | * Updates salt worker to avoid re-installing salt when `salt-call --version`
|
17 | 43 | matches the `salt_version` in the Watchmaker config
|
18 | 44 | * Updates EL7 findings documentation to line up with latest stig version
|
|
0 commit comments