openscap-engine-sce-1.2.16-lp150.5.1 >  A Z$/=„holkXV 6ӽ{U%lMo/̍d Lҙ˳  [m:Pl:im;GKWzSKl5TEDdΎ3ΗAo6Oa؎qfuux!<#ޓӰX2'"٬Wyz&fبeέ쭑B>p>?d ' K !(   x    0  ,   L |  ( 8 $B9 ,B:BF-G@HI X<YD\h]^ubc`defluvLwxXyz,<@FCopenscap-engine-sce1.2.16lp150.5.1Script Checking Engine for OpenSCAPThis package contains the Script Checking Engine (SCE) support for OpenSCAP.Z$build781openSUSE Leap 15.0openSUSELGPL-2.1-or-laterhttps://bugs.opensuse.orgSystem/Librarieshttp://www.open-scap.org/linuxx86_64V$.@_W)X|%eI dB/AAA큤Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$Z$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-1.2.16-lp150.5.1.src.rpmopenscap-engine-sceopenscap-engine-sce(x86-64)@    /bin/bashrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@TS@SS5d@S,)S)S&R@R&RRv@R0@RRRW@Q@Q@Q@Q~`QyQIQ-@P @P@P)Pe@P>@P!@P@P@P@P@Ou@Om@OgON@OLM@L1@K3@meissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comLed meissner@suse.commeissner@suse.comcrrodriguez@opensuse.orgmeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commc@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comdmacvicar@suse.demeissner@suse.comdmacvicar@suse.deaj@suse.demeissner@suse.demc@suse.comcfarrell@suse.commeissner@suse.demc@suse.demeissner@suse.debitshuffler #suse@irc.freenode.orgmeissner@suse.de- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch- openscap-1.1.0 update - HTML report and guide redesign - dropped support for docbook - Introduced new probes (that are to be part of OVAL 5.11) - probe_systemdunitproperty - probe_systemdunitdependency - introduced raw bindings for python3 - dozens of small bug fixes- openscap-1.0.9 update - xccdf_session_export_arf must not return 0 if the export failed - expose xccdf_policy_get_value_of_item as public API - skip "Signature" when parsing sds_index without spewing out an error - return non-zero when cannot resolve XCCDF - consider the last set-value as the effective set-value and export only one - test suite fixes - do not destroy SVG data in XCCDFs when generating guide or report- Remove unused build require on libnl-1_1 according to the changelog, it stopped beign used in 2010 - libattr is also unused.- openscap-1.0.8 update: - fixes related to Asset Reporting Format - Inject arf:report/@id into nested rule-result/check/check-content-ref/@href - Add hostname for each fqdn when generating ARF asset identification data - Add all MAC addresses from target-facts to ARF as asset identification data- openscap-1.0.7 update: - fix namespaces for attributes in ARF relationship element - Avoid ".00" as the score in HTML report when score is 0.- openscap-1.0.6 update: - fix process58 loginuid integer handling on 32bit- openscap-1.0.5 update: - XCCDF titles and description support xccdf:sub resolution - HTML Report lists only applicable cpe platforms - TestResult element contains applicable cpe platforms - Introduced XCCDF 1.2 schematron validation - XCCDF bug fixes - tailoring profiles shall regards inherited refine-values (trac#373) - rule-result now always includes at least one check - Other bug fixes: - Dpkginfo probe collects epoch in evr - Updated examplary openscap-content based on the latest facts from Red Hat Enterprise Linux 6 - Minor changes- openscap-1.0.4 update: - Introduced xccdf_tailoring_remove_profile to API - OVAL bug fixes- openscap-1.0.3 update: - bug fixes - a few coverity issues - a few memory leak plugs - broken comparison of huge integet in OVAL - fix-return.patch: removed, has upstream fix- openscap-1.0.2 update: - XCCDF generate fix now supports tailoring file - XCCDF bug fixes - Generate guide points to RHSA pages (rhbz#1018291) - Generate report ommits remediation when assesment passed (rhbz#1029879) - $PATH variable is available for SCE checks (rhbz#1026833) - Tailoring of top-level Group elements via API fixed - Fix-filtering should not drop fixes (affected SSG) - Generated fix file is created with sane permissions (trac#362) - Inherit parent's namespace when exporting oscap_text with HTML trait - OVAL bug fixes: - Handful of xinetd probe fixes - Handful of process and process58 fixes - Obsoleted textfilecontent now supports text ent comparisons - rpm*_item/epoch is reported as '(none)' when needed - Fixed dozen of flaws in ipv4 and ipv6_address comparison (CIDR handling) - Made integer and floating type number parsing much stricter - Fixed floating point numbers comparisons (trac#366) - Fixed case-insensitive comparisons - Item filtering fixes in probes - Consolidated some of comparisons in results model and probes (trac#367) - Other bug fixes: - Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248) - Fixed static build (--disable-shared) - Format assertions (-Werror=format-security) turned on by default - SCE scripts are notified when parent (oscap) is killed - oscap info now recognizes all the document types (adeded: tailoring & CVE) - Documentation improvements - Handful of other minor fixes - fix-return.patch: Fixed a void return- move the gconf probe to openscap-extra-probes to reduce dependencies of the core probe set.- openscap-1.0.1 update: - versioned interface is used to handle internal SCE plug-in - build-in gnulib package was updated to current version - bug fixes: - selinux_domain_label and posix_capability properties were reintroduced to OVAL system characteristics model - selinux_domain_label now collects the domain/type (not the context) - oscap oval collect reports progress on stdout (not on the stderr) - typo in the manual page (rhbz#1032537), and another small clarification- openscap-1.0.0 / 19-11-2013 - Improved heuristic to distinguish 'local' and 'remote' file systems - Improved comparison of EntityStateEVRStringType (trac#355) - Link against librpm (if available) to include rpmvercmp (on other platforms we fall back to the build-in rpmvercmp) - Bug fixes - openscap-0.9.13 / 08-11-2013 - Moved SCE to separate shared library (libopenscap_sce.so) - Introduction of scap-as-rpm tool - Improvements of sql and sql57 probes - Improvements of SELinux policy - Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf) - Minor improvements in state_entity processing - Introduction of CPE name for Fedora 21 to the internal dictionary - Added support for ind-def:pid/@xsi:nil (rhbz#1013011) - Improved error reporting - Bug fixes - Changed CPE name regex to be more permissive - avoided reports from the library to the stdout and stderr - plugged several memory leaks - improved xccdf:check-content-refs processing - misspelling in syslog message (rhbz#1021695) - fixed OVAL's element processing - fixes based on static analysers - test suite is locale independent - new library major version 8- Updated to 0.9.12 - tailoring improvements (@id, version, and benchmark ref attributes) - XCCDF 1.1 tailoring extension - improved robustness of CPE dictionary parser and exporter - and added misc CPE 2.3 elements - added Fedora 20 to internal CPE dictionary - updated OVAL's results_to_html stylesheet from Mitre Corporation. - profiles with duplicate selects (same @idref) now export correctly - test improvements - bug fixes - fixed IPv6 export in TestResult/target-address - consistently inject target-id-ref into TestResult in ARFs - improved rpmdb manipulation (rhbz#999903) - solaris build fixes - spelling of name of default language fixed (oscap_text related) - fixed CPE names matching (generalization vs. specialization)- Updated to 0.9.11 - bugfixes - Updated to 0.9.10 - bugfixes - Updated to 0.9.9 - --oval-results also exports CPE OVAL results - added --benchmark-id to select a component-ref by ID of Benchmark it's pointing to - OVAL variable_instance processing (or so called value multiset) and the processing of @variable_instance attribute to OVAL Result Definition, OVAL Result Test and Collected Objects. - improved test coverage of OVAL variable processing - introduced new internal data type: oval_smc - added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm database offline mode - bug fixes and dead code removal- updated to 0.9.8 - added experimental support for offline mode scanning to the OVAL check engine (i.e. scanning of virtual host disk images) - improved OVAL variables processing - bug fixes and dead code removal- fix build on SLE11 - possible 64Bit issue - fix-missing-include.dif- updated to 0.9.7 - bugfixes- updated to 0.9.6 - new command-line module added as preview: "oscap ds sds-add" - improved xccdf:fix processing (support of DataStreams and CPE) - internal selinux policy preview - added Fedora 19 to default CPE dictionary - bug fixes- updated to 0.9.5 - oscap xccdf remediate (new oscap module which introduces offline remediation; the remediation based on existing xccdf:testresult file) - added support for sce into datastream (sce scripts can now be embedded into the datastream file similarly as oval can) - improved bash completion and documentation - bug fixes - bumped SOVERSION from 2 to 3.- updated to 0.9.4 - high Level API - improved Text Substitution Processing - technical Preview of Online Remediation Execution (the oscap xccdf eval --remediate) - improved Library Internal Error Reporting. - the oscap xccd export-oval-variables now support DataStreams. - improved documentation - improved schema files. - tailoring file support - profile shadowing support - bug Fixes - DOWNGRADED SOVERSION from 3 to 2.- updated to 0.9.3 - Embedded CPE dictionary (allows users to ommit --cpe argument) - improvements of DataStream and CPE processing on RHEL5 - changed API of various functions in cpe_dict, benchmark and xccdf_policy to use string timestamp instead of time_t [1] - fixed several issues found by Coverity and cppcheck static code analysis - bug fixes - bumped SOVERSION from 2 to 3.- updated to 0.9.2: - rewritten the heuristic for pattern matching on path and filepath - CPE 2.3 language applicability testing - new ds_sds_index API providing a datastream overview - CPEs in source datastreams are automatically registered and used for XCCDF evaluation - --cpe option autodetects CPE dictionary and language - CVE support (validate feed, print CVEs) - introduced info module - made "$oscap xccdf generate custom" work again -> man page update - bug fixes- updated to 0.9.1: - the http in the check-content-ref/@hrefhref support - the cpedict support - obsoleted the oscap_reporter - send start and finish messages to the syslog - the XCCDF multi-check evaluation support - "oscap oval validate-xml" autodetect a document type - bug fixes- updated to 0.9.0: * few public headers were renamed to follow common schema * cve and cce modules are not build by default -> these modules are not utilized by oscap tool and thus untested. * --enable-bindings configure option was split into --enable-python and support of SCAP datastream support was improved * plus fixes in OVAL and XCCDF modules. oscap tool reports support of XCCDF 1.2 and OVAL 5.10.1 - libopenscap.so major version changed from 1 to 2.- updated to 0.8.5: - added rpmverifypackage probe - added initial support for source and result datastreams - added xccdf 1.2 dc-status support - several probes were updated to conform to OVAL 5.10.1 - bug fixes This release is able to evaluate the DISA STIG content.- updated to 0.8.4 - added OVAL schemas 5.9, 5.10.1 - alloc.h is no more public api - bug fixes- Fix schema_version of scap-rhel6-oval.xml (to 5.8)- Updated to 0.8.3 - added XCCDF 1.2 schemas - changed XCCDF report format - updated schemas for OVAL 5.10 - added additional OVAL schemas - 5.3, 5.4, 5.5, 5.6, 5.7 - multi version support for XCCDF and OVAL - a schema version of an imported and exported content is same - added rpmverifyfile probe - results are validated only if an OSCAP_FULL_VALIDATION variable is set - bug fixes- add OVAL/XCCDF content based on yast2-security checks and set them as the default content (using symlinks)- Fix build with missing gets declaration (glibc 2.16)- Updated to 0.8.2 - XCCDF check-import support - XSLT transformation for XCCDF 1.1 to 1.2 migration - SCE reports now optionally use the new check-import functionality and don't need separate SCE result files - bug fixes- require libnl-devel on older SUSE version- license update: LGPL-2.1+ There is no GPL-3.0+ in this package. Also, the Fedora spec file states LGPL-2.1+. This appears to be the correct license- some cleanups to make it factory acceptable- Update to 0.8.1 - introduce Script Check Engine - Added an OVAL Directives schema to allow for a tool to supply a set of directives to more easily specify desired results content. - Enhanced OVAL Results directives to allow for more flexibility in allowed results content - added new OVAL objects(all OVAL 5.8 objects are covered now) - update dpkgprobe - all issues reported by coverity are fixed - add capability to export OVAL Variables from XCCDF - added cvss score calculator from vector- Updated to 0.7.2 - OVAL 5.7 is supported - content for Red Hat Enterprise Linux 6.1 - draft - oscap tool enable user to skip content validation before evaluation - bugfixes- Update to 0.5.12 - Proper subpackages added- initial 0.5.5 import - open SCAP protocol implementationbuild78 1525097669 1.2.16-lp150.5.11.2.16-lp150.5.1openscapsectool-sce00_integrity.sh01_bootloader.sh01_disk_usage.sh01_group.sh01_passwd.sh01_shadow.sh02_home_files.sh02_root_dirs.sh03_path.sh04_firewall.sh05_netserv.sh05_openssh.sh05_openvpn.sh05_removed_libs.sh05_xinetd.sh07_log_files.sh08_pam.sh08_permissions.sh09_exec_shield.sh09_selinux.sh09_va_randomization.sh11_aliases.sh12_cron.sh14_nfs.sh15_tcp_wrappers.shsectool-xccdf.xml/usr/share//usr/share/openscap//usr/share/openscap/sectool-sce/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/a1858a426d957a82c2fe4c2c7b44353b-openscapcpioxz5x86_64-suse-linuxdirectoryBourne-Again shell script, ASCII text executableBourne-Again shell script, ASCII text executable, with very long linesHTML document, ASCII text RRRRRRRRRRRRRRRRRRRRRRRRRw˸{/wڊN@utf-8824480a22ab6c4ab03950b6abd5a8f5e30af68c357e3f3375e7a8175811ec2c6? 7zXZ !t/Bj] crt:bLL ~ǤΎ)Ru窳=Znx!a|t-.ZzASʸ83zUV@xZs3ܶ 8hK@qq8͑$NJ/tL{1M5 @`TS(P X>ӽ&}NF}옿OZn^o,&]`bdK8u{'b ƺî>Zj9zӄD(LMĪ`HP!v'$`yv \ڨQC?L4 ԦQg(/~4'w}&̐޸Ac>qWXjdB%J ڵۥ"-{~ݢ0~FஜO ҆ǖ)Wjl.\?pyt-QN$WO >J57*UpʐB; x COZt&AJ l[nNkf25 Pbe>MT0*6KS ݴ$=j_((M]Òi*nˆABS~La`hzw β n;v&;0!WףUF]:UpDm" pgN 2Lus)T{+ˇi;NG%jmP"xWw CXªHa'B;)y;rT=5y8Wg\3Q'yx#5 ՃHk6[ठ/b^0?YoObyɔ)EB#ˍ73$i61XP< 18m a0{HrjT0n`q\&6k@xjx3A~aQ(;-|H'wω`~x8Vs@bpN+z} %-{B͘vjbYcc~Pw jW2 ˚[bBPV""%a6Î7@4@=)5Ղ]*QWc֕½T-~ vb+ /#o816o(NPE)>7 lܶ1q01/_tzяKE ao@F-O$-?l\G&ԫLLW3HO/zW_t> +<sѩOe1Y47o(!(E2;4!ʆ0_2<^DЕ4҈Tv}|~B tSm*j$y\X0B$r5 /p>5tulb$8EXLsc.Y{tQ_#>AÇDɥUDM'9 ARC@ZQY*IMN޺~`/Xz4h!!E'>"dK$cs@282Qŷf9VLn6[=>U1콯qB\z$dqj3M<B[5qb ;KC29]Ƞ!8|p6W6eR |Ǘwiel<ɉJmfpW2Jn8+voUѦ-=rOް":o_r&?0)dLL ! c-!IԖj="~HIthmNuePO{eڜY|QCh==\ XYz^,\o|G#QBgĩU0ӫTPsM)3<N9PR?cK=hYEtQ5~9Wwο}V=d.CvʻB=QQC9,ܑc e f~-$i{,wbO ޿Ml-D;KF 5̨3i .uJKᱢIuPmx}J*aL8^=0\_a]\Vߤ _0craAT1ӝ{y5981~bXyS,`ՁX0Yݮs7HlB{?Ky_vT+[}:yֶc)΃ZԅgTW+7 к EKEӕt<%Q;Sv vi i;nl!1a` ec7A_h NdT7~ wޫddUO*0IP&5C Q&0t|͖Yt~B,c1rYFH IF\c;*RiҾ.~ ҈ mrb]콶2c!h5s DK=nw$QsX1K[7& _sͮ/V.?, +]01V$\^0v')>1|#AsN䣦*rl67Jb$3K/N?ƅ Ȣe ՠI~"kEXDZJwQvr _,hchNv\ێX=|.F,2%_nK{* bEO{<:7'4}=79<>L"eqJxWb6$K=~YdݙO wJDUmG򩙍xhu=ZSx ZAֺ E\=8$:TwHp68@Y2 +ݢHO6a{ 5P=HgsO@sV ښȥU d,L%]bh~퍸25lak&jNh*0(^8jvnz>2-V~9pe+NGimu2/`i3ȧK(Hb2m#G*Dz$hOV(yy;pڭV{tAз/g2nˮFӜQMD,9abڕ í5=(@R.}W$y <uug~wc*s)ƧFUt/5D=oLk((A!cgu>yk0a-q`"#w~C>]2aT"'<S?Jrpgw>8E>0JfJ*e}eIJ%2dQIJf 57m8$nt h/Fk2qBy\YGS+?٫2HgR<ӄF*|֚2jY^i7SaD1Du^6u{6H0s\Nя̸3o!n$h{^}oR>{X[{RgAs@J7E3]>?@e3{͓'f3U ngaDah*nGC Ɓ>EwpŖӣLsIERܜeN/G)0t\IYVg $ ISp~p+?tů!hl~GY*e T`.)bQ͝OH"(x޼DӈlWVv(tp0ĕ)ڥXJ)WA%jv*ݩq6D hӹtBvYsUY>F&)p 7v6q z;*}Zؒy,;ۻbF,mV(E2ʙЊ`8=NwХ:NM?BkZ%_ΞKhx e.5i}@8vF҇b(,xE qh1v2D~O_-rzͶzW0geNOFj( =3dY,k2K'Qj%zV IKr#lPi{co@o:F џL4Txhc,"S&gQh ~1S#t/LQs6quLr}w2ڰP2ܢ^rDdO/2%N7#"^y6NJx_ s`*= -gq =dhwwf΢Q} }|f䋒cF?M'$i-Xǰ `lRF[}4rhǠXïIe@(Ilα0;nXݸ<©ͳi0[,΍0hmM2Izao*=uNt}8ZglX-c&xJy72m;~}4-yA& K!;c%pN;P(^]AbHP?{(1dQ`676}X*DdνNKዯm_mZ1]#S=87N*Bl O줣 {Lי284$neLaf#˩tc,E&^*L{RoJ9ُVL.1=xah\n%{郏z~5ėK}xCRU@%^IPUĖA`_@tfkWO^#MMjr?D&(Y{ǁ/4c1SAT.G|oOe1_l 'InB5+s"29ۏ.usH.!$No9r_" ӳ q)*[՘PPz*0`}v.~# E5j6n :rXF%Omf)xk<1:k\bDȿSu`%ǩ8"n=Qf"9z)^ٓ'.z~64/@J4: cSQ.q'ܻEqĴ3X͆e֛{$x̰̰:z0x:Uo=g! IdHnǕ oe_-y*/<ޙĈ9b1smzz*aOhTջq n?tjs*$9߭t8Mx~t.2_ K)uLRwl|p!o} Ce5(;4ud.86dMRh!\;Vv]^iQ6}>W$#~\}zlt$un8>5Q=KaPWM|뷤@uAr "twqs'VE3+ ˣi_")P:66 ؑf} 0 N^ZlP\^;}p9~' #4Gi3)m! "F(DNT ,D`a 3vWj1{f*ϸ` 8/&j`G0߅y4y8f?T3 pӃַB"r/hjދޗpuuSyj\HV_ĶhRTaT``^}65[L.Hi+n?A؍.)[>ĭߐl"^bӺ$b۷\VάdJX8˩>ːt$WW`;&+%7&E\-U{D[K,Gr;^e^aDO$1:2Q "kUONG&0`hǖWxXI e:;?->neArDe>tT4߲7ҽzS2mGCf\utX^RyO0whlnu{xdSY^#VpP6 T'ݻE1G1p3lN8LyXd&wkNiᰑel\kV`6`%9l7{|>&(@9+]2PwNCy)h'+Fypc-L^-9`>&c@[U $,/l)>m+O B&w2';K[ F(S{TH7IZ ew.@lf16@A,YVjOI]tb昽[I4շq,hOvI=RIoLY4oA6td]&_:Ώu`6!ŽXPQM+tg b5θ0({2Kk@ׂ|˥FŨ!aT vb༺} 7|$0Ԕ* !A;cKX:'n你\aiާR' N6mi!;C["3ɗԦGvrÛ" 06 /cl05Z$a^sfR>rأg6k,dp8ppQU#-+pP,n7wEF9&nkqZ)NuKa 0n /svsN-z(=OTt|ɞ^lDU bЬJ?pXv <~b"2"zaXr kcTqw/M*a|k!--ԥq^UGtJa[-@l`6msm(EL9^)];&{Ñ?ȀTP_zfX-#iSjl$.!`4!j | Qk$HϗZ+(RHk,dvy\@. \Pް]>@ V5Q,ruiSyLѩgMǓwABJS-cirΪkΰo;=SW̽a=fm4:7ѥ~ :Ru#Y(rۡ7n:m>.Nx׽NjGrr}8zv#X*麐)FGՖ/RwrK; 54$ՊtlҐU:;0⚬?3 |~8ç}m?az8]lG̏{AyBu${T @~ye4vaIH֚(^oxEG eZz$nN5)E[ԅ2VtV(ԟֈFZm,R8 SM8'AC~KM{Ət3=y<)ĬG'wA Ԕ̞(D YhD/QLmBj@emq2A8{e*Bpǎ&V;P4bjZ"trQ`.V'F/1^XVΗ:Sٶ[*'Qv2x؍tn[q~$-d,BuxPMY u}OV'gRi)?!/tkk7[]U gk5 yѧ%n3ж⃬,ߓz 1@Ⱦ+b8T<Эܺ \EJ)r4ٽcDfv[r5G>l^9C뛟U]I4dsOmv&n[#O8y)VvށDLmsSqS]0, JoyZ_rTv4Ɖ#A[ho8NsQނ# r2 B)|.231!7/qĎ `F?,Buj& ٖ` b/5#W 0ߛ?=%Jw# ea:v3=FnH#ʲGL`Y sGĮ)zæ]&#ktv=[FIjYʺ Re.9%n§48s1wywPL貈~6aB| S/7"%zԋU2P (/1J;HPBkQyS[EVruk7~qjrZozE8VUԌM#SԀJ yLvZY\whzj4R,Jg+PLQʷ ]i߯pv %&A.vHВ@`U`tn0?gX. Reyd_~/ncl K \VT1/~Z٦/tK٠oHW#f)>bո[N|9Cv,}a$}p| FnScλ2:Yԇ'CۀTomclDH5U9>5x"9Ӊ=@c'O72[rERBhNtc/#egATDD}n2wFu7߰H*x~m+( 3{zsNNwviIR0T p1p6l#:th PU{fmZDx@2.x }E\a*&Q܉fsn\SGY1Gh6߷ *į#~yk q;ѳPwUż0 <:zZ)  uzgDp?/ Wb{Wqw O%RSw1!.^RNZiܥL vXr /bUBTUf9%xO)u$Ql+S?0sJǛ@yѶ8sțu0%_q;~~y-n[R KJ,'s}f}2N Yhސd3Rmixyt&ް3.}e$v@I;Yl+]pG/aQ= RtSL<_A\I|P6Z?sxE k@Չ' =wB.`_VZLqAr{ٓڧiDi+:6Vhdу~Komg[L ӲmTA PBC!Tg@Ur#Nzi l TXĶ_-ԣX,!BKtnI=imȓcʹ]y<ә5@heL[k8f!*":#ۀ<[GM%h˂7!*^( PFdԠv1 M2GDw~F͜s|5_O4-Нg3==~baYc)SJI?F8&?"$]gH&6 RAt[+-֡Lф<SD S."y2u &/MiEC n孴hS2Q#p-8iaO7ϼM ,'h.@ mr 51EIӥ^i` "{]t_>P{r0s szv 'ܑI)]+*+†q Suc @l6f; e\i ՉxɬwnV$;_|vxU 08H8Pm8tlKL#e@V#i$<+8ռ+-9,XԀcB@u 3'6b:W۷d 8x_lqu` _4)=kr[$ ТVmF)SL` j{:֗ +I? :.NفW6B3. {k/fYMXXYx%FymI$եfHuά˰B\lݏ{g+j'#Us۸qR%YNJuL"|b&G]Xy \f-! FT HfI}=R0-h.S`y|Ȋ6 b] k}&Tʽ<1cܪf  ؏|.X.-ZtPF SrA9\_1#ZWʙL%){\Nacx*C +h BYx,0&crʊф ޜ@~;[AcBޑqdAۜRVCY )yO05lMwTɒ}Bnn-T \wӈe%-?ˋjXmmT(UCЯfւQhLO]z؃;+jj NjUzʛcI\Ǭ,WC eѷ'QdzƵI].75Y*2ŭ%@}U kVT8vP'A|l(8u\^Ԭ lj]0 09/AIW;zDM^Br{<6~W젉rЯk{ɥǑ@7)1ٛxrqNn쐲Lzt_\޴ȱKA~Lc5y숻eu.H(*0}矼XM2rh>Nk`z`^?'eBHJӅMHLv,ʱdX isadmMFD TG5.#&2Q[;:#Qtǚo=5h?cp[vW<3SLFK-KúEFSQhUjKç R h|*B}/S=?ZQY'W|u-,AFEĄ(䃝>V+ol&7i'ς X B k_'.)&3S%h2b6hwߌ:p?my YoE:l@9%*AUnv2!qޫҹ;Eux*=SEUcL7_=>1 ޑ^`Dpm3NnkZ[C}LJa{P!\)+lYCSSuu 1;>T'5X8'?*ƾSyo%{JfzWw@"R4GgX%{zca|Rs,tueA4],tF.'e*؈;ʵlS$덿c?0%)z&]f. QYaBMTsT9e[t޺ #8~RGlC67=W6덁˴S[ݣs7M3vnfM g}"'d#p=懹 9c]Bҹx^iL*ϲrmn#ce@=6ڙܔXlKI*hP$,M*48bb= k~ܥ$6b #xY kЄ^_8I--J{*xyKOSўRTP{{OqMuoNMKJ`zεCmP_;&SGΎ {V Lj%Lu=`zGh881\U{*?zᙪ4pP'ބ9ԣjGR= x:]q.9 i),}5$Cg¸="JQo8* qڌЫ@A re:!u=PĽ<{ <-~N<;W&LvKoS, zx͖%>CtQpn}0Alq?9Do! # g\[9rbd5^,.:oCw{2rA I(7Q E#;@kڞ@  hpx2!})wےS\ȃDT,|c}~6whx͑@;.QS; I]xzzlt}&mؗa2S0 iNZ`q8Uwȿ70>bEwur]*)؋*3ekuUWxX/ޜIDt&HrO,2n"2o1|<1'&q&7 x4#M엔|J}*׶uRȡ]uZt_յ]0CoHTa䔱y(L#rLBToFrr~Tl֊I-ڏIWI~!i;1mStɤrJRW,oZ5+ꠔ5>JBy@&Et*.? DsQaב~Z`I:x}X ҡj+SȚ͜_S=z+3t c[%NRXwІh5Wu'(YxbH"`;lWw迪_LK}`5-ejCmq(v` grn dNa\zs4|&9<Cp۬څ{g.zZeU3@E,X3̹ޛfeʤo$j7`X+G RHozYhȆ #V(%:>817? ,vxK.yޛBo,@fdKң~U ޝC:(^_g{B3 `i:!WD99|g'Sdr#^ ,F&Xlzx˗!}1vctv]^&;UXTðO|AHvx$'GOIW z~ Э!]\ *Q}˥LrfZj+2052U{D11o;p5>jȝ˻5} ղXϊjBlJ`qFJ$4HփvϦwoWc Qho_9Z\O7g #X '0M@ n͉ؒ-Uc`x*^[ tud aSɦ`Yl; W|# [Dͬ׼פ}6> H-5+,g-Yic*/alOD#;w1>&6MvUs) D65qY5Ac)|)( 6-,ԺimJ3 PMY=֝lo.b 2e)e+Yd_ׅEɗw"p=hWF_9u̅S=HgdHU+ Zp?gי(WsI VGSWa#aTE)Fw5,~S(C |ZFq6MYlc ĸ=PoAN "6׎X`Pq^BTP[j4Y[@γ!9 |0W=cJ~$j=R(:Aڈpަܩc:=%'6 ᢖ8-cttP!(o0Bn?ÀEM|VZ(sz(~hk78iB`2!r a}&|Fit\*ǢK' O͊o,YC]*&EJ͇CMfOa} yz$m=ST:DzX]\"MdžGq#0D4IhaGea9#MQg:kR҆]0 afܵL#ma Y?#xu6<3=- mC2&oS8>a"&ӵFQW,q=e kܜT=.i;r\Zp~H_%,&o Ko5 H9ty\}HGF28f*$\k)z0x|?Akr"aE Cy6o0H +F෧QF '{}Y#>%||0}=r]3q)"e{5 0[7XLｫ Ξgl5`7jORJz 'wTH'b[)leTXIp-J*u$Q7y,0󼊓3NrטƆ/O+]5ctViК!ц( $\_+` VdJ긓x$Dr'݌!aFT4hgAE,.ɼ=;+[R% י- {Ìx3:sKl j"د"3eӲڈ`x[+D FȿzmW><}۔<Pk^ {+58E s&.pEcwl2ՐLY"ev.*ï݈E|*oՂ{D ,rAo.RNXL U35ӞY=;tiw5J$@Ӏr{ HTye{ŠؽIq'ruV:Ůbi+$ gXK5Wuz7@5ϔNp"@S1_f3/yOD]H΀#Pxvt8vk( gU| d{ 1@|V<`z!%l5Ay3 ylyȲkT뤸in3m N?$ zp!c8";?1`SvqKP98| .Y;y3#N x(ƨZ?"L[ON n;'ZPB+(%~%C|h) ]V#y]DGּ+Yx_l=k;LI·_+iDOz!? )2.(8?Ĥ-0DCy-/fċjc,?=~OG<#y;0OC z)6&z*{7f:#jV&h4KB9JL;ݍk6eY }?E-$=¸pe.f:]wp6oF4]9vS7L }=y0to |0.EN}kp{`wR,2P_/!/VhT5s$uIQŶ\m6EG[z.k %^[c$(WmLv"n, (WU?*d[_wv(s\:ˀg kD*\;3\r|cf}C/6{e^ /;eF/u͕'r>:'J];m1Ơx7oLZ\MQyh~Fp aϝFšZ]/>!>h !JM -gVhSJ1uWr\f62ro#$*1-.ࠞ !S-&eDgj)`Nddb ;ѭU@VU@Y]&a$xzWl WYf0`y ![-˫1:nT~ $rEeCɓ04o':=9.L'˗ۦLR!pt=:v_uXX2|!oi̩ sR-޺X^ gZ+= `=^|IDadM-}n R3u(G /&]L̳RG*{.U7pǑ, 88aOxTώCTtU 2\=! 8\_}5e=(w0X(y"EQc>X1# NJKs6$! Tt\R '=$=&Fae~2:2 :UTDaT##qYＹ48M}lG*dJ'ppTfXy!{I+۵Ӯf񧟨. ȷuPPHcg+]~]ᶙ-Gqz?-@{hq]?X[_h2Ta"Ye0E` 8ĺ6-Z#&fb@bxge1u@2;+w^} eZ [1Fcs: ۊ#nZ@V&P9k\Z!r(r1 ڬY\7aclxlb,@ɠG],_6ЏSTr#_ŨJ%>Lyz[6 `[Ȓ`9Yl(>l~ʤXp,L%}ljQ;`;߰RVA}pŌnN=iY=gbIb L]d6D! jnq \joz5Fڰ6`b jܝ9pByYe| N(AUa|b5/<Џc1 & TdC?i\PSuԹ0@;PWmW<ԫv-+0;k`O.`p~6.YM 4TmoMJ|Pwa4Kra @i_o; \<+K F?{v8d#wJ+ީӉ$r닺7Us48֞rOL:B Re-eDAힲ)HCHfבC"CFz tasW<:WVAf|Fsj#|.,HH{3+ܞVi樓_y hnJȇmP2A4= oReK9qĬYRIh2):0 ʾ }@xqgG0 KPuE4~W, ,@ai-FY.V{twd::*oSu$>Ҋcw{ I.Q"xoߵU]!