{"push_id":1033893736,"size":3,"distinct_size":3,"ref":"refs/heads/master","head":"594f023c5009f750847f32727c8c703efcbc2051","before":"d85179d459ec1ddd0acbc57eabb8fb9deb9709a5","commits":[{"sha":"93bb6a54418aa4b0bc5f57fad765caefe22683f6","author":{"email":"e37a56a2335d0871acbecdea8315e90f18c3461f@redhat.com","name":"Jan Lieskovsky"},"message":"[BugFix] [Infrastructure] For each XCCDF rule ID having and CCE <ident>\nelement set add corresponding CCE identifier in the form of:\n\n  <reference source=\"CCE\" ref_id=\"specific CCE-id\" />\n\nalso to the (not remote) OVAL check related to this XCCDF rule (not remote\nOVAL check referenced from that XCCDF rule)\n\nFixes (majority of issues in): https://github.com/OpenSCAP/scap-security-guide/issues/1092$","distinct":true,"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/commits/93bb6a54418aa4b0bc5f57fad765caefe22683f6"},{"sha":"7dff49f1a1d32ebc1cd38150bae6295cca776cec","author":{"email":"e37a56a2335d0871acbecdea8315e90f18c3461f@redhat.com","name":"Jan Lieskovsky"},"message":"[BugFix] [Infrastructure] relabelids.py helper script -- during\nthe process of creation of the XCCDF and OVAL documents:\n* ssg-$(PROD)-xccdf.xml, and\n* ssg-$(PROD)-oval.xml\n\nensure every local OVAL definition referenced in XCCDF file is truly\ndefined / implemented in the OVAL file. Drop the XCCDF's <check-content>\nOVAL reference if not.\n\nMore background:\n----------------\nSince depending on the openscap version used to build SSG content\nwe update the list of OVAL checks to be included into final OVAL\ndocument by \"combineovals.py\" helper script, right now it is possible\nby certain openscap version vs OVAL rules combination the particular\nXCCDF rule will reference local OVAL definition, that is not actually\nimplemented in the resulting OVAL file.\n\nTo mention a concrete example -- e.g. 'rsyslog_files_permissions'\nrule uses \"<glob_to_regex>\" OVAL construct (thus requires OVAL-5.11).\nBut with openscap-1.0.x that definition wouldn't be included into\nssg-rhel6-oval.xml file. But ssg-rhel6-xccdf.xml still references\nthat OVAL definition (since it was created by \"shorthand2xccdf\"\nXSLT helper / transformation).\n\nTherefore for cases like this when building final OVAL and XCCDF\nfiles via relabelids.py helper, ensure the local OVAL definition\nreferenced in XCCDF is truly implemented in corresponding ssg-$(PROD)-oval.xml\nfile. Drop the <check-content> OVAL reference from XCCDF if not.\n\nThis change fixes the following issues:\n\n* Fixes: https://github.com/OpenSCAP/scap-security-guide/issues/1092\n* Fixes: https://github.com/OpenSCAP/scap-security-guide/issues/1095\n* Fixes: https://github.com/OpenSCAP/scap-security-guide/issues/1098","distinct":true,"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/commits/7dff49f1a1d32ebc1cd38150bae6295cca776cec"},{"sha":"594f023c5009f750847f32727c8c703efcbc2051","author":{"email":"54669547a225ff20cba8b75a4adca540eef25858@preisler.me","name":"Martin Preisler"},"message":"Merge pull request #1103 from iankko/issue_1092\n\n[BugFix] [Infrastructure] Fixes for issues #1092, #1095, and #1098","distinct":true,"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/commits/594f023c5009f750847f32727c8c703efcbc2051"}]}