openstack-ansible/releasenotes/notes/stig-rhel7-version-1-renumbering-fiesta-aa047fea3ea35e74.yaml
Andy McCrae 26b1fb9ce5 Role Pin for Pike OSA Milestone-1
Nova is pinned before 6dd047a3307a1056077608fd5bc2d1c3b3285338 until
https://review.openstack.org/#/c/455710/ can merge.

Change-Id: I27adc85337424a7b251d8d5d614ad4446c6c55d3
2017-04-12 11:52:44 +00:00

21 lines
990 B
YAML

---
prelude: >
The first release of the Red Hat Enterprise Linux 7 STIG was entirely
renumbered from the pre-release versions. Many of the STIG configurations
simply changed numbers, but some were removed or changed. A few new
configurations were added as well.
security:
- |
The latest version of the RHEL 7 STIG requires that a standard login banner
is presented to users when they log into the system (V-71863). The
security role now deploys a login banner that is used for console and ssh
sessions.
- |
The ``cn_map`` permissions and ownership adjustments included as part of
RHEL-07-040070 and RHEL-07-040080 has been removed. This STIG
configuration was removed in the most recent release of the RHEL 7 STIG.
- |
The PKI-based authentication checks for RHEL-07-040030, RHEL-07-040040,
and RHEL-07-040050 are no longer included in the RHEL 7 STIG. The tasks
and documentation for these outdated configurations are removed.