In running through the RHEL 7.3 beta, I found the following bugs. Looks like most have already been patched upstream.
Has anyone seen bugs beyond those below?
FAIL DURING OSCAP-ANACONDA INSTALL? FAIL AFTER CLI REMEDIATION? BugZilla Install AIDE X FIXED https://bugzilla.redhat.com/show_bug.cgi?id=1372058 Build and Test AIDE Database X FIXED https://bugzilla.redhat.com/show_bug.cgi?id=1372058 Configure Periodic Execution of AIDE X FIXED https://bugzilla.redhat.com/show_bug.cgi?id=1372058 Install Virus Scanning Software X X Acceptable - DoD specific Enable Randomized Layout of Virtual Address Space X ERROR https://bugzilla.redhat.com/show_bug.cgi?id=1372060 Set Password to Maximum of Consecutive Repeating Characters from Same Character Class X X https://bugzilla.redhat.com/show_bug.cgi?id=1372061 Set Interactive Session Timeout X X https://bugzilla.redhat.com/show_bug.cgi?id=1372062 Set Boot Loader Password X X Acceptable - user needs to input password Install the screen Package X https://bugzilla.redhat.com/show_bug.cgi?id=1372066 Configure Kernel Parameter for Accepting Source-Routed Packets for All Interfaces X X https://bugzilla.redhat.com/show_bug.cgi?id=1372063 Ensure Logs Sent to Remote Host X X Acceptable - user must input Disable GSSAPI Authentication X X https://bugzilla.redhat.com/show_bug.cgi?id=1372068 Disable Kerberos Authentication X X https://bugzilla.redhat.com/show_bug.cgi?id=1372068 Enable Use of StrictModes X X https://bugzilla.redhat.com/show_bug.cgi?id=1372068 Enable Use of Privilege Separation X X https://bugzilla.redhat.com/show_bug.cgi?id=1372068 Disable Compression or Set Compression to delayed X X https://bugzilla.redhat.com/show_bug.cgi?id=1372068 Verify Permissions on SSH Server Private *_key Key Files X X https://bugzilla.redhat.com/show_bug.cgi?id=1372070
scap-security-guide@lists.fedorahosted.org