{"action":"opened","number":764,"pull_request":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/764","id":46290222,"html_url":"https://github.com/OpenSCAP/scap-security-guide/pull/764","diff_url":"https://github.com/OpenSCAP/scap-security-guide/pull/764.diff","patch_url":"https://github.com/OpenSCAP/scap-security-guide/pull/764.patch","issue_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/764","number":764,"state":"open","locked":false,"title":"[Enhancement] [RHEL/7] Finish OVAl checks implementation for RHEL-7's PCI-DSS profile","user":{"login":"iankko","id":8414918,"avatar_url":"https://avatars.githubusercontent.com/u/8414918?v=3","gravatar_id":"","url":"https://api.github.com/users/iankko","html_url":"https://github.com/iankko","followers_url":"https://api.github.com/users/iankko/followers","following_url":"https://api.github.com/users/iankko/following{/other_user}","gists_url":"https://api.github.com/users/iankko/gists{/gist_id}","starred_url":"https://api.github.com/users/iankko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iankko/subscriptions","organizations_url":"https://api.github.com/users/iankko/orgs","repos_url":"https://api.github.com/users/iankko/repos","events_url":"https://api.github.com/users/iankko/events{/privacy}","received_events_url":"https://api.github.com/users/iankko/received_events","type":"User","site_admin":false},"body":"This changeset does the following:\r\n* patch https://github.com/OpenSCAP/scap-security-guide/commit/b31f640b64f2422d9044a5def44fc84a1d0bc99a -- adds RHEL-7 OVAL check for 'smartcard_auth' rule based on:\r\n&nbsp; &nbsp; [1] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7-Beta/html/System-Level_Authentication_Guide/authconfig-addl-auth.html#authconfig-smartcard \r\n  article,\r\n* patch https://github.com/OpenSCAP/scap-security-guide/commit/82f84ba7c108cdaca2e371bb00fda3616c9ca2f2 -- enhances the currently existing OVAL check for ```accounts_password_pam_unix_remember``` rule to:\r\n  * mention availability / possibility to use the ```pam_pwhistory.so``` PAM module too in the XCCDF,\r\n  * enhances underlying OVAL to cope with ```pam_pwhistory.so``` setting properly if encountered,\r\n  * switches this rule on for RHEL-7's PCI-DSS profile,\r\n* patch https://github.com/OpenSCAP/scap-security-guide/commit/49e1c507d04ba905fa6948de48509d5fe232e0c8 -- starts using the existing ```shared/``` OVAL check for ```dconf_gnome_screensaver_mode_blank``` rule also for RHEL-7 PCI-DSS profile (verified the OVAL is working), and finally \r\n* patch https://github.com/OpenSCAP/scap-security-guide/commit/080a484ba401a0cd2e7d99085e60cc76f57de646 uncomments the test for ```install_hids``` rule in the RHEL-7's PCI-DSS profile. As there isn't officially recommended IDS system for RHEL-7 (besides ```aide``` and RPM \"IDS capabilities\"), there isn't OVAL check for this rule. When the situation changes, we might implement OVAL for this rule in the future.\r\n\r\nTesting report:\r\n------------------\r\nVerified the changes on RHEL-7 system and AFAICT from testing they are working fine.\r\n\r\nPlease review.\r\n\r\nThank you, Jan.\r\n","created_at":"2015-09-29T15:11:20Z","updated_at":"2015-09-29T15:11:20Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":{"login":"iankko","id":8414918,"avatar_url":"https://avatars.githubusercontent.com/u/8414918?v=3","gravatar_id":"","url":"https://api.github.com/users/iankko","html_url":"https://github.com/iankko","followers_url":"https://api.github.com/users/iankko/followers","following_url":"https://api.github.com/users/iankko/following{/other_user}","gists_url":"https://api.github.com/users/iankko/gists{/gist_id}","starred_url":"https://api.github.com/users/iankko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iankko/subscriptions","organizations_url":"https://api.github.com/users/iankko/orgs","repos_url":"https://api.github.com/users/iankko/repos","events_url":"https://api.github.com/users/iankko/events{/privacy}","received_events_url":"https://api.github.com/users/iankko/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/milestones/14","html_url":"https://github.com/OpenSCAP/scap-security-guide/milestones/0.1.26","labels_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/milestones/14/labels","id":1264346,"number":14,"title":"0.1.26","description":"","creator":{"login":"iankko","id":8414918,"avatar_url":"https://avatars.githubusercontent.com/u/8414918?v=3","gravatar_id":"","url":"https://api.github.com/users/iankko","html_url":"https://github.com/iankko","followers_url":"https://api.github.com/users/iankko/followers","following_url":"https://api.github.com/users/iankko/following{/other_user}","gists_url":"https://api.github.com/users/iankko/gists{/gist_id}","starred_url":"https://api.github.com/users/iankko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iankko/subscriptions","organizations_url":"https://api.github.com/users/iankko/orgs","repos_url":"https://api.github.com/users/iankko/repos","events_url":"https://api.github.com/users/iankko/events{/privacy}","received_events_url":"https://api.github.com/users/iankko/received_events","type":"User","site_admin":false},"open_issues":24,"closed_issues":23,"state":"open","created_at":"2015-08-20T10:23:23Z","updated_at":"2015-09-29T15:11:20Z","due_on":null,"closed_at":null},"commits_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/764/commits","review_comments_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/764/comments","review_comment_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/comments{/number}","comments_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/764/comments","statuses_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/statuses/080a484ba401a0cd2e7d99085e60cc76f57de646","head":{"label":"iankko:more_pci_dss_ovals","ref":"more_pci_dss_ovals","sha":"080a484ba401a0cd2e7d99085e60cc76f57de646","user":{"login":"iankko","id":8414918,"avatar_url":"https://avatars.githubusercontent.com/u/8414918?v=3","gravatar_id":"","url":"https://api.github.com/users/iankko","html_url":"https://github.com/iankko","followers_url":"https://api.github.com/users/iankko/followers","following_url":"https://api.github.com/users/iankko/following{/other_user}","gists_url":"https://api.github.com/users/iankko/gists{/gist_id}","starred_url":"https://api.github.com/users/iankko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iankko/subscriptions","organizations_url":"https://api.github.com/users/iankko/orgs","repos_url":"https://api.github.com/users/iankko/repos","events_url":"https://api.github.com/users/iankko/events{/privacy}","received_events_url":"https://api.github.com/users/iankko/received_events","type":"User","site_admin":false},"repo":{"id":23708376,"name":"scap-security-guide","full_name":"iankko/scap-security-guide","owner":{"login":"iankko","id":8414918,"avatar_url":"https://avatars.githubusercontent.com/u/8414918?v=3","gravatar_id":"","url":"https://api.github.com/users/iankko","html_url":"https://github.com/iankko","followers_url":"https://api.github.com/users/iankko/followers","following_url":"https://api.github.com/users/iankko/following{/other_user}","gists_url":"https://api.github.com/users/iankko/gists{/gist_id}","starred_url":"https://api.github.com/users/iankko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iankko/subscriptions","organizations_url":"https://api.github.com/users/iankko/orgs","repos_url":"https://api.github.com/users/iankko/repos","events_url":"https://api.github.com/users/iankko/events{/privacy}","received_events_url":"https://api.github.com/users/iankko/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/iankko/scap-security-guide","description":"Baseline compliance content in SCAP formats","fork":true,"url":"https://api.github.com/repos/iankko/scap-security-guide","forks_url":"https://api.github.com/repos/iankko/scap-security-guide/forks","keys_url":"https://api.github.com/repos/iankko/scap-security-guide/keys{/key_id}","collaborators_url":"https://api.github.com/repos/iankko/scap-security-guide/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/iankko/scap-security-guide/teams","hooks_url":"https://api.github.com/repos/iankko/scap-security-guide/hooks","issue_events_url":"https://api.github.com/repos/iankko/scap-security-guide/issues/events{/number}","events_url":"https://api.github.com/repos/iankko/scap-security-guide/events","assignees_url":"https://api.github.com/repos/iankko/scap-security-guide/assignees{/user}","branches_url":"https://api.github.com/repos/iankko/scap-security-guide/branches{/branch}","tags_url":"https://api.github.com/repos/iankko/scap-security-guide/tags","blobs_url":"https://api.github.com/repos/iankko/scap-security-guide/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/iankko/scap-security-guide/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/iankko/scap-security-guide/git/refs{/sha}","trees_url":"https://api.github.com/repos/iankko/scap-security-guide/git/trees{/sha}","statuses_url":"https://api.github.com/repos/iankko/scap-security-guide/statuses/{sha}","languages_url":"https://api.github.com/repos/iankko/scap-security-guide/languages","stargazers_url":"https://api.github.com/repos/iankko/scap-security-guide/stargazers","contributors_url":"https://api.github.com/repos/iankko/scap-security-guide/contributors","subscribers_url":"https://api.github.com/repos/iankko/scap-security-guide/subscribers","subscription_url":"https://api.github.com/repos/iankko/scap-security-guide/subscription","commits_url":"https://api.github.com/repos/iankko/scap-security-guide/commits{/sha}","git_commits_url":"https://api.github.com/repos/iankko/scap-security-guide/git/commits{/sha}","comments_url":"https://api.github.com/repos/iankko/scap-security-guide/comments{/number}","issue_comment_url":"https://api.github.com/repos/iankko/scap-security-guide/issues/comments{/number}","contents_url":"https://api.github.com/repos/iankko/scap-security-guide/contents/{+path}","compare_url":"https://api.github.com/repos/iankko/scap-security-guide/compare/{base}...{head}","merges_url":"https://api.github.com/repos/iankko/scap-security-guide/merges","archive_url":"https://api.github.com/repos/iankko/scap-security-guide/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/iankko/scap-security-guide/downloads","issues_url":"https://api.github.com/repos/iankko/scap-security-guide/issues{/number}","pulls_url":"https://api.github.com/repos/iankko/scap-security-guide/pulls{/number}","milestones_url":"https://api.github.com/repos/iankko/scap-security-guide/milestones{/number}","notifications_url":"https://api.github.com/repos/iankko/scap-security-guide/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/iankko/scap-security-guide/labels{/name}","releases_url":"https://api.github.com/repos/iankko/scap-security-guide/releases{/id}","created_at":"2014-09-05T15:38:32Z","updated_at":"2015-05-07T17:09:47Z","pushed_at":"2015-09-29T15:03:34Z","git_url":"git://github.com/iankko/scap-security-guide.git","ssh_url":"git@github.com:iankko/scap-security-guide.git","clone_url":"https://github.com/iankko/scap-security-guide.git","svn_url":"https://github.com/iankko/scap-security-guide","homepage":"https://fedorahosted.org/scap-security-guide/","size":12560,"stargazers_count":0,"watchers_count":0,"language":"XSLT","has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"OpenSCAP:master","ref":"master","sha":"738044cf4fac997cdd94d749d2f69f0b251d8025","user":{"login":"OpenSCAP","id":7439934,"avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=3","gravatar_id":"","url":"https://api.github.com/users/OpenSCAP","html_url":"https://github.com/OpenSCAP","followers_url":"https://api.github.com/users/OpenSCAP/followers","following_url":"https://api.github.com/users/OpenSCAP/following{/other_user}","gists_url":"https://api.github.com/users/OpenSCAP/gists{/gist_id}","starred_url":"https://api.github.com/users/OpenSCAP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OpenSCAP/subscriptions","organizations_url":"https://api.github.com/users/OpenSCAP/orgs","repos_url":"https://api.github.com/users/OpenSCAP/repos","events_url":"https://api.github.com/users/OpenSCAP/events{/privacy}","received_events_url":"https://api.github.com/users/OpenSCAP/received_events","type":"Organization","site_admin":false},"repo":{"id":19279458,"name":"scap-security-guide","full_name":"OpenSCAP/scap-security-guide","owner":{"login":"OpenSCAP","id":7439934,"avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=3","gravatar_id":"","url":"https://api.github.com/users/OpenSCAP","html_url":"https://github.com/OpenSCAP","followers_url":"https://api.github.com/users/OpenSCAP/followers","following_url":"https://api.github.com/users/OpenSCAP/following{/other_user}","gists_url":"https://api.github.com/users/OpenSCAP/gists{/gist_id}","starred_url":"https://api.github.com/users/OpenSCAP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OpenSCAP/subscriptions","organizations_url":"https://api.github.com/users/OpenSCAP/orgs","repos_url":"https://api.github.com/users/OpenSCAP/repos","events_url":"https://api.github.com/users/OpenSCAP/events{/privacy}","received_events_url":"https://api.github.com/users/OpenSCAP/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/OpenSCAP/scap-security-guide","description":"Baseline compliance content in SCAP formats","fork":false,"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide","forks_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/forks","keys_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/keys{/key_id}","collaborators_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/teams","hooks_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/hooks","issue_events_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/events{/number}","events_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/events","assignees_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/assignees{/user}","branches_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/branches{/branch}","tags_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/tags","blobs_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/git/refs{/sha}","trees_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/git/trees{/sha}","statuses_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/statuses/{sha}","languages_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/languages","stargazers_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/stargazers","contributors_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/contributors","subscribers_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/subscribers","subscription_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/subscription","commits_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/commits{/sha}","git_commits_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/git/commits{/sha}","comments_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/comments{/number}","issue_comment_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/comments{/number}","contents_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/contents/{+path}","compare_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/compare/{base}...{head}","merges_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/merges","archive_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/downloads","issues_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues{/number}","pulls_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls{/number}","milestones_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/milestones{/number}","notifications_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/labels{/name}","releases_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/releases{/id}","created_at":"2014-04-29T14:32:02Z","updated_at":"2015-09-29T11:32:59Z","pushed_at":"2015-09-29T15:11:21Z","git_url":"git://github.com/OpenSCAP/scap-security-guide.git","ssh_url":"git@github.com:OpenSCAP/scap-security-guide.git","clone_url":"https://github.com/OpenSCAP/scap-security-guide.git","svn_url":"https://github.com/OpenSCAP/scap-security-guide","homepage":"https://fedorahosted.org/scap-security-guide/","size":19395,"stargazers_count":83,"watchers_count":83,"language":"XSLT","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":54,"mirror_url":null,"open_issues_count":205,"forks":54,"open_issues":205,"watchers":83,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/764"},"html":{"href":"https://github.com/OpenSCAP/scap-security-guide/pull/764"},"issue":{"href":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/764"},"comments":{"href":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/764/comments"},"review_comments":{"href":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/764/comments"},"review_comment":{"href":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/OpenSCAP/scap-security-guide/pulls/764/commits"},"statuses":{"href":"https://api.github.com/repos/OpenSCAP/scap-security-guide/statuses/080a484ba401a0cd2e7d99085e60cc76f57de646"}},"merged":false,"mergeable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"commits":4,"additions":237,"deletions":26,"changed_files":10}}