PowerStig/HISTORIC_CHANGELOG.md

255 строки
13 KiB
Markdown
Исходник Постоянная ссылка Обычный вид История

master into dev (#662) * Prep for release of 4.1.1 (#519) * Functions.Checklist - Adding manual check functionality (#495) * Adding manual check functionality * Exception Parameter Backward Compatibility Feature Request (#515) * backward compatibility commit * fixed Issue #517 (#518) * Fixed [#517](https://github.com/microsoft/PowerStig/issues/517): 4.1.0 GPRegistryPolicyDsc Module Version Issue * resolving dev merge issue conflict * Release PR from milestone (4.4.0) to master (#661) * Migrate PowerSTIG to Azure DevOps for Build and Test (#603) * update folder structure for azure dev ops * dscresource unit test passing * updated unit tests * Unit test pathing update, all passing * updated unit test to ensure regex data files are loaded * updated .tests.header for unit\tools directory * daily commit - Integrated test updates * updated tests based on testing feedback * optimized test header based on feedback * updated build.psd1 case sensitive * update build agent to windows-2019 * update build and azure yml files * added hqrm tests to build yml and dependencies * updated azure-pipelines.yml to include hqrm test * updated HRQM display name * updated test exclusion DSCResources * intro logic to dynamically build requiredmodules * updated yml to reflect master * updated changelog.md * Update azure-pipelines.yml * rename sources to source (#605) * Migrate PowerSTIG to Azure DevOps for Build, Test and Release Deployment (#606) * updated powerstig for dynamic versioning * updated gitversion to reflect base version * updated if statement to adhere to style gls * updated code to adhere to sgl hqrmtest * updated code to adhere to sgl hqrm tests * updated code to adhere to sgl hqrm * update yml files to support CICD pipeline * updated markdown function * update change log structure * updated spacing via PR feedback * updated 2012R2 STIG after convert tests reflected a minor delta * Update PowerSTIG to parse and apply Vmware Vsphere 6.5 STIG V1R3 (#607) * initial commit for vsphere * updated based on test results * updated based on vsphere module name * updated module manifest to check build status * updated newlines in raw xccdf * updated newline * updated newlies in rules * updated tests * updated processed Stig name * updated vsphere schema * updated composites * updated spacing * updated format * Updated based on feedback * update required parameter for composite * updated service rule * Added Integration DSCresrouce Vsphere Test * reverted changes to test * updated integration tests * added unit tests * added unit tests * added unit tests * updated formatting based on feedback * updated based on feedback * updated comments * updated tests * updated changelog.md * trailing whitespace removed * updated for HQRM tests * updated based on pr feedback * updated case * update code based on PR feedback * updated code based on PR feedback. * updated tests based on PR feedback * updated test based on PR feedback Co-authored-by: Brian Wilhite <bcwilhite@live.com> * Unable to Import PowerSTIG 4.4.0 Due to cyclic dependency Error (#617) * removed vmware.vspheredsc as a dependency because all of its required dependencies are loaded * updated module load process for VMware modules * updated build.yaml * updated test * Updated tests * removed stop error action * updated formating * updated based on failing hqrm * updated module helper * moved helper module * updated location of module helper * reduced vmware.VsphereDSC version * updated build.yaml * updated data file * update module version schema * updated based on testing * Update changelog * Update based on PR feedback * Update PowerSTIG to successfully parse/apply Microsoft IIS Server/Site STIG - Ver 1, Rel10 (#623) * added IIS Server V1R10 * updated changelog and added iis site v1r10 * updated changelog * removed N-2 STIGS * Update PowerSTIG to successfully parse Microsoft SQL Server 2012 Database STIG - Ver 1, Rel 20 (#621) * updated PowerSTIG to use SQL 2012 Database V1R20 * quotes in test * updated tabs to spaces in sql raw xccdf Co-authored-by: Brian Wilhite <bcwilhite@live.com> * explicit Pester version due to 5.x (latest) test failures * Update PowerSTIG to successfully parse/apply Windows Defender Antivirus STIG - V1R8 (#626) * added new Windows Defender STIG V1R8 removed V1R6 * updated based on PR feedback: * merged origin Co-authored-by: Brian Wilhite <bcwilhite@live.com> * initial commit (#640) Co-authored-by: Brian Wilhite <bcwilhite@live.com> * Update PowerSTIG to successfully parse/apply Microsoft IIS 10 Server/Site STIG - V1R1 (#641) * added IIS 10.0 Server * updated IIS 10 site stig * updated based on tests * updated based on tests * updated log file * added esxi 6.5 v1r4 (#637) Co-authored-by: Brian Wilhite <bcwilhite@live.com> * Update PowerSTIG to successfully parse/apply Windows Server 2012 DNS STIG - Ver 1, Rel 14 (#635) * DNS Update commit * removed DNS 1.12 * explicit version for DscResource.Test * Update PowerSTIG to allow for workgroup level scans (#643) * added community requested functionality to not require domain/forest parameters * updated warning message * reverted to old module dscresource.test * Updated based on feedback * updated sql 2016 instance 1.9 (#638) * Update PowerSTIG to successfully parse/apply MS SQL Server 2012 Instance Ver. 1 Rel. 20 (#642) * updated sql 2012 Instance V1R20 * updated Get-SqlTechnologyRole * removed tabs * added a new line to the end of xccdf * update build to use dscresource.test 0.13.1 * updated code based on feedback * updated sql script query rule and test to take multiple db's withouth conflict * updated based on testing * log file update for IE rule bug * updated change log * added new line to the end of the log files * Updated based on pr feedback * Update PowerSTIG to successfully parse/apply Windows 10 STIG - V1R21 (#656) * Updated to support latest WIN10 STIG * update 1.19 to remove extra slash for bug * update changelog * update release process to correct wiki percentage Co-authored-by: Eric Jenkins <erjenkin@microsoft.com> * update changelog.md Co-authored-by: Eric Jenkins <erjenkin@microsoft.com>
2020-07-01 21:33:36 +03:00
# Historic change log for PowerSTIG
The release notes in the PowerShell Module manifest cannot exceed 10000
characters. Due to a bug in the CI deploy pipeline this is not handled.
This file is to temporary move the older change log history to keep the
change log short.
## [3.3.0] - 2019-08-12
UPDATES
* Fixed [#419](https://github.com/Microsoft/PowerStig/issues/419): PowerStig is creating resource xSSLSettings with the wrong value for Name.
* Updated PowerSTIG to leverage AuditSetting instead of the Script resource. Additionally renamed WmiRule to AuditSettingRule [#431](https://github.com/Microsoft/PowerStig/issues/431)
Added the following STIG
* Added support for Windows 10, Version 1, Release 17 [#442](https://github.com/microsoft/PowerStig/issues/442)
* Added support for Windows Defender, Version 1, Release 5 [#393](https://github.com/microsoft/PowerStig/issues/393)
* Added support for Internet Explorer 11 Version 1, Release 17 [#422](https://github.com/Microsoft/PowerStig/issues/422)
* Added support for Server 2016 STIG, Version 1, Release 8 [#418](https://github.com/Microsoft/PowerStig/issues/418)
## [3.2.0] - 2019-05-24
* Added support for IIS 8.5 Server STIG, Version 1, Release 7 [#399](https://github.com/Microsoft/PowerStig/issues/399)
* Fixed [#373](https://github.com/Microsoft/PowerStig/issues/373): Registry resource does not handle null values for ValueData contained in Processed STIGs
* Fixed [#376](https://github.com/Microsoft/PowerStig/issues/376): SQL STIG Rules V-41021 (Instance STIG) and V-41402 (Database STIG) fail to apply when applying to a SQL instance that is NOT name the default (MSSQLSERVER).
* Fixed [#377](https://github.com/Microsoft/PowerStig/issues/377): SQL Instance Rule V-40936 fails when Set-TargertResource is ran
* Fixed [#280](https://github.com/Microsoft/PowerStig/issues/280): HKEY_CURRENT_USER is not needed with the cAdministrativeTemplateSetting composite resource. (Regression Issue)
* Fixed [#385](https://github.com/Microsoft/PowerStig/issues/385): IIS Server STIG V-76681 does not parse correctly
* Added support for Office 2016 STIGs [#370](https://github.com/Microsoft/PowerStig/issues/370)
* Added support to Automate Application Pool Recycling for IisSite_8.5 [#378](https://github.com/Microsoft/PowerStig/issues/378)
* Added support for Windows Server 2012R2 DC V2R16 [#398](https://github.com/Microsoft/PowerStig/issues/398)
* Added support for update Windows Server 2012 MS STIG v2r15 [#395](https://github.com/Microsoft/PowerStig/issues/395)
* Added support for Firefox STIG v4r25 [#389](https://github.com/Microsoft/PowerStig/issues/389)
* Added entry in log file for IISSite 1.7 so rule v-76819 parses as an xWebConfigurationProperty [#407](https://github.com/microsoft/PowerStig/issues/407)
* Added IISSite v1.7 [#400](https://github.com/microsoft/PowerStig/issues/400)
* Fixed [#403](https://github.com/microsoft/PowerStig/issues/403): DotNet STIG V1R7 update
## [3.1.0] - 2019-04-01
UPDATES
* Removed duplicate code from rule class constructors
* Migrated from Get-WmiObject to Get-CimInstance to support PowerShell Core
* Migrated to PSDscResources [#345](https://github.com/Microsoft/PowerStig/issues/345)
* Migrated to ComputerManagementDsc [#342](https://github.com/Microsoft/PowerStig/issues/342)
* Fixed [#358](https://github.com/Microsoft/PowerStig/issues/358): Update PowerSTIG Duplicate Rule handling and capability
Added the following STIG
* Windows Defender V1R4 [#344](https://github.com/Microsoft/PowerStig/issues/344)
## [3.0.1] - 2019-03-11
* Fixed [#350](https://github.com/Microsoft/PowerStig/issues/350): Updates to fix Skip rules not working correctly
* Fixed [#348](https://github.com/Microsoft/PowerStig/issues/348): Update to DnsServer Schema to correct typo.
## [3.0.0] - 2019-03-01
* Introduces class support for each rule type
* The STIG class now contains an array of rule objects vs xml elements
* Orgsettings, Exceptions, and Rule skips are all supported by the Rule base class
* Rule help is provided for any loaded rule.
* See the [wiki](https://github.com/Microsoft/PowerStig/wiki/GettingRuleHelp) for more information.
* Major code refactor to simplify maintenance and usage
* [Breaking Change] The STIG class constructor no longer accepts Orgsettings, Exceptions, or Rule skips
* That functionality has move to the load rule method
* DSC composite resource parameter validation for version numbers has been removed
* The STIG class validates all input and will throw an error if invalid data is provided.
* The Get-StigList has be updated and renamed to Get-Stig to return the STIG class
UPDATES
* Fixed [#241](https://github.com/Microsoft/PowerStig/issues/241): [WindowsFeatureRule] PsDesiredStateConfiguration\WindowsOptionalFeature doesn't properly handle features that return $null
* Fixed [#258](https://github.com/Microsoft/PowerStig/issues/258): New-StigChecklist will not accept a path without an explicit filename
* Fixed [#243](https://github.com/Microsoft/PowerStig/issues/243): [V-46515] Windows-All-IE11-1.15 Rawstring typo
* Fixed [#289](https://github.com/Microsoft/PowerStig/issues/289): Updated DocumentRule and DocumentRuleConvert Classes to parse correctly.
* Fixed [#284](https://github.com/Microsoft/PowerStig/issues/284): [V-74415] [V-74413] Windows 10 STIG rule V-74415 and V-74413 should not contain white space in key
* Fixed [290](https://github.com/Microsoft/PowerStig/issues/290): [V-76731] IIS Server STIG V-76731 fails to properly set STIG guidance because rule is not split.
* Fixed [314](https://github.com/Microsoft/PowerStig/issues/314): Update PowerSTIG to Utilize LogTargetW3C parameter in xWebAdministration 2.5.0.0.
* Fixed [334](https://github.com/Microsoft/PowerStig/issues/334): Update PowerStig to utilize AccessControlDsc 1.3.0.0
* Fixed [331](https://github.com/Microsoft/PowerStig/issues/331): 2012/R2 [V-39325] 2016 [V-73373], [V-73389] PermissionRule.Convert CheckContent Match Parser Update
* Fixed [320](https://github.com/Microsoft/PowerStig/issues/320): IIS Site STIG doesn't correctly convert STIGS that contain "SSL Settings" in raw string
* Added the following STIGs
* IIS Site 8.5 V1R6 [#276](https://github.com/Microsoft/PowerStig/issues/276)
* Windows Firewall STIG V1R7 [#319](https://github.com/Microsoft/PowerStig/issues/319)
* Removed the following STIGs
* Windows Server 2012 R2 DC 2.12
* Windows Server 2012 R2 DSN 1.7
* Active Directory Domain 2.9
* IIS Server 8.5 1.3
* IIS Site 8.5 1.2
* Removed: Internet Explorer 1.13
## [2.4.0.0] - 2019-02-07
* Fixed [#244](https://github.com/Microsoft/PowerStig/issues/244): IIS Server rule V-76727.b org setting test fails
* Fixed [#246](https://github.com/Microsoft/PowerStig/issues/246): IIS Server rule V-76737 contains an incorrect value
* Fixed [#225](https://github.com/Microsoft/PowerStig/issues/225): Update PowerStig integration tests to consolidate duplicate code.
* Fixed [#160](https://github.com/Microsoft/PowerStig/issues/160): PowerStig.Convert needs to handle new registry rules without affecting existing code
* Fixed [#201](https://github.com/Microsoft/PowerStig/issues/201): Update PowerStig integration tests to account for skips and exceptions.
* Fixed [#260](https://github.com/Microsoft/PowerStig/issues/260): FireFox Composite Resource configuration applies correctly, but never passes a Test-DscConfiguration.
* Fixed [#244](https://github.com/Microsoft/PowerStig/issues/244): IIS Server rule V-76727.b org setting test fails
* Fixed [#265](https://github.com/Microsoft/PowerStig/issues/265): Fixed UserRightsAssignment split rule bug.
* Fixed [#267](https://github.com/Microsoft/PowerStig/issues/267): Fixed winlogon registry path parser bug.
* Fixed [#238](https://github.com/Microsoft/PowerStig/issues/238): Adds regex tracker for RegistryRule regex's.
* Fixed [#274](https://github.com/Microsoft/PowerStig/issues/274): UserRightsAssignment composite resource does not leverage the Force Parameter.
* Fixed [#280](https://github.com/Microsoft/PowerStig/issues/280): HKEY_CURRENT_USER is not needed with the cAdministrativeTemplateSetting composite resource.
* Windows Server 2012R2 Fixes
* V-36707 is now an org setting
* (DC only) V-2376 - V-2380 are migrated from manual to account policy rules.
* Added the following STIGs
* SQL Server 2016 Instance V1R3 [#186](https://github.com/Microsoft/PowerStig/issues/186)
* Windows Defender Antivirus V1R4 [#236](https://github.com/microsoft/PowerStig/issues/236)
* Mozilla Firefox V4R24 [#261](https://github.com/Microsoft/PowerStig/issues/261)
* Windows Server 2016 V1R6 [#169](https://github.com/Microsoft/PowerStig/issues/169)
* Windows Server 2016 V1R7 [#251](https://github.com/Microsoft/PowerStig/issues/251)
* SQL Server 2012 Database V1R18 [#263](https://github.com/Microsoft/PowerStig/issues/263)
* Windows Server 2012R2 DC V2R15 [#267](https://github.com/Microsoft/PowerStig/issues/267)
* Windows 10 V1R16 [#269](https://github.com/Microsoft/PowerStig/issues/269)
* IIS Server 8.5 V1R6 [#256](https://github.com/Microsoft/PowerStig/issues/266)
* Windows Server 2012R2 DNS V1R11 STIG [#265](https://github.com/Microsoft/PowerStig/issues/265)
* AD Domain V2R12 [#270](https://github.com/Microsoft/PowerStig/issues/270)
## [2.3.2.0] - 2018-12-18
* Fixed [#215](https://github.com/Microsoft/PowerStig/issues/215): Org settings wont apply for DotNet STIG
* Fixed [#216](https://github.com/Microsoft/PowerStig/issues/216): DotNet STIGs are misnamed
* Fixed [#207](https://github.com/Microsoft/PowerStig/issues/207): SQL Server Database rules fail to apply
* Fixed [#208](https://github.com/Microsoft/PowerStig/issues/208): Update PowerSTIG to use SQLServerDsc 12.1.0.0
* Fixed [#220](https://github.com/Microsoft/PowerStig/issues/220): Update PowerSTIG to use xWebAdministration 2.3.0.0
## [2.3.1.0] - 2018-12-07
* Fixed [#212](https://github.com/Microsoft/PowerStig/issues/212): SDDL strings are incorrectly split in the xRegistry resource
* Fixed [#180](https://github.com/Microsoft/PowerStig/issues/180): IisSite SkipRuleType and SkipRule fail to skip rules
## [2.3.0.0] - 2018-11-30
* Windows 10 Fixes
* V-63795 - Changed from manual to registry rule ## HIGH IMPACT CHANGE ##
* Windows Server 2012R2 Fixes
* V-1089 - Corrected text
* V-21954 - Changed from manual to registry rule ## HIGH IMPACT CHANGE ##
* V-26070 - Corrected key path
* V-36657 - Corrected key path
* V-36681 - Corrected key path
* Added the following STIGs
* IIS Server 8.5 STIG V1R5
* Microsoft Outlook 2013 STIG V1R13
* DotNet Framework 4.0 STIG V1R6
* IIS Site 8.5 STIG V1R5
* Windows Domain V2R11
* FireFox 4.23 STIG
* Windows Server 2012R2 DC V2R14
* Windows Server 2012R2 MS V2R14
* Windows 10 V1R15
## [2.2.0.0] - 2018-10-10
* Added the following STIGs
* IIS Site 8.5 STIG V1R2
* IIS Site 8.5 STIG V1R3
* Oracle JRE 8 STIG V1R5
* Microsoft Outlook 2013 STIG V1R12
* Microsoft PowerPoint 2013 Stig V1R6
* Microsoft Excel 2013 STIG V1R7
* Microsoft Word 2013 STIG V1R6
* Added the following DSC Composite Resources
* Microsoft Office 2013 STIGs
* FireFox STIG
* IIS Site STIG
* IIS Server STIG
* Oracle JRE STIG
* Windows10 STIG
* Newly required modules
* PolicyFileEditor
* FileContentDsc
* WindowsDefenderDSC
* xWebAdministration
* xWinEventLog
* Updated required module versions
* xDnsServer from 1.9.0.0 to 1.11.0.0
* SecurityPolicyDsc from 2.2.0.0 to 2.4.0.0
## [2.1.0.0] - 2018-09-05
* Migrated Composite resources to the xRegistry resource
* Fixed 2012R2 V-15713 default org setting value
* Updated IE STIGs (V-46477) with the decimal value
* Updated New-StigCheckList to output StigViewer 2.7.1 ckl files
* Added SkipRule functionality to all composite resources
* Added StigData for FireFox STIG V4R21
* Added Sql2012 1.17 to Archive and processed
* Updated Sql2012 1.16 to fix broken rules
* Removed Sql2012 1.14 from archives to comply with n-2 version policy
* Updated data for 2012R2 Stigs to fix broken rules
## [2.0.0.0] - 2018-08-17
* Added a Document module to automatically create a Stig Checklist (EXPERIMENTAL)
* Merged PowerStigDsc into PowerStig so there is only one module to maintain
* Replaced PowerStig Technology Class with Enumeration
* Added script module back to manifest
* Added DotNetFramework composite resource
* Added the following STIGs
* Windows Server 2012R2 MS STIG V2R13
* Windows Server 2012R2 DC STIG V2R13
* Windows 2012 DNS V1R10
* Windows Domain V2R10
* Windows Forest V2R8
* IE11-V1R16
* Corrected parsing of rule V-46477 in the IE STIGs
* Updated StigData
* Bug fixes
* Removed Windows Server 2012R2 MS and DC StigData v2.9
## [1.1.1.0] - 2018-08-13
Update IIS Server STIG V-76723.a with correct value
## [1.1.0.0] - 2018-07-29
Replaced Technology class with enumeration. This breaks PowerStigDsc < 1.1.0.0
Added the following STIGs:
* IIS 8.5 Server STIG V1R3
Updates
* Updated SQL STIG code to account for SQL STIGS being added in PowerStigDsc
* Update to PowerStig.psm1 to fix issue were StigData class was not accessible to PowerStigDsc
## [1.0.0.0] - 2018-07-01
Added the following STIGs:
* Windows Server 2012R2 MS STIG V2R12
* Windows Server 2012R2 DC STIG V2R12
* Windows Server DNS V1R9
* Windows AD Domain V2R9
* IE11 V1R15