Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Migrate PowerSTIG to Azure DevOps for Build, Test and Release Deployment #606

Merged
merged 13 commits into from
Apr 21, 2020
Merged

Migrate PowerSTIG to Azure DevOps for Build, Test and Release Deployment #606

Show file tree
Hide file tree
Changes from 11 commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
c891094
updated powerstig for dynamic versioning
bcwilhite Apr 9, 2020
58b3071
updated gitversion to reflect base version
bcwilhite Apr 9, 2020
3e6b07d
Merge remote-tracking branch 'origin/4.4.0' into bcwilhite#600v2
bcwilhite Apr 9, 2020
a53d302
updated if statement to adhere to style gls
bcwilhite Apr 9, 2020
7689b7b
updated code to adhere to sgl hqrmtest
bcwilhite Apr 13, 2020
89a7873
updated code to adhere to sgl hqrm tests
bcwilhite Apr 13, 2020
00e4da4
Merge remote-tracking branch 'origin/4.4.0' into bcwilhite#600v2
bcwilhite Apr 14, 2020
5b8ad27
updated code to adhere to sgl hqrm
bcwilhite Apr 14, 2020
12d602f
update yml files to support CICD pipeline
bcwilhite Apr 16, 2020
fc5fb4e
updated markdown function
bcwilhite Apr 16, 2020
60d8884
update change log structure
bcwilhite Apr 20, 2020
04c60c5
updated spacing via PR feedback
bcwilhite Apr 21, 2020
985b241
updated 2012R2 STIG after convert tests
bcwilhite Apr 21, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
248 changes: 0 additions & 248 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,251 +86,3 @@
* Updated logfile in DotNet Framework STIG leveraging HardCodedRule to automate additional STIG rules. [#454](https://github.com/microsoft/PowerStig/issues/454)
* Fixed [#493](https://github.com/microsoft/PowerStig/issues/493): IIS 8/5 Server STIG rule V-76745 is referencing the incorrect IIS default path
* Fixed [#505](https://github.com/microsoft/PowerStig/issues/505): Missing reg key setting on V-76759 IIS Server 8.5 v1R7

## [3.3.0] - 2019-08-12

UPDATES

* Fixed [#419](https://github.com/Microsoft/PowerStig/issues/419): PowerStig is creating resource xSSLSettings with the wrong value for Name.
* Updated PowerSTIG to leverage AuditSetting instead of the Script resource. Additionally renamed WmiRule to AuditSettingRule [#431](https://github.com/Microsoft/PowerStig/issues/431)

Added the following STIG

* Added support for Windows 10, Version 1, Release 17 [#442](https://github.com/microsoft/PowerStig/issues/442)
* Added support for Windows Defender, Version 1, Release 5 [#393](https://github.com/microsoft/PowerStig/issues/393)
* Added support for Internet Explorer 11 Version 1, Release 17 [#422](https://github.com/Microsoft/PowerStig/issues/422)
* Added support for Server 2016 STIG, Version 1, Release 8 [#418](https://github.com/Microsoft/PowerStig/issues/418)

## [3.2.0] - 2019-05-24

* Added support for IIS 8.5 Server STIG, Version 1, Release 7 [#399](https://github.com/Microsoft/PowerStig/issues/399)
* Fixed [#373](https://github.com/Microsoft/PowerStig/issues/373): Registry resource does not handle null values for ValueData contained in Processed STIGs
* Fixed [#376](https://github.com/Microsoft/PowerStig/issues/376): SQL STIG Rules V-41021 (Instance STIG) and V-41402 (Database STIG) fail to apply when applying to a SQL instance that is NOT name the default (MSSQLSERVER).
* Fixed [#377](https://github.com/Microsoft/PowerStig/issues/377): SQL Instance Rule V-40936 fails when Set-TargertResource is ran
* Fixed [#280](https://github.com/Microsoft/PowerStig/issues/280): HKEY_CURRENT_USER is not needed with the cAdministrativeTemplateSetting composite resource. (Regression Issue)
* Fixed [#385](https://github.com/Microsoft/PowerStig/issues/385): IIS Server STIG V-76681 does not parse correctly
* Added support for Office 2016 STIGs [#370](https://github.com/Microsoft/PowerStig/issues/370)
* Added support to Automate Application Pool Recycling for IisSite_8.5 [#378](https://github.com/Microsoft/PowerStig/issues/378)
* Added support for Windows Server 2012R2 DC V2R16 [#398](https://github.com/Microsoft/PowerStig/issues/398)
* Added support for update Windows Server 2012 MS STIG v2r15 [#395](https://github.com/Microsoft/PowerStig/issues/395)
* Added support for Firefox STIG v4r25 [#389](https://github.com/Microsoft/PowerStig/issues/389)
* Added entry in log file for IISSite 1.7 so rule v-76819 parses as an xWebConfigurationProperty [#407](https://github.com/microsoft/PowerStig/issues/407)
* Added IISSite v1.7 [#400](https://github.com/microsoft/PowerStig/issues/400)
* Fixed [#403](https://github.com/microsoft/PowerStig/issues/403): DotNet STIG V1R7 update

## [3.1.0] - 2019-04-01

UPDATES

* Removed duplicate code from rule class constructors
* Migrated from Get-WmiObject to Get-CimInstance to support PowerShell Core
* Migrated to PSDscResources [#345](https://github.com/Microsoft/PowerStig/issues/345)
* Migrated to ComputerManagementDsc [#342](https://github.com/Microsoft/PowerStig/issues/342)
* Fixed [#358](https://github.com/Microsoft/PowerStig/issues/358): Update PowerSTIG Duplicate Rule handling and capability

Added the following STIG

* Windows Defender V1R4 [#344](https://github.com/Microsoft/PowerStig/issues/344)

## [3.0.1] - 2019-03-11

* Fixed [#350](https://github.com/Microsoft/PowerStig/issues/350): Updates to fix Skip rules not working correctly
* Fixed [#348](https://github.com/Microsoft/PowerStig/issues/348): Update to DnsServer Schema to correct typo.

## [3.0.0] - 2019-03-01

* Introduces class support for each rule type
* The STIG class now contains an array of rule objects vs xml elements
* Orgsettings, Exceptions, and Rule skips are all supported by the Rule base class
* Rule help is provided for any loaded rule.
* See the [wiki](https://github.com/Microsoft/PowerStig/wiki/GettingRuleHelp) for more information.
* Major code refactor to simplify maintenance and usage
* [Breaking Change] The STIG class constructor no longer accepts Orgsettings, Exceptions, or Rule skips
* That functionality has move to the load rule method
* DSC composite resource parameter validation for version numbers has been removed
* The STIG class validates all input and will throw an error if invalid data is provided.
* The Get-StigList has be updated and renamed to Get-Stig to return the STIG class

UPDATES

* Fixed [#241](https://github.com/Microsoft/PowerStig/issues/241): [WindowsFeatureRule] PsDesiredStateConfiguration\WindowsOptionalFeature doesn't properly handle features that return $null
* Fixed [#258](https://github.com/Microsoft/PowerStig/issues/258): New-StigChecklist will not accept a path without an explicit filename
* Fixed [#243](https://github.com/Microsoft/PowerStig/issues/243): [V-46515] Windows-All-IE11-1.15 Rawstring typo
* Fixed [#289](https://github.com/Microsoft/PowerStig/issues/289): Updated DocumentRule and DocumentRuleConvert Classes to parse correctly.
* Fixed [#284](https://github.com/Microsoft/PowerStig/issues/284): [V-74415] [V-74413] Windows 10 STIG rule V-74415 and V-74413 should not contain white space in key
* Fixed [290](https://github.com/Microsoft/PowerStig/issues/290): [V-76731] IIS Server STIG V-76731 fails to properly set STIG guidance because rule is not split.
* Fixed [314](https://github.com/Microsoft/PowerStig/issues/314): Update PowerSTIG to Utilize LogTargetW3C parameter in xWebAdministration 2.5.0.0.
* Fixed [334](https://github.com/Microsoft/PowerStig/issues/334): Update PowerStig to utilize AccessControlDsc 1.3.0.0
* Fixed [331](https://github.com/Microsoft/PowerStig/issues/331): 2012/R2 [V-39325] 2016 [V-73373], [V-73389] PermissionRule.Convert CheckContent Match Parser Update
* Fixed [320](https://github.com/Microsoft/PowerStig/issues/320): IIS Site STIG doesn't correctly convert STIGS that contain "SSL Settings" in raw string

* Added the following STIGs
* IIS Site 8.5 V1R6 [#276](https://github.com/Microsoft/PowerStig/issues/276)
* Windows Firewall STIG V1R7 [#319](https://github.com/Microsoft/PowerStig/issues/319)

* Removed the following STIGs
* Windows Server 2012 R2 DC 2.12
* Windows Server 2012 R2 DSN 1.7
* Active Directory Domain 2.9
* IIS Server 8.5 1.3
* IIS Site 8.5 1.2
* Removed: Internet Explorer 1.13

## [2.4.0.0] - 2019-02-07

* Fixed [#244](https://github.com/Microsoft/PowerStig/issues/244): IIS Server rule V-76727.b org setting test fails
* Fixed [#246](https://github.com/Microsoft/PowerStig/issues/246): IIS Server rule V-76737 contains an incorrect value
* Fixed [#225](https://github.com/Microsoft/PowerStig/issues/225): Update PowerStig integration tests to consolidate duplicate code.
* Fixed [#160](https://github.com/Microsoft/PowerStig/issues/160): PowerStig.Convert needs to handle new registry rules without affecting existing code
* Fixed [#201](https://github.com/Microsoft/PowerStig/issues/201): Update PowerStig integration tests to account for skips and exceptions.
* Fixed [#260](https://github.com/Microsoft/PowerStig/issues/260): FireFox Composite Resource configuration applies correctly, but never passes a Test-DscConfiguration.
* Fixed [#244](https://github.com/Microsoft/PowerStig/issues/244): IIS Server rule V-76727.b org setting test fails
* Fixed [#265](https://github.com/Microsoft/PowerStig/issues/265): Fixed UserRightsAssignment split rule bug.
* Fixed [#267](https://github.com/Microsoft/PowerStig/issues/267): Fixed winlogon registry path parser bug.
* Fixed [#238](https://github.com/Microsoft/PowerStig/issues/238): Adds regex tracker for RegistryRule regex's.
* Fixed [#274](https://github.com/Microsoft/PowerStig/issues/274): UserRightsAssignment composite resource does not leverage the Force Parameter.
* Fixed [#280](https://github.com/Microsoft/PowerStig/issues/280): HKEY_CURRENT_USER is not needed with the cAdministrativeTemplateSetting composite resource.

* Windows Server 2012R2 Fixes
* V-36707 is now an org setting
* (DC only) V-2376 - V-2380 are migrated from manual to account policy rules.

* Added the following STIGs
* SQL Server 2016 Instance V1R3 [#186](https://github.com/Microsoft/PowerStig/issues/186)
* Windows Defender Antivirus V1R4 [#236](https://github.com/microsoft/PowerStig/issues/236)
* Mozilla Firefox V4R24 [#261](https://github.com/Microsoft/PowerStig/issues/261)
* Windows Server 2016 V1R6 [#169](https://github.com/Microsoft/PowerStig/issues/169)
* Windows Server 2016 V1R7 [#251](https://github.com/Microsoft/PowerStig/issues/251)
* SQL Server 2012 Database V1R18 [#263](https://github.com/Microsoft/PowerStig/issues/263)
* Windows Server 2012R2 DC V2R15 [#267](https://github.com/Microsoft/PowerStig/issues/267)
* Windows 10 V1R16 [#269](https://github.com/Microsoft/PowerStig/issues/269)
* IIS Server 8.5 V1R6 [#256](https://github.com/Microsoft/PowerStig/issues/266)
* Windows Server 2012R2 DNS V1R11 STIG [#265](https://github.com/Microsoft/PowerStig/issues/265)
* AD Domain V2R12 [#270](https://github.com/Microsoft/PowerStig/issues/270)

## [2.3.2.0] - 2018-12-18

* Fixed [#215](https://github.com/Microsoft/PowerStig/issues/215): Org settings wont apply for DotNet STIG
* Fixed [#216](https://github.com/Microsoft/PowerStig/issues/216): DotNet STIGs are misnamed
* Fixed [#207](https://github.com/Microsoft/PowerStig/issues/207): SQL Server Database rules fail to apply
* Fixed [#208](https://github.com/Microsoft/PowerStig/issues/208): Update PowerSTIG to use SQLServerDsc 12.1.0.0
* Fixed [#220](https://github.com/Microsoft/PowerStig/issues/220): Update PowerSTIG to use xWebAdministration 2.3.0.0

## [2.3.1.0] - 2018-12-07

* Fixed [#212](https://github.com/Microsoft/PowerStig/issues/212): SDDL strings are incorrectly split in the xRegistry resource
* Fixed [#180](https://github.com/Microsoft/PowerStig/issues/180): IisSite SkipRuleType and SkipRule fail to skip rules

## [2.3.0.0] - 2018-11-30

* Windows 10 Fixes
* V-63795 - Changed from manual to registry rule ## HIGH IMPACT CHANGE ##

* Windows Server 2012R2 Fixes
* V-1089 - Corrected text
* V-21954 - Changed from manual to registry rule ## HIGH IMPACT CHANGE ##
* V-26070 - Corrected key path
* V-36657 - Corrected key path
* V-36681 - Corrected key path

* Added the following STIGs
* IIS Server 8.5 STIG V1R5
* Microsoft Outlook 2013 STIG V1R13
* DotNet Framework 4.0 STIG V1R6
* IIS Site 8.5 STIG V1R5
* Windows Domain V2R11
* FireFox 4.23 STIG
* Windows Server 2012R2 DC V2R14
* Windows Server 2012R2 MS V2R14
* Windows 10 V1R15

## [2.2.0.0] - 2018-10-10

* Added the following STIGs
* IIS Site 8.5 STIG V1R2
* IIS Site 8.5 STIG V1R3
* Oracle JRE 8 STIG V1R5
* Microsoft Outlook 2013 STIG V1R12
* Microsoft PowerPoint 2013 Stig V1R6
* Microsoft Excel 2013 STIG V1R7
* Microsoft Word 2013 STIG V1R6

* Added the following DSC Composite Resources
* Microsoft Office 2013 STIGs
* FireFox STIG
* IIS Site STIG
* IIS Server STIG
* Oracle JRE STIG
* Windows10 STIG

* Newly required modules
* PolicyFileEditor
* FileContentDsc
* WindowsDefenderDSC
* xWebAdministration
* xWinEventLog

* Updated required module versions
* xDnsServer from 1.9.0.0 to 1.11.0.0
* SecurityPolicyDsc from 2.2.0.0 to 2.4.0.0

## [2.1.0.0] - 2018-09-05

* Migrated Composite resources to the xRegistry resource
* Fixed 2012R2 V-15713 default org setting value
* Updated IE STIGs (V-46477) with the decimal value
* Updated New-StigCheckList to output StigViewer 2.7.1 ckl files
* Added SkipRule functionality to all composite resources
* Added StigData for FireFox STIG V4R21
* Added Sql2012 1.17 to Archive and processed
* Updated Sql2012 1.16 to fix broken rules
* Removed Sql2012 1.14 from archives to comply with n-2 version policy
* Updated data for 2012R2 Stigs to fix broken rules

## [2.0.0.0] - 2018-08-17

* Added a Document module to automatically create a Stig Checklist (EXPERIMENTAL)
* Merged PowerStigDsc into PowerStig so there is only one module to maintain
* Replaced PowerStig Technology Class with Enumeration
* Added script module back to manifest
* Added DotNetFramework composite resource

* Added the following STIGs
* Windows Server 2012R2 MS STIG V2R13
* Windows Server 2012R2 DC STIG V2R13
* Windows 2012 DNS V1R10
* Windows Domain V2R10
* Windows Forest V2R8
* IE11-V1R16

* Corrected parsing of rule V-46477 in the IE STIGs
* Updated StigData
* Bug fixes
* Removed Windows Server 2012R2 MS and DC StigData v2.9

## [1.1.1.0] - 2018-08-13

Update IIS Server STIG V-76723.a with correct value

## [1.1.0.0] - 2018-07-29

Replaced Technology class with enumeration. This breaks PowerStigDsc < 1.1.0.0

Added the following STIGs:

* IIS 8.5 Server STIG V1R3

Updates

* Updated SQL STIG code to account for SQL STIGS being added in PowerStigDsc
* Update to PowerStig.psm1 to fix issue were StigData class was not accessible to PowerStigDsc

## [1.0.0.0] - 2018-07-01

Added the following STIGs:

* Windows Server 2012R2 MS STIG V2R12
* Windows Server 2012R2 DC STIG V2R12
* Windows Server DNS V1R9
* Windows AD Domain V2R9
* IE11 V1R15
Loading