Skip to content

Latest commit

 

History

History
254 lines (199 loc) · 13 KB

HISTORIC_CHANGELOG.md

File metadata and controls

254 lines (199 loc) · 13 KB
Raw

Historic change log for PowerSTIG

The release notes in the PowerShell Module manifest cannot exceed 10000 characters. Due to a bug in the CI deploy pipeline this is not handled. This file is to temporary move the older change log history to keep the change log short.

[3.3.0] - 2019-08-12

UPDATES

  • Fixed #419: PowerStig is creating resource xSSLSettings with the wrong value for Name.
  • Updated PowerSTIG to leverage AuditSetting instead of the Script resource. Additionally renamed WmiRule to AuditSettingRule #431

Added the following STIG

  • Added support for Windows 10, Version 1, Release 17 #442
  • Added support for Windows Defender, Version 1, Release 5 #393
  • Added support for Internet Explorer 11 Version 1, Release 17 #422
  • Added support for Server 2016 STIG, Version 1, Release 8 #418

[3.2.0] - 2019-05-24

  • Added support for IIS 8.5 Server STIG, Version 1, Release 7 #399
  • Fixed #373: Registry resource does not handle null values for ValueData contained in Processed STIGs
  • Fixed #376: SQL STIG Rules V-41021 (Instance STIG) and V-41402 (Database STIG) fail to apply when applying to a SQL instance that is NOT name the default (MSSQLSERVER).
  • Fixed #377: SQL Instance Rule V-40936 fails when Set-TargertResource is ran
  • Fixed #280: HKEY_CURRENT_USER is not needed with the cAdministrativeTemplateSetting composite resource. (Regression Issue)
  • Fixed #385: IIS Server STIG V-76681 does not parse correctly
  • Added support for Office 2016 STIGs #370
  • Added support to Automate Application Pool Recycling for IisSite_8.5 #378
  • Added support for Windows Server 2012R2 DC V2R16 #398
  • Added support for update Windows Server 2012 MS STIG v2r15 #395
  • Added support for Firefox STIG v4r25 #389
  • Added entry in log file for IISSite 1.7 so rule v-76819 parses as an xWebConfigurationProperty #407
  • Added IISSite v1.7 #400
  • Fixed #403: DotNet STIG V1R7 update

[3.1.0] - 2019-04-01

UPDATES

  • Removed duplicate code from rule class constructors
  • Migrated from Get-WmiObject to Get-CimInstance to support PowerShell Core
  • Migrated to PSDscResources #345
  • Migrated to ComputerManagementDsc #342
  • Fixed #358: Update PowerSTIG Duplicate Rule handling and capability

Added the following STIG

  • Windows Defender V1R4 #344

[3.0.1] - 2019-03-11

  • Fixed #350: Updates to fix Skip rules not working correctly
  • Fixed #348: Update to DnsServer Schema to correct typo.

[3.0.0] - 2019-03-01

  • Introduces class support for each rule type
  • The STIG class now contains an array of rule objects vs xml elements
  • Orgsettings, Exceptions, and Rule skips are all supported by the Rule base class
  • Rule help is provided for any loaded rule.
    • See the wiki for more information.
  • Major code refactor to simplify maintenance and usage
  • [Breaking Change] The STIG class constructor no longer accepts Orgsettings, Exceptions, or Rule skips
    • That functionality has move to the load rule method
  • DSC composite resource parameter validation for version numbers has been removed
    • The STIG class validates all input and will throw an error if invalid data is provided.
  • The Get-StigList has be updated and renamed to Get-Stig to return the STIG class

UPDATES

  • Fixed #241: [WindowsFeatureRule] PsDesiredStateConfiguration\WindowsOptionalFeature doesn't properly handle features that return $null

  • Fixed #258: New-StigChecklist will not accept a path without an explicit filename

  • Fixed #243: [V-46515] Windows-All-IE11-1.15 Rawstring typo

  • Fixed #289: Updated DocumentRule and DocumentRuleConvert Classes to parse correctly.

  • Fixed #284: [V-74415] [V-74413] Windows 10 STIG rule V-74415 and V-74413 should not contain white space in key

  • Fixed 290: [V-76731] IIS Server STIG V-76731 fails to properly set STIG guidance because rule is not split.

  • Fixed 314: Update PowerSTIG to Utilize LogTargetW3C parameter in xWebAdministration 2.5.0.0.

  • Fixed 334: Update PowerStig to utilize AccessControlDsc 1.3.0.0

  • Fixed 331: 2012/R2 [V-39325] 2016 [V-73373], [V-73389] PermissionRule.Convert CheckContent Match Parser Update

  • Fixed 320: IIS Site STIG doesn't correctly convert STIGS that contain "SSL Settings" in raw string

  • Added the following STIGs

    • IIS Site 8.5 V1R6 #276
    • Windows Firewall STIG V1R7 #319

  • Removed the following STIGs

    • Windows Server 2012 R2 DC 2.12
    • Windows Server 2012 R2 DSN 1.7
    • Active Directory Domain 2.9
    • IIS Server 8.5 1.3
    • IIS Site 8.5 1.2
    • Removed: Internet Explorer 1.13

[2.4.0.0] - 2019-02-07

  • Fixed #244: IIS Server rule V-76727.b org setting test fails

  • Fixed #246: IIS Server rule V-76737 contains an incorrect value

  • Fixed #225: Update PowerStig integration tests to consolidate duplicate code.

  • Fixed #160: PowerStig.Convert needs to handle new registry rules without affecting existing code

  • Fixed #201: Update PowerStig integration tests to account for skips and exceptions.

  • Fixed #260: FireFox Composite Resource configuration applies correctly, but never passes a Test-DscConfiguration.

  • Fixed #244: IIS Server rule V-76727.b org setting test fails

  • Fixed #265: Fixed UserRightsAssignment split rule bug.

  • Fixed #267: Fixed winlogon registry path parser bug.

  • Fixed #238: Adds regex tracker for RegistryRule regex's.

  • Fixed #274: UserRightsAssignment composite resource does not leverage the Force Parameter.

  • Fixed #280: HKEY_CURRENT_USER is not needed with the cAdministrativeTemplateSetting composite resource.

  • Windows Server 2012R2 Fixes

    • V-36707 is now an org setting
    • (DC only) V-2376 - V-2380 are migrated from manual to account policy rules.

  • Added the following STIGs

    • SQL Server 2016 Instance V1R3 #186
    • Windows Defender Antivirus V1R4 #236
    • Mozilla Firefox V4R24 #261
    • Windows Server 2016 V1R6 #169
    • Windows Server 2016 V1R7 #251
    • SQL Server 2012 Database V1R18 #263
    • Windows Server 2012R2 DC V2R15 #267
    • Windows 10 V1R16 #269
    • IIS Server 8.5 V1R6 #256
    • Windows Server 2012R2 DNS V1R11 STIG #265
    • AD Domain V2R12 #270

[2.3.2.0] - 2018-12-18

  • Fixed #215: Org settings wont apply for DotNet STIG
  • Fixed #216: DotNet STIGs are misnamed
  • Fixed #207: SQL Server Database rules fail to apply
  • Fixed #208: Update PowerSTIG to use SQLServerDsc 12.1.0.0
  • Fixed #220: Update PowerSTIG to use xWebAdministration 2.3.0.0

[2.3.1.0] - 2018-12-07

  • Fixed #212: SDDL strings are incorrectly split in the xRegistry resource
  • Fixed #180: IisSite SkipRuleType and SkipRule fail to skip rules

[2.3.0.0] - 2018-11-30

  • Windows 10 Fixes

    • V-63795 - Changed from manual to registry rule ## HIGH IMPACT CHANGE ##

  • Windows Server 2012R2 Fixes

    • V-1089 - Corrected text
    • V-21954 - Changed from manual to registry rule ## HIGH IMPACT CHANGE ##
    • V-26070 - Corrected key path
    • V-36657 - Corrected key path
    • V-36681 - Corrected key path

  • Added the following STIGs

    • IIS Server 8.5 STIG V1R5
    • Microsoft Outlook 2013 STIG V1R13
    • DotNet Framework 4.0 STIG V1R6
    • IIS Site 8.5 STIG V1R5
    • Windows Domain V2R11
    • FireFox 4.23 STIG
    • Windows Server 2012R2 DC V2R14
    • Windows Server 2012R2 MS V2R14
    • Windows 10 V1R15

[2.2.0.0] - 2018-10-10

  • Added the following STIGs

    • IIS Site 8.5 STIG V1R2
    • IIS Site 8.5 STIG V1R3
    • Oracle JRE 8 STIG V1R5
    • Microsoft Outlook 2013 STIG V1R12
    • Microsoft PowerPoint 2013 Stig V1R6
    • Microsoft Excel 2013 STIG V1R7
    • Microsoft Word 2013 STIG V1R6

  • Added the following DSC Composite Resources

    • Microsoft Office 2013 STIGs
    • FireFox STIG
    • IIS Site STIG
    • IIS Server STIG
    • Oracle JRE STIG
    • Windows10 STIG

  • Newly required modules

    • PolicyFileEditor
    • FileContentDsc
    • WindowsDefenderDSC
    • xWebAdministration
    • xWinEventLog

  • Updated required module versions

    • xDnsServer from 1.9.0.0 to 1.11.0.0
    • SecurityPolicyDsc from 2.2.0.0 to 2.4.0.0

[2.1.0.0] - 2018-09-05

  • Migrated Composite resources to the xRegistry resource
  • Fixed 2012R2 V-15713 default org setting value
  • Updated IE STIGs (V-46477) with the decimal value
  • Updated New-StigCheckList to output StigViewer 2.7.1 ckl files
  • Added SkipRule functionality to all composite resources
  • Added StigData for FireFox STIG V4R21
  • Added Sql2012 1.17 to Archive and processed
  • Updated Sql2012 1.16 to fix broken rules
  • Removed Sql2012 1.14 from archives to comply with n-2 version policy
  • Updated data for 2012R2 Stigs to fix broken rules

[2.0.0.0] - 2018-08-17

  • Added a Document module to automatically create a Stig Checklist (EXPERIMENTAL)

  • Merged PowerStigDsc into PowerStig so there is only one module to maintain

    • Replaced PowerStig Technology Class with Enumeration
    • Added script module back to manifest
    • Added DotNetFramework composite resource

  • Added the following STIGs

    • Windows Server 2012R2 MS STIG V2R13
    • Windows Server 2012R2 DC STIG V2R13
    • Windows 2012 DNS V1R10
    • Windows Domain V2R10
    • Windows Forest V2R8
    • IE11-V1R16

  • Corrected parsing of rule V-46477 in the IE STIGs

    • Updated StigData
    • Bug fixes
    • Removed Windows Server 2012R2 MS and DC StigData v2.9

[1.1.1.0] - 2018-08-13

Update IIS Server STIG V-76723.a with correct value

[1.1.0.0] - 2018-07-29

Replaced Technology class with enumeration. This breaks PowerStigDsc < 1.1.0.0

Added the following STIGs:

  • IIS 8.5 Server STIG V1R3

Updates

  • Updated SQL STIG code to account for SQL STIGS being added in PowerStigDsc
  • Update to PowerStig.psm1 to fix issue were StigData class was not accessible to PowerStigDsc

[1.0.0.0] - 2018-07-01

Added the following STIGs:

  • Windows Server 2012R2 MS STIG V2R12
  • Windows Server 2012R2 DC STIG V2R12
  • Windows Server DNS V1R9
  • Windows AD Domain V2R9
  • IE11 V1R15