aeacus Changelog

What's new in aeacus 2.1.1

Aug 26, 2023
  • Uncommitted fix + version bump to fix the resultant bug

New in aeacus 2.1.0 (Aug 22, 2023)

  • Added hints feature + some breaking regex changes

New in aeacus 2.0.5 (Dec 28, 2022)

  • Add firewalld/dnf-automatic/RPM support for Fedora (#160)
  • Add firewalld/dnf-automatic support for Fedora
  • RPM based packages for ProgramInstalled
  • Fixed previous commit

New in aeacus 2.0.4 (Oct 27, 2022)

  • Fix out-of-bounds for UserInGroup on Windows

New in aeacus 2.0.3 (Oct 5, 2022)

  • Add warnings for possible mistakes (#152)
  • I definitely haven't spent any time at all being confused by these or
  • anything like that. 0 time whatsoever.
  • Anyway, if someone else makes a mistake like this, the new warnings
  • could serve as a hint that something is wrong.

New in aeacus 2.0.2 (Aug 22, 2022)

  • Add FirewallDefaultBehavior check

New in aeacus 2.0.1 (Aug 8, 2022)

  • Adds 4 new user properties to the UserDetail check.
  • Add modifier check type
  • Updated documentation to match the "modifier" field
  • Updated to ensure that users know time should be in UTC
  • Removed debug lines
  • Removed the modifier field and switched to a comparison value split system.
  • Made comparison stricter, reducing edge cases.
  • Handled more errors, optimized some code.
  • Fixed error handling inversion
  • Fixed documentational wording
  • Removed false positive

New in aeacus 2.0.0 (Jun 27, 2022)

  • Param handing rework and general refactor (#138)
  • Update documentation
  • Update README
  • Remove extraneous/outdated files
  • Update checks documentation and tests
  • Refactor for simplicity
  • This commit changes a lot. Essentially, it's a migration away from the
  • Shoe-horned module structure we had before (cmd), since it doesn't
  • Really make sense for us to split into submodules with a relatively
  • Small project.
  • It's also using a struct with more descriptive fields for all the
  • Checks, which also permits us to use reflection to call the functions
  • Rather than the grotesque case statements.
  • Use compilation directive, and add cli options
  • This permits people to use directories other than /opt and C: when
  • Testing aeacus.
  • Fix path to stopscoring.sh
  • Reduce redundancy in gen-crypto
  • Update build file go version
  • Fix crypto failing on some checks (UserExists)
  • This was annoying. I was using XOR as the final operation after AES,
  • Which I can only assume caused issues with some bytes when XOR'd again
  • And decrypted with AES-GCM. The solution was to put AES-GCM as the final
  • Operation, which is also just smarter, since it's an authenticated cipher.
  • This commit also refactors readData() into readScoringData(), since the
  • Abstraction there wasn't used anywhere else.
  • Update go modules and remove verbose messages
  • Restore crypto.go after make release
  • Don't count penalties as scored vulnerabilities
  • Simplify check status handling, fix typos
  • Remove condition fields, implement param checking
  • There's now a function that will check that the required parameters are
  • Being used for a check.
  • Remove extraneous printing of variable
  • Changelog and compatibility aliases
  • Fix build issue arising from `checkTrace`
  • Add more compiling and crypto information
  • Rewrite crypto.md to be more approachable
  • Don't use magic numbers in negation check
  • Fix info types in README
  • Add inline SecurityPolicy check documentation
  • Refactored shell feature (#139)
  • Linux shell revamp, proof of concept
  • Windows shell revamp, proof of concept using conpty
  • Add shell goroutine to runtime
  • Remove old shell functionality
  • Modified shell code to work with new refactor
  • Use implicit build directives for shell
  • Add PasswordHistorySize to ranged SecPol checks
  • Thanks to KaliPatriot for pointing this fix out.
  • Use upstream constants for BitLocker
  • Remove destroyImage functionality, update Go
  • Add regex documentation
  • Added sour's changes + linted them.

New in aeacus 1.8.3 (Aug 7, 2021)

  • Handle disabled state sarp (#125)

New in aeacus 1.8.2 (Jul 11, 2021)

  • CSSClient service scheduled task (#121)

New in aeacus 1.8.1 (May 28, 2021)

  • fix: restrict ProgramVersion to eq mode (#116)