Skip to content

Releases: elysium-suite/aeacus

v2.1.1

25 Aug 20:31
Compare
Choose a tag to compare
Uncommitted fix + version bump to fix the resultant bug

v2.1.0

22 Aug 01:48
5f4c9fb
Compare
Choose a tag to compare
Added hints feature + some breaking regex changes

v2.0.6

14 Jan 18:59
Compare
Choose a tag to compare
Update version to 2.0.6

v2.0.5

28 Dec 19:06
e66cfd5
Compare
Choose a tag to compare
Add firewalld/dnf-automatic/RPM support for Fedora (#160)

* Add firewalld/dnf-automatic support for Fedora

* RPM based packages for ProgramInstalled

* Fixed previous commit

Co-authored-by: Akshay Rohatgi <52616034+Akshay-Rohatgi@users.noreply.github.com>

v2.0.4

27 Oct 09:27
Compare
Choose a tag to compare
Fix out-of-bounds for UserInGroup on Windows

v2.0.3

05 Oct 03:53
dc02ae9
Compare
Choose a tag to compare
Add warnings for possible mistakes (#152)

I definitely haven't spent any time at all being confused by these or
anything like that. 0 time whatsoever.

Anyway, if someone else makes a mistake like this, the new warnings
could serve as a hint that something is wrong.

v2.0.2

22 Aug 00:50
Compare
Choose a tag to compare

Add FirewallDefaultBehavior check

v2.0.1

07 Aug 22:36
Compare
Choose a tag to compare
Adds 4 new user properties to the UserDetail check. (#146)

* Adds 4 new user properties to the UserDetail check.

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Add modifier check type

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Updated documentation to match the "modifier" field

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Updated to ensure that users know time should be in UTC

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Removed debug lines

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Removed the modifier field and switched to a comparison value split system.

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Made comparison stricter, reducing edge cases.

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Handled more errors, optimized some code.

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Fixed error handling inversion

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* fixed documentational wording

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

* Removed false positive

Signed-off-by: Mobmaker <45888585+Mobmaker55@users.noreply.github.com>

v2.0.0

26 Jun 19:17
Compare
Choose a tag to compare
Param handing rework and general refactor (#138)

* Update documentation

* Update README

* Remove extraneous/outdated files

* Update checks documentation and tests

* Refactor for simplicity

This commit changes a lot. Essentially, it's a migration away from the
shoe-horned module structure we had before (cmd), since it doesn't
really make sense for us to split into submodules with a relatively
small project.

It's also using a struct with more descriptive fields for all the
checks, which also permits us to use reflection to call the functions
rather than the grotesque case statements.

* Use compilation directive, and add cli options

This permits people to use directories other than /opt and C:\ when
testing aeacus.

* Fix path to stopscoring.sh

* Reduce redundancy in gen-crypto

* Update build file go version

* Fix crypto failing on some checks (UserExists)

This was annoying. I was using XOR as the final operation after AES,
which I can only assume caused issues with some bytes when XOR'd again
and decrypted with AES-GCM. The solution was to put AES-GCM as the final
operation, which is also just smarter, since it's an authenticated cipher.

This commit also refactors readData() into readScoringData(), since the
abstraction there wasn't used anywhere else.

* Update go modules and remove verbose messages

* Restore crypto.go after make release

* Don't count penalties as scored vulnerabilities

* Simplify check status handling, fix typos

* Remove condition fields, implement param checking

There's now a function that will check that the required parameters are
being used for a check.

* Remove extraneous printing of variable

* Changelog and compatibility aliases

* Fix build issue arising from `checkTrace`

* Add more compiling and crypto information

* Rewrite crypto.md to be more approachable

* Don't use magic numbers in negation check

* Fix info types in README

* Add inline SecurityPolicy check documentation

* Refactored shell feature (#139)

* linux shell revamp, proof of concept

* windows shell revamp, proof of concept using conpty

* add shell goroutine to runtime

* remove old shell functionality

* modified shell code to work with new refactor

* Use implicit build directives for shell

* Add PasswordHistorySize to ranged SecPol checks

Thanks to KaliPatriot for pointing this fix out.

* Use upstream constants for BitLocker

* Remove destroyImage functionality, update Go

* Add regex documentation

* Added sour's changes + linted them.

Co-authored-by: Safin Singh <safin.singh@gmail.com>
Co-authored-by: Alvin Zheng <47834226+alvinzhengq@users.noreply.github.com>
Co-authored-by: mob <45888585+Mobmaker55@users.noreply.github.com>

v1.8.3

07 Aug 21:57
Compare
Choose a tag to compare
Handle disabled state sarp (#125)