Audiobuzz 943f3e29ce tailoring: waive chronyd_server_directive — check-only companion of the secure_ntp NTP-server waivers (#17) ...

Its OVAL requires a literal ^server line in the baked chrony.conf, which can
never exist under secure_ntp: the fail-closed re-strip removes every static
server and the NTS source is derived at runtime into /run/chrony-dhcp. Surfaced
as the single REVIEW row on scan poam-hardening-4e9ab45 (the first full scan of
the post-secure-ntp merge).

2026-07-12 09:25:02 +00:00

..

agent

docs: reflect chrony/uptime metrics, agent-cert renewer, and the chrony-access findings

2026-07-10 22:45:00 +00:00

banner

Fix kiosk startup

2026-06-19 11:58:41 +00:00

dracut/95dot1x-macsec

nvmf: targeted per-version connect (rd.nvmf.nqn) instead of connect-all

2026-07-03 06:14:08 +00:00

enrol

tpm-enrol: move NV cert index off OEM-occupied 0x01800001 → 0x01800100

2026-07-03 02:51:38 +00:00

etc

secure-ntp: label /run/chrony-dhcp so chronyd can read the NTS source under SELinux

2026-07-12 02:53:05 +00:00

hostapi

Add Host API and fix kiosk performance

2026-06-28 03:14:25 +00:00

kiosk

Apply chromium policy hardening

2026-06-28 03:18:54 +00:00

plymouth/themes/fleet

tpm-enrol: inline empty-NV first-boot enrolment (host side, TODO #11)

2026-07-02 09:00:18 +00:00

secureboot

Fixed the secure boot enrollment script

2026-06-20 12:16:37 +00:00

ssh-hostcert

ssh-hostcert + enrol-broker: fix defects surfaced by the F-02 bench

2026-07-11 09:44:33 +00:00

stig

tailoring: waive chronyd_server_directive — check-only companion of the secure_ntp NTP-server waivers (#17)

2026-07-12 09:25:02 +00:00