# changelog

author: Support <support@atomicorp.com> - 2.2.0
changelog:
  - Add ClamAV compliance checks
  - Add Ubuntu and Debian specific compliance content support
  - Fixed firewall module rich rule handling for proper action case (lowercase)
  - Improved firewall module debugging and logging
  - Fixed SSH access handling in firewall rules
  - Added better error handling for firewall rule application


author: Support <support@atomicorp.com> - 2.5.0
changelog:
  - strip the compliance-scanner binary to reduce its size
  - Fix for ubuntu postinstall to apply sca files
  - Fix for clamav range, moved from 281xx to 481xx, this overlapped with RHEL9
  - Add Rocky 9 benchmark
  - Add command support to compliance-scanner
  - Add summary result to compliance-scanner
  - Add -failed to compliance-scanner, this will only show the failed results, otherwise tests that pass will be displayed with "passed"
  - Update for ASL Issue#1284, this is to add remote upgrade support into the UI
  - add Debian 12 benchmark
  - postinst on deb systems target content adding based on OS version
  - firewall module, only run on rhel/centos/rocky
  - atomicorp-functions, add detection for u24
  - Update ubuntu 14/16/18 CIS checks to detect the version of the OS before running
  - Disable the Ubuntu 18 NX test, as this was dumping the entrie journalctl to the SCA's memory


author: Support <support@atomicorp.com> - 2.6.0
changelog:
  - compliance-scanner, add parallel scanning, file caching, and configurable max size limit scanning (8k default)


author: Support <support@atomicorp.com> - 2.7.0
changelog:
  - firewall module, integration with the global whitelisting policy from the server
  - firewall module, add support for windows


author: Support <support@atomicorp.com> - 2.8.0
changelog:
  - active-response: add ipset-based active response script (awp-ipset.sh)
  - awp-ipset.sh: accept stdin JSON input like awp-firewall-drop.sh
  - compliance-scanner: add Rocky Linux 10 benchmark
  - compliance-scanner: add Rocky Linux 9 benchmark
  - compliance-scanner: add Rocky Linux 8 benchmark


author: Support <support@atomicorp.com> - 2.9.0
changelog:
  - AIX: Add support for AWPclamav in /opt/atomicorp
  - AIX: Fix sed compatibility using perl wrapper
  - AIX: Update malware-scanner path detection
  - Add Enterprise Linux 10 (el10) support
  - compliance-scanner: add Rocky Linux 10 benchmark


author: Support <support@atomicorp.com> - 2.9.2
changelog:
  - active-response: Enhance awp-firewall-drop.sh with white-list support and IP validation
  - retention: Update diff-retention-check.sh with date-based logging for rotation
  - atomicorp-api: Fix JSON parsing for manual commands (upgrade/install)
  - atomicorp-api: Add check_repository function to verify repo presence before updates
  - active-response: Normalize service names during restart (ossec-hids vs ossec-agent)


author: Support <support@atomicorp.com> - 2.9.3
changelog:
  - active-response: Fix premature service restart in atomicorp-api
  - retention: Add date-based logging for rotation in diff-retention-check.sh
  - clamav: Add /var/clamav and /var/lib/clamav as permanent excludes


author: Support <support@atomicorp.com> - 2.9.4
changelog:
  - active-response: Integrate ossec-execd dedup handshake (check_keys + phase2 abort) in atomicorp-api, malware-scan.sh, and atomic-isolate.ps1
  - clamav: Remove SCA check 48170 and clam_configuration_check.sh (wrong approach for config parity)
  - retention: diff-retention-check.sh — /var/ossec/logs, DEBUG=1 for file logging, chmod 755 on install; ASL_v6 issue #1509


author: Support <support@atomicorp.com> - 2.8.1-47
changelog:
  - Update to 2.8.1. This is identical to 2.8.0-46, the only change is the hosts.deny CVE-2014-5284 is merged in.


