Watchmaker

Latest version: v0.29.2

Safety actively analyzes 723685 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 18 of 40

2017.05.09

**Summary**:

* (EL7) Running _watchmaker_ against EL7 systems will now pin the resulting
configuration to the watchmaker version. See the updates to the two
formulas in this version. Previously, _ash-linux_ always used the content
from the `scap-security-guide` rpm, which was updated out-of-sync with
_watchmaker_, and so the resulting configuration could not be pinned by
pinning the _watchmaker_ version. With this version, _ash-linux_ uses
content distributed by _watchmaker_, via _scap-formula_, and so the
resulting configuration will always be same on EL7 for a given version of
_watchmaker_ (as has always been the case for the other supported
operating systems).
* ash-linux-formula
* Supports getting scap content locations from pillar
* scap-formula
* Updates stig content with latest benchmark versions
* Adds openscap ds.xml content, used to support remediate actions

2017.05.06

**Summary**:

* [[PR 286 ][286]] Sets the computername grain with the correct key expected
by the formula
* [[PR 284 ][284]] Converts cli argument parsing from `argparse` to `click`.
This modifies the `watchmaker` depedencies, which warranted a 0.x.0 version
bump. Cli and API arguments remain the same, so the change should be
backwards-compatible.
* name-computer-formula
* Adds support for getting the computername from pillar
* Adds support for validating the specified computername against a
pattern
* pshelp-formula
* Attempts to address occasional stack overflow exception when updating
powershell help

[286]: https://github.com/plus3it/watchmaker/pull/286
[284]: https://github.com/plus3it/watchmaker/pull/284

2017.05.01

**Summary**:

* [[PR 280][280]] Modifies the dynamic import of boto3 to use only absolute
imports, as the previous approach (attempt absolute and relative import)
was deprecated in Python 3.3
* ntp-client-windows-formula:
* Stops using deprecated arguments on reg.present states, which cleans up
extraneous log messages in watchmaker runs under some configurations
* join-domain-formula:
* (Windows) Sets the DNS search suffix when joining the domain, including
a new pillar config option, `ec2config` to enable/disable the EC2Config
option that also modifies the DNS suffix list.

[280]: https://github.com/plus3it/watchmaker/pull/280

2017.04.24

**Summary**:

* [[Issue 270][270]] Defaults to a platform-specific log directory when
call from the CLI:
* Windows: `${Env:SystemDrive}\Watchmaker\Logs`
* Linux: `/var/log/watchmaker`
* [[PR 271][271]] Modifies CLI arguments to use explicit log-levels rather
than a verbosity count. Arguments have been adjusted to better accommodate
the semantics of this approach:
* Uses `-l|--log-level` instead of `-v|--verbose`
* `-v` and `-V` are now both used for `--version`
* `-d` is now used for `--log-dir`

[271]: https://github.com/plus3it/watchmaker/pull/271
[270]: https://github.com/plus3it/watchmaker/issues/270

2017.04.20

**Summary**:

* [[Issue 262][262]] Merges lists in pillar files, rather than overwriting
them
* [[Issue 261][261]] Manages the enabled/disabled state of the salt-minion
service, before and after the install
* splunkforwarder-formula
* (Windows) Ignores false bad exits from Splunk clone-prep-clear-config

[262]: https://github.com/plus3it/watchmaker/issues/262
[261]: https://github.com/plus3it/watchmaker/issues/261

2017.04.15

**Summary**:

* [[PR 251][251]] Adds CloudFormation templates that integrate Watchmaker
with an EC2 instance or Autoscale Group
* join-domain-formula
* (Linux) Corrects tests that determine whether the instance is already
joined to the domain

[251]: https://github.com/plus3it/watchmaker/pull/251

Page 18 of 40

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.