Watchmaker

Latest version: v0.29.2

Safety actively analyzes 723650 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 40

2023.03.31

**Summary**:

* Releases support for EL8 platforms, to include Red Hat 8, CentOS 8 Stream, and
Oracle Linux 8. Future work may also add support for Rocky Linux 8 and Alma
Linux 8
- CAVEAT: With this release, on FIPS-enabled EL8 systems, please use the
[PyPi install or the source install methods](https://watchmaker.cloudarmor.io/en/stable/installation.html).
Currently, the standalone method for EL8 **does not** work when the system
is FIPS-enabled. The problem is not yet entirely understood. Further investigation
is needed before this issue can be resolved
- UPDATE: The issue with FIPS-enabled EL8 and the standalone binary is fixed
in Watchmaker 0.27.3
* Updates salt worker to avoid re-installing salt when `salt-call --version`
matches the `salt_version` in the Watchmaker config
* Updates EL7 findings documentation to line up with latest stig version
* Installs `dnspython` package when using default Watchmaker config, to support
the join-domain `nsupdate` state
* ash-linux-formula
- Adds handlers to address findings in latest stig versions and increase coverage
* mcafee-agent-formula
- Adds a `trellix-agent` salt state to support the new name for the software
* join-domain-formula
- Linux: Adds an `nsupdate` salt state that will register forward and reverse
dns records
- Windows: Updates collision handling and join actions to use the same domain
controller
- Windows: Supports collision handling where an existing computer object
was created by a different service account than is now specified for the
join action
* winrepo: Adds a `trellix-agent` package definition

2023.03.10

**Summary**:

* join-domain-formula
- Linux: Output journald logs on join-domain failures
- Linux: Re-order sssd conf file Salt states and explicitly set replace setting to false
- Linux: Patch find-collision.sh script to fix computer-object search

2023.03.03

**Summary**:

* Attempts to fix the release automation so the Windows standalone is published
to GitHub Releases
* Validates functionality with salt 3005.1 and updates default config to use
salt 3005.1
* join-domain-formula
- Windows: Provides pillar options to configure DNS registration settings,
to support registration of reverse DNS records

2023.02.27

**Summary**:

* Skips provider detection when provider requirements are not installed
* Updates watchmaker salt log config to avoid capturing senstive data in salt log
* forescout-secure-connector-formula
- Adds support for EL8 when FIPS is enabled
* name-computer-formula
- Sets hostname as fqdn when `dns_domain` is provided
* join-domain-formula
- Runs fix-collision script when using sssd
- Updates fix-collision to avoid capturing sensitive values in salt log
- Updates sssd method to set extra os attributes only when requested
- Updates windows join script to avoid capturing sensitive values in salt log

2023.02.13

**Summary**:

* Fixes publishing of Windows standalone to GitHub Releases
* docs
- Provides guidance on using S3 URL feature in config references
- Describes prerequisites for using AWS and Azure features
- Removes references to EL6 and Python 2.6
- Removes references to deprecated `--s3-url` argument
* join-domain-formula
- Adds support for EL8, using `sssd` to perform the domain-join

2023.02.08

**Summary**:

* Uses pyinstaller directly to build standalone packages, eliminating dependency
on gravitybee
* Uses new python apis to reference package metadata and resources, improving
support for alternative packaging methods, like in-memory runtimes (pyoxidizer)
or ziparchives
* Adds PEP517 package metadata
* [Alpha] Allows watchmaker to run on Red Hat Enterprise Linux 8, Centos 8 Stream,
Oracle Linux 8, Alma Linux 8, and Rocky Linux 8. Currently on the ash-linux
hardening formula will work; none of the other salt formulas have yet been
updated for EL8 support
* ash-windows
- Fixes warning in `lgpo` module about using `is` instead of `==` to compare
string-literal values

Page 3 of 40

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.