/usr/bin/diffoscope --timeout 7200 --html /srv/reproducible-results/rbuild-debian/r-b-build.rcacOdWr/scap-security-guide_0.1.65-1.diffoscope.html --text /srv/reproducible-results/rbuild-debian/r-b-build.rcacOdWr/scap-security-guide_0.1.65-1.diffoscope.txt --json /srv/reproducible-results/rbuild-debian/r-b-build.rcacOdWr/scap-security-guide_0.1.65-1.diffoscope.json --profile=- /srv/reproducible-results/rbuild-debian/r-b-build.rcacOdWr/b1/scap-security-guide_0.1.65-1_amd64.changes /srv/reproducible-results/rbuild-debian/r-b-build.rcacOdWr/b2/scap-security-guide_0.1.65-1

⊟

52.8 MB

/srv/reproducible-results/rbuild-debian/r-b-build.rcacOdWr/b1/scap-security-guide_0.1.65-1_amd64.changes vs.

/srv/reproducible-results/rbuild-debian/r-b-build.rcacOdWr/b2/scap-security-guide_0.1.65-1_amd64.changes ¶

⊟

822 B

Files ¶

⊟

20.3 KB

ssg-applications_0.1.65-1_all.deb ¶

⊟

452 B

file list ¶

⊟

98.0 B

control.tar.xz ¶

⊟

70.0 B

control.tar ¶

⊟

48.0 B

./md5sums ¶

⊟

30.0 B

./md5sums ¶

Files differ

⊟

19.7 KB

data.tar.xz ¶

⊟

19.7 KB

data.tar ¶

⊟

1.99 KB

⊟

651 B

⊟

1.9 KB

⊟

698 B

⊟

1.88 KB

⊟

680 B

⊟

1.93 KB

⊟

730 B

⊟

1.4 KB

⊟

1.29 KB

⊟

1.38 KB

⊟

1.28 KB

⊟

1.17 KB

⊟

1.06 KB

⊟

1.42 KB

⊟

1.33 KB

⊟

1.41 KB

⊟

1.32 KB

⊟

1.25 KB

⊟

1.15 KB

⊟

1.38 KB

⊟

1.27 KB

⊟

1.36 KB

⊟

1.26 KB

⊟

1.17 KB

⊟

1.06 KB

⊟

2.5 MB

ssg-debderived_0.1.65-1_all.deb ¶

⊟

452 B

file list ¶

⊟

98.0 B

control.tar.xz ¶

⊟

70.0 B

control.tar ¶

⊟

48.0 B

./md5sums ¶

⊟

30.0 B

./md5sums ¶

Files differ

⊟

2.5 MB

data.tar.xz ¶

⊟

2.5 MB

data.tar ¶

⊟

2.02 KB

⊟

645 B

⊟

1.9 KB

⊟

667 B

⊟

1.87 KB

⊟

633 B

⊟

1.89 KB

⊟

642 B

⊟

1.98 KB

⊟

630 B

⊟

2.02 KB

⊟

645 B

⊟

1.9 KB

⊟

667 B

⊟

1.87 KB

⊟

633 B

⊟

1.89 KB

⊟

642 B

⊟

1.83 KB

⊟

625 B

⊟

1.98 KB

⊟

630 B

⊟

1.9 KB

⊟

665 B

⊟

1.92 KB

⊟

675 B

⊟

1.89 KB

⊟

659 B

⊟

1.91 KB

⊟

669 B

⊟

2.0 KB

⊟

654 B

⊟

2.0 KB

⊟

657 B

⊟

1.9 KB

⊟

665 B

⊟

1.92 KB

⊟

675 B

⊟

701 KB

⊟

163 KB

⊟

701 KB

⊟

164 KB

⊟

2.0 KB

⊟

654 B

⊟

133 KB

Ordering differences only

⊟

133 KB

Ordering differences only

⊟

1.43 KB

⊟

1.31 KB

⊟

1.41 KB

⊟

1.31 KB

⊟

1.24 KB

⊟

1.13 KB

⊟

1.44 KB

⊟

1.32 KB

⊟

1.42 KB

⊟

1.31 KB

⊟

1.24 KB

⊟

1.13 KB

⊟

1.43 KB

⊟

1.32 KB

⊟

1.42 KB

⊟

1.31 KB

⊟

1.24 KB

⊟

1.13 KB

⊟

282 KB

⊟

281 KB

⊟

282 KB

⊟

281 KB

⊟

281 KB

⊟

281 KB

⊟

27.4 KB

ssg-debian_0.1.65-1_all.deb ¶

⊟

452 B

file list ¶

⊟

98.0 B

control.tar.xz ¶

⊟

70.0 B

control.tar ¶

⊟

48.0 B

./md5sums ¶

⊟

30.0 B

./md5sums ¶

Files differ

⊟

26.8 KB

data.tar.xz ¶

⊟

26.8 KB

data.tar ¶

⊟

1.86 KB

⊟

629 B

⊟

1.87 KB

⊟

651 B

⊟

1.84 KB

⊟

614 B

⊟

1.86 KB

⊟

626 B

⊟

1.95 KB

⊟

611 B

⊟

1.86 KB

⊟

629 B

⊟

1.87 KB

⊟

651 B

⊟

1.84 KB

⊟

614 B

⊟

1.86 KB

⊟

626 B

⊟

1.95 KB

⊟

611 B

⊟

1.39 KB

⊟

1.28 KB

⊟

1.37 KB

⊟

1.27 KB

⊟

1.22 KB

⊟

1.12 KB

⊟

1.39 KB

⊟

1.28 KB

⊟

1.37 KB

⊟

1.27 KB

⊟

1.22 KB

⊟

1.12 KB

⊟

50.2 MB

ssg-nondebian_0.1.65-1_all.deb ¶

⊟

367 B

file list ¶

⊟

98.0 B

control.tar.xz ¶

⊟

70.0 B

control.tar ¶

⊟

48.0 B

./md5sums ¶

⊟

30.0 B

./md5sums ¶

Files differ

⊟

50.2 MB

data.tar.xz ¶

⊟

50.2 MB

data.tar ¶

⊟

24.1 KB

⊟

5.69 KB

⊟

24.0 KB

⊟

5.7 KB

⊟

1.86 KB

⊟

648 B

⊟

110 KB

⊟

25.5 KB

⊟

23.8 KB

⊟

5.74 KB

⊟

4.68 KB

⊟

1.68 KB

⊟

24.2 KB

⊟

5.63 KB

⊟

541 KB

⊟

134 KB

⊟

407 KB

⊟

100 KB

⊟

7.1 KB

⊟

1.76 KB

⊟

6.89 KB

⊟

1.76 KB

⊟

6.98 KB

⊟

1.76 KB

⊟

1.95 KB

⊟

588 B

⊟

836 KB

⊟

190 KB

⊟

91.1 KB

⊟

22.0 KB

⊟

91.5 KB

⊟

22.0 KB

⊟

837 KB

⊟

190 KB

⊟

533 KB

⊟

126 KB

⊟

32.1 KB

⊟

6.64 KB

⊟

357 KB

⊟

83.0 KB

⊟

920 KB

⊟

208 KB

⊟

437 KB

⊟

102 KB

⊟

31.9 KB

⊟

6.64 KB

⊟

804 KB

⊟

184 KB

⊟

28.1 KB

⊟

7.76 KB

⊟

399 KB

⊟

93.9 KB

⊟

750 KB

⊟

174 KB

⊟

746 KB

⊟

174 KB

⊟

1.98 KB

⊟

627 B

⊟

1.97 KB

⊟

619 B

⊟

2.0 KB

⊟

640 B

⊟

1.81 KB

⊟

594 B

⊟

76.6 KB

⊟

18.7 KB

⊟

76.3 KB

⊟

18.6 KB

⊟

76.6 KB

⊟

18.7 KB

⊟

76.3 KB

⊟

18.7 KB

⊟

1.83 KB

⊟

641 B

⊟

1.97 KB

⊟

647 B

⊟

16.9 KB

⊟

4.21 KB

⊟

1.84 KB

⊟

647 B

⊟

1.85 KB

⊟

658 B

⊟

17.1 KB

⊟

4.22 KB

⊟

14.4 KB

⊟

3.53 KB

⊟

14.3 KB

⊟

3.54 KB

⊟

1.18 MB

⊟

288 KB

⊟

790 KB

⊟

190 KB

⊟

510 KB

⊟

121 KB

⊟

1.89 KB

⊟

675 B

⊟

2.02 KB

⊟

685 B

⊟

1.88 KB

⊟

691 B

⊟

1.89 KB

⊟

703 B

⊟

2.04 KB

⊟

700 B

⊟

2.02 KB

⊟

697 B

⊟

2.04 KB

⊟

700 B

⊟

1.9 KB

⊟

697 B

⊟

1.91 KB

⊟

700 B

⊟

2.03 KB

⊟

697 B

⊟

1.91 KB

⊟

704 B

⊟

2.03 KB

⊟

697 B

⊟

1.84 KB

⊟

619 B

⊟

1.83 KB

⊟

619 B

⊟

1.86 KB

⊟

632 B

⊟

1.94 KB

⊟

586 B

⊟

1.99 KB

⊟

660 B

⊟

2.0 KB

⊟

673 B

⊟

1.83 KB

⊟

647 B

⊟

1.97 KB

⊟

641 B

⊟

1.82 KB

⊟

626 B

⊟

1.99 KB

⊟

664 B

⊟

1.97 KB

⊟

640 B

⊟

1.77 KB

⊟

575 B

⊟

1.83 KB

⊟

632 B

⊟

1.8 KB

⊟

609 B

⊟

1.96 KB

⊟

622 B

⊟

1.84 KB

⊟

619 B

⊟

1.83 KB

⊟

611 B

⊟

1.86 KB

⊟

632 B

⊟

1.81 KB

⊟

586 B

⊟

17.1 KB

⊟

4.23 KB

⊟

1.98 KB

⊟

654 B

⊟

1.83 KB

⊟

647 B

⊟

24.5 KB

⊟

6.06 KB

⊟

1.97 KB

⊟

645 B

⊟

17.0 KB

⊟

4.21 KB

⊟

1.83 KB

⊟

632 B

⊟

7.08 KB

⊟

1.77 KB

⊟

7.23 KB

⊟

1.78 KB

⊟

1.84 KB

⊟

619 B

⊟

1.83 KB

⊟

611 B

⊟

1.86 KB

⊟

632 B

⊟

1.94 KB

⊟

586 B

⊟

1.99 KB

⊟

662 B

⊟

1.83 KB

⊟

639 B

⊟

1.97 KB

⊟

641 B

⊟

1.84 KB

⊟

645 B

⊟

1.83 KB

⊟

634 B

⊟

1.83 KB

⊟

632 B

⊟

7.01 KB

⊟

1.7 KB

⊟

7.03 KB

⊟

1.71 KB

⊟

1.8 KB

⊟

592 B

⊟

1.87 KB

⊟

645 B

⊟

1.86 KB

⊟

637 B

⊟

1.89 KB

⊟

658 B

⊟

1.97 KB

⊟

606 B

⊟

1.83 KB

⊟

639 B

⊟

1.98 KB

⊟

649 B

⊟

2.0 KB

⊟

657 B

⊟

1.89 KB

⊟

684 B

⊟

777 KB

⊟

183 KB

⊟

6.98 KB

⊟

1.85 KB

⊟

7.04 KB

⊟

1.85 KB

⊟

7.06 KB

⊟

1.85 KB

⊟

1.86 KB

⊟

634 B

⊟

912 KB

⊟

216 KB

⊟

90.8 KB

⊟

22.1 KB

⊟

91.8 KB

⊟

22.1 KB

⊟

914 KB

⊟

216 KB

⊟

538 KB

⊟

133 KB

⊟

6.87 KB

⊟

1.7 KB

⊟

361 KB

⊟

87.5 KB

⊟

931 KB

⊟

219 KB

⊟

998 KB

⊟

237 KB

⊟

6.87 KB

⊟

1.7 KB

⊟

540 KB

⊟

133 KB

⊟

1.02 MB

⊟

246 KB

⊟

697 KB

⊟

166 KB

⊟

28.4 KB

⊟

7.92 KB

⊟

407 KB

⊟

99.0 KB

⊟

740 KB

⊟

176 KB

⊟

739 KB

⊟

176 KB

⊟

7.1 KB

⊟

1.76 KB

⊟

6.89 KB

⊟

1.76 KB

⊟

6.98 KB

⊟

1.77 KB

⊟

1.96 KB

⊟

600 B

⊟

834 KB

⊟

188 KB

⊟

91.3 KB

⊟

21.8 KB

⊟

91.3 KB

⊟

21.8 KB

⊟

833 KB

⊟

188 KB

⊟

532 KB

⊟

125 KB

⊟

32.0 KB

⊟

6.72 KB

⊟

357 KB

⊟

82.4 KB

⊟

918 KB

⊟

205 KB

⊟

437 KB

⊟

101 KB

⊟

32.1 KB

⊟

6.72 KB

⊟

802 KB

⊟

182 KB

⊟

27.7 KB

⊟

7.74 KB

⊟

401 KB

⊟

92.9 KB

⊟

744 KB

⊟

173 KB

⊟

746 KB

⊟

173 KB

⊟

1.99 KB

⊟

630 B

⊟

1.97 KB

⊟

622 B

⊟

2.01 KB

⊟

643 B

⊟

1.82 KB

⊟

597 B

⊟

76.8 KB

⊟

18.6 KB

⊟

76.3 KB

⊟

18.5 KB

⊟

76.2 KB

⊟

18.5 KB

⊟

76.9 KB

⊟

18.6 KB

⊟

1.88 KB

⊟

686 B

⊟

1.98 KB

⊟

650 B

⊟

16.8 KB

⊟

4.19 KB

⊟

1.85 KB

⊟

650 B

⊟

1.86 KB

⊟

661 B

⊟

17.0 KB

⊟

4.2 KB

⊟

14.5 KB

⊟

3.54 KB

⊟

14.6 KB

⊟

3.55 KB

⊟

1.97 KB

⊟

637 B

⊟

1.89 KB

⊟

689 B

⊟

1.88 KB

⊟

677 B

⊟

541 KB

⊟

134 KB

⊟

406 KB

⊟

100 KB

⊟

6.91 KB

⊟

1.78 KB

⊟

6.9 KB

⊟

1.77 KB

⊟

7.14 KB

⊟

1.79 KB

⊟

1.98 KB

⊟

617 B

⊟

812 KB

⊟

182 KB

⊟

23.8 KB

⊟

5.73 KB

⊟

23.4 KB

⊟

5.74 KB

⊟

811 KB

⊟

182 KB

⊟

923 KB

⊟

209 KB

⊟

926 KB

⊟

209 KB

⊟

1.91 KB

⊟

707 B

⊟

733 KB

⊟

165 KB

⊟

1.88 KB

⊟

650 B

⊟

1.86 KB

⊟

642 B

⊟

1.9 KB

⊟

663 B

⊟

1.98 KB

⊟

617 B

⊟

23.6 KB

⊟

5.54 KB

⊟

23.3 KB

⊟

5.52 KB

⊟

23.4 KB

⊟

5.53 KB

⊟

23.5 KB

⊟

5.56 KB

⊟

23.2 KB

⊟

5.58 KB

⊟

16.1 KB

⊟

3.9 KB

⊟

16.5 KB

⊟

3.9 KB

⊟

2.02 KB

⊟

660 B

⊟

1.89 KB

⊟

677 B

⊟

2.02 KB

⊟

682 B

⊟

1.84 KB

⊟

642 B

⊟

1.83 KB

⊟

625 B

⊟

9.93 KB

⊟

5.17 KB

⊟

7.07 KB

⊟

5.72 KB

⊟

10.4 KB

⊟

5.91 KB

⊟

10.1 KB

⊟

5.37 KB

⊟

10.7 KB

⊟

6.03 KB

⊟

3.92 KB

Ordering differences only

⊟

3.93 KB

Ordering differences only

⊟

25.9 KB

Ordering differences only

⊟

4.03 KB

Ordering differences only

⊟

3.93 KB

Ordering differences only

⊟

109 KB

Ordering differences only

⊟

85.0 KB

Ordering differences only

⊟

866 B

Ordering differences only

⊟

858 B

Ordering differences only

⊟

874 B

Ordering differences only

⊟

169 KB

Ordering differences only

⊟

15.4 KB

Ordering differences only

⊟

15.4 KB

Ordering differences only

⊟

169 KB

Ordering differences only

⊟

101 KB

Ordering differences only

⊟

3.57 KB

Ordering differences only

⊟

69.7 KB

Ordering differences only

⊟

181 KB

Ordering differences only

⊟

86.8 KB

Ordering differences only

⊟

3.57 KB

Ordering differences only

⊟

160 KB

Ordering differences only

⊟

3.93 KB

Ordering differences only

⊟

78.9 KB

Ordering differences only

⊟

131 KB

Ordering differences only

⊟

131 KB

Ordering differences only

⊟

13.2 KB

Ordering differences only

⊟

13.2 KB

Ordering differences only

⊟

13.2 KB

Ordering differences only

⊟

13.3 KB

Ordering differences only

⊟

2.73 KB

Ordering differences only

⊟

2.73 KB

Ordering differences only

⊟

2.07 KB

Ordering differences only

⊟

2.08 KB

Ordering differences only

⊟

250 KB

Ordering differences only

⊟

164 KB

Ordering differences only

⊟

106 KB

Ordering differences only

⊟

2.73 KB

Ordering differences only

⊟

4.08 KB

Ordering differences only

⊟

2.73 KB

Ordering differences only

⊟

851 B

Ordering differences only

⊟

859 B

Ordering differences only

⊟

796 B

Ordering differences only

⊟

804 B

Ordering differences only

⊟

165 KB

Ordering differences only

⊟

904 B

Ordering differences only

⊟

896 B

Ordering differences only

⊟

912 B

Ordering differences only

⊟

194 KB

Ordering differences only

⊟

15.5 KB

Ordering differences only

⊟

15.5 KB

Ordering differences only

⊟

194 KB

Ordering differences only

⊟

108 KB

Ordering differences only

⊟

786 B

Ordering differences only

⊟

74.0 KB

Ordering differences only

⊟

192 KB

Ordering differences only

⊟

201 KB

Ordering differences only

⊟

788 B

Ordering differences only

⊟

108 KB

Ordering differences only

⊟

207 KB

Ordering differences only

⊟

138 KB

Ordering differences only

⊟

4.03 KB

Ordering differences only

⊟

84.0 KB

Ordering differences only

⊟

143 KB

Ordering differences only

⊟

143 KB

Ordering differences only

⊟

854 B

Ordering differences only

⊟

846 B

Ordering differences only

⊟

862 B

Ordering differences only

⊟

167 KB

Ordering differences only

⊟

15.2 KB

Ordering differences only

⊟

15.2 KB

Ordering differences only

⊟

167 KB

Ordering differences only

⊟

100 KB

Ordering differences only

⊟

3.54 KB

Ordering differences only

⊟

68.8 KB

Ordering differences only

⊟

179 KB

Ordering differences only

⊟

85.7 KB

Ordering differences only

⊟

3.54 KB

Ordering differences only

⊟

158 KB

Ordering differences only

⊟

3.88 KB

Ordering differences only

⊟

78.0 KB

Ordering differences only

⊟

130 KB

Ordering differences only

⊟

130 KB

Ordering differences only

⊟

13.1 KB

Ordering differences only

⊟

13.0 KB

Ordering differences only

⊟

13.1 KB

Ordering differences only

⊟

13.1 KB

Ordering differences only

⊟

2.71 KB

Ordering differences only

⊟

2.71 KB

Ordering differences only

⊟

2.06 KB

Ordering differences only

⊟

2.07 KB

Ordering differences only

⊟

109 KB

Ordering differences only

⊟

85.0 KB

Ordering differences only

⊟

854 B

Ordering differences only

⊟

846 B

Ordering differences only

⊟

862 B

Ordering differences only

⊟

165 KB

Ordering differences only

⊟

4.02 KB

Ordering differences only

⊟

4.03 KB

Ordering differences only

⊟

165 KB

Ordering differences only

⊟

182 KB

Ordering differences only

⊟

182 KB

Ordering differences only

⊟

136 KB

Ordering differences only

⊟

3.8 KB

Ordering differences only

⊟

3.81 KB

Ordering differences only

⊟

3.82 KB

Ordering differences only

⊟

3.83 KB

Ordering differences only

⊟

3.81 KB

Ordering differences only

⊟

2.57 KB

Ordering differences only

⊟

2.56 KB

Ordering differences only

⊟

1.14 KB

⊟

1.0 KB

⊟

1.15 KB

⊟

1.0 KB

⊟

8.02 KB

⊟

7.92 KB

⊟

8.01 KB

⊟

7.91 KB

⊟

7.83 KB

⊟

7.72 KB

⊟

58.5 KB

⊟

58.4 KB

⊟

58.5 KB

⊟

58.4 KB

⊟

58.2 KB

⊟

58.1 KB

⊟

60.8 KB

⊟

60.7 KB

⊟

60.8 KB

⊟

60.7 KB

⊟

60.4 KB

⊟

60.3 KB

⊟

543 KB

⊟

543 KB

⊟

543 KB

⊟

543 KB

⊟

542 KB

⊟

542 KB

⊟

516 KB

⊟

516 KB

⊟

516 KB

⊟

516 KB

⊟

514 KB

⊟

514 KB

⊟

25.4 KB

⊟

25.3 KB

⊟

25.4 KB

⊟

25.3 KB

⊟

25.2 KB

⊟

25.1 KB

⊟

483 KB

⊟

483 KB

⊟

483 KB

⊟

483 KB

⊟

482 KB

⊟

481 KB

⊟

1.39 KB

⊟

1.28 KB

⊟

1.38 KB

⊟

1.27 KB

⊟

1.17 KB

⊟

1.06 KB

⊟

3.53 KB

⊟

3.42 KB

Ordering differences only

⊟

4.93 KB

⊟

4.83 KB

⊟

4.92 KB

⊟

4.82 KB

⊟

1.26 KB

⊟

1.16 KB

⊟

1.37 KB

⊟

1.27 KB

⊟

1.35 KB

⊟

1.26 KB

⊟

1.21 KB

⊟

1.11 KB

⊟

28.2 KB

⊟

28.1 KB

⊟

28.2 KB

⊟

28.1 KB

⊟

28.0 KB

⊟

27.9 KB

⊟

4.89 KB

⊟

4.79 KB

⊟

4.87 KB

⊟

4.78 KB

⊟

4.72 KB

⊟

4.62 KB

⊟

1.4 KB

⊟

1.29 KB

⊟

1.38 KB

⊟

1.28 KB

⊟

1.22 KB

⊟

1.11 KB

⊟

1.44 KB

⊟

1.33 KB

⊟

1.42 KB

⊟

1.33 KB

⊟

1.26 KB

⊟

1.16 KB

⊟

541 KB

⊟

540 KB

⊟

541 KB

⊟

540 KB

⊟

539 KB

⊟

539 KB

⊟

512 KB

⊟

512 KB

⊟

512 KB

⊟

512 KB

⊟

511 KB

⊟

511 KB

⊟

25.4 KB

⊟

25.3 KB

⊟

25.4 KB

⊟

25.3 KB

⊟

25.2 KB

⊟

25.1 KB

⊟

1.4 KB

⊟

1.3 KB

⊟

1.39 KB

⊟

1.29 KB

⊟

1.23 KB

⊟

1.13 KB

⊟

543 KB

⊟

543 KB

⊟

543 KB

⊟

543 KB

⊟

542 KB

⊟

542 KB

⊟

347 KB

⊟

347 KB

⊟

347 KB

⊟

347 KB

⊟

346 KB

⊟

346 KB

⊟

7.89 KB

⊟

7.79 KB

⊟

7.88 KB

⊟

7.78 KB

⊟

7.7 KB

⊟

7.59 KB

⊟

1.4 KB

⊟

1.29 KB

⊟

1.38 KB

⊟

1.29 KB

⊟

1.24 KB

⊟

1.13 KB


Offset 1, 6 lines modified		Offset 1, 6 lines modified

1	·18090169a6b08e5~~1aa8~~cf~~98d1~~a~~67791d~~·181960·admin·optional·ssg-applications_0.1.65-1_all.deb	1	·c648e9dd369bd5db41cf2cabca7e639e·181916·admin·optional·ssg-applications_0.1.65-1_all.deb
2	·f7bae0738ce4e633a16dbb487c1b30d5·27788·admin·optional·ssg-base_0.1.65-1_all.deb	2	·f7bae0738ce4e633a16dbb487c1b30d5·27788·admin·optional·ssg-base_0.1.65-1_all.deb
3	·bcdc31fc8ce6187d18aa01992d8bdeff·3378672·admin·optional·ssg-debderived_0.1.65-1_all.deb
4	·56111c82ff654a02f0793cad2a4f9e4f·828680·admin·optional·ssg-debian_0.1.65-1_all.deb
5	·cae~~d9acb69~~b15da~~a2c0~~2d4ec769~~55caa·402176~~08·admin·optional·ssg-~~non~~debian_0.1.65-1_all.deb	3	·cbf5117ebf59a4d85e284ac8798843b4·3380308·admin·optional·ssg-debderived_0.1.65-1_all.deb
		4	·978245e3e4c24d53f4a7dfee5e0c9507·828692·admin·optional·ssg-debian_0.1.65-1_all.deb
		5	·4c021df465c5f7e67d290321990173a1·40218524·admin·optional·ssg-nondebian_0.1.65-1_all.deb


Offset 1, 3 lines modified		Offset 1, 3 lines modified
1	-rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary	1	-rw-r--r--···0········0········0········4·2022-12-20·09:54:05.000000·debian-binary
2	-rw-r--r--···0········0········0·····1736·2022-12-20·09:54:05.000000·control.tar.xz	2	-rw-r--r--···0········0········0·····1732·2022-12-20·09:54:05.000000·control.tar.xz
3	-rw-r--r--···0········0········0···1~~8003~~2·2022-12-20·09:54:05.000000·data.tar.xz	3	-rw-r--r--···0········0········0···179992·2022-12-20·09:54:05.000000·data.tar.xz


Offset 50, 15 lines modified		Offset 50, 15 lines modified
50	***·Profile·Information·***	50	***·Profile·Information·***
51	Profile·Title·Upstream·STIG·for·Google·Chromium	51	Profile·Title·Upstream·STIG·for·Google·Chromium
52	Profile·ID····xccdf_org.ssgproject.content_profile_stig	52	Profile·ID····xccdf_org.ssgproject.content_profile_stig
53	*·CPE·Platforms·*	53	*·CPE·Platforms·*
54	····*·cpe:/a:google:chromium-browser	54	····*·cpe:/a:google:chromium-browser
55	***·Revision·History·***	55	***·Revision·History·***
56	Current·version:·0.1.65	56	Current·version:·0.1.65
57	····*·draft·(as·of·2024-01-14)	57	····*·draft·(as·of·2025-02-15)
58	***·Table·of·Contents·***	58	***·Table·of·Contents·***
59	···1.·Chromium	59	···1.·Chromium
60	***·Checklist·***	60	***·Checklist·***
61	Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37	61	Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37
62	rules	62	rules
63	Group ·Chromium· Group·contains·37·rules	63	Group ·Chromium· Group·contains·37·rules
64	[ref] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and	64	[ref] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and


Offset 14334, 16 lines modified		Offset 14334, 16 lines modified
00037fd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</		00037fd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</
00037fe0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve		00037fe0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve
00037ff0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0		00037ff0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0
00038000:·2e31·2e36·353c·2f73·7472·6f6e·673e·3c2f··.1.65</strong></		00038000:·2e31·2e36·353c·2f73·7472·6f6e·673e·3c2f··.1.65</strong></
00038010:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron		00038010:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron
00038020:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong>		00038020:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong>
00038030:·0a20·2020·2020·2020·2020·2020·2020·2020··.···············		00038030:·0a20·2020·2020·2020·2020·2020·2020·2020··.···············
00038040:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024		00038040:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025
00038050:·2d30·312d·3134·290a·2020·2020·2020·2020··-01-14).········		00038050:·2d30·322d·3135·290a·2020·2020·2020·2020··-02-15).········
00038060:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u		00038060:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u
00038070:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl		00038070:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl
00038080:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h		00038080:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h
00038090:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre		00038090:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre
000380a0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss		000380a0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss
000380b0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content		000380b0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content
000380c0:·5f67·726f·7570·5f63·6872·6f6d·6975·6d22··_group_chromium"		000380c0:·5f67·726f·7570·5f63·6872·6f6d·6975·6d22··_group_chromium"


Offset 14331, 15 lines modified		Offset 14331, 15 lines modified
00037fa0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current		00037fa0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current
00037fb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron		00037fb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron
00037fc0:·673e·302e·312e·3635·3c2f·7374·726f·6e67··g>0.1.65</strong		00037fc0:·673e·302e·312e·3635·3c2f·7374·726f·6e67··g>0.1.65</strong
00037fd0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st		00037fd0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st
00037fe0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro		00037fe0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro
00037ff0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············		00037ff0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············
00038000:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2		00038000:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2
00038010:·3032·342d·3031·2d31·3429·0a20·2020·2020··024-01-14).·····		00038010:·3032·352d·3032·2d31·3529·0a20·2020·2020··025-02-15).·····
00038020:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li>		00038020:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li>
00038030:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T		00038030:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T
00038040:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents		00038040:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents
00038050:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a·		00038050:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a·
00038060:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org		00038060:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org
00038070:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont		00038070:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont
00038080:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh		00038080:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh


Offset 44, 15 lines modified		Offset 44, 15 lines modified
44	Profile·ID····xccdf_org.ssgproject.content_profile_cis-node	44	Profile·ID····xccdf_org.ssgproject.content_profile_cis-node
45	*·CPE·Platforms·*	45	*·CPE·Platforms·*
46	····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21	46	····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21
47	····*·cpe:/o:amazon:elastic_kubernetes_service_node:1	47	····*·cpe:/o:amazon:elastic_kubernetes_service_node:1
48	····*·cpe:/a:amazon:elastic_kubernetes_service:1	48	····*·cpe:/a:amazon:elastic_kubernetes_service:1
49	***·Revision·History·***	49	***·Revision·History·***
50	Current·version:·0.1.65	50	Current·version:·0.1.65
51	····*·draft·(as·of·2024-01-14)	51	····*·draft·(as·of·2025-02-15)
52	***·Table·of·Contents·***	52	***·Table·of·Contents·***
53	···1.·Kubernetes_Settings	53	···1.·Kubernetes_Settings
54	·········1.·Kubernetes_Kubelet_Settings	54	·········1.·Kubernetes_Kubelet_Settings
55	·········2.·Kubernetes_-_Worker_Node_Settings	55	·········2.·Kubernetes_-_Worker_Node_Settings
56	***·Checklist·***	56	***·Checklist·***
57	Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service· Group	57	Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service· Group
58	contains·3·groups·and·7·rules	58	contains·3·groups·and·7·rules


Offset 14330, 15 lines modified		Offset 14330, 15 lines modified
00037f90:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>		00037f90:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>
00037fa0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:		00037fa0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:
00037fb0:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<		00037fb0:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<
00037fc0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>		00037fc0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>
00037fd0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf		00037fd0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf
00037fe0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····		00037fe0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····
00037ff0:·2020·2020·2020·2020·2020·2020·2020·2028·················(		00037ff0:·2020·2020·2020·2020·2020·2020·2020·2028·················(
00038000:·6173·206f·6620·3230·3234·2d30·312d·3134··as·of·2024-01-14		00038000:·6173·206f·6620·3230·3235·2d30·322d·3135··as·of·2025-02-15
00038010:·290a·2020·2020·2020·2020·2020·2020·2020··).··············		00038010:·290a·2020·2020·2020·2020·2020·2020·2020··).··············
00038020:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di		00038020:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di
00038030:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C		00038030:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C
00038040:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>		00038040:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>
00038050:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc		00038050:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc
00038060:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje		00038060:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje
00038070:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group		00038070:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group


Offset 14331, 15 lines modified		Offset 14331, 15 lines modified
00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>		00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>
00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:		00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:
00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<		00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<
00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>		00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>
00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf		00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf
00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····		00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····
00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················(		00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················(
00038010:·6173·206f·6620·3230·3234·2d30·312d·3134··as·of·2024-01-14		00038010:·6173·206f·6620·3230·3235·2d30·322d·3135··as·of·2025-02-15
00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).··············		00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).··············
00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di		00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di
00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C		00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C
00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>		00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>
00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc		00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc
00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje		00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje
00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group		00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group


Offset 28, 15 lines modified		Offset 28, 15 lines modified
28	········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title>	28	········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title>
29	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check>	29	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check>
30	······</cpe-dict:cpe-item>	30	······</cpe-dict:cpe-item>
31	····</cpe-dict:cpe-list>	31	····</cpe-dict:cpe-list>
32	··</ds:component>	32	··</ds:component>
33	··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2022-12-20T09:54:05">	33	··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2022-12-20T09:54:05">
34	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">	34	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">
35	······<xccdf-1.2:status·date="2024-01-14">draft</xccdf-1.2:status>	35	······<xccdf-1.2:status·date="2025-02-15">draft</xccdf-1.2:status>
36	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title>	36	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title>
37	······<xccdf-1.2:description>	37	······<xccdf-1.2:description>
38	········This·guide·presents·a·catalog·of·security-relevant	38	········This·guide·presents·a·catalog·of·security-relevant
39	configuration·settings·for·Chromium.·It·is·a·rendering·of	39	configuration·settings·for·Chromium.·It·is·a·rendering·of
40	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)	40	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)
41	in·order·to·support·security·automation.··The·SCAP·content·is	41	in·order·to·support·security·automation.··The·SCAP·content·is
42	is·available·in·the	42	is·available·in·the


Offset 1, 10 lines modified		Offset 1, 10 lines modified
1	<?xml·version="1.0"·encoding="utf-8"?>	1	<?xml·version="1.0"·encoding="utf-8"?>
2	<xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">	2	<xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">
3	··<xccdf-1.2:status·date="2024-01-14">draft</xccdf-1.2:status>	3	··<xccdf-1.2:status·date="2025-02-15">draft</xccdf-1.2:status>
4	··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title>	4	··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title>
5	··<xccdf-1.2:description>	5	··<xccdf-1.2:description>
6	····This·guide·presents·a·catalog·of·security-relevant	6	····This·guide·presents·a·catalog·of·security-relevant
7	configuration·settings·for·Chromium.·It·is·a·rendering·of	7	configuration·settings·for·Chromium.·It·is·a·rendering·of
8	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)	8	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)
9	in·order·to·support·security·automation.··The·SCAP·content·is	9	in·order·to·support·security·automation.··The·SCAP·content·is
10	is·available·in·the	10	is·available·in·the


Offset 36, 15 lines modified		Offset 36, 15 lines modified
36	········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title>	36	········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title>
37	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check>	37	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check>
38	······</cpe-dict:cpe-item>	38	······</cpe-dict:cpe-item>
39	····</cpe-dict:cpe-list>	39	····</cpe-dict:cpe-list>
40	··</ds:component>	40	··</ds:component>
41	··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2022-12-20T09:54:05">	41	··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2022-12-20T09:54:05">
42	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">	42	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">
43	······<xccdf-1.2:status·date="2024-01-14">draft</xccdf-1.2:status>	43	······<xccdf-1.2:status·date="2025-02-15">draft</xccdf-1.2:status>
44	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title>	44	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title>
45	······<xccdf-1.2:description>	45	······<xccdf-1.2:description>
46	········This·guide·presents·a·catalog·of·security-relevant	46	········This·guide·presents·a·catalog·of·security-relevant
47	configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of	47	configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of
48	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)	48	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)
49	in·order·to·support·security·automation.··The·SCAP·content·is	49	in·order·to·support·security·automation.··The·SCAP·content·is
50	is·available·in·the	50	is·available·in·the


Offset 14286, 16 lines modified		Offset 14286, 16 lines modified
00037cd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p		00037cd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p
00037ce0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version		00037ce0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version
00037cf0:·3a20·3c73·7472·6f6e·673e·302e·312e·3635··:·<strong>0.1.65		00037cf0:·3a20·3c73·7472·6f6e·673e·302e·312e·3635··:·<strong>0.1.65
00037d00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul		00037d00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul
00037d10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra		00037d10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra
00037d20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.····		00037d20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.····
00037d30:·2020·2020·2020·2020·2020·2020·2020·2020··················		00037d30:·2020·2020·2020·2020·2020·2020·2020·2020··················
00037d40:·2861·7320·6f66·2032·3032·342d·3031·2d31··(as·of·2024-01-1		00037d40:·2861·7320·6f66·2032·3032·352d·3032·2d31··(as·of·2025-02-1
00037d50:·3429·0a20·2020·2020·2020·2020·2020·2020··4).·············		00037d50:·3529·0a20·2020·2020·2020·2020·2020·2020··5).·············
00037d60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d		00037d60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d
00037d70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of·		00037d70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of·
00037d80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol		00037d80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol
00037d90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x		00037d90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x
00037da0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj		00037da0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj
00037db0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou		00037db0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou
00037dc0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System		00037dc0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System


Offset 37, 15 lines modified		Offset 37, 15 lines modified
37	***·Profile·Information·***	37	***·Profile·Information·***
38	Profile·Title·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level	38	Profile·Title·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level
39	Profile·ID····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average	39	Profile·ID····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average
40	*·CPE·Platforms·*	40	*·CPE·Platforms·*
41	····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~	41	····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~
42	***·Revision·History·***	42	***·Revision·History·***
43	Current·version:·0.1.65	43	Current·version:·0.1.65
44	····*·draft·(as·of·2024-01-14)	44	····*·draft·(as·of·2025-02-15)
45	***·Table·of·Contents·***	45	***·Table·of·Contents·***
46	···1.·System_Settings	46	···1.·System_Settings
47	·········1.·Installing_and_Maintaining_Software	47	·········1.·Installing_and_Maintaining_Software
48	·········2.·Configure_Syslog	48	·········2.·Configure_Syslog
49	·········3.·File_Permissions_and_Masks	49	·········3.·File_Permissions_and_Masks
50	···2.·Services	50	···2.·Services
51	·········1.·APT_service_configuration	51	·········1.·APT_service_configuration


Offset 14288, 15 lines modified		Offset 14288, 15 lines modified
00037cf0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v		00037cf0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v
00037d00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong>		00037d00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong>
00037d10:·302e·312e·3635·3c2f·7374·726f·6e67·3e3c··0.1.65</strong><		00037d10:·302e·312e·3635·3c2f·7374·726f·6e67·3e3c··0.1.65</strong><
00037d20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro		00037d20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro
00037d30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong		00037d30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong
00037d40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.··············		00037d40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.··············
00037d50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202		00037d50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202
00037d60:·342d·3031·2d31·3429·0a20·2020·2020·2020··4-01-14).·······		00037d60:·352d·3032·2d31·3529·0a20·2020·2020·2020··5-02-15).·······
00037d70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></		00037d70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></
00037d80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab		00037d80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab
00037d90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</		00037d90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</
00037da0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr		00037da0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr
00037db0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s		00037db0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s
00037dc0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten		00037dc0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten
00037dd0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system">		00037dd0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system">


Offset 14281, 15 lines modified		Offset 14281, 15 lines modified
00037c80:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current		00037c80:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current
00037c90:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron		00037c90:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron
00037ca0:·673e·302e·312e·3635·3c2f·7374·726f·6e67··g>0.1.65</strong		00037ca0:·673e·302e·312e·3635·3c2f·7374·726f·6e67··g>0.1.65</strong
00037cb0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st		00037cb0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st
00037cc0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro		00037cc0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro
00037cd0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············		00037cd0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············
00037ce0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2		00037ce0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2
00037cf0:·3032·342d·3031·2d31·3429·0a20·2020·2020··024-01-14).·····		00037cf0:·3032·352d·3032·2d31·3529·0a20·2020·2020··025-02-15).·····
00037d00:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li>		00037d00:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li>
00037d10:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T		00037d10:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T
00037d20:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents		00037d20:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents
00037d30:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a·		00037d30:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a·
00037d40:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org		00037d40:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org
00037d50:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont		00037d50:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont
00037d60:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system		00037d60:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system


Offset 14285, 15 lines modified		Offset 14285, 15 lines modified
00037cc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current		00037cc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current
00037cd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron		00037cd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron
00037ce0:·673e·302e·312e·3635·3c2f·7374·726f·6e67··g>0.1.65</strong		00037ce0:·673e·302e·312e·3635·3c2f·7374·726f·6e67··g>0.1.65</strong
00037cf0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st		00037cf0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st
00037d00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro		00037d00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro
00037d10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············		00037d10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············
00037d20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2		00037d20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2
00037d30:·3032·342d·3031·2d31·3429·0a20·2020·2020··024-01-14).·····		00037d30:·3032·352d·3032·2d31·3529·0a20·2020·2020··025-02-15).·····
00037d40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li>		00037d40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li>
00037d50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T		00037d50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T
00037d60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents		00037d60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents
00037d70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a·		00037d70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a·
00037d80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org		00037d80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org
00037d90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont		00037d90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont
00037da0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system		00037da0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system


Offset 14287, 16 lines modified		Offset 14287, 16 lines modified
00037ce0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</		00037ce0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</
00037cf0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve		00037cf0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve
00037d00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0		00037d00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0
00037d10:·2e31·2e36·353c·2f73·7472·6f6e·673e·3c2f··.1.65</strong></		00037d10:·2e31·2e36·353c·2f73·7472·6f6e·673e·3c2f··.1.65</strong></
00037d20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron		00037d20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron
00037d30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong>		00037d30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong>
00037d40:·0a20·2020·2020·2020·2020·2020·2020·2020··.···············		00037d40:·0a20·2020·2020·2020·2020·2020·2020·2020··.···············
00037d50:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024		00037d50:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025
00037d60:·2d30·312d·3134·290a·2020·2020·2020·2020··-01-14).········		00037d60:·2d30·322d·3135·290a·2020·2020·2020·2020··-02-15).········
00037d70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u		00037d70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u
00037d80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl		00037d80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl
00037d90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h		00037d90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h
00037da0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre		00037da0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre
00037db0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss		00037db0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss
00037dc0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content		00037dc0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content
00037dd0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S		00037dd0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S


Offset 38, 15 lines modified		Offset 38, 15 lines modified
38	***·Profile·Information·***	38	***·Profile·Information·***
39	Profile·Title·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level	39	Profile·Title·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level
40	Profile·ID····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high	40	Profile·ID····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high
41	*·CPE·Platforms·*	41	*·CPE·Platforms·*
42	····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~	42	····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~
43	***·Revision·History·***	43	***·Revision·History·***
44	Current·version:·0.1.65	44	Current·version:·0.1.65
45	····*·draft·(as·of·2024-01-14)	45	····*·draft·(as·of·2025-02-15)
46	***·Table·of·Contents·***	46	***·Table·of·Contents·***
47	···1.·System_Settings	47	···1.·System_Settings
48	·········1.·Installing_and_Maintaining_Software	48	·········1.·Installing_and_Maintaining_Software
49	·········2.·System_Accounting_with_auditd	49	·········2.·System_Accounting_with_auditd
50	·········3.·GRUB2_bootloader_configuration	50	·········3.·GRUB2_bootloader_configuration
51	·········4.·Configure_Syslog	51	·········4.·Configure_Syslog
52	·········5.·File_Permissions_and_Masks	52	·········5.·File_Permissions_and_Masks


Offset 14282, 15 lines modified		Offset 14282, 15 lines modified
00037c90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre		00037c90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre
00037ca0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str		00037ca0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str
00037cb0:·6f6e·673e·302e·312e·3635·3c2f·7374·726f··ong>0.1.65</stro		00037cb0:·6f6e·673e·302e·312e·3635·3c2f·7374·726f··ong>0.1.65</stro
00037cc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li><		00037cc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li><
00037cd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st		00037cd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st
00037ce0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.··········		00037ce0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.··········
00037cf0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of		00037cf0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of
00037d00:·2032·3032·342d·3031·2d31·3429·0a20·2020···2024-01-14).···		00037d00:·2032·3032·352d·3032·2d31·3529·0a20·2020···2025-02-15).···
00037d10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l		00037d10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l
00037d20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2		00037d20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2
00037d30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten		00037d30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten
00037d40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li><		00037d40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li><
00037d50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o		00037d50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o
00037d60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co		00037d60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co
00037d70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst		00037d70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst


Offset 14284, 15 lines modified		Offset 14284, 15 lines modified
00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C		00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C
00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:·		00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:·
00037cd0:·3c73·7472·6f6e·673e·302e·312e·3635·3c2f··<strong>0.1.65</		00037cd0:·3c73·7472·6f6e·673e·302e·312e·3635·3c2f··<strong>0.1.65</
00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul><		00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul><
00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft		00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft
00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······		00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······
00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a		00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a
00037d20:·7320·6f66·2032·3032·342d·3031·2d31·3429··s·of·2024-01-14)		00037d20:·7320·6f66·2032·3032·352d·3032·2d31·3529··s·of·2025-02-15)
00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.···············		00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.···············
00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div		00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div
00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co		00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co
00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol><		00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol><
00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc		00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc
00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec		00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec
00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_		00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_


Offset 14285, 15 lines modified		Offset 14285, 15 lines modified
00037cc0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu		00037cc0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu
00037cd0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·<		00037cd0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·<
00037ce0:·7374·726f·6e67·3e30·2e31·2e36·353c·2f73··strong>0.1.65</s		00037ce0:·7374·726f·6e67·3e30·2e31·2e36·353c·2f73··strong>0.1.65</s
00037cf0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l		00037cf0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l
00037d00:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft<		00037d00:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft<
00037d10:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.·······		00037d10:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.·······
00037d20:·2020·2020·2020·2020·2020·2020·2028·6173···············(as		00037d20:·2020·2020·2020·2020·2020·2020·2028·6173···············(as
00037d30:·206f·6620·3230·3234·2d30·312d·3134·290a···of·2024-01-14).		00037d30:·206f·6620·3230·3235·2d30·322d·3135·290a···of·2025-02-15).
00037d40:·2020·2020·2020·2020·2020·2020·2020·2020··················		00037d40:·2020·2020·2020·2020·2020·2020·2020·2020··················
00037d50:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div>		00037d50:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div>
00037d60:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con		00037d60:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con
00037d70:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l		00037d70:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l
00037d80:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd		00037d80:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd
00037d90:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject		00037d90:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject
00037da0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s		00037da0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s


Offset 14297, 16 lines modified		Offset 14297, 16 lines modified
00037d80:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2		00037d80:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2
00037d90:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers		00037d90:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers
00037da0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1		00037da0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1
00037db0:·2e36·353c·2f73·7472·6f6e·673e·3c2f·703e··.65</strong></p>		00037db0:·2e36·353c·2f73·7472·6f6e·673e·3c2f·703e··.65</strong></p>
00037dc0:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong>		00037dc0:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong>
00037dd0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.·		00037dd0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.·
00037de0:·2020·2020·2020·2020·2020·2020·2020·2020··················		00037de0:·2020·2020·2020·2020·2020·2020·2020·2020··················
00037df0:·2020·2028·6173·206f·6620·3230·3234·2d30·····(as·of·2024-0		00037df0:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0
00037e00:·312d·3134·290a·2020·2020·2020·2020·2020··1-14).··········		00037e00:·322d·3135·290a·2020·2020·2020·2020·2020··2-15).··········
00037e10:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul>		00037e10:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul>
00037e20:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table·		00037e20:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table·
00037e30:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2>		00037e30:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2>
00037e40:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href=		00037e40:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href=
00037e50:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp		00037e50:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp
00037e60:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g		00037e60:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g
00037e70:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys		00037e70:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys


Offset 41, 15 lines modified		Offset 41, 15 lines modified
41	Profile·Title·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation	41	Profile·Title·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation
42	··············Guide·(STIG)·V1R1	42	··············Guide·(STIG)·V1R1
43	Profile·ID····xccdf_org.ssgproject.content_profile_stig	43	Profile·ID····xccdf_org.ssgproject.content_profile_stig
44	*·CPE·Platforms·*	44	*·CPE·Platforms·*
45	····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~	45	····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~
46	***·Revision·History·***	46	***·Revision·History·***
47	Current·version:·0.1.65	47	Current·version:·0.1.65
48	····*·draft·(as·of·2024-01-14)	48	····*·draft·(as·of·2025-02-15)
49	***·Table·of·Contents·***	49	***·Table·of·Contents·***
50	···1.·System_Settings	50	···1.·System_Settings
51	·········1.·Installing_and_Maintaining_Software	51	·········1.·Installing_and_Maintaining_Software
52	·········2.·Account_and_Access_Control	52	·········2.·Account_and_Access_Control
53	·········3.·System_Accounting_with_auditd	53	·········3.·System_Accounting_with_auditd
54	·········4.·AppArmor	54	·········4.·AppArmor
55	·········5.·GRUB2_bootloader_configuration	55	·········5.·GRUB2_bootloader_configuration


Offset 1152, 16 lines modified		Offset 1152, 16 lines modified

1152	····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension	1152	····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension
1153	······find:	1153	······find:
1154	········paths:·/etc/audit/rules.d/	1154	········paths:·/etc/audit/rules.d/
1155	········patterns:·'*.rules'	1155	········patterns:·'*.rules'
1156	······register:·find_rules_d	1156	······register:·find_rules_d
1157	······when:	1157	······when:
1158	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1159	······-·'"auditd"·in·ansible_facts.packages'	1158	······-·'"auditd"·in·ansible_facts.packages'
		1159	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1160	······tags:	1160	······tags:
1161	······-·CJIS-5.4.1.1	1161	······-·CJIS-5.4.1.1
1162	······-·NIST-800-171-3.3.1	1162	······-·NIST-800-171-3.3.1
1163	······-·NIST-800-171-3.4.3	1163	······-·NIST-800-171-3.4.3
1164	······-·NIST-800-53-AC-6(9)	1164	······-·NIST-800-53-AC-6(9)
1165	······-·NIST-800-53-CM-6(a)	1165	······-·NIST-800-53-CM-6(a)
1166	······-·PCI-DSS-Req-10.5.2	1166	······-·PCI-DSS-Req-10.5.2
Offset 1176, 16 lines modified		Offset 1176, 16 lines modified
1176	······lineinfile:	1176	······lineinfile:
1177	········path:·'{{·item·}}'	1177	········path:·'{{·item·}}'
1178	········regexp:·^\s(?:-e)\s+.$	1178	········regexp:·^\s(?:-e)\s+.$
1179	········state:·absent	1179	········state:·absent
1180	······loop:·'{{·find_rules_d.files·\|·map(attribute=''path'')·\|·list·+·[''/etc/audit/audit.rules'']	1180	······loop:·'{{·find_rules_d.files·\|·map(attribute=''path'')·\|·list·+·[''/etc/audit/audit.rules'']
1181	········}}'	1181	········}}'
1182	······when:	1182	······when:
1183	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1184	······-·'"auditd"·in·ansible_facts.packages'	1183	······-·'"auditd"·in·ansible_facts.packages'
		1184	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1185	······tags:	1185	······tags:
1186	······-·CJIS-5.4.1.1	1186	······-·CJIS-5.4.1.1
1187	······-·NIST-800-171-3.3.1	1187	······-·NIST-800-171-3.3.1
1188	······-·NIST-800-171-3.4.3	1188	······-·NIST-800-171-3.4.3
1189	······-·NIST-800-53-AC-6(9)	1189	······-·NIST-800-53-AC-6(9)
1190	······-·NIST-800-53-CM-6(a)	1190	······-·NIST-800-53-CM-6(a)
1191	······-·PCI-DSS-Req-10.5.2	1191	······-·PCI-DSS-Req-10.5.2
Offset 1202, 16 lines modified		Offset 1202, 16 lines modified
1202	········create:·true	1202	········create:·true
1203	········line:·-e·2	1203	········line:·-e·2
1204	········mode:·o-rwx	1204	········mode:·o-rwx
1205	······loop:	1205	······loop:
1206	······-·/etc/audit/audit.rules	1206	······-·/etc/audit/audit.rules
1207	······-·/etc/audit/rules.d/immutable.rules	1207	······-·/etc/audit/rules.d/immutable.rules
1208	······when:	1208	······when:
1209	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1210	······-·'"auditd"·in·ansible_facts.packages'	1209	······-·'"auditd"·in·ansible_facts.packages'
		1210	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1211	······tags:	1211	······tags:
1212	······-·CJIS-5.4.1.1	1212	······-·CJIS-5.4.1.1
1213	······-·NIST-800-171-3.3.1	1213	······-·NIST-800-171-3.3.1
1214	······-·NIST-800-171-3.4.3	1214	······-·NIST-800-171-3.4.3
1215	······-·NIST-800-53-AC-6(9)	1215	······-·NIST-800-53-AC-6(9)
1216	······-·NIST-800-53-CM-6(a)	1216	······-·NIST-800-53-CM-6(a)
1217	······-·PCI-DSS-Req-10.5.2	1217	······-·PCI-DSS-Req-10.5.2
Offset 1246, 16 lines modified		Offset 1246, 16 lines modified
1246	····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/	1246	····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/
1247	······find:	1247	······find:
1248	········paths:·/etc/audit/rules.d	1248	········paths:·/etc/audit/rules.d
1249	········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s\|$)+	1249	········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s\|$)+
1250	········patterns:·'*.rules'	1250	········patterns:·'*.rules'
1251	······register:·find_existing_watch_rules_d	1251	······register:·find_existing_watch_rules_d
1252	······when:	1252	······when:
1253	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1254	······-·'"auditd"·in·ansible_facts.packages'	1253	······-·'"auditd"·in·ansible_facts.packages'
		1254	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1255	······tags:	1255	······tags:
1256	······-·CJIS-5.4.1.1	1256	······-·CJIS-5.4.1.1
1257	······-·NIST-800-171-3.1.7	1257	······-·NIST-800-171-3.1.7
1258	······-·NIST-800-53-AC-2(7)(b)	1258	······-·NIST-800-53-AC-2(7)(b)
1259	······-·NIST-800-53-AC-6(9)	1259	······-·NIST-800-53-AC-6(9)
1260	······-·NIST-800-53-AU-12(c)	1260	······-·NIST-800-53-AU-12(c)
1261	······-·NIST-800-53-AU-2(d)	1261	······-·NIST-800-53-AU-2(d)
Offset 1272, 16 lines modified		Offset 1272, 16 lines modified
1272	····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions	1272	····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions
1273	······find:	1273	······find:
1274	········paths:·/etc/audit/rules.d	1274	········paths:·/etc/audit/rules.d
1275	········contains:·^.*(?:-F·key=\|-k\s+)actions$	1275	········contains:·^.*(?:-F·key=\|-k\s+)actions$
1276	········patterns:·'*.rules'	1276	········patterns:·'*.rules'
1277	······register:·find_watch_key	1277	······register:·find_watch_key
1278	······when:	1278	······when:
1279	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1280	······-·'"auditd"·in·ansible_facts.packages'	1279	······-·'"auditd"·in·ansible_facts.packages'
		1280	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1281	······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched	1281	······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched
1282	········==·0	1282	········==·0
1283	······tags:	1283	······tags:
1284	······-·CJIS-5.4.1.1	1284	······-·CJIS-5.4.1.1
1285	······-·NIST-800-171-3.1.7	1285	······-·NIST-800-171-3.1.7
1286	······-·NIST-800-53-AC-2(7)(b)	1286	······-·NIST-800-53-AC-2(7)(b)
1287	······-·NIST-800-53-AC-6(9)	1287	······-·NIST-800-53-AC-6(9)
Offset 1298, 16 lines modified		Offset 1298, 16 lines modified
1298	······-·restrict_strategy	1298	······-·restrict_strategy

1299	····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule	1299	····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule
1300	······set_fact:	1300	······set_fact:
1301	········all_files:	1301	········all_files:
1302	········-·/etc/audit/rules.d/actions.rules	1302	········-·/etc/audit/rules.d/actions.rules
1303	······when:	1303	······when:
1304	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1305	······-·'"auditd"·in·ansible_facts.packages'	1304	······-·'"auditd"·in·ansible_facts.packages'
		1305	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1306	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched	1306	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched
1307	········is·defined·and·find_existing_watch_rules_d.matched·==·0	1307	········is·defined·and·find_existing_watch_rules_d.matched·==·0
1308	······tags:	1308	······tags:
1309	······-·CJIS-5.4.1.1	1309	······-·CJIS-5.4.1.1
1310	······-·NIST-800-171-3.1.7	1310	······-·NIST-800-171-3.1.7
1311	······-·NIST-800-53-AC-2(7)(b)	1311	······-·NIST-800-53-AC-2(7)(b)
1312	······-·NIST-800-53-AC-6(9)	1312	······-·NIST-800-53-AC-6(9)
Offset 1324, 16 lines modified		Offset 1324, 16 lines modified
1324	······-·restrict_strategy	1324	······-·restrict_strategy

1325	····-·name:·Use·matched·file·as·the·recipient·for·the·rule	1325	····-·name:·Use·matched·file·as·the·recipient·for·the·rule
1326	······set_fact:	1326	······set_fact:
1327	········all_files:	1327	········all_files:
1328	········-·'{{·find_watch_key.files·\|·map(attribute=''path'')·\|·list·\|·first·}}'	1328	········-·'{{·find_watch_key.files·\|·map(attribute=''path'')·\|·list·\|·first·}}'
1329	······when:	1329	······when:
1330	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1331	······-·'"auditd"·in·ansible_facts.packages'	1330	······-·'"auditd"·in·ansible_facts.packages'
		1331	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1332	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched	1332	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched
1333	········is·defined·and·find_existing_watch_rules_d.matched·==·0	1333	········is·defined·and·find_existing_watch_rules_d.matched·==·0
1334	······tags:	1334	······tags:
1335	······-·CJIS-5.4.1.1	1335	······-·CJIS-5.4.1.1
1336	······-·NIST-800-171-3.1.7	1336	······-·NIST-800-171-3.1.7
1337	······-·NIST-800-53-AC-2(7)(b)	1337	······-·NIST-800-53-AC-2(7)(b)
1338	······-·NIST-800-53-AC-6(9)	1338	······-·NIST-800-53-AC-6(9)
Offset 1352, 16 lines modified		Offset 1352, 16 lines modified
1352	····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/	1352	····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/
Max diff block lines reached; 130561/135598 bytes (96.29%) of diff not shown.


Offset 1121, 16 lines modified		Offset 1121, 16 lines modified

1121	····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension	1121	····-·name:·Collect·all·files·from·/etc/audit/rules.d·with·.rules·extension
1122	······find:	1122	······find:
1123	········paths:·/etc/audit/rules.d/	1123	········paths:·/etc/audit/rules.d/
1124	········patterns:·'*.rules'	1124	········patterns:·'*.rules'
1125	······register:·find_rules_d	1125	······register:·find_rules_d
1126	······when:	1126	······when:
1127	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1128	······-·'"auditd"·in·ansible_facts.packages'	1127	······-·'"auditd"·in·ansible_facts.packages'
		1128	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1129	······tags:	1129	······tags:
1130	······-·CJIS-5.4.1.1	1130	······-·CJIS-5.4.1.1
1131	······-·NIST-800-171-3.3.1	1131	······-·NIST-800-171-3.3.1
1132	······-·NIST-800-171-3.4.3	1132	······-·NIST-800-171-3.4.3
1133	······-·NIST-800-53-AC-6(9)	1133	······-·NIST-800-53-AC-6(9)
1134	······-·NIST-800-53-CM-6(a)	1134	······-·NIST-800-53-CM-6(a)
1135	······-·PCI-DSS-Req-10.5.2	1135	······-·PCI-DSS-Req-10.5.2
Offset 1145, 16 lines modified		Offset 1145, 16 lines modified
1145	······lineinfile:	1145	······lineinfile:
1146	········path:·'{{·item·}}'	1146	········path:·'{{·item·}}'
1147	········regexp:·^\s(?:-e)\s+.$	1147	········regexp:·^\s(?:-e)\s+.$
1148	········state:·absent	1148	········state:·absent
1149	······loop:·'{{·find_rules_d.files·\|·map(attribute=''path'')·\|·list·+·[''/etc/audit/audit.rules'']	1149	······loop:·'{{·find_rules_d.files·\|·map(attribute=''path'')·\|·list·+·[''/etc/audit/audit.rules'']
1150	········}}'	1150	········}}'
1151	······when:	1151	······when:
1152	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1153	······-·'"auditd"·in·ansible_facts.packages'	1152	······-·'"auditd"·in·ansible_facts.packages'
		1153	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1154	······tags:	1154	······tags:
1155	······-·CJIS-5.4.1.1	1155	······-·CJIS-5.4.1.1
1156	······-·NIST-800-171-3.3.1	1156	······-·NIST-800-171-3.3.1
1157	······-·NIST-800-171-3.4.3	1157	······-·NIST-800-171-3.4.3
1158	······-·NIST-800-53-AC-6(9)	1158	······-·NIST-800-53-AC-6(9)
1159	······-·NIST-800-53-CM-6(a)	1159	······-·NIST-800-53-CM-6(a)
1160	······-·PCI-DSS-Req-10.5.2	1160	······-·PCI-DSS-Req-10.5.2
Offset 1171, 16 lines modified		Offset 1171, 16 lines modified
1171	········create:·true	1171	········create:·true
1172	········line:·-e·2	1172	········line:·-e·2
1173	········mode:·o-rwx	1173	········mode:·o-rwx
1174	······loop:	1174	······loop:
1175	······-·/etc/audit/audit.rules	1175	······-·/etc/audit/audit.rules
1176	······-·/etc/audit/rules.d/immutable.rules	1176	······-·/etc/audit/rules.d/immutable.rules
1177	······when:	1177	······when:
1178	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1179	······-·'"auditd"·in·ansible_facts.packages'	1178	······-·'"auditd"·in·ansible_facts.packages'
		1179	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1180	······tags:	1180	······tags:
1181	······-·CJIS-5.4.1.1	1181	······-·CJIS-5.4.1.1
1182	······-·NIST-800-171-3.3.1	1182	······-·NIST-800-171-3.3.1
1183	······-·NIST-800-171-3.4.3	1183	······-·NIST-800-171-3.4.3
1184	······-·NIST-800-53-AC-6(9)	1184	······-·NIST-800-53-AC-6(9)
1185	······-·NIST-800-53-CM-6(a)	1185	······-·NIST-800-53-CM-6(a)
1186	······-·PCI-DSS-Req-10.5.2	1186	······-·PCI-DSS-Req-10.5.2
Offset 1215, 16 lines modified		Offset 1215, 16 lines modified
1215	····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/	1215	····-·name:·Check·if·watch·rule·for·/etc/sudoers·already·exists·in·/etc/audit/rules.d/
1216	······find:	1216	······find:
1217	········paths:·/etc/audit/rules.d	1217	········paths:·/etc/audit/rules.d
1218	········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s\|$)+	1218	········contains:·^\s*-w\s+/etc/sudoers\s+-p\s+wa(\s\|$)+
1219	········patterns:·'*.rules'	1219	········patterns:·'*.rules'
1220	······register:·find_existing_watch_rules_d	1220	······register:·find_existing_watch_rules_d
1221	······when:	1221	······when:
1222	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1223	······-·'"auditd"·in·ansible_facts.packages'	1222	······-·'"auditd"·in·ansible_facts.packages'
		1223	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1224	······tags:	1224	······tags:
1225	······-·CJIS-5.4.1.1	1225	······-·CJIS-5.4.1.1
1226	······-·NIST-800-171-3.1.7	1226	······-·NIST-800-171-3.1.7
1227	······-·NIST-800-53-AC-2(7)(b)	1227	······-·NIST-800-53-AC-2(7)(b)
1228	······-·NIST-800-53-AC-6(9)	1228	······-·NIST-800-53-AC-6(9)
1229	······-·NIST-800-53-AU-12(c)	1229	······-·NIST-800-53-AU-12(c)
1230	······-·NIST-800-53-AU-2(d)	1230	······-·NIST-800-53-AU-2(d)
Offset 1241, 16 lines modified		Offset 1241, 16 lines modified
1241	····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions	1241	····-·name:·Search·/etc/audit/rules.d·for·other·rules·with·specified·key·actions
1242	······find:	1242	······find:
1243	········paths:·/etc/audit/rules.d	1243	········paths:·/etc/audit/rules.d
1244	········contains:·^.*(?:-F·key=\|-k\s+)actions$	1244	········contains:·^.*(?:-F·key=\|-k\s+)actions$
1245	········patterns:·'*.rules'	1245	········patterns:·'*.rules'
1246	······register:·find_watch_key	1246	······register:·find_watch_key
1247	······when:	1247	······when:
1248	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1249	······-·'"auditd"·in·ansible_facts.packages'	1248	······-·'"auditd"·in·ansible_facts.packages'
		1249	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1250	······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched	1250	······-·find_existing_watch_rules_d.matched·is·defined·and·find_existing_watch_rules_d.matched
1251	········==·0	1251	········==·0
1252	······tags:	1252	······tags:
1253	······-·CJIS-5.4.1.1	1253	······-·CJIS-5.4.1.1
1254	······-·NIST-800-171-3.1.7	1254	······-·NIST-800-171-3.1.7
1255	······-·NIST-800-53-AC-2(7)(b)	1255	······-·NIST-800-53-AC-2(7)(b)
1256	······-·NIST-800-53-AC-6(9)	1256	······-·NIST-800-53-AC-6(9)
Offset 1267, 16 lines modified		Offset 1267, 16 lines modified
1267	······-·restrict_strategy	1267	······-·restrict_strategy

1268	····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule	1268	····-·name:·Use·/etc/audit/rules.d/actions.rules·as·the·recipient·for·the·rule
1269	······set_fact:	1269	······set_fact:
1270	········all_files:	1270	········all_files:
1271	········-·/etc/audit/rules.d/actions.rules	1271	········-·/etc/audit/rules.d/actions.rules
1272	······when:	1272	······when:
1273	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1274	······-·'"auditd"·in·ansible_facts.packages'	1273	······-·'"auditd"·in·ansible_facts.packages'
		1274	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1275	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched	1275	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·==·0·and·find_existing_watch_rules_d.matched
1276	········is·defined·and·find_existing_watch_rules_d.matched·==·0	1276	········is·defined·and·find_existing_watch_rules_d.matched·==·0
1277	······tags:	1277	······tags:
1278	······-·CJIS-5.4.1.1	1278	······-·CJIS-5.4.1.1
1279	······-·NIST-800-171-3.1.7	1279	······-·NIST-800-171-3.1.7
1280	······-·NIST-800-53-AC-2(7)(b)	1280	······-·NIST-800-53-AC-2(7)(b)
1281	······-·NIST-800-53-AC-6(9)	1281	······-·NIST-800-53-AC-6(9)
Offset 1293, 16 lines modified		Offset 1293, 16 lines modified
1293	······-·restrict_strategy	1293	······-·restrict_strategy

1294	····-·name:·Use·matched·file·as·the·recipient·for·the·rule	1294	····-·name:·Use·matched·file·as·the·recipient·for·the·rule
1295	······set_fact:	1295	······set_fact:
1296	········all_files:	1296	········all_files:
1297	········-·'{{·find_watch_key.files·\|·map(attribute=''path'')·\|·list·\|·first·}}'	1297	········-·'{{·find_watch_key.files·\|·map(attribute=''path'')·\|·list·\|·first·}}'
1298	······when:	1298	······when:
1299	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1300	······-·'"auditd"·in·ansible_facts.packages'	1299	······-·'"auditd"·in·ansible_facts.packages'
		1300	······-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
1301	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched	1301	······-·find_watch_key.matched·is·defined·and·find_watch_key.matched·>·0·and·find_existing_watch_rules_d.matched
1302	········is·defined·and·find_existing_watch_rules_d.matched·==·0	1302	········is·defined·and·find_existing_watch_rules_d.matched·==·0
1303	······tags:	1303	······tags:
1304	······-·CJIS-5.4.1.1	1304	······-·CJIS-5.4.1.1
1305	······-·NIST-800-171-3.1.7	1305	······-·NIST-800-171-3.1.7
1306	······-·NIST-800-53-AC-2(7)(b)	1306	······-·NIST-800-53-AC-2(7)(b)
1307	······-·NIST-800-53-AC-6(9)	1307	······-·NIST-800-53-AC-6(9)
Offset 1321, 16 lines modified		Offset 1321, 16 lines modified
1321	····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/	1321	····-·name:·Add·watch·rule·for·/etc/sudoers·in·/etc/audit/rules.d/
Max diff block lines reached; 130561/135598 bytes (96.29%) of diff not shown.


Offset 92, 15 lines modified		Offset 92, 15 lines modified
92	········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·16.04·(Xenial)</cpe-dict:title>	92	········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·16.04·(Xenial)</cpe-dict:title>
93	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1604:def:1</cpe-dict:check>	93	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1604:def:1</cpe-dict:check>
94	······</cpe-dict:cpe-item>	94	······</cpe-dict:cpe-item>
95	····</cpe-dict:cpe-list>	95	····</cpe-dict:cpe-list>
96	··</ds:component>	96	··</ds:component>
97	··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-xccdf.xml"·timestamp="2022-12-20T09:54:05">	97	··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-xccdf.xml"·timestamp="2022-12-20T09:54:05">
98	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">	98	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">
99	······<xccdf-1.2:status·date="2024-01-14">draft</xccdf-1.2:status>	99	······<xccdf-1.2:status·date="2025-02-15">draft</xccdf-1.2:status>
100	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title>	100	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title>
101	······<xccdf-1.2:description>	101	······<xccdf-1.2:description>
102	········This·guide·presents·a·catalog·of·security-relevant	102	········This·guide·presents·a·catalog·of·security-relevant
103	configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of	103	configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of
104	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)	104	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)
105	in·order·to·support·security·automation.··The·SCAP·content·is	105	in·order·to·support·security·automation.··The·SCAP·content·is
106	is·available·in·the	106	is·available·in·the


Offset 94, 15 lines modified		Offset 94, 15 lines modified
94	········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·16.04·(Xenial)</cpe-dict:title>	94	········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·16.04·(Xenial)</cpe-dict:title>
95	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1604:def:1</cpe-dict:check>	95	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1604:def:1</cpe-dict:check>
96	······</cpe-dict:cpe-item>	96	······</cpe-dict:cpe-item>
97	····</cpe-dict:cpe-list>	97	····</cpe-dict:cpe-list>
98	··</ds:component>	98	··</ds:component>
99	··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-xccdf.xml"·timestamp="2022-12-20T09:54:05">	99	··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1604-xccdf.xml"·timestamp="2022-12-20T09:54:05">
100	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">	100	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">
101	······<xccdf-1.2:status·date="2024-01-14">draft</xccdf-1.2:status>	101	······<xccdf-1.2:status·date="2025-02-15">draft</xccdf-1.2:status>
102	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title>	102	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title>
103	······<xccdf-1.2:description>	103	······<xccdf-1.2:description>
104	········This·guide·presents·a·catalog·of·security-relevant	104	········This·guide·presents·a·catalog·of·security-relevant
105	configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of	105	configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of
106	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)	106	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)
107	in·order·to·support·security·automation.··The·SCAP·content·is	107	in·order·to·support·security·automation.··The·SCAP·content·is
108	is·available·in·the	108	is·available·in·the


Offset 100, 15 lines modified		Offset 100, 15 lines modified
100	········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·18.04·(Bionic·Beaver)</cpe-dict:title>	100	········<cpe-dict:title·xml:lang="en-us">Ubuntu·release·18.04·(Bionic·Beaver)</cpe-dict:title>
101	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1804:def:1</cpe-dict:check>	101	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml">oval:ssg-installed_OS_is_ubuntu1804:def:1</cpe-dict:check>
102	······</cpe-dict:cpe-item>	102	······</cpe-dict:cpe-item>
103	····</cpe-dict:cpe-list>	103	····</cpe-dict:cpe-list>
104	··</ds:component>	104	··</ds:component>
105	··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1804-xccdf.xml"·timestamp="2022-12-20T09:54:05">	105	··<ds:component·id="scap_org.open-scap_comp_ssg-ubuntu1804-xccdf.xml"·timestamp="2022-12-20T09:54:05">
106	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">	106	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">
107	······<xccdf-1.2:status·date="2024-01-14">draft</xccdf-1.2:status>	107	······<xccdf-1.2:status·date="2025-02-15">draft</xccdf-1.2:status>
108	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title>	108	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title>
109	······<xccdf-1.2:description>	109	······<xccdf-1.2:description>
110	········This·guide·presents·a·catalog·of·security-relevant	110	········This·guide·presents·a·catalog·of·security-relevant
111	configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of	111	configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of
112	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)	112	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)
113	in·order·to·support·security·automation.··The·SCAP·content·is	113	in·order·to·support·security·automation.··The·SCAP·content·is
114	is·available·in·the	114	is·available·in·the


Offset 14284, 15 lines modified		Offset 14284, 15 lines modified
00037cb0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current·		00037cb0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current·
00037cc0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong		00037cc0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong
00037cd0:·3e30·2e31·2e36·353c·2f73·7472·6f6e·673e··>0.1.65</strong>		00037cd0:·3e30·2e31·2e36·353c·2f73·7472·6f6e·673e··>0.1.65</strong>
00037ce0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str		00037ce0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str
00037cf0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron		00037cf0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron
00037d00:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.·············		00037d00:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.·············
00037d10:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20		00037d10:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20
00037d20:·3234·2d30·312d·3134·290a·2020·2020·2020··24-01-14).······		00037d20:·3235·2d30·322d·3135·290a·2020·2020·2020··25-02-15).······
00037d30:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li><		00037d30:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li><
00037d40:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta		00037d40:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta
00037d50:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents<		00037d50:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents<
00037d60:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h		00037d60:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h
00037d70:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org.		00037d70:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org.
00037d80:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte		00037d80:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte
00037d90:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system"		00037d90:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system"


Offset 14278, 15 lines modified		Offset 14278, 15 lines modified
00037c50:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>		00037c50:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>
00037c60:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:		00037c60:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:
00037c70:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<		00037c70:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<
00037c80:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>		00037c80:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>
00037c90:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf		00037c90:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf
00037ca0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····		00037ca0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····
00037cb0:·2020·2020·2020·2020·2020·2020·2020·2028·················(		00037cb0:·2020·2020·2020·2020·2020·2020·2020·2028·················(
00037cc0:·6173·206f·6620·3230·3234·2d30·312d·3134··as·of·2024-01-14		00037cc0:·6173·206f·6620·3230·3235·2d30·322d·3135··as·of·2025-02-15
00037cd0:·290a·2020·2020·2020·2020·2020·2020·2020··).··············		00037cd0:·290a·2020·2020·2020·2020·2020·2020·2020··).··············
00037ce0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di		00037ce0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di
00037cf0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C		00037cf0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C
00037d00:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>		00037d00:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>
00037d10:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc		00037d10:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc
00037d20:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje		00037d20:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje
00037d30:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group		00037d30:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group


Offset 14282, 15 lines modified		Offset 14282, 15 lines modified
00037c90:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>		00037c90:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p>
00037ca0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:		00037ca0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version:
00037cb0:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<		00037cb0:·203c·7374·726f·6e67·3e30·2e31·2e36·353c···<strong>0.1.65<
00037cc0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>		00037cc0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul>
00037cd0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf		00037cd0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf
00037ce0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····		00037ce0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.·····
00037cf0:·2020·2020·2020·2020·2020·2020·2020·2028·················(		00037cf0:·2020·2020·2020·2020·2020·2020·2020·2028·················(
00037d00:·6173·206f·6620·3230·3234·2d30·312d·3134··as·of·2024-01-14		00037d00:·6173·206f·6620·3230·3235·2d30·322d·3135··as·of·2025-02-15
00037d10:·290a·2020·2020·2020·2020·2020·2020·2020··).··············		00037d10:·290a·2020·2020·2020·2020·2020·2020·2020··).··············
00037d20:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di		00037d20:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di
00037d30:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C		00037d30:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C
00037d40:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>		00037d40:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol>
00037d50:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc		00037d50:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc
00037d60:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje		00037d60:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje
00037d70:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group		00037d70:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group


Offset 14284, 16 lines modified		Offset 14284, 16 lines modified
00037cb0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2>		00037cb0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2>
00037cc0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi		00037cc0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi
00037cd0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1.		00037cd0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1.
00037ce0:·3635·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··65</strong></p><		00037ce0:·3635·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··65</strong></p><
00037cf0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d		00037cf0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d
00037d00:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.··		00037d00:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.··
00037d10:·2020·2020·2020·2020·2020·2020·2020·2020··················		00037d10:·2020·2020·2020·2020·2020·2020·2020·2020··················
00037d20:·2020·2861·7320·6f66·2032·3032·342d·3031····(as·of·2024-01		00037d20:·2020·2861·7320·6f66·2032·3032·352d·3032····(as·of·2025-02
00037d30:·2d31·3429·0a20·2020·2020·2020·2020·2020··-14).···········		00037d30:·2d31·3529·0a20·2020·2020·2020·2020·2020··-15).···········
00037d40:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul><		00037d40:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul><
00037d50:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o		00037d50:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o
00037d60:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2><		00037d60:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2><
00037d70:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href="		00037d70:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href="
00037d80:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr		00037d80:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr
00037d90:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr		00037d90:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr
00037da0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst		00037da0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst


Offset 96, 15 lines modified		Offset 96, 15 lines modified
96	········<cpe-dict:title·xml:lang="en-us">Debian·Linux·10</cpe-dict:title>	96	········<cpe-dict:title·xml:lang="en-us">Debian·Linux·10</cpe-dict:title>
97	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian10-cpe-oval.xml">oval:ssg-installed_OS_is_debian10:def:1</cpe-dict:check>	97	········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian10-cpe-oval.xml">oval:ssg-installed_OS_is_debian10:def:1</cpe-dict:check>
98	······</cpe-dict:cpe-item>	98	······</cpe-dict:cpe-item>
99	····</cpe-dict:cpe-list>	99	····</cpe-dict:cpe-list>
100	··</ds:component>	100	··</ds:component>
101	··<ds:component·id="scap_org.open-scap_comp_ssg-debian10-xccdf.xml"·timestamp="2022-12-20T09:54:05">	101	··<ds:component·id="scap_org.open-scap_comp_ssg-debian10-xccdf.xml"·timestamp="2022-12-20T09:54:05">
102	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">	102	····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.4.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US">
103	······<xccdf-1.2:status·date="2024-01-14">draft</xccdf-1.2:status>	103	······<xccdf-1.2:status·date="2025-02-15">draft</xccdf-1.2:status>
104	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·10</xccdf-1.2:title>	104	······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·10</xccdf-1.2:title>
105	······<xccdf-1.2:description>	105	······<xccdf-1.2:description>
106	········This·guide·presents·a·catalog·of·security-relevant	106	········This·guide·presents·a·catalog·of·security-relevant
107	configuration·settings·for·Debian·10.·It·is·a·rendering·of	107	configuration·settings·for·Debian·10.·It·is·a·rendering·of
108	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)	108	content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF)
109	in·order·to·support·security·automation.··The·SCAP·content·is	109	in·order·to·support·security·automation.··The·SCAP·content·is
110	is·available·in·the	110	is·available·in·the


Offset 14293, 16 lines modified		Offset 14293, 16 lines modified
00037d40:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p		00037d40:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p
00037d50:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version		00037d50:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version
00037d60:·3a20·3c73·7472·6f6e·673e·302e·312e·3635··:·<strong>0.1.65		00037d60:·3a20·3c73·7472·6f6e·673e·302e·312e·3635··:·<strong>0.1.65
00037d70:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul		00037d70:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul
00037d80:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra		00037d80:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra
00037d90:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.····		00037d90:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.····
00037da0:·2020·2020·2020·2020·2020·2020·2020·2020··················		00037da0:·2020·2020·2020·2020·2020·2020·2020·2020··················
00037db0:·2861·7320·6f66·2032·3032·342d·3031·2d31··(as·of·2024-01-1		00037db0:·2861·7320·6f66·2032·3032·352d·3032·2d31··(as·of·2025-02-1
00037dc0:·3429·0a20·2020·2020·2020·2020·2020·2020··4).·············		00037dc0:·3529·0a20·2020·2020·2020·2020·2020·2020··5).·············
00037dd0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d		00037dd0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d
00037de0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of·		00037de0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of·
00037df0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol		00037df0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol
00037e00:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x		00037e00:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x
00037e10:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj		00037e10:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj
00037e20:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou		00037e20:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou
00037e30:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System		00037e30:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System
Offset 83079, 22 lines modified		Offset 83079, 22 lines modified
00144860:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe		00144860:·2054·6573·7420·666f·7220·6578·6973·7465···Test·for·existe
00144870:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/		00144870:·6e63·6520·2f62·6f6f·742f·6772·7562·322f··nce·/boot/grub2/
00144880:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat:		00144880:·6772·7562·2e63·6667·0a20·2073·7461·743a··grub.cfg.··stat:
00144890:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot		00144890:·0a20·2020·2070·6174·683a·202f·626f·6f74··.····path:·/boot
001448a0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg.		001448a0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg.
001448b0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file		001448b0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file
001448c0:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:.		001448c0:·5f65·7869·7374·730a·2020·7768·656e·3a0a··_exists.··when:.
001448d0:·2020·2d20·2722·6772·7562·322d·636f·6d6d····-·'"grub2-comm
001448e0:·6f6e·2220·696e·2061·6e73·6962·6c65·5f66··on"·in·ansible_f
001448f0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.·
00144900:·202d·2027·222f·626f·6f74·2f65·6669·2220···-·'"/boot/efi"·
00144910:·6e6f·7420·696e·2061·6e73·6962·6c65·5f6d··not·in·ansible_m
00144920:·6f75·6e74·7320·7c20·6d61·7028·6174·7472··ounts·\|·map(attr
00144930:·~~6962~~·~~7574~~·~~653d~~·226d·6f75·~~6e74~~·~~2229~~·~~207c~~··~~ibute="m~~o~~unt")·\|~~		001448d0:·2020·2d20·2722·2f62·6f6f·742f·6566·6922····-·'"/boot/efi"
		001448e0:·206e·6f74·2069·6e20·616e·7369·626c·655f···not·in·ansible_
		001448f0:·6d6f·756e·7473·207c·206d·6170·2861·7474··mounts·\|·map(att
		00144900:·7269·6275·7465·3d22·6d6f·756e·7422·2920··ribute="mount")·
		00144910:·7c20·6c69·7374·270a·2020·2d20·2722·6772··\|·list'.··-·'"gr
		00144920:·7562·322d·636f·6d6d·6f6e·2220·696e·2061··ub2-common"·in·a
		00144930:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac
00144940:·206c·6~~973~~·7427·0a20·202d·2061·6e73·6962··~~·list~~'.··-·ansib		00144940:·6b61·6765·7327·0a20·202d·2061·6e73·6962··kages'.··-·ansib
00144950:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio		00144950:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio
00144960:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·["		00144960:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·["
00144970:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",·		00144970:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",·
00144980:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma		00144980:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma
00144990:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"]		00144990:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"]
001449a0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI		001449a0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI
001449b0:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI		001449b0:·532d·352e·352e·322e·320a·2020·2d20·4e49··S-5.5.2.2.··-·NI
Offset 83115, 22 lines modified		Offset 83115, 22 lines modified
00144aa0:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o		00144aa0:·3a20·456e·7375·7265·2067·726f·7570·206f··:·Ensure·group·o
00144ab0:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/		00144ab0:·776e·6572·2030·206f·6e20·2f62·6f6f·742f··wner·0·on·/boot/
00144ac0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.·		00144ac0:·6772·7562·322f·6772·7562·2e63·6667·0a20··grub2/grub.cfg.·
00144ad0:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path:		00144ad0:·2066·696c·653a·0a20·2020·2070·6174·683a···file:.····path:
00144ae0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru		00144ae0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru
00144af0:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group:		00144af0:·622e·6366·670a·2020·2020·6772·6f75·703a··b.cfg.····group:
00144b00:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··-		00144b00:·2027·3027·0a20·2077·6865·6e3a·0a20·202d···'0'.··when:.··-
		00144b10:·2027·222f·626f·6f74·2f65·6669·2220·6e6f···'"/boot/efi"·no
		00144b20:·7420·696e·2061·6e73·6962·6c65·5f6d·6f75··t·in·ansible_mou
		00144b30:·6e74·7320·7c20·6d61·7028·6174·7472·6962··nts·\|·map(attrib
00144b10:·2027·2267·7275·6232·2d63·6f6d·6d6f·6e22···'"grub2-common"
00144b20:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact
00144b30:·732e·7061·636b·6167·6573·270a·2020·2d20··s.packages'.··-·
00144b40:·2722·2f62·6f6f·742f·6566·6922·206e·6f74··'"/boot/efi"·not
00144b50:·2069·6e20·616e·7369·626c·655f·6d6f·756e···in·ansible_moun
00144b60:·7473·207c·206d·6170·2861·7474·7269·6275··ts·\|·map(attribu
00144b70:·7465·3d22·6d6f·756e·7422·2920·7c20·6c69··te="mount")·\|·li		00144b40:·7574·653d·226d·6f75·6e74·2229·207c·206c··ute="mount")·\|·l
		00144b50:·6973·7427·0a20·202d·2027·2267·7275·6232··ist'.··-·'"grub2
		00144b60:·2d63·6f6d·6d6f·6e22·2069·6e20·616e·7369··-common"·in·ansi
		00144b70:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag
00144b80:·7374·270a·2020·2d20·616e·7369·626c·655f··st'.··-·ansible_		00144b80:·6573·270a·2020·2d20·616e·7369·626c·655f··es'.··-·ansible_
00144b90:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t		00144b90:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t
00144ba0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc		00144ba0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc
00144bb0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op		00144bb0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op
00144bc0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman",		00144bc0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman",
00144bd0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].··		00144bd0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].··
00144be0:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st		00144be0:·2d20·6669·6c65·5f65·7869·7374·732e·7374··-·file_exists.st
00144bf0:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an		00144bf0:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an
Offset 83180, 19 lines modified		Offset 83180, 19 lines modified
00144eb0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy		00144eb0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy
00144ec0:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config		00144ec0:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config
00144ed0:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t		00144ed0:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t
00144ee0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code>		00144ee0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code>
00144ef0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is		00144ef0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is
00144f00:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only		00144f00:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only
00144f10:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat		00144f10:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat
00144f20:·666f·726d·730a·6966·2072·706d·202d·~~2d71~~··forms.if·~~rpm~~·--q		00144f20:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f·
00144f30:·7569·6574·202d·7120·6772·7562·322d·636f··uiet·-q·grub2-co
00144f40:·6d6d·6f6e·2026·616d·703b·2661·6d70·3b20··mmon·&&·
00144f50:·5b20·2120·2d66·202f·7379·732f·6669·726d··[·!·-f·/sys/firm
00144f60:·~~7761~~·7~~265~~·2f65·6~~669~~·~~205d~~·~~2026~~·6~~16d~~·~~703b~~··~~ware~~/efi~~·]·&~~		00144f30:·2f73·7973·2f66·6972·6d77·6172·652f·6566··/sys/firmware/ef
		00144f40:·6920·5d20·2661·6d70·3b26·616d·703b·2072··i·]·&&·r
		00144f50:·706d·202d·2d71·7569·6574·202d·7120·6772··pm·--quiet·-q·gr
		00144f60:·7562·322d·636f·6d6d·6f6e·2026·616d·703b··ub2-common·&
00144f70:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/		00144f70:·2661·6d70·3b20·7b20·5b20·2120·2d66·202f··&·{·[·!·-f·/
00144f80:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am		00144f80:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am
00144f90:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/		00144f90:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/
00144fa0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren		00144fa0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren
00144fb0:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch		00144fb0:·7620·5d3b·207d·3b20·7468·656e·0a0a·6368··v·];·};·then..ch
00144fc0:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub		00144fc0:·6772·7020·3020·2f62·6f6f·742f·6772·7562··grp·0·/boot/grub
00144fd0:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else		00144fd0:·322f·6772·7562·2e63·6667·0a0a·656c·7365··2/grub.cfg..else
Offset 83658, 22 lines modified		Offset 83658, 22 lines modified
00146c90:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex		00146c90:·616d·653a·2054·6573·7420·666f·7220·6578··ame:·Test·for·ex
00146ca0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr		00146ca0:·6973·7465·6e63·6520·2f62·6f6f·742f·6772··istence·/boot/gr
00146cb0:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s		00146cb0:·7562·322f·6772·7562·2e63·6667·0a20·2073··ub2/grub.cfg.··s
00146cc0:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/		00146cc0:·7461·743a·0a20·2020·2070·6174·683a·202f··tat:.····path:·/
00146cd0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub.		00146cd0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub.
00146ce0:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:·		00146ce0:·6366·670a·2020·7265·6769·7374·6572·3a20··cfg.··register:·
00146cf0:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh		00146cf0:·6669·6c65·5f65·7869·7374·730a·2020·7768··file_exists.··wh
00146d00:·656e·3a0a·2020·2d20·2722·~~677~~2·7562·322d··en:.··-·'"~~grub2-~~		00146d00:·656e·3a0a·2020·2d20·2722·2f62·6f6f·742f··en:.··-·'"/boot/
00146d10:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib
00146d20:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package
00146d30:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e
00146d40:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib
00146d50:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·\|·map(
00146d60:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount
00146d70:·~~2229~~·~~207c~~·206c·6973·~~7427~~·0a20·~~202d~~·2061··~~")·\|~~·~~list'.~~·~~·-·a~~		00146d10:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi
		00146d20:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·\|·map
		00146d30:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun
		00146d40:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·\|·list'.··-·
		00146d50:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"·
		00146d60:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts
		00146d70:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a
00146d80:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz		00146d80:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz
00146d90:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i		00146d90:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i
00146da0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx		00146da0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx
00146db0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p		00146db0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p
00146dc0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain		00146dc0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain
00146dd0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··-		00146dd0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··-
00146de0:·2043·4a49·532d·352e·352e·322e·320a·2020···CJIS-5.5.2.2.··		00146de0:·2043·4a49·532d·352e·352e·322e·320a·2020···CJIS-5.5.2.2.··
Offset 83693, 22 lines modified		Offset 83693, 22 lines modified
Max diff block lines reached; 9488/18752 bytes (50.60%) of diff not shown.


Offset 39, 15 lines modified		Offset 39, 15 lines modified
39	***·Profile·Information·***	39	***·Profile·Information·***
40	Profile·Title·CIS·Aliyun·Linux·2·Benchmark·for·Level·2	40	Profile·Title·CIS·Aliyun·Linux·2·Benchmark·for·Level·2
41	Profile·ID····xccdf_org.ssgproject.content_profile_cis	41	Profile·ID····xccdf_org.ssgproject.content_profile_cis
42	*·CPE·Platforms·*	42	*·CPE·Platforms·*
43	····*·cpe:/o:alinux:alibaba_cloud_linux:2	43	····*·cpe:/o:alinux:alibaba_cloud_linux:2
44	***·Revision·History·***	44	***·Revision·History·***
45	Current·version:·0.1.65	45	Current·version:·0.1.65
46	····*·draft·(as·of·2024-01-14)	46	····*·draft·(as·of·2025-02-15)
47	***·Table·of·Contents·***	47	***·Table·of·Contents·***
48	···1.·System_Settings	48	···1.·System_Settings
49	·········1.·Installing_and_Maintaining_Software	49	·········1.·Installing_and_Maintaining_Software
50	·········2.·Account_and_Access_Control	50	·········2.·Account_and_Access_Control
51	·········3.·System_Accounting_with_auditd	51	·········3.·System_Accounting_with_auditd
52	·········4.·GRUB2_bootloader_configuration	52	·········4.·GRUB2_bootloader_configuration
53	·········5.·Configure_Syslog	53	·········5.·Configure_Syslog
Offset 6294, 16 lines modified		Offset 6294, 16 lines modified
6294	··-·no_reboot_needed	6294	··-·no_reboot_needed

6295	-·name:·Test·for·existence·/boot/grub2/grub.cfg	6295	-·name:·Test·for·existence·/boot/grub2/grub.cfg
6296	··stat:	6296	··stat:
6297	····path:·/boot/grub2/grub.cfg	6297	····path:·/boot/grub2/grub.cfg
6298	··register:·file_exists	6298	··register:·file_exists
6299	··when:	6299	··when:
6300	··-·'"grub2-common"·in·ansible_facts.packages'
6301	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'	6300	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'
		6301	··-·'"grub2-common"·in·ansible_facts.packages'
6302	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]	6302	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
6303	··tags:	6303	··tags:
6304	··-·CJIS-5.5.2.2	6304	··-·CJIS-5.5.2.2
6305	··-·NIST-800-171-3.4.5	6305	··-·NIST-800-171-3.4.5
6306	··-·NIST-800-53-AC-6(1)	6306	··-·NIST-800-53-AC-6(1)
6307	··-·NIST-800-53-CM-6(a)	6307	··-·NIST-800-53-CM-6(a)
6308	··-·PCI-DSS-Req-7.1	6308	··-·PCI-DSS-Req-7.1
Offset 6315, 16 lines modified		Offset 6315, 16 lines modified
6315	··-·no_reboot_needed	6315	··-·no_reboot_needed

6316	-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg	6316	-·name:·Ensure·group·owner·0·on·/boot/grub2/grub.cfg
6317	··file:	6317	··file:
6318	····path:·/boot/grub2/grub.cfg	6318	····path:·/boot/grub2/grub.cfg
6319	····group:·'0'	6319	····group:·'0'
6320	··when:	6320	··when:
6321	··-·'"grub2-common"·in·ansible_facts.packages'
6322	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'	6321	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'
		6322	··-·'"grub2-common"·in·ansible_facts.packages'
6323	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]	6323	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
6324	··-·file_exists.stat·is·defined·and·file_exists.stat.exists	6324	··-·file_exists.stat·is·defined·and·file_exists.stat.exists
6325	··tags:	6325	··tags:
6326	··-·CJIS-5.5.2.2	6326	··-·CJIS-5.5.2.2
6327	··-·NIST-800-171-3.4.5	6327	··-·NIST-800-171-3.4.5
6328	··-·NIST-800-53-AC-6(1)	6328	··-·NIST-800-53-AC-6(1)
6329	··-·NIST-800-53-CM-6(a)	6329	··-·NIST-800-53-CM-6(a)
Offset 6336, 15 lines modified		Offset 6336, 15 lines modified
6336	··-·medium_severity	6336	··-·medium_severity
6337	··-·no_reboot_needed	6337	··-·no_reboot_needed
6338	Remediation_Shell_script_⇲	6338	Remediation_Shell_script_⇲
6339	Complexity:·low	6339	Complexity:·low
6340	Disruption:·low	6340	Disruption:·low
6341	Strategy:···configure	6341	Strategy:···configure
6342	#·Remediation·is·applicable·only·in·certain·platforms	6342	#·Remediation·is·applicable·only·in·certain·platforms
6343	if·~~rpm~~·--~~quiet·-q·grub2-common~~·&&·~~[·!~~·-~~f·/sys/firmware/efi·]~~·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};	6343	if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};
6344	then	6344	then

6345	chgrp·0·/boot/grub2/grub.cfg	6345	chgrp·0·/boot/grub2/grub.cfg

6346	else	6346	else
6347	····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done'	6347	····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done'
6348	fi	6348	fi
Offset 6382, 16 lines modified		Offset 6382, 16 lines modified
6382	··-·no_reboot_needed	6382	··-·no_reboot_needed

6383	-·name:·Test·for·existence·/boot/grub2/grub.cfg	6383	-·name:·Test·for·existence·/boot/grub2/grub.cfg
6384	··stat:	6384	··stat:
6385	····path:·/boot/grub2/grub.cfg	6385	····path:·/boot/grub2/grub.cfg
6386	··register:·file_exists	6386	··register:·file_exists
6387	··when:	6387	··when:
6388	··-·'"grub2-common"·in·ansible_facts.packages'
6389	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'	6388	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'
		6389	··-·'"grub2-common"·in·ansible_facts.packages'
6390	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]	6390	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
6391	··tags:	6391	··tags:
6392	··-·CJIS-5.5.2.2	6392	··-·CJIS-5.5.2.2
6393	··-·NIST-800-171-3.4.5	6393	··-·NIST-800-171-3.4.5
6394	··-·NIST-800-53-AC-6(1)	6394	··-·NIST-800-53-AC-6(1)
6395	··-·NIST-800-53-CM-6(a)	6395	··-·NIST-800-53-CM-6(a)
6396	··-·PCI-DSS-Req-7.1	6396	··-·PCI-DSS-Req-7.1
Offset 6403, 16 lines modified		Offset 6403, 16 lines modified
6403	··-·no_reboot_needed	6403	··-·no_reboot_needed

6404	-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg	6404	-·name:·Ensure·owner·0·on·/boot/grub2/grub.cfg
6405	··file:	6405	··file:
6406	····path:·/boot/grub2/grub.cfg	6406	····path:·/boot/grub2/grub.cfg
6407	····owner:·'0'	6407	····owner:·'0'
6408	··when:	6408	··when:
6409	··-·'"grub2-common"·in·ansible_facts.packages'
6410	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'	6409	··-·'"/boot/efi"·not·in·ansible_mounts·\|·map(attribute="mount")·\|·list'
		6410	··-·'"grub2-common"·in·ansible_facts.packages'
6411	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]	6411	··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"]
6412	··-·file_exists.stat·is·defined·and·file_exists.stat.exists	6412	··-·file_exists.stat·is·defined·and·file_exists.stat.exists
6413	··tags:	6413	··tags:
6414	··-·CJIS-5.5.2.2	6414	··-·CJIS-5.5.2.2
6415	··-·NIST-800-171-3.4.5	6415	··-·NIST-800-171-3.4.5
6416	··-·NIST-800-53-AC-6(1)	6416	··-·NIST-800-53-AC-6(1)
6417	··-·NIST-800-53-CM-6(a)	6417	··-·NIST-800-53-CM-6(a)
Offset 6424, 15 lines modified		Offset 6424, 15 lines modified
6424	··-·medium_severity	6424	··-·medium_severity
6425	··-·no_reboot_needed	6425	··-·no_reboot_needed
6426	Remediation_Shell_script_⇲	6426	Remediation_Shell_script_⇲
6427	Complexity:·low	6427	Complexity:·low
6428	Disruption:·low	6428	Disruption:·low
6429	Strategy:···configure	6429	Strategy:···configure
6430	#·Remediation·is·applicable·only·in·certain·platforms	6430	#·Remediation·is·applicable·only·in·certain·platforms
6431	if·~~rpm~~·--~~quiet·-q·grub2-common~~·&&·~~[·!~~·-~~f·/sys/firmware/efi·]~~·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};	6431	if·[·!·-f·/sys/firmware/efi·]·&&·rpm·--quiet·-q·grub2-common·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};
6432	then	6432	then

6433	chown·0·/boot/grub2/grub.cfg	6433	chown·0·/boot/grub2/grub.cfg

6434	else	6434	else
6435	····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done'	6435	····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done'
6436	fi	6436	fi
Offset 6468, 16 lines modified		Offset 6468, 16 lines modified
6468	··-·no_reboot_needed	6468	··-·no_reboot_needed

6469	-·name:·Test·for·existence·/boot/grub2/grub.cfg	6469	-·name:·Test·for·existence·/boot/grub2/grub.cfg
6470	··stat:	6470	··stat:
6471	····path:·/boot/grub2/grub.cfg	6471	····path:·/boot/grub2/grub.cfg
6472	··register:·file_exists	6472	··register:·file_exists
6473	··when:	6473	··when:
Max diff block lines reached; 1488/5807 bytes (25.62%) of diff not shown.


Offset 14293, 16 lines modified		Offset 14293, 16 lines modified
00037d40:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2		00037d40:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2
00037d50:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers		00037d50:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers
00037d60:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1		00037d60:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1
00037d70:·2e36·353c·2f73·7472·6f6e·673e·3c2f·703e··.65</strong></p>		00037d70:·2e36·353c·2f73·7472·6f6e·673e·3c2f·703e··.65</strong></p>
00037d80:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong>		00037d80:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong>
00037d90:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.·		00037d90:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.·
00037da0:·2020·2020·2020·2020·2020·2020·2020·2020··················		00037da0:·2020·2020·2020·2020·2020·2020·2020·2020··················
00037db0:·2020·2028·6173·206f·6620·3230·3234·2d30·····(as·of·2024-0		00037db0:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0
00037dc0:·312d·3134·290a·2020·2020·2020·2020·2020··1-14).··········		00037dc0:·322d·3135·290a·2020·2020·2020·2020·2020··2-15).··········
00037dd0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul>		00037dd0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul>
00037de0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table·		00037de0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table·
00037df0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2>		00037df0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2>
00037e00:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href=		00037e00:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href=
00037e10:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp		00037e10:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp
00037e20:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g		00037e20:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g
00037e30:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys		00037e30:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys
Offset 36890, 22 lines modified		Offset 36890, 22 lines modified
00090190:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for		00090190:·2d20·6e61·6d65·3a20·5465·7374·2066·6f72··-·name:·Test·for
000901a0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot		000901a0:·2065·7869·7374·656e·6365·202f·626f·6f74···existence·/boot
000901b0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg.		000901b0:·2f67·7275·6232·2f67·7275·622e·6366·670a··/grub2/grub.cfg.
000901c0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path		000901c0:·2020·7374·6174·3a0a·2020·2020·7061·7468····stat:.····path
000901d0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr		000901d0:·3a20·2f62·6f6f·742f·6772·7562·322f·6772··:·/boot/grub2/gr
000901e0:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe		000901e0:·7562·2e63·6667·0a20·2072·6567·6973·7465··ub.cfg.··registe
000901f0:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.·		000901f0:·723a·2066·696c·655f·6578·6973·7473·0a20··r:·file_exists.·
00090200:·2077·6865·6e3a·0a20·202d·2027·2267·7275···when:.··-·'"~~gru~~		00090200:·2077·6865·6e3a·0a20·202d·2027·222f·626f···when:.··-·'"/bo
00090210:·6232·2d63·6f6d·6d6f·6e22·2069·6e20·616e··b2-common"·in·an
00090220:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack
00090230:·6167·6573·270a·2020·2d20·2722·2f62·6f6f··ages'.··-·'"/boo
00090240:·742f·6566·6922·206e·6f74·2069·6e20·616e··t/efi"·not·in·an
00090250:·7369·626c·655f·6d6f·756e·7473·207c·206d··sible_mounts·\|·m
00090260:·6170·2861·7474·7269·6275·7465·3d22·6d6f··ap(attribute="mo
00090270:·~~756e~~·~~7422~~·~~2920~~·7c20·6c69·7~~374~~·~~270a~~·2020··~~unt")·\|~~·~~list'.~~··		00090210:·6f74·2f65·6669·2220·6e6f·7420·696e·2061··ot/efi"·not·in·a
		00090220:·6e73·6962·6c65·5f6d·6f75·6e74·7320·7c20··nsible_mounts·\|·
		00090230:·6d61·7028·6174·7472·6962·7574·653d·226d··map(attribute="m
		00090240:·6f75·6e74·2229·207c·206c·6973·7427·0a20··ount")·\|·list'.·
		00090250:·202d·2027·2267·7275·6232·2d63·6f6d·6d6f···-·'"grub2-commo
		00090260:·6e22·2069·6e20·616e·7369·626c·655f·6661··n"·in·ansible_fa
		00090270:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.··
00090280:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua		00090280:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua
00090290:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no		00090290:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no
000902a0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",·		000902a0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",·
000902b0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz",		000902b0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz",
000902c0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont		000902c0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont
000902d0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:.		000902d0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:.
000902e0:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2		000902e0:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2
Offset 36926, 22 lines modified		Offset 36926, 22 lines modified
000903d0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure·		000903d0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure·
000903e0:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on		000903e0:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on
000903f0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru		000903f0:·202f·626f·6f74·2f67·7275·6232·2f67·7275···/boot/grub2/gru
00090400:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.··		00090400:·622e·6366·670a·2020·6669·6c65·3a0a·2020··b.cfg.··file:.··
00090410:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr		00090410:·2020·7061·7468·3a20·2f62·6f6f·742f·6772····path:·/boot/gr
00090420:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.···		00090420:·7562·322f·6772·7562·2e63·6667·0a20·2020··ub2/grub.cfg.···
00090430:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh		00090430:·2067·726f·7570·3a20·2730·270a·2020·7768···group:·'0'.··wh
00090440:·656e·3a0a·2020·2d20·2722·~~677~~2·7562·322d··en:.··-·'"~~grub2-~~		00090440:·656e·3a0a·2020·2d20·2722·2f62·6f6f·742f··en:.··-·'"/boot/
00090450:·636f·6d6d·6f6e·2220·696e·2061·6e73·6962··common"·in·ansib
00090460:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package
00090470:·7327·0a20·202d·2027·222f·626f·6f74·2f65··s'.··-·'"/boot/e
00090480:·6669·2220·6e6f·7420·696e·2061·6e73·6962··fi"·not·in·ansib
00090490:·6c65·5f6d·6f75·6e74·7320·7c20·6d61·7028··le_mounts·\|·map(
000904a0:·6174·7472·6962·7574·653d·226d·6f75·6e74··attribute="mount
000904b0:·~~2229~~·~~207c~~·206c·6973·~~7427~~·0a20·~~202d~~·2061··~~")·\|~~·~~list'.~~·~~·-·a~~		00090450:·6566·6922·206e·6f74·2069·6e20·616e·7369··efi"·not·in·ansi
		00090460:·626c·655f·6d6f·756e·7473·207c·206d·6170··ble_mounts·\|·map
		00090470:·2861·7474·7269·6275·7465·3d22·6d6f·756e··(attribute="moun
		00090480:·7422·2920·7c20·6c69·7374·270a·2020·2d20··t")·\|·list'.··-·
		00090490:·2722·6772·7562·322d·636f·6d6d·6f6e·2220··'"grub2-common"·
		000904a0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts
		000904b0:·2e70·6163·6b61·6765·7327·0a20·202d·2061··.packages'.··-·a
000904c0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz		000904c0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz
000904d0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i		000904d0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i
000904e0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx		000904e0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx
000904f0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p		000904f0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p
00090500:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain		00090500:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain
00090510:·6572·225d·0a20·202d·2066·696c·655f·6578··er"].··-·file_ex		00090510:·6572·225d·0a20·202d·2066·696c·655f·6578··er"].··-·file_ex
00090520:·6973·7473·2e73·7461·7420·6973·2064·6566··ists.stat·is·def		00090520:·6973·7473·2e73·7461·7420·6973·2064·6566··ists.stat·is·def
Offset 36992, 19 lines modified		Offset 36992, 19 lines modified
000907f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td		000907f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td
00090800:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td><		00090800:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td><
00090810:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre		00090810:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre
00090820:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia		00090820:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia
00090830:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab		00090830:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab
00090840:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa		00090840:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa
00090850:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if·		00090850:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if·
00090860:·7270·6d20·2d2d·7175·6965·7420·2d71·2067··rpm·--quiet·-q·g
00090870:·7275·6232·2d63·6f6d·6d6f·6e20·2661·6d70··rub2-common·&amp
00090880:·3b26·616d·703b·205b·2021·202d·6620·2f73··;&·[·!·-f·/s
00090890:·~~7973~~·2~~f66~~·~~6972~~·~~6d77~~·6172·652f·6566·~~6920~~··~~ys/firmware~~/efi·		00090860:·5b20·2120·2d66·202f·7379·732f·6669·726d··[·!·-f·/sys/firm
		00090870:·7761·7265·2f65·6669·205d·2026·616d·703b··ware/efi·]·&
		00090880:·2661·6d70·3b20·7270·6d20·2d2d·7175·6965··&·rpm·--quie
		00090890:·7420·2d71·2067·7275·6232·2d63·6f6d·6d6f··t·-q·grub2-commo
000908a0:·5d20·2661·6d70·3b26·616d·703b·207b·205b··]·&&·{·[		000908a0:·6e20·2661·6d70·3b26·616d·703b·207b·205b··n·&&·{·[
000908b0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren		000908b0:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren
000908c0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[		000908c0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[
000908d0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont		000908d0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont
000908e0:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t		000908e0:·6169·6e65·7265·6e76·205d·3b20·7d3b·2074··ainerenv·];·};·t
000908f0:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo		000908f0:·6865·6e0a·0a63·6867·7270·2030·202f·626f··hen..chgrp·0·/bo
00090900:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf		00090900:·6f74·2f67·7275·6232·2f67·7275·622e·6366··ot/grub2/grub.cf
00090910:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····>		00090910:·670a·0a65·6c73·650a·2020·2020·2667·743b··g..else.····>
Offset 37470, 21 lines modified		Offset 37470, 21 lines modified
000925d0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/		000925d0:·2066·6f72·2065·7869·7374·656e·6365·202f···for·existence·/
000925e0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub.		000925e0:·626f·6f74·2f67·7275·6232·2f67·7275·622e··boot/grub2/grub.
000925f0:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.····		000925f0:·6366·670a·2020·7374·6174·3a0a·2020·2020··cfg.··stat:.····
00092600:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub		00092600:·7061·7468·3a20·2f62·6f6f·742f·6772·7562··path:·/boot/grub
00092610:·322f·6772·7562·2e63·6667·0a20·2072·6567··2/grub.cfg.··reg		00092610:·322f·6772·7562·2e63·6667·0a20·2072·6567··2/grub.cfg.··reg
00092620:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis		00092620:·6973·7465·723a·2066·696c·655f·6578·6973··ister:·file_exis
00092630:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·'		00092630:·7473·0a20·2077·6865·6e3a·0a20·202d·2027··ts.··when:.··-·'
00092640:·2267·7275·6232·2d63·6f6d·6d6f·6e22·2069··"grub2-common"·i
00092650:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts.
00092660:·7061·636b·6167·6573·270a·2020·2d20·2722··packages'.··-·'"
00092670:·2f62·6f6f·742f·6566·6922·206e·6f74·2069··/boot/efi"·not·i
00092680:·6e20·616e·7369·626c·655f·6d6f·756e·7473··n·ansible_mounts
00092690:·207c·206d·6170·2861·7474·7269·6275·7465···\|·map(attribute
000926a0:·3d22·6d6f·~~756e~~·~~7422~~·~~2920~~·7c20·6c69·7~~374~~··~~="m~~o~~unt")·\|~~·~~list~~		00092640:·222f·626f·6f74·2f65·6669·2220·6e6f·7420··"/boot/efi"·not·
		00092650:·696e·2061·6e73·6962·6c65·5f6d·6f75·6e74··in·ansible_mount
		00092660:·7320·7c20·6d61·7028·6174·7472·6962·7574··s·\|·map(attribut
		00092670:·653d·226d·6f75·6e74·2229·207c·206c·6973··e="mount")·\|·lis
		00092680:·7427·0a20·202d·2027·2267·7275·6232·2d63··t'.··-·'"grub2-c
		00092690:·6f6d·6d6f·6e22·2069·6e20·616e·7369·626c··ommon"·in·ansibl
		000926a0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages
000926b0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi		000926b0:·270a·2020·2d20·616e·7369·626c·655f·7669··'.··-·ansible_vi
000926c0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ		000926c0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ
000926d0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke		000926d0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke
000926e0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open		000926e0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open
000926f0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·"		000926f0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·"
00092700:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta		00092700:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta
00092710:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5		00092710:·6773·3a0a·2020·2d20·434a·4953·2d35·2e35··gs:.··-·CJIS-5.5
Offset 37505, 22 lines modified		Offset 37505, 22 lines modified
00092800:·2d20·6e61·6d65·3a20·456e·7375·7265·206f··-·name:·Ensure·o		00092800:·2d20·6e61·6d65·3a20·456e·7375·7265·206f··-·name:·Ensure·o
Max diff block lines reached; 9350/18614 bytes (50.23%) of diff not shown.


Offset 14290, 15 lines modified		Offset 14290, 15 lines modified
00037d10:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v		00037d10:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v
00037d20:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong>		00037d20:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong>
00037d30:·302e·312e·3635·3c2f·7374·726f·6e67·3e3c··0.1.65</strong><		00037d30:·302e·312e·3635·3c2f·7374·726f·6e67·3e3c··0.1.65</strong><
00037d40:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro		00037d40:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro
00037d50:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong		00037d50:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong
00037d60:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.··············		00037d60:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.··············
00037d70:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202		00037d70:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202
00037d80:·342d·3031·2d31·3429·0a20·2020·2020·2020··4-01-14).·······		00037d80:·352d·3032·2d31·3529·0a20·2020·2020·2020··5-02-15).·······
00037d90:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></		00037d90:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></
00037da0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab		00037da0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab
00037db0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</		00037db0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</
00037dc0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr		00037dc0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr
00037dd0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s		00037dd0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s
00037de0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten		00037de0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten
00037df0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system">		00037df0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system">